{"type": "bundle", "id": "bundle--76863ecd-f5ce-4e13-b432-bc0f962168dd", "objects": [{"type": "identity", "spec_version": "2.1", "id": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "name": "James Brine", "identity_class": "individual", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "location", "spec_version": "2.1", "id": "location--96661552-0732-48f4-957b-2987950a9cb0", "name": "DigitalOcean London", "latitude": 51.5177, "longitude": -0.6215, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "GB"}, {"type": "location", "spec_version": "2.1", "id": "location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0", "name": "DigitalOcean Toronto", "latitude": 43.6547, "longitude": -79.3623, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "CA"}, {"type": "location", "spec_version": "2.1", "id": "location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56", "name": "Vultr Melbourne", "latitude": -37.8136, "longitude": 144.9631, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--7d135ed3-e023-43fc-9741-90e973202fdc", "name": "Vultr Paris", "latitude": 48.8566, "longitude": 2.3522, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "FR"}, {"type": "location", "spec_version": "2.1", "id": "location--18afede8-b872-4d67-bf5c-32735390026a", "name": "Vultr Tokyo", "latitude": 35.6762, "longitude": 139.6503, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "JP"}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--70a7b969-e591-41a0-bb47-ee0464e81cc4", "name": "Cloudflare Global Edge", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--130c4cb9-11ca-4daf-a660-1eb07a36d588", "name": "DigitalOcean London", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--715aea1f-aa15-4009-b589-272e9312caf3", "relationship_type": "located-at", "source_ref": "infrastructure--130c4cb9-11ca-4daf-a660-1eb07a36d588", "target_ref": "location--96661552-0732-48f4-957b-2987950a9cb0", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--66defaf4-a3d1-4dcc-8dcb-e55296e0f366", "name": "DigitalOcean Toronto", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c27b1109-4ab9-44bd-ad50-e5073f75d003", "relationship_type": "located-at", "source_ref": "infrastructure--66defaf4-a3d1-4dcc-8dcb-e55296e0f366", "target_ref": "location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--aa96b260-ca56-4c55-8c2c-15fbf2b189fc", "name": "OpenCLAW Dashboard Decoy", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--a698bd1d-81cd-490a-8266-1889a605d66f", "name": "Vultr Melbourne", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ba1f3c1-e308-40ac-a7ac-4e369b3cd459", "relationship_type": "located-at", "source_ref": "infrastructure--a698bd1d-81cd-490a-8266-1889a605d66f", "target_ref": "location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--7df01783-5464-48c6-b089-43607d79028c", "name": "Vultr Paris", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4aa42533-85f4-46b6-bf00-6ace8f7bc449", "relationship_type": "located-at", "source_ref": "infrastructure--7df01783-5464-48c6-b089-43607d79028c", "target_ref": "location--7d135ed3-e023-43fc-9741-90e973202fdc", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--a636dc38-5a35-4c05-8546-bec3d5d760dd", "name": "Vultr Tokyo", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--55bad961-4b3d-4a7b-b00d-ae3bdb05b95e", "relationship_type": "located-at", "source_ref": "infrastructure--a636dc38-5a35-4c05-8546-bec3d5d760dd", "target_ref": "location--18afede8-b872-4d67-bf5c-32735390026a", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--eecf412e-646f-40f7-9301-1976d52e5cd2", "name": "CVE-2002-1149", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--243f14d4-473a-4fc7-b86e-710ae7d9d752", "name": "CVE-2021-26855", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--796d8b88-b105-435f-bec5-4410f0954067", "name": "CVE-2021-41773", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--bcaa6e63-8d28-44f2-9dce-1753a0b3fbd6", "name": "CVE-2021-42013", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--251356d3-ce40-44db-8086-e377a46c9bd6", "name": "CVE-2023-1389", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4472bb96-e12a-4864-b252-be2711650f12", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.171.144.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f449e8db-4464-4e56-8802-d2cbfbf7dbbf", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.183.128.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d80e1dd-01ea-4b9a-9721-a55113e80544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.197.102.62']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--926171c8-6d9e-402c-8b9c-5ad737b5053b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.20.223.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--879a765d-1834-4211-a78d-df291e65d8f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14febcd1-6fb1-410e-86bc-4bb46091ffc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46467508-9238-4d88-a567-a52444356847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.31.120.139']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6eb4bf4-ccd9-4606-9272-a8b6dff3b324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.32.127.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f928f252-3439-4136-b615-5ef886d55f95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.32.61.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b07b099-5a55-4415-b653-1e082b227f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.34.77.238']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b03749-a2c9-4a79-848e-5db189de3b17", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.58.219.139']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a2094ac-c2c8-4ffe-b9fe-e383ba22c51a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.64.106.48']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f98d4e4b-130d-4361-9c0d-6b942954d586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.83.125.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c82e59-179f-481e-9e6c-52aa8266c858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.85.216.250']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--238642d7-a36e-4e2d-8c69-5d44391cf78a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.9.164.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d54dd216-5a1f-4307-81ab-5f66bc53318e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.92.6.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5af01bc-78b6-491e-a2ca-b0cfebfd1e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '10.0.1.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f72c6f65-6522-4fab-bc58-08ac938a194c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '10.0.8.253']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc385e5-9750-4741-a0d2-057a60067455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '10.130.202.249']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b93b3ee8-dbab-4bb8-b4b8-5c9f15233879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '10.176.99.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25864060-2df9-4b0e-916b-0c14b6690942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '10.196.148.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28be8fc9-0549-4f94-8ee5-2c00c7286335", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.14.219.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c8b3f44-392f-46ab-b1f9-5a310d3bfa3f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.26.35.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b713f8f0-6a4e-43db-88a1-557e5181b3e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.27.169.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c1b5720-8514-4146-a21e-16c176263e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.27.216.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d2e8ba0-fb48-48e6-ae0d-7c53bf00482d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.153.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daba67b4-626d-4a91-ab13-5b6755514d76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.191.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d2939b-3ff0-4127-bfca-1ee501696c2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0036266c-6d1e-4cef-8088-5944f0249e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f13c27-6c35-4cf9-be2d-d4f5faeb2a17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f356cebf-d549-4827-960a-b7065fb2edb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f433d694-c603-4cc0-80ed-cd2c6971f54f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b06752-1ff8-4cbf-bb33-19239007a489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f5d785-c03f-4323-b011-b4c7c4b5745e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--087e9c0a-2c0b-4016-bc79-e38a03bfe9ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e56ca3a2-7f9e-433c-b69f-dadfa6bc6333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fed2f63c-2d17-4316-9722-b9c82166c2df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7754c5d-5c80-4594-a018-9c818d197fe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e0cbbc-826a-45c2-8394-1b5e432690db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd7f54f-f3d9-4267-aa28-3755cf9b33c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be1a7d22-f227-457d-8cbd-9834191533aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d991a74-4e9e-4ec2-89e3-0f47f0e75915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.14']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--201c25ec-3b7a-489f-a10f-25a508ca367f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed5d50c3-d13c-4e63-8b49-797ff6f77454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9235c63-4b75-4a2c-863a-6c6482c44512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb65dd2-3430-4654-a543-d8dc9c56298c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3aea4ef-371e-43c8-a92a-2525d3a7b4e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2c1a4a-4cba-47a2-86b3-9fd48287de81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--781537da-e639-4377-87f3-90df592e3ee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a27d5f6-46f1-4aca-9e2e-c24cd7cc51db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a45ddab-eba0-418b-9257-0c92ba0f16f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.48']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee0b258d-4b69-40bf-a4b4-0601d8ff6584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--077354f4-285a-4e30-a88c-7f0eb9250a8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e732afdd-68ae-4cbc-93df-3f8ec51382be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82bba8a7-3599-4a3f-a894-da1c6ce81e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29a8d6c3-f5d2-4238-a10e-a625d611eb8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae6e3301-83ed-49f2-a399-14887a0f8934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480d6418-6821-42e1-8f18-17b452b75463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee5025b3-5be6-42fa-87c1-ef9d73f257c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f456336-c794-4487-9688-b63082dad1b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78556831-f41e-46e6-8d71-c8a1ddb013e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7553808c-7b78-4d1a-bec9-162d61934b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62fb63d3-027c-4383-876f-96caf01c4960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ded1ebd4-4430-4d22-91e1-7a725b5b1769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcc275f7-e206-4e12-99a3-0c3484fa07b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b76b0d89-3d24-4874-a509-5fd68eba75e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b685c8c-7e94-4085-a947-6b64d0b01b02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b9b3145-b2da-4c7c-93c7-5fa52c8b2701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7e7c83b-91a8-49e7-aa7d-c75a28dadc75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.91']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea036b99-883b-4ec6-ba9d-4ea78f3bdbb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d9b54a1-3d68-485a-84a7-7f236154f5b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c02b631d-431d-4796-9080-e833e17804c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.97']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12065e40-4ced-48c4-b615-b203e5d8917f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fccb47e-e8a9-4d68-ba3b-4c5e5206dccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.49.117.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b883e6-6918-41dd-9287-c7a595f4a547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.50.17.159']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--139e0b66-aa4a-4cc3-9729-8c711ae5aa65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.53.136.224']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--525b0e28-3b45-4e82-9642-ebbb30e6cf45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.55.73.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2797e64-9082-4f5e-9981-d7fcbd86667c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.92.9.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e710207-7ad2-4c8a-8d3b-9d8d8fe2a27d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.108.174.255']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c76039-1873-40da-974f-978c5e183bbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.86.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b55c447-f3cb-4b00-8bc7-cf8c20b4a258", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.89.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3f6767b-afdc-4cf9-ad04-3b9c28d6d5a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.128.108.182']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1fc37a5-f4c8-4617-9a7f-546248949758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.201.104.216']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084c772b-b203-41ac-a2da-51af6b46085f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.206.107.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1652e42-5450-40f1-8b2f-8473474cd4aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.249.62.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a3ff99-a481-43a3-9300-6b58adfe13a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.255.54.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f100d123-5935-47e7-ac0a-32cbb85a10c0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.1.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad2632cc-27c8-433f-a1c3-48ad6d8f1820", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.128.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36a42b4-0705-4ede-9ac2-3332b8c79d72", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.248.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7f0ce28-e5fd-49cc-a881-4e7a8a99c1f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.104.242']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3102c8e6-a797-4c71-b8bb-2fa1151ba4d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.105.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4fe1d9b-5c52-40fc-a27d-14bf311b7031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d957e777-9710-4cdc-b23c-fcbb418c2f0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6adc76f-3ab8-4c8c-91b9-fdc19d4234f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b25d390-c8e1-4284-9877-43b3ae098a56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.243']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d175ed-c583-4b4f-8287-a6916f13c1f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72911eed-d3a5-493f-a727-1167f42f44eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9288e39c-3336-41a9-b8c9-1e2e6bb6d2db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd4b6306-c10e-4927-a761-909a27aa92eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.110.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4db2c78-ab0e-48cb-a27c-894349d96295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.112.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72bb1f16-9e7e-403c-a6b1-fbf9b44e20f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde0e3f5-b73e-4b3c-9aab-37a8ddc3e519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33509b4e-1bfe-4ab7-8e93-42992ed9c1b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc9cfc4d-495f-43a7-9090-d65bc3c6a52e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.222']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d573afeb-0e4f-466a-9309-ac6be5160df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.116.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c71b513-1137-4fc0-8256-5463b60fc0e0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.117.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dcc0260-59ba-4da9-a71d-f75622c6734c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d561f1-4bdb-4676-9e1c-63ca6d22c578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40670f39-4b32-4848-9b93-3f1be07ef57b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.119.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6abd7620-33c4-4dcf-a783-7e3daef16243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.121.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8f4c88b-0e01-4b23-bad1-17b5c087751c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.122.183']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2867243-1284-4344-9f1b-fbaf3cf78f3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.123.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--566c556b-ae46-420a-ae22-66ac65e3afe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.124.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--368f81c5-8d2a-470f-afaf-c69471b73070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.131']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--409a6bc3-6df7-4da6-9eb5-9299b62410c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75cc4e34-aab1-41c1-8c9b-7a896f7b3a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c36eb4a1-fb72-4874-a908-ccb4d0c1f4b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8647da8a-39ab-4add-beb9-6c0a16a7ad7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302fa8b0-460a-48bb-9515-797529005da2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff466ba-d46d-43c4-ad84-d760e51d2b42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.42.181.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa302b3e-8214-448a-ae06-71ddc8445783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.43.6.97']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5214aa80-54c4-4f7b-87f0-8dc406a88fed", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.156.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16abbc8d-8597-4d5e-870d-11df4fcd6004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.158.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f397a77-72bc-4b97-87da-6f8ed96b80f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.8.187']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a440b0-4086-434e-aa04-2650e368285b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.78.139.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e9793c-3134-4cd7-9e62-c02cfa60decc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.89.116.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac307d42-26a9-4e2a-8661-3a1bb76adea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.152.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e5e87c8-abac-462b-90ee-afc5dcef94cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.186.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909f5ef2-a994-4633-9673-6ad8c864658e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.186.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--861b080a-2446-4e89-a425-5b140d938f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.200.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3295972c-2bf5-4cae-8011-96d1a78a34dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.82.51']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2cbd733-e9e9-4797-9e14-56d693dda66c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.209.137.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8892e644-689a-4d09-b07a-a6d8b4f80df1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5288a2f9-ee6e-490e-8496-c8d0b89822ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.223.47.171']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e344e06-294e-4419-b6d2-14d642d00e29", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.23.28.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb3216ba-a876-4dc3-b7ea-7eacf01ba0fd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.67.56.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1863e84b-bee5-4097-9e44-4dd6c8161a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.88.21.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3898ca66-c70c-4124-b969-45cb0017b747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.90.126.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a16c26cd-2202-46ae-8483-4858ef03edf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.1.210.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--279e1d87-0a92-49d9-870c-27cb8818df4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.10.58.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d2a31bc-40d3-4bb0-9e7b-9c585b88d891", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.100.7.171']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba171bc5-d383-43e7-bea4-d0c36921f1c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.104.73.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95471a0-878b-45f5-9251-732944561dc2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.106.188.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ea94e5-cad4-42b8-b197-e433d3320c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.112.62.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--699c82da-cc61-4794-91bf-67f8bd12d261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.113.39.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cce0af0-3cae-4a1a-958e-81449ea51c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.115.199.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad851f3a-3c9e-4315-af4c-500c61e8527f", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.115.64.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4132f361-5610-428d-b56a-d1c4aa21f020", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.118.82.254']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff6c8af-476a-4a08-9d54-7b9e63b3eb14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.120.69.202']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fceeeea-fabf-46b4-90d4-3592d856797f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.122.221.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53cb5ecd-d228-4434-9a53-7cc9c87534a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.123.226.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9afc25-7aa5-41be-ba5a-2bf0dc96a23d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.123.226.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be3c75dc-fa99-41ad-89de-1f23e5dec579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.125.49.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29c2eb9e-bbc4-4c4f-8f7c-dda015e211aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.13.35.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0287c1-083c-4a95-89e5-5df9fc1f3e82", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.132.243.250']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--279f3e29-f7c1-406e-bb6d-c7d53e5415d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.132.98.160']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d0cce4-0b0e-465f-985f-10cdb797f3ce", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.134.154.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--875aacd9-97b8-4625-bbd1-3a93f409ec38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.138.190.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b0290a-d8ce-4123-a38f-5c03ad826d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.192']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bcac0d3-2d13-4415-afb2-096b583ffc23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.224']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d089c04-a802-4615-8e6c-a7f339627d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.170.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94edb223-aa80-4e85-bb84-de672adbf20f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.26.230']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b02ab9aa-0c74-4fee-ae41-8d55cad355a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.26.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e161f1e3-46dd-463e-ad0d-a2d209d7b290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.28.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4454eef-f0d6-4b5d-bbc3-50ffbf5560cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.15.222.183']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a4f3ac0-6d5e-4b0e-848c-d0efab54e5de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.152.242.106']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b07d737-3f2d-450c-bd81-937f46499dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.153.68.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41123e97-f82b-4089-8ce4-d8d99d53e2f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.154.178.63']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2891803-b7ee-4950-a134-111f1951e0ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.154.53.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fcc8a24-b100-4b61-b089-b40a84225c68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.155.197.1']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--799d1af6-f63e-4761-9118-4dfd38114454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.155.197.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--451c1dbb-b4ef-421b-816b-5e8c4ff17e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.157.63.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74ccca75-f077-4715-b390-00dfc2134901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.158.13.217']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2fed407-2e45-466a-8f01-893e06e538e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.160.59.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--627e2b2b-11ef-449c-871b-87961af626d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.161.34.59']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90307bcc-6ebc-4dde-bdfb-07f0fe84a762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.163.45.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b05c665f-12c4-4bf5-8479-b1efdcd39fd5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.165.225.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3040f354-d907-465f-b02b-cbd1785a4742", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.172.236.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98111d1e-e91e-4378-b604-8de5a3b4b170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.172.25.193']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f50dd90b-1369-44f1-a067-3b73a150c12d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.172.78.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d0c92b-9ed1-4d40-bee3-f2492cd72d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.162.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f62b5a0-74f5-4bb7-9ffb-08c150bf1a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.227.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255b2e24-1f91-4b0c-8149-67e7d2748f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.227.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e0612a9-474e-42ac-a5b1-8b63ab22d857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.174.123.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e673088a-5ed9-4c8b-9763-0c4cfe6b0050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.174.236.84']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--248f5a2b-9428-4f78-bc07-34467c636785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.174.50.62']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--351c8851-147f-4f54-8b05-eb910ca58eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.175.51.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a568429-61c1-4b90-9246-7da56c41fd5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.20.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1794352c-3e3d-4381-8190-30769c820f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.90.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c681b04-ad09-4119-b46d-2661f4b1d26e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.181.176.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c069e4c-3450-40da-89a0-b8fc1ca186b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.181.181.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a62320-71c4-4ac6-9ab7-eeabc79d7159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.185.53.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f395f44-be4b-4e30-b6df-5c11ea972802", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.187.146.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5dcdb7d-f079-44d4-b3be-1b2df6598e62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.191.165.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca9b837-5146-420d-a322-1e2305157ef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.191.171.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21eaf6c9-5a39-46a9-b0c2-4291b5029a23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.195.100.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--090a865c-9f3e-4c91-8f3a-d6b4e233dae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.195.236.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1682b1b-9e31-4e7d-8019-93a4e981a30f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.196.40.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1047ffd9-e85c-4eae-9f76-32979a5afc7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.197.224.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e763692-cb1f-44ac-80b1-917c341ac735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.199.123.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f732305-c5a2-438c-82a0-700fb5726c58", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.20.194.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a777b04-cfac-4c9f-b5fd-f01489946da4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7701ce1-074b-45fd-9e72-9386c82a3eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a611f994-5cb9-4563-b62e-3324cf56aef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3738818-a28b-4fc8-9490-98270de9d278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36433767-c35d-466a-b721-6b40fb4d7131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93444352-34cb-479e-b255-c4bbbb05fe60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a405d7-a02f-40ff-a933-6da224c24595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccaa15a4-1b07-406c-8a82-e63a7a745217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee962ca-1d2f-49ea-b5fc-7ffafad85635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.58.1']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3155dec-3cbf-4e01-b0e9-787649a4e847", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.208.219.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd631472-d8fe-4050-b58d-40aa3d78a435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.21.79.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf5a219-0d55-432b-85a8-814c08493cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.210.21.242']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93c39181-7209-41dd-a2b8-af0c8886aa6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.210.22.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e67f175-116b-4539-b49b-a63829e37621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.213.237.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f6a774c-dd7b-4660-bdcf-cd4160746aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.214.5.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f92dee-02e6-4aa0-962b-413bc3c3bb82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.218.108.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d21fa2-b9b2-43d3-bb28-ba31f0121eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.218.241.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e373bf-f3c8-46aa-9102-98601919229e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.219.153.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bc4803f-6197-4b93-b962-6cb7b7b34b70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.219.170.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a72e2ff6-663d-4057-bde9-29959e9504e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.231.92.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a3e8d75-275c-4fc1-9697-7c1e13723510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bd8807e-3e2e-4899-b02e-eebceb1a5107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f666281-782b-4ad4-8881-4dfc739ae2a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bea664c-d5bd-472a-a1f4-c1a79cd7ddad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af7c75b6-b48e-408c-bd1f-3cc9bcf3da25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.112']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba5ad6db-dfc7-4b36-8f55-7e0da1931c10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c347907-4320-4069-bdf6-4754e6d8e84c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d9a5563-097e-4e03-9c7f-86ffc7e38318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fa1b394-812d-49d7-9d1f-586b97f730a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bfb15e6-491f-4115-a307-2bd0c9bbedbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e7108aa-fef4-4ec6-bcd4-a40167550860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb05ae7c-edfa-4f16-8e06-1e83a5d7a4a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--718bea39-c275-4bc3-a6c6-28bad621edde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ecba469-7fde-4d2a-9408-385cda7caa86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4664aab-79a1-49cc-8837-03afb84ff1dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87045ba7-941f-470a-a5e8-81e771600ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e33d80-4229-410f-b435-19f693ddd3f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.49']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--718018fb-8213-4920-9ae3-7fcac1bbb3a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a988ce9-161c-4b27-88e8-4f6a2a913844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.52']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8423c1ba-244f-4abb-98d2-86da977a5d7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ffb0e11-dfab-4dfc-a045-4bd4fd3a7eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--559f0aa4-40c5-4149-80cf-fd5e45e166a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b22ce1-ae62-485f-b42c-3c72b75b8173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d18dbf7c-b360-4250-ab42-7fe68ab37d05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.64']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9acf6b67-1806-43ca-998d-a68114adfe9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bfeb0fa-fa15-4c4d-98b6-15adebaa4cd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4fef7af-841b-46c7-ac6a-936bce5f3ac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea3db5f4-d515-4306-89b0-52314b50f77a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36a8d81-1b62-49b8-b19c-679d51c2afad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a0a193-6d62-4ec9-8142-5fd2df99cc3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d6b46f4-22a6-4c08-89a6-852291deaab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.84']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f45421-29a8-428f-a0b9-94726bb22399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b18a36-5697-47d2-aa1d-e38172948f37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.235.181.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba6ca4e0-8755-40b8-a9e1-cd5b5c845bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.235.95.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--009456ca-d5c0-4cb6-ade5-c102320355a7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.238.75.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b13d0a2a-3271-44ca-b14a-297f3e719c55", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.239.252.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9006fb9-f13d-4869-85e3-cf53bb942d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.247.13.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a58c93-e8d8-4dc1-bd58-06f5aa7de132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.250.11.63']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ac2466-eda1-45fc-bdb0-6e1e4f31fd63", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.251.165.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fe825a1-87b1-40e5-8bad-60d4fa8b4989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.254.214.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b8f7b8-9d79-4e70-a07a-cae75271dfe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.26.188.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e8c58ce-4e58-43d6-83b2-b32019c5f251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--308a9d93-2a92-4711-af0e-5f344fb57dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae23045e-f619-45b2-be01-88a13002b6fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2654ac70-c5f5-4890-a199-d7e59231780b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.30.1.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d3f0a20-8ee0-4a87-aec9-cbf9f838b470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.35.156.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e09afc8-c6a3-4010-a2b7-00915cb9efca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.35.156.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--557d2f93-9ef3-4e62-96d5-88281475456d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.35.156.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--021267fc-583f-4ebe-8bf1-b4ccde834fca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.36.11.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--279d681e-aa03-4ec2-ae0d-f7fef93824da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.43.78.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ddf7ddd-b12b-4d5a-bbf7-b4a70348baba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.45.130.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bae01c0-26dd-4980-82dd-851a1828db17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.5.1.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2533f40-bfae-4d6b-aa8f-e7c9e132210e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.57.224.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad006fcd-9501-4c42-b6a8-9795733cafe2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.63.108.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace862a9-c78f-4598-bbe8-e46520a8362e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.65.237.216']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f330233-a1b4-499b-aa5f-00c8e4438666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.66.143.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c2875d-4f20-4d0a-9668-697e5e33d32b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.67.198.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8b9a0ba-8400-49fe-801c-3c9b0edfcf7c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.68.68.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe8166d-4253-411e-b71e-07b029fb41c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.71.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ec63379-3334-4191-8a88-45465481004e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.71.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69dfd687-6952-4070-8505-e44cd25267c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.175.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f990db2-1ce7-4645-a0f8-170e5367c261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.242.62']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f99287a9-a9a8-423e-b5a1-2508b123c1e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.78.115.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01cb1a9d-5609-4067-a817-699de1f24ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.132.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e0437df-16ee-4928-a2d7-aca6a60ad708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.20.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6469ddc3-522c-4be8-81ef-6a1754a74e43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.208.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc42b28-4794-40d7-b8c3-e2ffb2fdfac5", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.83.0.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a801ab-f558-4b82-bcfa-a65102838610", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.85.23.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46962e0f-5c81-4cff-885e-16b91710d36c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.87.230.36']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5093775a-091e-4cbc-9c40-a795ef7d44b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.91.148.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c6d396-0af7-4fb9-936c-79387c60af3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.93.93.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073fff93-9409-418f-9e51-dc57ee71b6e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.128.144.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a05dc190-02b7-4dde-83bb-5501179a5416", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.49.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7178a33-7869-4f63-b5d7-8f243236cb75", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8da7ac0-d2cb-452c-b33e-c4971b88d456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e85d822-2429-4290-a75e-e7b39bcced3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6888b3a-57c0-4d42-82e8-5813aeae3c3a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.129']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9e27a52-3f1c-4584-8f08-fdf00961983a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5d797b3-5e6e-494e-a461-bf7c1da3994b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfdeafbe-a38d-4309-b704-b4acf63992a0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.135']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--019bd78b-123a-4091-8f23-a915cb1b776a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f30e192b-b1c6-4243-af82-d95c2fb4bc0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f41d8f-7f69-4de7-87eb-eccd49a3bc19", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3376b52b-6a68-478f-a3df-e86bf1bba4bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c21a3b1-22ed-4e0f-88f7-5a1a7d29a178", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1467d037-7297-4de8-bcd1-5808c9a27d66", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae6253ba-86db-4be4-87f4-50dc3b51d90c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd18224-4743-4508-8a4c-6257fbd6318b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.147']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb779ee-429c-40e2-93e4-cd4a90184e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01234e5d-780c-4fe9-ba29-642ff46bfeb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0af23f83-6f10-4702-b06b-f8b4c6616642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.200']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25085faf-b2b8-4042-bc59-305d613308b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e2f3685-101f-4c2f-a43f-467bfcac5b75", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.115.243']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec6636f-144d-45cd-baf4-41c368dfff41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.131.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1252f2f3-8de3-456b-8c43-6657f99a5150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.40.211']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43ce746a-7147-414a-a5c6-1202ee187459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.167.64.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b9f5278-fd12-44f8-9ac0-d541db7033cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.10.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1b83bd5-1aaa-4dda-a202-5535ee076eb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.154.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fbd022f-0eb2-41cf-9421-22188bcbbd99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.8.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ae38dd-a4cd-4bff-b819-6cebc527ef4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.200.30.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e7ea870-adc9-4bc5-8046-3503eea5e594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.200.30.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99760409-bf57-40be-a492-688a813d87d9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.210.140.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0539c99-2ff7-4638-99ed-48d7da86fc25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.218.164.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a0d8066-6553-4564-8fa7-b37d1202cd05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.223.56.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--318c362f-d326-4796-80b6-a8f19fc1af77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.232.79.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d28827-2ce2-4322-ad17-6b838a8aa132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.127.63']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8dc2c4c-bcb2-4d8b-9aa6-d9e2ddec0e3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.28.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7754128b-da7d-4451-ac34-0cc4c1014620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.66.186']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e3f7cb9-5dad-448b-a7e1-c31a0ff98b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.83.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd0e1a6c-24e1-4f5e-b04f-3d1a3bcdd655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.96.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3838cb-38fb-4710-8291-39af26f2511f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.145.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fca09e6-c1f0-4569-98f6-9ab6a64f5246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.150.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--573fb153-bb39-4ef1-81a5-afda3cd8cc75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.151.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e3029f-fa6c-4588-9373-027a7755c1c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.156.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d24ad63-f2ae-4c25-9af7-d6d809cc1342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.240.112']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb4a68c3-6bde-43f8-b72b-d67a3434ed11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373c6449-a69c-4757-9f9e-0b7cacf876a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5b1643-fb18-4ff2-a1d1-ca4427c0a46c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.37.202']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3826fc4a-6fea-4274-80e8-bc1829b8ddf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.42.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9692504f-3b24-4871-81b8-a6ca15d9ca59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.46.222']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65096188-f640-4bb8-be33-39bfacef4c26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.247.75.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbdf5423-b5dc-4ace-ab22-3eae3fa691d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.160.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd8e797c-6cb4-4725-98db-af80b5e19cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.183.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c548c8a-a819-4b85-8eb4-50aae6346a7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.184.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e8fe626-d491-46b8-b8a7-4e5e30b6bfd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.195.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb4bd90-ec57-450c-9447-5413309be7d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.230.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b314783-38bd-4086-a7fd-ab76f768eacf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.62.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59c5b88b-452e-4252-8bed-805137b0c91c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.9.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12629ab6-e4ce-4640-afff-d16859117bad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.95.243']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef1cf95-ab59-4dda-9349-419c400d43f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.251.180.164']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52817ced-c637-4c30-8f29-801df0edd7b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.238.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc9b1fc8-16ae-4f09-b73f-96d7710226a8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.28.108.165']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41196653-7986-4d35-affd-6f0126c81855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.68.230.190']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a1a1574-db8a-4aaa-b34a-1d5501b7c24a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.69.12.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e89ee7f-04dc-4060-8b9c-ee71776c3bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.0.128.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23970bf8-1df8-4543-be65-287657931d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.111.115.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d2453a-6add-4562-8836-4099e1abde0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.117.108.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c13d857a-abfc-4b2e-9100-4b2b996c0e36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.117.109.242']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0248946-2afe-46f7-bc59-ad0994a46d2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.119.165.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e4a928b-90e4-4324-8ffd-453dee9ec683", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.80.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cda505a-39e8-400d-bbd0-9b1b8da42474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.114.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e11dce9-8f7a-4d5e-a5dc-716c14053cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.122.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd40c5fc-2282-45fc-b1ab-d8f803101001", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.209.152']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f304bcb3-80cc-4988-a160-3d0392e547fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.14.40.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--208790fe-5451-4936-81b4-c83b7c11d094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.14.46.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49cb5a10-35ce-4235-97c3-b2286c7d3dea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.14.56.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06cf4661-a542-4658-a61e-3d4da8cfff5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.214.9.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--215b5e42-b3a4-4dde-85a9-b1e193998d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.224.148.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff0e476a-7371-4071-9797-0fe50ea1ea40", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.240.29.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba29b19f-f45b-4c33-b9bd-ba7ff56b4a3e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.52.49.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf923c56-ab2c-478d-9922-881d9be40740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.54.53.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e14e489-ed9b-4608-8808-35bc54a8cdf1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.63.26.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae95612c-232b-4d08-acc5-773f4ceeb0a4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.63.26.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3187be78-72e8-4e29-89ee-be1c504b0f77", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.63.26.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e73bec8f-3655-4a6c-b5d9-c1786d9fbd8d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.63.26.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--895130fc-4e33-463b-96ae-e4bd8301e922", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.63.26.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26f9dda-d15b-4dfa-b5ad-9c26e72dc869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.68.247.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c79b6d3-9c87-4fd6-a7c6-46386a46624f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.11.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09e466de-0183-4a0b-92aa-53b103b03866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aee2daa-9204-4930-a584-9bced33b4d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--188dce6e-c1dc-4f67-b722-3b10927cd6e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.186']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c137c7-7251-44be-a932-06dc982aa814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.232']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8c8979-0fa8-41b3-9197-bf28dd9ef22f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe9f43a0-aefa-439b-9466-125956620f53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e9817b6-813b-46b9-960e-e4641535595e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f755db6-f5d9-40d6-904b-864c576c9ea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cad25b4-d3f4-43ca-bff1-1887835f00f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.152.199']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--114a71d6-3328-436b-9c79-cb787674a72a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.169.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a090bf-1bd0-48db-95a0-f0fc770a3556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.176.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e414ad-a5aa-4496-bee0-82ca1ad4c85e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.176.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e84a751e-5752-48e0-a42c-42207220258a", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.186.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--283842e7-19cb-40a3-a028-c489fcb2cdf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.189.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff220e9-6f80-4f5c-8cf6-83ec7f07224e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f472967-fd2d-4abf-9938-bb778e2ce8a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f856e8-1606-469f-8679-b9c38c2ba8a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac00b198-64fe-4fe8-a1b6-cbc9f6a2f71c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb631354-76dd-4c69-86fc-b16931ad1b85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c876f9-d1e1-4312-bc18-8c5696709249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b03dc32-0780-4328-af26-8e641841b860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.156']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71499085-616b-4a57-9706-b0876377df83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a9dd18c-78cf-4247-b219-12a5571e70ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a75f1d57-e0f5-4704-888c-4608866cc3f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--210947ea-cbc4-48c9-bf30-df9cb3c1523c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96867b9-41e0-4462-9c20-fc4741deb797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.164']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b85b4b2a-a563-41b2-b9f0-294a2700f7de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49c9e205-fd36-4a60-95d4-16fff0da8f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d971520-1f6f-4e52-acf4-aaaeefa40cd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0627e13f-6e6c-45b3-ae8d-ef5beb13065d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--929d76a3-7a5d-4592-8167-a9346f0fcce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.176']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779d8a86-d132-45cc-9caa-8167656877a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec83737a-fd9d-4def-a0cf-1ea2cb752387", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.153']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02eb65bb-8924-4209-a30d-a3871b760922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81de64a3-ec2b-49bf-aa62-cd04bfc0faee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.183']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11e84df-b2f4-4a02-b071-86ac43086256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a9abd8-f4ce-4611-974a-9a4801d3089a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.106.156']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0cc09df-e1d8-4515-a371-5ba2568bfc2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.106.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf0cd95-1636-464a-b4bc-885e932016ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.109.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e4e9870-ae27-407c-85f8-adfc735fb2ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.110.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3947b35-58f8-4f8a-afc6-58bc3049ebdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.110.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dde7e9b-4f09-4023-8297-ecaa8302298d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.110.170']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b61affac-e1d7-4f7f-98f6-f52d825a2123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba4e1c11-e6f6-4ea2-b960-15f8cc554fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08d8cb18-6c9f-48ad-a045-957d92d3ade4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e17dcda-d8e4-44ad-9a7b-8cd54b8558a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.112.48']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--128119db-c4f0-4064-bf5a-a573ef2e2531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.167']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6601d64-3d70-4ea4-81d3-10cd72ff6964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.185']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f10b94-7baa-4be9-a226-2eddbaa85dda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73839636-e7d2-466f-8e3b-04b9048a5727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24dc5647-34d2-48c5-b9d5-20bd9c473efc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d94092-6b23-4e51-8103-034e8671831a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d8a74b-59ab-43a7-b30f-b3615305f09e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.225']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6747a45-c6ef-45c8-9eb0-7273e46a2578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b15b37b2-cb4b-480d-b351-5724d4091325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28b635cb-d7d8-47e3-8199-576cc1ea1130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a6b73d-f131-40db-8116-f0dea97a9324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.59']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe850f3-f015-45e6-a038-cf632da0e886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--515f3ec7-7cdc-4d06-b926-167c527a8cca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d27fcf5f-f24e-40cc-93d8-a9b1a1136396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73897a3f-3a59-451e-9d0d-71ddd0262f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f8b425d-3c4a-4e24-920a-c16306f0b38b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0901da6c-4fa2-4bbd-849c-131fedfa09c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.56.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aaccc1f-a56f-4327-ab78-8342984ff6a9", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.167.18.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e406f46-5f7c-4815-8cc4-48f972330c78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.170.247.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6327759b-2601-4a6e-b2b7-09ada56b8e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.157.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8773de0-c10f-4557-8bd2-f11d4bc66e95", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.204.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff55a2c-637b-4328-b0d5-917ae4765ead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.182.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d294fa47-2900-49af-8e4b-ca91aa0c8723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.41.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9e1034-daf4-4f7c-8d23-19a09b151f8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.174.40.14']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b03156c7-afd3-4e98-90a2-06eb4d8d5908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.174.90.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--511b4ca4-448f-41a2-a0d2-ac83f67be7cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.175.141.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8aaa1d3-a2bf-42a9-9ae3-c196380570a9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.175.212.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba493d0d-ed4f-4475-8899-a614dbbaba16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.181.228.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00eed4b3-675d-4a2c-bde8-6c872337317f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.189.1.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be494564-55b7-449b-b37c-111cfeffec2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.189.5.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb459366-4ee7-4d97-8d2b-c803fc0235ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.21.47.135']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4991d408-0ffb-4cff-b79a-f396f15863ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.22.131.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c58fa4f-3f61-4b91-98d4-83b78c48d296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.22.150.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--865ce832-eb9d-4075-bb27-14089e63a145", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.176.102.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a1d5d2-0bda-436f-af97-8d8b89881154", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.178.17.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db45b42-fd04-45fe-a065-ef6a9a984e4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.178.7.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a15192b-1e27-48f3-9f53-56da054e97b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.2.243']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6641b2a-dab3-46c0-8355-c8799c999f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.22.199']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2850388a-f609-4bf5-8e1b-13390d401c4e", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.63.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858665db-195a-4caf-a955-215e2cbcb396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.61.198.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc46a4be-a733-4b52-908b-e42717686f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.61.229.217']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23637e26-8679-4388-97fd-4f7436a2a40b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77d69403-a7e1-42e1-9408-de4e75f41d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b9250c4-d1a1-482c-be23-69177703f993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a8bcc0-1307-4c6f-b83e-36519d3d8e46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3305cdda-832b-4837-b03c-5b4e10757b7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0340e50c-eb2a-4253-8495-48718d7e1b89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ea9b92-1f14-4560-b641-c25e86c1a706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70189537-5e11-4f81-a160-fe5fd3295e51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.52']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba3656ec-471e-454b-ae96-514fcf7e1a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7865397-9b8c-4404-8a35-ff84a6611867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85351c46-6907-479a-b6a5-7ad035a17487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc92bbd4-0605-43a7-b6ab-97c1b4bb88d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.64']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92146cf-1ade-402f-b201-42281a3d6d10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a711115-956a-407b-bce3-0b007022185b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef63e34b-fd7a-4c0b-9eda-8fe5658da78f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96e6cb49-503c-4c49-80c8-ffc69ea38dca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--103f3f95-0f64-4561-99c7-97ed4dfb4142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135881fa-3022-47ba-a67e-fa34ca1c33f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb466d0-a4cc-45ef-9dce-30ce71e5f1f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3289adcc-8317-4262-82a6-21d6fd052f76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9205e10-94d5-44d3-bf2c-f702130b869e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cccd2ece-792b-40b6-8372-8e37948099c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.162.252.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c89497f-3757-49b7-b9f3-64a492ffa4fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.172.54.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a009b31-c5ef-448e-9816-8d4e995990f1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.224.242.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--134b2816-74ee-46aa-9691-866729c4e6cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.236.86.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc9ecdb2-bfc1-4dc0-b21b-836508d90983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.237.96.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--465332f6-62dc-4937-95be-6f8c2df16efc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.49.23.192']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc22d41-3415-4864-9d2c-d41b69905c65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.94.169.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b50206d-5db8-4312-a1f9-b87f14282d08", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.10.176.51']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--165e4d96-006e-40d8-b581-9eb31e4f99dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.136.158.255']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac24b681-0af9-42dc-993d-03172b3b6113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.137.137.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d57d0893-6117-475c-9a0e-5b4643826157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.137.34.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb9aeded-584d-450a-8986-6693b50602c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.15.180.165']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb86a8c-eaf8-46d7-8bb3-d60a2387e5df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.159.74.160']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f437f8b5-eed6-423a-a107-30b4a87162bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.164.70.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd55f3eb-b49e-459f-9f1d-46f78216744c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.166.87.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df67f8b4-5077-431c-9fd1-0cdb81ce038a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.177.179.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcacf67b-f26b-4d4f-819f-bbc24c5faa70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.35.80.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a03485-c348-42ef-a19b-e0ca13df751f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.36.28.183']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--264e1577-8eea-4f3c-af90-2fc17d990b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.5.98.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb40274e-331f-4e62-9598-ef0feb8c263a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.76.147.49']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fcaa392-1894-4d3b-9d9f-9435e36a1eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.87.174.195']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59d6be9c-06e4-4a18-8a95-4cb518fb8de8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.93.236.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--601f10af-e00c-4627-bcdf-25bcc554855d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.88.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d512b7-ae3e-409a-8abe-9f236bcf69aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.89.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eafd7942-9448-43c3-9283-e8da9ce40556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.16.53.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a10061-e773-401c-9a6c-528d0fec0190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.162.154.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12300fd-6eda-43e7-a4ae-862f46342c04", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.176.76.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dcfc730-c4af-43db-9eda-8d87ad46646c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.196.143.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b7ab75-fd59-4605-b0e6-46de5dddfa62", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.35.7.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a9390a1-3c43-48cd-8222-5cc122e91d26", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.40.36.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41727f57-f710-4186-afaa-eeda73dd3c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.92.84.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc055442-fa6b-4493-9215-8139536daf88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.94.56.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e87686-a055-4583-a36b-c80bea8399a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.103.128.232']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--511aa3e1-0000-4567-9f0d-0f6407eed2ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.118.127.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--722a219d-404d-48e1-beff-591d5430abc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.121.164.170']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc539b77-db25-41d2-9395-2d2f276e453b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.121.24.147']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07ea0433-d54f-45f9-8295-fc7f6fea7218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.134.154.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f60d0be0-9b00-48bd-84b3-ae65099ee29a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.134.190.253']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ffaac3f-eaae-4fda-af28-09f4b0133eb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.198.52.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba0b3d6-bdc0-4212-a5e9-3ce32e4fff43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.201.205.184']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084c5032-b9c6-4d4f-87c8-210bb17d0e7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.202.168.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab0c3c5e-b42d-44ff-bc90-ca619f9228b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.206.159.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f5e629a-4d93-4f25-8262-4320abc90699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.207.175.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ee123f-0096-4802-be9a-34a280e650c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.209.161.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f411cd2f-3540-477a-9dcc-ea52a20a5990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.209.72.173']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74406235-ff14-44f8-98e2-12e59ddb9e96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.211.114.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f74444ab-865d-4200-b62e-49272ab1a459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.211.91.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d5e432-014c-446b-99ad-cc26c1477db8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.224.149.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcdc8e94-b231-4ba7-994f-4e465d59745b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.214.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33526d32-d13f-4230-8568-d74a5d01e783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.216.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--908b31ab-543c-4a2d-b69b-66fffd30a935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.6.212.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e2bc37-163a-45ba-a0fa-a7b8806d9cb1", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.78.3.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ab53992-86df-4411-a1ec-9da3973401cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.90.220.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6daa12a-2bff-49c9-9ed8-498899b5e4fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.181.149.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d7a8ea1-b383-4862-8da6-5b11638114c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.183.200.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75af47ef-4edd-4918-98a9-84acdc48199d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.184.102.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a13fbd-51e2-4311-90c1-50761ff3e6fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.200.72.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d2a0020-1bbe-4ce3-81f2-d48ee65e22d2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.203.205.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a16a25c-36e8-45f1-b2c0-6699b0140e29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.206.181.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7742fecc-0f76-4bdf-a252-02af6a8d94e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.214.18.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--960a4668-366b-407e-bb63-55039cc479e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.215.189.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9741d013-184d-43d0-b7fd-8c9665f9f695", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.218.213.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca56749-cef4-4316-941a-25a6826def2f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.221.24.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4b39735-5d84-4aae-9256-310e3c55bdf7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.254.193.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a90cbe2-5cdf-48a1-944a-be3a995683ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.53.79.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8677d2ab-544c-4dee-a1bd-0e10f5f3ff57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.10.43.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e10781-a915-4c80-b981-805a68a04bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.10.44.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c2c3b6-ece2-4b5b-b2af-4e4e8adf247c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.104.167.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d98c40b0-c586-4edd-b676-7e312248536f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.128.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ae34b9-fb2b-410a-9a03-46319b971de9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.131.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3039acce-def5-4332-ab01-bc314bcbbbc6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.131.97']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e23408-599e-4c0f-b6ab-4f07f4f460bd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.132.159']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d12d944f-0b86-44f9-9d37-6acb6ab53d0d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.135.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe4ab76-6383-46d4-96f3-5eee284d7f81", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.136.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--868455b7-4ac8-44f8-8c4f-c285bebe9783", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.136.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a71588c3-19d4-4477-ba8c-84e212928da9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.250']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d47253e1-3f52-460b-99b9-719c5fa8ac9e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.141.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf0fc82e-1e71-4b93-bba2-7d0ce05c9590", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.84']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f46d0ce7-93b5-4c4f-879e-464b4584a125", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.145.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c965b4db-2e2f-44bc-b451-b26bc3a214de", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.146.185']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f278fce-6351-4bcd-a463-04c4c2dae9c6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.147.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713edfe0-53b4-48d6-93f0-d01a00d97f86", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.156.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6df843c-2e62-40bf-85da-0f80a3c4103e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.156.59']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bec1cad-ef44-4dde-818b-d47aed6a8423", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.157.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1317487-40d9-47d8-97aa-4e485fd8011e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.157.189']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e62e2b7-cdf3-4865-8f77-1c0351d40162", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.158.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f36d20d7-9bfe-4ae6-bb24-de02441a99dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.187.86.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--153c5674-ffc7-4f19-80eb-c6c8aeec2ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.215.173.187']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b85ea72-f8f4-4e0f-8ab4-8a10e8bb6d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.218.57.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3817f2ff-8864-4473-9736-a63ec5f6c564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.27.186.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e5d02d6-6997-4ae3-89da-b21f75152744", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.33.241.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--266dcb62-87d1-4973-8b91-8b20c01e2552", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.11.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0500af3-cd89-49b0-8ad8-a9a59205b3ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.227.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb15f9a-0548-4569-b322-c240729c916f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.55.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d7607b4-5a6f-48a9-ae3b-90a84c57a6a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.43.100.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c0793b-4a73-4d89-9b0c-8162cedd2c99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.67.252.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54da81a4-2fb2-4ca1-8af6-c64bbac36dc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.8.223.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a811d3-afe8-4f40-a588-f816db627c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.80.35.241']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c4be643-595c-4991-b1e0-d9814afd67c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.98.177.183']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6674827e-217a-4a21-8a73-9e5a3c571a1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.124.73.190']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c20a6c61-0305-45d7-a087-c2b50007e860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.118.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cfdf28e-25d1-4293-9697-9221c4cc7a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.139.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55095bad-bf6a-4c28-ab5f-00080b99e05b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.153.156']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2b341b-466a-418a-97a5-13c992b858e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.165.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e9f6b96-6bbd-4797-bb85-40632de0184e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.215.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6829d90b-f723-4118-b136-81fda8d5114e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.69.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c59b9abb-e072-4438-9e85-058a63b6883c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.191.22.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e05ec267-8128-4874-b02e-7c244aa7e392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.191.36.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f485416-59ec-4249-b42d-33ae6c8eba14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.209.168.216']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e855d187-70f9-4bf9-876e-f2bb968242f3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.217.109.152']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9200f64-5e02-4047-8f09-d817202f24d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.231.78.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9360188-a488-4612-943e-b07d6896a634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.55.239.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357618cc-de5e-412c-9832-7e448ff7b1e5", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.62.238.1']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34fd378c-7eb0-4724-b935-3407033d9831", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.91.48.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc332b7e-0c25-418f-bf08-4f6446cdde17", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.158.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--698bbf0f-ac26-41b7-9152-0e300593af3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.218.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50934aea-b64f-4424-b724-03744a02f1c2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.125.120.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2466c15d-b79a-4bac-880e-80b44f487a43", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.139.95.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73c08eea-1c95-4c1d-a053-917cbd4e0766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.168.33.91']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc9822a7-592e-4e6f-865f-0b8af1de8bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.178.129.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e51b7f4b-0f65-4f0f-979b-f528a89d347d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.178.131.232']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82fa3f3d-f3f1-4aec-b0ac-358525a096ae", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.178.217.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdda4044-b26c-4c42-bafd-15a64b4e8dc6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53bb9b86-a0ff-46cc-af65-b065a5f1a23a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c663090c-6853-4f20-8597-fbdff3195637", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cecde680-37b0-498f-8a3f-33f4fe1445d2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad466c2e-e675-4a33-8f12-b360205fb53e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.198.232.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada25d40-ac8a-4e7d-801f-9c9c176f9bfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2021-41773, CVE-2021-42013. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.204.3.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bf21d2d3-d430-4767-814f-a2b903393109", "relationship_type": "indicates", "source_ref": "indicator--ada25d40-ac8a-4e7d-801f-9c9c176f9bfd", "target_ref": "vulnerability--796d8b88-b105-435f-bec5-4410f0954067", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--23040ffe-d798-4c42-b22b-25cc9341c276", "relationship_type": "indicates", "source_ref": "indicator--ada25d40-ac8a-4e7d-801f-9c9c176f9bfd", "target_ref": "vulnerability--bcaa6e63-8d28-44f2-9dce-1753a0b3fbd6", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--906ac774-cb98-40e5-bcad-8d88a769ceb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.62.167.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aac6ffb1-b691-46fa-8fc4-16c7e8cf2085", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.71.136.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e81d9d7d-e194-4f78-a410-b9699d9dcefd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.99.173.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d691f33-ba3a-4aa4-b1e1-f21128b2969d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.172.226.240']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4b11b1-8879-41d3-bf44-44cb1b3b73c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.177.102.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9fe59ae-fb53-46ae-b57b-f1415750d423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.183.131.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5615863a-03f2-4ef8-8fb4-8f900660b68f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.199.77.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b32d17ea-d685-47aa-a2fc-987cdb2ab2e1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.245.138.253']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d0e3268-fb64-4cad-87f3-37c58f57b40d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.245.140.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e3125f-32da-491d-bbd5-cda20f2e6c64", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.247.255.229']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--927d79ca-eac2-46d2-ba3c-66b22e0dff45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.251.207.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dce5d6a-8bee-47be-add1-064e5348f0e2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.252.240.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1b73b76-4c60-4d29-9072-645e9ce380f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.3.54.254']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--320b1133-c23f-4317-a771-7f6a27b16d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.40.113.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b7e086e-0075-4dc6-94cc-4c6a20517baf", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.48.216.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0077347a-2427-4bc8-97f2-bb6b3b70c8fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.67.70.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1265d37-c13f-421e-a0e5-804c2a7bd5c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.72.114.183']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--248b7797-3aba-47e6-aeed-e1c2afc435f1", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.80.234.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e27c9048-0f61-4fff-8a26-7f7f4270aa9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.83.242.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6b4a0f7-dbdf-47a6-baa5-5123d8cb5289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.101.231.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ebe115-843a-4cf3-95b9-29c274993240", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.122.147.49']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20beaf4d-f313-4fde-a855-0d3fb65bacc6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.131.199.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f20965b9-cf7f-42cb-97ea-444d2a50e3e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.142.8.238']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41baf088-a4cd-4b60-9d07-8053a190a5f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.179.209.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e704080-0417-446c-941b-a38197779b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a3b447-e3f1-4386-b561-c95ef45d0c1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373d1c6f-3ccc-4dfe-a0fd-fb9e9f427344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.33.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--834a967a-a427-44cf-9ae8-c229576a4be5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.35.202']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c3e72c2-2e58-4316-8f92-945b2f997c3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea8b590a-e5f0-40ce-b70f-d5187595beb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75b4c2eb-ac67-44aa-bbef-eccd28a6e8be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.63']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23907e7a-86d4-4b28-930d-3bba00b70f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.39.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf5bb49-760f-441c-be43-648a601c929f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.40.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb71fa6b-4cc6-4f57-bdcb-9272458dc136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b52b7ad0-952c-47aa-a4f1-7f2c0cb58ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.112']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0710e7e-33f5-4473-8ead-eedbccb916a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.169']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf8f37a-74fb-4004-b767-6669da3cbdc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.45.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--711c29fe-6917-48ed-b4af-02a09a2f3b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.47.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecaabe8e-d76a-458e-9dc5-d2a5931c44c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.47.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f45caad-8cb0-438c-99fc-a10d5ead37d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.229']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc85406-91a1-457b-ba13-c6296fe15343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f4e0123-bf24-43a9-97e1-aa564d7dabe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.246']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2752cf1-86d6-4d9c-bac1-b82e8e4945a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ee6147-a138-4a9d-b1f0-f929276a8813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.59']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a236d7-10c0-456d-a5ec-25ef409f8096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.62']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c39522b-3cfc-4b8f-9afe-6615e5111dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70fba2e8-d0de-4b0f-bd83-4c15b8ed8f4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--865a1933-73cc-47d1-a4ee-6b769a91b5ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a10d3ba-d274-4f61-a45b-3a478eed4449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7914c98-cd39-49cb-9007-e59aebe61c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.14']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b993e3-be06-4960-addf-4e770892fe8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acaf1f4d-e002-437d-b9b8-d898cfb826d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e2f9a8e-0a6d-4e69-aa8a-31a2b572daa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d0e65f6-8d78-4317-944c-fc22284d7e17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9e0a5a-4e19-4c53-8479-bf858109b49f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.69.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d692980-13ff-499d-9458-60bba2734489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.69.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dbf7657-cc4e-4de2-b5a0-384a07bd3306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.73.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e1e1159-2d8f-49b9-9b5f-ca3a5cc1d3ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde5f687-99a8-46ca-9239-9c68f69997a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3779431c-9091-469b-86f6-503709082188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780b8e2e-92b9-48f2-81bf-8b3e1c5c4f28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.228.167']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab9c9a9-79e5-41d2-8d39-92962ec261d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.228.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a05d633e-3efb-4a32-91c6-4c88f33af472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.233.253']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a25cf364-69c0-43d3-924c-16b5600d9a96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.189']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a4880d9-9914-4ac6-829c-64b0f1328989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.235.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed660bc-3104-4fb4-84b5-76989669d304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99a5e456-5dab-4a53-a08a-df04a5dd3d50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b0a079-9c34-454a-a88d-8fc7eca4f8c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3114ec4e-9b00-4405-b7a6-0ddaf7620b3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.238.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bcd0e27-bfa8-4e34-878c-7967d2e49218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.248.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd2f0fd6-b700-4787-aac7-747c1a9b107f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.249.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68d97833-9e72-4d91-9817-6168371f1ec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.249.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f8da917-64b0-46bb-82c0-49be270aff42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90fd4db4-bdd7-492e-9bcf-52ff5f57b89c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.232']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91e0ce32-3849-493e-a2b8-cc60670fe92d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80082eb4-7576-4981-b6c5-94a5d67e0adb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5527098-ee0f-4c6a-ac43-91daafe8b838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a08e409f-35ff-4c6d-93af-9092b655ee3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f0270c-172f-42a1-9e5d-983b06ceb7d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1191388e-0b3e-4243-a8d5-90b9ee82f219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eeb4718-e830-4604-959c-0c40ce1a7032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09acbfa6-0ae8-483d-93f1-70abe98f763f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d030435-cfff-45b1-8f5e-ce1e27bfc0d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f2042d-7364-445d-8db7-2d8bd3b12a83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.22.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab58c1e-0e42-4c7f-aafb-1ba768eaa85d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.216.88.229']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fb66674-a16d-4cd3-a68d-035583f41420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.223.123.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f36cd0c-5494-4c1e-a685-a347e4aa0a09", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.250.107.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e608597d-217d-440b-957f-934fe25d8aee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d8bc563-def2-4569-b63b-0b51985f984c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a794085d-bda8-4b13-9dc0-8908816317e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b07d1180-96a4-41ae-bb58-055f3113b584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbbcc973-2057-4834-84cc-6d163192e983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.52']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e7d69a1-2b75-4697-a272-edeb6f67afd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.109.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e77c589f-98db-4e51-a2fc-b0fa87cb73a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.110.171']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0766a6a4-f9d6-4bc1-9a8f-3fdafbd039f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.36.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad321873-5f1e-4c8e-8735-6e64d9623208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.37.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f6d66d9-e337-4e0d-b3f5-404be6f352bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.38.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a043b72-21bc-417f-8552-907f7fc80511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.39.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c59a3f35-35fb-4b04-8adf-f0b005ea6fe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.41.137.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6209d987-51b7-4c01-9f87-c0fcfa7e5266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.96.193.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f49e8a77-ed70-4000-bd75-5dc7aed60b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.99.102.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b720eaf-64cd-4a17-93f6-c5bf9778e976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.111.178.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40192b65-b8f6-4987-8a83-1f738bf4bb1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.130.2.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d519a617-fe7a-4f63-aa8b-e9a89fbc8fa1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.160.215.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20afbdc0-907f-4380-8438-15a4330376ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.188.90.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e84693b-da37-491e-b4b2-ea6e8e0e1b1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.192.210.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96653f90-32d7-473f-b0cb-07276a0826a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.195.255.202']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59868e5-8d61-4679-8e3b-2f1ec444ef1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.235.221.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca3c5655-6083-4bc8-8761-4a78c534a4de", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.250.1.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc52cd4-c61f-498a-bc0e-4087d1d7cc9f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.100.147']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d56b3d-aa0d-49ef-aefc-b68fc4d8c82c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.63.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d486dc6f-7572-481d-a01f-d4afccbe90d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.29.130.199']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--103fa9e3-cda3-4122-8338-7b60b4f556bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.29.202.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab2e6a5f-b489-4e74-8904-f7e29d44c838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.29.243.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c95d1b1-67d1-4820-9073-3382734716b1", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.45.242.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa32db3f-4e21-452c-a1ed-beb1e2c5b280", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.45.7.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00dad5a9-bbca-40d1-95c7-fc315c5910b7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.99.250.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f60d31d3-1a93-42b1-a829-85dea0472cd6", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.99.250.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe69a808-ba4e-4049-aab2-07d591ba2dfd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '12.156.67.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78fa9e94-0501-49dd-8203-28788b5187df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.193.227.246']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0020eb97-b6eb-4f30-bf7b-0dc1a9e6ca05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.211.167.230']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ff0e72-eda2-49f8-9218-b44b1c4fe134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.240.155.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c61a77b-905e-495c-ab1f-e52da93e6bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.241.79.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b082d014-1884-4a90-b27e-2bfce6203a32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.28.138.48']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd0c9e0b-388c-41cc-b9d8-0106142538ff", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.28.169.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a9df53-994e-4e58-be07-bcd1a6fa493e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.28.169.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a11a18ae-bb92-4b27-94a5-5a01baf73dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.28.193.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee49e23-4e2e-4347-b291-c611439a9a87", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.77.176']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06b6deaa-a980-4d99-ac1b-6ef9d2b167d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.97.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30dc8c86-83f6-4a6a-b753-365e52964501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.49.64.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--839c428a-9bfe-424e-b27c-f56b146ae9d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.55.59.135']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a44e7c14-c099-45fe-badf-b37ac9e9972b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.122.122.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd0122dd-9046-47f9-abe8-33e23577f779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.165.84.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ce0ee0-f3b4-47eb-8a5b-a84c22e800be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.171.125.139']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edf67daa-996e-4433-a74e-88e0e774009f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.149.171']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af1e89a7-da5d-427e-962b-7f7c3b4dbad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.85.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beb8b556-d091-40a2-a3f0-3d5968ef47fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.89.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04fbad5c-f170-484b-bf27-31ebed671b3a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.31.210.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5b7421-297e-42ff-ae56-7a9989461623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.43.239.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2202d6c5-1e40-411c-af03-48cf9bec37c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.55.145.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17200fad-ce59-49f6-b4d0-42327eb4f58e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.56.156.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff407d70-df1b-4fd3-8fed-1daf47a4c80e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.100.139.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06eec87-023e-46b3-b28a-2323661176f6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.114.11.160']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa2a66c-169e-4e07-b441-097f2bba838f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.172.81.238']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd453179-ebbf-4b4b-91b7-6054c23a1224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.180.68.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdccc113-5ed6-4105-8a32-dccfb4b3f248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.183.37.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ed60a4-e670-4b7c-bf80-fbe4fb4fa120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.183.40.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f23502-7c26-4583-9caa-4d9f5a2cad0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.183.41.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb59c73e-ff4b-4e8d-9d6a-576ac0c9892d", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.225.92.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b266190b-c5cc-4062-a084-9ffb2254a0d7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.230.63.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aede7cb-0f1c-4939-9a30-47d096f4fbb4", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.241.212.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf49a16-369c-4dfa-9a94-aa69f914410a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.52.111.59']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--862fd9b1-0f08-48d1-b654-d4ad13306e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.52.167.156']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d6a08b0-a3d1-438d-818c-aba5ed4dc535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.52.19.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a022aadf-0f1b-489d-9432-2cb73aedf9af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.52.20.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99a82b03-f373-49f2-af4d-e1ca50520fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.53.104.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--805355cf-9178-4dd0-9d78-8954a44c8674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.54.158.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75479223-3ca8-4483-8873-8b805656f997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f32dd085-9277-4437-97f0-214b5dcfdf84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad96954-b7fb-4e8c-a2c5-7bde76016957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.122.37.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01537321-4e12-47d3-af91-cba533d80517", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.138.18.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd0d628-0e36-4994-a096-96c5fcacc7aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.14.120.188']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a05b0ae-18c9-47f8-98f3-5d32fd4e0846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.154.3.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c22e5138-1e14-4a66-b202-092171c885fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.158.37.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5602e114-ecb9-45a7-a1d2-820ae7338aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.163.8.56']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f57bbf94-1f6a-4ca6-955f-d8caeaf101ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.178.210.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f30f90c-0166-470a-bbaf-5e5eaa45b5d8", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.180.182.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb58b73d-a687-499e-a0e9-a97895934f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.20.116.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f9fb9ac-efe9-44e3-ba05-40be989722da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.210.141.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a23ab418-aeb0-463b-9fc3-93f100e017ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.231.144.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--862a69c0-db4c-4b41-bfa2-0b6fa76bb53d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.232.133.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4de7b2eb-fbbd-471d-9cda-4c7997587d77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.232.9.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01306337-3b70-4bfe-afd8-f176238a6b61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.233.238.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ccc427-22ee-4407-9feb-dcaa476d46eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.253.46.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56d24fbf-1387-422d-b813-619f17129608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.30.240.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f73ad3-f886-491a-8b86-d25b26cb8f23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.196.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad03912c-4e84-4829-be5e-72c03ddcef84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f69b9d3f-c887-4477-901c-760410f3a20c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.147']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c50a6e-b560-4bd5-9e50-b9866b301d89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bbc45d7-c975-49d7-8ab2-10e6d9fe4842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.205.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b10c9298-352b-441c-8134-54aab841dcbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51beafc6-89fd-43b0-9295-9872d8f5c6f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a3dd87e-2407-4bcd-bcec-01fd820ae3bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a892795c-2d1d-4199-a297-71b104a1d2c9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.210.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85bfac98-867c-415d-86c1-384f67761a1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea1c39c-b5a3-4338-9a87-5aedec62ddb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab85ad9a-7b51-484f-9d15-dd76cf377b05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7324ad7-d07f-4af5-8e97-d6cec66e4d4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.215.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d80b4370-05f2-4869-8d42-a9745169bb51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.106.148.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--750c970f-c0f8-4f8b-b03c-5e049ce2d003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.107.181.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3a43c5-966f-4cf3-9880-b93eae335066", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.108.17.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4334514f-7ccb-4e69-8d70-61d4b10e11cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.117.194.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f063d80-21eb-498c-a479-c2da274391d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.117.194.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e2a88f-eeda-499f-8db4-56491202f215", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.129.246']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9982ecc5-dd48-4443-b00f-0def187d77d8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.193.81.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a162f0f-1273-4f53-ba19-951abd723fba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.198.131.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--509eae73-708b-4f5d-9fe4-59c0461afde7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.198.131.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e00ae10-5283-487e-bc07-6513d7072b64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.217.58.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a88ad123-d81a-433f-9aac-cbe733c25b52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.217.76.229']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49765a86-ed56-40c7-a5bf-69af07f9b0e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.223.112.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a74015d-2334-4860-9219-e39e29adb49f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.227.31.56']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba4bae3-44e2-4324-b038-cf499831716d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.228.34.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c59b579-d85e-4042-a267-eefc4e2d7bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.29.220.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0524de1-f850-426f-b0df-0051a379ac6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.43.27.106']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b22943e-c593-4acc-b898-7ef3998ea8f4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.51.60.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d8e34a3-51f9-4f51-9630-e183daee5321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.77.204.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c385c327-17b5-4527-8431-d2742d66117e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.77.222.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe8b3ca-3215-4f38-9eea-b57cae4fd9ac", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.118.72.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ff22dc-d94a-47a0-bf79-cce588c8bf4d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.138.175.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52463672-abf8-4dc8-853f-195d5a49b56f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.163.116.49']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2295b7b2-6c14-4229-8711-aaa1ed7cbcd3", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.165.219.254']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9cef751-f4d2-4948-b76b-d6f8d197bcf0", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.211.170.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ece02ab-3230-4ffb-9f2d-1d489fcd4100", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.227.201.238']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee074ac-889a-4ae7-9c83-ba4900d0b44e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.227.86.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ba6c83-53ef-49f1-9476-b28a5253fc1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.227.93.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e65f496c-5922-437f-ab3d-d6d2a222ea3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.25.20.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be0115d8-583d-4cfa-90b3-dd7504e70dd5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.26.51.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad43e3d-1965-4f43-bbd5-79cb4d6f5f4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.67.215.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc217ee4-5754-4963-b5b1-e8e9f5263095", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.91.106.241']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff68c2ff-1230-4bee-b133-9902a81ef079", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.94.165.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9714109f-0030-43ba-80b1-3c600d4d5dff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '126.209.18.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0386aa43-d74c-473f-b01e-81102ecbf611", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '126.38.54.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7998875-0319-4b33-befb-a878cfc23eea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '127.0.0.1']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73c9a731-9f6b-4040-aa5d-6c4b5546492c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.0.104.44']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a6f743a-79b3-4209-b1d0-91d88fcdbed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.32.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b39f20c-6b7d-49df-83cc-22a1aec85713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.34.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b953236-98ab-4fe8-b693-45d3485743aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.44.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e16403c-1e46-48a3-9868-b3dbb1151a05", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.106.221.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a55fd820-492e-4e26-9cc3-49a700cec04a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.226.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d1e618-d052-479a-ba54-59db5f45fee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.52']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0975112d-1106-4591-bcd1-6428eb84436d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.229.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf82a8b-2764-4fce-b308-592429c0495a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.232.254']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d679d0-4e79-4207-9168-0083202c6d73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.233.253']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--902486c4-70e7-44ba-8281-e01b5c04fd66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a2074a-f5d2-409c-9065-7499674ca0da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c21d54-601e-4499-b667-0e536a17166d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.179.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3092f86e-2d97-4e6a-96a7-5672d85d3ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.225.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d490b1f3-b58f-4a31-94bc-616be98bf715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.255.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2570d425-19e3-43ce-84ee-7e028918f9bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.200.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8856f74-689b-4948-a8c6-7b0ef1b3472f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.201.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b63e54c4-d64b-4626-b827-aa01967d1e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.202.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--877ca6f8-83be-420b-a7d0-6c2e579af17f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.203.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1311b4f2-36d9-44d2-9bac-ac1d100c6381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c77751-ea48-41a9-b953-ccea72d738c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.199']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b3e6313-4a71-4dd2-b02e-5d08390eee83", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.121.96.159']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e249bf-5942-4831-9283-985a36f2383d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.204.188.64']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a20b41a6-a7b4-4616-a63e-9f6177a63049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.222.254.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8bad05c-1e2b-4114-b2f9-bff978b60067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.224.206.139']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--457f9637-477a-482b-934e-144f6f246415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.224.206.195']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6102cc17-be73-41ad-acd0-477d9efc6dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.224.206.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad985cf5-6727-42cd-8686-5cb316ad09d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.224.207.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a82b713c-7793-4ad4-9238-9a14d6cdc59f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.224.207.171']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16cd744a-5b80-463e-8c8c-56eb9c2d38ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.224.207.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--655fcc91-bc24-4d20-8d98-baa5c0c5a055", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.146.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a48b36-d433-4856-9133-011750ce2f89", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.83.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--698ddcca-722a-46c3-ba35-b0d108fbd9b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.232.165.250']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ca052c-b40a-4994-84f2-d44f25e23a52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.219.193.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4804433f-a700-4149-be68-d464fc02d17b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.220.251.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1cddb8-3d06-4e47-8f8f-89762eaa3c47", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.220.63.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f17760-d5da-448d-8610-c56d0ff3f010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.221.1.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4527a3ab-10c5-4dbd-aebf-c0ebfeee0673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.221.53.152']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71f7d7bd-212a-4f08-b7fe-9d057e4299c1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.67.236.135']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d969a0-60d1-4040-ba56-292a1b22e890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.104.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--495c615a-a537-44eb-99a5-4865d705b69c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.106.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37568bd8-61cc-4dfc-b283-d5b9385034b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.113.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95ff63e2-594f-4c0b-bdf5-e6c0d949a25f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.116.159']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9cfceb6-e37b-463c-9541-f1cd68d187a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.120.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cebf7418-7b95-4a8c-9e5e-f9e5dd58ce8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--924005bd-03fd-4c56-8c89-c3fb9537a2b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944d9428-d2e9-4945-ad69-ab8cc3704717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e062e897-d053-42dd-93f7-a9538498558d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84af459f-18ae-42d3-beb3-16aee67279af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adfa6d1b-d138-4184-b321-b2ddb602af15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241e2151-9d89-4dbf-96fa-9b7e2df55272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.225']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--207e8201-7da9-43db-b1ca-04a93dca634e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf3bcb43-9ec6-4293-9bd7-9e25a5fa6c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.255']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f0e6fb-ed5e-4ed5-890d-4719361f7121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57fda07-0e2b-429a-b48c-f30ef19cfa48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c29abcc4-aeba-4c31-8007-3b213142bc4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec79ecb8-9d9c-470b-b9dc-4afe3285a26c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb4a5bb6-4d4b-44c9-833e-5e1bc060e92d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb388d9-a3ab-49bc-bd4b-b92d659551ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d84813-80c0-489b-8ea2-ad5b133c9205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.246']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba658eb-3c23-447f-ad14-bdecb9660984", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.220.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--377fa96c-8036-4bbf-b4d6-ebe91d86d1ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.85.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cdb9a55-b63d-42d7-9e7d-44c3135e7ca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.95.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e6b56c8-174a-4d19-9c54-22ebb469f318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.250.134.254']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87650cdc-6a12-48d2-89ce-01180988b16f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.100.216.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d403298-02e8-464d-a152-7c9e3ece6f81", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.100.242.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76598f3f-c9ee-45a3-9834-9c70590238e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.159.24.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8745c97d-8c18-4967-918c-0c0a7b5e581e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.196.102.229']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf7019f-53f0-4677-aa60-6485eaaaea9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.196.186.1']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c775003b-ba03-4fd2-a299-59e445eef58b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.221.146.193']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c0d8374-0948-4210-99d8-55dd340eea27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.222.247.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ecf797-bfb5-4ce9-b204-2126edb03a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.222.253.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20eb39b7-297e-4505-be19-9c89d8ba0ec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.248.94.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fda1bab-c8fc-4b21-a8aa-7b1284247a5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '133.175.179.150']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71a790fd-8ad8-44e4-b0c5-365546c76219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.1.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04bff95-f39b-415d-bbb2-a05bd9fd6e77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.110.49']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89543776-7b2e-411e-86e7-bb9173feddc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.122.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ff99ec-0df5-4ce7-9cca-1601fbccd9c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.125.153']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9951d893-c0ac-4496-9687-198f8b21be46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.35.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c540b49d-1c24-47c7-a1e1-18997b5818d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.60.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f466cfa-4332-4fdc-a5f9-b26b6d636860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.73.173']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e315cbaf-7f03-4415-8f66-8670c7198534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.210.240']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ba9338-c70f-44a3-8e38-1a6a352f3adf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.11.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e460fe7e-769a-4f54-a274-546cb81dcdf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.149.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48da60d9-fc4a-4839-87a8-814edc2e9624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.26.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae83b278-9137-4ce4-8574-eed942c27ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.49.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39318b88-c64a-41db-834b-eb2982efa99d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.6.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29c4a261-f233-4712-b03f-f4feb491a677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.75.55']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb52cd72-84cf-45e6-9e8e-1840492d23e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.33.73.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a4033d-2a07-4334-85df-36401fb283d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.104.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c08689b6-88d8-4a8b-a94f-a85f537dcdb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a43698-c75a-480c-bfcd-206f64d5e2ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee452cb-35e3-4ec5-87f1-f7e97a02bec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.16.163']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f0cfd19-9f59-476d-85c2-06fb9d784fc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.227.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--123f1484-36e6-4af0-ac87-2421d98e1af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.88.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--277eb2cb-2aa3-4d82-bde8-43e673c39f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.89.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ec5f46e-9b23-4542-a540-031c152799dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.89.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aeba6d8-a067-4a33-8a80-fc3d352a4399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6fc2a76-3619-48ea-9064-7f39f1125def", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4169bd22-3046-4261-b663-2019b577d02a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe2cec8-667d-4409-a4e0-5446c380c50b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f705c6-d65e-44b8-9960-ba63ee8cec5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.97.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3acbd79-4f2f-468e-a9c9-379b6f841f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06d94060-dd33-481c-8848-939e85f9b755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc48dbe-e3da-4a04-93d0-2c8b84cf6288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef630a6-55f2-4e66-9dc6-59ecfe13fa65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c649b88b-7043-4ba0-932e-dc5c299f7c3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ef6cfc5-b1ad-429b-9a98-799d4e67998e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.232.185.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c21a5b15-1228-45c8-a840-a1d1f9d3eda7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b9527e-e449-4082-b635-57fb8e2f6020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.97.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a16451c-a4ee-47c9-82d0-653bb89c6c05", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.235.138.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd90174f-1a0d-41b1-bfc6-0e954b63a77c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.122.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1108c923-a39a-4e24-a75e-692ecf9674a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.122.184']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b89a965a-4ccd-4612-a2e8-c803f86a89a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7889bf2b-ea79-449b-bd42-fdba2fb15715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9bf4279-43b2-4a7a-a557-09c3598a9f27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb777780-0c0b-4ba0-b6d7-ba4086f18356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d0fd9f7-f488-49f8-bc96-a1fe251a5d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65cc8245-0bde-4857-9b1c-0e962145d9f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec886d9-cb70-42e4-b055-cb9aca318507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04d4919-8a75-4cf9-aafc-956d82b61db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b01f039c-1e18-4158-967d-eb32373b0df0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5bf4f16-ad5c-4aef-b453-f6a25478c67e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.182']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf7f4dd-0dfb-40b8-a935-6e1b6e5097d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.195']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d0035b3-5e7d-4e52-ae6b-85b91db9de24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--983b3b0d-addf-4b7a-bd33-4cdca650cf6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79fc8307-08b3-4fd1-9f9c-201b8e097882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12188743-47f3-45ab-a0fb-fe721490e7ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--090e10e6-622a-4d1d-ac07-7ecf69a01fd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f47ff082-da1a-4d2b-b630-7952272e021a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd69eeac-b574-4635-baf7-449e206739d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8bf5334-8cbb-4c3b-a9bb-c0f8240892b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.195']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f91d96b-88f1-4b22-a7d8-51d6155527fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a2a8766-8ba7-4e9f-b670-62450aca2667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff5ddbb-21e6-414e-a403-240d6d906732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.211']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b11937-6052-4ce4-be91-db42640908a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.217']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ceb161-8ffa-4e29-b2b9-033d1b082a09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.225']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2486e0-4488-418c-b438-863eb35c20c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.230']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c4b76c-d646-44b3-9d59-9988cb63b9cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdde3172-cc44-4606-856a-51ecb8d15482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e23be8cf-4594-44fc-b8e9-02d42790d1cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.63']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd4f35e-fe87-453d-82cd-307df869aba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb0257ca-0ee9-4ef5-b2d0-89fcce59b792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf7f717-828d-40e6-8aef-c4d8c32a3fe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.84']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ad1569-f859-4739-a21d-98b74b459fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2432ff0f-9ba9-4917-a997-99d6b4a86615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ea97e2-14be-42e5-aacc-38765a8e8add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb75584-6401-4cf2-8205-62023737e6b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.225']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0969d8d2-5fb2-4bc0-bc8a-b2b5920d7e08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7955d79b-f645-4c47-b42a-6ddf41f3eb13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd34c7a-a55d-45b0-bff3-29c621abc784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.81.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dacb355f-577b-4ad3-aa1c-18775b371aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.124.35.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a39e1bf6-9ca3-4c0a-bada-e3ec4b8207c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.143.177.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a563bc53-f031-497e-a3b8-abc5c6afde46", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.144.33.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61dd76a3-5e9d-404b-af90-b285bbec4f42", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.144.42.158']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae15e42-3e63-450d-93a8-2cc0c29f345a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.158.10.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d099ee-4d74-446a-9a67-6c4503743b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.158.103.186']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41f68c7-eedf-44a1-8450-56c7b67ba390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.158.11.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ab0c4e-09dd-40b9-890c-8136721dab4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.158.118.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79e04671-9d27-4c74-872e-97aa1ccb2287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.158.43.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6aaa406-d087-4598-969b-cf7140af6454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.158.50.183']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b10b2b83-8a54-4704-8e8e-3753233f2d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.158.61.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5d242d-a8ed-43ef-8370-e8929be0cccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.158.64.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0790651e-a68f-4a3c-a0a0-ef47d4ce97a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.158.70.184']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5721bce5-a6d2-4c0b-add5-4f83724d1a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.158.71.150']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a75f2283-c49e-455e-aca7-2febb747a430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.158.79.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--848d1b2c-369a-4570-a6db-83cb6a5b74ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.228.136.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329a4d3c-d494-4a36-8d22-1246ed685d2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.228.136.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d471c0-10f5-4eae-922f-5592373b751d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.239.224.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c88e9a1-4703-49d1-9be0-9fdfd105279f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.243.91.173']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ecfff05-a892-4c5c-ba16-64a4a31aa0a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.135.210.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd36c839-8269-4677-a383-93640ffc30f7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.112.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b1e1877-7fa6-4e06-8729-edc13afb7429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.122.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b43603ab-4dd8-4b27-8ab4-29d7c8c77770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.133.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30db3d22-5dcd-40b8-a870-ea5ee0e51995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.150.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f349d8ff-1261-44ea-980f-82f43ad61f8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.151.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--500a1e77-8d5b-440a-8b77-45307db79c7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.180.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d516ad-49ea-42bf-84ba-71a76020ff0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.191.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c21d74a4-b5ba-4ab5-a4d6-f5ee5907c572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.194.202']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46d745bc-22cd-42ca-a891-aa2b4e463017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.208.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6da9328-81c0-4beb-a1bf-1fe43bc321f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.34.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebcabdfe-1864-4b12-bd54-2c126797d498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.36.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cf20f13-5e0b-408f-a3f6-758c9ec14b6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.71.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b211f5f1-3f60-4b10-8488-ef92daa9a224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.79.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c91537f6-ceb8-4661-9615-eb0acb9c1065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.59.54.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14d4969-a90b-4382-81ed-aee8a4b6743d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.0.231.51']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f2f95a-8a5b-4866-9819-49c788c360b7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.122.140.200']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e4c2997-eabb-4283-839e-1a229b76e3dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.136.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5caeca45-18b9-4e92-9649-bd2911a960e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.142.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c046eb6-b29c-41ef-96af-b875d2775d34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.149.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba541eac-dec6-47bf-b8c9-b9283d4bc031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.15.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dbcf4ed-0c75-41af-9fed-8db057353376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.151.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc447af-dada-48a6-b609-887fdb9591ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.156.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc2bff3-7ecd-46a7-8fbe-3f1e27ecfa00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.162.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d6a13e3-8a02-48bc-93e3-055f6e1ed553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.170.185']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8080df48-3808-4745-9a94-b9874b8aba4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.188.55']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd8ac125-b941-4177-a866-fb0713bb5270", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.200.106']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e9ba252-6d82-4a7b-9ad3-8614dad73d38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.204.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d420ffed-cd37-48bd-baa6-68852b39c866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.215.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c714c2a0-f9d4-4df6-a474-ba194becdbec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.40.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ebff431-f524-4d93-afec-9c7ff4fad622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.83.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e776409d-f81d-4247-8297-ead626f4b992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.95.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cfe5f3b-7cf6-4fdb-b13f-e28b2683700d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.201.32.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acf06c49-0cab-4077-a8d3-9167c4592e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10402c0c-e713-4cbf-9389-b6ce01a17661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae66794-0822-4ce7-8e7d-f6dfa47c96ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f1cd3c-a16f-4379-9e4e-f4e980cd37b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.59.131.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4963218f-c6f6-4747-bdd3-f9b408bed367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.135.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a54377f-040f-4344-941e-3a0ab86ec01d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.151.160']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298630f1-ef60-42b7-9c63-0b801141fa5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.225.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a13a80c6-ec4f-46b2-8d8b-449796d885fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.4.170']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a102ca1d-6fba-4d76-b1ca-3edbdb5a4e1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.65.59']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6319df2e-bca4-4035-8dd4-46e7375cfa53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.9.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--777217ed-3cb5-4fef-b0de-66ab59b03845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.84.127.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c3b3b03-06d6-4801-a8a0-4e87953225b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.97.162.166']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c836b376-9237-457e-8c9f-f14ddf4f1115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.135.200.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779db754-a1ed-46c9-9944-8bcaf5452010", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.135.44.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a45b68f-45de-4607-92cc-25398be1f07a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.135.59.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbdab9a7-5a19-488a-be46-a2ec1ac3b12c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.135.75.190']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d37574b-1acf-4656-b537-d40eb60772d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.135.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8402618a-a141-423f-9201-7b953a1c411a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.16.242']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e608fd10-e20d-4fed-8c47-a43a12902b89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.235.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89f9c70c-cfde-4ba3-8f06-d8b0a49ef77b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c10fe286-a75e-4d7e-8f00-afedecb13a46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe10f4b-fe2e-42bf-8898-8b307bfdc86a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.155.134.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdb71a52-3847-4b5d-9b8f-f1726d8f0b14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.113.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d83c1364-b9b0-4d80-83ec-d8170187a711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.116.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd6fb14f-7148-4e6a-95da-782367879182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.117.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc9ca24-560b-4041-a30d-fd8b6a50d10e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.66.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03a0551b-a7c5-403d-a228-f42480e45fce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.70.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--528b4d5f-35ea-40c5-91cb-26d6e3b41fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.78.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2745126b-9bb3-4edb-a302-3bbc50dc3e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.167.162.162']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff20a521-dbac-476b-9615-8dcd1337f7aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.170.73.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--032794b1-f58e-41c3-b70b-e3b335c17fe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.170.73.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15791bb7-8396-4d6a-9fda-84e67ff3f5f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.180.163.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b48a5cfb-53d3-4b4e-8dd8-532339fb4b94", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.19.117.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d11dfc85-7ebe-4cb8-954c-454b7cd92c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.224.132.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6327d2f-5891-459d-ab8e-0113fbee9ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.28.49.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5625707e-06d9-4cb0-9dbb-bdb514e4f890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.28.49.158']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd73e485-14a3-452a-aac4-fa2ddde4e33e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.28.49.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61e5333-99ff-473c-9980-a4da7c56a8e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.11.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f6ab6d-2226-48df-8b1a-9db22084dd18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.173.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba5063d-bd75-4c65-a178-72a46813aefa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.31.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a61309a-b9c9-4244-91f7-b4e53b9b1fd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.32.152']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34b78316-ac23-4b39-b2ed-7c7f5f6c7b5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.41.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac78ed8-16ee-4bec-9b3c-2481dd8a1080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.64.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b4fc19-c2f2-4b7f-a1dc-deb709bd5ad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.7.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62d49df1-1171-4142-8d8a-e771e2f14f9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.70.49']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244e1892-42eb-43da-a11b-083d66ced3b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.72.48']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b8a6f1-2ee1-4bad-9a3a-7a6631cf25ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.90.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--311ecc5e-a4b7-483d-afa9-183821fbef29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.99.18.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35f5f150-ed7e-4422-907e-d60a66a55ad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.99.216.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff8c6ef6-237c-4d7a-8be2-56053b3558f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.100.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e269e94-bdd0-41e5-ac94-95fe51ab9fb3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.105.36']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--012e37a2-78ac-4977-a17c-be3fa9c47059", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.105.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00dab99-74db-41a9-88e1-9a2572684f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.111.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e11f05e-d192-469b-83cb-09f715b74ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.114.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dcde660-029e-4b48-9bb5-917b513a41ea", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.115.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d85506-3c4f-4e1d-a2c1-8a46df811f14", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.117.84']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e70325f-94fd-4994-94e7-ad0b3ae91f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.120.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f06fc643-1ed3-4ea4-9525-46765b18780b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.121.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b6d517-f62a-4212-b4df-682546b721f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.123.167']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df8277db-028f-4171-b7a9-164f05754d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.123.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--635a1b59-fa22-42b6-97eb-07befbb66f56", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.127.97']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb6005e-378f-4404-aa88-4d43d49dde04", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.25.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a099bce-2c8a-42e2-86d5-ece0721740b0", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.116.154.193']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb1e655-3ff4-48cb-a240-4866de48c0c6", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.117.250.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--004082be-4b20-4d92-995e-e21f0462f80d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.160.107.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--375936dc-c8b7-4ff7-bf51-a53098625134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.163.144.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02255c94-bd08-43ab-99cf-ae5f0c7e83c9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.167.92.152']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c20fb284-dfa4-4f1a-abca-a6cbd36c213a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.169.60.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98c5cbf2-6e16-4d76-af32-f50142f54758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.173.38.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd423e6e-8371-4cb4-a241-3af941e4319b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.177.232.176']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e110f35-f655-4768-a651-1ad83380eb7c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.191.22.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf7ae46-aafc-4a18-8735-f534b9249419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.192.213.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb21f94d-4343-431b-b248-c684a80f9295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.192.214.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea7fa2c1-79f8-41b5-a731-60099f5bd388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.218.75.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e1455a-d208-4e7b-8bd1-1e4eeaae740a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.225.253.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c2959f3-185d-4075-8301-a064ce657e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.233.203.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af41f8e-c026-4811-8ced-e0ca0875b7d1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.29.208.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f183674d-d471-4ba4-ac1a-84059be94d68", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.29.214.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3440ed2-a64c-49db-930e-b428f0104006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.52.46.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1794d66-38f9-4b46-9f2d-7fbf3b9702ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.53.69.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26eb517-e366-4123-af88-5ad8aab027f3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.55.144.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9baf38-e8c6-41f1-a58d-c0cec921b809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.143.159.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f55e80e5-d609-4f3c-b5d0-ef5e7fbc64b1", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.238.153.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d62e4e-8076-489f-8fc2-c5ae34a58b1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.245.79.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbcc05db-531c-43f3-9963-2d36e538996e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.83.50.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4d0513f-effe-4f39-9ff7-3f8b8dfc6b78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.18.59']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45fe5b2d-a5d2-48ea-8d52-5f28a1883b7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.187.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df275826-133d-4518-b0fb-9d7e2c91b081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aac0f189-a7eb-43b9-bfc3-2559db02615d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.171.240.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6c6435e-c779-4082-b7b4-96d089f297c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.44.247.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8384d93-7cc7-4f23-a188-6aa8f0b9460d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.113.56']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1ba7f7-3ebd-44f7-8957-bc1674e6f3a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.127.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--504c0117-0859-4e5b-883b-5a0f51d6b3bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.130.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40048171-3279-4e2c-826f-4f862a74c3b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.145.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b86c5d-4836-4263-a0b1-5780b3671386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.153.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--511c19e8-f297-44fb-8e12-3e15611d985a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.158.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0967e82-cad6-48c7-9695-d23c6dd40b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.196.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd1d716d-2e21-41db-ad5a-561b56574abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.196.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0c0aa1-1364-4ab9-8664-88a25db51a09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.199.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71110a0e-c5a2-46db-b01f-6dc2dddda4df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.200.173']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f53ba6-2c5c-4066-b66c-f939f5e1f3d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.223.112']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e6398a7-edfb-4a02-8576-d82047504073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.224.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9689c64c-8497-44b9-b782-f0004329a120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.26.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f9be9fc-b4d6-4b77-8242-6caa347da4fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.51.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--386880a6-b90a-4d84-b181-bf25207f7165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.51.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dbb5172-9a9f-47a0-89e3-1ff8060fcdb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.66.164']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e92230ee-e43a-4519-bee8-ae69ea0b7a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.67.171']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff7bb2b-81a1-4685-8023-b6a43189566c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.91.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f9c8111-c5f6-4358-a4f3-303bd42b6a02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.105.137.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff074867-5297-4eee-b5d2-58b9d2723b04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.105.152.150']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--212e8587-13d0-46ae-9f58-082454317254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.165.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74715b3f-e580-4294-906d-9f0e1b06db78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.181.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e57a6ee-4f34-4696-8d47-63cbe0589803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.201.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68311bbb-6d4c-4bef-b4bb-72a727fb9318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.235.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95df14a-8e3b-4518-b3d2-996fe0d1e703", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.246.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5ccb8e-565c-4b14-aa41-ddf81f2669f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.251.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--221d24f5-8fea-4a05-a1d5-e43220767077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.126.55']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d04566-ebe3-4f12-950d-b393d20c5db7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.134.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36db9145-df31-4abf-8ad8-74282d47d00b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.148.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e6da3ca-b65f-4814-b018-96b85a4fdfad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.159.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e48927f7-c6a6-48b1-a902-9d19fd28af50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.159.153']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a3f79b4-225e-4fc7-afbe-3ea50ea6a298", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.163.156']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d74c63-2caa-444f-963c-c56b0ffd759b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.17.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe53fb65-27cd-4d56-bbe8-8d6aa0ddbfd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.171.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cbc2755-f781-47ad-8ece-50eabb23c1ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.185.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0c3814-a566-48d0-a91e-e7b8d8137a8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.228.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--022449c0-c0bf-4fd3-9450-863430e2c9b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.235.162']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9320171-8ed4-4bda-9caa-8ac1ae5bf29f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.38.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b28ed61-2f96-4042-b7a4-e85e67ef3379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.47.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa4fba7b-e83e-4551-b690-a368d4ecc3a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.57.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce708bcf-1590-432a-a12b-4e5e6f45100b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.68.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a6101f-6a10-4f27-8b4e-9a70a07f5b0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.8.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa19d88c-f45e-4e3b-baaf-26e8a398c95d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.95.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--debac202-ed51-4e30-bed7-f45f921297e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.132.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b6eecb0-e4f5-4650-9112-f27b27a632d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.170.176']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd54bd5-bbe5-4625-9b4c-396f64b7e306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.175.199']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d881936-47fd-49d7-ab43-3895648e9976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd3067e-81a0-4179-ba93-223fc623a18a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.97']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6604347b-6113-4bdd-8070-cd20bb5da581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6630089e-15d0-411c-8a2f-cfe5d2e18e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--221178dd-7d61-4c93-8e12-8c3fef1d3718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.185']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a57be6-0be9-4919-b9a8-324e73770c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.189']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c0c78c-df0b-41a0-b1eb-3cb4f6b0c257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c422af6-c9f1-4477-bed4-d66e95d289c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2205974-1de6-4a48-9ea5-5d4a22c19aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f16c9e-b5dd-4beb-97cd-b7c5ff353668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.44']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f240092-7d8a-43d3-860e-1768b8766845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.52']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b8a49d4-fdaa-4c3c-b220-b13ba3995df2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02381b80-fa2a-4e56-a43f-9ffe06b74efe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c568300-9371-4383-917a-7bc54ce6d07b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.84']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--728c61f2-6dfb-4757-8bb1-3f3a60f2f7d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--484fb4ed-641a-4c53-8cce-e702f611f212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.182']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff9ae686-4fee-43a8-9e8a-4fe48a48ef82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--428277a3-8c88-4f63-a219-bf86ff995146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a31a3da-ec90-46ee-a26c-d9b128e90630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.97']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf35b74a-f03c-41a2-b249-ee15d4e72116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c259a9e4-438a-4f1c-8244-43c4d4052765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a99cfefb-0e15-4dd0-a072-ee2ae6100447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.44.144.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44315e20-9130-46fc-9f48-b11cea36f8db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.44.224.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e5b69a-9c3f-4a83-908d-dd0b9c54ade7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.76.49']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb909128-2ec2-4c85-b547-4b38e37bfc6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.77.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa914452-7287-4e29-bc69-89ce84900997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.195.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5fa515f-cd77-4916-9850-69be81659fe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.217.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7ae946c-bb2e-4c88-9fc0-1562b4f875fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.226.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a12bc69a-7284-4e29-978a-f375a52f9cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.99.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9915824-2726-4e4d-a9c6-383dddc16e34", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.99.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c45917ac-a255-4d66-855e-ff7ea310def1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.82.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be149cd-3cde-4534-a9c8-1c34e32b46e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.6.131.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bfc325f-0269-4354-af43-40bb04768ca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.91.68.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a0b186c-22c6-41c3-965c-c1fdc1822970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.119.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a8f2565-4ed8-48e2-8673-ec21064e74ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.209.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ae78696-2a29-42e5-9f54-10de23abffdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.247.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1c75859-a73f-4a6c-8ef8-b378b49b9b1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.25.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f0e2680-21bd-429e-8eec-70406e70edc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.250.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--279433e2-9884-4f6f-918c-da298d584dc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.251.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e069d5cc-cae7-48b5-b662-f24005b62f59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.48.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--166c9c98-b423-404d-94a8-d5fa3c894301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.51.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c42c1c29-614b-4fa7-8be5-a9c493beb36d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.78.195']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33356df4-5c2b-4e2c-bea0-3ea12f980555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.83.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29110daf-91a9-418e-ac24-f36916681f39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.89.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373979b4-c0cb-4dd1-a1d2-755dc7d27ee3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.56.199.139']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3421311d-2792-41da-a458-25b1e973cfde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.52.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e04bac74-273d-455b-a0b7-28386fbe59b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--814c2248-6683-4e8a-ad8b-abb6eb7ac652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34cecbbb-4517-4dc5-baa3-02ff152f638a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.183']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7650a7d3-2c16-4190-8add-3281247f6719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af505955-c205-4cb3-87d3-e5088270ffe1", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.241.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e70901d2-271e-4606-84c5-763e82a33eb0", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.241.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--822d6f06-bd2f-4d62-bcf7-8b92870ee088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.124.216.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c7305a6-756a-4ce7-935f-a12a13207b07", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.139.136.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c00741a-c2dc-4acd-b85c-7032cb1a7266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.150.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--175c56ce-fc61-4c07-8d95-2e379d6d41bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.161.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--739c84be-7b25-4f78-8e5f-64ed7bbee9d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.170.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d19c9af1-0aef-459d-a709-e6eb099ce113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.174.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--172e559c-a6bd-460a-88fd-07fde4b170be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.187.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7953ea79-b3de-4c23-b415-25f1f2f788e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.197.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37d37d6-8128-45f3-9448-853ebcb87ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.197.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aac8bdb-3d7c-4edb-b726-902ee2113a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.212.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a8eedb-9c12-4e54-b134-8cfa91c023ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.243.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bbb9b23-401b-41a4-996d-3a737ee925f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd5bab3-f5d9-461f-9663-9bca32288f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f3a593-96bd-4bcd-bb64-ca247ede4b5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c5b95c0-fcfc-42c8-9141-0e4d269330d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed89a86-da77-4cf2-817a-b124016d1a23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a23f43ff-a1dc-4e97-aca5-9ad8ed696cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe93e13-8ab1-45a9-9425-6ef1aba82309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81832378-4712-42ef-98cd-dbdb591e61b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a2dd310-078d-4e12-aafe-2ae23ce01e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da3c1f4-dc01-4451-a647-7dcf379137cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--346f84fe-9d3a-42ef-a674-6d6b3178f99c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.112']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be464bcf-276d-4563-9627-15694a1794f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da1ff5e-0ba7-446e-8238-2dbc7d0d5ce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7537d4ab-fa29-4b74-95a6-a269f0b42fd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b5e913-02e4-47db-8238-3ca6cd4eea1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad22c3f-8d50-4bb0-9b0d-0168f11a970d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb3eec8e-30f8-45cb-8735-63989021dc20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7509da13-816a-484d-b347-1dc3f9f8d323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8a543b-d14d-44c8-8183-e81b1b1a4b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d7aa22-395b-4646-9009-cc19511aa759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a064129-ee96-4353-9455-e234b541b6b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d6447dc-df8a-4c21-8346-db138be03b7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f193e8ac-091f-4b49-9e6a-87788c8d13cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d45c3b-5ea7-45c8-86ca-9c09b8df0b01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ebfdc16-4ff5-439c-88f1-61854dfaffd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db9837b0-4d72-436f-86f9-1675b5845e40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b70f5d54-a8fd-4990-b3ce-0768779972c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07fc7ba1-e860-4e93-aa75-7e091422a86c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.129']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--177afba9-1719-49cf-bb4a-a4d729b6fb7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f4dd990-9fb9-43f8-95cf-0b28c0e91f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.131']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01548647-f38c-4fe6-a9c6-3a693f2391a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f73ca06-35de-453b-965b-5c8be4f8d1dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb0b2ee-0b2e-45df-b7b8-a1240c0c5e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87b63582-ad74-47e7-9819-43b7f5128244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.135']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4fd8fc6-2a1b-4fff-96ad-5111648dbb6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd9d5157-47ed-47ea-bc07-0fed001846cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cd479f4-5869-452b-9f8e-1f42b5605eed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.139']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a9aef2-3b66-4afb-ae25-dbd85211a6d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.14']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5f1a89-fb38-4288-99e1-338d48a31169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--444f0a3e-307a-416a-8c2e-68e43a4a08e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5c112ca-2a6d-4ab1-aafa-b0721a53a8c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a612fd1f-b145-4597-9eec-45d61f506962", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--507cfe34-fed1-46b1-84d4-2e779839e7fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--495e44f2-ff03-4cd0-8ac9-7c79ad8a02d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75e9a3c-415a-491f-b3b7-76ff5f7f7fd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5357c43-6bf0-4c74-b1dc-314a5ceeee81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.147']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa9a04f-24c8-42e4-8c90-4a6df67b9c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f55843-c1ed-47c6-94c8-c0c0343e0217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ece50d-18b2-4e98-8a1d-294aaba91f07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1234d70-49ee-447b-8158-3810b8e49ed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.150']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24b27c9d-58ca-4b3a-a76b-7f7d68054464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fe67db8-2f83-48ec-ad1e-bf9e30c49112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.152']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca7829b-6c32-4117-a763-3f8e5c09e4e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.153']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28117350-3b12-4e49-a2d7-eb76855673bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d827977-1481-45ed-99ec-a4f96a76fdf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddba5cc1-83a6-436f-81a4-f1f7a8ff34c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.156']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f1e869f-f242-4310-94df-85a9565978ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd7e9983-007c-43c6-8783-051d1d00c215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.158']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--048b7792-842f-4d31-a9bb-41b1624789a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.159']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d82a0d-0a44-4231-8342-ba6304195c2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27090e9a-e2a4-4e44-8d54-dcafafc68ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.160']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--765b6260-6b8d-4d92-b8b0-cafbce41f66e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5b3a4b-aaa3-493d-95ca-062bbaf67d4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.162']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce93da6-b02a-4983-9fcc-6796a9113722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.163']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a10245d-281f-439f-8cbc-158c56008b37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.164']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f7e7ac-08d7-4c0d-a320-3fbc6255e234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.165']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe719169-92b4-439f-b14a-6a13a01f6241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.167']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a4fd90e-ee70-4295-82d6-2e23341cbdae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--438af783-e0e0-4909-94c8-731f2bf31128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.169']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6217579f-a317-4b28-9b01-a38e48021cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a432dbf-fa4a-49d2-858d-e4c90597dca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.170']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f866cfda-7cfd-444d-921b-54a2e5ce420c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.171']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0463fe3-3aac-447d-b342-64d150eb9d76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd6edd3-562d-44f9-bf04-284c676aa110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.173']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb40aa3-cab5-4d17-8741-fc7117601a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a6fb7c-7145-476a-adcb-da2df4345779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--930127d1-739b-448a-a496-d787424a66e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.176']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d97d5b48-acac-495d-8c0f-cd8c28b1c43e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec71e075-2af2-4f34-a149-e1fc55a51b64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ba726be-7462-4eb5-b3a0-e4ad21c32622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69cf24fe-50fc-4c3f-9737-52e38e148830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a65717d-82cc-457e-9ebc-5b33e77b5d38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb9c63d-fc12-4dba-8bee-5fc7034843ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.183']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d0a0565-0be2-4792-b744-2ca4bda92a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.185']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e97f53-2709-4144-954d-d6c571b180d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.187']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c349b293-51eb-4383-8630-2dd354e1c7a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.188']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a3d2388-accb-44a6-bfb7-0c27b29ce34b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.189']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23f45959-f117-4a38-8d4d-80825082c87b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4187e43-ce2e-462d-8151-2a9e42fa317e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.190']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649a80d6-9536-44fa-85d6-3ad5266fb5d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d18512a-038a-474e-a244-db09709cb13e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.193']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0587be8d-5191-4f77-a6a5-fcd918ec3151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd1d3ce8-8d32-43ef-ba53-67ade39521d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.195']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01cf16f5-8e7b-4b49-9f7d-b4715abdacaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--702dedff-8020-4719-ad07-cc8b1678e376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f816c75-3af4-42a6-8f87-4c134ceb6cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe887116-3566-437f-bf0f-4ee1a2b752ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.199']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8789fb9-19fd-412a-9f9f-8a26c04bf6c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dec1dfe4-327e-418e-8b57-91741051507f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.200']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--356e8ca7-f659-4241-88aa-c1ff32e66f8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80e25c12-b577-433b-a165-8f7141c0077c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.202']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3474e28-a99e-491d-ad6e-f5e1857dea45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c05af6-28ae-4556-a6d6-b8010f7fb75f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eaff77a-6e76-4077-a844-3997b6cd2d69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49cac457-67bf-4ec6-924c-bc2a1ced9ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.206']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c21790-cfa2-4a61-8b70-227cbdb08113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--172581d2-405b-43fc-9f8b-4112b5c568af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6bc617d-6ea2-4895-81d9-634a490dbb4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74dc2025-86e8-47ef-9989-855bd878abba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e7c158f-eced-4690-91bb-cca73122bc82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49a7bc7-3092-4a52-91c9-f537d56cd1a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.211']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233ff513-d834-470f-809c-eee86f28b2bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c93fa4-1dbc-43b3-97cc-cda445c6ec77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f4424eb-3f84-4a7d-ae8b-2683d6c07276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f9354dd-bec7-4bef-ac7a-45d2112afdae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228b3570-0dc1-42b9-a983-149b508a2499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.216']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1129aba9-da69-4530-864b-04b9ff90938f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.217']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d4f34b-8c51-4b33-890c-2d53670ee9a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd031318-4d60-48e4-8aa3-9f75e0ff6d1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b56ff4-119b-4229-af37-f17d182f02bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--686876c0-0806-4b9b-b052-30f20e17c540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be840fcc-7ac4-4c81-b80f-271f0aa25663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc67cc1e-4365-4dc2-8b55-77bfdcb4d0f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.225']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bc14233-1f9f-4908-852c-429285415307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--334e81a0-b46b-42fd-ae8c-20fc0fcac125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b71edc-e6c8-40ef-a886-1c2fbb32188b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.229']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce786ceb-7593-4e50-bee8-b24127851159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fedef0b0-efde-4025-b508-76829e213c39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.230']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d660ff05-3213-4f5a-8a6a-4a30ba8fa5d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50702e45-c63e-4154-9354-0d6f65ce1f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.232']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0577203b-5297-4d49-8e45-978d86cdfbac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f329af21-6c69-4a01-883c-ece6c067c2c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ebb22c-7d34-48d2-8bbf-08ea2af25634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab634689-faad-48be-b261-d5e3354f3101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef6ed3b-edfa-4cd7-a532-acd8a040a1f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9206e729-cb77-4964-b88d-760334376433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.238']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--312f9a87-518b-497b-8fef-03eccf8f5ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2058e848-4b4f-4715-8103-85de3c0d47ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f37306-0e9d-427a-a661-947b008ba702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.242']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e7a60d-6f76-4389-8d53-3ff303c9cb43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.243']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a177e814-de02-4da1-a359-72650dc64812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a94c58f-0f7a-4abf-9255-4851c8d3c004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d7ce5e6-b6e6-492d-95f1-1d5abe522c24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.246']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--427fe815-3992-4a55-9a10-214012ace5bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa6c883-5fa1-4351-9d38-9af5343fe836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a6f42e1-4662-4cbb-8e33-0dba3396adcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ffc1ca2-171f-44c4-bfd1-1f64a9541e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa935ba9-2090-441e-904d-05ad256441c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760d6a20-fd1b-453a-a856-56ad3baa354f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.253']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ce5e09-3fb1-4ab8-969d-ae18d501e67a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.254']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58106f67-6a26-4eeb-948f-4c838ae5f88b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.255']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6100ec6f-3369-468d-b3a2-195261001959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--678fcd44-f6b3-49db-96b0-9087637363a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca90b58-c45e-448b-8839-bfbf1f1042de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d770def5-e0a8-45f6-a4ad-6e82b5357cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc6a7d18-3800-4ec3-92d8-83e0df410c41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--841487e8-559b-4ef7-b693-491ced11f921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a608a7a-f115-4aa4-b34a-4f24b8b049eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.36']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c76cab-d43d-4f8c-be1e-dfa4e3a971d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3293c19-926c-4444-a0c7-ea6957338da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c96e7b0-dfb4-41d2-a724-8133561b0254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe6567e-1355-4906-80a0-719335e739fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c6b9e7-d257-4ae9-9e05-15d8f2dfb404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c290ca51-8dac-4cbc-962f-812ca6a796f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf9c9c1c-f560-42f7-96b5-d37faaf1b221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.44']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e6aa69-1582-443a-9273-53a71197fd96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac060d3-7573-450a-8683-024e65541803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4456908-03ac-4e6a-88dd-71c33f4e9afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a08a61d9-2da7-4067-88df-8a68aefd4483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.49']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf1080f-f897-4951-8a8c-bde2be786495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41da5415-5c2b-4b96-ad1f-4df8d75ce866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.52']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cb36bfb-96dc-4f8b-b522-8d7a0f1c4b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b2c05ef-d447-48e9-bdc3-284a3e3ba1ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da7209c-a30d-44f1-a47d-0e6199d30fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.55']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--175df841-4aca-43b8-b18c-0e92eb4c4c16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.56']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4adbf638-d0f1-4e69-b5d1-e65f4cea9a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb8e29a-b9fe-4d51-913f-898a97c68a23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2934edd-4a42-4f3c-a07f-f8a57696cf16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.59']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a4b690f-a1f3-466e-9138-92aeeb8897a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeda246e-75f0-4d7e-a1e0-fdbfd7994bc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--220fa65d-febf-4f74-b211-01c7585209d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.62']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--770de3d6-4a9b-4520-8a51-dbfbff520b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.63']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e1d1e95-13e9-408d-b78c-1688d055d603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b5a8a53-3f06-4f66-8a43-c0ec36a0ba60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b614e0f-e8fa-4193-8566-74ccd542d244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d360f231-2b05-40ef-9bc4-f2b8dc854859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c6a1358-83eb-4a5f-9fa8-49412f40d5c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48a65dcf-356b-4cce-b64b-543a6b79e408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91910a05-45db-4d27-b026-b0522fd5bc7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f1d3993-04ee-4355-ae66-4360d4c74b64", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f595e41-3f84-4ff8-a1da-bf505945732c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b057eea5-7181-44ca-b1cd-1735037eb22f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a07d26a6-8042-4c4d-a046-6069dbce7b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f70092-3ef6-4e1c-b73b-a3087eb7cb0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab1618f2-72d2-49ab-81ce-16bb34ca5bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--319d6148-8784-4c34-8f1f-56c21830a081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae95ac43-01ed-48c8-a087-4238b7927c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41822af5-8e8e-4996-9d85-22040802fa7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ac9b4b-ab85-4ae8-af7d-9842d4bb5944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.84']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1392fde4-dfe4-4f31-a627-35b6431e693a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f60985-02a4-4b6b-aedc-33ac8bff6505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--994cac3a-b154-4ce0-9a5c-c47f4316a975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0871b0e-37dd-4d6f-88df-06bdf4dbf1e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7fef8ce-470b-43d5-a286-4cf6a7dba308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a9659d-04cc-4b6a-b923-310dbaf3bdb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7168d1f2-a761-4eee-a04b-2991e215c074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a2232ae-91c4-426c-9fde-746e3c291bce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3eb4a9d-5462-4573-9898-8789cf250a27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f2ac45c-7cfa-4e01-9fc0-b419a310afb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00414df-7ea2-453d-9d7a-8b2bfef5761b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.96']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a4f3139-6c7b-47e4-bb0f-adc59ba540ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.97']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--575b3d02-9383-43c2-99e9-7a1660111ef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1694f406-81c4-4a31-b79f-511bc8433055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b414002-970b-4fe6-974d-ec9ff849ccab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.1']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--648c25b5-8eee-4613-a7a3-6ac1b55946f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce87c2ba-8cb0-42c5-a556-c0618b83467f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45c83bc0-c3dc-4ac9-ac26-42f070d5c53c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b645fd-b188-45b5-86ca-d4a5a9c7f003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6872b8df-4a4d-49c5-9f9b-2261a9880149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66719692-de90-4410-a922-0eb757359eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f57c566-52e2-488b-ac07-14c21db912a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35008ac8-8a52-4c6f-ad5c-4956cd4c3503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.106']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73bbd676-fdad-4ec1-8192-64a3b4c92140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f59471b6-180a-4ed0-ac5e-d35e0e88ae35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fce971a-63bf-4f6b-9d3d-be301a1bd98f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--580e2c7b-ad3d-42c3-83e7-dea7df6d4164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--824fc463-7ebf-4437-b84a-b84e255b38ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f2e428b-b30b-4b5b-a8d6-111b8fb49d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0af57014-82a6-4e89-8090-3aa12e807c71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.112']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2bb4d1-3169-47eb-894f-fd39aa9a1727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58671460-3fa1-4352-9dee-a111f07fa695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--163d8cb8-22ea-4a07-b909-7e9f2701736e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5700f3c-811b-48e2-a041-e25943d1f8d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87acd229-97d3-4488-8bc2-b12e38bfbf57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd88722-2c9e-4fe8-bf44-803e12a30c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6058c714-bf73-4a74-a679-6dc3d95214a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d5b2edd-96ee-4d1e-8f17-b2f247de6027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--826832c1-0c76-428d-b0af-1f179bd2aa7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f9ab78-a0fa-4b75-b29c-bcecb28ce356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26192c65-4420-4342-8080-d425c18507be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--993604c1-1a31-44ee-a8a7-31c18f431d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a244a2a-7349-49f4-a955-dfecfc47af89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f922d3-4507-40f7-b019-e765032de16f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.129']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--546c5955-d911-4d8b-b650-37deab5dad99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94616e73-57cd-4e3b-8612-441734cb6243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.131']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--655d89b3-1606-4b70-bf97-765e485f1d7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cebc6699-c58d-4cc7-aa4e-f20ec798581f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00084eda-ecc9-47c8-be15-e629beb4f90a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d4b15e-5580-4dc5-b9cc-45fecbfe88d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.135']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b969db78-a09a-4e08-93c1-7c63f5c60b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab050869-dbf3-4941-99d3-9250205af573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c00ff51c-eae3-4d8e-9d56-807aab00c847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9676de09-3e13-465e-a50c-b69f038b4615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.139']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae151501-0a24-49bb-933b-1bfc20b44f5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.14']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ef52ef-de91-4480-b2f7-4d6c0edc7c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac16a19-3941-49ea-ab65-f3e7b554e64e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a2186da-20ab-4e3e-9cef-749bd268ce1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c8c52b-b1e1-4c41-a8dc-22a4b8b6834f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81850397-ace2-4cce-b760-6e28678d43bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f77bf6a-285c-4f5e-951b-36e41bd3e3a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.147']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017bf43a-ea33-4e55-81fa-067c6969543b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca474be-136d-4d05-b2a0-766f9f8c5916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e1ec23-b315-47f5-bb57-b7c4203bcdfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e831bd1-01b8-46bb-b559-c563f72c7801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--773df016-6e40-4638-ab17-42a562192cc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69fe66d3-42a1-4ff8-99d4-aa2480997ac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd3cfd1d-1ebd-4538-918b-22f02fc86fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d5dac0-b012-4fd7-9b4d-de3b8b69d9c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.158']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8af7db1-6deb-4fe7-bee1-87f8ccd101c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.159']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--898ae340-45e0-4fcc-9895-5ca5cbaadfb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.160']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a949b6-9e6e-4313-9e77-c28e2e6bbee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc7e059-45ef-4917-8b0f-f87c5e5641d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.162']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69385a09-374a-49c9-a77c-72db71e3a4bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.163']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f1306f9-a76b-481c-837c-87ed514e98f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.165']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--585fec24-7c2f-4d22-a1b3-4f0a0ddbf403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.166']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0293f816-c2af-422d-a2db-5fbaa192d7eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55454b69-3a65-4e22-9921-66c3e7e8db62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.169']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf66d97-1fd7-4370-83ee-f65c92460c1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc94b0a-ecde-4efa-829d-4cd03ea98fd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.170']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c11c780e-db8e-4bc5-9c57-8c7ced0f0591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.171']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f1f2202-38f1-451f-8805-1aa120f040f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ff5a01-6897-4e84-8c4c-a34112206dd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.173']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4738cbf-7cab-4cde-8a20-79588cf4f554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11d3f29d-4a8d-4d47-b1ae-343e70b3f5c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebefd154-4283-4c7c-be8f-63ac2484e7a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.176']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af82e0d9-0c43-4113-9a02-061a1529d6f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f46da84b-346b-41f6-a206-0978230fa4ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--443d1769-cb73-470f-ba64-c9c376fa8739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e625c8-c653-4b5a-8022-d474ec55a1c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63625e37-39a7-4180-bc3f-5872df309177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a257e075-40fe-4e41-938f-a882330cad54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.182']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a70513-2b0d-4beb-a10a-7594b99576a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.183']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--275b3d78-ea79-4595-b3c3-3266da851e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.184']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4b88ff-7e0d-4937-b952-c986aee39997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.185']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af36f918-3d56-45ec-8ffe-6f3b998f1a7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.187']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce2547e-1454-4c54-86ca-dfad99ba9806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.189']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7293d72c-10fa-4974-9499-c43fc3c7925d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.190']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74cc44ab-9b82-492e-9d93-23caf0e01d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.192']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faffaa20-fb00-4552-8a17-a72cd8d31e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.193']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e63eb209-b60e-43a1-be19-7ce82ff94c08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.195']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--775f8dae-beb1-4fef-8966-ded0b8d08ace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a90075e9-f8a7-42f1-9813-82ca895f812b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fc23c70-193d-4278-80e3-9309e0880c37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d0307a6-9312-4ac6-a58f-b058e1dc7470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.199']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30dd1043-5ffa-46ef-aa8e-4d0e62a78cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce14b049-99e0-4ce5-9082-ca5f3877c654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.200']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57284f8b-9414-4013-ad38-07bfbfe03661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a251a52-a2d4-4a2f-a1c9-4c506e6a8c1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.202']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b64161-b0ca-4646-b4c1-a6fa4ee71738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e3b0b65-483c-4ba3-aa10-5b2c38525d61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b11035e5-0b72-410a-87a2-7f251213cf88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.206']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38de8274-2728-4f5f-8027-b74c09f02648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e80a3f1-5e06-4ca4-8449-fc124d54c751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7cb16d1-98be-462a-9577-54700636c82a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23824e7e-160e-452f-ad89-46a2200259d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2793e8aa-ce3f-4a8c-8cfe-ad57e5cb51b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f42124-5d3e-4079-837c-f4f5d7fa6758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5fa5aa-db8f-4e5b-9dd5-6f822503c96a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45aaabbd-ada9-4dc5-a5b9-f1ea71157c97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c039ef9a-bc80-418e-8cd7-ec29baf38f17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.216']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562ef766-6fce-49a7-8bc3-a768d827c4ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.217']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943b37db-2500-4efe-a112-2531f4872cad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--506de894-02bf-4b0a-aa7e-7acec9ee9f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cceb74c-5e2a-4b16-b0fd-bab849c4a4e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aee7fe7-4881-472c-bed4-a46d65a3a72c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b62e23d-4651-4b9c-9bcc-7d1030676d2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3588187f-ddef-46d7-8364-fe5ff56d0775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.222']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d14b292-f6b0-4fd5-b4f3-4092a186ad07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29aa480f-abae-43f3-959a-bb23dfeb5439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.225']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b076e67d-9d95-4b56-8df6-fe7ca73d8c16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb5f95a-b3cf-4fcd-b021-5015a2f89142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7851c110-fb2d-434d-ad04-d54ee56ac2c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf30948-7c46-4b31-98bd-c6cf1c26540d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.229']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9da35b7-2235-4802-a3cd-a27c80627140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc83b6c6-1917-495a-8ccf-eb6ca4955c14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.230']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcc09a3d-2c2a-47e3-a592-44ed72b681ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f37b0c06-339f-49f4-88d7-01dabba297b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.232']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc39373-277d-4f97-9c98-fb8bea83ee14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3209c3d-5a47-4379-b943-761e259af809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e22049-e87b-43a0-9dc1-0559ceb8aed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e9b73cb-2a76-449e-a8b3-19def2486ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde5a52f-54a4-444e-9400-906e74d6a4ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91d54d1-2539-4df0-a3d5-e0d31db25cd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed45f108-bbba-4a34-ba02-b2022b601369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--997c52d8-c566-4d96-ac19-5cfc2dd093cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.240']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed55be1-289f-4c63-8618-176797fe7662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.241']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ffdfe4a-3f9b-43f6-97eb-9c4bc4e7fcd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.243']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9cd053-6b96-4691-aa76-4b8c4bff5ef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e076fb2-cd72-40d6-b119-f2ffbad73ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.246']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ada0cc-aec7-4c25-8998-f71c7bbb639d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d2ff99a-7075-4885-9a69-b055a34b3d4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc19d9e-9e58-4cad-b60d-48d48dfda376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.249']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b4967a-896f-40b5-a325-90114d8f1753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ee9ac36-f39a-4bbb-81e3-8a3d082d8fce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.250']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c83b734d-9c7c-459b-90f4-b7c9caf8dfba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b7751a6-6c9b-4e88-a24a-5c25209cc725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.253']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50916eb5-183a-4d71-a3ce-593b479d8757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.254']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--566017ec-79ac-49b9-9915-9cd13d7f815e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.255']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3284bc08-5138-4ef6-b285-4a9a6071ac1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4606401a-9d2b-43b1-a010-1d0ba3f5c83e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--056d65c6-966e-4013-affa-3faf4127eede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--044aab60-1298-4d67-a9a9-a448e861c300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541c8231-7cf3-4b0d-a48e-2b8151cbbe8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df68dab8-f102-4423-b914-1f2fe58092e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7242ffc2-7fcb-4b0c-87dc-10ee89537449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb178407-e318-4ce9-92e3-79c53c7104a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26ffc86f-51c6-458b-b030-448ca13304e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9564e6ee-9d45-4d47-bea0-876efd56ca12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eaf0ff7-375c-4409-8329-932fec67528f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eaddcc1-f01b-4c9a-a344-0a96a8775f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f75831c-55c7-4a25-ad81-2776af19ec9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1a2f6d3-dc3f-4a27-9a01-bbbf3adf5a10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67431269-2710-41c4-b884-e6c78f7f74e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57603c5e-6631-44d1-a4e8-58454cf52240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34e0ad97-be4c-4405-bc31-06ddc4f1a273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ab8287-4601-4e33-859f-dda9204deb3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.48']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71376a87-8c0c-42e3-ae24-5a6c9c0162f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.49']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4f2269-1910-43c5-a181-b3634ac396e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--915372ad-0776-4fb0-97e0-26edb8d781d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8881221d-a6de-4e8b-b1e5-c4a9d760ea06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.51']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8bcba34-c50c-4b6c-9384-0b11795eec3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.52']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19611dd7-309a-4b8c-98fc-eaceeeba0ab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4411eab1-773c-4721-a7ee-7ef2588f16c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.55']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f40d92cd-8cb3-4159-80e5-22efd2a7a16e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.56']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd01f7fa-2ecf-4b11-aa91-44236fd91696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad25f59c-71b3-4ed4-8dc4-1fc3126f9272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.59']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f7f560a-893d-4b78-a1da-9ff662d8fbcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de4e93bd-6c8d-4d2e-8216-36575c6a42cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e39d7f3-4588-4cf2-b915-36e00408a5f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad167c1e-9466-4551-86ca-361d48394598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.62']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7703a17-8310-4a80-a52e-8b37b756543e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.63']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3802cec-d0b3-4498-8ea7-5fc6b0e425ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff07fae-0545-422a-910b-42baad6f7fb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce2f9b84-44b6-43d5-9aee-ad87cbac4e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9b35f9-5020-412a-bfa6-df2481c1df02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c8fd881-7543-4065-bcac-7d36c919765e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--323d70fe-bdba-4dfb-9c91-16f8d04f285f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2340ab9-68e6-4a9f-a665-0fe7278d335c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e24536-970e-45cc-aadf-52da8f9a98b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8cbc556-3d40-49fb-8f29-c8f2cb112c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a980274f-29f4-409e-9244-33cefe1f05df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2177c83-5135-434d-af2e-09216e62c58d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f09da9f1-b2a0-4f0c-89c5-94a47097fefd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e3bbc37-9862-42a2-bb66-18a9770eff1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0687e78a-49cc-432c-9ca1-d92c8fd60f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a63b2c4f-6781-413f-999b-4444e184acf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01f35f04-07ad-47df-abf6-ac40febf428f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92764fe-9330-4561-af80-f26b01d2f3fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45846158-f745-4687-acf4-a89a23fb3e20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.84']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e40dba-e76e-4eb3-9194-da2d7739df18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--268df560-6d1b-414f-9992-8835f85d71ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe465aa6-d69f-4c26-99f0-d534afd94e4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ba8e04-408f-47fa-8ae9-72a44af64d4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7304df5b-6d97-4a18-9607-7f869315f52c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34b743ac-ac40-4ab5-9d74-52aea1acb138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da6319ef-401a-4cde-8218-bffddb16d6fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cbbcb32-1a6f-4166-8c45-9134028de013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78130b31-66f8-40b1-ae32-d3b999cd170b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.96']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9183cc0c-bad1-403e-a3ec-85a01a99f229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.97']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1461636c-bad6-4ed8-abe9-22ca438f2482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3ac3fcb-b38d-4cf9-b37b-cffa87b4f45a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.197.250']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab9e6f6a-90e7-45f7-b9bb-7a61322d5bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.199.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9faafb82-0358-46a2-8b1f-d539f36f1030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.211.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62d8ed6a-b6a0-49c5-9701-60ea627bd3e3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.50.227.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f064cf1-84b8-4fa7-a308-6f93961d378f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.50.229.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d218ce-7f25-4308-b9b0-0e1b567cc437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.101.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c9d2404-55d6-4449-a1e1-f9b7bb1a0a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.103.82.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf788af-452b-44bf-b7f5-e2be4a4093b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.160.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d07c543f-52a6-4b58-9ce1-9a6f91d242ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.190.153']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e33b5fd-b99f-45ec-94c8-4514f41e54df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.201.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91db0617-ac5d-42e8-aa69-6946a90a73bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.221.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31122160-6a48-4e79-a0c6-99dbb7c20280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6007cef9-c595-432c-9e94-35b80aa93541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.224']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85b1ecca-6b3a-4e9f-89e3-9ed24177b9aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.246']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5258c19-6050-4477-89dd-66c3c75add72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.254']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08115141-940b-44ba-922d-775ff7e55ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.170']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d1bbf0c-b1e6-4c60-acee-9cf6a7c7752c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7865e9bf-9ae6-4b3f-b950-1c3d144660be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.216.108.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44094e7c-cb66-48f2-82ef-7077e6f90e3c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.66.111.1']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e64d1e-3267-4f40-9374-19da924f80aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.109.125.129']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c9a5a67-7478-4fe6-9c42-0488a803a4ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.19.175.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af12230e-fcf5-4ee3-8a38-daa59965d4f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.28.250.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--755a25a2-7269-47b2-ba37-f7c8225f3660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.30.138.167']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a93a54-a845-4797-9739-b30823f9a9f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.86.151.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052eac13-4c75-44ff-a407-99f5084f0d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.157.135.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95be5c2-5f3c-4d05-9505-cb87960426cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.163.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f52c38e-7d25-4302-9d29-b93922d7bc95", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.165.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--488cfd1e-b036-41a5-ac7b-ce8d35424602", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.184.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e48a477-ad2f-4793-ad08-104b5369435e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.151.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--906a4c82-898b-4ccc-9507-8631dae2e598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b2c1660-aa7c-4aa1-a9e6-e40d8c2a66ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c852733-0c6e-49fc-8864-65da4a482636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a35bbe4-c79f-4450-8238-892bd42fd311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79be464d-ad2b-412e-89de-622da92ee8b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--684711b9-d652-463f-ad14-e36c6cd3e0c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c60f060-8bf4-4693-8970-e749a670d92c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19befd5e-35ef-46f9-9ab5-f24f6e46ace8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.242']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--614b5183-a9ec-477f-ae10-43e2ed50d8dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.243']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--742c8ed3-9961-4d48-bb33-f835b883741e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99cd0d59-7d8c-46bf-b294-bfe23c661e71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfcc68f1-68bb-4693-856d-a08b97a1a1b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42245738-0ca5-45bf-95c1-722a9cb3fb9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.112']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91dae04b-5494-4a83-892c-b83260438433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a47cc48c-0b52-4835-a973-35e25ec193ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f518a70-8d3d-4136-9393-55e94ad14195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c75007-ff04-4594-9dff-9154b8b50ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb7d622-61b4-47c6-a81f-56d2b6804826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b05e2a7-236c-4831-b927-c8d4a3fe25ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af85a6d4-b511-4685-875f-85b7d4aa1cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8b9c77-35a5-4760-b224-874ccb43ea48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.156']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1cbb5da-5d13-4ad6-8a3f-86b250cfd344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.160']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e074de-bd30-41f2-835d-480e73dc1872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1020e2f-eda9-4b5b-a5bf-d396a4d521bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.162']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9556ed5-eb13-42e3-88bf-fce1c830caeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.163']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ddee7c-5bf9-43cb-bd59-4fa2135dfdc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a523f35f-beef-4603-899d-ac798d493af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.173']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a3b49b-7d1d-43a5-8bef-a4d0f026ba02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d341b8-dd4b-456a-9d79-49e94b92b68a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.176']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--306eb9ec-239f-4779-a544-53a0d8211c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab0599cc-3058-4c11-9f28-b626c397c240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef58690-0619-4704-baa7-e27df683838e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.184']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc28324c-1bcb-4c04-8136-f7c342a185c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.186']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c7102c8-77a4-4f34-a088-150c8549aed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec1d636-d400-40a9-9d22-af92c1a5eb78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d5b511d-8f06-41cc-adfd-3f58dcd38dba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30924984-c383-46cb-82e7-cb96adba42b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf14492-f137-4bcb-bef2-f3cb3fe9abc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.200']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--379073f6-74a3-4839-89f8-942b3dca6262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afcb29a0-fd82-4aaa-aa50-67343567ef5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05994315-63dd-4b8b-859d-71239877c412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44583a76-40e7-4bf8-92b6-9f03532facd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.217']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e87cd01-c3b9-4738-bf02-f4e3ef5ba00e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d327f7a7-c186-4b5b-821b-1aa9a722fa7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f49429-1d6c-45bc-a5ae-d89ce1b6e2e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.240']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd7e61aa-1ee3-418a-a63a-9a58bd96678b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e218072d-0123-4216-a868-c4c94966157b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.249']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9825c922-2fd8-40ef-a852-fbaca82979fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--664b4570-9a97-473b-ad30-7b3cd7f75ff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d46bad2-407e-445a-86a5-6d809c39cb6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.254']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e027e57-3aae-4ef4-ad9a-7069bc9ad7a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf46742f-6d4c-4275-9fe4-cfb3e677f5b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f28ea23-3fb9-4aba-b49f-1d7bea8db78e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b470c155-adb8-479b-b829-75187c285ce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64023d15-621c-4718-8fc1-f837df3fba4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f2ea0a9-5a7a-46ef-8c9a-07af54df0201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c316277-88e8-482e-9eaf-6932a9b124eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b23e918e-1dad-4853-b57f-637420c81ef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9aebf5a-1027-41f7-910c-716f30154686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7687b3-5d2e-4a24-be15-00110b07cd0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc7f03a1-cf8e-4afe-b5f9-facf20315d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c2b3c1d-e296-4f25-82d2-9a3b176c4e62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--887d7d35-a47a-4423-92f9-4caad084a10f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.139.201.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--896cb3d5-8ae1-428a-8c8a-79a021c9685a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.221.241.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2689ef87-7aa4-44cf-9ed4-bcec1d6ec5a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.228.105.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd219ae-8c50-4623-9f82-9a98bda37092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.228.105.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--433c08df-c0a5-4811-a3c5-8b8bbb9496a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.228.105.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a110a6d-0f79-486f-8151-37b24199466d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.228.105.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56ef779-1674-43db-9567-4438cef6aa0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.228.105.55']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a23ea9d1-3d3f-4783-8ce0-e1d748cf8d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.228.105.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd339be-3fb3-43e8-9657-53cb8afa148b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.228.105.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bef626cc-0fa6-4918-88ce-9be77442d34f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.228.224.189']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e03b603a-de6b-4480-b161-8f93ced5ea12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.228.225.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2544ed2c-d946-472d-8d77-607e666d5a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.255.249.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a2a684-1aef-4ce8-b24b-135e8d50f7cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.255.25.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b3b7cf0-5466-4832-a50c-210e9026d24b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.255.88.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a3cc6a-dcc9-486b-8ccf-b67d76a0f9c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.95.80.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72b7692a-0489-4188-b99c-1ca79004d96f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.115.62.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c9d0fb2-ad51-489f-a825-e568da367ea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.1.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86fd1217-5dcc-49ea-b85b-3b47015ffe36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.244.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8dac1a-d805-4f1f-9758-4bc2f17efcc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.236.7.230']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b8369c-f9fb-4427-a676-38f0ecdb6f57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.240.63.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e20a91ce-07a2-48ba-9ed4-7691b70fe084", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.242.63.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ce7509-22f7-4711-8cb3-2aca075e96b8", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.75.127.206']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58cb81ef-fb49-4e99-93c1-afd27e2b89a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.228.163.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f98630c6-7f27-4f7d-87c3-ef8486298805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.233.19.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdd8d2ff-95bb-4130-a7ff-6e2b49a54bec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.237.102.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eb7bf7a-0f22-4c73-85aa-a89dc23446e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--597e4bb3-6507-48d9-b934-1d1c01449040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00fcc2e7-3419-4099-961b-e7a2022d18ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea628891-5c60-4e1e-b526-175894027a24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.129.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5df67f-57cf-43a5-9144-8571e60a770b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.129.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fa5851e-f98d-4fd9-aa92-d19cdbfda268", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.129.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaafa55f-b7a3-4b94-bde9-d3dd22e4d853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.131.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0779bbff-cc40-47ac-97e3-05c76733cd9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.132.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf7be62-6176-45ec-bb33-222110659902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.132.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--682c7db5-49df-4b12-9a3e-3f25bb949946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.133.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7730559b-e40f-4f5f-8fde-82902e636c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.166']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c29d9e-962d-4e32-b777-aa4d91d68ae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a64241d-39a1-442d-a496-658932a37c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.48']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed143835-9431-4393-b392-e6309c2c6f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.139.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ad0950-da72-479b-8acd-53eb40d0427e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.206']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c47820a-7dc1-4bdd-b426-852de9e7533a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03589d62-814e-4141-8695-347279228cf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bd4183c-6b0c-442d-b784-320341823e71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f20fec-2451-43d4-9ba5-393a6cd61ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541f5c50-7ccc-4400-8490-7ec4b8c5f07f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.176']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d58782-2380-426f-a2d5-af7372e2238c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b8098e9-cabb-4215-9f8a-15dc463c3dce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.217']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e43437-1c73-469f-9e71-d59b66f23f66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b1626d-644f-40ac-9921-7d3981edf519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c0a62d-beb2-4577-aee2-01cdeb2ab12d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b754f6d5-4e7f-4a63-a7a1-bcc54437a9ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.188']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed885f96-ff43-473c-a8d3-561f2769c52b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--792d4f43-b9ac-4314-9258-3032ca379d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.189']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147147f0-6265-4e5f-a51d-563046dc610f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e18d5ee-4591-4610-8c5b-6f111c378f37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.146.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31163e7a-4ab6-4046-b361-947dc9ab254d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.147.106']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c416378-b836-4c5e-8aca-ab88ff5b783c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bffe3d15-f52c-4065-b19e-7eb6cd7a1ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.250']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc5ac47-f2a7-4913-a3ab-04cabef96266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ab41c3b-bdb2-4b66-9ef6-44e908e425fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d263c0-93a3-4add-b8aa-fc9c6901235a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1bcf288-4287-4b77-888f-054c5bae1a3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ab3db7-cb1f-4e9e-80e0-2801abef04b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65b57b5f-43e6-4f9b-8c2a-7bb5106286be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a364ee18-7b26-4333-af5a-45fb9657de09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.173']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d80f14b3-b748-46a8-8c3c-5f418c2d6210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--753c19a2-c132-412c-80db-a2b1ad326825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4ae539-4e41-433b-9479-dabb4e3124a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e6d008-7927-42f7-9398-31c13b59b2b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.160.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e76a26e9-221e-4e3e-a239-7ce6d7c9eab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.168.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2481796-aa2c-462d-a0fe-07bfdd51dc7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b9b334-8c00-4ba5-a918-0020ad6a76b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--969c089b-d0db-4b7d-9a97-f1e913750fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.170.230']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae4767c-b465-44a1-b59f-5e354025a26d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.171.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc7e4297-d751-43e3-87c0-193b34a5307d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.173.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99dfb8d8-a670-4052-b90e-e92cce9bd4b1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.174.171']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40463d11-21ad-471f-89ae-9a7ca27855f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.180.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7852896-c5a9-47a1-88d8-5df405760219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.182.165']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d11f2da-2816-4c94-b6f9-81acae4d68ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a336d71a-0973-496c-9896-32505f12ba6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa4f8b6-6a5b-41b6-9c6e-13409db09d85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a18e9ec-de19-4a22-9a9c-15707e9370b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79135fc7-58c5-4f77-a936-5f4e652ddd42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--349f0d80-fae4-414d-8a3f-d48c31a0e840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.185.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2de52d-7e58-4d61-a94d-6cfbc93717e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.186.240']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ba5234-77d9-44ea-9c49-0d814956ad78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.188.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a473a26b-1d35-4248-bee2-0cc6ff29da39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.191.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bfc36e2-fcdf-4009-ae6b-cd918b9097b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a46086-a929-413a-8c2b-7db73f58bf74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.112']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4787a1b2-b603-4147-ac31-e1e4c3d5ffd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--418bebe1-f8e2-46d3-9741-df699e10ac3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b502e8-ec05-41ac-955b-b5eb47fc7b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a82fada-c6ee-42fc-bd5c-0ff7b9c383bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.243']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1d9b0c-bbca-40f1-aad1-ad5ca56fa810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.217']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65ebcab6-a6a1-4cf2-b0da-61c7ac30fd64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7327950e-9bcd-41c8-ad6b-9b10f587348b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396392af-0a46-47c0-be54-e972f727f088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36005686-1668-4c09-ae45-58a2e440b907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.250']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b110ca39-1710-4364-9afd-e5daf3e7d0b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.203.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef5f050-facf-4ef4-8849-c6d633785e72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.184']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc08ba7-02ad-4a97-bfa8-904e7da644f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.193']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e8d3e1-8a3e-475d-a5bb-350422218e4b", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.206']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c84aa83-140c-4408-9c7c-73dde9ac7deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf4a857-4ddf-4902-b711-b1b96a9102b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1fe14a5-58c6-440b-b7f7-b6dc1686ead8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35164766-e831-44b4-8b57-9303f233b6bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a02b486d-7948-4d85-964d-bf6ee8047f60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba7f654-fa4f-41ab-9bdb-06bed9b7f4ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b94faea5-7cc0-4040-84b0-e181c6cc86c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00a267cf-77bf-4ed5-b6df-8fe470fff893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.229']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4fff623-f4e2-4412-86c8-767da72d972c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f54100b2-0f38-492a-a387-d0a1654f16f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd53b7f9-0c78-496d-8eef-18acaa069180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.169']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c73218-fcec-474b-8b5b-a7a157f80091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c19a36f7-8355-4af0-b6c5-ee1939890233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.209.62']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7788690d-ef72-431d-9896-9d7208ef5892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.211.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bde1c0bc-4394-4e65-9821-83c58d6a2748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3dc5bee-0a1a-4e9a-8e74-584c2e88992e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.224']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b4fd1f-f43f-43da-8dc5-1f4a2b11367f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f0240b-d077-4e45-b292-74908dd8c32a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b1907ff-5298-4025-8e6f-08156424f436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0875a4af-a96e-4dd3-91b4-929a034767c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.224']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8074b17f-bb70-441d-9447-6685a8d90222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3fbec08-e7d9-472e-84b3-6308095ef8a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.217.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6433381f-c765-4311-95ed-66136a45c8ec", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.218.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8cf1742-55b3-4c47-b65a-087d252cb08d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.218.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3fb3c27-d9a2-44b8-be23-2df42a9a3684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ecb8039-72d3-4fea-b6ec-259a5fda9cc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b3c0909-e79f-403e-bb53-d6f09f9ed5cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8794bd5-f7aa-4483-8901-4a5f0e60e2b0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27bd6ae6-f36a-40e2-a8df-57dd4ef66d10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e8e59d-9d81-48e5-8235-6fadcf83cc25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316a30c2-c642-4047-81ce-58c8bec4a68c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64b5afd3-f344-4030-99a2-156fcdc959b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.36']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54cf8810-7082-450b-b87c-8cd4ab48960a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.184']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ec41ba-304d-44f4-a608-a6bd54ee63e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04a3ad56-cae3-4b59-b9c3-0bfb62938344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.97']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a9655c-a01f-491c-9bd7-a43252381a49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ea5eb9-7864-44b5-ada7-8aed6139a715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.160']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c31aaea-8ea9-4d66-8b7d-d08f8e50f5c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.36']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be1c3ce4-489d-48ee-8dd1-f56606b2a090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3851435-d8f7-4e70-bd32-bf635614cd9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2ccca6-c9af-4b88-89b0-4f979b429c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade3ce73-37fe-4a10-8cac-0ac4ea9dc143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca319c5a-c33c-40fc-b0f4-dfbb575db295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d62defe-bd50-4db8-a137-00eba87b45ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.239.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac82a433-b2ff-45ed-8b65-b8ae14c3db70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99d9a498-7c2f-4190-84d2-7464fe410640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d15ac951-3dfa-4fc6-afd6-b6e1f5bf21cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba74db3-df71-41b7-8705-95d1d32bfe9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.252.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2699027a-27cd-4d94-9db1-77f9701dae5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.255.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4addf30-cb0e-47cc-84ef-e27e013ed76b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.134.106']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed464f3-88f5-4104-9a10-29ec83b29573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.135.195']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a500e5-c946-4dab-a2c4-738479755d01", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.160.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46c7d9ab-22ae-439e-a01f-31752eaac2f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.212.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e83d38b1-2ecd-4ce9-aa72-e74c913e6a04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.247.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df2db165-61ad-44de-b4a1-4f3062399177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.191.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d9900d-ba8e-4e9c-8e72-174e5bc45822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.22.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b049aff4-db61-4064-918e-ae79ddfe5ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.3.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e188ce74-3d6d-47d6-aefe-cb8b38f5c803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.58.97.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--663758df-adc3-47c2-97c5-979713db5e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.59.36.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf4c98b-2d46-4de4-9743-3dedf3193ba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.59.80.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1af3e1b-96de-4e75-831b-9a2eeffb943e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.59.87.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d8371bc-e3d4-45df-aada-5d311c18fe42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.0.86.135']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58674465-4534-4a5f-a334-dace89aa030b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.1.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9467292-e5cd-48a6-952c-b503b6b2045d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.127.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f303af9-4b0b-4468-af41-5d693a08b85a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.13.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3591946-68af-4e4e-9ba4-0b6e211cee3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.15.242']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab3c413-1c90-440d-8926-a6a7d7cbf1bc", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.80.240.216']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a6acdba-155f-4487-887d-e839e5adaf63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.0.30.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70dc0ed4-ec37-4ccb-bb2d-91fe8afbe8a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.14.23.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb9d60b-4e87-431f-9028-1884ff69c1db", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.146.235.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a079fba-6822-4d70-92a0-07682c8aabbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.115.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f01d2e-c425-4f7a-a2ce-0b2612bb298c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.119.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0146c058-48ab-4409-a07d-a239d9302ab0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.146.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dace035-966b-4626-b120-caf0069cabbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.177.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b08cfd26-43c3-411b-bcae-adbc0e1ff4fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.180.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee40cedf-5199-429a-b7bc-38cbc8b0962a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.180.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f516103c-e7c9-4f4d-8b41-64925cdd07b2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.194.251.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce0610d-e6b7-49ed-a888-dc181673850c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d3c1c2-d796-430b-8255-72f6410aaa36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fae84a8-73e6-4b3d-a1bc-bce38d1a855a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c9333a-b3da-435e-a941-0325102d2cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae1ecc88-3da4-48e2-8b07-fe9146dd8bf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be0180a0-d435-493a-8737-6a3f721031b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e26ca0e-3a12-4fa3-ba1d-f6c9bb8b0895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8cd27b-ee4c-429e-8277-e58df4e25281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--653eeca5-189e-4e90-991c-9f2fcfe36f74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58cd184-8156-4e04-bb91-6e6a44f8116e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.56']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d28bde-591c-4628-9784-85af31607fcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--702d5535-65be-439a-a332-f45f244c36f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed735336-bd13-456f-9865-815c8f65b20b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.241.77.51']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--672996bc-9d35-4c6f-9681-21fca7f04538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.57.212.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f328f00e-4100-4d6c-846d-dddb2a3f6662", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.81.14.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b56836a-65e9-4a33-b42e-150f94f9cbff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eefcd8d5-32d1-4460-b429-fe688afe0c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--703dfa03-61ff-4678-907d-5537821037b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf45494-a0bb-486e-b072-8de127d24d0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0179bad-8c81-49cc-b3a7-8fed09473d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e1f562-4c46-4174-b629-0e9a0f45d27e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ca1d95-accc-4e25-881f-ca1e17561957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cd1fe5f-c323-4c69-8618-c700e699dc69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a9d9c9b-fb20-44e0-957c-dba1ad6af8c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.14']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1163d50d-30ef-440c-81e4-4b3cba3d7227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--018ee9c0-12e5-4fbd-8535-3b215cead98c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac77201f-aa8b-4dd2-bc56-12fac9d2574e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--003d04bf-e954-482f-bd4f-a15e44049ac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d773f2-96fd-4eef-ad52-39f1fb2096d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.164']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3704bb8c-5087-45bd-a9e3-6e7d97ba647f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.167']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8df69f4-a505-4c27-8e00-5069d312246d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.169']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf5d0245-ce95-44f9-8eff-ad05bf2350f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61036960-d6a0-431e-805a-19ed519d6316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e098d262-dfa4-44fc-ba80-5d48b004e915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dda5bea-c390-4511-bf3a-122520075e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9019efe1-f2a6-44b8-930d-ed9d6ffd6295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--433c8532-6576-4f8a-bdb1-f748add7dbf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.36']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6feca58-1f15-4d02-b503-a3679c4e7fb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91be8804-955c-49a0-b3fd-861951e610a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--603ed87f-2d52-44db-af42-26532030e44c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f24b7a-692c-4a46-8317-7dc8b08443bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.56']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b078f24-58b3-4740-b7f8-dc214300f08e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f98261d2-0c29-43e2-8209-428748740d06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc6d363-ba5b-4d6e-adde-aa34ffd4f8a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d02c34-7502-493e-ae84-342739d54553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--089e2e1e-3814-49af-b38c-2c5e4c2e3f05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--503b4f92-b83b-4651-9099-ef69b57ee896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c76344-6669-4f97-b9b3-2c55abf28795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38ad61a-e914-4831-9931-77a221289f0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58866f3-43e8-445b-b6fd-c2a89825c628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d87bd7-f9c4-476f-96c0-afea3fbdf705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b3effbd-0341-43a8-a978-4ff9a78fd624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.96']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90403eb7-46b6-4f0a-9d67-1e9607853f8b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.214.168.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e68b5e9-1f21-48dd-86e2-10348f4f38d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.216.225.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91cfb7f5-0ca8-48d4-a749-e6ce0623d0c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.229.163.164']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5782832c-535d-4dd5-8269-e756a5229cd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.233.229.139']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21a0b8a-f118-4d3b-8856-c1baeb955006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.238.249.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8af6323-fd36-4f8c-ac45-f5d78d9e0389", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.245.205.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b855d474-aceb-4d91-8c81-de568ee05674", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.245.205.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c7dac6-f055-4d3f-8042-25a2046f37cd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.245.205.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f006bf12-fd1f-46d1-b7c8-6bdd3156845c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.255.1.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae09e37-0acf-4a36-9a55-1db3eae59690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.0.0.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ab42336-87c1-47ef-8f95-b6a28ef9d77a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.15.40.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afb2eb4a-ddef-4a62-958e-71419fe185e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.173.100.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edd84265-1b21-4089-a220-f35e4d572f1f", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.12.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57a861f3-4896-4b15-ac94-15b0f96be691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.167.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0842201-739b-4281-9408-b1a3101748c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.178.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa3d1c0-8fdc-4aeb-b987-1587616755c0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.18.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e781a54-e709-4be8-903d-f16a7f5d1a8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.216.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21804636-9404-4029-a7fb-bf9ccc9bad13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.235.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37f8142-1d72-4bee-b0a1-43c51cbf283a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.57.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0627301-6036-4919-b35f-24f1c7c753e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.91.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eebe84f1-67d8-4616-a0bc-c8cee0fcc534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.127.1']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--179cc602-1ba0-4b5a-8806-49a32a78bb75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.133.195']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd35c995-36f0-4366-b16f-3b16abe4eec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.162.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dcc83f6-a0e0-47b5-a932-2434385a46a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.189.182']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c81cde-7b1b-4db9-9e05-9f82be47f982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.229.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8067f468-7199-45fd-af3f-ec39fcf810c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.244.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc7bc51-f361-4d29-a682-8dac07d08aba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.245.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc33f269-5ea7-48be-a47a-7b0b6c0b9e13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.248.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f51e990-d846-467d-a1d9-953dcad630ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.38.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be9a7f1-83be-4499-b2e8-414ae4efecdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.80.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7361df1-628c-45ac-8677-24b089023add", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.255.22.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58288f24-32e7-4910-9d2e-aa0a5ea7b103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.34.76.131']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c0cbe7-d34e-42ce-bde5-cbfc065788eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.49.175.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53642a4a-6115-48a4-a5c5-0e23c19d609b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.51.120.135']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36e25bb-7065-451c-8d76-6cb54182645e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.51.15.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f7b0d62-053d-447c-874b-b48f667179e7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b1d33fe-6f6b-4bdb-bfc4-ab5e3693708c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.14']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e5060fe-007c-4e9b-b305-a5d03d8a390a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.192']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d260e793-4f1a-4e6b-8cfd-b2bed0ffd2dd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.195']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bc9e658-9153-4c12-b1fc-4a3593522133", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e629eb3c-8668-4059-9895-18eae20c94f8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.200']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3946331d-6952-42ff-9148-44fccdb1dd8a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d077c3-c088-44fa-8881-9ee2542f5ec2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--810991ab-9341-4da9-a26c-b05e050d4ec6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec5fd6b-f452-4106-89fd-11404f5ae4d4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d518c1aa-712a-4af4-8023-9d16ca5dca94", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--573da8ab-eb11-4385-abf1-a7210b726e87", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.66.172.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c4c0c5-43cc-44de-9687-0c198cef64b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.85.209.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d5789a-4662-4f93-8576-6b9c8ef6ce92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.85.220.1']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54349c94-dd7d-4e17-89c6-845eec47d740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.178.224.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--471c629c-f8cb-4c48-b423-d0a4e7a3dc49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.180.87.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--512c41ce-cb3e-4f84-967f-a660c05e7d76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.41.182.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c3633ad-2c32-45cc-8c3e-17bf60beecb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.58.133.185']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0801105c-24cc-4808-beb4-63c9382923af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.69.227.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05a35857-4032-41d7-b223-05b9a66e7082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26aad55e-b5ee-41ce-bb2e-7ad0d236610f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7176a89a-dbb5-4c62-8cb3-8ec371154a02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.208.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c07c65-6b3c-464a-826b-a69d6f461ab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.209.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb3ff7d-25e9-477d-99de-d14aa27177fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.210.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d33826-1b62-4d4f-b54e-aac7f053081a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.211.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15cf4fbb-649d-456d-ba3d-ef1f02a33b1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.211.49']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee1bc7c-de07-4695-abc8-86747afb9fa6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.195.21.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--361e443d-4506-46ba-8bbd-aa8197c6a79e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.20.106.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39505c38-b9ee-47b6-96d8-426feef7437e", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.189.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6dee27d-279a-4de9-a78d-53f64b9343aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.28.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c64707-3b01-41d5-88f2-a4a536b4d1e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.3.1']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f482acab-3317-40ee-972a-5bcee5dfedb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.31.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af53cf33-798e-40aa-ae5c-913d56fa9010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.38.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5509cc81-8992-40c0-8146-b4e6e8ca336f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.38.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c196553-8689-42ea-8065-fd693049c915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.41.182']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b9e3e1-b815-4f6e-88fa-511bbd7967f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.42.232']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4d7524e-e949-42f8-b75e-15a67ae82819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.58.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756ee8f1-1aff-4d97-9a12-971e1a12c474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.88.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce1d31c7-b885-48c5-b3a0-4e08013dc678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.92.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d4a29b0-fde2-4353-a95c-49e963655aa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.119.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b665227b-9e32-48e5-af2b-b6382b42b129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.12.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf29e5ba-52e8-445c-a576-5338a387b07d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.125.202']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9814f65b-c967-4393-a2ef-5342cc2d6104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.153.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb23e80-28de-4b46-9d3b-bb20b2c413a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.156.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--918a46b1-b174-4063-85fb-d0f8587b7544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.159.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c46e5d6f-63fc-499a-a543-1b27e10edd13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.171.169']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f616e027-6b0e-4ba0-8824-24d4316d39d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.171.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8659575-5c98-4c01-afc3-390ebefb1c71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.203.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24b6d9f5-c442-485c-854d-49836ec8733e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.212.63']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0c25d8-e96d-430b-a7ac-f9132c1c524c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.217.240']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3386f6f9-5483-46b3-81fc-0840014c3027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.224.206']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e7797c-9317-4d4e-9566-ca76b961d57d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.238.255']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6220bd71-4fb3-465c-8429-39e5543d0f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.26.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a876d58-ced8-4542-aa46-9af884c51f97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.28.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a4ae82-24a5-44ef-9a00-5af8e1586700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.36.55']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af82a4b5-e325-4cfe-abfa-2706966bfbd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.89.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a16cf19a-fc6c-4a12-9f80-8322161f269c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.137.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bbd8248-d782-4a51-943a-46917a81fd44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.157.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--761f39a8-bdfe-4001-85c0-36a3063b5315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.173.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef20faff-6248-40c3-a980-651103691ace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.191.190']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd64c015-5de2-4dea-a3c7-4278a92b41f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.191.222']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ab86e5-aac4-493d-8b94-fa869dcf6383", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.198.253']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04a37f48-444f-45c9-824a-8425b5cda117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.232.184']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7042c7a-d59f-417d-aff9-46b8670f9de8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.63.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--309b2b2c-beff-40c5-af28-39394a7570a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.68.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89f19f06-157d-406e-b2af-61b25d120e82", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.84.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07319128-4d9e-4b2d-b369-e99bd85beb9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.91.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec7da4f-5dba-458d-83ad-72b74d99c43d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.12.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f9d7658-4cd3-4b69-ad01-b51cf5e890e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.125.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c37b2f32-e7cd-4c79-abeb-147b567518ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.181.63']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cee282f-b703-4aef-b3d2-4c77fe8b7acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.226.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06469282-05c5-472d-bf28-a6ac8b447886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.31.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7295ce-ed4d-4371-9297-a176cc7b673e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.33.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4bc6d5c-de91-4d0d-b691-647269690c35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.34.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb6376d7-d0e5-4de9-908c-7608ddc19840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.34.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd28d0c-81e0-47cb-8480-f233f05e9f70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.35.14']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a745bfe5-5bd6-4fbb-87e8-a20ced56a619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.176.125.246']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bf2bc06-8d2a-4716-b2d7-707fb6de2e08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.69.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9a70f2b-8291-45fe-a465-80ecd76f12bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd2bf981-c9e5-4d10-8b75-56a7d585b650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e648e88-dc62-41a3-8ea6-c212c999a4b4", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b36ae7f-f3a0-49f2-8a74-e7b2897fefdf", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c00f4ae-adf4-455b-806b-668b84bdea80", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.179.83.192']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3353aeec-02ce-479f-83ce-aa3910b7a251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.187.229.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--363bdc22-318d-436b-ac28-2dccca2b7c0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.22.72.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1ad282-fbd0-4bc3-980b-674a3c436c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.238.24.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84151804-6909-4731-b52e-85fc68d9af09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.250.44.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a8a3b64-520e-4b07-8690-27776f2caf9b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.251.101.169']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c58a07a-5150-4165-b41b-b84a2ecca276", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.251.182.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db5d75c0-f26e-41d4-9d9c-3c008175a25e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.172.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee01ea2-7d3c-433a-8f16-4fbe3e207864", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.115.235.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78916a50-0c63-4845-82c3-b18f8215ff64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.132.53.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d3354c-c033-45db-968b-513fabdb24f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.132.56.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c27f9f-2232-4e35-8f06-9c3494cf9d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.33.24.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25549779-a8b9-4f63-9859-81bf8f2a9e69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.108.63']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--477eebd5-1c63-463e-b641-df9f1d37b707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.109.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb016ee5-7c16-4777-8988-5051e25e12ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.113.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc0df76-c8cd-4ac2-b504-d14425ff050e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.13.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a5c70d8-a717-4a11-8c2b-d02c89e555d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.133.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece17f4a-147c-4bec-924a-b7337626cd78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.184.152']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce30e847-57c2-40a7-8d35-6607eda875c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.223.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--615dce5d-e7dc-4c49-a3fb-87cc716428ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.227.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--849b80b1-4307-4908-a185-049f47dfb87b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.236.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47e9c60-b581-4059-ae9d-094026d7399e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.59.159']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74470f77-920c-4775-aace-62af5a7e9b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.49.228.52']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d45195c9-89ac-4d5c-9b69-f11b107a4c3a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.97.178.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--307d1856-0c48-41f2-859d-1032eafc0dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.232.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ba8987-ac02-4ece-9033-0e2001e245ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.84.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12ba566-e4f7-4bd3-982f-37c0447d9085", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.19.243.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca96126-e619-4ae1-9a5b-c624555e91df", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.194.8.169']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c678dc-d0e2-4d94-aff5-27b5ca9f1a89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a554c9a-1273-459b-a830-c2f907f87f40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d9efdd-2826-4154-8033-2bcc627795ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--625df109-2ba7-4a61-b582-29349e426286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c9f654-b8e1-4b33-9aa3-4f4d9bb52b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.106']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e699407-d9ec-4cec-93a7-a1fc164d583b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--062c3e70-c162-4c22-9bf2-e443c0f8afda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d905517-02e9-45c9-a0a0-82f85dfa9c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6596b040-a68f-420d-b2f6-318f0b5ff4d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.112']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d691096-35b9-4a8a-b376-c6a4b6bcd462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--175f4101-f2cb-4ef8-9d85-a9751c34aab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ef57ec-ec41-417b-ad47-c64d0abc5f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--626f229a-2685-4d21-9a00-808c141b43b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3b3ac99-358f-463f-9945-1f6a74e35423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aabf8e57-01bf-4656-9d07-5c33ee5fbac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76045ce1-a621-468d-94c5-b9169dee08ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb7b6d07-aa0f-4f1e-b7e7-f4d185ed0e85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48125a63-3496-4e56-81a9-2ac173c35728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6176dbf-78d8-4aac-ab5e-55fef9bb0ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5843f7de-02b4-410f-8ca5-cec562335952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ab84a5f-9ddc-4050-9cf8-cc4cd1ac50f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--284fbc79-24b6-46b9-982c-79bdf5c8727d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e41d41-1e84-4af5-b53c-60e349206711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11bbab91-b0ff-423c-9445-007396ad32a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a525b0d-6495-4422-9064-3095d4ac9ee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.129']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c605852-18c5-494d-830d-0e76a14b33e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb4ea300-6cd6-4095-bdf6-b2065cf9c05a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da54878-87c2-4efb-bc56-bc17305565ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.131']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--106ebe25-e5c4-4033-a190-67a1c59e8e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--539582b3-f295-439f-9903-4ce905c25b83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b84361-b939-417f-a1e9-4c29ab978920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9abc26c0-8718-49b4-94ea-7aa840f6c7de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.135']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36d34bf5-805e-42fd-a1d1-77c6f1c97d39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99745b55-e5b8-485e-89a4-1ded2262495f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b3d0634-5d40-4bb0-a312-8174261dc39a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.139']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9576bc4-52af-4de4-95e4-4aa4d73f5259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.14']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4684d70-0012-4504-bb04-b9836906e93e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0bb8713-ac90-4ac4-9ff5-017a0e607f82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c716336-df93-432c-891c-aae1920d6353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c33044-e067-409f-92a3-99620e5bbaeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c64af9-c386-42a9-960c-2bfac10c7d34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--024bb3aa-7eda-4ba0-8d9f-5b67bf8b7b48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7ac93d9-4132-48ac-b584-a6a107d4841e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e81cb4a-7ee2-4db1-85c0-ac5750416ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943fcacb-b1a6-429f-82bf-dd55966a7b6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.150']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb5b133-8c94-498c-ad58-a78bf457c32d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cafa3400-b9a2-43f3-8ab3-dffbaa7ae07c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.152']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f42de6f-e3bf-463f-a394-5e43f0a360b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.153']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa169232-ce6b-4eb5-a245-b3843677947e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab74f625-f96e-42f0-8596-25c47feaf417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c22e5498-5db1-43ad-ab4f-25c2748e6123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.156']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae198de-463d-4411-bc1c-40e20057e7ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a21d263-a8b8-47c9-8b21-32e2ee9ffa95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.158']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48db9fd8-032f-4362-9c90-bf2485dc1a00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.159']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b47b326-a001-4367-a8a0-c6acf8e92567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fa790c7-7dc2-40d0-8686-2813af21d7aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.160']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b76520c-0245-491f-9786-cdb9f12afc3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddc1dbc7-6a13-4624-b2cd-797fadc9c0b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.163']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab6b32d8-3289-4ec2-b6ea-3afb0a3a0052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.165']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96d2fd0-7f0f-4bdc-9b41-d509ed043e03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.166']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c1fd31-9fae-40d9-bce3-09b82fc58be5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.167']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f0ee4ff-cb51-4bc2-b7bb-4ecc06ea0870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bd1c452-f5b7-4d66-80c8-219594aa2534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.169']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d79eee-0149-452a-b0d9-9652a7c38d76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd2424c0-965c-40de-bde3-f4443a58a6b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.170']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc52170-d6bf-44a4-8501-8f4fac867520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.171']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24a9487f-80bf-4009-9777-a27cc62e3ab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae9c1b55-4d31-4b40-8381-15dc94a8fd3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.173']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a954a828-e4fd-47ed-8fab-4bd04643efa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a9812f-796f-4780-bb6d-45069a7473fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.176']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce7a2181-2d81-4f0e-a7c6-4d89b0875262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27258b55-9766-4893-9cfd-e6e7e46163c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24057516-fca5-4b7b-9466-f7ebfe1d2653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5f70cc-a5ca-4c58-a7b5-dc6ea2deb603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3fdef5d-2b6c-401c-a108-bf8cdf8fea1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.182']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a109a5c-6ebf-4cf6-98bc-68d8686021eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.183']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d24e6342-bc5f-412e-9bc4-a684dbc336e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.184']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad7e1713-e1de-46ac-b618-090de3b4c1de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.185']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e2a51a-c69b-4908-ba21-ac2d601bd43a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.186']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f00f378e-88e6-41cc-bd75-97b371379d01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.187']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1096bab4-72f5-400b-b92f-ad8e2d119d8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.188']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c5c16af-c835-40d9-ba67-cfefcdc53bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.189']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33256028-a653-4968-89c5-9be957c52e15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91026d7a-0b2f-4bf3-9a4d-56eec8c87169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.190']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddeaefb7-dbcb-4e43-a69f-faf54ac6eb0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a4d1963-6b00-4bba-a88b-6646dc46ec4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.192']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffe1b8ea-a173-4443-9472-3a2765dcb444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.193']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca2c8f8a-aad6-4903-bdf6-fc41d52da57e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e80520-d154-4657-8a47-836063aa8abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f4e4ddf-affb-47fb-b742-c35f6ece818a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8009eb0b-80d4-446f-a35c-a30826d40b00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--603ec8ab-9b3b-4c9c-9894-a705b9b9ec84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.199']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84c7603-e120-4ea9-812c-bf854d01c6c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a825c1ac-e1a0-4e32-bbbe-2227dce8caea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.200']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa5c6ea-2abe-443b-9053-4d0a2f002630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76826730-7cd2-40aa-ac5c-e5a1132b5804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.202']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e763d92e-db91-469c-afa5-e2e404812d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3fdf29c-2ce2-4d6d-a116-ad36d0625daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82a8124c-e3df-495f-93b8-d8f458cd9a58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.206']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff952d6-3c5f-4f76-9f8e-978a0d46a4e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53e0ed4c-a668-4e4e-9278-17e8e390e912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df8ad0e-ff3c-4a31-9a00-1d92542ef0c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0927e8d7-e743-417f-898d-c6ffd23e2b62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--905529e1-df3c-442d-b817-1a2508f9c27d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756c8cfe-2106-44ec-b69d-5127ebcc50d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.211']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb3b96a2-4968-4cfa-8e29-b4641fb0d5d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--285c0033-673e-4466-bbe4-6d0f951d3e8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baa5ce41-6597-4bb7-bf96-28cc081f1970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd096c3-ba2f-444d-9e62-fbf2dc8f6c99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a8336d-4e21-49d3-966f-58daddb14071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.216']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6313868-5836-4508-a19b-32541be33d62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.217']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b07c61-2db4-4da3-9329-d8db451d7666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08c6a870-acc3-4700-b90d-1e20e503efdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e968edd-42c5-4ceb-83e0-41cba1134c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa60b366-fef9-40c3-9a27-c433dbe3b269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56d710b-1c1b-4a4f-b430-d19ded255596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.222']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dfb5425-d8a1-4930-87c0-062b9e46d08f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff70e714-c66e-42d8-9331-8371a8ff0fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.224']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05803bc3-436f-4c0f-979c-e4c56ed29a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.225']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b3fdf4f-a58f-4698-83ca-f6116620c169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ed03bb-e6e4-4a5a-9835-cb7b1e942c69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11ecf8d-6af4-4ae7-939d-997c0aaae800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53467a8a-0f12-471d-bbd1-b8007e3ee811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.229']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04861f87-9ae6-46c8-b376-696cbcf1b62c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c737ff43-1186-4c51-bb27-71bc3f1c6bde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.230']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ccf4b8-c260-4885-a8ed-227d58e943a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57143553-535b-473d-96d7-203b491ea3bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e3f091-e91e-46e5-8481-8250f130b4f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9785eb02-5e98-49b0-bc8c-8b5ff21d7eaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6086d5e5-c806-4c1e-8581-d548bdc80978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--081a5f7f-3866-4ce6-b60a-b7e575efd35d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.238']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef7c7e32-73e5-4d89-b4ad-4d34e5e69cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3033ff9-c5e5-4005-a7cd-c47f83ab6147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.241']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad4683ff-cb4d-42d4-a242-58763ba0637d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.242']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e492c29e-01f9-4d68-9ee8-bf858f281e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.243']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fd795a5-688c-4155-8d64-d8f6a8ebe041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0488f617-e8fe-4347-96b0-38bb228e0fc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0897d389-7c75-4a14-a2a3-275f84b99899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.246']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b57d0529-b0eb-42c5-91a1-4dad9a7c0dc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b0ba29d-af2a-42c0-be44-ddc05fc2431e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25750ec2-800c-464a-bcb5-ef5b396dee75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.249']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7109c74d-5be2-4d5d-b0ad-c175636b7156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd6e982-f140-4431-8ce6-e12c02ba7e91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.250']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d344dd6b-4e7e-492d-b209-93625991f39b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2312b341-f790-4353-88a2-062b74a47c29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd63d912-5526-4c05-abfe-ac5827471a7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.254']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e8ef75-1890-4786-b90a-14efaba10e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6caa89aa-4aec-4503-a5a7-c03525bc9088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c1d21bc-31e7-4d1d-9a69-df1d384dd79b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7977286b-5908-490a-826a-46860daceddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35021da1-c810-4531-bafb-b324e279dceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f86cd70-d5ba-4ec6-806f-8bfe053d6300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86e27ed9-83c9-4ec4-9178-a1e520cdcc20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f032cad3-210f-4a45-8253-c5bbc576616d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--326e23a7-f76f-4fa7-bfc5-cd8c44286b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.36']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c52f4f2a-bca4-478d-a4eb-ded8dfe5d693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41650203-80f4-4343-8901-d46b317be662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ae7521-ab7c-4c5b-846e-3ccb1170d723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360b4f32-8850-4e52-8cd7-7ffb73475be6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26522790-e5e0-40f9-b430-d30e8069952b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea8d4419-8a35-4761-8193-f41f8dae14be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c436c8f9-83f7-4879-81f3-d7f1b0fbfdfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.44']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c0f7b90-418a-480c-a2cd-10081e73f5cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d274f6c-854e-48d5-9da1-50329a7aa93c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b23fca-7edd-435d-89d4-e6e11464f6f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--026a7a22-e91e-4be0-89c5-6cecf93b0caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.48']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27ffbb65-43db-41b1-bef2-d5ab12c7e982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f962d272-4b71-4930-9644-5a6c50da4bd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.52']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--719b00a9-a353-4702-a8b1-bfe2b03d3856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8f214e2-1b9c-4124-91af-9ae056f6b151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da5d1ff-8e47-4475-9c83-de1e97ba926a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.55']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57cd856-f777-4b76-b6ae-60e28dde78fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.56']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73970457-ce69-49d2-9735-e04d64057f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a5a7558-9e83-4776-8d91-eb21fbc200e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.59']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ea8bd5-5ae2-423e-8b80-b8ac9e225718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ffef4e4-2965-41d0-bafb-7ca8b3a9ee10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d90c066c-c889-4796-b5ce-45f1a0bca725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace6ae59-6849-47cf-ba0d-17ea012f2567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.62']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d553fcf-e520-45dc-b2b9-f2b4479679b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.63']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0ac46cc-0aa2-47c2-938f-4430b574475f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.64']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629dd2fd-3466-4324-8b91-ae1be675dc10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a8c5a3a-c449-48dd-9d9f-3a41ec75bdb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec8b965-aa72-4724-92da-e69f52e98e0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6359fa32-d9af-493f-9a43-2c6d1a8212e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c02bd96f-1356-4cdf-ba8a-069d7153b6a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7dccfc3-5d9d-4804-b4d0-9b6b6fcb89a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b03057-796d-4a96-a9ff-cdc2f3e97255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f500ae-5f8b-46ea-ab10-46197f032942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74c1411f-75b2-4ea3-81c2-543d5afb4e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302b9530-b091-4716-acac-349012304800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d5aee96-b739-4c46-84e0-3d5c1b8366a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd37b70a-01a2-430f-9222-8a655a188abb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3b8f8ec-aa25-4f78-9d82-d4a4680c7c60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e36b01a7-1a64-40c1-8b75-3b507eb8d543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bff9febc-7f95-4fad-bab0-dcd6094163f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18219dc9-1899-4e95-a5df-361f43186660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a798f675-8dcd-46bc-8d4a-f094050eab6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0061feea-f6af-46a0-95b0-74615936ed73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.84']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc5d7eb-78c3-414d-bff1-d3e736ea8048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78024c56-0329-40f9-9c45-2ef61d4291b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c7cd57b-a2e6-4afe-b866-7bf8b18a9851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de4e441e-fb8f-47ba-a969-78d17b60faa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b5a33d-5bb5-45f9-ba16-abcb4d85efec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99aa47f8-ebae-49e4-8627-a7cce7449a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--000cc0b1-7303-4566-a4ff-2c439846295a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.91']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d58767b7-41d2-479b-ae0f-84accad8d5ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f31605d-b47d-4e41-abb0-30c4b6130244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9240c05c-bdba-42cf-b7c4-fcfc9310f5a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac132b08-9ed2-4637-8d34-d6683f320fe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4043ab6-4e59-48a3-9894-42d862c60a56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.96']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b096eb8-31ac-4a30-8ee8-f413b2428a71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.97']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea86f917-f1fb-4ff9-89bd-9428248a8a0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4d16cb-8155-4d7f-9535-7069b5c6bab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6487f6d9-273d-4a53-9897-c60c0d0c389a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e3b0c2-a4ea-4152-8c0d-0fd3064b72f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7738aadc-f052-4719-9435-74202b0aebc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da7fcc6-bb85-476e-a73b-f020154c1227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d7c05f8-b371-4942-bf28-c09a31012897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9941b4a-5c4c-405f-840b-bf0e062fcc8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03629f5e-cae1-4244-8d1b-436fe16784e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.106']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0bc47ab-a7ea-42d3-83f0-4eda801ad9cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc81def-0c35-4562-80c0-0bcbddd1ef71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc31b12-5119-4f75-91db-f7244831050b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1c6d9cb-48e1-4733-a11a-c3299889d73a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb5f3c98-fcf1-4ebf-955d-5fcab8274181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13321b5c-ed63-4ac5-ae6e-4c05a4b56524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c682e9-b475-4d49-aa21-f0b88cb4daa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.112']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e45338c-58ed-444a-a55c-ebb72a14dfec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1e105d-e6b9-4bb1-a303-44418b6af49c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af401505-85ba-4a49-b4ef-b412b09c4e30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d241571-9930-4934-8dac-4fd04c2690a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1727fcbb-a426-47d4-9e81-a3ea7e6e40a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8edcc8e-d9ba-4812-8f87-01144ecb7239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82567b81-78fd-4fbd-8eac-ea3000c8a1de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d20f80e7-4424-4e02-a852-7914b7748498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76828707-3637-49e5-811f-a1ffd3cc13e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3848858-8ee9-474d-b260-4f118d55e76c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee34dde-8d7b-4fe8-9356-b7e378d601c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e1ee6a-3ad6-4c37-9c1c-cdfed589c499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6b14964-dae8-4208-9653-4bfdeaa4b458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb33486-ed5c-4101-9f07-491752e3aa43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84aa5943-5c7f-4772-ae90-ff3f9ba1c966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc59938-d558-4e70-b4c0-b319a612ca83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.129']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c036ba7d-f5ac-4930-9d99-e3d687e362af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dbd9070-63aa-44cf-acc7-57d543e5c619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01f41d1a-9c8d-4814-a08e-19e99359e623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.131']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a0a1b4-81ab-430d-845d-5a21b5c88ea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eaa9f06-0e20-4980-8e8e-3373718ac829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a004ef-cf3e-47da-8086-2f66d650ea10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.135']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e6a8ad-1976-404f-9012-e9cf17085d94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27aeebdb-2ca3-48d3-ba6a-ed919feff40d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c711eef9-6d9c-4d9b-bcf9-87236a9659db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.139']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da9ebcf1-6023-451d-a3b1-bed4de247816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.14']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466c0a17-8f8a-4a4b-a694-e3fe8f960c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72b0ef07-d332-40ea-bd99-3d9aa501b998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f958ea66-d749-42e2-be42-8795d3cd4243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3820c043-540e-427d-93d6-5e06993cf9fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f69e324d-9720-4786-a0c9-13d74faa745b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f70f7bd2-e68b-437a-bb84-427ee993c39c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e727eb-2a2b-4fa4-b8b4-db09daf24496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.147']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f8684ae-3f1c-409a-8e72-7c3f248169c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9500d903-8215-4c3b-b3c6-ac8275d1369e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--976ec348-01e2-414f-97da-ce86f5cde07c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d2033b0-2be1-4394-a99e-5aa6cf755c8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35277236-e749-49a6-8377-eabcb8578407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.153']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da3b738-9318-4c8d-8d18-c753ae5d8d79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0057dacb-9cd2-4274-8380-87fd5e6e7379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ca5593-479b-4a7d-8ba6-3787468e603e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.156']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065433b8-3196-4929-9b5b-e0e3862db9aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d67e57-3e07-40cb-a6a9-fe5f0c262e76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.158']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6896e398-a0f7-40b0-bf81-b385324eef1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.159']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e5c0961-ea6d-49b9-ae83-82d52401aa6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da256af-d644-4713-bb40-1060b5a0e5e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.160']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f9bf2a8-4da3-45d6-bb8c-215a63cc7f97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5bb9b36-26d8-4bde-9d75-4a1e5246d58a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.162']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db9e709-7f3f-44fb-9d78-87ae1192983c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.163']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f0a49e7-277a-49b8-bda4-eabe54a38cb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.166']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e1652f-10d4-4114-b3fb-6397a46bc297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.167']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a23090-09c8-4fcf-a827-90f43e550a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ec5d72d-9c7b-4780-aef9-c1306b40741d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aeb21db-ad6e-498b-b7cf-819ec5c5f22d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.170']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a85709b-e1dd-4f39-906d-f39d8066e7e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.171']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2af8581-be24-41b1-8318-50c433af730c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbbb555b-ec47-4a41-ab0a-0d95b3f19f7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.173']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b313fb13-2d53-4b72-9cb7-0e1c53e94be9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a0bc419-c34f-45b2-bad5-97fe41512852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41790478-4fa6-4a77-a6e9-db1cc362d61b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.176']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d450ae6f-90a9-4158-af51-f786cd586188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac7c59d1-3033-476f-96ed-917e4cf492c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab9853e0-7e16-4704-a843-acd61294cdb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd32ed0f-ee73-486e-9e9c-18432015cc8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d87f8cad-9be0-45c2-ac4a-931caf7d497e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc2ae624-7234-46fc-b0bd-cd127ff7549a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.182']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da9abdbe-a272-49d0-bea4-eb7e64a942b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.185']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e10290f4-1e3d-48b6-811b-66d55baea6a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.186']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b90215-faf6-47b9-a3c0-04366135febe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.187']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b0a9ae-e017-4b33-a9f6-cc5b6278a57b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.188']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--394b8a52-1128-42dd-9a26-c02f26ae77ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.189']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc80de1b-7767-4d90-8e97-b361f3a319fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ea6970-b0aa-41e7-92b6-57175c1747e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.190']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa2aaa8-c19f-41be-b41e-2be2a0b910c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d76fca5-fd20-494f-8222-9b5d583bef28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.193']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d428c98-667c-460d-b1b7-0253eaa85486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22af89d7-60bd-4737-aeeb-c5cf89f9045c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.195']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--608d95f3-451d-42af-a00c-9b6d3eb80cde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09675a89-fdc7-44e8-99a3-9b963ada8d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--983ff496-5156-44f4-ae1f-9260f368f643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d112510a-17db-47f7-997e-9e6c9c9bbf1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5a73e85-9ccf-45ab-a23a-f1a637699efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.202']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e79b1929-4b6a-41f9-bf2c-8c18f87a3cc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3846757c-1546-42ff-a383-6360a90414c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--465839f6-0b5a-4e42-b2f9-7f07d16c46a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.206']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bd5fbbe-7263-4e85-a806-3dc0088766ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a61e48-3f66-4f51-9c87-b5388fc71974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89136d26-ce18-49f5-a11c-bf9674d9d39e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.211']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f779de4-4837-42f2-8ead-e3aa78532e0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d546d0b9-45c6-43cc-9131-45ab67b5ebcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc670f7f-d409-436d-8e2b-b3a771e3791b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a209b52d-d07b-4309-aea6-7dd913516ee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaac89e4-cffa-4fe8-97ad-b54e8121977b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.216']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d0f859-cea3-4268-b72c-9918fb2df3ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.217']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c1c84cc-0d1c-43a4-a4ce-c36a58682eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce3f2295-5fa5-40b5-80df-9fff9a355c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1108d42d-f274-4ef2-908f-445675544885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffd2bac0-0206-43c8-a14b-7f1fe28cff86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cfa2102-30e4-4df6-a6a6-59888981dcd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a6ef1c-fd4c-48b6-8faf-752d61e78a19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.222']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c269cc81-3196-4ccc-87d8-0fe156d5810d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af0dd9ff-8757-4038-8afd-6651145f5dfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.224']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3734e71-2718-4ef5-9d43-84fdab8682dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.225']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94aea6d5-0487-4437-a6a2-c0cbb3e8fa3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f4640f-e22d-4658-bd90-d5ddee209db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--754716d8-98f5-43e5-8c50-009cba527bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.229']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41da0a4-5148-41e5-ac46-00048f4a207d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c01bae-1276-4f28-8dab-d8707f1668d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.230']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f64c62f-6df4-430d-9e64-4e05c86b66b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--145b3d12-ac87-44ea-ae75-5f249f079e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.232']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac43dbc-e332-4889-ae96-5364a08e7fde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ad610c4-9315-4d1a-8183-7ac227add4c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1508edbd-fba5-45df-ab70-9cc96b660892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5a89f5a-ab4d-4f24-b2a8-f3a9ee57e9a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d17196-387a-4485-807f-0720cf90f935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07de01ba-53d5-42be-bd15-fe23a182a5e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.238']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e52a61e-3043-4c15-bcda-d670ec10f876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62605567-97f9-430f-a116-ba0a76e73b4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23d6aa13-1c61-4374-89f1-051e094cf95b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.241']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0986ca37-56d7-4c22-acf3-43bb5df5dc4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.242']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5155ae72-cb7d-4a82-8705-58176f48cc1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.243']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205244ae-9966-4bc2-8f8e-93b527bb9250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--238ad3f2-6b5d-4a6f-be18-265a0080a4e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1f8219-e591-4efa-ae99-5076fba38d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a90275-6580-4832-861a-06c6b79ab0dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.249']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26736054-f913-4200-805f-33da68d44f64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a9550b2-9723-41dd-895d-6b87e8dbc486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.250']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588de066-c04c-408b-bf41-a9420c72dae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--398e577e-7337-48cf-8a57-3b12e683b428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d12071ca-e1b8-48da-aa2b-68632f44e2e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.253']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f1bd91d-e8c8-4379-b61d-063f9a07b971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.254']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2953386-065e-4dbf-97eb-0ceb8c8578b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f2785a-a9ff-4ec9-b216-629b385803a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64384ab0-0e5c-4b09-b476-8edd944b4570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--547def22-3ce8-49dc-8ce6-99012aeceb29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b63922-5b2d-4a32-87c1-e3c51daf55f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0d5847-0649-46e5-b43b-d2184cf97036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d39c07-7017-4c0b-abf8-fd5cfd29e05a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e92b9a56-7840-4aa4-a519-b84a44fb9092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6637f053-dd5b-42ea-9c26-581be08bbea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b07460b4-1a7c-4426-82cc-79b177279e54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98bbb8f0-3bce-400d-a513-17e2e5ad0243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff494ed1-dc88-45b7-a383-6be1163a18ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.36']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0dc940a-19f9-4dca-a62d-82704c49a4bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef3835f-818b-4e5d-a167-7bec754bb847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4555d64-ee1f-411d-87ae-25d4c620d318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c87e64f3-377c-470a-b927-f3e06a5f3ce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c5ef26-0ec9-4002-88de-b9f58774f82e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b42405-622d-484d-a165-e8f2592f4718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--776183ef-386a-41bd-ad58-5a5ba96ccf51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2570a9b-dfed-446c-a405-ad8947ed9e21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.44']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f0c525-ddc4-40f1-aa72-28adc587a1f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a454448b-c3b2-4b62-85a8-767e2688b22d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c325f37e-1868-428d-a0a4-03928d096017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.48']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4adc8537-7e74-45bd-90b1-726653ed73ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.49']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef647cb-7f69-4a86-a2b0-a761b79db743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6851a358-c359-4be8-8c59-9531099ad0e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb7235e-c7e9-4480-9eee-776d00993ea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.51']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec3399c-1ac2-497a-babb-98d9cc48c39a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.52']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01323e09-964f-49ed-adb6-a81dfcab11d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--143ff51f-3629-41ad-abb9-e40d5f6697d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760ddaf5-3470-4c54-ab81-8c53c111931c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.55']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a0d98c-9645-40ec-ba73-afeb9d70fb16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.56']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a75256-75a7-4a38-ab0b-2402a3cdd34e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fea5396a-186a-447b-b67e-db191818a703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.59']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2974cf34-4755-4d43-85c4-e57c66498751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afa5994a-8c54-4e2f-9fe6-92c0e1ebcc56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a6c0f0-b488-412e-acf5-8104e14dc52d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3159f431-23b1-442e-8752-06d04861993f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.62']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6851baa5-db09-40fb-a9f7-1d93d27076a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.63']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--563de1e4-5880-499a-875e-261dbf5b3590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.64']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--224eec2b-7c66-431b-b5cf-a06cdc8cfe53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61366144-18ef-4954-8e9e-de94c92a89a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a3d94f7-7037-451b-a3cb-89d15bd85b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc1a0779-b813-4217-84f7-d3db8ef1ceb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--128b971d-a82e-49c9-b407-3373a43d805c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e34b3c-3942-4833-9eef-0cc1d0b3444c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe62d7b7-344e-43e8-8ccc-a958c93960e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a280e251-43cd-4783-9240-e7411b767c49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19d1fcd7-5b12-4ffb-84cb-da6492af9dc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b767a630-45a6-4dc8-8e02-7e6a7e465585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b4f7ee-d0b4-4d37-924a-d25d3e27bfa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db5a3e94-0888-430b-80d6-a1bad1f61c62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a5294d-2b07-4506-b6e9-5c2cb71f1eb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bdd539b-867c-4cf8-b3ef-ffcbaab094c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--519d5e0f-ada5-4c04-b4e0-fd4d2214d2f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--871b9b12-5e25-4706-a9e7-80368942e3d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c8973dd-9e0e-44e1-a118-7f91c3a78cae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37badd5c-d83c-46ae-bad2-77d68ce7a409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d04c94af-c2a3-40f2-8bbe-71fc709d2337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.84']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1639fb8f-ce2b-4a84-af01-e7803b1b5d5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67245763-7cf4-474f-baa6-ec4bf809957f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d98cf82-61f5-4492-83f1-5b4586ac2f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8412218f-87e5-4a7f-a777-dd4c16b467cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da9e9e79-353b-4a63-a53c-74f909136d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66939798-0d68-491f-be31-b275ad8e76b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b873c9c-348f-4abe-9375-6de5ab840de8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--602a0cf2-76ae-48cb-a478-8b7f3a163663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--803d4481-00ef-4ce6-943d-27c2094b1954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2acdbd9-0895-4546-b4cf-1a6007d9dbdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40214087-0043-4634-9cb1-42c63bd5b4c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.96']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d335309-99c4-49a0-ab39-5afbcda35d28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--293f4d5e-d347-4869-9dc0-796f6141042a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0af5df65-fbb0-4701-9f4d-023d7bc1447a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.16.129']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92b39032-6f34-4a15-bdc2-df3b5744ed93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.16.189']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a548d8c-3a46-49a4-81b0-2aa71f09dd5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c5c6f8-4203-42a7-b1f0-528a58d5732b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d812ac8-8c5e-431a-84e4-326da373fcc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.241']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727816a9-7700-49ea-a504-4d1a6ae65cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7185899-ed35-4d99-9427-be620fd47ee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.220.232.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a80917ed-8e9f-49bd-b856-c7c8afe1beb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.99.55']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772158eb-a240-4c38-94ab-32348deeb21d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.245.188.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac0ed53-6420-4b54-910e-d0490ba4214a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.248.103.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a86d21-570d-4c2b-925d-6a2a9c9faed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.4.96.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75702d21-9daa-40d1-85c3-7ee437542580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.0.228.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa32cd0d-067a-4736-9d8c-9c7e76344247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.152.51.222']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0713bdb9-791d-4b6a-8aa8-09cd6082f776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.223.54.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1bab4f3-e2ed-41f6-8573-5e6fe71a3dff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.227.244.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f749339f-2030-4bb5-8560-2212a49cb47a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.8.62']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f802f88-b3c9-40c2-a4ab-bf8a2e835e00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.163.24.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84b21473-794d-442b-9c1e-078ca0e01adb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.163.25.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--111076cf-1e5d-4e0c-b199-c8d3df7b9b20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.52.0.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dcc0531-f02c-48e6-89b0-bfb0ef480702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.156.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85b8482f-fd8c-4a2f-95d1-aea0209e3c7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.239.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d268b9d6-bf5e-4e2b-a5aa-f4096030802b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.101.55']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f5ed8b2-29b3-4f17-9ace-292b002e1feb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.117.229']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98080499-d95d-46c8-89e7-d147259c566d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.135.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--607933ba-1bda-4d6f-afeb-0da196ff2ef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.157.106']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56058235-99f3-4a0c-a45a-4ba82c3f562b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.161.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db71943b-6f5a-4bfe-885a-4426deeff7c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.163.185']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f82c40b-fcff-4860-81e8-ffd2bf35f67f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.219.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c4f303-b783-43f6-8266-bfe63e9619a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.227.48']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f6fc3bc-b05c-4a55-a832-377ca2dd3761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.245.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f2a47bf-e6cd-4468-b620-84d5327d17a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.101.179.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c059fa39-a9ed-4ea3-b5cf-59000f2ecc8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.101.231.167']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa0cba5-afa1-496a-b967-456c75db5c90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.187']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4e902f4-84c9-491a-8e3d-bf770ceba2a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeb1e94c-40cc-4241-9d62-5af472c9fde3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30eafc58-3938-4f36-a326-4b552cfca5f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01d91dc9-7437-411b-93a2-ea70972d1b21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.206']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--307984a4-93d8-464d-ade2-294668cfccda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.225']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f3741e-dac8-4bad-8847-183167d4ae5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af35c75e-38a7-4f63-af4d-89cf4b705f10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb088e1-8590-4c88-961f-22c0f88a5701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.48']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eebeb0c2-ae43-4df4-8e75-888fe353cb83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.119.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5affee8-976f-405d-a256-7705d4d1acd8", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.119.217']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c9453d6-348a-41a0-bf82-1f7245ac91a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.139']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ab8466-1720-42e9-941a-25e27c563931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c1c66c-33af-4d7c-9d33-9cffc1f39be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--853dd729-843f-4e78-a549-e46d96787a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fdae60e-cd72-4819-9fc7-0a5c700da1f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.253']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98598de5-a63e-4400-bbd4-28fe322ff987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff04a99a-b819-447b-b39f-d11fba0275e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.128.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e5a1bd1-d77d-4c59-9a44-74f0ad759e42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.128.199']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae9268db-3f8e-42f2-907a-7ca159dcb2eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c6c7f2-19b3-4ce3-b787-193ff72677a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5492da96-8c8f-4783-907d-2dad315b16f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d3b14d6-b374-48cf-8690-145edbd3299e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cabff62-7053-4337-a27e-f4dcb535e288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc6d42ed-8ec6-4868-aa5c-09c385f0482b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.152']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7171616a-fe31-4e38-9a22-ed884332d807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.156']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61d1cba-cf42-4a9d-a0fa-f54dadb7e8f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.166']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e13c00e6-4829-44b6-a18b-1e7228874c51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be11fd1b-35c0-4283-84e5-c748306c46d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab4c30f4-d9fc-49b9-b0e3-0c3a89d4ae0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d60cc984-5624-4c12-a124-ae7f161b38b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c890f6d-a2d3-4ee8-bac4-3c0862bee58d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.84']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--047e7528-d528-4d0d-9e3f-d135c78a7edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--046e5e72-9f97-4735-9789-2f26e0631779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d30501d3-e8f1-4158-a58d-364db264f3fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.165']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27740089-2b96-465e-8a9c-a4f86f795666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.222']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64169d46-ab19-48cc-add7-190fe1d8cb59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc91a89-bb6a-4a95-a52b-19693914a9e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0988e114-33a3-47b8-81ac-d3747380f273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f1aec2-93c2-462b-a23a-fd70802e7de2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1756c089-04c5-4fcf-b676-ef04cbafd77f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.176']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5029f934-d5a9-45b1-94c2-50416f4b8b31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2debe698-6c14-4149-8610-1844400c1833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff8dd15-132c-46a7-b7cc-0a43d0d906d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1937e4e-3a0e-4916-b26e-5029264c4c4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b40e789-75a1-45a6-bada-ede3e7f34a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3afde6f3-8255-4614-972f-0b1149933423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808e55ab-c31e-4e03-aab7-9e3660448e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.176']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--375021ab-5f58-453b-8813-779a0c1cc29a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a6d47ec-bfff-436a-8945-c48ed3171b97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.202']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ca90fa8-17c0-4ed1-88db-23bd68f1f7ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9d4cfc-ee1c-4544-a7a5-66c3d934ad96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82810e8e-0699-4da5-a68c-c1449d63c86a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.222']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e02df50-a454-4d27-b246-2ff82d0c9987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d84ffd1-31ed-431c-b3cd-916528b61ff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82252152-387d-4f1c-986d-b926c5a93bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fea33ae-dd24-4011-aab4-0881c4530964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.250']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1405d8b-618a-462e-8d4a-0a3081b3938e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.254']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39851a0f-ead4-4194-88d9-1041c98b932b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe7000b-4dd4-46d6-acac-b08174812620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b6060cc-bd8f-40c8-9afc-725d454881c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--365a19b9-d471-4372-9582-6aeb215c7e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--672b25b5-a79a-4aeb-8ccc-bd74aeeb00a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1559ac4a-f0de-490d-9887-5fc7948a6e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72dfe556-94f8-42fd-8e40-391eb44e9675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee184cd-30e3-475f-ae56-119032c3cb11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfdb53ba-706b-48a8-8257-1659138f77c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d49653-b092-4cfb-bef0-906b73a8b498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c661f5f1-305c-456a-99b6-175f535a577d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--782fbb2c-c528-497d-b0ec-6d4636e8e3f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc0633b6-ed9c-46ef-ae32-2f782e11fd60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeca8ebd-c526-4101-b4bf-2f4eb99400b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c475a2-0b35-4552-b822-4a1b77ebcf23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.139']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a075f96-0ba3-4b3c-b4bb-a1c5bc622b5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--700a4b1c-8423-47ab-9002-291b6fdeb8db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.171']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce943ed9-d7b2-421a-8b05-e7f48fdea3c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.173']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e49357a4-b864-4eda-a2a3-3583d595f3b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b3cb793-de87-4cbc-a2c1-82860f0b3586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd0ea61d-4e9e-4a63-bb49-c809f0f7d035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.182']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946cb724-4eae-4b54-bca8-5bf73f015a90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07fc0fb2-e69c-4590-b25f-c1893ad512d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d73812e-d9bf-4524-aa3b-e70bc21a2e77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.240']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2baa06e-99da-42f6-940c-32ecb8fdd2df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e8ce11-0e53-47dd-8269-a9e098bd6c41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--448276a2-e796-4e9f-b004-e7cd91bdefe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d193d0f9-d26a-41f9-9a57-08a5b9d8d16f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a6ffc0-84b5-4870-a3e8-ab81eda006d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.44']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88378ed8-7e9d-4dd0-b165-1159bf76f7cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e2525ad-6722-4d8b-86b1-e3548e29a365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee94c4a3-3335-433a-bac9-a325d71ce2d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1da0122-bc86-4d49-a2b0-35001a1cc242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e5a6ac6-77b6-4727-b499-6726c538b565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.152']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--929833b2-6754-4e6c-9e12-dc6cbc99b0c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2809e4b3-2223-40d2-8443-93cb099100e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31ae4a20-6747-4d71-bc17-f3b2334ed4f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.200']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ac155f5-3094-466b-b976-262301fc2528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd7567e-6a6d-45f0-bf55-a19c073dcd14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf16efb-85ad-47ea-b5f9-5cdf1166a189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235ee68a-846d-4a09-a42e-2015fe72b1f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.224']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--538a4ccb-ce67-4ea4-9c6c-51389da01fff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e95e73a-8061-4448-bf74-3aed9ae8572c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3956506-cf3f-4ead-8b6b-acdc827e3a5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.249']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--493827b2-3e13-40ef-9f31-a88f1784ad27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2393ce1-3cb3-43c9-83b8-b4c7b8f20b9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12658dec-6aca-488f-8a7a-2300c175ee52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8fa3d52-c1d7-46c7-9e24-4f1b7f933262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--515385f6-149d-4389-bc87-7f16b610eaed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d58b9b9-ab13-4e3e-8b4e-2f48e658e559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897d634a-211e-45c1-a00d-e7811ca8d3c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d64f280-c047-41e6-adb8-a2875ad73d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93e1b9c-9c30-442b-952a-fc765dc1b825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52540a3a-66dc-4b57-98d3-025eb2bf9340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9f56965-5ab3-4c10-80cb-c48b75f0c880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d7ec735-6f1e-4644-928c-426317cb55a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--937470ef-b6fc-4425-b707-de07604d7882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50017bd0-fe78-4d30-8d4e-30de85f28128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47eb78e8-5f1c-439c-ba99-93e2e85ae1c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d404287a-4a01-4f04-aefa-63f45d22d526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2413d71d-0961-4680-be2e-486cefcc1779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c644a659-7962-4279-923a-52e208be38f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eec7266-10ae-4ba6-b06b-ed873a7674f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55de2bca-42ff-43dd-a0f3-e2e48b59b4be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ccacfd-80c3-46e7-9b9b-c7c118f63d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.169']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ee03a4-bc4a-4969-a50c-bb0f9847a35b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a682162b-2e74-4188-95f6-aea04a842df2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de97b10a-2a34-4631-af40-90388c122a35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--908c368b-5e38-4958-88d2-86eb8dfc9b37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.211']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e990c62-4ee5-4f99-906b-cf2ecf2251fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e40f5c-e297-43ba-9c0c-7d17bdabe560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a3b904f-7243-4e13-9ac6-5b43bb61c361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f049b0d-7f55-4c01-9357-9c43ad7956e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.246']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc0a2a80-e990-4996-8751-fab1de87a316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9dcbf84-62de-4ad2-ba0a-000519a73304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0315669a-467e-4989-9edb-524cac61c12a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc03e137-f765-4048-8e47-a934a15a15d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6637dc4e-b0a4-4d0f-806b-a11c3d51ef1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--591a0030-6722-428e-9c22-8302650bdc9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.206']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2da2700-16ec-4424-b29c-551774c1585c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99117b9b-99c0-4c2a-ba73-fcf947e7f416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.176.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--026ede7b-350e-4157-93c4-e6ace66b31b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e023fed-a07f-4d3d-8618-10cfef2c4dca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e6dbe9-3617-44d7-b1d0-8dcf66240a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dbcf724-699a-42fd-b743-ad6671b80d67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.152']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7052c902-f8d1-47f4-a600-306c7ca036ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5377b096-6b75-49a8-9f7a-20ec5c4f3148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3721cdd-0115-4429-b53c-0b36e58a849e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c68c1c6-aec5-430f-b010-f4445015dab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.182']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf15f742-cd4e-46fe-a9fe-4e302ad2a8e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6544411b-e047-4d2a-a62c-625fdb6796d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40576d84-3e44-4a80-8752-759d4ac2257d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--608f5a37-7c6b-49ff-aa43-342d2277c9eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3278a0d0-9e70-49d6-8d09-94cbb074406d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01574063-489b-41ae-a8ab-28ad0fc87542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba5dd7e-95d9-4def-a8b4-e6f783a3c500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a113f87d-7434-469d-9734-bbe7b2cf39f7", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28371d7-bcab-49f2-ab5f-2d7e0618fd82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--871a0bd1-34dd-4785-86a5-fc6a799010de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de75ecd-9ef0-436c-9cb8-749ba4027bb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.187.159']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--661d24e2-f979-478d-83d4-56bf8e50401c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6136131a-3c7f-4d7a-af59-8d93b1115661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--161222b6-670a-45aa-86d4-d6a219a9d290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc3b16e-7742-4449-a8a7-c3ebaec0f061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c2dbde-f677-424a-9aa6-77cc4fe25fa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--266d1105-a349-4528-bafd-6731c700fbbe", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.205.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--444bcb09-034d-42ff-87a1-fcefcffd2185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bde80bd-6ad9-4a33-9f3d-9ad6de6fa7ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.139']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3266556b-cb5f-4e9d-99ac-4631462fd591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.150']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2983f986-0e01-4f5e-ae91-a2e661cf3786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f036120e-510b-40cd-9cf7-218fdb9dc104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41628ab-afa9-4696-bdeb-2f2c1bdd5d50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--067978e2-1736-46a1-a6a6-f6e13e71ee9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59e45c9-afca-4aa1-9e80-12ab5a6d2aa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.222']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c72971-1fdd-4b73-8c4f-58dee35b9dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--367605ab-0593-45d6-9ccb-9fe77d70f0e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.242']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3827664-bdf0-4b25-a690-00e628488bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.246']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c64af5a-5f0d-4ac9-b944-2bc8c2b8edd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.250']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80778850-630d-4692-87e9-017b9b188674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5efa63d1-f9cc-4a27-9949-42eeefca1df8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3956c93-aca0-4d77-b84b-064f2f192c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ed4d9c-9f2c-4bfa-b486-3d7dcf7cc3ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.153']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f5c1240-28b2-47bf-a262-835e9027297a", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.158']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1db2a94-5cc2-4ff7-a4fb-3802916f8527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.169']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c39a501f-c250-41fb-ad93-f8f9163dc929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e50605-ca22-4192-9e55-0568b55eac08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.23.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e2165e-c968-46c7-b09b-4399436260f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925e7cc5-3883-44a7-aa30-397ffe2b104d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ed7481-a4b7-4bf3-af7e-878c09c93f16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce01613-ce17-47ef-bb1b-7d4bffb2b7e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b6882d-5e2e-4491-b2db-828a29cb680c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac3da29-5741-4831-97ec-4482b3ef4166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0999eac-93ea-4393-8b31-6d0e2754e889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.150']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d3f15e2-1208-4512-8264-ce164a7738a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb7153f2-3c97-4c26-aec7-21957abf0067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.192']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2311c5-9e16-4e13-b401-a3528cc1db31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae55c4bf-5744-4d2c-a88d-d7444afb0019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.225']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc657ae3-2c7c-4788-bc63-55bae1e1aa54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10ac33d4-b70e-430a-ad7e-bb13cc5be200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.62']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeaeb4ae-7e36-40e5-bbf4-eb253c26315d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a997b84-09f7-48a9-866e-358b9e9d8d0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ea797c-4596-4580-bd65-e98fd94f95de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726222d2-421a-4b00-8749-114ca65cae93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53a8bcb-47cc-4a17-bf6e-05f506955360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c42ad724-e18d-4856-a7cc-c8867030be06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.152']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1753e7db-a49f-4891-9528-66c53ff24bbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.182']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c7de54d-f4d8-49eb-88e3-211f6f0481a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--667d451b-38e0-407a-a17e-db2aa10876e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b929ec0-abff-4dc9-84b0-5c57c9d705c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1924090-9f89-47e4-9daa-3b31d54fabbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.232']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb70ae2e-cab5-40a6-9dfb-a3183998f935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad13b0c9-6f43-40d8-8c35-542b7cad6dde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f88d621-694c-4a73-b1a4-82100e87f7c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.56']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6161617-d588-4825-9f7d-1f24d0de1cc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--742f1f7f-c14b-458b-99d8-8b77902bde12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.97']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e2b3c6b-71a3-4677-9159-d7a649edc2e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.42.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c18f7f-0de1-47bd-ab52-ee031b0fd5f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.43.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de2e1af0-137a-410f-bb64-5b2476e4ff8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.160']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb51f6af-d2a7-49b5-a5c8-d34077d7f645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.49.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43098ac0-be63-4f2a-b273-3e35a6f5b108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5084cddc-4771-4124-b2f8-daf7775fb75a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.225']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dccf527-796f-4b79-84e6-4201183374a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0c68ae-9feb-4ad1-b771-88edd7adaa33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.59.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db68f65b-072e-47fb-b07e-eb4a397eebcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.59.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5384633-6580-4731-9e3c-620880222ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.6.224']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e211d43a-ab95-4777-b6cc-545e06c40cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.16.182.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f62538-7c5a-4276-851e-dd9cc8a69fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.16.183.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1464cc29-7794-429c-bef5-f20edf0a8a11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.16.42.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b49e9df-4436-4b05-9dd2-2aae2adc1004", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.165.113.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e75a592-e1be-42aa-bbe7-af63b9696fcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.115.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fdabe85-d1f5-4ec4-bc22-7bb1a836b740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.138.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac89c32d-544d-4763-9fa3-f8090392629a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.157.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afb46960-bcb1-4400-a17e-048df2865795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.32.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45f95723-02a4-491a-8ee7-7de2e57db473", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.196.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c5e23b5-8810-4c3f-b991-c9afb14c4f94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.209.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a567f17-8a58-4a38-a22e-2daffaef2f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.214.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6885cd9-1df2-40cf-8219-af99ddc9405e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.26.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0361b216-fb3d-4f0a-9c69-f9fb82630cbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.29.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8414eea5-6873-45cc-9693-568a50268152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.46.171']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa002fa0-f874-442e-8334-3e017c365050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.57.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a972c55-66f0-4174-95e2-c825d44990d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.59.200']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--469561dd-a023-4e93-85a3-d532dae32a91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.7.1']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc4b5b29-d313-4fd9-a722-32a23225db48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.89.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--630a7146-f423-4421-b9de-31d99a43fa19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.105.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e89d2d68-574b-4437-b3de-203c5c9001f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.107.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4898aff-59ab-4785-9b10-822a3988ac4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.141.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8b0d120-82a7-49ba-80db-698d071cc832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.149.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af442489-1e60-4487-b756-f9ed6efeb6dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.37.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e29f92-eb8a-4e14-b3f1-d2bf68692861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.39.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db206cd5-ff5b-42d1-9de3-94e0519bccf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.53.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e1aef47-1290-4c30-abcb-d8d187420443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.176.51']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2683848c-4ce0-48e5-a233-bd53774c6fc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.182.200']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--557b267f-1d3d-4d72-8f8f-6b3fecf32bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.211.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e181fcf-3031-4406-acd6-ad375b229808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.217.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b6a437e-2d79-4b07-8cf7-8f39fd57e77b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.221.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb7c792-e999-450d-8129-5180c11788dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.248.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--699104c4-af9f-4f31-a8f4-b25f16600d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.148.70.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77d6d385-d757-4e8f-a4af-377e2300f615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.122.153']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47106c03-d957-4570-aab5-5b9ddd146b46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.131.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f332a45f-48be-4273-a361-c28484a0c087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.133.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70069370-a7d4-4e77-9d29-fec5b434ac8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.136.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba9f305-186b-47f8-a37e-371a8e63b4a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.137.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8469f9a-d1f5-4452-8adc-10e63eebfe21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.140.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--422ad70f-d25a-4050-a2ac-93fb16e756db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.142.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d8d093-cacf-41aa-8807-e1e0a00ee63c", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.156.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa497c50-c4b3-4df7-9069-a00d10db11f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.166.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9144217f-7ed3-48d7-84d6-c40c28745391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.18.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--037ea5c2-3fbc-4c8e-94ab-09e1622eca56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.183.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f57e88f-04db-4977-b701-8f5b0a65a000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.194.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be8953a2-2c0d-4995-ad7b-5ece49d2c8df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.207.59']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deef18f1-e1bb-42de-8ab6-a2558d984484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.223.199']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5dbfa2-9ac4-427b-b513-df18052d02da", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.71.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1e6f9b6-93c2-4397-bf94-b8d1449faa53", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.76.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--497ae860-5b64-46f6-97f3-e15596b3da6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.56.45.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb3105e-71d2-4313-ae26-9b283b12e4af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.56.91.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0af4ece2-0613-4eb2-ade4-516496acc03a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.140.192']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9abc0bd7-6346-4f4b-b33f-a61c3c82890b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.171.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717c6d26-33a7-4f6c-a15a-24c1e457ab46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.177.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec8089a7-7412-4784-9dc0-1d98808e788d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.18.185']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb4732f-88b6-47ea-ad18-2dd2f9e795da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.22.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--303b9c8d-f5b4-4005-a56b-4c4860e58190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.239.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af5e113-8c3a-4902-83b3-139acbedc8be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.244.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1d727f-456e-4550-9057-bc36022d5137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.5.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3574bd97-defa-4d82-815a-5bc15e3499b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.64.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0113e420-6f68-4134-9851-cb834ebd52cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.65.187']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec92178-2e42-4147-a047-a6e628ca3d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.167.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6cc3670-fbfa-4a9c-967c-f6c1485d0f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.167.211']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac61133-8d6c-420e-9dae-490a40645e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd64c0eb-d9d2-41d5-9fea-7a5a08a626e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ba53467-4a16-414a-bb4f-edc08d3baf51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--733a7e25-81ce-40f8-970c-f0c0781131d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d5b23d2-44f3-44dd-8e46-408386b18771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75bba04d-9a92-4541-9b27-ba02b765a535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9baa85a2-beeb-4c26-93b8-e52fff012763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac08c541-64d4-4f54-9bce-605f809cc898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb8d3e5-6b2e-42b1-ac28-724259f10959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64864fc5-b222-4ac5-ac75-4b75dcdf9d07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90cdc056-3726-4a84-be16-d337c584b3a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07035ba6-d4c1-4451-b4f8-c29cb5b5d16c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f1bdfb3-bc07-4811-93b1-371748d4a410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5b250f-fa0f-4e49-8fd6-90105fdba81b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1667801c-1dd4-49ab-89b9-c1b4d67227d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc3ce091-55e0-4029-8b06-67c1b9802567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c81fdd2-229d-4bcc-82e0-cc3bbe5949cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.36']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5227c9d-d914-4dbd-ab81-d10dfec20504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4478e2fe-347b-453d-aaf9-2609a3e05aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.44']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce7aac7-9f7a-4477-a18d-06712f2ddc8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c09b94-161b-4723-a054-ab8ba4270d3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--403a2542-6b56-4d13-8a78-141eecc061b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3277ed8a-6048-489c-84ae-447b513bfd7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e352f9-abf4-4074-b9d6-20183704d43d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.36']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c95740-ddac-483d-8768-3e7de6241b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a519b0e-da44-4ff1-addf-51bdf96ecce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41d7be5-9d3c-477c-9264-a0370d29cff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333efd3d-94fb-4fab-88e8-e2b57e86b62e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e7a3a3-28b3-4a7f-afcf-b214ca8208dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8272c964-a1e3-48fc-909c-cee4b797ce23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--954a71db-3239-426a-86bc-c6cd4f467c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b067c18d-0952-4c6a-86ff-cc5cd5b9c9f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.44']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1622a1e2-9e7c-465e-a811-6899a3aa0d11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fab3650f-1d18-4b98-b5cf-e059459007be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e7548f0-7c17-41b3-9016-6ef8bf501b28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df8f7cad-b710-4b79-9cd1-103d58e96d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.49']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b977cab-4a5f-42ce-ba40-56aa342b18a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.52']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d4b8c7-2a7d-4859-9684-d050fd15d186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed42a65e-38a2-4ca5-980a-44e731040fd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.56']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29962536-0fd1-4394-9423-f268d9088eee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ffbde2-ba7f-40f1-bbe5-b579571a9d92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e98972-696e-485e-8a29-32b007c9f30a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbbed504-e311-41a7-b315-791cbfa42254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.64']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3975f6bb-e282-4c3c-a7c2-973dbcc7990d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--576defc6-69b3-4358-865e-b1d8c433b37a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60942a5f-82da-4566-bd96-1f2e3432e584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c8de5ee-c793-4498-ae0a-ff9c85b9d7b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09cfeaf8-17a0-4cab-8a2e-e1015d95e322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56fbff11-4617-4e6b-b09c-1ebe75488609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c47dcb4-256a-4d3f-9df0-cb14b6dddc35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08c417d5-d953-4b2a-b63d-ac31532560a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c98c66c8-75ad-4e06-8bfd-478620b3795b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87cda4e7-e874-4917-b5b8-f4e60ccbf3f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1fd744-6a42-43fd-8802-7314934a72fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44c7f48-f565-4e62-8dea-15b5ab286346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1c31eee-a5c0-4baf-bb40-1c2c2a67d07c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a2ed3a-61b0-4272-b528-cb52d870764e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910baa89-1b91-439d-9417-57d9b5665263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24f5956-ae91-4319-a3d0-cade194f9310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.164.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed840bb4-77fc-4d4e-b222-3b859b6dc6af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.182.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f110557-e31b-421d-a835-e1a598e2e66e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.182.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df249f6-7df8-4214-ab9a-f10be26781e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.197.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--614513b7-892c-4e5a-947b-9f844d4bee1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.224.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d92277b4-1820-4f0b-8648-8575b86e9a32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.225.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e52a993-9a96-4673-8218-3a7d4a1e71c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.226.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6737f203-8aed-42b1-b8d5-887dafe2acd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.243.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b446399-0fc3-4219-951a-6427e1dca3e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.93.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aabdd62-5f68-405c-82eb-a974b02e810e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.195.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d507b95-6824-46b6-abf0-87512590f0e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.119.37.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f87dea0-d998-4d27-aab1-cb70af2c854b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.138.232.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d4d8280-64e5-444a-b199-29f8e9569c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.113.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c697d574-791b-40d6-b616-c799f06064bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.118.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4701fa71-d4fb-412d-8644-9a55d0e5860a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.152.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f231c572-6e55-4adb-8c6f-7f007588bb2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.153.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf7004a1-7d66-4441-82f4-7c0f7f7e5d8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.156.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1b61fa4-781a-4ef0-9b4f-70c20891fe9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.157.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7f64140-a72b-4bbe-98df-57af6ea4d8de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.74.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60978f87-b3ed-474d-8f0e-0e2774e7d35e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.79.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--868971aa-2466-45d1-9354-729e17fa28ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.95.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04c02b8-c0c6-4692-aa81-5282bae27177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.196.206.14']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60435276-9955-4930-a27f-88c906c1077f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.197.250.14']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceff3722-d6de-4bbf-8419-7643ecbe0bce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.197.113.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--874f3acb-f2bd-4dfe-b2de-9ac00b227e26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.255.135.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c39e0911-972e-4bdf-a3c0-133c3f310ac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.255.236.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43bec406-d036-434c-b04b-03bc63c021c9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.163.48']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e40a27-eb61-4989-929f-496a4d16316b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.165.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be4bcaf6-1ada-4ece-91ae-fcb63f87909e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.181.163']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b013bbde-fe8d-4f1e-9f44-a6fc7ab0b7b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.147.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd390bb-6e9b-4267-a432-65d6efbb079c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c7724f5-0358-44fa-8b46-a4ce90456a1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21fd93e0-7ade-42e0-9eb6-d624c75a04cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e51d5b-c9bb-4a91-b0af-25c003bd6c1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72a271d-2dc1-4e92-8bcf-03125d758d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.139']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99c437f7-8b64-44ff-b033-93f3f9fdf3c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd53e3fd-0ba8-4187-b9ed-94f4c563ce8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bcbcf4c-06d3-46ac-955d-6fb610d94f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.242']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98fcd2f6-6ea7-422a-bc76-40a2f65d02a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.36.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89370fcc-785e-48a2-bcad-b391bc88b1ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.244.202.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a20e950-67a9-4394-8f56-56c776f29df2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.245.137.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a24badb8-4a86-41c2-89d7-df67f4934719", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.229.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--226a17c1-3e07-4c59-b163-ad8392a7356a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.130.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a55afbe3-698e-4c55-8f72-8798078a1716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.141.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c054524c-a2bc-46c7-94d6-a41f5196d4a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.151.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25bc2083-b800-49f6-bade-68fea5657e48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.167.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c410060a-2d4e-4875-9181-2c94331b11d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.177.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6c8e179-905c-49f7-8dfc-78286f02818b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.196.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3abd5c8-0e46-4e9d-bf20-ce0f89874075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.224.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49edd35-92f1-4f4c-8d39-711a67683372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.78.194.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77045e82-4b99-49c1-85f2-5610638a720c", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.83.78.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6c25e00-3ab6-4466-b14e-6f555a88db87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.105.76.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f86fad21-cbe6-4f05-bd5b-30642417c4f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.105.76.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98c00761-c2ea-4ec7-b793-5cfcdf5ff6ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.226.170']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23131823-6a59-4519-ae73-ca21b7c95c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.227.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f7dd05-aa81-4a5b-8fe6-e4b8b40c7651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.231.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d7e8a1-f017-47f9-9b86-b6fc25cda535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.231.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa3c49e-e5bf-4a6c-a74b-92610cbb57bb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.118.18.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68fa8585-af2a-46d0-b40a-2df2e8f4b0d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.211.125.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7933cf85-e96a-419b-a946-5a2bbd0eb97f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.180.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef3f2cf5-53fb-415c-8a1b-fcda52448894", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.188.52']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cfebb67-247c-4af0-a384-c112fc3babb9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.195.192']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00189da9-cfb4-48f5-900d-442326e3390b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.244.188.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb3d07b-0da7-488f-a0c9-ba589664e3e9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.244.37.97']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b32f139f-5817-4e5d-afa4-eacb61515120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.37.190.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d71b3b0-5c85-46db-b6a3-4addb7282626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.37.191.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b934736-d9ea-4b19-832d-43629af8960b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.5.246.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86528673-76a2-483b-8ecf-cb6526df518a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.6.207.158']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a63f62d-a5ce-49f4-ba1d-472ff2be8de6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.6.232.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8497be5-0c9d-4446-98ac-c2ed76fec9fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4da202-8ede-48e2-92f8-bf61701fc7fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.62']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecbde677-ab1f-465c-b8ae-50076c0c42d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca97f22-3601-48af-bb74-ab15cb3e34ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.105.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83f663b7-3479-42c7-93e1-d1f7119ea107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.11.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcdd2252-a167-4fad-a95e-00534fb8d8ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.11.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59829e5b-f373-443a-a95f-5bba20275a81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.11.51']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f253a1af-40d6-4e48-8eeb-172fa4a866f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.13.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beb545ff-a6fe-4143-888f-07f364d2dc17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.19.160']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac06299-9726-46dc-b4d5-35ae9513048a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.215.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a94072-e63b-467b-892f-85d921ad20d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.27.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe6cbdf-265d-43f5-a9d8-c9298feca22f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.27.225']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c9a3ce-cdae-4b41-899a-4e94cf1ac33b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.27.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce7a8397-a9af-491b-9ed0-79d4b0d381c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.31.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a56691-192d-4c98-a76c-e5802262727f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.5.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8139285-383d-4d3c-9f79-b25d88da0d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.93.159']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25fbaa7b-a0a2-4c79-b643-a199d3a32522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.128.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b1b0593-7abe-4767-8bb0-c9dedb1ea022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.128.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a129b41-9881-49b8-bdd9-ab6efcbb2efa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.168.152']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e0be00-4467-472c-81b2-e910ad157c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.218.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d40ed5bd-f17d-485f-9c1e-1751b57dfaec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.219.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c309105d-ff9b-4512-8345-2b8fe0cd0620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.221.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19780c89-4fe9-454c-8ca9-6654efc646c8", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95153514-b532-498c-b03a-b13ce5c51964", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.167']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcff4689-54d3-44fa-a008-fe1ad3fa617b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.171']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c407dedc-aeaa-4086-b2e5-ba0ec4cb6a4b", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.183']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--545b0b8c-1419-4f75-b25f-b068fe7a504c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.185']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54455008-c987-48ee-8a93-a43be2e1ebd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.120.162.160']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2bc441b-dfb5-43b5-b4c1-ef52717c711e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.171.243.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--497741ea-885b-4bdc-9e86-a1aa994812a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.172.30.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd6ad27-7f86-43ee-a17a-f9303b9ed065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.172.87.199']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58bc5853-f386-4993-b926-62540e8a064f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.235.159']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c3fbb4-e827-4fa8-83e1-0df87e51ed7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.236.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c05e757-e9e7-4671-ba92-9059e0f3faa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.244.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ec8a86-210a-4078-9808-1b1818633c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.115.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb5bf72-eb50-4ac2-9f7b-58e9a78049e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.115.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ced25e5-22b5-43b5-8c06-ceaf14c39ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.83.182']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8e37a0-791b-407f-86ef-22f4bf712dde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.182.188.163']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4758387b-27cc-4bbe-86e7-b014e6d089d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.183.94.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41626620-21fd-4d22-ac20-3d7d4fa57584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.191.171.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2c1674d-5d34-410e-822c-43952bad7b20", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.191.94.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fc1aaff-ace9-4146-8ef5-0534bcb235ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.20.7.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e40afd-c9df-4359-916b-c0e7b758f2b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.104.166']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9beff63e-a60e-4fa2-8d58-fb6fcda9ae68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.113.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a3f9b1c-bdad-4668-9a7a-589dd40e5d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.114.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d33d0f2-365f-4044-a19b-1779d07842a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c43bb9-78d3-4be6-b660-7c72a06e2a8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--003e7e82-d514-4926-a1d7-48d490ad9850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.217']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adda86fe-b628-4bd0-bba4-f6ac8352a2c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43a9e915-287a-4846-a2a5-bc095e12297d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1259b808-8e1d-4ce5-82d5-edec878a9bfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e85391f5-3829-4350-92be-37b4aac92e4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f4c6f1-a14c-4579-be5b-56c660e9997f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87e52263-a690-4e19-807f-329e78b5b91d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ee7e10-b2d1-4467-b314-30020a5d7d51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d113965-546b-4fea-a65b-9bea86fd2e82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f8a1dae-4eaf-466d-9806-4f2825218a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41439f0d-a40a-411b-9cd0-3d382412591a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f4c29f-5b27-4ede-a906-2ca1660c912f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ea6de1-74e5-45ce-a1dd-0b4a1653cc94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0416bc6e-672b-47c9-bdc2-6acc224da9d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.122.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a286c3b9-2335-445b-9eb0-187ae0dd95d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.49.190']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59012a2d-2bce-4a43-bfc5-4027da19a0b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.224.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66759dee-6d10-406c-94ef-87ce59a20fc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.225.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517bf1c4-59f4-45a1-8d7f-a0c91192b155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.244.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a594a4-119c-4449-bcd8-9ed9b98aaf3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.156']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c352f6da-4d1e-4e19-924c-3bc6b79abaea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.206.225.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f18f229-e268-4f41-a8e8-0b392285331f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.206.227.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45848672-d6db-49e8-8345-67ed9383f9fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.153.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d42a28-70be-4431-975b-5f4ecd55a5ed", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.48.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f61721f8-3002-4d32-8c3d-221dd725c44c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.0.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a20b390-06b2-43d4-b0f7-f2d704395cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.68.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88f16d67-bb00-4594-84da-ceb51319bf1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.9.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae80cde-1c25-4849-8a77-bb8de0eb1ca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.106.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f932e80-ca62-4369-bf5a-ced4774e8cf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.224.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9354349a-c603-4530-a478-5d1b3f55d837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.214.47.51']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00b56d2-e02f-4177-8ff3-851d18aa4142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.214.47.55']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c1d74dd-69c8-4a9c-9c07-10cc97a9dabd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.215.145.162']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72fb09b7-0d31-4339-8d14-b6046732a7a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.108.36']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b93140c9-2871-40c5-acb1-2629086bd409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.15.250']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7569957c-ea66-4321-a597-693f625a856b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.161.190']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73f0b447-3741-4e97-9e7c-2ebeb02b1806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.27.232']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c08ee08-e7b5-4579-b265-56594ed77ae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.3.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1598c9a-ad8d-4a7e-8639-2015d099d31b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.8.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2d7c1a-4252-43cc-a590-ea1c58d14100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.219.44']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c20b3ef9-afdb-4f39-9d1e-d0253a1c4431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.221.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84eabd99-10be-4f91-a819-3b3b9e180397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--408ecff7-d464-433f-bbf8-5b7b2efe0e44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc180cc-6f19-40a6-bcd5-77c0e1408722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.190']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e77db4b-fc0b-4e6f-a403-dea372e2d9f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8117d07b-5d78-45e2-bb43-51ece18c294e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c9c5545-26ac-4a9a-86a3-c1feba28cf31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4dce080-0d45-429c-a83e-0d3d0a90060d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.21.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89948940-e4c7-4353-9f18-27af4110ee95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a63a5e1d-bf8c-4146-9a4d-0bcda32346a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cf6b0cc-6230-4619-81f7-b330bcbdf308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1337d551-1311-42b3-b9a7-ebc05342a144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb600105-56e3-4e9a-abf6-976b20f9659b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d05cc7fc-b3f6-4722-8253-a4485153d1bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.221.84']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a9c5532-a676-4387-86ae-5963737f6f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.150']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88f545c5-4c71-4f56-8ff6-e14de2844603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.187']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57658946-abb7-4cbf-85aa-7f32964207b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.243']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9110298-8bb9-4185-8c66-fe98bd3c2aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4717de93-808a-4a3b-8aad-2118712ff1d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.235.41.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec9ef632-60de-4798-82f9-e1ff81b30be9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.106.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8367e6d3-74b9-4e01-81ba-374239b51969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--497742e1-96ab-4d71-9e3d-1fa893150a10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e89fe0-f4a5-4e2f-bc4b-7d6f5d9abbc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3148f5c9-8e1b-4253-b946-5fdeb35925e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.117.243']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e9061c8-082a-4d3d-9aea-fc786c42b8ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.123.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3547b0b-82c1-44bb-a1ad-7856654a74e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c5827b-2ab4-481c-b10e-766d069d847d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74dc61d7-ca63-4f09-af4f-0ca070de1a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.15.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a961be9d-7778-41ba-8c12-0545da2ef826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ca5326-e359-44b4-acf0-80b4fc434bac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa94df3c-2301-4bea-a5e5-06830ffa2e52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e3e0483-d9ff-4702-8d53-7705e78e50ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3753de2d-88b1-490b-aa33-2ab3be4abe4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f0cca7-5c8e-4f98-af1b-35cf888ce86e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.229']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a75af2-604c-4ab7-9492-d0a973c88de2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d77356bb-f0bc-44b3-be61-ac82418f827a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e355de-14db-47f2-a10d-bb6084c59b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d38383-a184-460e-9a31-c70b7d4e1320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.104.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e6b0a8-1d74-48f7-af50-789b4968a27c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.104.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f0e1986-6375-4bff-b905-1406e32a9d3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.112.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac90cb3-1537-489e-b68f-4b6e67a5e9d8", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.117.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:redis", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--565cca10-1ce6-4108-84a3-2f0e2e42117a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--397c606d-46bf-4ce9-b1e8-4b997df292c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af3593b6-738c-4b29-9203-70eb5a31a9f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47801c7f-4824-47e0-bec7-62ba362baea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16dd1c5c-54c3-483e-8ef5-106ebe1b1aeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.240']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29389bc8-026a-43a8-864f-9c0fb287e1cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f0de84-306c-4263-a8f8-1b2b2a0fd9d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc4e267f-c4b2-41af-b391-f2e3e9ff9c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.206']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cddd1ca9-f191-4125-833e-6823202a7159", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.28.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2275e0d4-48b5-40db-be38-16b69439a49d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.160.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40627d3e-5f2f-4313-99d2-3b50517b4e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.171.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e359aea8-8dce-43ec-9af0-f8a98ee3a74f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.188.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--573cb6a1-883e-4946-ae24-2d88e44de273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f25a4c-06de-41fd-bde6-ec24e3ebab9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.96']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e152e84-9191-44d0-abee-e21ce9da019e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.62.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d9a16bb-fd0b-4a7e-812f-0a31b10bedc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.71.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5e5c774-48ec-4303-961d-290fb7e61634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.71.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b40b53ee-f5f4-4684-a2ab-83e8700ac8b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.112.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6495ca24-0227-41fb-a4b1-85da0c5d013f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.16.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e52e4b-028e-431a-936a-af60e699e2d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.68.229.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f015d39b-f4eb-4b0d-92a7-987af71495df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.71.241.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a64194-83eb-42b8-969a-a31037fa15df", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.83.159.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a75ef9-23ba-4b93-ae64-4406c1f22fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.102.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04a349c-fb76-4479-bc4c-7f7ff404d95b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.103.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8cd222a-882e-458f-af8a-913f8839ac80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.121.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--199db10e-377d-4dc5-a5a9-3b6437166642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf03c139-be59-4e1e-a23c-2a9cd32f1380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4194a257-1227-4a9b-bc74-8f7d1194cd3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.84']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1928ff65-0234-4fe8-b5af-0269e07b2491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f3709c-b899-47a0-bcb9-737adba727e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.91']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--957bff8b-55f5-48ba-80a6-0e88ac6c5ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f736066-584d-44a9-8b27-9da1e5a29555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.117.55']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72b16a5-4cd1-43bb-b117-e914a4f54779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.92.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03ced77c-bae3-4f88-8460-154b1219b1e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.240.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ba410aa-927f-4b11-be94-25525cc48f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.135.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe05c6e-f5d2-4e26-972a-b443a300008d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.150.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2691367e-96b3-4deb-a1cd-29e1a932e817", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.239.214.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc9d9af-5157-44c3-968e-641711e5d767", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.239.218.169']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0efee62-6168-4562-9a6a-f33aa174bdba", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.249.24.216']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820376df-ba59-43b2-b070-ba2705a78cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.210.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc1f4f8b-9cb0-46c0-a6dc-525283f567be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.212.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa439850-f5df-4a68-a285-115d5795f3a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.214.52']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26542124-b22f-40ce-a30e-f91c5cc7ce94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.139']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a6b866b-8c97-41c6-89b0-2e01511c360e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3351d971-135e-4cce-b521-a13043771d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.189']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7426acf-aa42-440a-84ad-92d6f150901e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2bea9bd-9b5c-492c-a7ce-2c858ddfd5db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69498111-40f3-452b-be1f-35c5228e1168", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa7fb313-5dc5-4d94-bcd1-b50d40d14757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0278166-2cd1-4544-9f2d-0955eaaf9ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a34c3aa3-2eba-48ad-817f-9ae90ec02c52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc939ac-c069-4073-bf50-5762c63b1bae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--401cabdc-c1da-44a7-b23e-d449590dae90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.49']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c3590a-b91c-4e9e-bbec-f847dfe1ac4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.62']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aed61ee-3a89-4e0a-98c0-bb8653504480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a558b6ba-96d1-4f13-8acc-89befa5b6639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af9e82e6-3429-4448-8d36-0d389e745f8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.225.139']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fad48d4-775b-4328-a847-e8cb3f955e4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.225.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93093adf-6831-4f2a-a528-addc17d6f8a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.226.160']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1791e7fd-eb3f-49a3-9a4a-51f626790a22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.226.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3047d836-9653-45b1-8198-a19a39f93094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.227.192']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49c3c232-cc52-4a1c-a32a-113bbab34ae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.229.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae9da0f3-e8d0-48f8-a4ee-cc2b2319f62d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.230.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--635f4bdd-aac0-4fd6-a7d2-db2de35483ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.230.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--729fa043-e26a-4f4f-8468-ba879490b24e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.230.166']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e43f483-84cb-4146-b86d-75aaf9bb8988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.233.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e199721-a547-4436-9026-8918f9e5170e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.233.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--447301fb-ef31-4694-8eae-5706a76b13eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.233.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e691e1-4413-410d-a029-565925be97e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.234.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b61c1169-530e-4ecf-9733-3a4710f6931e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.242.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee3b353-3975-4c81-9b5b-ca79ee1c495d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.243.63']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e3e65be-7fff-44de-ac7a-654ee5c36a19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.247.156']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24373112-ea69-4d3a-9a82-c3f42be53b38", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.101.1.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e65ed528-b079-481d-9a22-ec936613e50b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.36.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ded546c-5568-40e7-89c9-7111a30bb1fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.4.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bed0852-3b7a-4f96-99d0-6e36dda54fd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.40.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa6fbf44-8981-4267-92c8-6d04c17c6d28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.71.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda6f328-c8c6-45e2-be32-a2eda24923bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.77.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fcecf0f-8b24-4b6a-9a1d-b3eea0f47b00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.86.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f35099d-cac0-42ff-990a-7b531ebb4078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.87.36']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5785cc9-6ed0-4656-aeb0-1f5bb007bc25", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.160.224.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b3ecc20-27b3-4b27-89e2-5175677c582f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.35.25.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b164f2-ad58-4b3f-94ce-5581a1ee128d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.0.190.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d44b7771-110e-4b75-9e4c-d6b177e903da", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.10.100.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28f77ed-6866-4f21-bbe7-2bcc9f1650a1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.10.170.182']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f4cd1ad-c11b-420a-a0ca-cf2759814ced", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.1.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03478443-d859-4d7e-818c-91ff45be067f", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.11.141.211']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e572f7d7-2264-435f-8b3b-057f9ba1d5ec", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.147.88.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0888c8e-2811-4f6b-b24b-c8eba777c149", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.148.132.129']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b62d16-2088-4b69-92e7-62dc8d0134c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.176.13.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d787cc7-35b4-4967-aa31-cd6137f11835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.202.18.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df31f86e-6f05-4884-be11-9070738a764b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.203.61.49']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dd58a37-ce2a-4291-8cd7-936681006e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.209.246.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df516f9-a15c-46f7-965c-a54bbd9ef569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c26ab8-26f9-4d51-9bde-411eb3decb71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.216']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b633d3-1e36-4b04-b980-419f404cbef1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.9.165.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9fc5780-6e3e-4ee6-aa56-48df2fbb770e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.109.97.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5fcf4bd-fbfa-459c-8227-8b5decbc32c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.111.61.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c83da5a-a309-4298-9b48-f16cdd4f3e76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.119.25.48']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a028c5e4-34c4-40ab-9fe4-1ba131fccbbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.111.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd2d16b0-a7a1-495f-b2b1-c7ec0a7b6f98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c80db6-a4d6-4929-88bb-ac75ab96e8fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.123.2.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--983588d2-e199-4f96-909a-bc00f13e2a45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.123.2.173']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a37f09d-f3c6-4f92-b872-841577ae13e6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.124.88.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ab573c-236c-4a5c-80ac-a603b78b4cc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.19.137.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--271ed0b9-1af8-4c2f-94c0-8b323c130a2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.231.150.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff3fbc33-de18-412d-a369-e00cdf5c0ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.28.74.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb01fba-96e9-4918-a986-6cb05c518ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.28.74.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c66bff4b-92fa-428d-a4e0-34201527a105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.193.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb0bd916-5206-497e-a220-b357c276b8ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.39.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fa151c7-3fa4-4052-9b34-dd1ff8390b33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.131.188']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef3df9fc-2b27-4772-8bd0-5aef0220615b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.131.192']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--345ba3d0-a199-4c31-951a-1cd054d27473", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.129']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1b356b7-43e0-477a-88aa-3e39d4ab3283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5946ac5-ac90-43ed-9337-63d1e1dc4ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce52fab4-651a-4351-b314-5b2180f22d22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4dedcea-1480-45bb-aa17-7a4445f2861a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e73a0e2-0b3f-4f22-afcd-57db9071b0f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bafa2276-117a-41ec-ac6c-93628f1492e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70bff06a-58d6-4eea-8315-5061a4994c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.136.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ee3f0c-e72a-4886-814d-0b2c86d5444b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7219f51e-2d9e-4d65-9f15-aaa47c46e2be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47904cca-afd9-45f6-9f99-a6e0a1d1ed60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d52b8e26-98d0-4e0c-8239-54924c71b07f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7037dae9-933c-42fd-add9-b4a23a147178", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.131']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--724a417b-69b7-4887-bbd5-fac7a3aea532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67720080-1e14-4c10-8ca1-66a503e8533a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f5fdc14-2c9c-468e-8d05-36dd2f3ef362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4130e664-d8f1-4a8f-9051-e8f1e83cb9ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.173']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6940b611-d4d0-481f-a443-b1245e725554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d4d7ce-9f39-4ae9-9362-e2579f350d01", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b77545ae-2f85-47d9-b4d4-ff8cb9abc5b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eded6d4a-d1a9-46ab-abde-616aad9c1bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10010e93-fe36-4a17-8916-8b0c4b4a5ff6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.238']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3029862d-d975-45e3-817e-af38ac81223d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04cdd25-c180-41e6-8449-98f25df6cab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.246']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6dd33e8-ae85-416c-be67-e07fca0febc6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.249']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0e5cc3b-de6e-4e33-af96-dad2828df2fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22e6719f-3281-4198-b95a-ca3a8ac997e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c476516-e453-4184-bbe3-c0fe5830db51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d97945-9ea2-4e55-b76f-687de5aefefa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e194772b-9cd2-4559-be57-9e962bbfdbbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b680b5-9631-4915-9f97-07059fe1604f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d83912c-221d-4241-ab1d-d537ac096eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.147']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34ac4ba3-52f8-4139-b170-ec2b4f50bca4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.183']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bdddfb5-f729-4a01-969b-c9cb992c6c68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.189']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c609e14-338d-4d23-a265-652a71616d9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d23d54-046e-4b7d-b658-e519bb716a13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.199']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3484e46c-c7ac-4bff-9077-86676e046402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d24541-fc7a-4313-88e2-7be225eca04f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.216']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d70d3aee-4bdd-46e6-87b9-c9c672512c66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.250']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4880c81-3317-4e58-a709-9166e243bd30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.253']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b4c42e-4c53-4d9e-9d1b-d144a7c6e9a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e60e6e94-f1c8-4e8f-83e3-70c1b1fe3ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ebf9bad-4dea-40c7-9b2c-5e7b587918d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91260854-d121-495c-852b-269737935ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b1f56f-1583-4d04-a0bd-060b92348807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.96']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84902204-3382-4460-8119-5f457e1eb122", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.135']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8fdd3b7-63e6-481f-8560-b4867ef9deba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19dba423-7a11-4152-a4c8-818cbe6d257d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.139']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc0f8e30-3501-4f44-ad2a-4eeb32c6802d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.167']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d77e4284-81aa-4608-9005-845dce6a8dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e76b40ae-110d-44e5-b59a-8553e38ef9e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.182']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed96cd26-3b99-4b52-98c7-70b833a87bfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07d40933-b4be-4fc6-86b6-63745590ea62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ed5cff-35be-4b38-a1c4-c34a45f3e3ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c95391c-10f0-41fd-a5f8-9dabd78ca5de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bec7900-154d-406a-8ded-60d44ed8a59c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2871ea4-c071-4bf6-8ca5-cf2a31922b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.97.210.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f02fc850-6f5a-47bf-9029-fa1722ca940d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.102.67.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b05397b-b3b4-416b-b854-111a119d54cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.12.200.0']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3504e427-84b6-40bb-8e22-f15f1adc3153", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.184.114.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42dc98ab-a46b-4678-901b-b39c1128e480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.22.126.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c837594-1b22-4298-9f74-c7a3b6ad1ebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.234.242.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0230ef8a-a658-4ceb-af5a-22473f1ab3b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.37.138.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed957fe5-02c8-43ee-a254-d96042ab767a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.54.242.64']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c7dea1-49a0-4417-95b2-4ee695b2d6d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.75.210.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a97f7b7c-72ee-4974-ad4d-eb5a058ffe0c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.124.167.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61123290-7cf1-461f-af71-62fd085fca52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.170.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4ea09cf-e724-43e7-ba47-74e112785a30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.179.48']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43ac270f-ec1c-48dc-9c66-604cd96b7965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.185.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb3b17c-a7bb-4290-9f8c-76dee08d9db3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.187.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5a3516f-d56b-458e-8336-607857ba7261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.192.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02074b75-c860-4e37-899b-7f485769ad8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.205.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce8ec790-7634-4bb0-8de5-ec33bf684dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.225.188']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a45d91-44c6-4128-b103-8bb80ce971ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.226.158']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4db1cf6-890e-41bb-a427-ad318b9ce62c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.228.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6566da3-abfc-43f9-b11a-c26966fefede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.236.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3888589c-98b8-400a-a713-9377132ff0e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.5.48']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa2bfdb-abd3-4fd4-a985-5dca93e19db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.131.44.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95fea76d-e134-4979-82c1-23abc9adbd93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.52.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f31140e0-1972-4da0-a89c-9f421e66ebcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.55.153']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--279b90f3-f93b-4f12-8e81-191d3149dbb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.55.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1864cb56-d154-4159-b2c9-3d4a1a05b6de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.18.147.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26531f46-140d-4c8d-a747-b5f90e51cf68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b5e6d6b-4aed-410a-9cf6-650520b25b07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.152']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f598fa7-a5f7-4f24-ad70-96a7490c3c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.210.229.190']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--175e963e-8d59-4fba-abf7-42012c5d163d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.214.76.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4f25e0-c140-4ff9-92d5-45c1a32aa2eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.238.229.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ef55b9-2cb6-418a-8818-6ab4555009f4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.251.140.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da5a1fe-c087-4859-b8e7-9921b9f33eec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.110.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def04c3e-4a02-4109-83bd-64bdc71bed81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.196.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ee50ec-fdc8-4b95-b85a-ecaa7e1b642c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.196.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1595206d-a98a-4f58-a489-2078f8e3c2d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.223.55']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e14dd45-142f-4b23-b944-8a1aafa405ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.232.129']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb077d87-7bd5-4e58-928e-db2a7547c221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.232.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ed6fe1-6abf-4666-8550-390e9957c078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.237.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b571aa99-a6f6-49ab-b5a2-e9fbf2a130f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.237.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abb51773-bfda-4551-a430-ac41395517c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.55.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b612e0-96d6-4757-a34f-5c7de62f9b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.69.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2056475d-ff46-434e-ac0d-0dbcf8796f38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.89.166']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcee71db-4afd-4ab5-ba25-d24c15e5de37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.65.239.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee0a787-a0a3-4981-b226-231e4fdcf14f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.73.210.62']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6548c166-bc21-456a-ade0-5806c3c127c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.78.202.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f78f0c9-7d7c-4e5e-af69-9faa022a0eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.105.131.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f143a3a7-4a77-4e65-a7d1-8610a9e2e327", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.156.88.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5cd519a-8619-42d4-ae03-f16d60dc0aa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.175.249.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e2ad4db-8cfe-4cd9-8880-24b16eea418f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.222.52.63']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e87493d-e097-4ce7-9d60-24931374f10c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.232.238.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a809d91c-abef-4730-b59b-eb9ff30a338b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.233.155.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135b2efb-eadf-46b4-be26-4208fb382c00", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.40.112.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3557a3ef-1cb3-47b4-a45a-c157f98c24ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.146.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4f0e5d-3510-49f8-90fe-41175231dab0", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.163.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e822623-81db-4a95-9d13-3d2258195ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.168.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5782358-895e-48fc-ab67-3cdf57e86174", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.48.248.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf84cd9-9e66-49f7-ae44-3fc47885768b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.49.115.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8dbde85-2fda-4fb8-b8e7-753107c39157", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.60.228.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa9220d-27ca-4dee-9522-e7bf8f88108b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.137.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de81fa4d-de3f-4b17-ba9a-e45867c0925e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.232.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dbc7df2-6536-45ad-9dd0-c430cfbeb849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.232.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d493817b-c7c1-4986-821e-c3f29dc6e690", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.30.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--422f016a-da7f-4f57-91b4-834dfcd3f61c", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.63.108.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffe71b46-170d-4c67-bf29-092654edba7a", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.95.251.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--953a42f1-9d96-4bde-b7e4-40f7d17796b0", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.117.108.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e420e6f9-5125-496a-96fa-e7268e72b339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.118.134.254']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb4ec33a-099e-4528-b412-69aacae6324b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.119.209.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f024636-212a-49e5-b4e6-4cafd7e5eed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.133.199.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca227912-abab-40f3-af37-6b87c05dc976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.184.13.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c1420fe-e9f5-4dfa-8a70-9ad90746457f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.188.28.84']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--986fca86-6b03-4593-b5ac-507c8516c946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.189.74.1']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ab3b64-986f-4f63-85d3-8e60c4d119fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.190.15.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9185cabb-6a22-4d7b-a956-149a4c1eb83b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.206.171.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc1774e-89fd-4f77-8634-cdcbb80f7a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.208.163.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d08597-2e44-479d-9b06-0536791f20c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.212.169.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00bcf2fb-6cb3-4d2b-9e38-b885547cd060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.212.241.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0e7ec7-227a-4534-ae3e-bafe14f0d445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.216.141.193']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7801181-04b3-4e7c-bd55-587c84c7b4c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.217.208.51']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b0f41ea-cc2d-460e-b23c-40e9adb20453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.219.59.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d19dfef8-366f-4f99-b676-08e088aca3cc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.219.87.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f104393-aa9b-445d-8458-9a6e3b599995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.221.1.240']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25914b71-0343-469a-9700-5fe4591d10b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.221.179.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc319aa-c5d9-47ef-ad20-385716e2c08b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.222.148.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--947f2d12-4006-4509-8565-312817830a07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.223.119.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f243b29-8391-4276-b9ef-eca8fd40e17e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.223.143.188']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1413b66d-d0f1-464a-8801-c4e3eb772b31", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.225.109.243']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca32c26-f00e-4652-92b1-5d9f6de4623e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.226.59.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f8e6cc4-00e3-4df0-b094-6d1b23aaca4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.234.191.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b47eefa9-ceb0-4dc6-b39f-1d725fcf2647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.158.88.170']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a3dfc9-f4ed-4131-bfe8-efbc8d139b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.202']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e7c484-7478-4ef8-8046-a21982541e41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd2bc6e6-4a73-4a62-9704-504965103fd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.182.228.195']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f027714-346d-412a-a4be-88c395aba464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.182.228.199']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aee658e3-36d0-4a35-9500-c8d609303185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.182.229.200']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c28a301-5dd5-4ea4-9a31-701f10036cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.184.176.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--540cd86d-0a8c-4993-80b3-73e1d4474238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.190.126.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a361505a-5b68-4949-9343-768d41dd7720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.190.127.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1225a97a-0f50-49bd-902c-97b2f8ae15cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.191.121.44']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f2b3fe-00af-413a-bb30-d10a8832f1cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.191.127.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c996fe02-1d7d-49f6-97f5-9532ecab302f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.195.195.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0782e9f0-c867-4949-9f81-1874ce20a4f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.195.199.1']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de6fff3a-3457-46b2-99f2-d73869ea9599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.210.206.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6acb94b-7261-4a5e-a9ac-96f732f96fb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.232.64.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf4839d-5eea-48b0-8492-56eac90cf8df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.241.51.96']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa436887-d9dd-4026-a1b3-17d1a588b50b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.242.198.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9073191b-5512-4ea2-9c32-a4e366eb2603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.242.199.238']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e23b45-b094-4ab6-b94f-4c83a505f685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.249.36.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--497a58b2-e5af-43e5-aec9-0c90c1b22c2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.251.180.199']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ee8baef-14b0-4b4e-a14c-fa568f29c1d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.252.25.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be06416-c8a3-4daf-9520-37b09843b2ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.252.29.241']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07191bdc-2ce8-467a-b8aa-1989c8815d34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.70.38.202']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff3babf-5f2d-441d-8e5a-4c9ecccd1ae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.74.222.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e27185a7-feba-474f-b2e2-143952423a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.176.249']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d011f41-4904-4645-8ecc-0994b68133b6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.194.91']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3699e98f-3c69-499d-be02-f3b4ed5b9bfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.234.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c52a59a2-a850-49f3-9ac2-492044899335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.95.238.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e08bc79b-1d37-4629-9c27-67bb9a79faf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.115.118.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5633b79d-db32-4d4d-b76b-1b45448a5fa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.115.99.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb3128bf-eb65-4cd8-9cb6-ad3dd2a81656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.178.1.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b65ece55-2122-4672-9af6-0468c138892f", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.212.41.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ac2865-6268-4074-869f-7d505c7bec29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.232.249.62']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674fa109-1e98-477a-86bb-f476079b2eab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.233.91.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3dfa19a-0ff4-49c8-a951-8771a8d5f5f7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.31.73.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36d6bde-37e8-47c4-8d24-36d151d21395", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.39.108.14']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d782c59-416b-475c-85cb-d21a4d903d2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.78.45.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e97e3319-280a-420f-a808-c056802f3b85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.10.97.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14959677-1d92-4cd3-add4-320f2edb07f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.119.225.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69031490-ab3d-436f-88c7-a039d672203b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.119.227.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b528149c-9015-4cd8-846f-1110b105f5a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87b13619-0735-453a-84b4-5fde401ec758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c1a402c-a5eb-4c9d-b907-f953dc99fb49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d101f58b-102b-414e-804c-ad381a9844e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c4122da-32d4-47e6-93e5-b554266b2168", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e89c6878-0718-4462-89cd-46263f949d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75dafa61-c0a6-4b7a-9fe6-323d3a8212e6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.143.112.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c88571c-c204-402c-9056-29410912653d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.16.3.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba545943-7cda-428c-b9f8-13e6fe7b7ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.180.169.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61f8384-5941-4531-b49c-4151fb198bcc", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.189.95.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b669de8-3991-4232-9311-b236113334ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.168.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65427616-e779-4f2b-a731-c9b2e1aee8ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.168.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2b58664-4f14-4a94-8b29-c3559235141e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.168.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1542cc05-aa5e-4577-94fd-e52f8ecc82bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.253.176.185']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab6ddfb2-61f4-4541-a52d-d87c13be0437", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.34.148.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--499361d9-4e87-4814-84c7-f05ef7d87291", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.40.103.253']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d6be5e9-5f87-4c21-aed9-84d40a413515", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.48.68.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d546deae-f595-45aa-8f88-f7925bb36351", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.61.35.171']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8214dc92-e7e4-49bc-8768-8e4fd30b2cf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.71.179.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a276c8-9f1b-4125-9231-4ccf6f4852c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.9.33.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f1d8c9e-e67a-4228-859d-e3bb4fbafb2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.92.2.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef0d3aa9-d3a7-4b72-8451-97ecd8280797", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.134.217.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2852dd-dc32-4745-a648-5818fd105af3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.155.176.188']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfa457d1-9a1e-4c83-af11-5ff90b19c9c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.162.126.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25291cef-6292-43b1-b496-100b66efd7d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.171.242.241']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c9521b-73bd-43cc-86ea-28f32b733c14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.182.110.147']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac21f06-9209-470c-b31b-ab556baaaa35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.200.136.97']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--140336b3-45ec-4be1-9a97-8cdc83ae025a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.221.20.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc9b7b9-63b5-42f5-81a8-8613c401e9de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.232.212.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c34fa6-3e53-44f1-b7db-83ace5293b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.232.212.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e27c60-b942-4315-ad29-7326c1ece8f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.241.54.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7148e06e-804f-4d9c-9088-e7dbcd25ff1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.252.22.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4dac2cc-be9c-4c72-aff6-6e27922a39d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.36.35.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c15d81-52c4-4f77-9ce6-c2cbfb0907ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.81.35.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa1d9559-67ca-41dd-b309-e088470e9d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa38b823-71c0-4191-90d5-a37eccbf86c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c11552-5696-4570-957e-e168398ebb34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76be67b0-699c-45fc-b33e-6849c8ea439c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f41419e-3feb-4183-b8a2-2957686126a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e2a7814-cc67-4233-94cc-062a05e4f64f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.112']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc7e10bd-b1e9-441d-b9ca-09718a143d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c0897b-3759-4a37-ba93-f278cf6b379a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88bb0f30-c269-4250-8500-d6ca9c573c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--039d07d0-b601-43b8-9b9f-dfb3f047fa7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce622014-435d-496c-a341-191c461f16f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06557e2a-ab6d-4fa2-bbd9-e05698add508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82fc7abf-5cb6-413b-b95b-72bf0f2455b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd034668-71a4-411a-8e95-45aa45041f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e11d902-7273-4cdc-a535-7a58cd48d236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--023a4d8b-978c-4fdd-ab16-4f19cd86e1c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f17c86d-a3f5-47c6-a73b-df1c2081d350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dddd5a0-eb9d-4c14-aa4d-f87808a9ed0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecc63290-2aa5-4ff2-8ad5-d56e143a462c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21b967b-961c-4614-ba00-f633365383a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d53ffd9-e867-4514-a764-758f13d30d27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ff4054-a814-4a9f-bf41-972f90b7c3ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--844241c1-6cff-4d65-b0ba-b447b6ab65ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4252061c-84bd-42de-8936-4193e32349ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca9bca55-28fc-4cb5-b130-bc8fbc29878d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc17b2bc-bd0a-4059-8296-a463c15d4679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29dfd0ed-1e3e-456a-85ab-aecd15031efa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2345660-ddc9-486c-a108-863cbc41f23f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b29c59f-0dce-4a55-bc4f-4e561b6705c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f59930c-4959-4a60-8dde-5f9cff378efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.96']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--347fb907-9336-44d9-a2fe-de54507c8e28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a011a231-bdbc-4304-853c-33bc60e8010d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a99351d3-3dfd-4d20-a15e-3c8b138e55fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d55b7057-034f-4f61-affb-959aa21957ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.199']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8a43c22-398d-4591-b33c-249eaead11bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.200']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e54d7d87-c4e9-4a5f-85e5-42b29fc9a893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.202']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e2f8b41-cdb3-41c6-8e0a-8d219df62128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77180689-35f7-4588-8357-694f6fc7ec01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ebffb9-7e99-4f80-aa7a-0f576e23e86c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f19130-6830-499e-a3d7-7abcd471d70e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b59e93b7-a35b-447a-9da7-94db5fcac98c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.211']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df5fe55c-ee43-482e-a499-f0e3ce1be50f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c74b0c6c-5995-4667-bb44-9d4344204fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab02e69a-a30a-43fb-ad1e-639d7f9bd9d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c0a43f-4ada-4690-9d11-c67cfba80ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93a41fce-20b0-480d-829b-72bb400b39b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b25f0e52-379b-4e7d-aead-dafd4edf561e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.222']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ddd0644-ead5-44ea-ba4e-ae0caffe8d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e7ef88-ad91-436d-86f4-3d36fa17461a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa154faa-5b39-4fed-9eb4-b7eb5105dee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef935043-30e0-47ff-b369-a7c76dc9414a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.230']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--590bdbb0-1ee6-47d0-b463-ebb7b80a97aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.232']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b2f1371-8a80-4d4a-83b2-b8bfb2a708af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c7014d1-47ca-49e2-8d5e-bda12cc8f1b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.238']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--103531b3-09c3-42fe-afe4-cbc5286bafb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.243']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f38eb6-ab54-4314-b868-6961105326c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4d14cca-4648-473d-9837-b23eaae4f781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.246']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--381236e8-9942-48a7-8cd8-fc6139a2a8f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc983fee-2125-4964-9d28-6cd1e436d16a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--870f2a5b-63d7-4c45-b44f-7d44f27a1894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.250']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44b84d40-1e86-4b72-bbfb-8131def23c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c3a3c63-9498-454f-a520-1f0356c75ebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.156.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52795826-bb90-4dc3-a62b-e5592d3ff5d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.157.176']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2abd0bd1-4134-46d7-b31d-008934fe02ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.157.184']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2fbb28f-c549-47cf-81ea-9bd8a5853032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.194.183']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--738375b4-5be3-4f1b-8db2-59caf24a7679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.206.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6893459f-77d5-496b-aeae-75629d7e22ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.106.103.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac1799ed-f47b-4505-b070-f41249b87eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.107.80.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c8f5b04-2ffd-4252-b3cd-dcadc83b1e36", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.108.209.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb5989e-f482-47df-8c84-6f5dae0b56fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.113.10.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0acc3d-aca1-436d-b2b3-ecb6b7653301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c8b86c5-7b62-4064-ab2c-119ec3998da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--460ded37-1e83-4859-80e6-2ed4a9e97b22", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.87.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdae4746-3ad6-4b1b-b992-8381fc7613f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.120.124.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f22fcd69-befd-4689-a10c-19de3ff02b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.132.187.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--640e40b9-a507-4afb-b9b2-c1f173bab4f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.134.178.56']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d05391a-c253-40a4-9782-eb0e44576329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.134.49.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8278110a-7db8-4631-b413-64a81b1a7998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.134.49.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f5f2b7-b5c6-4e5a-bab0-22a938c5bbb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.134.49.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c6f251-98aa-420e-9697-347f01df5f7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.134.49.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--296fd5e8-1669-419b-8130-14c53a14e3a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.134.49.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34b175b0-5743-4d9f-8595-629e5c5d9911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.134.49.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da226bc5-95d7-497f-b48f-6d31915bf25a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.134.49.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ada35f1-2b6d-430c-9b46-80e4aa81109e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.135.157.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cecd0a44-f9e5-4abf-aa02-966e01132224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6db3b490-bdc8-4cb0-aeb2-2e75dd5cea82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5635c4e-3ff7-44df-86b9-c5e44fbf5e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd2e8d6-7d45-470b-bef5-9623984883ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f36c225-5d85-4683-a402-b25f42e85b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.148.147.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e97a33b-c50b-47bd-9047-3b3eb4a1daed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.150.191.165']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30928350-7af7-4ec9-850f-9ea73d07861d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.169.4.183']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--067347b1-1660-443d-8c3d-55e7328c2a34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.177.72.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c0f151-af40-476d-a55f-1e4febf2682a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.177.72.49']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f6f9ca2-49bf-43c9-9ac3-edd177f98a7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.177.72.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93121caf-e7df-420c-9a8d-fd3a2c5b8c6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e12fa539-3a44-410a-b2ee-09113c298dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.14']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44deecb7-fcdc-4269-a579-94c91229d4b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffcf6a3b-b168-4443-879c-22b3959a6bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80683ec2-c85c-44c4-a8d8-ffe1d32d1df4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d617d45-0d04-43a0-8c16-55b943506c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d06ecc8-1f84-4333-8dac-30378a657f7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.188.249.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85904f46-3427-41c7-b048-7c8f9e949016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.182.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b6d1774-92ce-49f6-ab50-54d26db69e36", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.126.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed440919-bd5a-4d7d-8e5e-3e933ff80877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.165.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec8840bf-b4a6-497e-ac15-2b049e1030dd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.1']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--908eff66-00e3-45d2-a75d-cb44534c1472", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da05f4ef-cc36-4217-a7ea-ca695e21c752", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ec6709-9b7a-476d-b1ae-ba418cd682ac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113844be-be10-464e-b43a-00129f6dad4e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e94e96a-8ec8-493b-aa80-2546525520ac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.14']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def1469c-8c38-43e2-b81a-b8de6446bb6b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--220bd068-a39a-4057-8e4d-aa5c070dc8e9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--642455e2-faf0-4504-b31d-13dc624c83af", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83733ada-e1fb-4bf9-9f3a-121c02662a69", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb8195c5-67bb-4cc4-8dab-b706558ced3d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21dcef00-37bd-482f-9f38-7bd8e2979d32", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--631cadf0-f13a-40e8-8da9-830c304031f1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a7d95e-9eab-4fef-9da4-c4b86121c7dd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13fa00b5-ef9d-4ba2-becb-d011c9fc2828", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9aabfee-ab2f-49f9-ade6-a96838b0b994", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8ece520-31ef-4217-af61-294865f55847", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a22141-0bbc-4461-a348-dedb25007f68", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1fb0d24-6239-4c07-9b7c-5bc0165c0d82", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee86f7c-aabf-4580-a08d-58cad67fa63b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.196.220.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53cc769f-5310-45ff-a626-809139fc958b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99c07b63-a43d-412a-840f-7b0ecce6745f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdebe81b-0005-4d56-8a47-832f17853376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf77161-a723-4dc4-bba9-d96f59171cf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f48951-4190-4d3d-a1db-ac964f61adb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455919cf-c6ba-45fc-ab18-7e5855ec1447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e703b3-3e5f-4fb3-b59d-e33500402535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.211.155.139']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb86a874-71e8-4d5f-bd8e-72d1694472ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.163']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba6aabc-4be0-4bc8-82ac-cc3e07bfa595", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.217.188.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--903b5a8a-7bcd-46b2-b4dd-7cf38d11bd3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.218.138.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52277e4e-c3e8-435d-9809-e9f04ef4586a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.218.138.55']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--222a29a4-5bb2-4bcf-8445-827611fd5e95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.218.138.56']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3a24f9f-d988-4019-a7f9-53315361384b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.219.133.156']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68e68e61-9c94-4d0d-8ebf-2ec5a2f8dd68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.222.138.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80aaf873-1f6c-4487-ad1c-df6a2636a4ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910444b2-694c-4a9d-b762-7d832289079c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc89fb4-f70f-4364-92d8-649e433a277b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--336be9dd-41ee-4e24-bec7-0f7e4b4b4c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d80cde59-2f0a-4ce9-b5d3-f066103e24c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02504559-9fa9-4c9b-a719-54990a7d6da2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08aa8ee-a0a8-4384-91a4-878c6802b34c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3590152-6659-4f5b-bf23-80daa412a6de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--140ff98e-714d-49b4-8a8d-d5b0ba8c6b42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c8a574-1216-4793-85b7-e5d85bd72cb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca86fcf-473a-49a1-9b8b-91580a36ce95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c61ad61-ce21-49a4-81ec-1b42111447c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49db019e-3259-4178-9309-92eed918c6d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca5fb9da-c83e-4356-88f5-3a18fcfaa6fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f5f88a-b701-4138-a222-4595c455d892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f863ba3d-d85d-4766-8efd-6a21b306bb3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c33177-2e7f-4101-bc98-6076b3789d89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a72f6333-d0e2-4aad-9562-af5268741ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4728b95-0091-45ca-905d-ddc9c1373efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d7a98e-9e43-4319-9163-741535b09a24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--832cbaee-a225-4e11-aab4-f44ef0b64d21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--263a3cd7-1719-420a-acc7-e8a912a4787f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eeb565b-d20a-4738-acd5-365780b5257c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5b9e83-f100-4bfd-bedb-fdf312378fe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bcad6e7-1b28-4a46-a266-803c3e0c7d7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8548e9a7-00dd-4873-b73f-63b32c76180e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.51']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66335d5c-1b3c-4577-89f1-73194dad4df0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.52']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c823b91b-7e8d-433a-a89c-f6cec107be36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7750a327-c78f-474d-8743-a499ae8f9dda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.55']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea9f945-6960-416e-b6e0-3cea2b928456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.56']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be7fb587-ef84-4565-8877-b02f0d697a9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81147236-289c-4673-9057-711a1fa4bf03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53f85516-bd6f-4425-b378-ab68f2485d2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c860fa9-5d98-4933-880e-319c6149b210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.62']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c85f04-0df7-4a96-ba47-7fe0a0706f51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--609e1382-9c86-4758-ae97-1caacc18e4ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78126e09-3d1f-4523-80fe-6efbf5267493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.224.128.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ced2c6-5466-4dab-86ca-771a8eea0f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.225.43.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--070da997-f505-4b86-8978-8ffd886d9be3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.225.43.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32821c3-44bf-4b12-86f2-683e2076011a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea90cd6c-9161-4594-a9c6-8ce835930665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ba18df-8116-41d4-a979-b5ca4e5b1b81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.14']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c09cfce2-9b13-4af4-a630-62fd32da815b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5312878-2caa-4f8f-a19f-70114e1a4868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fea47643-f662-4f49-913c-403af43ad89d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.48']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3edc7673-a740-48ae-b66f-8f874b35e8d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.49']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--965d778e-8173-4512-8bce-f5c61472172b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.228.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cf9d58a-feb1-471d-9396-146f9ac3d778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.93.242']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c4303f1-315c-49ca-8031-00f040a0f36b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.228.72.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35daf7dc-2db7-4897-bb6e-3b2910f653f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.229.225.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f87a009-6ecd-4fa9-a179-6e347ef97dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.236.22.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1581ec9-84e2-4c28-bff2-0b7ee89a9b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.241.208.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19f8e691-45d4-4437-995f-4d9f0348f8eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.241.208.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7cc1d2c-c6fd-45c5-944f-d10df6d684f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aca1af8-a80c-44bd-9e58-1e06628f8b8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93e64fce-071e-4714-bca9-f7a6a8b3dccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.112']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca6f8ce7-2aa1-4776-8fa8-0e90c917a164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb0ba997-c932-4a0a-b6c0-4a7b4e1a213e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5205b7-babf-4f08-ab98-e21a8f2a3f84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72611d75-938b-474a-8167-6142e1266d61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6530eae5-6cdb-44eb-94d0-1656fad7b4f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c947a8c9-88be-4208-8a3b-ad24af527e4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.59']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df36c97-f2c6-4e40-81b9-1ce7e4575bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49c11d0-dd3d-4f83-b97f-83021eab856b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd4e04ff-91d3-47f3-a883-33dfe7cd314a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f06da7b4-01ec-47ed-9e24-26f7c1a2dd6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e96642-24dc-4c4b-9bac-304a3d9e3071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4410ca7-bc43-4ebd-9266-24e7ffcc8523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34303e12-19c7-4063-977b-94424c8c8d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb8c9d9c-3788-4db8-a644-2950b5a5c866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a860e2e-a710-4f44-9e2a-e69674358287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb5feaa6-56ba-4113-96c9-8fdd42c75c3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a48d09-b949-4947-9c7d-4ff0fcb183b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3413a3cd-3a16-4ff4-9a62-be8d91e21a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd1e9c12-4cf7-473a-8a13-ef19e1df89ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67211ad5-f5d7-4ad7-8a73-7a88cc20a41c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.173']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed04b79-2bdf-4799-a715-11f2e17ca27b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.211']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe84d53-5f16-48f6-ad06-e6f71de84b5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a61782a1-b7a6-43a7-a5c1-544c53bfcc7f", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.243.5.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9622fcdd-71ae-4c0a-9141-67a90383c002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.246.128.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c8b3f0c-f432-4aaa-9651-6d1a773a55e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c3d6f9-5ae2-48be-8053-536be09a8df6", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4870b93f-d7a0-4bdf-a10d-01e331cb7ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5743e30b-5a5b-4cff-af3f-5274f514dca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.14']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25d19080-7573-4ac1-ae16-9d885cd181bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e069709f-3aab-4574-baf6-5404d88f337f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bbdf109-1b49-4e2e-9371-7b42f35251ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.202']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47375d26-faef-472b-a259-45c8ae9a2a2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e20be3-8592-47fa-aedc-e02531fa7f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a966c7f-4c73-4013-8656-f26ec3106af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.242']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c52ef40-a322-47a7-9815-e39360adac81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54458f86-2a7f-427f-9a2f-4ea3cc1ec753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.38.148.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffa6dd30-9acb-4a76-95f3-3315c4e46206", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.40.86.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca74280-4469-42d5-8476-ce0c7cfb79a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.56.45.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62722682-01a2-4c84-84ac-bf82601566ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.65.107.14']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c57689-fbaa-4c7a-9dd3-f3b4ac2dbfff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.66.225.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0970810c-6fee-4f21-91a8-db6188884f0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.82.139.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c50866f6-d3bf-4a3a-a83a-fbe165f96389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.89.249.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--093a61f5-c750-44fe-928a-8eaf55915390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.91.127.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--700a86d6-746b-4890-8d6a-9a9876813784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.91.69.164']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e5f45dd-e3b8-4e95-a104-b1d27aa90b65", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4caea199-77d2-40e5-bbfb-a5f6cde8006c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043040ee-6f09-4f51-a515-e170dc53d4bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.97.116.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d6b455-8cd0-4e7c-92f8-1d7c7cf4a03d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.116.1.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70be7796-60ad-4ce7-bb34-b0a87eeda74c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.151.101.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e338011-0746-4fe5-b503-e83f556d727e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.158.120.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc203941-2cd1-4e39-84be-896abb4f4301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.190.215.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c191de48-7985-4e3e-802c-da0aaedfd578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.190.224.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2953c47-7286-4abe-a64e-d49102e8165a", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.224.57.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9fdf4ec-8d2f-4ef2-80c8-28bb9982b578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.226.239.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed61f680-6a4c-4cd1-a30e-9c2509e61793", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.227.247.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba3da3e-c3ef-44a2-89fa-c333c64d7f57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.233.184.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--158fe94e-cab3-474f-961d-7e4bb9286c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.236.240.56']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc97bb9-336a-4540-8d1c-a4227afc9449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.249.151.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--810d3870-61b0-4891-9965-85d8803bb197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.31.77.156']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23db0874-67ff-41ce-861a-38bdac57e558", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.4.128.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf49fae0-90a9-4a4e-a29e-82c8b74bfdab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.48.79.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54218037-014e-4376-874d-450ab6cb7a5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.77.204.216']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27292609-7afa-443d-9e97-05e10ee0f1e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.77.205.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4673efb-49b5-435a-923e-199dc59577e1", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.95.222.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b789b416-4b50-4f72-b845-17b5704eda6c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.0.238.206']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8212e173-b250-469b-a0f8-310e0ca8e92e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.120.189.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ea0b153-ec42-499a-9b19-07fa8b38f189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.137.90.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b67767-04e8-4582-8938-bb62859cb07e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.140.21.167']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e5ab9cc-5574-4feb-87e9-5684d359627a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.154.100.150']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eafb70ee-55ae-4c13-943b-272bc6642903", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.174.238.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d457a24-9710-41c7-bda3-7388759503d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.18.212.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c330f30a-91c6-4a72-be3d-4db08cdf7bd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.191.2.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59002348-a49a-447b-9243-f9597c3e4f7b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.213.159.188']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3bcac11-c253-47d4-852d-23ddf502e369", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.224.3.62']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bddce00-9861-47f9-8e31-91c19f8e9a18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.226.173.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--058cd50c-0349-4497-94fb-af438cd6a442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.228.174.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--601f528f-6716-4a29-80e7-cc463ffbbcfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.251.197.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b7d52e-51a8-4639-b90e-1a01a7654bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.72.243.184']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53fc70cd-b28c-459f-8e24-88da2f98da4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.132.150.167']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc4b7810-d23a-4523-a58e-ac32ce44c332", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.164.215.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3c1c99-7401-424a-9f5f-875ee3bc0133", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.209.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a0d863-936f-43f4-a373-ebda3c043e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.33.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de9e8077-3876-4b4e-872b-6e6974bc34d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.67.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8454cd2a-8978-4484-a378-ce327eb2ca9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.209.129.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--792fa1ca-8e6b-4a5d-9075-9be1dd39e213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820fbc43-dd9d-493d-9d64-506657563411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca6f0bbf-c9ed-4304-9b50-b48230a3bd39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--087462d8-b3f2-41fa-89dd-78f653bda089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb44604d-3eed-4e64-8e57-5ce9e1ffb0bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.55']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--481bf287-3941-4664-b089-81c895c32379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86e9c189-d85d-4bec-a523-b24d833a5761", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.40.21.48']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c92a256-7fb0-4eee-97dc-274714f848f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1269b666-e048-4a10-90a6-9fde58177a46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0249dd26-6c6b-4206-a8e5-87e92953701b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fa7434e-c24a-4ef9-9867-ff8a045e4f0b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.52.173.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff76ee7-e71f-41a2-8df8-b93c62d70eba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.124.13.190']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed03454d-7769-4f62-821e-f7b1ec058511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.188.236.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d187dbfa-fe42-4e45-9e87-82b9375de094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.203.150.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fedd674a-5a15-45e0-8b8d-945d4f949b4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.224.26.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f001fcbc-44e9-442e-a91b-437a0e2023b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.239.48.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edca65ba-3719-408c-9325-b4a16ae4a160", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.248.130.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c9b70d5-b33c-4e40-b734-30a08ef657e6", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.103.31.167']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c70e226-df8b-4cb6-8c14-1c75bfe90004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.109.18.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f32c27f-ae56-4744-b0a3-8158ab0f414f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.109.228.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b15f1132-bfdc-4c2c-9a49-846727d88249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.114.241.195']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e2a4fb-25bb-4a76-8496-7bdb2847f05f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.123.65.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a28829-44e2-4d27-a006-be7f74e616e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.129.65.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daa7dc04-8f3d-4011-a88f-4c2b43c6d13a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.182.251.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--265dcd26-4fcc-487c-b93e-520145843317", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.201.62.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97cbc6e3-4084-4344-8ff8-afb032e45b21", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.207.55.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--114a68d1-2313-4ddc-86c2-1eeffc6ab09e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.211.241.49']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--232530d6-da36-4b6e-84e7-9f258e961143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.212.125.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77cef7ce-0410-452f-894c-4faca25387d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.212.210.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c575fc14-128a-4504-9815-4d1e1bd7d09e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.212.214.44']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf77839f-e9c8-4f18-83d5-8586120393a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.212.216.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6147b90c-4d45-471c-ab29-9b28b658ca0d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.221.50.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba6e0bf5-7750-4f93-8035-24f6e1f829bf", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.230.39.36']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a60f5b70-6d35-4ede-a9f5-7212099a18cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.244.204.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f4b518-ba0c-45a4-9356-431c3c732f65", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.244.39.224']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36ee3abb-8d17-4041-8a1c-7e38f7692199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.49.7.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657c319f-6494-4460-abfd-07d2569d3559", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.5.200.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7100dca-7000-4c2e-944e-f0678a643d2c", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.52.128.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb98ac11-8702-4720-a691-355389ef44f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.52.72.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f112dfc1-17be-4ad9-a91e-93ee599bb392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.71.254.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9838130-308b-4382-8b8b-68601c071e73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.8.175.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db3dfd46-93a6-46ea-8fd0-239c522ede58", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.94.232.255']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa94c82-4ad7-4e12-8047-a46e17bd1a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.97.243.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7875899f-9e53-4360-8bc9-36a72a5327dc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.238.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8c586b6-31ef-44ea-9e7e-1296e6ac8212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--005454a9-c0e8-4c7f-9cc8-9a1172ebc2bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ac5c2e-08a4-4c14-b594-dc7b26dfbc9e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.253.105.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad0082a-afdb-4868-89e8-f410790acb66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.37.23.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59187a30-e79b-45ef-8b3a-979d598e4936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.5.201.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68e1a97c-7f34-470d-a19e-46d1178ee661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.54.29.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99fc6ee5-af6d-4795-8786-e568c8d62b83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.109.200.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb45adf-de44-40f0-b841-00d8c112e937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.140.185.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa717750-2ca7-42c5-8a46-417b5941e0b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.142.24.156']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c119cc5e-2812-4306-a31b-5e6d65d8def6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.142.24.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad69531-9bb6-4ea2-b788-268f6cc40992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.142.24.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e002d4b6-6de2-4904-a4f7-a0ef0b342f94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.142.24.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e90bdef6-2c85-4528-bdf6-fb63a679b8e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.81.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b82a37-e18d-436f-855e-bfef47af9c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cde0c5cf-0649-44c6-938e-3e57b8afe6eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.88.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a1cf684-0b67-4172-a468-b67c2a5a66b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.88.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e1a4700-edd6-4ebf-8df4-2d247ad5dda6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.90.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a0e80f-068e-4b92-a184-996d021eed62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.91.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a64c0eb5-f6e9-48d6-a015-5d34e164a5d1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.201.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--431a6f53-0228-443e-980f-16812a5326a6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.178.6.64']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f170ed3-2125-4830-8d0f-18a883fc56f6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.178.6.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b461dd-237d-4371-af67-0d831671502e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.194.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6afbb5ca-358a-44df-879f-570b1dec8dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.198.202']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15f3f7b5-5fe7-423f-8e81-9d21d65be799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.226.69.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84d8d582-6c7f-40ee-b924-f8693f35941f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.227.210.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e1cd4f3-d36a-482c-9d67-7c9c5d25704d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.127.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9fc3c3b-7241-463a-b7b9-3dd28f754076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.145.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9beb597-4b95-4c8f-91ef-6d40cc84d645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.150.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edbd82fd-adfc-4b2e-a151-53b9f4d24134", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.218.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0258c847-8ef6-4e60-8223-2d21e2e851ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.42.116.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0435c3b3-29be-4906-82ec-6129094f7a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.42.116.112']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ef40af-8021-4c52-96b0-e2a1ad7a5047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.42.116.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5debf5f-9edc-4f09-b1aa-eda29c1a3a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.42.116.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87aecf0c-89a3-4764-a242-8c7232a05fcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.42.116.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d62b8fbb-05e3-4b25-a60e-5f039868cc84", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.46.221.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d98d4c84-30fa-4465-86df-b03d256b6e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.131.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f2f2e7c-dbc4-4405-9eff-54bde598508f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.131.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e55fdf2f-ae0f-4c26-a73c-e150deb614b1", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.210.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d35a1f-18a6-40d5-9d8d-2e4d1479ceaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.95.10.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8464741-d765-4dfd-ab9b-6635a6929b15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.0.153.0']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ecb84eb-c6b1-4106-ba45-7f0dea82b069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea320f3b-3d43-41f5-8a03-46660714f32f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--595e9217-e396-42a1-9964-a62de47cdcbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e568daa-b620-4007-a550-52c46ae6e4d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.229']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37623175-a7f0-414c-a7b9-e65ab46bf312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.230']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e369c9c7-528d-4f6b-aa5e-40fbba2a275d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db2c01fb-b007-47a5-af72-3df700ad2be3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.142.43.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a3d8af-fd41-4da1-8270-a0bfa258c8dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.143.1.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fe00a7c-8fdf-4566-b920-1f67f0273a85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e4de464-6b77-47fb-80ce-8a2c9b6c51a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a094e2c8-bb5f-4a9e-adbd-60d60d5342c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2142abbd-9cef-4529-bb74-16a4cb6f8864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d3cfe9-86fd-4585-bd1d-36e2f987412d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f1432ad-658f-4527-b333-3808f1ca57cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--127d1b79-ad33-4115-bb8a-56835b4650b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.106']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5fb5bd-fd98-4fc0-94c5-fbf0c73b7101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36239c61-5052-4b25-84e7-edd7887a02d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f421cb9-fe5b-4a4b-aa2a-2eedfcdee068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0585a36-d1c9-41e7-86c3-b58837374f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f11e623-1ba0-4b44-b317-2ceca28a95cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cdf68b5-3750-43a8-9ef1-ad7eb9a92d76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.14']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d492af01-46fa-4903-8c19-988f3bebf809", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69608ef6-de49-4017-ac72-934b42baf22a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b889c67-97e7-4f4c-a162-e5d763f80ba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4695eeeb-7359-4ccb-ab93-37cbd56fb68f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ecb047-02f6-401c-bbd2-9693755ce6ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3233f7a1-872d-4331-8cc2-4e63f4275a8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.182']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--419b3ea8-086f-4fe8-be96-357e78c1e13a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.183']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea337e8-fcaf-4b5e-8605-a5d02f2cd45e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.184']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0e77bf-d7b3-49ea-bde5-18d252eb4ea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.185']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e06cbdc9-aad1-4176-86df-15ad2295aba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.186']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b647aed8-5e14-4c03-a008-bc612d9862ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.187']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e902398-5bd7-4796-abd2-77faaef42349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.188']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dab0b69-dab5-46fd-942a-e5cc926440dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.189']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--993cfccd-f23c-4863-bbbb-2e42e59c2596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d80e93e0-3957-468a-b780-ad4cc8f56fdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.190']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7020b57-20f3-498f-8355-c9427dd36fa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c731f302-2261-4771-99c6-8b1c66bf95d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.192']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afff3765-bf42-4ca6-9b9d-9fe9a0555217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.193']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15b43cfa-c5e8-48fc-978c-d3afd237f77c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.195']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcab03c9-2067-40b4-a924-916711b46026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--098a7016-9a9e-4a4d-83d4-1d15999f3cd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc3248a1-6d8c-46a8-aba1-39c4169b77fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf272bf-f3e3-4edf-9520-bbebf1c7c833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.199']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3213673a-8195-40b8-9d13-1a2e81ddbe02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e558d6c7-996e-43ee-9303-c4e8b8d0e4db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aac156a-4993-4d79-80d5-5633447615db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.200']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe735223-59c6-4a2e-a89b-9682efad156a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba3512ee-78a6-4acc-880e-9db53fc4e44f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820d8d56-c81e-4b00-9882-f151f8ecdf40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abdb0eb7-8cc4-45fc-bf13-9f1270b2f840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5702687f-3418-4741-9b56-83356d6f03d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.206']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33430580-2f51-47ce-afe1-0369720559a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e1e1807-67c9-4de6-95fd-a01e98ebd616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68477e64-fc6b-47ca-a604-7b8ad866cfbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f847b81a-712c-429d-9dc8-d75008201958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.211']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def68c8a-f663-4e76-80c2-e600f7332956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bef64cc-e7a6-491f-a938-c27b7a1f3b36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46788652-e0ab-4919-bc02-91f7773c29cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe47bfa-e28f-4c06-bb0a-606258359a36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21363892-f438-4467-be0a-ec97f20f2bae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.216']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39da482d-d5ed-40bc-afe3-16000561c9ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.217']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a87cc9a6-0a9a-4da0-a6cb-4a7f0094a9a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba97a8a6-6312-4031-be70-58d0825a62a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d558d7-fe04-48f8-84a7-d0bbc032a92c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e15e6f4f-33f2-446c-9b7d-071cb79a72f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba2f6a70-8b74-4e88-bbf6-40786b3c4afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.254']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4699af5d-6656-4eee-a25e-d01d09ce9d89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2ffe23-a0ec-40c0-8e43-61c0f79bcfbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c69c84f-a2cd-4fd6-a957-8a9236aab77b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--716e4cf6-89e0-413f-a1cf-4d04cee5c9c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1835670b-c033-4afa-8829-9b3f93ad94f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc64ec96-792a-423d-b491-7876b721bc5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39886693-8962-4e7d-8746-773c54900e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d915ff67-5ae1-4dbf-8fa3-697c056fa0ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6f4d219-4ba5-4a44-a1e2-195a94d50207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f71e895-c8f1-493c-8117-4ff5737de16f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f5ead6b-2d41-4139-b98f-99284004c09b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d65d63-91ab-4da4-8f06-725c424bd1d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f9636a-cdc2-4faf-9736-2832505a37c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae82a9d-706a-430e-bf06-16928f83977f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302b46e2-8d6d-44e3-91a6-3006421d4111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df862a2-586b-453a-a17d-3b61a7b7a6d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37fca769-e2ca-4810-baa5-1b9d8398cd8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3273e848-f277-40fb-997f-9c3e65d2a8e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--246d7b4c-fd19-40cf-b163-6af3cb9ae1ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.56']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--032f41d4-3d8f-4d10-a41a-e164cea2a402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc2b21a-faf2-4402-9be5-c3459ae98377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521f96b1-e764-4fe8-ade8-d69c7409bba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.59']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d12e4e1-7fa5-46dd-aaa1-6c6120b8213c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cda5f2ae-4081-4d7d-bd80-4144bfb644f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a90312e-0c12-4198-b8db-4a0cae7137d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c8c932-3fc7-48f3-9105-7d69a709d9f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.62']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--805b05d9-99d2-4a72-82a8-04a559cc703d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.63']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc31d150-b28b-40ae-ba7f-0ce3b07991f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7fc5ee9-5980-41ad-8fee-c5aa4be27b31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b36ebc-59a3-4e52-9bf0-5eac46f32e6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be5ecdd4-34e2-4562-95f3-804aecd6751f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f874631c-ecd3-4e8c-99d1-cdfde017aff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f85d9175-3642-4344-9508-f2b55c18c728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4a5d1d-0f5b-4ea9-9455-8a564367291b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516884ea-8d1f-4d02-aa04-ca010bdbfe44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb0d95fc-aebc-433c-8448-7e59b04e79f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bad782d-a1ad-4719-804e-d59db2e884ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da4bffb9-38e6-4f0c-90d7-48c3d656ce13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2666999c-bbec-4835-9965-825d151961e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bebcd60-3a06-4f16-a14f-c074f562ebbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244f4b17-1310-458a-a4c7-d59683b7fb8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d836ca-2a4e-4eb8-a208-c4b62c47bc14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90db9454-ea18-47d8-957c-6802f51e5a6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6bd3858-9e4b-428e-9a7b-c9df2da62548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cf65db2-ecad-40fe-9ed4-fe12090010d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.84']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1be0b1-9fb5-4941-a9ea-3b60a92facb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c864a7ed-822f-4282-8c34-364b5072252c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--866c028d-57e1-4db4-b441-f6ef1166df24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d10ff0-e87b-4fce-a6e0-05efd4c74235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bde40e42-1f56-412c-8779-3c4186252ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--457a29c2-613f-4a53-9ad8-5b3aa34cdacb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32b6d10-2e98-4069-a973-7c7403d200f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e7be89-4b82-442d-bf40-285d69a65590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.91']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a23e6cc-71da-4517-8f63-bc9099ccc807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0100a0ad-de0f-4a62-8f34-d60946934df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0b46562-55f9-48a6-a1c3-a2d833fa7bba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f461f33-3c1a-4c89-a089-12188320100a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d5f1431-bd38-4686-be52-b69dd80a394a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.96']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--babb6954-7935-4889-9d40-538960a0060d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.97']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d46aaae-a3e5-466e-adc5-55388d498cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1daeb9e1-159b-4830-ae48-8dab473fcabe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1030724c-0cb7-4d94-8501-24277f5219eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.169.194.14']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8d95493-f0bb-4aac-84bf-43768388b601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4bb0d3e-d73c-4ca6-bab7-3eb41da2dd74", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4351f121-eaac-4098-ab86-64b5af8acd5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4a539e7-a414-472f-8d81-0368a5da6045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7495e260-9923-458d-86d3-274c172ceeff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.150']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--467e98fc-8ab3-479f-bb65-c51a0b178411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed00d71f-b01a-40e7-93d9-38cdc4eaef02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.158']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dd34a87-caf2-4ee2-9488-6d8e8004ef50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6663f48b-2999-40d8-9855-2cd9f67782e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b31d3c23-5a05-48b1-a1d1-2c4abce7ce4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.199']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05bd2d2c-d4ad-4c7c-a8a5-18b1e3fcd01a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ecdeb1f-53fc-4b60-835b-8ebbbba08851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.202']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f65d8b0e-badc-467b-b777-3fbf3f82dbe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06fdd2f4-4112-40da-abc0-6ec2f4e90497", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd8004a-54b4-4ce2-b1f2-3fbd9b3c0255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.206']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e228fb57-9114-4d05-a9b9-417e09eb4ac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c9be4ea-1398-40d7-b6d1-9f25d07152b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25258afe-5c57-4796-879e-d73f79781dfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77266aa9-bb76-4210-a041-c3b873add33b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3f2c3bf-4025-4612-89b8-8b4a66bbe3a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66411679-6110-4de2-b5b2-d33f761d2950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe5a9f4-6bc4-4381-8671-4b54302920fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--315e5236-1eb2-436e-881a-f2edee40c284", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.216']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c64b234b-5e96-4612-9b52-beeee8df79e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--155cd754-1ee8-4117-95e0-a3287d6173c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.222']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe0a7be-c8ff-431a-86ce-b6fed6b8c084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9005753-42b9-428c-8f17-913093a6a2a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.225']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b08e4b33-472f-4532-b95d-8abeebca73ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bc7a242-590f-4721-ad27-21dfe01820fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.229']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d696fa0a-47f0-47ef-a8be-ae9c9785b3ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.232']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b4548c-5ab6-4a8e-9f59-c8b7b0511183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588d0080-402f-4bb9-a217-3e789027f086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfddb7a7-8566-4f2c-9d26-fcada07d3db3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.238']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e2428fc-9174-411b-992e-71413be8a027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298eec55-7c0b-4ce8-85e0-7561bb81863d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.243']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e222422a-40ed-4959-a06f-4b427e204c55", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25da74a6-ae10-4220-ba4d-c961a28e836f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.249']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd3a138-c65e-4ff5-98b7-1efc83ebb7a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7e4e12-9e24-4e8c-b416-a73a98f7d6f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.253']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b1ed74-e6e1-4692-8ce2-cb9c7afcc222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.254']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--928b3ec7-3228-4be5-9474-474b7c955988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.189.100.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c263a03-c213-4277-9af0-0c84a5f7b81e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.206.236.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fdd42f0-17fc-4a29-b760-84b3e97b798b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.22.147.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63bad692-49d8-4f18-8f4d-6ca55b6f11cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.228.128.84']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5f1e613-6bff-4688-8d7c-3a766b1d6f49", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.123.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f51e99ed-e656-48f5-b8d4-019fa034cf19", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b63e2f-0fb4-4497-9f77-537d4803db9a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d191ea23-9dbf-4ae2-b61e-50249680ea7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffb08a30-6a8d-45bc-81ef-e88d1f773f02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1276bf9-c8a7-4b17-82b5-92490f9111d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90debe77-f9a4-4c46-9382-cc3d294a78c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc598021-32b8-4af2-b413-a5819f0ec22a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd527244-f411-4d9c-b9cb-0e157382aa52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4d6d229-c9f0-4a1e-a966-545ede018564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08dcdf78-5440-418e-b849-8323a4fe80b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d16f37-12f1-4e4b-9ce0-9769f47d16e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd18f286-c7fd-4dde-a913-99d87fa7062d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.232']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e3e953-7a26-4e08-9630-0d567fb68849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c8d938-071b-4063-9e0d-a28cfd34c881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb464d5-ca0b-4e5c-a36e-094b05a9fe56", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.33.7.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8972c28b-fdfd-4e77-a5f5-d4c055fe4c4f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.36.84.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b9ff30-2bc6-4ca2-a4d5-8eae08e17ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.37.69.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4368b2bc-ee44-4126-ae27-1e1e4fbff099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.37.70.224']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9fb669c-1faf-4fe0-a239-1865c18ec0e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.43.149.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a258ed97-8bdd-447f-b81e-fb6c780119e8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.84.52.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e92cdd-6dd5-4098-b9e6-9b829cef0b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.233.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e1ea55-f595-46bc-a510-f6402bdbd240", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9071e4bc-11f4-407a-a264-79bf453793e0", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.14']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--297d2bbc-3f6b-4e22-8e60-21e3727021a3", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e96e45a5-2742-4255-8390-4ad523cda38e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--061e2886-2362-49c3-ad7d-b12570c96c86", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c17dd27f-0e7c-4a0b-bfcc-86a36a1f54f7", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6afd05c2-f275-484b-aa30-1bf864b92bef", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d7e5a7-2bb7-4273-942e-923d1527e444", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae603d0c-8817-4565-acc3-98e0c8ab7fb3", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62014071-0751-4ce3-9b32-5298e75ef958", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a929b47-a038-461f-a063-a0444c014b00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.120.230.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--664023cd-f875-488f-a60a-586ed7604761", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.140.199.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8943a410-02b7-4e58-8738-d723af14a9e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.15.52.36']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87314cf0-d096-4e04-9da2-e5025b7c4361", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.163.172.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149a1d38-b617-4332-bb64-4790cdcc1638", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.163.176.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--790179ae-6fae-4148-a8c0-97cdf11f0f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.163.188.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cffb865-ee8f-4e7a-85d8-e1a707f3455c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.163.189.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec2c771-f356-4377-83bd-9168a7f7010a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--602602c7-5691-4152-986a-73ec36fa63b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2124b546-d00b-4cec-8b6c-8634d53debf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ffe772-7fe6-4828-9363-af501b3cbd84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.59.59']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da94726e-5cd9-42ed-a458-566180f26536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.165']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff18179-379f-4698-9c4a-8c10750b5e49", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.12.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eedb086-f92d-48eb-a5ba-3e847d88f215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.48.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c24dceff-8c24-47d5-9537-bedad2eebe12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.49.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e17ae613-699b-41ad-87f7-2e7a362b6a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7edee255-2203-46e2-875d-84a1eb677475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.163']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deeaab7d-eef2-4e7e-87cf-d5c5bff67ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.187']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d80b782-a80f-415a-8faa-5f3009d0ba49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efee0d56-00f8-4010-837b-13c12b41ab0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0426868b-79a2-4ec0-bebf-21f811de3338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.166']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808a8480-1553-401f-8118-9460c79b027a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5af69c-3f21-44a6-adec-f95691713a5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8da2b82-5bfe-49c6-94dd-201e3f0d59eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.195.210.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa6cce0f-fc0b-46f4-b1da-2b51f06309d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.195.211.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ffae96-0fb7-4250-9956-d981905e9de2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.233.64.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7f43052-3daf-4302-a0a7-2433ea28907f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.32.149.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f3da311-df50-43b0-bd41-f9eb3dff6d55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.37.102.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8de0a4-fc35-4089-9380-1dbb3e05416f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.42.205.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ab06a6-d451-4095-801c-11e485f5be18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60126f11-65e3-40a1-ac20-10969d0be85a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.59.206.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca6301a-d00f-4782-808b-031afa66d9c1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.61.3.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2074130-3637-46b4-b36f-d41d1f9c93fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b02f834b-d02f-4950-bfaf-4b59b36ccb59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56c12e64-25eb-4ee4-844e-f29217b36eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcaa7072-a254-4331-8f84-7239d201ffab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6d9a562-a9c5-4878-8d47-f125c6f7d343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a37f797-5c0b-44c8-bac9-0f4275819885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fdae1c6-a478-4c79-b441-fcc3a879a0cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.106']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f0f96a4-144d-40c2-a95c-86a705fa2e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f657d5b-25f7-435e-89fe-edf25b4b1aa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d20cd623-8b98-4a7c-a960-f562962decab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e711cf14-ef97-4c85-85bb-848c621ef5a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d98cc7-d4af-49c1-a8f3-7bcfe6eef653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebdf3cec-2be3-4e2e-92d8-5ff3c1a4bf40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4538fafc-a693-4abe-956c-66b106ee3b87", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.84']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ccd3c76-218e-476d-a64c-50fa8466075b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d447d17-8724-4d5c-b435-7d8b8b43e88c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c957e26a-da9f-4f52-a159-5e0c4199287b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb7bc5f-3d9e-49e2-b97d-af583e5d547c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e006cca7-3028-48db-bfe1-659a1001a33c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31599e28-f73c-4fca-89f8-23a11dadca4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46efb294-63cf-45cb-a496-5220217329f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.91']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea03043-3d4c-480f-8c1f-3192c0c02e30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c5087a-366f-4b43-8713-251a9609ec70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a4d04dd-e238-46b5-9d07-a3627ec4b961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--292e8467-595d-42c6-96e3-e4613cac537b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f93b8578-4256-46f3-b43c-e281234163e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3caf229-bb18-4dee-b48c-2e2678c911b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.160.220.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddfa547e-a16a-4535-a66c-e3ced8ee5f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.188']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be8e78c-1d47-4786-92b2-c2882bea19f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c1265cf-f45b-4f4a-bafe-f865f49aef61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c44bc58-15a8-4877-a593-8191a5c2146a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.254']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ccd6b4-5bbe-4c7b-b252-5f65e356cbf0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47188129-c981-4b12-89be-018f9df4e5f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.197.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92af1833-b829-43f0-8ba6-cacb2b9d742d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.106']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff799c3-95fe-4c4d-a711-16609f041f81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e4dbfe-7338-4807-82e0-380ebaa33358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f61610-d0fb-4e78-b922-0266d4c3f7a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c40abc86-1abe-43e7-811b-92abab89b553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--754d993a-bd9d-4c69-b56f-54387e2e23a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e82981a7-8c37-4991-89bc-fba07e8c8651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6794b418-5096-4dba-83e6-0f1164fb5b2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e480d157-29e0-466c-b381-7c8f7b26e015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62fa39e6-916b-4853-8e19-8aaf40da3266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.129']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd6fa52c-ccfc-40ee-bbea-01f92870f225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.131']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c0b8bf2-6d4c-4eef-ac86-e28dd7bd88a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c3c91f0-62b2-47fd-bb47-610cfe6c42ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16928320-d1c6-488c-adea-efdb22ba0ab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.135']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f6a982-3f8c-4c48-bde4-802b579a8180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b64ea5a-fc57-4ef8-b02a-04a342459ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.139']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb1b143-9399-462b-b33f-09f293a9ec61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c5f112-5221-41bf-a3e3-e7643e5c8ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605658c6-74dd-49c1-bb03-82cbe389404a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ab2aded-086a-4449-835c-9f0752871648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.147']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9cd047d-a242-43f5-bbf2-ef2250d419b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54d1a804-fe5b-41ba-bdab-85fe633a13c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c54299e1-d6e9-4b22-bd2d-e79969466d05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.163']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6990b04-4ae8-430e-9312-bb546ec09ccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.165']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d9db45-7383-46a3-a308-73909d84a791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.167']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1580af70-4b92-406b-88e1-53e106486f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.169']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a4ae355-39e6-4bcc-afd7-aa72032582a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a57678-8bcc-41f5-ad03-12b613555fff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.171']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--470098b0-ecd2-4e09-a770-7f6601d57fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.173']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--916d1b7c-a716-40b5-a412-03ada48be896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d74dce88-f357-4bb9-8485-d0e0bb75022d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e0895c-a760-40b8-8ec2-2125764ea6a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0acd15b-4085-44b8-829b-51cf106d9d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd8a63b5-4a22-4f85-b2ec-06f5f331e73e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.183']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce51ef6d-a91f-4fbb-8877-8a66ab872413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e06f3b-e729-4646-b88b-2771a135f696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a95118-f7c0-4e83-aeb3-53f0e29e1f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f97d4781-45ca-46c3-b72d-1004060fabf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f1e5232-a07f-4146-b3f2-4e20dc86b365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98da21d3-1970-4700-902a-1cad73830397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36bf473-7ba6-4e15-8767-ea0ab4c830b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b40961-fbbc-4be6-8bad-6a762b53bebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c54aa6-f021-45b5-b2a2-894fa4d88980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.211']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f0b605-c7b9-415d-8b61-a9c33f8d954c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a21dfa77-decd-43f2-9ece-588949bb4970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fa7e64b-c94e-4a67-858e-e0cfafef45ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.217']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2df583f6-eb52-40c1-9af1-af933595ceab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--080d67a2-f2d5-4bec-a7cc-6c9eb8e9d5d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca577547-3eea-4119-af8a-c3135d67f336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--824b92e6-616c-403e-9555-10c2e8196ef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71351461-bab2-4872-8a97-4733d12345b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.229']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6922114c-5abb-437c-b7ad-0e760436cd53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60dc5625-c0a0-42aa-b085-165b05005e85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f2607a4-c265-40c8-887f-9aa03f301a69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ceb0fc-b0a0-420c-82e2-7a2ceaff8651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.241']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc6da9cb-c82b-40cd-9f3f-e22a0ff1c38f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.243']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f67ad27-a282-4c0f-84e6-34798f2b968e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65ae998e-42c9-4df6-873c-c56bea8c859e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e96e89fa-ead2-480f-ac3c-34b9c2b4faad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f13f6d3d-edf4-4d7a-b703-6ee24bebfcda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f4d138-ff72-446e-90c1-861cf46dd262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd8a8fa-ff17-4978-8a9b-5c08c925015c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8676ff-34bb-4aaa-90e4-7afa63cb9364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c4138a8-19d2-4b44-a3a6-4e5b1ddb24c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4cfa0c7-7704-4d13-b016-32f9878ec0b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f334b292-53a8-4548-a934-61802afb63b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e73477ce-c063-491d-a881-ae8f0153e258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd9d905-e4d1-42f5-b903-3dff2b2852a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a26d528-814c-454c-adb9-b154d787db45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--309859e6-bd4b-4e1d-b289-d6c2aae01954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14837dbc-c7df-4e71-8ccc-8405e730b47c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd62ccef-2b2b-41ee-a9fd-edc02685528d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--743ac8f5-9c4e-4442-8b87-6f40edc1a5d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c0ed200-2198-4433-a444-79fe2ca87226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466e7696-7dbb-4280-b09b-1c67d6f3b946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.91']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a4a7110-6a1a-4d03-b429-0f938bcbfff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6662b28-f840-428d-bd8a-d148b27163f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdde9417-4c93-47c1-ae9e-9f5719b94830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1471d5b9-1093-4798-9960-0cd3bafab029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.200']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cd7dcdd-ae4a-43ff-8663-82552cd58203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.242']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a3047e-8675-4dd7-b601-b2524ae09c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.243']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd7bac5-46f7-4e54-b3a9-e2cc68c17b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a32627d-baeb-4218-b6a7-6b51d0d0a875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.246']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67af3cbc-f697-4b48-9b95-447b7a5c58da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e800d110-d1de-4908-8064-43fc5660af18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5618e2e-71c1-4ddf-9ba1-23979a6c4b86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.249']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec62e42-eb2b-493d-85c3-1f8fb6f16eb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.250']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--182107c7-036a-4adf-9781-73f9de3fac5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.250.79.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cde5292-919a-4b0c-8252-17a9d619dfb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.26.244.64']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4003001-378a-4475-915f-ba8d920a2ac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.26.87.217']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca904861-d6b3-49d9-827a-b85ef1a78f42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.62.32.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48414965-1477-4321-8b37-f34d293d9d43", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.82.4.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4235f2dc-0a22-47ab-8395-63b90fb01f9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beff750d-8a8a-4b10-a36a-20dd48b725a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a9c967-1154-47a8-8670-4f8fcc69c257", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.190.0.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--190cdfae-ed8f-44b9-aee3-c73f620c712d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.218.240.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feeb5f70-15c3-48ad-a1f7-1a23921b151f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.43.90.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e2f6608-c927-499e-b3fb-dd23676155ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.43.90.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed63e844-392b-42c9-8806-4435d9b5dd90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.46.107.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04eab904-a9b9-471a-94f4-3a4b95517ba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.231.203.55']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72501c6e-ac28-401c-8d74-4118d7b00163", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.232.178.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07af04a0-cf24-46bd-b954-5d9c37c92b60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.235.16.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2545399-74ab-4d6f-8acd-855acfa697e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.235.16.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7515a472-1330-43e1-b9d8-a1aa94152877", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.248.126.217']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0161b5d3-adb7-4cd7-827a-9a71b0acbc5e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.248.8.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ab6781-ef40-4fc0-b73e-b804b33ef486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.249.34.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9863e310-3301-4194-b8ad-0bcde762d8eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.31.52.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f0dd152-0c37-4a9f-bfa6-8fc955eeb3b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.79.48.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4f904c9-1059-4323-8b5f-6a6c509bb48e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.177.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d62ac916-d821-4b2e-8e31-4fa829076044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.179.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c326961a-6766-467a-9859-ae83d17aa8e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.179.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7056b8fa-4f9e-4bd8-80d5-84f1e97120e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.180.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--869678ac-ffc7-4ebf-817b-066da02bec15", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.163.193.129']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0825ba1f-13ac-490b-aa38-f215a447a6cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.106.159']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c920b1f6-f52f-4c7c-9351-d87b7e57aaf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.82.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2a5259-4886-457c-a9eb-f963a15d6d78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.87.216']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e720afd-d1b4-42e6-87cb-7d63e562c49f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.211.116.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5116df47-5c62-43d7-9b2c-13780e115602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.23.209.169']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--737733b7-96bf-40a9-bf4e-b39cecf961bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.23.249.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79e3121c-6106-44bf-ba2b-d64cdc05f26f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36d8c235-f43c-47da-acfc-1f0e88ac9f84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--349bc052-bc75-43f7-9606-6a85fde571f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5119bdac-f1b3-4b26-8f68-12c8f40c3ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cbdf53c-60a9-4300-8685-aabea990c1b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--260b598d-b1c6-478d-bf3a-5ecc4998076c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d9d7bf0-b65e-4206-b039-26e19c051cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.106']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da58c5e1-1488-45b3-8938-b6ee779f4d8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f82149c3-d1c6-4f48-8192-736461305626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f07497a-0e66-4431-8721-c4d33b9ed26a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1945855c-4caa-4e8b-aaad-7314c279fd39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb8359f-48d0-4ba3-bf61-c247ad0215f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0726e022-069c-4ed4-8378-7a0d2db8f0c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4df111d-b705-4b33-a2f5-50e506745100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c048ba-6fc3-4824-9e6c-94a695d77318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf217fc-982e-44aa-be7b-68bb3c7a216f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae480e75-3634-4eeb-bac4-c7a6a8ea2bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e23cc6-9022-4557-b60f-42a1e624b507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7482ae78-a2a4-4096-aac7-a26eb771439f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf38344-7030-4455-9238-e4976e573ca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ed6ff63-6b60-456f-8264-805741bf320a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb71aa5-5394-4d0f-94a6-6004fb714924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d3c6ab5-b232-48b4-9b8e-322ddd3ad73e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0128a73a-588a-46da-b265-85f892a04b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf8ab81-a81e-468e-891c-eaeb4bf1aba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f1bbd0b-3f47-4a68-a786-2ab90ab6ea77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.129']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebfd30c9-7563-403f-b8b4-3e3b1115c4c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.135']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cecbf9c5-ae09-4cd6-bfb7-066426d299fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6110c50-6bc7-4a81-9061-1c749e7f9378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8153db15-eb9c-4256-9d72-15f1b48d0fd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c034e16d-d314-487e-9764-db8f30d2b8eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab5fefb-f3da-4ad9-b213-52271d675ae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8255ae78-9f21-45d3-bb93-151981a8ecdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1c0d4ab-c701-469d-8786-0dcd742d8da0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.158']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aca084b3-f9dd-4533-9085-5ddbe21e3d44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.159']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c107472e-f53d-46fd-9b86-0be888c8118f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d1f2ea2-c11a-4239-809a-d52230df9335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.164']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e9034b9-0f5e-4f96-b375-92096b29b73e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.165']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a81854b7-e94d-41fe-96fd-69ca0a7d985b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.166']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d53c57-4589-4821-8861-e7746259dc64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.167']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--358b0447-2ccd-4ef4-92b4-46dd669278a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6651000f-c922-4644-90e0-d9e8400a9bc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.169']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--144d3450-2314-4c2b-90ef-95a516c3ef85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--050a42a3-3d82-4a3e-890e-2edfc9d381b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.170']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08771c91-e845-48d5-9c42-dd4e228b60b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.171']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c29be8-90b7-4c78-b288-91bd9781813c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f653e2-e5f2-4cdb-9622-2f3ef13f619f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.173']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e3064f4-a9e8-4d5b-aa75-e9acca673761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f0afc24-2b56-4a1b-abf8-9545954714eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8845a5-6fce-4786-aa26-62ff4df65e1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.176']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca1b16a-7f53-4136-b014-77aa62530a3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ef3537-08db-4ad6-8775-da4d36d9ba11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fbf7bd3-1555-453c-9c6a-fdd7c71807a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb4de3fb-64d8-4774-85ca-0f67c7498966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed77446-64cb-4e5e-bed2-691a56da63cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--945dbf26-905b-4cc1-aaa6-b8e256a42a63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.183']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79a15668-b807-422b-bb3b-42d31eabf29d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.184']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d09d0983-a614-4eae-b3fc-a7c0d8e64029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.185']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcaa5e33-a4ec-4e2d-b4fd-fce1f77c8ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.192']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89fe910c-358e-495b-a126-3b1eaa56edfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.193']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--735c42bc-e38b-45b2-adb9-689e26f7fc82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d29972f-1a08-44a6-8918-0c5bedc41570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.195']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad7de79-2e35-48cc-9974-ab81832e2ca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a652a79-39fc-4d6a-99ad-652c849b66c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d729f752-2b8a-4742-9191-47ab0eac6b79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d11c9c1-6072-42ee-a681-e34749f80f09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.199']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1733f2c-7936-430d-9605-b27f4cc476a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f7bf75c-9e41-476e-8b97-77116030585e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.202']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e72edd55-9276-4a99-a7bd-960d3829b882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--371a2a15-2bea-4442-a1c2-db33ccd853da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2989fdcf-2347-4401-989c-e924371bb956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29549dc4-a5eb-4109-8680-709202c4fa23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.206']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b6500a-4600-49d9-adab-0215780bea68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c2cefbc-1d9c-40c7-bdad-aae1f85ce629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24a4e5f7-623b-45a7-b84e-336321b9029a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d023144-b2b2-43fa-8cb2-1da296c3ad35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.211']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c79f453-dd67-4b65-9e09-b2c644fc3802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01be3912-cbc7-4e6f-bb2f-affa0ac9986b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c42a5afb-2cb3-49fe-8eec-de8622bfcb8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12295c9d-37d7-47b8-9eb5-a9ff03f2ad89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade7baa3-fb56-47d1-b9b6-4ef07bc9695e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffcc9bac-aee1-4d27-baa3-e37a6344ee23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb042117-34af-4fc5-87c9-df67d698d3d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d446e42-8ff0-42d2-85c0-f7fe027bb6ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.222']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea3dde42-2882-4819-ae6e-24bc5e481883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7979abe-35b8-4f34-a558-eb1c2571b150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.224']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98dcdc13-f999-4f59-b07f-3cbc93b6b31c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.225']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e998971b-5b79-4aa4-9593-c010ae3cee12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ebd4aa-25e5-4481-8a24-409b21acbd26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ba748a-1e32-45b4-a92b-271ce23c3b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9615a75-90d3-4ee5-9d04-936a1aa6c7e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.229']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dae3f48-3b8b-4f49-8975-ce1993e0e0f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.230']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3908f065-1fc3-49d8-8a80-e4a9fefa4e84", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a1c6ed-ca1b-4207-8ead-ca57c280a118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.232']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1a26c28-0aa0-4b0a-80de-0f5e73bec191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c7df83b-4bfc-4d16-a17e-8951530d4a5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec761de-8b38-408a-9875-2e840b71f415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7710915d-2894-4a48-888d-d955b18d572e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b77748-4d60-4485-afff-225f53f3b796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab85b92-ca31-4a26-9bfa-1a7aa23bf121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cfd90d2-ec28-4ace-9672-a12c62daf482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.240']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c62f434a-2c3b-4273-af0b-4e2307b4aa80", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.242']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d1511d1-42c2-45f0-8c81-1ff144e64613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.243']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec186ff-1767-421f-b9f4-ecbe6387d87c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05fc1641-1382-43c1-a0af-6314aac1a5c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d765b570-58e3-4259-aa4a-2ae286bddff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.246']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8febf4b0-e0ab-4139-b7cc-1fda53b929d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac20288-5e51-447b-9c66-3c48ff65b919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b13add1a-c546-4c30-ad3b-14a434af7dee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.249']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe60350-aac3-4d87-bc23-85232fa069a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f8bcc2-93aa-40fb-973d-a6ed9b0f4a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ec3d4d6-4f10-4172-92d0-986da78129e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa730ecb-72d6-40dc-a4a2-8081f87f9639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.253']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b66c55af-1ebb-4e48-8da8-5e88687f2dab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.254']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7583f2cb-fede-4078-b166-cb926a83aa6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.255']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d7b621-fdb2-4cf6-a85b-1858229d0b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff72092-a715-462a-80b7-85f0713fa6f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a090a5-028b-45eb-8519-d0247045def5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.36']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa9a553a-c0b3-497a-b712-4b6545a10900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f9c55fb-645b-4826-8c75-ff4ee86e3d6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f3a212-69bc-4a2f-8ed2-2b4a7993a0d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f92a7c7-cd9f-4540-8a8e-dac2c878d29b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd3e2ab9-4981-4a06-87a5-5e7cd661323b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14a9743-3ec1-4e34-bc82-457528534d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.44']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f91610-8562-4ae8-9639-36fb5785e608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac3acc42-8e97-4f8f-9e07-3b24029be626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d396f322-55ed-415a-9d34-61c94a228842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.48']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92622462-542a-48f5-85c9-9c89a1eb6f14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cefcd1d4-ba30-4cda-824d-e461fd4b5ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.51']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1867044-c4c6-458a-9af3-bdab580c57c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.52']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a5b847-7599-4556-a98b-ec53a797942e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e4c5740-1fd3-4651-9089-86358959021d", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1bc57fe-9993-4989-b69a-2bf2c1e11525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.55']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15b9eb89-e8d3-4c05-86c2-80aa3266f797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.56']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a03678-aaae-4ae1-bfc4-a67cad579765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6c8edc-340b-4705-9cf3-5b11352ba952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc778f07-2071-4b5f-b651-643390a456d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.59']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e6e6853-9f8f-412b-a45d-3e5c70994e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7607716b-fa9c-4fe5-ab79-0d43dae06d66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43b7e00-77d3-4b21-bda9-4a745dcb23ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.64']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b53de4da-d421-471c-af64-30f15bb4dd13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9265978-30a0-476a-b3e0-0e5ea17d21e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e4b15f-797c-4d1a-9183-41416ad7a700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee458209-bd3c-4264-8a52-b3d605d97ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--793104a2-01c5-4eb8-bd13-ef8e75260902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2425cf1-2fd2-4ec9-aecf-f013eec950c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--249ef2da-5d6d-4dc8-9059-0c5e4d1016ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8733d1a2-c53d-4c00-9f98-991351dcf169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec06d52a-bc51-4845-8989-9c5d7f61cc2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a03b739e-bff3-4f64-a323-ad7a80ac951f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33cd0dd5-4588-4307-b34c-332bd46d2d75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--736fcf92-7746-4b0b-b2a8-cae99b51138e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b5acbaf-5c2d-45a8-9c76-35057403f9ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99911489-c0a9-42d7-b2e3-ada4390a36d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f484370-1b24-4e11-9d96-dbc979cc33fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--383aca78-a045-4574-9d15-9517e533ebfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28960268-eec8-4a3f-a874-7b9f24e72ea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ecd1eb-332c-4a51-87cc-fa82a18c24ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b660be67-c23b-4bcf-8b36-5ad4bd4788d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.84']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5687e6a8-42f5-46e2-ab55-ffc40859ffd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--975112fa-8c03-47db-b34b-3a999bcfd19d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f82b539-490c-4bd8-888d-423100f8ac2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5630e87-401b-4c8d-a8af-b6806a382dab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8701759d-40e7-43fd-9b75-c0d1653e3784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b109e0f-4256-435e-b870-a73356a44d7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d530c3-06d3-442c-b59e-d57f18c776ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18662e10-bb50-42e2-b149-98ed035c7b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7df22f-afd8-465d-ae1b-6bb59ffe8845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca22c091-b507-401b-8c68-de00db0afeaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.96']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--672ca9e7-8f8e-4de5-98e2-98ca401bd58b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.97']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c0d371-9ba7-4f73-a503-13f3489debd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4621b4a9-1a6c-4f36-ad43-a22e1d6a2f37", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.244.183.217']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--166b1261-080a-4544-85b3-e71e09752784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.38.85.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e22bd0fa-f74a-4bd8-b032-8cedbe1cbea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.38.89.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--294a9f06-14a5-4a0b-8e62-14dae54854ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.38.91.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69c9a028-e211-43fd-abc7-505e32a2948c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.46.134.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37199393-c7d6-4186-942e-1dcf4a2ec3c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.50.140.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf615dc-8137-400b-95d9-8ec897bca761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.50.239.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a30f1e8a-f1e7-4887-99c4-7ddcbad0242e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.58.100.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ef8e19-72f8-4a20-b7b1-c5df46d4bc55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.50.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--899382c2-7c90-4bef-aed6-3d16b853cc07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.135']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--699a91e8-1efa-481e-98c4-7b33ed8b5427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dace14ef-845e-400f-9033-76c4a344fb1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.57.217']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68cef43a-fac4-43b3-9ab4-76c5e26f82e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907b109d-8d56-4794-9053-ad7ecdd0efbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.55.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--312c08ae-bb8d-4aee-bcdf-143d63ef8f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.56.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c292b843-e949-4ee6-a51c-65d426e25187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.62.185']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc307f8-9d5d-4d27-ade5-a5bdbd3cb635", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.119.200.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f246d0-5a12-4e34-8bdb-4f2de6a2c220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.127.62.250']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--071713ea-5541-47b3-9f4b-c46f845ed136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.195.248.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d0e599b-a089-4d09-9d05-e18d65d60e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.195.249.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f70e59-fbfe-4991-953f-3ff8a0173b37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.195.251.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cccdd9b-c159-49e2-9bd0-ef8abe03ce79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.250.150.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf6b515-7801-487a-b159-728c0e2134ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.30.231.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae6f600e-b2bd-4625-a232-a40389470e8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c77b45b-57d1-4078-bc68-ca6a2cb46a2a", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN activity. Sensors: openclawglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "sensor:vultrmelbournetest", "protocol:openclaw", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--339ac44b-2f03-4c82-be0d-cecdb5ef180d", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--872705da-498f-4b88-b32f-f02ab8f081fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd59b8b6-f638-4417-8905-fa9e9156db97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--912cff23-421b-4c5f-b0d9-f7da95553ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.153']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a814652-4ca1-411d-974d-15aa20a52976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c735fd9-ea73-4235-a415-0a0acff0d104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.159']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e40648-b3af-44b0-9a5b-017a44d0a8af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.176']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7f00a8-9d52-4b22-89aa-1bebc910bb8a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ff4495-95c3-4a62-9b8f-4a0f48768e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d2738e-5856-44fc-b392-c1f5bd07eacf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8ae5bd1-4184-446b-8731-20ea1dbc0dea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89373530-e65c-4d18-857e-bab5a9204234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e095d6-6651-4d1e-8e3f-70fa979934e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.182']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12f24ec9-11ea-453a-af0a-a2729b21caef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.183']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed0a40db-92f7-4e7d-9106-d23c6c3acfbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.184']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--499f4b2b-c6c1-44be-b2b8-b41662131d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.185']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1690cf12-8787-4c4a-9604-24da548e42d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.186']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e472dc-ab94-44c7-a6fb-d3088466e177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.187']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f97788f7-5189-449e-bb5a-4002d9a71582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.188']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec6b2f6f-c77a-41d8-96b2-62c78dea4b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.189']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ead20d-5d03-4c5f-8ecc-dbb6167fa60f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.190']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b81e1564-d8bc-428f-9c15-4dc88db87585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f319ce-9d87-4cac-8278-d6dc9b1ff84d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64745908-dd9a-4218-b2a9-bfc5ac922a8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8e6b3c4-e60b-4da4-834b-d6531474381b", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.48.128.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0691341d-ac05-4054-8588-ca697c993cea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.91.221.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7633c4b-a6ca-4219-9fa0-5f74c2c1a751", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.180.209.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--611c8501-7dd8-43e6-9b95-2e9a74be866e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.185.85.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e7231cd-d14d-4def-a07c-edf3acec85db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.26.252.153']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca9f918-22a4-4838-a9ad-0c81e4204476", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.112']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1b5e7b-12c8-40f4-bcd0-54194c93edf2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--199cb6fa-ccf0-45a4-bbe7-4d6eec6cf04f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1156b96e-501f-4eba-b370-a4508b1f48df", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.238']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f8d87e3-3960-4f40-8f82-c1009558c639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.63.211.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dde3d77-c9de-4e64-baff-11f092a3eb97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.100.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6001c07d-ccec-4eab-9a8f-d0a7531f26c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.115.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08323a5e-0adb-4145-903a-41c61f06008b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.40.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f61eef-6e8b-44ed-ba68-7c6bca80bf39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.89.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9119ee2-e69e-4621-b0c8-9bdb63bdc6aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.91.36']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53de5b84-838c-497c-9c08-85fe13a222b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.92.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef4ae1b-af06-4b8f-b3ae-d7b8549cb2c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.97.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c614f1-9793-4570-a3c3-97f0a25318da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.17.55']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c9a0f58-0a7b-4d24-b378-369661b32400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.186.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--995e5a8a-843c-4e13-8717-ad8a1ea48573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.196.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32aa5975-6ac4-4dec-8586-bebf66498b04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.32.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f43e641-bcec-4ffd-bfcd-b73490baa4e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.32.192']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4048427-c447-4687-8a10-b5d311d15006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.48.199']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8530aa69-ad3c-46e3-8ab5-2cde32bff6af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.56.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a90aa4-9ac8-44d8-b26d-92bc17cb5e5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.56.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5d8162-81a9-4818-8b0a-f2bf167725ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.57.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7810792-f17e-45ae-af79-ee4fbcf3ea95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.57.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3609b9b-8907-4b90-a79b-daf74f39cb78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.90.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe3cccd8-40f7-45fa-b4dd-cd2afc271f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.90.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ede7111-29fc-43a5-92bd-7d503ee6900e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c3c7e21-7be9-4c67-a9ab-d4ac6d1eb39f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756dd8d9-d3a2-49eb-a3f3-bb8d14765392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.216.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6684a22a-6bda-414a-ac9d-6b1fc43cb173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.216.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b28beaa3-5fdc-4fd7-ac5a-762081358b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.224.96']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ff90dc-6a14-45c9-b25a-e77b15b55496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.227.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae8d8384-3464-4438-8bd3-6230e799753e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.227.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9943a50-ce55-4387-bbe9-5ef7e6a8c7a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.232.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac0a65a-03c6-4b55-bc63-eab66e104091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.233.189']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa40ed3c-6aaf-4886-bd11-2f8f26b95424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.240.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20248396-becf-438f-85db-c6989bb9a817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.241.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee6837a-4e95-4590-a846-dde83d1da216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.241.250']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea697d01-17af-4068-a9ee-63703bfbee4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9e9534-5581-4e9b-b7dc-a55f5b8ad69f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.72.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dfcd4e1-047b-4ecc-a316-0283d2916946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.74.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e503ae-e1aa-47b2-92f0-c674af1e51b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca27343b-556e-4c8c-b054-7ede9e4cf7f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.188']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d47eb52-7367-464e-b366-063ff8cc111a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9644ad12-06e3-4a73-800f-71fa099cf528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3febc8de-1597-4342-9ac4-4189e2e17a5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.123.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f59c11-e59a-491f-963c-30e8f1324249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.80.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86fd754d-3475-4dee-a27f-dcf6e3009f70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.170.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--525c198b-31ba-41d9-adcf-3ef33f31fd1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.185.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7523412-c6af-4c08-982d-134351198c8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.187.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37847b52-8e6a-4653-84e6-ad93172bdd70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.192.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f019608-1a92-4f98-a81c-f9e3277eaad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.202.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b40d5318-96a4-4ab1-b9e8-3056f64a9d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.203.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc8c851-353b-43cf-82e1-37dcab411e5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.210.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b8b5b8b-b4fb-4743-9a1c-d44a0197b7e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.244.206']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebcdf147-9825-4265-b647-33224e126082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.245.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29265594-82e1-4791-8bf6-fc585e715284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.72.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc09b48-1ba2-449d-b662-ec4813ce7972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5545696-18d1-4492-b35e-8374e8f751d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.238']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--637e6df8-cab8-4643-b577-97750fa7d09e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.62']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d2c22a-fc16-4c66-b823-26b4565c864a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.63']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d49b39e-d805-4153-8640-a2aa929c44eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.75.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64139875-d728-402e-a6d7-4bf973288277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.79.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2aed4d-018f-44f2-b778-16fe55d86792", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.79.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dfb8d22-85c7-4647-abce-c9197727cd42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.83.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e156069-2601-4f49-8faa-40ebdd44fd65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.87.238']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea6fbbc6-9487-4d21-b300-3fdf42946d67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.89.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302064a3-3407-4c4d-9459-aa827eb05d5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.89.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c065c9c-9324-4965-84d8-c2418c7062e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.93.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c508a706-3a27-49b4-a901-286d2178143a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3477bf3d-4ee1-4db8-a3e1-fb0e8545129a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecea6e67-b895-49e5-aa02-de78236424b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.51']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6864c088-c2c7-45d0-a890-b49fe42a2068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.164.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a7badec-1701-4b45-b14f-8b6acc68b305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.164.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac79c91e-2ad9-46ef-88e6-9242f5e26c2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.200.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a42a68-c787-4f77-bd5d-04be5dda03a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.225.63']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a446c93-c931-45e2-a425-36c2a67aca00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.192.63']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f3184a-0bad-4033-b11e-590aad9901ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.193.52']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4019571-c624-4cb3-a79a-4e9fadc12880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.195.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5af41c9-6acf-43e3-8a8f-bc6474545326", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.153.204.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc152fc-c287-459b-aa47-0ddcc574a5b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.1.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d424f6-ca34-4ff3-ad69-bd101d5d268a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.1.211']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1962d2b-819a-465a-b95b-676b2698f3b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.13.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b99165-5358-4fd1-8a41-dc50174f0b6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.13.222']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfc99ae1-6e7c-4bc8-af1e-6a0b7ce6eb85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e184f5-8eee-403e-b1a9-e33b89de72b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2e6cf60-ef2a-41d0-af98-f02247137b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78f61b31-9ad9-489f-a097-0a975e0b7fb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00ffea56-c8b8-4255-a8b6-dc45e95079d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.222']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa21b86-e3b9-434d-8c29-501bb4c1d66d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2b1a970-5855-4390-8202-763b74e0acc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.238']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71f02550-4622-4d79-94b7-61e460b915d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7186c74a-87c0-442c-884c-fe854613e222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0cebf48-56d1-4fc9-b9fd-c602133b3ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.167']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95294cdb-cc07-4b2d-a018-6a9df8445ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fbf5082-86cc-4a83-b5e8-1e33cc166d9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b7cb38b-eb50-41bd-b7e6-b0118a622078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec55452-795d-453b-9fdb-48363ab65e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.225']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f2c4c2b-e9e7-489c-88d2-259a26f3ff02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.238']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--761b24ff-10d8-41d5-bf0f-642eb4f303a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.91']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae9764fa-daa9-48e6-9268-005973122c2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c228bd21-2ab9-4113-bece-81f5c9445e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f82f0135-8bae-47e1-abdc-084880ef2939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31d2258-b277-437d-9852-c5c143ed7854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d120c48d-6fd0-4075-8c27-ec05e5e2f273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.25.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d043367f-7458-4d63-8cbc-b96924d9d214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.26.91']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1275938-408a-4d07-8172-dbb79d23ea54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.30.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40cfb9bb-6bd2-42d4-a1a0-d10be934b34f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.32.0']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c96f7fa6-bc35-4168-aed8-3d9ee2642ef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.32.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--740b64ea-4b8e-428d-b6d1-886416701d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d78a6508-9ba8-4e38-85c0-d6cf1d506108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a337d5e-dc1f-4e63-8bf4-00536f021207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b435712-022d-4ce6-b74c-4b048802d110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14dcd3c-9edc-4f3d-b55d-14ab789b6a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bb82d73-b103-44b1-aa66-06156147da85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.37.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d0acb4-96ce-40c0-87c2-e7612ea7a00f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.5.243']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae88bb0f-8934-4b04-8e66-797dcb872667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.57.193']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bbb31ed-f6bb-4e23-ab5c-a69d18c30bb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.57.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beed60e6-34ff-482e-ad87-776f0e574626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.59.190']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e131cd-73d3-4004-b24b-65ba48539ad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.170']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d45c773-00bd-4493-b267-e3db673b1c1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.199']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a2feda1-c875-412c-94d5-d197e42464d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.206']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d54f6597-8949-47ba-a087-ab73bebff851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b72478-25ec-41a8-ac1f-6bdf0449eefc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.61.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b4d5a7-c493-4f34-a200-e15626cea69d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.61.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d88f8ec-c5b9-4078-862a-0253071a8559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.61.91']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c94633df-5f92-40b9-80ec-537d0f993fc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.74.182']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e321f66-6756-415d-bd60-3059bc8df988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.74.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7abaa9b-6b7f-4534-8c32-1dc85033c2cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.8.222']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d439fd5-5b32-49a2-8575-797b34008d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddcf28e1-3f3b-43b7-9291-9ec403cd3777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8cfcaee-b7bf-44c9-9dab-abb113efb6e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--950227c5-a470-4297-a1d4-75a17bea6929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.84']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c9f76b-0ff5-4a2b-a603-58758245b01a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8247e2a-73d6-4fc8-8159-3b227f691c0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.1.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3116b6-e608-4fa0-82ab-47f4577fd684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.113.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5aa2ff2-a775-40e3-86b8-d27df8d599eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.116.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0301b4ef-d080-4ca5-8f8d-e8532adcffcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.12.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d54f9a18-fada-4e40-b972-ca20cd167d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.12.63']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3c4fe2d-9069-49a8-9a90-21bede33d561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c54efb46-881c-4771-b3d3-b15aadb3ddad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.173']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be2354f-fffc-4753-9e51-d22d6a7d897a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bac225f-50c9-4889-9b91-f4c3736b40f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff0e3c5d-8699-4e16-880e-e280e72d2242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--436ff204-2327-48f2-9b39-4dd7193d5804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca826fed-cc42-4cbc-8183-a3658c33daf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.44']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f86e73d-5c3d-4454-8045-36b1b67bbc13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e575a83-6561-41e1-b1c3-a95a4ace0b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaeab466-88d5-4af7-81f1-51f9b0fa1879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--440eb3fc-70b6-4b0b-a88d-2c5016c776bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.187']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c024e514-6595-42bf-aaff-37ddf371c1f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33332398-a9bc-4d5e-b060-00ab2d970345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4738918-5ea4-44f6-99a6-3d54c403c1f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23964b30-4124-45d5-b343-24bb855854be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.192']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c579765-3e94-49e3-b481-287cd014a531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7abaa11-d2f7-4a81-a373-466891ca468b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f18e0ebf-8ace-4eef-9adc-240e52ba2c3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f770602-d7ca-41e8-bdfd-8ea32569bd97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d7c31c-10a5-4787-ad32-3b5992c1d702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.123.1']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3e291a-0b43-4cb6-834a-fe355478fd64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.123.224']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d13bac8-dafe-421a-a20c-f0b91b131110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.124.0']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4973123e-be32-4f1f-a17b-72139deadc81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.124.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb52d56-5ee0-420b-9ec8-9c9928f67b2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.124.152']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0bc63ba-6167-4615-a272-bde21275a309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.125.91']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5480c57a-f496-4423-8805-414c4a35d7da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--504e81ef-3aa3-4f9b-92e6-9414c4f65ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--195b9fcf-f71b-4d5d-ad38-aa43ee94d71b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.13.44']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b59cb440-1eda-4a0a-9143-cfd019a06198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.13.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6402089-6abe-4296-b334-edeabde4d4f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.5.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0804e688-510c-4cac-8958-feb7b326f192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.5.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92e5357-ece9-4028-9d13-0653fb9f8568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.5.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e187520-a480-4d0a-a674-a44171850dab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.5.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa254d6-a2be-417b-9e26-3427bbebf259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e96b20bc-5a84-4a13-b61c-6ed06282436b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7fc44c9-b413-4e24-84f5-8484962e7c09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccef9f79-0876-4eeb-b54f-4eb901681b31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a4027de-49fb-4a22-896c-6dc1d8899e59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbcc0230-8cb3-4937-90fd-db6f27fbdae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.169']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--523f14c5-511d-4f72-bfae-d09435b171f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e19f5ef-e43d-4bf3-afbd-755133f438e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f3231e-b0ae-43c9-ae1e-a22b67230abc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53096d0f-c3a8-4db3-ac18-a4a920de45ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc087317-d44e-4df8-b748-66fef987c270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.255']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43af21f6-003b-4f32-ad95-1fb68f5a49b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a358c9f-f656-41ef-8882-f7d7ab3deb5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.51']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c1fd245-4422-4526-986c-e597938f79b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.52']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e054c2-58c9-4366-a7f4-a1e01b0ba2ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca60b51-23a7-427a-bd57-8846f4c30687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4f61df-40c6-460d-bb98-4c3fc9a96d6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.96']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e73ec0eb-d3ad-4a1e-a6dd-a95b907b2adc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.187']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c3fce1a-74dd-4c87-9d45-e7cf70873167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4667cfa-4f05-4bac-95e7-a4e7526475a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3233f5d9-de35-4d88-9571-7a7d73a12a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a67e90-6cc1-493a-b7c6-04bc3f2d3ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af5cbd38-99b3-479d-b007-d3f083b31e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--766d37f1-0153-4db9-981f-2f48e44d1311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.206']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7136d182-b2b7-4522-a620-aee216799a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb5ccf67-1e41-43af-ba06-f3c07558b25b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2cdc70a-e592-4b44-a44f-34850f921c86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb8418c-ea75-4a74-a16f-c5e5b7223bfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.249']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--247770ab-313c-40b1-8a95-62faa757292c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcdd99a1-8935-432f-b9b3-ae9b746925c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f026c31-f302-4773-be96-f942ba2e69f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.108.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a74a7497-d12f-4e9f-bd43-dda55582c246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.108.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f700cbad-8bef-4b3e-8558-a024b40930cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.48.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3089d5b1-aeb9-4c98-b7ec-a1adb2081e77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e4ed350-ba7f-46db-86e8-f4701d88317d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.50.188']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3262afa-d300-4279-8fbd-89f9272b28dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.51.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6732ee39-5d09-4fe7-be7a-9635781d4659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.53.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee229b3c-54ff-4245-9c59-f517da1db364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.81.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a04b1703-f1f8-406f-bc58-b3224dc68909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.83.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c19734a-ca64-44b2-bb03-a86c421c9399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.85.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d7381df-ec1c-4fdf-9877-3444cdbd1939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.85.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b680a96-7646-4790-935d-cb5173a6fcbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.91.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e62632f-957c-474b-a81e-dd0397087ee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.91.55']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14169be-d5e0-4868-8a80-4d1f6ca8a865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.125.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f01bf21-cfe3-4b52-b2ce-2bdc14fa522f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc454b09-accf-4db5-a169-d2882f37112a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.188']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b018ef7-5ca2-46de-a796-347ee194416f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.26.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--777bf39e-cffc-4f43-86e8-3f8851fa438f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.28.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bcb6ddb-a885-4a42-9503-ce1263fda6d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.32.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854de94e-bddf-402e-a236-2f8cbf3d9857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.156']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83169fa3-9bad-43d1-9b1b-566d81685ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac686af-c589-46ff-9a6a-ed062f04a94a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e0e67ab-01b6-41c8-bff7-4c87fd883c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.9.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--882083c2-f788-48e8-8c12-5f31a9c78be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.172.70.211']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d8686ef-06f2-41a7-a003-9081407a0d2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.172.70.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f99e0a36-8ed7-4974-8976-8c8b75e5dd33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.187.184.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75691ac1-6157-4656-98bf-ec2497b3c09b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.193.146.159']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21426e39-20df-4219-b3f9-afa4eaedab43", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.197.12.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7222ec71-a79c-4804-8733-f25af3e6a3b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.197.238.250']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd6f00c4-3348-415f-b693-090ce7012766", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.203.42.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd101e39-4e8b-460e-9dfd-70c5d5f1dabe", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.213.62.162']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b930003b-9446-4009-8ac0-402015e232bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.56.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e5fe916-33cb-49dc-819c-950929c6b703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.57.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1005558-ece9-4113-8616-d4e0a9f0e4a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.58.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f553eeec-dc78-4e55-bc4e-22e1eee9ac23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.66.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6febbc1c-ebbd-4be1-8bc9-77c3df216a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.66.246']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--218dffbf-b5d2-4853-87fe-2eb3c6b6df70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.68.159']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c742c36-688a-4ebf-8631-3a6a99ba3dc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.68.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0df2907e-62c8-47e0-a4aa-b5e9ec0bfbdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.71.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d85462f1-a2af-4d4d-9779-75265303b54b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc38f977-02b3-4381-a194-52a6a325bd38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.21.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5579a374-e293-48e0-904d-450106ab4f91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.21.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b5fb802-3c6f-4ba8-ae03-45078150108d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.21.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bea5a89-55d7-421f-983a-05960076187c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.22.156']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01134a3-c65a-4889-a550-f68425f79e16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a49cb8-b837-4358-a748-beac2696068f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e99bb263-66ed-4937-8bd1-df2d3c503ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452af418-fe45-4a39-8b31-1864a5bcea74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b59e58-11a1-4f3c-a2ca-220764b0d664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.24.158']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f3b6046-f6fc-457f-8eec-766d1d0bddbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.24.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d3092d-7f1d-4aa8-a735-0bbc382c3fd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.29.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d87bc6d5-f996-4ef0-90b6-eb121975abe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.47.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e1eba5-212c-4551-b222-ea1f449bbc0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.49.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e28a608-06c5-4584-a36a-954d769a6bce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.49.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b20828-326a-4219-bee9-0c87ed8ef6fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.56.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8bb4def-2c14-4cbd-b656-0e4542f35d29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.57.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4ac78e-e7d9-4736-b1c1-fb6df0caa4fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.57.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc81a60f-7522-486b-af5d-83b1b4491174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.33.1']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1096e754-5fc4-4fbb-b3b5-64daacadc112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.35.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da077dd4-b570-41ee-94db-ce1abfad2b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.46.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--861db50f-25a0-4bd7-a5be-26a8da0ee8bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.5.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2260e60f-17b8-41e5-a301-60582c39bfeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.210.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8f14c9d-30e5-4b36-b2f2-44070e2f57eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.216.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aac744b-5a9c-4e1a-af70-da12d0f46a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.217.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f01a53df-16fc-42eb-a42a-66a4e3af0163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.250.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8daab9b2-2d94-4ff9-984f-32acd83692d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.104.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76a7a92c-e4bc-4274-ba37-1ff19618d8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.84.49']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1348d22d-e591-4a8d-899e-1fee81121320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.95.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeabf6f3-ae9c-4bbc-8a86-e0cd95300688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.231.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bbe9047-3ece-4c83-85b6-20c27284f32a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.235.162']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a7f5d10-8099-46ec-900b-1c5b2f10514d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.235.164']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93d789e-9579-44e0-87a2-ae3df72e49bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.244.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91a5acd3-a035-42fa-af73-020eaf068498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.245.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6fb89e4-48df-4a6d-b005-d7393b311ebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.234.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a67f305-f142-463f-b841-c0b3b5ae0466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.241.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e32b6e-fd32-4c11-9bf4-83233ba08bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.244.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f6aee4-9f7a-43dc-adb2-9d82f68ba8b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.245.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29493221-fcf7-4c8f-b8b9-733dd055392b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.126.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf1f24c-2854-4685-be9e-729931387adf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.2.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--904eac5a-f5e5-4143-b039-fc2a4ad421e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.29.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d0945de-9544-4486-8742-e51a19c54595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.29.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e8e7a68-7586-4582-897a-93aff7fc436d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.35.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3733d5f4-a17f-415c-bf61-7c3cded2ff3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.35.217']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf25431-da56-4459-8501-e7f90973d255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.72.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43a34e12-0ac7-4225-a378-b7c4ea810dc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.73.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e5ed19-1c5a-43a8-ba14-3b8329b945c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.97.129']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a5391a-627f-4710-b5c9-d48dfc3b48d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.6.106.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7423d2de-6052-477f-bd58-a4d554c0b24a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.62.193.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c140321b-0449-497e-83f9-e14b54af75e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6a4aaf-077d-47ab-a1c9-545dc09b8ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a78e15-9743-43e2-a746-37b18ea5c07f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcebd57e-9e2f-4d0e-8474-27486ab78f02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.164']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f184d576-4d0f-432e-b171-c1822a3f03d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf0aa43-2a05-49cf-bbab-19f1431b28fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ea6a7e5-0676-4b3a-9a22-62d425c50e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.112']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d4ff46d-24f6-4f97-af9d-5d94a254f048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2cc5787-f4aa-46f8-b6a2-3a64cf6a3fae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ea639d-fb29-47bb-889e-4c54a6570c1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdfccec9-482a-4c64-9c22-f46696124d51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea85a914-9b7c-4ff6-844c-a9061acd620a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb340073-3132-40b2-8be3-c32aceaa5263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.186']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c5de092-636c-4ce7-8275-f834de2f0086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.206']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1239ae00-1780-4099-a9f3-87ef1102ad91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4fd3ab2-6ac4-4349-9c51-61423c530f8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3571c123-f349-45b5-b8e4-23b6698b25c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e7896f-11c1-4413-a645-34807e7c0a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a0f0a8f-f304-4d80-a273-dc5d7524e6eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de632ed-581d-4bd1-8309-291088b8d96e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.243']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2699029b-b9bf-463a-99bc-85a51299a743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda607a4-d7fc-4c72-94ce-3e8b44bd9078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.250']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9fcc0f4-e869-48d4-ab80-72fd507c7b18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.253']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a17213d4-f94c-4147-b568-acfbc0cb1979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5905cec1-b766-4e54-834d-7ce48df35959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ed0a4d-039f-441f-840a-d80ddaacbe31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86195f49-035c-403a-ba57-2a72b682c6ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeef37b8-c8de-4bcc-8714-0dc85f4fd517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be1fdf8-702e-45d4-bab1-0e0100ebbb87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92178868-d77c-441f-a8f3-42bd264c8179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b99f73-a085-445f-b01f-b7e7ac26c507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b152c69f-ec92-4370-bd15-e37be0eba5a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae117e44-8089-4cf7-ad51-e93dfd3b2e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.222']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9103d87c-02b8-4424-856a-3e50a28b4c95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d5946c-3994-439e-85e9-5ca59b57f144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.136.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73233000-e36a-4500-90b0-db2457afe177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.136.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a37d87b-3fb1-4f6b-bc9d-5ec1b03db39f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.138.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b85926a-df1e-4561-b983-5a1234624c80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.144.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657ab1d6-a09f-4f44-ba7f-c6f6a68b7ba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.145.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a0ec000-9995-4565-9cac-95003eb3288a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.153.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c82251-bcac-444b-9b29-8cc62ada4a6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79bcab4-c90d-4e3d-b11b-79e2b7f1f66b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.177.158']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68621169-a06c-4609-b0f0-0be41e14c6b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.185.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f732df60-5388-407a-b079-e3c28da88f8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--932dc9b1-0688-471d-a18e-697e7eeadd14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0446ab35-3f1e-4ed0-ab06-68c6635b1620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.0']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a20ff7a-9ad8-4ce2-a270-5c74991746bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.1']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcefa481-8f74-4881-b893-4296cd826cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2b6455e-14fb-416e-a62d-07a7e757a2a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20008b30-3041-492a-b8a8-de95955fddd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.129']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6608655-bba6-451d-9b59-7bd610cca6ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d540e5e-7358-44f4-926e-697e50c1b486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc2ef86a-e08b-4f0a-946b-47a22fbd6719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.159']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--392b051e-3c5f-42d5-aa68-049efbc2f9ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.163']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb66c01-4efb-415f-b8a6-1fa61567c327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55cf99f6-b892-42d9-aba4-9dcbe5c92de7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.190']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1432cbc-fb0c-4f15-9513-98a27264f129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c671cf4c-4868-428a-9812-136c3b4b5dec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e79c4607-96ae-4008-b152-b83d7908c912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0fbdbfc-42cb-4642-9cbc-84774847eaf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.206']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fe51331-617a-4ca8-bbab-3805c2c60189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea89cdf5-9439-4a46-ad8f-d70c11a8d1e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.225']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f662eefd-6e2b-4527-b773-14bdabdc72ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a037777-5360-4968-bb1d-b00cf0d4c3c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d2c2f1-b8e1-4fd0-93da-a1ead612e37e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474236f8-0764-49e3-a3fd-819a398f9b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c822490-15c3-4496-8982-386646d437e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c07c4176-00e3-492f-825a-e73ca6ecf8a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a564910-3f52-4f57-8b76-472bf0a36a1e", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.112']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc077a85-0bef-4be6-9f2b-055590ae7489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d7c5fa1-1631-4edc-a341-02443f7d518e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be65c5fe-f5e5-487a-bab0-e159d89d594b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aafd619-fa07-4c41-b14c-2cf45e4c0431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dace5bb3-b3ba-4541-b94f-9ef587cf4aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--654d4837-aa35-4c37-a1c6-459b0ab5164f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--260a059a-cc2c-49b8-ac76-13a2265b3140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.160']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df07e16-0998-4bd6-b345-123fc1ad0074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.164']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67948d5b-3997-43ed-b9b3-2e93b7281297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf55ec0-b310-4024-addf-66357f9431b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c25c512-c0eb-45e9-85bc-2aa5fd321410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3b4de0-b88a-4639-a148-47f12d0e8a91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85bbc677-2d56-4659-83c3-c422550beb70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f72d205-908d-4af7-aaf1-9062d2def7a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5592973-4cc3-460f-ad1a-22a458fe75e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58b4f6f7-4b8b-4d7d-9d72-767c3d591fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46d54854-b073-4044-8b1e-afdd9d9d9a72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.59']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e2e19f-4d39-4684-a493-98bb3720f202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aa8e4ed-451e-49da-b695-f467fd1dd34f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec89cb9b-9503-4efe-b1b3-f9636f3ca5fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace7703c-f440-48e7-8b2c-9a1a4bd951ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38e4800-25e3-40d9-8bb8-31d09d6bdb0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aaf13c9-4298-4ea8-9ca9-532ec9f5df35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--806bfd97-fad5-4a93-9a95-48fdd38ac93c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c2e3d0-3dc1-47cd-89eb-1bd7c37cc176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a408b160-3506-4176-828d-e360eb44e77f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e8a6896-9b67-474e-a01b-19e5139580c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--129ce49a-a63f-4111-ba82-e7a2346edc21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a1d5a95-85e3-4199-bc44-14cc8910b9a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de7bd3e-b6b1-4bab-afc0-5087f91b5ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5507d900-444f-4157-a9a5-7532b0697db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bdc8f5f-e976-4e46-81e6-a2025cdf2e3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2fc92a-f484-4a53-b0f8-1e3d04ed25dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3689aa26-ea50-4b98-afc8-e029b5d6c88b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c48bf909-26a5-4a3b-9fe7-a05592fabfd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.49']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6578ca5-4228-4bfb-bc2d-d35bbeda2d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.51']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0978148-3105-4a32-a80c-02ef928b386d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d1448c8-75e2-4b48-a8bb-d120103e6b3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a26365-178b-49bf-8f90-cb94ffa6daee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c7c90d-1b36-4d42-a5ad-6d05843ce3b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a783f55-167d-4202-93df-49094ade9273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.216.44']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--378e665f-2bb9-4dd6-99e1-5f6bd5ee60fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.217.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca291f4-e080-4ca9-b427-731e18b31e82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.217.91']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7acc0347-e0e2-4c1b-9b80-96ad08f2e5ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.49']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--989f7f23-fcfb-4383-afde-3c5f6385f22d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a6ee092-7313-4f44-8493-2ef0d3439e74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff1a165-8e76-4c95-83eb-c09b3070f6fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6753eb5f-a042-4536-9273-946b03a3eca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7bee40b-f220-4ef1-8194-7728bedb3b7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.233.160']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0766d6fb-4da5-4a5d-bd9d-73b27b3dbb42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.80.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--006da60c-5e25-4334-9b45-acd3d677d2ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.82.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ef79a6c-f473-45cb-bcdf-d899391b9af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.83.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725674f6-8323-4633-9e97-d461b6c17427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--874f0bed-c492-45c2-b5e9-1257c668302c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6def19a1-8311-4376-be46-de744b1ba4f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c5dc6f-219c-45e9-bdd0-18a9416c3d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5963123a-33f9-4bd2-a114-aec514d64574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.159.0']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9136266-d3b3-4ccd-9fe0-2cea5eacf52b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.47.186']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--101e85a4-c1c8-42f3-b77c-7f73b4c934d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.150.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a2c6b9-d797-4122-a24e-b3e4ec3da096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.150.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac9b9c34-fda0-442f-873a-838a95c0241a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.151.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1062f957-4f49-43f5-91b1-5feeae2f531b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.165.36']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a2e009-cfed-4f01-8391-945a54fba3fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.167.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87a698e0-040a-4362-8805-8bbc521ca7d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec0a774e-f088-4889-a48e-be3f5b3ebdec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.184']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d8253b-8515-4fd1-9b5e-e4daaafeda16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d08889-6011-496e-9d0a-d88555839d26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.48.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4471e08-4ecd-4f56-a4c0-ce7ac51fee5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.119.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e209b87d-98ad-4453-bd78-a878e05262d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.145.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b16760-68a6-4775-b947-05dba9ba4034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.145.62']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d83a8b-d08c-444c-9ac5-56555c44603f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.145.84']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--693cbe31-b574-474e-b997-cd38f6d7ecaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.152.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6817ea1d-58b8-4236-a590-5c0f8da5618b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.152.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c51e96-dac0-4d79-a4a4-1736a666a2e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.199']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a0899e-eed5-4ef0-86c9-1cc4be03c49f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.206']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--394333b4-fb80-465c-b06c-7379b6ec75c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.162.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6dbb6d9-5ead-4111-a23c-0b9535b8f2a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.166.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d9de8c1-5b56-49b0-bcc9-193d9dcd2c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.167.44']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--549e8024-cda7-49ac-b3bb-10ba9cdea5e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.58.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd31c8ea-1160-4cee-aa95-a6032854fa24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.61.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9c40bc3-80ef-4085-a4a3-f28a097dcbaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.128.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e49610-2c64-4df9-b48b-0869b3bc2203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.137.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a42e2d-1fc0-41fb-b671-90958d610015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.152.158']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909e8190-df3b-4c2b-bfc7-45e0f3490f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.153.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04de2ace-a82c-4d14-9ad2-2bd6e05fd953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.165.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd93635-aaf9-483d-a764-5d8756e9c792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.166.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cf29d8e-5e71-4ab4-9e62-770341624298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.163.119.173']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70809dbe-d815-4b8d-8e7f-711d8ddbb500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.189.31.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05635276-28bf-4f5a-b6d5-23198e437839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.26.188.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fbf188d-ddac-4e46-a3e5-9f132987190a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.50.235.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1703d23-2f11-48c4-8ff9-ac396c93229c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.56.131.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89531006-b793-4ebc-92dd-27bdb65b12b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.8.34.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6034ad2b-d133-4cbd-9069-a1baab030aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.89.69.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24739737-553f-48e4-8e10-861dc2b40aaa", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.124.18.242']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4735affd-9dc2-40ff-a530-1213f580e708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.137.44.243']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270da02b-9cc8-418c-957a-42dd54fc94fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.140.123.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e94a3d2-e767-44aa-9709-dfdddc34feac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.161.46.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--724f5a1d-1133-46f1-ba09-9449d4901938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.221.115.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23aa3e8f-537a-445c-ad23-166752cc96c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.221.115.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf10721a-6e77-497f-8ef6-60805b8dc45e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.68.214.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1b45aab-09b0-4240-a63d-671cb9448068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.80.194.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd8bc5b-b84e-4756-a498-96287c2f0b7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b19a6b20-c8bf-443d-90ff-a16cf23c3d0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.122.16.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b70a48f7-04fd-4993-8c95-6687d309068e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.125.100.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac22717-2563-41f7-8824-a49562938a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.164.59.91']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81428f56-6b9b-4519-a06f-41b46b127ad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.183.141.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeef56e2-6ce7-45d7-9511-b3b15647f52c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.183.141.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e57a33a-4f38-454c-ab05-982c36512a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.39.33.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b0fdff-bc11-4441-a35e-f8a754097141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.63.202.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abbb83dd-5ee3-49ea-b711-66967a367ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.65.225.230']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19335e83-36e0-4c6d-ac0f-6735ae084e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.65.229.152']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--523b98cd-c7e9-4644-8fdc-885749bf8575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.65.234.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20296dd5-d42b-4223-b31d-7d62bb1590a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.65.234.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fafc55e-15f7-49fa-8050-44143dc2823c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.65.239.36']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed0450a6-d3b7-4d6b-84c9-61d05c58700c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.71.141.170']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae08348-8066-4604-b1c1-baf85971a61f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.122.7.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d9b10d6-fa12-4a8c-9ac0-5995deb6b31f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.153.20.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28ad2a92-658d-45ed-9a52-e0dbeaa2dbca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.17.87.52']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3bec956-378a-414a-a9e9-72cf26501491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.175.103.255']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925676d6-e6bf-440c-8296-b2b3fec1f042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.175.11.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c58da63-248d-4529-b0c3-4a709b71b15b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.175.125.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0372dd23-3bd6-4856-9606-2b89ee9d6de4", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.25.212.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac90063b-6154-4dea-a5ae-dbef83ec898b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.25.223.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df696312-b979-49ec-a47c-c74b94abe735", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.3.112.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3332bc06-9641-427a-b652-fd1fc53bdc1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--175cc151-2524-41c5-891f-39f61407b131", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdee07a8-6b66-4f7c-9905-7a4bfcd424e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac608e6f-eb86-40db-bf4d-8540b9ac7a1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.56.25.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--852ca7c8-802c-4f9a-bb28-21fde46072cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.83.11.206']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7670cc8a-e57a-45f9-9c52-6adad82ddcda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.83.11.216']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4985b68-d256-47d3-a66b-7d5d3efc18ec", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.91.72.190']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a5e6a90-818a-4931-a9cf-e6b5933bafab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.94.67.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--163ebc57-65e2-4624-aca9-d85cf74cbcb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.96.240.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db45d42-b672-4ad9-968c-7bb54480f963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.48.22.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cbb939a-9b2c-4734-a595-adcf149a9d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--238a457b-a5ae-4cb3-bf99-e21c4ba89dfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a389d24d-5c8c-4447-a039-2c52bd4b39cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf86a471-ef67-4209-940c-4a6a000e6044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3adec3a4-5fa9-4cb8-b2ae-59ed3f92a280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f266c05-d2eb-40f3-b8a5-88fe0e237cbf", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.185.118.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ff504f-72cd-4d6a-ade8-d90ef926179c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.185.127.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1998ce71-239d-4011-96ff-04d549e6b59e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713be812-094f-4218-81b6-016838181972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46bf7162-6e80-459f-aa72-26ae07f24750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf9af37-cdd7-4154-9a27-4496e41e5c90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e668420e-0325-4d5f-9275-63db17321988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a8875eb-7586-4a5f-90ea-0f511eba9547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a13e997-476d-4a0e-adcf-4f1a8ff5dd99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bff4b125-ef5b-4021-b69f-ffa31f1badec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.106']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c97602-462e-4aa5-859d-54d0ab6626d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff2cc84-7012-4a23-af07-2d59bf1d4bb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec83207-46ca-4721-9f53-731dd167ad5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8791356a-5b79-4111-a8ab-2928b4c606c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d682e9c-ea0e-4577-9709-943d0edc43c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cfa2a3b-570a-4a46-805e-ccbf2bea7b64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513634f5-dc7a-4088-8795-fbb8f76b8c04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.131']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee13615-e4a7-4561-b507-32bbac3abf54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a07627-1a77-469b-baba-b4af8abdfbfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e487791a-da3d-4f15-a6f2-afd23663b1cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb8ca4a0-3bef-44e6-b024-89f3350feb61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.14']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf4b8b2-1bb5-442d-a982-fd1b9cfeb382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--612b5fed-9914-45c6-98a3-4a46d37302bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0682aa6-bbc9-40dc-94ec-61ac22049fa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9b21a5-5296-4496-8889-3512e3691330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b7d42c-bbd2-4573-a3bd-1da5f89bc26b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a8c41cb-5e76-4858-99b5-934b6b28cb6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c909e9-af8e-4569-ae3c-0996e18c4492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.152']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f42649-1b68-45d3-ae27-cff27f0d725b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.153']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--942fd9a8-0375-40c9-8e73-e1dddaadad8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e45c036-bb4a-406a-92b2-89e6b6df55fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.159']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b66b205-b1c6-4789-ad02-ce08ade099ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.162']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8060b1c-c7e2-4e61-bafc-12aaa030b482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.163']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--070a556a-45ee-46d0-b8d4-050ee2bea6b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.165']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400b0c1e-5cb1-4989-9a10-21dacaf101e2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.167']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c8275b-580e-4fab-b060-750aa2378c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd642b7-adaa-4879-8282-252969cf3134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.170']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa688578-2c5c-4d71-b6ab-ccf59526023c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.171']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb540c1-69d9-4bf2-9e56-40f807948daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20cb5f82-a61a-4b7e-abbc-eec629f5b432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.173']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58e6acd-5a2a-4204-b21a-8737dd5800ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e960c905-c67d-4bb6-89be-0ff81e14d1d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b08357-bab0-49c6-9af1-a5a2a3970957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.176']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1133829c-96b6-474c-85c0-b3c4fc206e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed92744-e8a3-43c4-8a5e-f34976246879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9158bc46-0259-4aa0-bbfe-ea0caaef1bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58aefacc-7ddd-474c-a3be-d5424b80c314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a03f2efa-0452-461a-a827-6717e5533501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.182']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--873b1724-60c3-4cad-9e73-fe2a4a97096a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.183']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--627c89fb-3f53-4fe9-af7e-29034c367dcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.184']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb4103e-07cc-4b86-8d6b-632303a8e199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.185']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aff6c7d-9b3a-4015-a127-2eb63f95cda1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.186']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35635617-2354-4efb-8b22-9fc3d46706e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.192']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34edb5e8-0dac-485d-9c58-f104a1b08255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.193']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5c8ffe5-9650-49bc-ad67-beff5460e223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3b097ae-383a-4259-a8c6-c3c199de5fd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.195']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cdb2f80-24a2-4042-9481-335d5d98ddbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--523e9aa4-f3a5-4c39-b32f-e7dbf5d35093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--824efefa-ec9e-409d-8f3f-d7fedf15e0da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a65cf9-e72a-41b0-812c-ba2d42a2ef08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.200']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a51c18-5d25-4442-a71a-325e522e0018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e10478a-10ea-4671-8ef1-fdc1670defa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.202']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d8ae154-9fca-4b20-877c-ee928dee2657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e862e8-aa43-4d73-b087-3dba5c3d0ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c722450-6261-4ecc-a083-3727fdc001f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.206']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5a7c15-2f9a-40a0-99e2-2ef2f4f3b72e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb93e51-6ed3-4880-88ae-f3d204944f3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e426bcf-bd77-4d09-961b-fc377d837cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac334f6c-d051-4ca2-8d3b-eedb442057fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef914853-5e72-4793-91b5-ac25d8b34665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f91ebe3d-bdbe-4a1e-a559-983395582f82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4368cb5-1d76-43a3-9dc5-a3e019ff1119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.216']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df15b8b-9535-4d0b-9aa4-de926414cd6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.217']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dfcb564-4477-44b9-bd00-74b8cdf391c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf0c3b4-c7e1-4029-9305-68b17962e0df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02568947-33e6-4892-966f-2241654fe699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c389b1-ab0c-4e4d-9cec-5b17301ca50c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c1dbff1-a99d-41e5-8102-813617a99bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.222']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--256f0e94-614b-47b8-8de8-6d131c034420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbf86dd4-0319-4343-afb7-45c1f02e4981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79e0310d-876d-479c-9c97-e85b0f94b7df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.229']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e6b3d2-3d68-45dc-86f5-0be69c5380f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.230']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ff0748-24e8-4b1d-a710-af2375715da0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7566fbcd-149a-48e3-bd87-a2587b8d2124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8389562e-9cda-480e-8b80-ab697c05601a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa3fd458-5dd6-4de6-aaf4-f568be6a2348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28494a86-a605-4c10-b0c5-44339ea04e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28883bcf-5f2c-4943-a3f6-d7cdd1000b2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.238']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9069c8-dee9-4045-82ad-4b14075704e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2344f89c-e452-4d5c-95b3-b58083722c52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.241']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a13276a7-8f01-4391-aa72-8b01835c5fce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.242']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d17ec2-0de3-4eaf-a8db-65367ad9ddd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.243']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fafbc7f-2157-40e8-919a-68d3ac1848f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--499c8c69-7597-403f-898a-bbfdf5e8438d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.246']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef0ee8c-03e1-4c0d-b047-b4329aba1f02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2b704d-8246-4640-a10e-1f854fc31615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.250']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5dee451-5f0f-4a61-bed7-ffd96aab60c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c2e213-9e1e-48cb-b3aa-9d5e1763325d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--795394bb-99e4-4a33-a2b5-3b7b6538ff8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.253']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbf60d07-085d-473f-abf2-865abe2eb708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.254']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ded08777-fe16-436f-9d5f-e3ba2b787c2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.255']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a36bbeb-dd13-40d6-a732-b2dfd6e5ada5", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d079b72c-b901-4f49-8b69-eac6b450bba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d230211-8a8c-42bc-82eb-8839ee76ce68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ca9003-c896-4cbb-bb2d-9c5dbf2a4566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc12760-b9c2-458a-bed6-72ff7fb2aa03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d9151ea-ee81-4523-8b6f-ff0ef3520fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--172b8eeb-0dce-4b5e-8bdd-4bfe28f5a244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.44']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0bfe9d0-c4ec-429a-a3c7-e931d7c54d98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--996f68e3-7367-450f-9278-5abc487bf10c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--175533f7-51b6-447e-bee5-76384f57bb27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e38bdc2c-c799-424d-9043-d62ffe2ccc43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.48']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--661395ef-6fe8-4127-8bdf-90a844e87db0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5629036c-9e19-45ce-b1d7-ccd1810c768c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.51']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5a4f69-1f92-4199-8252-6d6acee07108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.52']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d7c032d-e0e5-45a0-8d9c-79dc993d927b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d982a5de-4b6f-4bca-b78e-4ee2285ad66f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--441e8821-aa12-4e4e-a8ba-50b574a6b4b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.55']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb4f5ae-65d4-4eca-9ac4-2cfe71825851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.56']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c431f4-ff36-4735-87fd-9c58f182348e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e685b17-5103-4258-bce6-6938323df58a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e2ddca8-d804-43f2-97e6-bb1ca17892d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.59']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25d185b6-0600-4270-82f3-36cc29bff613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f57ff3d-ff99-403c-8445-ff74de8f618d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.64']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9507740e-d8f8-445c-8122-4da360b34291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e5ecb70-2eac-430b-ae24-fff181e6d3a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55368885-8417-471d-b85d-efe7a84fd218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a64c15ec-48d5-4e8a-b7fe-42d00471c857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ed1ae2c-04f2-463a-b3d7-3a22af8746aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e92837a1-33ce-4e05-9798-b05adff00b2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aca5aad7-9350-48ce-bbdc-e0b269c8e7e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--682efbec-6bf6-42e3-bd8a-8f33132ed95a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae6b1c3-ca99-4427-a575-35b0fa12761b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8acabc9d-243a-4f1e-9bb9-792dee8007da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--988df15e-8e4b-450a-9e9d-402044f0abc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa6216c5-b46b-4a20-96d8-19599a237561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1bc1833-8d36-48bb-8ea8-70d3e269c596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057d0991-664f-412b-afbd-fd6e5c454cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c1cf854-367f-4981-a079-2bfe428f723d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad7dd1ec-da04-4f1c-95ba-23640c4da208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f677bb-885a-41df-b6ac-0533368fd917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--655f620b-a86d-48dd-ba89-d79a2dd0dd1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e226049-512d-480d-86b2-4f538ff7bac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ae0308d-2ad6-407a-a6fd-189b71335555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1c5d950-c572-4db6-8c0e-196062303556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c3f1c5c-06bd-41d7-b35d-7ef53aa2ce01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8742d569-7957-4fea-9067-16ffd1a75705", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c356fb-7e7c-41b7-8ed8-65567ed70708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.91']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--070c83ae-e223-43e6-a2a4-dac63617fb40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b3a6530-d70d-40a4-aa92-810266e233ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--853f610f-cfba-4ec0-8109-1904aded97d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--106afa4a-2c4d-48d1-a501-905404a6adcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.96']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421f2d02-c2c2-4bf7-bf8e-72f3416fb513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.97']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d86375c-2c38-4ffc-84ec-784a084c5bd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--453bf747-2542-4ab8-ad6f-267015a7305d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e390b7d-1c2e-4a8c-87b1-022084f653cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.107.84']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77151e11-930b-4e89-b7fc-1dd90292dd20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.109.224']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e144390-bec8-4e23-86d9-dd90ea456c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.133.171']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bce0c9f-0994-4be8-aafa-a163877ca031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.174.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041d32c5-cca2-4474-991c-9a8fc49fb1be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.180.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77603455-ba35-4db0-8c25-5ae812c1cd49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.217.224']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0272daa-32d6-4512-bd1e-0dc92f32f1d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.5.249']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b866c79b-a3b8-4303-9df5-9a05b8ffe066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.72.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4dca15e-819d-4510-a9c7-9e2fd61e0e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.76.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f351d18a-598a-4414-acc6-5dd03a8adc28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.212.244.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d387c4f8-8334-47d1-9c3a-4f123fab5aad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.221.176.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b9a5e8-f970-4987-9c5d-b4764468797c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.42.55.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f92afe-0348-423b-a449-f7ff03b8bd89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.134.141.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1174a302-5e59-4a31-9aeb-612caf4df8ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.199.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f51b5a-2834-4c1f-b3d7-c0f270759eae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.204.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b4553dd-dfdf-4fcd-bb12-f691214c8236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.206.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--968b7762-29b9-4a51-8c4e-d795979d5e02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.0.176']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4411a3e9-d54e-407d-bd22-e7e804eb752b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.180.204.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e85a7a6-3816-4db2-b943-a50a5c914b00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.180.231.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b323a126-d1b4-44b9-8974-e6b33d33775f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.216.104.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02085d59-d36e-4f22-a61f-26f1a81d3e20", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c8ee5d5-3186-49ab-bd43-2168ce986f12", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f1eb53-7623-4b42-ab40-3a3c1f964dbd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b99c43a8-0af7-484c-9066-ecaa59fa7028", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c30e51-14cd-4d6c-a0f9-367306a48e48", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84759fa8-6fa8-4917-99ca-32b07d220259", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.230']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de22bbe0-fceb-4ad2-9e41-7d704b6bd3fb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.56.9.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0774165-0c9c-4b1d-baf6-53d7a728d62b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9157de78-830a-4c3f-a02b-de4d6119235d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--991fabad-2c55-4ec2-b1b5-abb8d2230297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14504291-1e4a-4111-a086-a1813e5d8dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d405dd48-6c45-46c0-8ae0-5b8fb6bff68b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--553d2583-e33e-4b5a-8209-f4b46bac3fc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a39983-d4b7-487f-adb1-f2ac3e3e6d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6c019d-9080-48d3-be69-f38ad6a6049f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7719cc5-dc21-41d6-9da0-90a39aff43b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.115.193.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c6cd84e-6677-4717-9b8c-113152852922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.122.213.97']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f410f19-7ecc-4c56-8978-c0f4a21c3f9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.242.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2791562d-48c6-4c30-95c7-7834658a922b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.242.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dde8b00-b14f-4f0a-886b-e3e60e7a3f43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.242.183']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--551276e2-eec1-4710-b844-cd2b309ea901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.243.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a34816-ff9c-4b1e-b483-c98c8c8bd33b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.243.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd0536ca-873d-4bd5-a994-c31951dfa167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.126.87.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96ccbda-2455-440a-b3b8-660049b05449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.33.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a71462ed-c10a-4006-bc3a-85d9f7ef472d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.34.44']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbf18da0-a8fa-4e52-a93a-5bddf3d79ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.45.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9b5de4f-43b0-41d6-9ce3-665674e56dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44d06b89-a225-4f75-aece-d10374125a9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5c8ca7-756a-4c72-b18f-0cc8c83d7813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.209.8.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ca1dad-47f2-45d2-8501-50c62566a570", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.217.225.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649675a6-e7ee-45a6-a68a-6121f2e91e01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.222.101.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b84a4f0-5e9b-4a6f-a3c5-f7cfee0095c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.23.9.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c979bced-354b-4bbf-be77-2a244df946f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.108.241']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e3f2cfc-f98c-4dde-9468-f491927b868e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.66.163']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bae096d-2a71-47b3-bd14-dc8e173ba6df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.75.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0408ab6-3ed2-492a-9e8b-a720fc5fe5d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.95.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d027d6-76be-4672-90ae-71e9373336e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.249']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9575b2e-516e-4d3e-852f-87175e45564b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27fbd4f6-6dd5-46f8-88ae-6e9be4924930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e4bb71-8201-42ba-8f17-496768f2dd60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80abe351-9209-4c82-a9b1-e951cf1c8157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.97.178.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1032c22-682c-42a7-8bfa-d05499a29234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.186.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b15faad-48e2-4992-9f4c-8f7ed6383807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.188.240']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4bc23d9-fe11-4311-98ed-63903155ecb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.17.167.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3a707e-2e97-4a25-9d49-55a2d7ede17f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.206.8.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2db0a9-2f9f-4988-ae2e-c89a9ea45ced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.217.42.139']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8975c1b6-a8ad-4ebd-a03a-8d6622ca8f43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.87.86.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fba00a76-e485-45ef-92db-f8d37754ca4d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.143.37.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d24b42-11af-4c21-a1a1-66dae2d97b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.180.105.241']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93fcc9cf-c939-485b-9591-0865a118bce5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.199.37.187']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--993318c9-d3d3-4f7f-93ee-43898fb1ee82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.216.58.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7929827b-5afc-4f72-ab80-63a3eec8edc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.226.144.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e152f3be-ac40-4417-8a94-f54c0b3d79db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.23.246.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756bd051-0bc7-41fb-8004-da60700c066b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.238.83.106']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16ca25b4-c0c2-4c46-9ad4-a088e225444e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.25.241.153']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65606c64-a78a-4970-9e9e-f11711d45a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.40.167.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de1494dd-b3bd-40b3-be6f-d84ff5978881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.102.40.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbdc934d-39d7-4748-92e1-da0b5c17d373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.127.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e080fd6f-a46c-46b1-99ca-f15b238e872c", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.88.156']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac29d6d4-6d12-4db1-ac98-d2f18ca42038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.135.210.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13997a7d-ff27-4520-84cd-4ace52ab43b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.216.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac2c00b-f9c2-4430-82d7-c2f1852d7013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.240.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da91210f-5c57-4be4-b09d-33b5ac534a34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.240.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c87c71e-7d55-46f8-bfa5-4759ecc2d468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.23.60.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed94d125-ff92-4565-831b-8feee1c6260f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.252.39.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1745b34-54af-48fd-97ea-60318cb43fb9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.30.36.171']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a21d81a-ec18-497c-8d8c-3b435f457e46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.47.64.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f72ab58-025e-4229-a0b6-4c75984d0564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.48.68.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--456f7cbc-10ac-4686-9c9f-2e5063c8bf48", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.91.161.162']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe3b6d0f-0353-46be-8335-c5a973f03626", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.97.6.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e43e2a6d-f4cc-4dd4-926a-a538f5fd96bb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.108.227.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda8fa5c-ffd0-45d8-ba74-d0e7a4f1e2e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.111.148.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a6515b-ecdf-4e67-91d4-a14a51576777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.152.161.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5caf3343-d91c-4f9c-a814-89bd9cfcf6bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.154.13.246']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3aa846-45f5-4059-b7c1-31bea451753a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--306fcd06-35df-48aa-ba2a-a3f58363114a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f45882da-c8d5-4fd0-8ec9-a96cb258a743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a52a953-d113-4091-883e-13b2e2de4805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76a9991b-a6ad-476a-bf54-73f38da0da1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.199.35.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b8e81b-6473-419a-af25-ec78bc9ab17c", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.199.48.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc87834-dd50-4e04-99b9-0c1be285b3c6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.158']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d8a384-61d1-4036-ace9-02b6c9c070a2", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d88a1de-aae7-4862-8643-0eb83373c4b9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.56']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7355d4c-b971-4375-99e2-9b6a672b7151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de838f6f-f16d-448c-a55e-c9b7f6e33d92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.230.116.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c781d58-2812-4dd9-a6b4-17831043eeb1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.230.127.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6266ddb-9014-46ca-9487-394aaec5b48a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.244.96.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e715895c-bb20-4143-9e71-de280c5fc2e1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.254.134.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d182b7-2ac0-4895-ba81-6bf9140ef883", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.35.120.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad6cbcf0-3b8d-46ce-901d-552c72213535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.126.225.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5791d8cd-710d-412c-bfec-0d55fb4e3d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.126.225.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--597a370a-6e6f-43d4-ad0a-7e7cfa55937c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.126.239.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c32e526c-0cd9-4cae-830e-520e48dd240e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ba8ec0-bbe6-4e2c-83a5-47279250494e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9be0c5-3b33-4eb2-90b7-00d4a749e689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfa21b6b-1bba-4fb6-8c2a-273c5c2decc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.217']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8b66359-b0a4-4b86-bfe1-8502384c12d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.232']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34ac427e-43b4-4c62-8c87-936b2b8ce044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--732f7083-edbb-4107-866f-3dd89624f051", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.194.172.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f717ebc-4317-462c-bd85-23f6eb2c322f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89fbe79e-0c69-4ec3-b387-14bfa4f85b21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b295c77b-edba-4012-bb53-cd1e04886d8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b55418f-1aa4-42cd-8091-b93533c9e2d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dfe38fa-0501-4d2e-9cf7-53656307f10f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79fe1804-bd71-460b-8d32-3422e2d55d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbef3050-2f2b-4532-8caa-98f823a87585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff26524-fddc-4a9e-a9c4-befbe42c46c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c544b8e-3963-41fb-9342-6c6fa6ead8b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc0d47b-719c-475b-88ee-b9aa058bff24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--183c0d16-15b7-4ec1-b032-7ffdddb8302e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ebcd65d-1c3d-4f98-9dfa-51c8cacd7b16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b11a37-c3ea-462b-b098-623b073a0fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe643761-8dfa-47f3-bacd-ec178b446256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9198ad82-8cd1-483e-a930-12fc9353ff84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc20fa0a-2c3e-42a5-be90-5fdf0a186527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f4b808-bb0c-4149-acc9-64818259eaa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e68f82ce-9a39-4515-b4da-61dbfbb963aa", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f9051f9-3a5c-4394-9b5e-e36c1ac692d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97fef12e-18e6-47c9-9a02-33520e653b06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971f25c9-dc22-458c-bfdb-ddd66bc564ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01f4045d-7a49-4a12-ad00-f26849b8f26d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63144407-9f89-4286-b43d-b48ca407105e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59e7a69-33de-4ab3-966c-197beed1dfcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc9c5776-7516-49af-ae95-8d4f3931654e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c6e5eb4-7939-4061-9055-fe8ba804f27b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dfc3676-ec17-4b29-b44b-3392146d461c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6857f63d-d7a4-4610-b729-697464dd713e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1200a563-a26f-4118-8014-b50ccf7f4b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.91']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ff9bab-b6d7-45cc-82f8-6345d104c7b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f9723a0-3112-4ddf-9ce9-f29856bf23b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12da1f61-8837-4afd-89fb-c7e829a67b00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a9c734b-41f7-4615-96b5-42bff4c3a62f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.96']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6659e308-9795-4897-af6f-0f7497bf8289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.97']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f425968f-6f99-49a8-a40e-ad85400b14c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c214d58-eda3-49c4-8d11-a7b02a48feb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37c823f-4735-43ca-b69a-01b92887a9cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7dd2510-8997-4446-a852-881cb2bfc0f7", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.244.65.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99cf0880-e892-4add-b037-e13b1cd31b6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd58190-66da-4945-992e-709b55406d18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc9dd5d9-daa3-4769-9b8b-a69ac7fa40fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03dd29a1-f762-4af1-8c23-36f87fb02a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f92c58b-f52a-4122-972b-59b656862e13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa7f5aa8-2534-4686-8c4e-0532715955bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db45d7a7-0582-4368-abcb-d13568313c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.106']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--635294a9-5750-45db-bb5c-6937baaa8088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--834cf8f4-e2c0-4a7a-9367-fcf46662af50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e51045-d357-4d0b-ac63-f2937a290e18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d748989-7bcc-4e54-9d0c-88c2407920d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd6fe17-3db0-47f4-92f4-396777dce732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--088d2cb7-2352-40cc-8868-b947d8a9225b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.112']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7e0d3d2-d16d-478f-bd4d-e0923baab7e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c63c2720-a36f-44f3-8350-f656a88471fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5253cb6d-1460-4b4d-a509-1cf1a18bccab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a5676e-09d8-40f1-8904-b69c139159ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d525956d-1388-4255-bbfa-bc601bdbfe8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72086b4-da1a-406f-939a-903a4952020e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dec9af7-9bc3-4b38-aee0-91ba2976735f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--825d8f01-ff81-461f-858f-6a5e12636655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a855a6ba-9f2c-4a13-812e-8a9a89f30158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0e32ba-b987-4176-a599-f14e6851a836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d171b08a-1dbb-407f-bb76-9f7d99d3ebbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa33e19a-49e2-4db5-b7dd-bf92bf9d5095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bed4be4-16fa-42ca-9b8d-4cec9269ebee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc3f0f8-7890-4722-9d73-8d96345749bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9227fa4-09d1-415d-b6d5-2ef67539e90a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.129']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--594a02f3-5402-4d3b-83b7-873c7679b545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90ac1d4f-3aa1-4568-aa46-5125cb0627f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.131']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a587e6-acef-42a2-bad2-fe1d8c64c058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff14e7dc-20da-4ea0-a95b-5f5f4e0b2fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6622ac38-d90d-4672-b7da-20c7d04ad2db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09af7049-cdac-42e8-b884-2d1fabfd502f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.135']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72176c0-2d4c-4f6a-894b-dcf273d9213b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c39d7d10-9c71-45a0-ba80-26a7bb62f78e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9939f2e4-a542-46d5-aa51-5a65ddcef604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f94eaa-c9c7-4714-8aca-beb1884e6b1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.139']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b614d44-3231-48cc-94a1-88afa84c7c66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f602d0-c320-44ce-9b6c-1b70df47f456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aadc236-01bf-4814-8336-28904b606b34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee8748c-5ad7-4cd9-8a66-af7e70f91bd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b6921fa-7c15-4fb6-9f58-e7174ca49842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c6335ce-fdf0-4cd1-b3a5-4281a5cf36cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f6276d-13fa-4c06-8565-340232c16a05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.147']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4919178-bac5-4659-b872-b31c5695dbd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--280817ee-7bbd-4eb4-8ee6-dab70aea0c51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1786659-4ba7-4952-a529-8fa65fbf7ee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.150']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8576a659-38c6-4fd7-9cff-902a12fecb0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.152']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa84797-e111-4de3-90e9-8e50c3eaa8ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.153']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a1e3b74-d373-4a91-977e-b72f846c3334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7ecf753-9199-4939-b901-593ce91d80a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.156']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d62f1b24-54e0-4c4c-994d-962694843d16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5978f11-1cac-4110-b67b-8d817a906d23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.64']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d658e959-45f0-4ccd-b4cd-e7704358602d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32bf612d-ffd8-4b6b-b85f-07f636962101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--404f4ef5-e098-4ae5-ad3b-00de55f8a8e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92e4a2b0-60be-4ba9-9847-8d46a899ce3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2de4044-908d-44be-9c18-215f9b0e83c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65b9dfc3-4e89-48cc-8a08-d8c0172cf80c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b598cd8a-2a1f-4fa3-b56c-1c85f60d08a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c76b92fe-90b5-432f-aff5-ff7ab76e2d4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3af9243-ed93-4f28-a389-eab782ca07b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56571a2d-e37f-4085-b0c2-2cc25f97fca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d31c30bc-7fc4-4a53-a771-c55be17ea345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--659a243f-f95e-493a-9c1d-6884ff3afd19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ae4f1db-6954-4174-a1f5-7caea708f00d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52da7d5b-ea96-42e7-97fc-0e306c54074f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--928f5152-43c1-45c4-a336-f5dd087967e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41dca21b-35b5-4598-b570-029397665247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.84']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b399d72-7cf1-433d-a55e-4b459ae63244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b68890-d142-4eef-af69-07d44a636409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b9c3bbd-4455-4e4f-8edf-08cf9bb85999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e12c91-6df1-4810-990f-2f8e36338313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14eedb8-786b-4115-8616-ccf9a12cdc92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b378a38-f5cf-4337-aeff-2a24bb20db05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b7d9472-fe9f-400e-88f2-f6c5c830ca92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.91']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f26bf0-97c7-4916-9480-1f4f992784e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3dafca6-5136-4059-947a-8a293af484e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd528d38-ae5e-4c57-aa26-d1409f04612d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dbc7efe-4f6b-4c70-9d34-5517a49db15d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.96']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77eaf91-05be-4843-b2ae-e770c779bd15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.97']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10609045-9843-42e7-849f-101594331f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a29285e0-190b-4245-b9f0-d81f0d4fd3bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--100140f0-8955-4904-87f7-fba031bf508d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.38.48.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e1b76ed-9767-4223-b4fe-c54958838a79", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.230']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2403ae-db84-48ca-9086-15ce31fbb6d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c68f36b-c73b-4ef5-b332-103f98089e4a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c49fd245-55cd-4aba-b48d-b32d1b3559af", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9522bda-f0b7-4667-b4fe-3c8443b38cd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.113.49.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f8610f-f22f-4718-848c-c81159785572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb1f60d4-f37f-4a62-883f-a21212ebd0a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e994ff1c-4c48-48ff-b56f-e3568c73d470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb864ee9-2151-4d2a-9708-89c0d6f32b04", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.154.173.63']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adbb5ef9-250b-46b5-9ca8-092b90db3d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.154.6.36']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0077cc90-7784-4587-bdfa-81ec29b20691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.160.3.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80111074-c760-4936-8793-ee010ff55694", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.165.50.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bf527d9-e7fe-41ed-8850-81d89a2753fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.182.203.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1abe53e5-0b34-4ec5-aefe-de4e6b0bbc4c", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.199.144.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a68b6ff-643a-4b2f-b513-dbb4fccdc428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.216.59.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--648961d2-fb5b-4525-a235-2057c45bc525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.217.248.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ab9346-acf4-42e7-ab81-7b9ca0511712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.219.67.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7029ea6d-b766-4cb9-a2d6-b22c59eaf2da", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.24.172.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2098270a-5379-4e27-8b76-de80e3b7a9ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.195.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49aab07-c14e-4bd1-9eb0-3ff9e8301055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.195.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c57d0f-6d45-4eff-a524-a2079bc33f3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.195.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5308e57-3d0b-4e61-a53d-90bce35ef82d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.195.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08480835-abb6-42c5-ac85-64ea5f9b017b", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.161.35.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54d7e604-8c21-4abb-83b5-3622abb2dad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.164.20.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a3e6b9c-045f-4c68-a4fa-9efa4b45df51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.17.184.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86287d94-e96a-46e4-84c4-647515c4e2ce", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.21.182.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5444d89-84b5-402b-8c45-eb981db5cff0", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.59.175.217']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5a5026e-fcd2-48c6-b09b-bb1a340159f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.59.201.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1941201d-0218-4d03-a796-df49e3160e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.64.60.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cda343bd-8ac7-4f6d-82bf-3c4190c90a29", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.74.43.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd461fda-0666-4265-9ae9-fc036c4f4a72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.75.165.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbdd474d-2c91-448a-9f9f-0a76ae1a3fbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.75.92.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1d3307-8fa8-492d-88b3-3dc8d84f68db", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.129.157.170']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f69d2448-b664-485f-acc5-9b908dcad878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.146.209.186']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3963e0-d3f9-408e-abd0-b75df8201ed4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.150.93.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b5a317-457e-4d8f-a0b9-a12b4b57c7c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.153.103.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e0a5b0-1db4-4beb-8e21-6af9f0feb7b8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.155.125.48']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c24068e-8c43-426b-a3a4-75f46e52ce87", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.77.241.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--646e0081-b4fd-4b44-a365-013fa3966fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.92.8.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0c4d31-4712-4a45-8bdf-0d862ed1a0bd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.118.219.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97566421-a8eb-438c-8677-8ec9622d5460", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.119.37.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22bbab97-20a7-4fe8-840d-e9b8c86380bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.121.206.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81d6a3b7-44b1-4e9a-aca7-a048226e9a0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.132.100.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae4c0cf-bf6b-46a6-8a47-e7551cb617ff", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.132.49.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc4c9ee-c71e-45ea-9be6-c17ea84cf1f5", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.133.4.160']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aebd57f-d914-43f4-9272-cd0019aa54da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.158.232.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feadaae1-71fe-4758-b3b6-e9f8b392a96a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.158.233.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd0d638-d25c-4c95-b65b-691fb04c2cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.167.232.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb67a31-2329-4acf-895a-8b97d2b1826a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.167.233.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd93b6a5-0254-4a71-8244-9e50ad4efa9a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b4072c-c1bb-4515-9a38-a32d6d553b29", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3dc69f6-c241-4816-99fc-74911d7e615b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0b5d6ef-3e9a-4581-879b-3b299d40cac3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2dc4b0d-e145-4a3f-aeb5-e771bd1bccaf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.51.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--532edc3a-6f0f-40a9-8ef6-aefb6bd2b6a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.78.152']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac1426d2-2ee9-4222-b2fe-e32eb7b2af02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.78.211']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee9f449f-ef05-430b-8c20-9645186db603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.78.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93e74ef-79ef-4f3c-9cf6-e7dd43b4bdf9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.249.177.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd34a08-0bfb-424c-87b9-d5238347e47f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.80.223.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0445bb-1f51-4900-9caa-723e8e5c371f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.10.187.253']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b6ab221-c84d-4fc3-8e88-38b8abe09fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.11.4.156']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9134f673-dcec-4668-b051-8d0e9ff0fdc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.11.51.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc2888a-b69b-4dd4-a323-c81bac58665f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.131.139.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7db71a6-c9ae-45c6-b4c9-04230c7600a5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.156.126.1']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd340ecf-e09a-4cf5-8545-0a0a0bead24b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.201.102.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--377da00c-bda9-4268-b18a-640d139ba3a4", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.203.13.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1b831b-c1b4-444a-bed6-a833da2e7869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.226.232.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ca5ebb5-9e13-4eb6-8635-233562591a31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.226.7.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5abfc09-423f-4b72-a0c0-edfc0405456a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.110.147.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb36dcf2-1770-4d4c-b267-08bf12333b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.127.72.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f401e3-2424-48e4-96eb-8dbd28dfdce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.176.200.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--694c6900-c8c7-4265-9e14-456620849502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.186.13.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b0a2aeb-bf24-4a34-bd9b-4afd224552c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.223.181.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f20c33b8-e6d9-4d74-b9f4-f27ff8565169", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.246.43.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7298a47-0baa-4b81-8404-d485eedd8f3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.252.21.159']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d2287d6-c2fa-4d88-88e1-a380855253e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.86.105.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16101129-42dc-4823-a069-6836158c7d76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.38.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db6de9bc-f92f-4ea3-82fc-d96d01d550ab", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.44.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c53810b3-2186-47a0-89f1-14cd034d0db5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.72.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b428c787-12d9-4e92-9e30-44229910b55e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.73.44']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a214ee-e3f5-4edf-bae2-c7e9f69fe757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.166.22.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd5c86e-a52d-4f81-b7dd-821a00ada4a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.166.22.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a006ec2-3ac0-431c-97c4-d77a7cce00b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.166.85.59']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8b14086-2dca-4104-b862-44fd9b16519b", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.199.169.199']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582e9aa5-76e9-4dab-a7e0-f8575d2cdba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.199.175.232']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9904125c-78e9-41df-bb48-1d40f266f007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.25.16.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--395b8fc5-efab-4899-a2c9-d31f4765285f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.27.18.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a172ba6-5e89-437e-b7cb-8bcd4666f6fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.30.56.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7314a215-1193-4a41-95fb-02cdd740fbb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.4.131.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4045556-1356-4a83-b4c9-f0210a0f2276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.4.170.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc395070-5000-406a-9791-20a43e740ea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.74.194.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f51dd282-b9ce-4e00-b04e-0fb199b74384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.83.114.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8375a7c-15b4-4870-84b0-d9125cfac3b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.83.132.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7069d490-04d8-4da9-a239-45202401a81d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.85.102.135']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae66328c-90ba-49f5-bf9f-e4a0860fcc73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.85.251.55']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45cff2cf-d118-4592-8066-7c5cb8494a3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.20.247.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa4c052-e070-4c09-af40-bebd5fd3d356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.237.188.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a4030a-9e21-45e4-ab52-1b15d5cd8579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.11.64']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8383c3cd-b148-4898-aba9-a6f072520ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.12.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cd1b0df-2e1b-475c-9a24-ceae480b526d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.12.193']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf2392e-3116-426f-8c72-ec7c437de789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.12.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dacbee5-aa87-4864-b6b0-efaf0658f94e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.12.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a064f243-faf2-48ff-bf97-595b83bf3ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.12.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a79d7c8c-b804-42b5-9cb0-540a463799ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.12.52']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--574630a2-05a4-4227-9ed7-937708fd9024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.13.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed3ec8c7-044f-46b7-9fcc-02687209e1b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.4.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be8ec232-0b97-41c4-8879-5b1bb5161170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.4.211']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed6f96a5-fe47-4726-8c38-a9c2d9d96c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.9.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ad6432-b060-46af-82f5-47ee6dfe33de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.9.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de1fe5d-ed2c-4ecd-b070-92278207a6ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.9.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2620fc13-7f30-4e11-a419-8f776767146f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.96.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7747acc0-00d4-4ba3-b492-fef58b37bcff", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.244.232.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58689b70-ce73-4ba5-ad97-fa3ef552b24a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.30.86.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7bd337-873b-4b2d-a088-84ff412991f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.20.242']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f5c4027-4888-4c2b-ab78-81d50dea203a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.20.96']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e2ff5d-443d-4959-94f7-80fbaf0b1732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.21.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d97d70ea-0733-4074-92ab-ad7cca198102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--694b4d37-d9f2-4dc3-b456-088d09247046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.206']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d7f9de4-108c-4d22-9c60-f2b35a35b0ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.14.160']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b24a4d-dc50-4058-abab-e0e24a9680f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.200.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d967953d-5578-423d-adce-4c5257eeb425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.213.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5278fb8-ae87-48ea-a4fd-cb8cbfcab04f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.252.189']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9086df-e182-4e3a-b60f-e34c42ddc488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.92.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--002f5bef-b3f3-43b0-b442-3d2753c10c41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.20.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58acbe6-4641-4d48-8728-3f6cabc0803f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.67.200']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1981291a-c724-4d95-8c1a-03e69c99972b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.97.62.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf057cbf-68e3-417a-b437-6a15d1cd0b21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.84.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cf6fb06-9838-42b5-bd16-5a203bed2e79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.234.202.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94b1b559-8436-4422-b375-08736e6821fd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.102.127.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea71e55-27cf-4383-be56-814d40610637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.126.158.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd612343-3304-4683-8168-1c1ed794426c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.185.17.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c7e37ca-2c30-40c8-aeaf-ffa2e0f40443", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.21.26.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9895f61f-666a-475c-b12f-e4924d006d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.71.28.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5864f71d-f2db-4900-a4c0-d2dd991bf057", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.41.195']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baa4c179-29ae-482b-b74b-70cad0d7f0be", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2a06:98c0:360b:bbb6:3839:1bd8:b5f7:1625']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3949864-10d3-42df-a4df-283e3efc04cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.169.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541e296f-1b04-4e53-8859-0989ce57ad92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.24.55']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba58813-56a9-4871-bd95-fd4d90e718c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.136.87.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45dc2600-bdbc-4344-bc26-029737441c3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.137.154.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf9d7788-95f5-4c36-bcb5-0fade41dda74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.14.130.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ee81544-b087-48fe-9ca3-5a00b95000b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.14.15.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a12a3d-7064-4ea1-ba49-7e36acbd36d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.14.6.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8d94ab-eeb9-467a-ac6f-7b19977e5404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.14.81.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--929e70d9-cf06-4fec-8eac-c2dfb188344e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.142.170.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2d80262-20c1-4ca2-b0cb-5cd859d8a4c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.144.136.164']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ea96b4b-a9b9-458f-b2fd-bf64e3fecff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.144.241.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01ebf6b9-8fe2-4324-9e95-5c2bbf13716f", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.145.106.230']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6068b3c4-a9b8-4d6e-9d4a-29d3cebb451f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.145.153.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--300ef2db-50c9-4ada-844f-d3870eefbae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.145.21.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5179c77b-5497-4a39-8e6c-4567c44c8f4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.15.151.64']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7169b15-281f-4bfd-ab4f-85ff58c93c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.15.169.158']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e40c3bbb-9e3d-4d28-a3ce-01e708945a5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.16.13.91']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d810576-7f05-4fe7-ad75-e66949add4d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.17.61.199']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08084016-e7d1-4b4c-8a56-e1580ce7a147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.21.134.0']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adde6c6e-a32b-438e-b68f-c90913b562c7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.219.228.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f53a761e-aa0c-4de9-9a5e-4fe4cf4ea429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.227.192.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9725f04d-a1e9-451a-939d-d68f33578409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.227.2.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce77d9ab-79bf-4fe5-a356-43f673b445cd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.239.40.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96720798-2fa5-4dd2-a04b-7a0eecb61a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.74.234.166']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6424311-4007-4661-a730-84f48fac2149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.76.217.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--143db8b2-cde1-4dbc-a568-96ea4a7d03ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.76.72.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1fe4ea-1390-4e64-800f-6fe9b3e6334b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.80.182.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--081b78d9-9b5e-4043-8794-15e634478c51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.82.201.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--440a5589-45ca-434e-b8ea-42d3890eaab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.82.60.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f48d27-2f59-4d24-bc97-a86b590d3313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.245.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d3e8497-5ae6-4a83-86a6-acd7d0fb6ec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.84.43.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d0c501-001a-47ff-94eb-1dc741521941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.84.60.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--488ffbfe-f796-4b59-9a55-0d15d44e0b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.86.112.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f675c4f-3a61-4947-b3be-e1ee672c5caa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.88.130.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--344085c3-6e7d-4994-b104-dc95f3a229ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.88.144.48']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78f524c1-ce6f-45c4-aaa3-b161f3122114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.89.128.200']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--165dea4a-5c17-4716-9984-2c82e924f883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.90.220.242']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--664512fd-a953-456d-9642-a1c61eca8ce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.90.222.170']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--434a9789-2943-4332-b539-2d0fc3db3c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.90.36.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12954ae6-31a7-48c1-940b-e922083daed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.91.204.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fba4186-2458-4254-8431-487e1937d82c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.91.30.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e64653-8b10-42a2-b7d2-fc5498c362f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.95.252.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f203f5-6b4a-4f9d-8233-0c9cd95c849e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.10.114.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afb3dd2b-40ba-4bdd-9c44-90651ea89930", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.13.203.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb0c07ef-0310-45ba-b0a3-0daf7d8a6904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5caaa55c-e7ff-4971-92eb-b97a6bf797db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.48']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a6ee7d-f9e6-4916-af77-699bf534769b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd7bda57-c011-4e23-b11a-361120f3932d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.148.99.199']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04f6c42-ba70-461f-ae5d-d6e52851b4b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.167.138.224']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a258b6c0-3ced-4504-b757-8a9f839718a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.222.235.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d46559-4c0a-4661-8354-8e5c7ace06b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.176.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64e822de-b293-454d-8fae-a352c04f1fbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.184.158']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be5a7f4-b09f-4e6a-a9ab-0c9f8e9f82ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.184.185']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f44c7d5-a930-42c6-9bff-7b29dac81e18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.190.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb250da-1a3c-4a0c-b4e8-a2632362effe", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.229']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--131f0eb3-05e7-4dec-8072-65615bab2f9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac7b366e-86dc-4d22-aa40-bfe3e9fbbfc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b5bc69-9730-4df5-afcf-1a4238f219a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.184.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b4f73be-6ec1-4f58-a7a8-05f5b23c34ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.38.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2c0f1cb-833a-4711-9eef-663215aed33b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.63.242']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b0d6881-9d2a-4813-a356-67589d50beb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.58.144.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ac385b-42ac-4adb-860a-789df07f136b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.118.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4078ae2f-97a4-4a15-bffd-e7ab99eaade2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.40.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e03ec53-1f2b-4437-82c3-86b4713d2e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.7.122.216']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03131122-662d-4282-8742-a2d85e4daffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.100.133.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f8e63c2-a412-4ae3-8b63-a78f60eedbdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.106.155.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f853a9-c488-450c-ab82-7187827ba507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.106.208.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a9d84e6-b1b1-4a15-a86e-17cb417eb506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.106.53.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b947bb57-315c-4bc1-a5c7-03383af2839f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.116.144.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deeb6a4b-d5c2-4114-8fbe-96585de34db8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.118.66.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c287df2d-e7c5-4da3-b79e-a63862cb6df4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.123.189.192']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f25caa-0481-404c-ba40-912c0d145779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.124.225.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--291a2375-e860-4a8e-8509-8ac10dbabb90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.134.49.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ed2e57a-08ad-4828-b526-c7a24d532345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.104.217']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db8638b5-914d-4df1-b52d-787acf376490", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.116.242']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23caf80f-c65a-42a7-a79d-65cdf2a0eb44", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.117.241']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd282269-06bb-46cd-8598-76040e2890a8", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.21.193']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--633e1bdb-8a5e-4179-a952-3f2328798b11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.37.199']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c18194-9db0-4b5b-ac2c-7ddfe7c9a656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.13.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2795851-1177-4428-ac5c-66f585f52ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.177.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c373eeed-76ba-4c49-99a7-0c7cd372a94e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.236.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb61c5f5-822c-47d3-b63a-6b5dfe5bbbea", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.251.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8be783f-1891-45d0-8bbf-3554b5e87e48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.255.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c02966e7-5605-4d84-b105-f5882c293ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.142.110.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4e42a5c-6504-49d7-aa6c-1e77ab9724b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.104.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e24a36-865c-43b1-afa0-bf5735cfe903", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.107.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2da476d-aa70-4c18-bc34-792a4e036f39", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.110.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f35b46-75df-4b59-b15d-bfa9509170dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.14.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b1300d4-9d5a-491f-a41b-b834193b17d7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.167.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6aab4ba-18ff-4647-8b6b-8486c9310827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.193.255']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e0b39e-0919-4bdb-bd3f-495a6308455d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.216.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--286050db-8f81-4e40-87bf-9f3bb336f0ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.237.96']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2364ade5-457e-4252-95cf-b8d5208b28e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.246.52']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4ce610-3f3d-42ef-89c4-ce5b73cb085a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.69.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5df8ff3-5926-42f0-a5c2-ec65d53c49a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.79.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f52c72-19b7-480b-8f74-cbbe2d873ca3", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.88.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef7767b-e587-47c9-aca2-bcc45fb639e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.181.164.232']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01db5e39-8c6c-4cdd-9445-9bed4c9f64e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.181.226.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43db5462-797b-474a-a4c2-430758c66eea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.181.236.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37e018a-904e-4515-a68d-5d90f708989c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.185.162.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--783e691d-07fb-4aa2-a810-3437785d346e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.19.239.255']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c871c3-113f-4e23-952f-ffbcdb55f8ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.19.246.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b9ed5e7-9c2f-4ee4-81cb-dfff89e09636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.197.70.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d0c332-1282-4c3a-bc85-8a656b35654e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.20.245.187']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db02161-263a-48ba-9b35-2f302ef7c0be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.201.52.232']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d501f8f9-0c95-495d-b5dd-800a4c6e0b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.21.145.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc425cb-5ffd-449a-966c-a0c7f478cb0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.224.168.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55811809-470c-4f4c-b95f-e1ce40d39c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.224.66.163']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44432c07-05ed-4b5e-a8df-c2082fddf3b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.227.14.106']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8843141a-0ec3-4e29-b58e-2518e6d4b145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.104.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--821fcd99-5121-4710-824f-f2eae3600b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.239.118.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b81cde4-d013-4799-85d3-ec6ac699e9b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.26.115.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adee30ba-bfcc-4cc9-9ff3-c7c7184f8f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.26.14.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1781add-160f-447d-b25e-6252d0d7ad1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.30.50.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0cb14e0-f4ca-4322-b5ec-2bdf88aed53e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.32.104.64']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a30390-4449-4102-a995-00f7f0ac9dff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.193.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53f1e39f-69db-44ad-abb7-5021810527d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.201.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acbd2d1f-84f3-4fcf-9ea8-5bdd5e585a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.6.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c73777d7-364e-46a4-8bd8-47982b8906e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.40.212.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8dac47-a664-456c-a346-28230609415c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.40.239.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d733645-6751-4200-8b79-e27ae6cee469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.42.220.112']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce93555a-18e5-4610-a340-2543f66e9e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.166.216']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f94954b9-973c-435a-abd4-44333340b68f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.132.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--126f6ba0-9f1d-4ea3-89dc-377f5e5ff9aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.146.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0790ed4-f785-4259-9904-ff410648d460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.207.91']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c68aa26-e483-4068-b8f1-788e28948c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.0.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e9c2b6-9d5e-45c8-8ddc-48dfb0320b36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.139.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ff83c20-1902-4e16-8119-145da37ea96d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.36.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a80b42f-4a57-460d-a7df-20206dc83687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.64.208.253']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22fea4f5-ed79-4cc9-badf-42e055f3c164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.64.211.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69497de4-a745-4fa8-ba9e-83248c6e9d12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.65.20.216']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f72c06f8-9e08-474c-b015-066dc445e2aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.66.182.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94fd12f1-6e24-4702-ad10-e89d9ac8d6d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.15.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d2affe4-df7d-4779-ab3b-3ea44137307f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.178.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aac94d72-6537-47d4-9466-8ed2b7a2536c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.196.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00d381d-665f-44ab-a56f-f158104574c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.60.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81dc555-321f-412a-8a7e-e670d075ca96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.9.193']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73bcc7be-008e-4c5c-8a46-14213c77d7f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.161.216']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3367096a-72a7-4664-82c4-d37a0ea8fca5", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.191.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7409692-397e-4b05-8b50-030f63a3a1ae", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.202.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fcfa0d6-60b2-4268-ba36-190019865114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.70.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9157a742-7c50-48db-9ff3-549c1c2d01c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.162.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b79e814e-55d5-46b7-a848-3729a8c07452", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.207.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beded559-322c-4624-b633-22ac731fdd7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.209.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf58f7f7-f0a2-4882-822c-bd53f3c503d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.219.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c57954f9-db43-4acc-8bed-8ceb17b85944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.26.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ea1fa2-bd89-4423-aa14-30b659dda8d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.92.232']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d34900fe-51a5-475b-8a63-df16ae3b9451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.80.111.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f57866ff-4020-4d2a-89fd-f442b4c6e655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.80.203.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1402b0b8-c7c6-4e1d-94d3-5e33c9b2e814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.80.35.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd6497a4-e211-4e10-8734-68b06e245870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.80.84.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9bbef1f-4757-4c97-a724-8cbc40350617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.88.126.238']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5721958-1f00-438a-ae39-50cf35af9326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2002-1149. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.88.150.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1957dce3-2727-4e64-8d7b-ed0e09aee77b", "relationship_type": "indicates", "source_ref": "indicator--b5721958-1f00-438a-ae39-50cf35af9326", "target_ref": "vulnerability--eecf412e-646f-40f7-9301-1976d52e5cd2", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc32dbde-5c0d-4ccb-83b6-8c116086fb24", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.92.33.224']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d26a8105-e93f-4d87-9da8-9599fb389249", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.93.128.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9938366-ddf7-4c1c-a4aa-795a34b0c4c4", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.93.191.230']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf14ac71-62ed-4881-8079-74d8064411e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.97.124.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b2f6f0a-629e-4b1d-9ef9-9d689ded1d0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.97.249.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d9c777-258a-402c-9b18-dd066b0468e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.165.123.240']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e565cce8-ac57-4460-bd89-f49470a82655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.169.206.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab4fbf9-b56b-45ee-962e-870056634250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.171.6.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f6adb05-80ed-416a-ac03-44ed872ceff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.184.186.164']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bfe01ca-8879-467a-80ef-6f4053445d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.184.194.52']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a45609bc-c865-4bd0-8744-33987a2c47cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.186.185.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e873865e-ace7-46f1-8ce7-c01800901e1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.13.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b9b7a4-3e11-478c-9666-00aea79af8d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.171.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d9c06d-ebdc-4a0a-ab42-91d08f77b4ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.97.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--151e8de3-b778-41b3-aa7b-7d40d1703dcd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.189.196.224']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7930970c-a2c4-4e15-9b8c-8efd3e7fbc1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.189.230.217']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b82ec0-2a54-44ff-a816-e16c43d8e6b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.193.246.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e56c4571-f180-4b4d-9380-d4c124e6490a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.102.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a069be-c8a6-4a8e-952d-55014f9ec773", "name": "Malicious Host", "description": "Observed: FTP, MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.138.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:ftp", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0083b005-ae33-4739-ac1f-b152eb9358ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.28.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab30850-dc96-4765-8f4a-5d64e2a724e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.202.9.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e152f593-8fa8-45bb-98e7-774eb2f6253d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e47647-d9bc-482a-b8fa-dd39e48f4589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--186dc30d-f20f-49af-9fc6-45416fb90c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04bcbfad-2700-48a3-83fc-6e897590fcfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d48b4f9-9aa5-4dc3-bb92-da61add59e1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19900fe3-303f-4419-86a8-acf101af03fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.106']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c25bc89a-066a-484b-96fd-d8d90e7db78d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78cf79dc-2aea-4b8b-9584-c93bdf9c2e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb025e69-eb2d-4b1e-abf4-157e6ae186c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ec2e94-c95b-48dc-8608-c317a88f11ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5087f0-1854-4626-906b-8490afb53e3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01d3b9f3-25fe-4034-9dc5-8c7c4e6dc18f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.112']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc03d8a-2091-4589-beeb-f699de6d5d77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a38744fb-6e69-4768-90c0-61e473c92a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e14c7f7-add7-4668-bf13-1869c4367128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b83967-8947-4371-9624-b95a7b29c0c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e9806cb-206f-4591-8775-f4ef14022c11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71dbb45c-1c51-4174-9b06-bac648fdcf24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--076d7fe9-a47e-4761-a2eb-be6fad88acf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--371c4b85-3a0e-419f-9227-23c2c3d59794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7003ab28-cfaa-4fee-a9ea-3a3c088487ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10423a18-f971-4961-980e-3aae73a446e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e4db48-abf9-40a8-b4a4-e9d49a0076a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--115cfbad-4d15-4a37-b778-8dd8aeb81604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2589203f-b9d6-4138-bbbe-48869cdc28fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--460767d9-2447-4c12-aa42-a2f08216ec72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8527a3cb-a09f-4024-8075-d6559f45e18d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c22e7133-b040-44e7-9c81-cfc4dba3b074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5c4190-f1a5-4677-b0f7-fa351f0c7cc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.129']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b2ee971-21db-4710-88e6-4b373bc24b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33502b0f-1dc3-4515-982e-3afb68505bac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.131']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f76aa741-afe8-4c85-b5d6-db0e5fbadc98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8728a53-915a-4a99-a8a5-af36bb31999a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b92c8337-446d-4f44-b704-4bef4ea500fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f8f69b7-487d-46cb-9eba-c32f42f37bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.135']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6733bf10-aaa7-4e26-ae48-70f6d6914398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d74c9ac6-486b-4098-ba54-c86db23cd645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20cef956-e1b8-40ac-86b3-92b43e75ee26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--451438e6-93de-49e5-bbe5-53147ee5dde7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.139']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c3410b1-75f5-4139-8f3e-bbb90173f32d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.14']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e64261-a0e1-4135-9edf-7ffa2e5fbee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e096c75-19c3-4051-95b5-2aab12267e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b5ca52-e9e7-487c-829e-265de3e5b7c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a83dae05-2aee-4be7-9edc-41b569a125eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01cb4b19-7bef-4d6f-8944-9302c75431b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c1044ae-4610-4a68-8cc9-25c8f9081af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58f4276-8aed-4dbd-8337-747379586453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.147']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b974829-9ff2-411f-b707-29f585455c95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--940c18c5-2dff-477e-9d71-b97b544c59b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a4a9375-3aca-4e39-9c34-bf784a0f939e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc2552e-849a-43ab-8904-03046a6e8877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.152']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b8e6d3-b855-4720-9a16-b5ac5ea798fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.153']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8af20b20-8b4b-4fd3-83be-8b0e50ed4bc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17629c1d-a0a3-424c-8fb3-d50d82741d84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b0ff145-b8a5-4921-bdb7-992547a03f91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.156']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9590744-fabf-4a38-9e04-59729fc43f6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.158']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4acdaf-4f7f-4387-a770-df099b102e02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e6bfe4-828e-46ef-bbd9-f287ab3f5628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da66643-b6f3-496d-b26a-79b94109b5d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.162']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c9aad92-9c04-4c00-9ccc-f0203b13fae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.163']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885c8704-566a-4b33-a4c1-cdcdf63a8f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.164']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d28cc7bf-2eb3-4a2f-b81a-6aa1cf6bbeab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.165']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e1e65a5-d014-4bc8-9873-34d22418e52c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.166']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89512341-2b87-4d16-b2c7-6c161c104392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.167']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1699976e-9a01-41e9-bb1a-ae380fd8726f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebfb2b6-8043-45ac-bdce-7e13d696f40d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.169']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9f65220-66ef-431c-abd9-8960ecca6c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--924e9656-5e15-433a-8794-839a73b2e15f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.170']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2816f6e-c6f4-41ec-b61c-a69166b6cc87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.171']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ab6bec-f349-4347-88d3-8b6efae50248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b50c2c91-5bd4-4b83-b149-3bb9dc81ad2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.173']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c03c2627-a54d-475a-9b59-d91e7f78470b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09617486-1932-4c07-ba68-7ebd0e40892a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b701e2-9075-4969-9e2c-92b58dbae51d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.176']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e761ade-71e1-4316-b549-fe9edfea2a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a09653d-b3ef-4647-9dbc-81020a34bd30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--294ed43c-91f9-4fcb-bc51-617c478e5f64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.183']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6345b79-3495-4e2a-9830-2e7409535799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.184']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ef0455-f96e-436a-83e5-5a431dcd0883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.185']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdee9f89-a060-472c-b28d-2b317af9c805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.186']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d86700-ef83-488f-a5a1-7405f3b6b6d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.187']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc28627e-8e95-4535-8fe3-b8be2f36409e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.188']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9871093e-4761-4c9f-9039-d3fd6d71099e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.189']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--163a7266-625c-4536-9963-17f4c0a78d84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.190']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6454eb-0875-43bf-b8f4-5a56d3e5b63a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05da8fd9-99ff-440a-9f31-9918ea6c12c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.192']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0af8da3-6764-4cb9-9f1a-688421950e3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.193']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93da73bd-1b4f-46ea-81c0-29603dec073f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9124ecf0-ed46-473f-a351-a9cd9f300091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.195']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f3f438-9b98-4c7a-b97c-eef00dc8e8b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d3e06b-66b2-4803-b5b3-8491acf08252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d695667f-8efa-4742-b2c0-b804f7d1172b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb1b0677-8009-4137-9d75-987e59e5d57f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.199']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f185ed6-e89a-4d6d-908a-ebf98717aa0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.200']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72502d0e-1187-4e67-a628-f2e20a7540e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f5510f-a0f5-42c7-96be-2c2dd79444be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a65bab-0245-40bb-b9bb-850d7f4b4b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d4b256-4723-4962-81f3-23bd84a63213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a5005a-7b61-4509-a321-e4f192cd2d2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b3a730-5061-40fb-b9e8-ffd7f6fda55a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2292c0b-af1a-4cda-bc74-0bf6818af3fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78279d44-87f0-4056-9190-4e6eaa85062b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ab3208c-cc5d-430c-b813-aced3af434ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8978e4f0-949a-4e5a-8441-aa7a61489302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.211']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f259c33-8829-4d91-b9da-247880c22e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a76fa491-e817-4ba8-a53a-3e451a620f42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f01d851-0c53-4d92-8db2-5538f8f7f193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d97d2af-276e-46f4-8ef6-fc762ccf1e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2063283b-82ac-45fb-ad2b-6d836319d16d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.216']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac18f4ec-fb1f-42e5-8c31-07a1ea14fd79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.217']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ae7220-3b6f-4b3e-be04-d70649a14859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92929865-7685-4734-86ad-742cf0cfdff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e0ad87f-6203-4eb1-9439-7542c3df9994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca5014b9-4084-49cd-b2db-fc3e0e2876ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d41d04-3421-4af5-bf7c-7be77e6ec26f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0649fa07-32c6-474f-a064-df2f4a84eb60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.222']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd5111f-da76-4e2b-8cbb-58ebddfe4043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aca8741a-45f4-415f-a43f-fad641e21e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.224']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f6586e-9af2-44f7-9ff0-9b8a178ed586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.225']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a436067-670c-443c-89cf-d459117e281e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79462a88-60cb-4478-8bb1-0e264ae866f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbeeda8b-5c8f-430f-8cd3-8fdbeb280e08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--963b18eb-679d-43ff-ad44-5c1c788cd226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.230']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bdaf8ed-597d-43f4-b09f-524d00cff91f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33aa69df-9185-4d2d-9490-4b78d8d0ee65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a15f2f-73ab-434e-9779-291820118292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d3a8d39-b8fb-4576-a812-db63af70bf26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bf33f71-386a-4fb4-a6a6-9b38dbff60a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--335fbd8d-9be9-4b49-9102-a6646de0fa1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d8aa98-e0e8-457b-82b3-0c21e9354ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d99dc122-f7a0-4475-bcf9-291f8b958013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.240']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba91c0bc-b6d7-4b7a-a594-04f890aacd83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.241']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2941240d-acd9-49d6-933a-b0cec3774596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.243']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84497851-1506-445f-939d-f9599bc80474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af48a528-b07e-413e-be59-86cdd7242432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--159cc11a-ea54-4616-9c33-f53f8503ad45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.246']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a044b823-89b4-4553-b298-246a9e72aee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e5af11-ad19-4eff-a8fa-deb15938342e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.249']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d102270-8a05-493e-b495-216f43eb9e29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.250']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fe2fe18-93a1-4a6b-b10c-76ee6bea6969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a888418a-bc54-4c1b-9ff2-2c4cd0e1a17a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a3e7a9a-2e91-4deb-a609-ece7929a8fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.253']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--557ea6a2-507d-440c-bf72-cae7d66ce28d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.254']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd644e10-e8d0-45ea-9bb7-9edab13b29be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1009fac2-bd82-4891-82ff-8f690bdcdf6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ec1a8e-09e7-4bf1-a551-278fa2182eb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d41cf9e6-5557-4d60-9522-c9b9e3b61d3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ae8e654-fa41-41fa-952c-fd80cd21911b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b64b75c3-ae73-4ee5-bd5a-10b821b2ba16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a779e9a2-c1aa-4761-9c0e-be10f33bb45d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e94522-b20d-4db0-9054-a7673319b4b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1b52c7b-7685-425c-9aef-a0ae5fd51265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a92da6-cf7b-47ff-9ec8-fe77e570cd82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.36']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ba5f8a-6739-43a2-9ab6-97b842ad8067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a0b0cd-47ef-40d1-8e75-b43ccb8cd96c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca27093c-179a-492b-af79-3c2b7da7007e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d17617-b04e-4297-82a5-d89184451463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f101143-7905-47f4-b503-e9cee28707f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c025d33-87ab-4da9-990f-e89c6d3d0928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd7798f7-fcc7-4875-ade6-9edbc7341daa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e8c90a-e475-4b44-8a51-53029a8f9cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.44']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2730948a-3b59-4af0-91c0-d877dd564b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bbfd394-1889-4d2c-a40b-4d64a9b9d00b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e4b756-3a53-4127-a29c-b83b27707336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.48']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2a3515a-2ae6-4c75-8af8-cb36dc6b462b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.49']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c2fa6d0-8885-4fab-85ef-5c6a94a4430a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c0df8b-dea7-42b0-be09-e04cd6fb2465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae972c17-2d6c-4fd9-a786-fb536afff2bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.51']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b44160-dd7c-4cfb-a72c-0db23cdb17cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.52']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3eefdff-9cb8-4671-91b0-47cd9faeacbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d3e0af7-6c3f-4990-aa52-1f590a2c88b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8506a7a3-67df-472b-a223-2f6302394edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.55']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a795cb5d-0d08-4659-9774-5a14f41bc6ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.56']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--185baf43-8c7f-478b-a6cd-69621ab85ac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5aa2f6b-b88a-4161-8776-bbcb3affef82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7809e0cb-33c0-414c-beb8-fc44aa5d4fbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.59']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c25e639b-4284-4e9c-be99-562dfd7d93af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd62ab09-e740-4b2c-a138-fc7b29fbce10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ca9018-e9d1-4c11-8528-fb6662bc9ba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.64']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32733c11-f5c8-497f-bc80-40839853ac5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--183e7569-7a9e-4287-91c1-9b3f1ace5f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a3b60c7-077f-4a09-b707-cbd6f52ae0ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8fdc8c4-87ea-4803-9ae7-5aadda9ef394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1507c6f-5043-4faf-951b-b5568f3765d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a36bef6-8be5-4d7b-b429-c45fe2a9f048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb40e20-d09d-4194-b605-8755856e32f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b1663d5-ce89-4f38-879b-218f633d2dc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4658166e-b775-4fc8-a61a-f6db528c2152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5d99c1-5ef9-4320-8927-affc4045ce21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d151fd98-2490-40b0-9019-65017d25d2f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efeecaf2-ab89-49fb-a9ab-ec152b81fe02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd499531-3e88-43a1-b7b7-e7f3d074185f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd71bd3e-03a2-4a06-863d-b657d30bbf56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f87bda-36ca-4b44-9f5d-3730fc5513ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e740878-f837-46a3-9976-e764d5342212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28adc29b-322a-4d68-8ce1-4abe219cfeb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf35f60a-8477-43dd-950e-71a084e380fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--294c4899-2763-4e8f-a686-043d9cead325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f81c947a-79ba-4b21-b41f-2871a4b9af95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.84']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e062626-1372-49d9-8c51-4a5e1342b57a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd4b5781-502c-453f-93a1-6e8eed05ff83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--734f74bd-4336-42df-8403-2b3b7942e7fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8780f15-c2c9-4489-88a7-7aaf78cc9e34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad6488d-a61e-4e11-a384-1b3fc5fcfc12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91024566-ce9e-4206-8450-7ef93965d903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59130999-86c2-4f32-b251-7b64211b9a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.91']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98a823c4-c5d1-4c28-a1f1-7c07b40b81f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b16f9de7-eb4f-4175-832f-549f8101bddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea913b1b-e896-45eb-b4b6-341d166ab7ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1acf80ab-b5f1-4bce-844f-3e8a099060a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0facaf05-135b-4e84-8ee7-71c772a2f373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.96']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56ae6bee-583e-4eee-86d3-466fd9ee6d73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff844042-f478-420f-ae0e-496e1b0951b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e525ea-dfb8-4f5e-9abe-b708594e9bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14452aed-583e-448a-bf93-72f6e107e6f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--138e6e2f-1170-4e6d-98b6-02368169ab41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--121a29c2-8fcf-4abf-8d9b-0426903e3c93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d1e3bc-0794-4a0e-bb93-df735cce6829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bea15b1-6e26-4d83-9205-42d25907adc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.106']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56d257f-182f-4a21-be2a-0820c8f4c9b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e59225-01e4-42ae-8c9a-d46aa7948367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--532e2a99-27b0-48aa-afa3-2f7bc0af36bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77116f55-d9bb-4757-a275-d3ed08615216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e71120d-c70e-44ad-9a92-2b91c9ba211d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72a9fbd-015c-445f-bda1-9103616e4cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.112']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bba1005-8335-4cd4-8cec-f7a242cdc852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad686d9c-3bc6-40f6-8d0e-6c563108dfe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c33a357d-7736-43d6-aa2a-891a1c383ea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54448ba0-0d48-4648-a3f1-c77e826d8dac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca29cd56-ed66-4c51-b3db-0db5b37e0dab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15f82547-2789-4621-a466-a6f219b06a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--165b5b75-715b-46ee-a5ad-6da204b82052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc5917b-3eb9-4462-be09-ab92dafd9bbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c2d514-5177-44c9-90af-5c07fb78cc29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12965c33-a058-4d3c-a76b-3750f7d5d7f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4441dbe-4aa8-465a-a52f-d6bb8aeb9928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37e5e41-61dc-4921-b0a5-c20903af6613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7930d18c-b928-45c1-9197-cf1a8c707c28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15fc6e3a-ebac-493b-814d-99a99993c61e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2926f9-a21e-492f-ac6d-c0cb59bf11d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.129']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1622d589-382c-4a01-9d66-bdd1b0a1993c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d197704-2394-4853-8c93-933b7a9c7ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ddbef22-726c-495a-aacb-ec24512ca4dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.131']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d86b54-e666-4e3f-96ba-db5916cbe702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bd76b5f-ae75-49ad-a88f-b3687e1b7036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e351f5fa-6def-464a-8c6f-0d15ba4a1381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab1fa0f8-f129-4fee-a9f0-3f7f3aa79552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a417443-40af-4d0b-9421-bbcca41935fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6c31cf2-f1be-48e9-bbaf-a45df0731d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54689fd5-2801-4af3-acd8-e8bcf2701aff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d34ed9f-526c-45dd-899c-f41b00170ee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afa714ac-4dcf-4fc3-ba30-5211fde71b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e1e1521-47fb-48d2-81a1-5ee18ab759c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.147']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c46b06d4-b847-4d32-a4bf-10ff7cccd6f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edd3374a-fb2e-4eea-be4a-45ed0bfb408d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--167ebfc8-ece9-4340-9a36-ea01eb566be9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--defb5c85-2e9a-461a-a062-a9d170434790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.150']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c434dd0-4465-4f92-8e76-cccbd3adf100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4311f16b-13ae-4c79-8a37-2da18b0b7181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.152']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41210acc-a145-4e6c-a94a-1e823942c31d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.153']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d44d1baf-7013-462e-a81f-b4067d7f9923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76789035-b326-4c26-a65d-6649e6f126c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96ea1a7-d31d-460f-8ba1-f2af4c0858f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.156']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a4737d-81c6-441d-b7d2-2f7dff9be089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2510b98f-54f1-4ddb-b30f-3033e5c6b68e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.158']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a49d0f-7493-4528-90e7-85b6e8603bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.159']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b7cc4ff-cc00-47b6-bb5f-47f3625bac31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.160']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a763962-9138-4bea-9c00-d1b7c4443719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.162']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca543480-c060-4142-b83e-8fc39d8c7a34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.163']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cadb5be-f20d-4c30-b071-44b2d23d92f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.164']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84e97ec-488c-403d-aec8-21dfdb587959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.165']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c92f56f-daec-4b9f-a2ae-11cdbd49e36b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.166']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0e24cec-6c49-4f2b-ba75-0253c191740a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.167']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e677616-30a6-4fec-8a16-2a2e8ff02b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e380825-c0d9-4b27-b6ac-7c6958d6fb45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.169']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32acdbf8-1c5a-482b-b671-362d2d989d42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f52ce9a-0614-4795-ae73-728849077436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ccf997-663a-458f-9773-ee6d087e821b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.173']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69073da4-70a6-468b-bc06-69ee07b7bc76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e358f12-95c9-480f-b43c-064e0626a601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef8a035e-d9b1-4c7e-8823-4c8c76ade362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.176']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd87ac70-2ea0-43d9-ba21-399fae69d795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eefcc33-6379-4baf-bc3d-64c6e08613bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f289f445-080c-48c6-a3ea-44ef768199c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde4eb33-19c4-4665-9101-c529654ff277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f749e060-e357-49c4-a04b-14dd1f17ba4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90cc29bb-44a0-44ed-a4b8-51a78b9e4ce4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b571dd2-7835-4728-8400-e2d1f02bce2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.182']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57591da2-2adb-48f8-bf59-c00c3c1d0760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.183']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b28cb623-04f4-4c8c-a2bb-6e14d3de19e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.184']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34b8a75c-a517-4530-b053-58163b0e0937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.185']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aeef7b5-2319-4b34-8ec1-7427e4f080d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.186']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885e1ed1-4bfc-4a0e-bdec-1f69f8302596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.187']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad09e08a-5fc9-4924-9e7b-d63fded5498f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.188']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d23d1a-88d2-416e-b74b-d660d93265be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.189']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3705c28-ff67-435d-986d-d94446224d38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc73afa9-7fcf-43fe-8eea-bb3ab98b6c97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.190']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0204b0cb-ab8c-46bb-960a-f691cc8238e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2ce99db-a884-4f18-9eb7-f5bb6671a60d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.193']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f855b32-027b-4a51-8947-a2e3d51e7198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c5977e-e16b-487a-9a49-0f5326b2736c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.195']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45bd0a42-575b-48db-b892-3ea9e6fba10d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d65e95e9-4b7e-427a-8b97-1ce15bf0df97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f434328-3afd-419f-b28c-37b2b2979fad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c1022d3-1050-4cca-b365-082f5829afa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a6a8f19-5560-49a2-82c5-ea409ed131a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.202']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f39016-d1b5-4836-b1e6-baf43f15c0e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad2c8997-ed74-4360-937f-8e06233ba749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dcbe6b2-f190-4a40-b309-c9f739908b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94099638-bc76-49f1-838d-0b61fa7c71a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.206']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a0f4ec-8e9f-4c0d-b7a5-497c26162d26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a64ee72-3b3d-4ab9-8abd-90b9395dd2d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07098cb8-f1d0-4de2-8f0a-364ff7112930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc51d055-7da4-4fff-a3a0-39cfd3904a63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2704e970-54c8-42e7-8d56-21e7ba7251e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113ffa54-b001-4aa0-ba04-7ebc0dc8e60d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b19e8d3c-94bc-4a21-87f5-15c3f7a08cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b433d8-cc3f-4488-ab71-a62f7492ada9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c9c7d2-b02b-4389-96fa-ba9e986d3fc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.216']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a120b22-6535-474e-8d8a-7098761c1fde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb482cb-08b1-4ec2-b276-8fd0175da759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--343c9fb8-d086-448b-b5cd-fd6a8a3f0cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4654093c-49a9-49ef-8345-58662fc66572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6fa8f53-7aa7-4adf-8b35-629a86069837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.222']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5098311a-8c4a-4393-912e-1d3a8c338d2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568d5945-ed97-4549-b465-15eebf88e370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.224']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5acdc01-d7ad-4171-b27d-daae095f378b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.225']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4917a3ed-cf62-4a40-bdb7-5213a88b271f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--368dda8e-0113-4622-baf4-c7de2f44cb28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605bfe78-882e-4dbb-a346-4deb2d83ad13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.229']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a69349b-91c8-4cc1-8bdc-3cfddbe60370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f8fdbd7-a67f-4f7b-99bf-f11658f99cb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.230']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa9c1210-9161-455d-a0fa-0258582dc891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7072781a-27a2-4b91-95f7-767ad8b05dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.232']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6184076d-a067-477a-8a85-6f03a91a62ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ec32a0-0f31-4758-92ec-8121b299e83d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e5d710-c81d-4ce9-b16a-dc338c30088a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db03b9e5-758f-471d-9ce0-fb63adc8b794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--444c7498-45df-42bd-84b9-fea843408e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.238']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e23c974-64e8-48e3-a1b5-ceaaaab1cfac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--254cd13b-a42c-43d5-adc6-591d2d0ab7ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c3aed2-0bc7-423e-9977-50aee121ef94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.240']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b739515-57cf-4d74-95a3-7903ffd1e35e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.241']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0981d49d-d413-45da-98f5-ffb193176f7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.242']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7635b3b8-1804-4dbb-a749-697d80c33742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1112af5-2c0a-413f-9385-48020f1babd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a72665b3-7dc4-4f70-b8b8-f82acc53588d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.246']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717b2a29-7386-4966-b669-57dae4c3c701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--835abb19-8588-4d73-9a6e-589c8784d0c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--118f9fec-d538-4515-8e60-26c7ce0f3c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3042153a-af14-4429-bb77-9ab092e3f752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.250']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e119aa4d-c498-424b-952a-81c2e0db6f4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66452000-cfd1-486e-bff7-cf04c758c7c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e45369e1-6b44-458b-a675-809ec89f084d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.253']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a659381e-61e0-4b87-854e-29f55f4ed83f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.254']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05e770c-635c-4fa7-9008-c5c043f2f8a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--379460e7-9103-4f86-8bf5-b57d426ccaf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d06cb0ef-9bc5-4af9-802a-0f2209515f82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--528b769e-87ee-480b-8fa7-fd500ecca63d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2227492-6e0c-489b-a57c-10c580a3253e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35dfc883-0855-4623-a5a6-23cdf9f36611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b4c29ea-209f-48a4-a0c9-658c5276e135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a85e1e-e277-4095-a3c2-d11912972512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6533c9ec-46e7-4642-8d23-7e492f82f303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c0c8ffb-5a0b-4855-9dd1-20838a79bec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.36']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1559749f-b056-4e45-b53e-486aafecb40f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fede8bc0-ea08-4a32-ae70-4624b177c542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d6d467-04ea-45de-97a2-f353fe1bfabb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ba1f1b-599a-483b-9d07-a045c51fe0b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243e4066-ed96-459d-8f4a-50e8b8b191b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec8eaf83-d3b7-4733-98ea-aa16db7a0365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e929e271-8d47-4851-adae-69710db32f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cbd06f1-6459-46b0-b2ae-7e85b0cd54ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d55739-f192-43fe-adad-5b1dcd6971d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8757bd1e-60e1-4877-a5aa-dce083ee0b76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d7c202f-c949-4b8e-ab62-85abfd4f607c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.48']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7875a32-a425-4885-b1e7-4475f60dd6de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.49']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316676bf-3527-41a0-b89d-af135943ac83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a4e2915-d556-4359-8114-75d7efc99e5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f7b17a-b2dd-4c63-9278-966e074fc0a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.51']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c5bdbb-45b1-4da2-98f2-577992611f8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.52']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a89daca-f832-4898-9c49-9b58008830e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cabc401-89ac-4a53-b4f0-8322478fd00c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--299a510b-85c6-4a93-927d-58e8515ea826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.55']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0937ddb2-c40c-4b8d-a165-622d0a72da64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.56']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae12d8b0-35dd-4ee8-b270-76fe144e9a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ee3714-8e82-4638-8ce7-49d73ebc64bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ef6e0e-82b3-4afb-b46d-7ac2a8f2ab61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.59']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--407d700d-6e47-4176-84df-58de60d5f2c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53dd03ea-514c-4ff4-9b39-e60689a385f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--390f4c64-322b-4c05-8cdd-b262fc32a1a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f99ac18-c8bc-42f1-9989-d85a9bd17f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.62']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d5d72e-d967-44c9-939e-c94413f51dfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.63']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8d6e00-a014-494d-979a-b63510af2c69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.64']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84485143-6964-43fd-98ae-2dc4a6e948c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45bbaaa9-e51c-4384-8401-9a8600316d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d0cef0f-6dca-4751-910d-ac046d041d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3757dbb-488b-4b7d-9b89-c0a6799e7ae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41229793-406e-44d4-96cb-4e43b01476a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3fd009d-19a9-456c-8663-ca892b38a732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--867d3526-b0e9-4cfa-9cb9-e5b97b57bece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1205374f-b85d-4c66-9782-885d0285fd82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28601964-c68a-4a97-b687-0c9a06731fb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fbeab56-5777-4653-802a-385bfe6920e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b893fa02-99e0-4cb2-b416-be8f90ad5adb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff96f5f8-d907-475f-a7b9-9cf2fc94f9ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf21076e-84b1-49e4-a603-d53ca893ea0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeaa7e7d-8ffc-4c2e-80b6-11510e895827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20399f8a-2c2f-4adb-90fa-371e1009b54d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb104d75-d8cd-434e-8214-10118ea9e4b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70833b1c-a823-466c-858c-9ce85dedf83c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725e1413-c97d-4022-936a-da78d7912513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f194518-0178-410c-9b82-72aa5abd2b0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae26cd1b-3405-4b2b-9274-6742c2760cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dacfdf8-9512-4f5c-89c3-7931a91eebbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d06f189-ac1c-445c-af99-e973540dc389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2540cf86-0673-40e8-a97c-3e52092bf65e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b380b4c-3446-42ca-96fb-7c4c5c71ff9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d2753c-5812-479e-a2d4-2d5df19f5fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f39ab0f3-4fd6-4c53-a3a0-4e1bfe25ae45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6a71f2a-2601-467f-b135-5afa6f78a6e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b51e4bd-0180-4193-a5d6-4ed23fb3527d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.91']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac324cc-d74d-41c8-ab1b-dd17cccc0e79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa5b8aa5-c0ea-4d47-80e3-b9e03b2043b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac92f0e-8f8c-4af5-bc15-c8fe86d72a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd336dd-722e-4af2-a328-234416ba9cb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a8b89c-8eff-4acc-815e-e8c331c7f0ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.96']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a4ad6f-de8d-465f-89d4-7019432cb8ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.97']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0e9e3cf-9699-4f46-b7de-9ee9c614c08a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e9d25a7-38a7-46a0-b9c9-0875eb0ba080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a7a1678-96a6-4c6b-a5d8-7e6635aae612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.142.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b16fa0e6-46d1-42cd-a86a-4d58c8c12230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.171.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--888eb514-7d73-460e-b589-8414455327ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.140.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0f5ccf0-b1a8-4deb-95f7-9ed8ad122977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.189.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a23fcaaf-14e7-4e92-8eb8-fb8ae6b7ffc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.201.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd675a4-975c-4042-b1e5-5ec5e64cdef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.223.121.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b874fcf4-955d-4147-945b-2771fada18e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.228.128.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d075bbdb-57a0-49ea-98ff-50edb351d256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.1.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e169b8c-ee56-46b5-bd39-750c1128ea88", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.42.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a707f8ac-0880-4515-a3bf-2c531a75ab20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.234.214.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af585d5-4720-432e-bcb4-dd98edab8e8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.169.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea345ed-1c5a-415b-a5e6-2b97de3470c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.84.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da130a4b-24b7-44d5-9b6e-e73ab6ca451d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.246.217.112']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e1cb4bd-7079-4a94-96e0-30534183df6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.252.196.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae78315e-597b-44b0-b75c-e8ccb9ef3b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.252.208.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d320768f-0ceb-4c8f-9fee-4c13b52ad6d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.254.26.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f320cef2-eed2-4894-89ca-ae62ecb9d148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.255.150.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de9325c8-2657-4f2a-9573-d95b11709ad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.104.144.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb7ab2e-de82-48de-8e24-08f45176030a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.166.173']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1798c151-e93f-4678-8162-e15e6f614e20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.166.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--118b24b4-e573-4eb2-8774-337f8e903363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.167.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23781c66-9b7e-41c9-ab75-2839d9052bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.167.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf8b8b43-5ddc-4dae-8061-ce82997384e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.153.42.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e694a46-5152-48f3-b2ba-b0eb7e0ff902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.170.124.230']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab28685-60a8-4871-9045-bd36b7ca8e51", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.27.157.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2512b64c-0faf-4c67-afec-f0b12129c5b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.50.142.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c0603d-239f-4db6-b9bc-305e452cd4d8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.54.105.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd5fe6ad-68f9-49b0-9389-02e27773de39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.62.35.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e407d42-19f9-4212-826b-d8a72a93bb09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.72.232.176']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53f8b3e6-a6f8-4d76-b77a-9345fb188096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.73.64.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5df70821-6422-4e26-8bd4-90517bb417c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.78.119.153']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f8540b-a095-45bf-81fd-6a930dedba91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.78.148.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c63e59f-7ef0-48d8-a1bf-a6cbd9fe28c9", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.93.66.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--258541be-a8ff-46db-8647-004246326d92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.0.12.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04a752a-d495-4d79-8f9a-ef2809e040d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e3b4ce-2082-42a4-b39e-238ec502f76b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.139.53.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b26e2014-22cc-4ab3-bba1-5000f261d67f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.140.242.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ba1d14-26dd-4e65-8334-de761ad7743d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.148.106.91']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dae0cfd-9713-4cb4-ad55-905140e3ca9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.148.134.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00666c13-46dc-4355-a56f-ac3c4669dc6a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.148.5.246']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e15bdf4c-1762-45ab-9aed-cdfe70b63333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.19.221.44']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ccc33ee-8fe9-449f-82e7-1f06e1cd0518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.220.131.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba411d2-6f61-429b-975e-37aa6a9ef576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.233.85.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ec8265-ea6d-468a-94ba-330f4b68c813", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.238.40.190']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5574b88-77cf-4a75-9ae8-69352ac1287b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.26.37.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e570d798-8010-409a-8c3e-f93788c2e6de", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.27.9.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b75a71b9-8958-42ac-896c-fd3153890da3", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.40.225.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c79c7e-1061-4816-b8d4-37a414e3f382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.41.239.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be2814a-0ac3-47d0-b6e2-757a051a6419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.49.228.224']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd94fd5-8e6d-4c09-a426-40ac957f985c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.150.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9997e18b-cacf-4ae9-a17c-b1a1079f4259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.8.90.182']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53de415f-d90e-4555-b27c-9134ead2cd13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.11.136.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ff8257-30d6-45c2-bc8d-24286824f668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.131.62.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5057fb-b173-40c6-82d5-1e612d0b91a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.132.109.165']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b448a7-5221-4165-9c73-355692132c85", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.17.158.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69261af3-d842-43c4-984f-49c85542d723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.191.216.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71cb91fc-398f-4e78-ab5b-341058197a83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.226.206.224']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96e1ec74-cb98-4fb1-9832-719cf25ca15d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.25.17.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5c53e82-f857-47d6-a427-2380dd740374", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.252.110.242']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--063b4f91-f4d0-48ee-a247-ee249274f2b1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.253.239.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2467a46-99ff-482d-b736-26c0d27adff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.253.96.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ab3720-f61d-4be0-9cdf-58c817c0f41d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.54.113.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a400822-2093-45d4-8673-3f768a71573f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.76.183.166']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f9bb83-dd1e-4100-a3e0-c0f82d60004d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.76.250.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e94ed7-bdc6-4373-b64d-20e34c126e67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.93.206.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b66d29-b50f-4c0b-8956-82b4f6d4cc82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.96.178.216']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af9f70b-cf73-42c6-aba4-20295ca052e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.96.178.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8663115-ed82-4c4a-90dc-28701578e759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.103.138.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf0cf516-70d8-488c-aeb5-659baa5d95cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.105.202.192']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--775d66b7-7d00-4a84-a68b-611e03e518e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.107.55.186']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d28098a3-0949-4370-bfe3-bafe1c10c246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.108.91.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd5aab0d-e227-4e02-8aa1-5d5da3104727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.68.39.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04741e70-3839-4a5f-9dc7-17c2df0701aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.96.159.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bf64383-6671-48bf-9076-ef99c1b28417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.96.178.211']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a2ead0b-abb3-42ad-971d-ba1b0d413891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.221.162.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1c5614-50bc-460f-bc75-fd138d35357a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.178.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2086e2a-d5b6-4bd5-bb06-2bf1d45324bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.240.107.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d03453d-9d63-49ca-ab71-0bc74230d541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.246.231.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8da75ff-906f-4e85-9b46-5875b47bf09d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.40.152']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59f07d7-9102-4d85-b9bd-8218a09ac3b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.40.156']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b5114c3-89d8-47ee-9b89-14a14fd338a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.41.182']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7cfc4c3-b566-48f0-945f-ed53056631b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.46.97']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1cf26f7-60e2-416d-99a5-0da97e121cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.116.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--125e0b29-c640-4fba-b940-0f994596674c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.119.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99a4b68f-41a2-48bc-afea-65cbff6e7304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.120.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdee73fa-616a-48ee-a43c-057bd690c797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.168.156']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81675b26-4e2b-4d67-9c4e-5ac3ea57ed55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.169.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f00d7e18-93cf-462f-b637-4c51040fab1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.171.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be2c80ee-60cb-4f71-b778-00f7bd55fa1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.172.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b02dbd6e-f691-4332-802f-d5cf618d68c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.139']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--178eeb2c-e89d-4d69-8099-bec436f4741d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.185']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed8e016-78d7-4a7c-a8d4-c61493499b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf106be-ee2e-48fd-b4d8-d95a204a7c6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.206']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee8557a1-28b5-43ec-ac3f-90d066046323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1e726f1-9d94-43c9-81c2-ff044096f626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e51b0f35-e745-4546-83ea-a442f9ec13f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b9416d6-61ca-4924-9951-be4d305c0baf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e31bc6b-aa06-4513-9668-45bfd1d53c58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--202cff93-cd7a-4dda-8143-5255232944b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772d385d-1b0d-46b4-8bcc-98107223a4e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2a496b5-0725-41aa-bc7c-7ea2d189d2c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f22ac8-351b-47a1-aa89-072c1a6265f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f29965e-2165-4000-9916-3a942ec94288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--037b3469-07d0-45c6-84fd-4221577dabf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd72b1d-6705-428c-b871-63a961094899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.166']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdb763b7-40de-4a79-b2b8-33f0a60fb462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.184']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff4650e2-a25a-4ddd-957b-c066950ec204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.188']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a752d79-27f6-495e-964a-4c3ae6310188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed3c95c-f683-4ca3-8b4d-9f0b0c8e9623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--924b22d6-a53b-4c80-b1cd-619ee2051aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f9bd23-5025-483a-9f86-471a4e88d159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2abf6f0f-9ad5-4b03-90dd-0707298c18b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.52']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a07746-6e61-4574-896c-25d784ff13e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--547398a4-eab4-4b8e-89d7-84a6509f0cd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ebb6d2-b5ba-438f-9a8f-2ac49cbd0e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f51e1320-f4a9-4c34-bdd7-3106398f4d79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.176.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5eda62-9a0e-49c6-85e8-0816f503b0fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.180.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d14070b-fa5b-4e30-8aa4-0f0f14d68b67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.185.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def3a32a-9446-45ed-a81f-511bc9ac2ae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235ca053-9ad7-4ebb-91ed-755e35367df8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.156']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f48d1606-d7d4-4047-ab0f-56921dc0ab00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82eb728d-b93e-411a-aa0c-93b78721ebce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.80.250']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--070b9e29-3cab-4386-8048-2f54a57dc2dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.81.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ad4a27-1023-4241-8cc0-5dc3eff8aa02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.161.44']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca0a6d0-3ba1-4fe1-9fd9-2b89d561f1ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.74.208.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--467be044-6a8e-4498-a2c2-7e2072b2f764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.116.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a606829-f3d5-4700-bbd4-9d10aa46f6a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.124.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea5a4dd1-4db5-47e4-a1f5-7cc89a493c6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.139.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ffff65d-fcb8-4423-9383-d920b8330812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.140.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a3da2c-fe29-4eaa-a2bd-5ee298903b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.248.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b4c2d9-b812-4cbd-bb6a-c4b227c938b2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dfa7632-01cb-418e-850c-b35677981cd5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb625cb5-2892-4148-8b47-0906057021a4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7da9af9-feb3-4657-b3e2-bff128730789", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17df3c39-ef2a-42f9-9599-0a6da712639b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7494a1d5-56fd-46b3-9eee-e29cba2bc233", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.158']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--966fa0fb-376e-47cf-9353-7e181c478ae6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b669d1-62b6-4acd-8830-386505087f1a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acceadb3-312c-40d6-bb11-f563a25269e0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.254']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--198ddd6e-4db7-4890-8bc5-c0f60d9123ed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c65942-0e98-4e8e-96f8-283aedc6dbd7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5b8e3d-6616-4473-a0b3-bb84381b7950", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf4225f-6a57-4913-8b9d-74a33d739dd7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39053435-1522-4070-8966-fed42b5714d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.48']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf1230a-3fb1-4994-8758-0f39489ba600", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.51']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc1bd639-5e01-4d5a-815d-2ec8e6b48783", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.55']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4493f02-d59e-4009-979e-8d011c024ac7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--340638af-e4cc-447e-b980-97732dbd76da", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2de95d0f-cd77-49c4-ac72-47636ed3c80e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e99aa6-a6b5-408b-bda1-f8ebb7b64434", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--651c106b-ef9e-48e4-b768-44bc538c1948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.203.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a4310e-197d-4316-abec-90d7b43fd89f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.204.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab0c46f-108e-4871-9782-968e33378aa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.204.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bee6162-ecf1-4209-ae9d-81a5e200744b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.206.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f14ec2f5-5828-421c-b05a-f84a4b760415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.207.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e99ded-eebd-4322-a58e-494993dba811", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.84.216.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab111ef-b248-40a3-ba6b-189a5493214d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.87.20.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bde34cd5-7a44-4ef4-b71b-ad5087e5ea36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.90.235.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c29cb75-13db-424b-8676-cadbaea900c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.90.249.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dd38951-af73-4f4b-9f85-7de1550425d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.90.249.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca9c5c85-5e6c-4ee1-b97e-2adae422c7a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.111.150.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ca59e74-a51c-4a8d-8b4e-dbe0004bed20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.123.237.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b53c5b-b6ec-49e4-9c9c-30f34dcd57fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.158.236.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12516d6f-1d45-4940-a299-865f9d1853dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.198.158.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa94f11-fadf-4d88-a0bd-550243ebb3dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.206.34.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd7c7422-ed1f-471c-a0d1-79a36852a623", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.208.71.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7056d148-80d7-4aab-9e20-410fc013293b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.216.178.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc56854-e3a7-4346-9a39-fb7d53eb3511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.226.251.192']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d11341d-71ba-463e-afe8-645c27b2b5cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.242.118.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb922d0b-d3ae-4a6d-b4d9-c4e99345d473", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.25.40.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38831360-57d8-4cf8-9271-ec050e09c804", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.251.28.187']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95248d7-7fa0-47b3-966c-a5d322209a79", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.251.40.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f778ddb7-d9f9-4145-bded-d07269743c95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.33.56.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5378bc39-450a-4a97-87e4-84f329f757c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.35.19.171']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a3a294e-66f9-4514-bea8-aafd955a1b9a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.56.151.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d280f823-51cb-4793-9eb9-a9a7044cd755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.127.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--624195a9-4c26-43c2-9a71-45fdc0a429a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.129.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6532cda-0bc8-4768-9070-9bfa34351e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.138.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea3984b0-8e78-4f0b-9532-bdaaad71adcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.150.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--056e5f4c-527b-4f0f-acc4-295ea4f08027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.153.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dce8fac-8181-4d18-a995-ebb0c643ff99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.174.162']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cebc4d60-e7b0-4366-ab61-51eb6e4ff43a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.174.211']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9b54979-7e76-4f8b-96f0-2b834f7491c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.186.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb1c766e-6b0c-4066-b403-c6ceb2276f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.189.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34fad481-8f47-4c47-aba6-67e846797d4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.189.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5883d787-d7db-4902-99da-a369e1ae7182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.243.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95ad31c-e552-4cd4-840e-b254a16e5b85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.243.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f951b334-c79c-4ed6-ba15-ba561238f1be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.246.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85293185-c98a-47c9-913e-8729c4883b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.34.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e9ff9b-391d-49b7-ae6d-117a0f9a5a23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.34.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03500ff5-127d-4917-8377-6b589da4b99f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.38.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6744b0-248b-4883-bb29-d0d0a883f7ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.39.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deb0c5fb-77a3-4a63-8d3d-dbf6cf058cd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.44.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3236d55-bd13-4afe-9e6e-4a4feb36e0ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.5.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c09572-2367-4865-b835-e352667d5404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.50.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19ec58e-2c99-4aec-b0e0-6bdc2a53510b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.70.222']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b09ec42-17ae-4254-9077-330fb4888fee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.66.49.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba3215c6-5746-40cb-a7ab-4f51e170c740", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.75.114.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f96248-eb57-45d5-a17c-ced1ae9a5636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.83.54.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3145ea-38db-426a-88cc-33c36e46f52d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.100.21.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a72547-5654-4042-ae85-98a62da2b096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.121.161.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2300745d-b916-40c3-80b5-2183bd4c2b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.110.38.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ca5789-6d1d-41aa-abb6-656fe7575f31", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.229.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c70983-28fb-4336-a970-5f5b7730c66f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.11.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--100ca52a-f678-4247-a6f6-d41a639b0bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.186.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd7657d6-ea75-41fc-b6d1-01baacecf457", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.142.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e9f54d-85c1-4177-9e4f-2bd35f5679e4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.211.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85d01ea8-3793-4399-b3bc-1081cb75fa6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.138.178.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1966586-2f8b-49f6-aa80-18c126291d92", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.140.37.167']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5964ee8-b4a2-4cf1-bdc0-e3b788a906f7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.119.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c40900c4-ff85-493b-a8b1-1082f73dd5a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.172.165']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e467111-ee12-4a74-a10d-20e0e66be98b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.204.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--912205e2-0a4b-4ead-8e2a-5180d956bcc8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.76.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b2dfc29-e98c-4d84-917e-c4d808bce8fc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.162.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b2a5d56-2369-4a32-a007-f137fa0a7b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.228.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d07f6c-bc9a-4b9c-ba87-864985177d9b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.232.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--496cbadd-80b7-4ab5-9277-0d0a03d03e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.44.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79e46c95-2209-4a92-b05a-ec296ab05dbd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.60.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f37197-ae13-41bf-9ce1-6e146760ea42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.84.112']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc962c5a-b765-40d8-99aa-fa60ff02927b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.142.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--279e96da-f3f5-4a13-82d8-252bc5208890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.149.56']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef0d756e-2ff0-401a-9594-1e5bdb3f572c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.56.96']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a87bf97b-b98c-464b-999d-68b7d5451c46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.161.232.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--197939dd-5cba-417d-a062-686f52c2de5e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.162.103.165']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--659dd440-c3d2-4e9c-858f-c3c127da919b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.170.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56c2c04-8664-4797-b82e-1dd00dcb2acf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.174.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ca6da0-3cd6-4ee6-a5bb-ffdf3b2f9e13", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.195.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb20cf3-8a24-43c6-a273-6b65206e9bce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.198.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09445aca-9cbd-4e9e-8f11-1f6b3f75f584", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.198.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ed7dd7-1773-4479-b245-192ce76e1d42", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.3.187']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--978ccb80-3090-4ad2-a1c7-f0df784b4da7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.62.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f13d4388-b5e6-4484-bdcb-4789d37ec4dc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.255.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f70972-64a8-48d6-a171-1bd0f2f806aa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--010366f0-863f-47ea-b6bf-0dc4c0a99133", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc502fd-76fe-4ba2-944f-aa0e7520b966", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0da7d39-7f2b-4971-8751-039bfab927c2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d110db83-ddf5-4b57-b257-2981138e92ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--525ec90b-85dd-4df0-bba0-386e298362c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec0f8fd6-7ac2-4109-92ab-d0f57a3a62f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b90eda3-f197-4623-845e-bdc1a134db44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef7fce0f-11df-4755-94a3-6acf4ab34347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.230.28.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c5b43b-6e60-474e-b829-b28e859624b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.230.93.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--038e03ac-41b3-4c33-b323-5ec415fdeb19", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.240.64.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d0d759-b4ba-4907-b76c-a46b63f8153a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.245.249.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--680ec136-be41-4e54-9e02-68a61bf530bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.246.210.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18184728-2d0f-43d1-8f28-4f4a6e954afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e63b4e8-31e5-46b7-8557-d098359012c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb7347e0-bf16-4031-9470-e7abc8063489", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.185.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee13b06-4499-4fa6-966d-4abd251a3021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.201.77.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe89e98-f434-4fea-9a51-5a23fbb1268a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.202.125.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39efe9dd-e12b-4c50-aa63-21a605525641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.203.47.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dec6f242-ff90-4870-a3ba-e5286424adcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.211.69.170']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ea8566-4d65-4d3c-981a-38e71f1387ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.212.18.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27cb6a4b-e69f-468d-ac63-5b16e3facdc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.212.56.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce436e2-ba1e-42fa-8adf-f0a72b2f975b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.212.77.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--432c963a-25be-406a-987c-696e9ddb8b26", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.220.188.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--903a4573-15ae-41de-b769-64c276d1da83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.11.57.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27823ac2-8dd0-4360-a89e-a903fa03fede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.112.149.170']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c407ee-486f-4fbd-b887-8c9a319c2942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.117.40.224']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--470d6aa2-00d9-40ca-b467-fd80962c3f4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.120.126.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8490416b-5c52-4d0c-b04c-04ae80a84419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.125.5.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a458adce-d380-4d3d-b968-b2a577ddd41f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.130.7.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb01b24c-118b-448e-b293-cdd924817831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.155.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1538aa5-ccc8-4bf2-99ef-f22129775c3d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.195.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed27766-70dd-4ae4-add2-490b0524c564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.225.49']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de349e2d-717a-4d61-9c6a-4ea261b80bdc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.9.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dba1f2b2-d975-48be-b0e8-bb3f43ba0fdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.193']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f535e0a2-d1ac-438b-91dd-d17888e4f22f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b9dab6-3628-447e-863c-f38e5662fa73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--687f1f3b-c0c8-4243-8b3d-69cecb16b859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.137.126.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ea60ea9-bd06-4d8e-8d56-ae61e72c3d30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.233.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e4a9152-aecb-40ab-a657-4efaa97cf854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.56.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59e0f280-7750-4c6a-9ebb-14ed3a337c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e52652e-51c8-45b4-ad3b-94ce3d6c705b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.112']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--100dae50-302f-4e12-9d66-8a9f75c4da38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d803369c-0008-46d1-ac83-5a242b80b445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54d01c25-392b-430c-a234-9aedcdb4722f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3e583f-fc58-4864-a160-67ae0c74a44e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5215dad5-49e7-4b2f-949b-e8214833ac4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac6b1c1a-f17b-47fb-8e9d-d7068e270049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--383baaed-dc32-48d3-8c59-3a63b23e21be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb0e390e-a752-4bde-9f1e-cf7bb5a46e1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22eac6ce-e884-402d-a8ae-a204488f80b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.164']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c034bab7-e253-472e-a4a6-19886f1c4dea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.166']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16408478-a915-4733-a75e-1ed124c69ba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.169']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--010bd205-e2c9-4ae4-9c26-6fe431cd1a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a357aacd-c7f5-490f-8ddb-ebbdb3745a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4893322-a587-4809-8fe4-15922631572e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad8efd4-4853-49a1-a8d0-a5586af9873c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af4c4f0b-a02e-4ff9-959c-81b614263506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6475c1a-f065-4405-a1da-0d771e41d20a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--038a32f6-db0b-4a7c-8149-a9fcb5cffcad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a200be5-32fb-4c2b-a3f6-0b1f5b7415da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.3.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c10d0c-71bc-4048-8e7f-64b7db1e8ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a338555-e888-4775-be99-8db150512b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdac0f61-e001-4057-bfc5-3d0956bf5c56", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7be6143-5ae9-4a5e-b5cd-12fe6ca24e11", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.147']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e71776e-c627-41d5-91bb-ddd974fd1553", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec93ba4-0a86-480b-a508-d4bdac3b3ab1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.152']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5498fe35-57b5-4d85-b45a-c6b343359ca6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--737e33f6-ee15-4f65-86e0-f1cfb63c760f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.183']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec9efb4-6053-4533-9cd5-23b9628f014e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.200']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2597d0ac-865a-4efc-9268-87dcecbcbb90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.206']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d95d0616-feea-4014-af83-b6a83c0b8905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.230']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e60f3c5-b529-483e-9346-f333d23f1063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ee4fc5-2b87-4cc0-bd8f-859955207cdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.145.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4a8494b-4a58-4152-982f-5e6970e9ece7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.147.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca94952f-5d7c-4df8-9f4f-9d9a1e86282d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.112']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487e2e8e-a46f-4680-a408-e7ca995e2547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2825bb-5884-4d15-9990-dceaca37f317", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.195']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b66c86-ba04-402e-b99e-47d05c3eded9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e6d67b-130b-4c9f-a480-82589d2c6e4c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79eb9520-dfbb-4fed-827d-86d42565d2a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629d5d9b-81bf-4848-a642-88284ab56804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.154.154.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa82dc01-e49c-4f29-988c-a236579b945c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd79b3a-1ac1-4e24-a147-7deaa6fe0b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--590bd611-d3ad-4971-85e4-ecd573b82c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.131']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b759254c-4a7e-460a-a08c-3166d38633b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.153']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ceeff82-ab43-4c95-8541-1b2989b5fdaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d28959f-896b-44ae-958a-486c29813458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e442ed11-f61b-48d7-ae0c-81c5f82b94da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--330da5f1-07b5-425d-9b49-74f031ede9c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f56006e-b71e-4271-9fca-17e317af8c48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4cbfc12-2e54-4a83-94b6-3fb1cc3d5bb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.52']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--305b4692-1000-4317-a91f-9ccd7c28031b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.56']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a60fe73d-3908-4bff-946b-7c31c8dbdeaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1685507-54cd-4139-aaf3-ce5eba6e874f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb22a2e8-9177-4a12-9ad2-c7e974134537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba358147-0e67-4882-852d-47f5144a87da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aebae829-60b6-4de2-8b89-f6b1fedb3e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.131']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a76314e-c0c0-4955-a535-f62ac5f62387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.135']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ec8298-81a7-4366-973d-c2045a835cdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d92627a-51e8-495f-9b5c-10aa8efb40df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.51']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c3ea032-aaf1-4633-89d6-1043968f5bb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a9820a8-6b62-4f7c-a4ba-d32d77bccb05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3688c018-3260-43c1-be43-d8ab38e407d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d54c93f6-8b15-4d55-b20e-79924a8693ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.63']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a60d8d-16e5-40da-8ede-9f6f1ab42848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fcbf3ca-46c2-4844-9297-703080bb0dce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3a3f03-838f-46fb-b65e-4f9edf1cbbd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--987ee020-9762-4c38-8793-89c2564f992e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea7a71c-883d-4789-a2a7-c6e5bab11558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8b86755-301c-45da-af87-11262fe6a4a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc107a4a-df68-49cf-a75f-e9eb9e52a7f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b6cc73f-cd1f-4cf2-94ba-0e15123f6746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c75448d5-009f-41b0-8d42-0992a9744fc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4beb3525-e7c4-4c07-9f8c-8e60ba758631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7da6957-6d65-4c5e-83a0-bc6c5bacbaa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c98e5a-7559-43af-a657-1dc0c1490c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--945c5ff6-5a8a-4aeb-bdc6-621faf1e976a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.91']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb8337c-cd53-4ec4-b426-9ce470749592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fee3a98-a298-42de-af4f-55dda610491f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e1e1ad1-2388-4e07-8cc4-0a2a6211dc5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.131.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--229bb897-580a-4582-afdc-8ac185b62dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.131.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd94fd16-2eeb-4d12-b873-9da43804f992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4b38de-5220-4d51-b217-8cfa9bd28d43", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95ab1410-a511-419e-9ec9-3af4dc6a3762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1def1632-4aa3-48ef-9a00-69464034562c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.147']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae0e66e-dae3-4f06-89a3-8e1a3a248429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46e2ec61-9f25-4b13-8e3b-3386ea5ba5bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.159.74.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd31a9d8-01c9-4d0c-9f60-a250b1155635", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.164.39.253']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a7af37-dfad-4dd5-aa52-f0a6a7c2e62a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.165.236.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49717bce-82b7-444e-97e4-948a8453c526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.174.183.195']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf1372e1-a7ad-48cb-8123-29c99e335328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.175.123.254']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b23636-ecbd-473f-b79c-3e5238714a7e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.179.163.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d322bba4-a032-47a6-b810-b5daec0e128e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.179.29.165']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--287f3380-d1b1-4418-bec4-0cb4c52ad4cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.181.84.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0cf1a5-69e0-4a4f-b31a-f60567727df5", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.184.68.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--463e3858-137c-4957-bce7-ef41cb4e9a22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.186.209.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d9b1f75-1bd1-453b-a0b2-007b75f4e8d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.186.82.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d29d18-4951-4dbf-9a79-453951f7fb48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.187.199.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5a88f6-bf73-47ed-85ed-51ab11cea767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.189.61.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c65d1d4b-c3f1-454b-bd27-bc6d1176062e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.192.184.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f019e6b-95cb-4025-a816-e29836064ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eeb5288-50f4-4ecd-a36b-f3a6d484ec6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.249']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5016ccdc-2812-4e47-966f-e75f668cac60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.250']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f115365c-842d-42ff-8457-075c05f5cd6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a575b9-8b50-4afa-a481-df3e56d1b2ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7495058-5abd-4144-8eca-0ac854d8099d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.253']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b16e700-78da-4337-bcc6-98e86b9f72ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.92.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8c45d1b-c3aa-4ba2-99e2-1cafcadcadac", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.195.250.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--077d8a8c-22e8-4422-bedd-a7d628c6893b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b3d774b-163b-40b7-974b-b75e7b95fc76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb2fd62a-005e-46c0-8d50-2885361625c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a42ff2f0-1761-4946-afc5-db7ce0e4a454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95500e3-96e7-4da9-8cc7-eb424e23349e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5786064-94c0-491e-98f6-8bc4b1ef0c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--976af87c-7ea6-46b5-b478-d4f8155edcf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80425b66-26d3-4c98-a331-eda30c6e7af4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3313ff3-4faa-4c5e-a200-04716e5c636a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21959c3a-8e5a-4460-9698-8d48d88d7530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ec466e-986c-4b7c-939b-e109663a62d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.36']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a31515-91ff-4ad1-9e31-ce7b356d5a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb752ed-7a32-461f-af1d-bde71ae41d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.224.49.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f7bc23-ebf1-45d7-9e75-0a70cba39a66", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.224.90.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c42cd70-94c0-4dc2-ab7a-f5f2c4b87c5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.135.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4733ac3e-d182-4001-94f9-a72407f70b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.226.104.1']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f9d8065-b571-43d4-8e78-c1ac12c5be2f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.218.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e3c39d0-793e-4228-8018-933ac2b53001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b4e14b-13d0-484e-8cc4-e66038de2c23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.152']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b39659bb-7d12-4ab4-962e-7c32e3052307", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.170']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e0480a6-64e1-44dd-9172-12a96ced93cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.120.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a9d7b5f-f682-479e-9fe9-2f3a788281b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.244.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90670fed-84b8-4f5a-8593-346358edf1e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e17141-4102-4a0e-86d9-53e5e11d856b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a742d467-bad3-4741-aee9-eb75a28f96e8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.247.165']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--645a8d0c-5205-412d-9d63-dc100565efd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.251.239.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00cbc332-defc-41d7-b3c0-fb799889d117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.182']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dd88095-4a82-48a3-93f8-9f66ef65d1a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--762ffcc0-071a-4ce4-90f0-798d859d045d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d051ee3b-dd28-4d3e-a46b-dd7629b8e200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e3b02b-8206-4c1c-9826-bc1c86cdb185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e976fe88-661b-45f3-9aa3-33d976f6b3a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.110.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--437507b2-8bce-4525-a309-7a99c2a03050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.113.96']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af7deee-f36e-429d-9b6c-abf06d573e5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.12.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14002023-0f9b-4709-bf00-652390e67f57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.12.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7e09122-91f1-436f-b133-409cf87e4ebc", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.14.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c689720-8060-4ccc-b2db-b22673077c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.14.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf72f88-0c63-4b31-a64d-155698a90139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.26.224']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--663a4b57-40fb-4436-bc80-faff1a2dc886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.40.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33885a1e-15ab-4b17-94bc-67f07e984e7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.41.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0318d9c-360a-4ef7-b204-f767c69355ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.42.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628611ec-6e8f-465b-9db5-3deb6dc3f2e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.46.249']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25d6518a-d67c-478e-95dc-a349df912119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.52.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f071e46f-3500-4911-b136-271de8919cf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.64.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fe43063-17ed-4918-bc0d-b788b8d3ca9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.64.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--985f353d-342f-45a2-be87-4d948c600b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.74.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96696a4c-94e9-491c-a9aa-0e516c5296da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.76.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ded1726-893b-49aa-a017-6d15a4fb4921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.78.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f034fb7-688a-4f84-9faf-3c36d7f0df4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0e3134-84e7-44cf-81cf-4f2109c70b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4bbf2d4-55b0-498a-b41d-64dcff822588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.171']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5edf16d-1149-432f-8c2a-601ecab67923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.184']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb0bdda-4e70-464d-b0ba-104d67866169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.187']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8eb7cd3-2472-49f7-964f-2f5833ecbae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ceebaa-2764-409e-81cf-d3f0c705867f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd1ee77-9cc3-41ed-af95-0c92957e6b85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.87.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--114a77d8-30dc-4db1-b03a-158778e6eab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.88.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c744909b-4aa8-44f3-a98a-a40eac10e807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.89.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df3c5f98-6a65-448f-b44b-6d590ec3039c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.90.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--375a4317-97f8-436d-a52c-817d9c41f2b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.90.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--214a8db7-7204-4403-9522-c4834e8894a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.91.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae2e6fa-6e53-491c-a277-b435b7a3ff79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.91.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--438c455e-bdf6-4b0b-9041-a1ee826576eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.241']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--070f58fd-e1e7-4957-b473-e7911825063e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b143c4b-d570-4a62-9ef8-30e934208526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71544e0-21c8-47eb-8594-f5ffb8e48a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.64']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f21871-4aaf-4533-ac87-3c82aa84465d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.98.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b2b03f-21a1-4d23-ba4f-3f976602c109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f3ae28-ea1d-48bf-868a-36d85c830fa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23135e40-dfc6-4735-8198-23b16d06bc01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.41.104.51']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e68f6ebf-1431-4b22-937f-0488f5207b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.41.105.166']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c9fbaa-67cf-4765-992b-76698a109b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.41.105.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301379e9-ca06-4c19-9ab2-4b3601899d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.42.88.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--732af402-6c2a-478e-be1a-d1faf9f72b3c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.37.254']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a86dda33-dd78-4704-adcb-c5abd1291ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.45.254']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a86708-0aad-4906-a2c1-fd57060a00ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.106']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36335fb5-fa33-48bc-887d-f6ef7b16e2ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc6b5c61-e9d2-4ac8-bae3-2001a59dea87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.63']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c948d3-a0f3-40d4-9ee2-3c5d7baa8dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.153']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a166b704-bfa8-4352-bc15-df2f75055a00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6cb4cd1-7add-480c-b6f0-39af1d03c99b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd787381-7082-4ce1-9f01-c640760b19e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c53444-02f6-4052-bd60-462cc9e4ecd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75122a10-4aa3-42ce-a01f-68846b020bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.62.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ea9721-df16-4735-80d9-971b7c321776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.62.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402567fe-f897-4834-a68f-8b1afe678f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.63.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4efeb222-1a2f-4573-a359-f45810908da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.140.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--522fd781-ebd8-45a6-8f28-dbf671fe2490", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f72123-d8a9-4272-a1ed-9977079accc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.69.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f291e7c3-5c24-46fa-b154-4cbda0116627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.71.167']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9403b28-c6fe-42b1-80c8-be8af4e9ffa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.79.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c5fd7a-6d78-4c39-b326-a1df7a23b759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d813b0-f1dc-48e9-97ba-2ff2b92d06b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85759002-cdbb-46a3-8e44-b059d8f16be9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e843d430-0b87-4582-8615-47d39515da00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.84.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5a8eef4-905b-4788-a261-2f0726e5ddd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.85.254']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c88b41-0e57-423d-babe-ef2b4dfcfee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.94.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d5fbf20-80a4-48c9-83ba-d89109920956", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.139.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff5ef60-e653-4b91-a532-2d4f029eb3a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.63.6.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc144bd-6072-4999-91bd-d8cc6a014183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.104.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ff687b-9fce-47ce-81e9-f78565701c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c1417ac-9ca1-43ee-b3e5-78e76fd12b11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.193']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e36ccf6e-6305-48da-b2e8-2f9134fd72f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--849a31a3-c26f-428d-9764-5fc7d98eb8ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5224777-37ca-4542-ab4f-fbcd49c8ee9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.110.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d9aaeef-0f8f-4a38-a03e-c87d79632d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.114.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67eeafc1-56d0-4144-abab-cb7ecd3489b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.115.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f00fadf-5874-4ed4-80ad-65cf290ea57d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.128.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d549b15-f318-4eb6-83ae-dfba6390fe6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.132.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c54573-bb6a-4e78-8300-f1d4c502b747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.137.193']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0167da2d-b9ab-4513-9d61-51798574210f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.149.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e3c1c8-1f0c-4b4a-81f3-96cfdfc8f955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.152.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d0a61c-4b62-460b-8e41-411203a621cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.152.240']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b457c8-b0e6-486f-a030-79bf0a0fc584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.51']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f9e323-c5d1-4757-924e-3c0b6d452766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c9166c-6804-4160-8ddf-bd401ccdf9fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.162.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3057b68b-b53a-4293-be41-a594670e94af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.162.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecf626ae-54b2-4e24-a41f-4cd3c5493122", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.162.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c563b249-5f7f-4569-8c93-efdc6a066f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.162.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f40aa8-fd71-4d1e-b7b9-4f8d23d9e531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.162.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b0b20be-de94-46fe-aeef-535f3d1eb8a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.163.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328f75a5-e174-4036-aa04-48e5fe26913a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.163.48']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15aeff3e-b1d0-4a70-9801-976387a3bc9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.163.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f48ab2ff-0be1-4c99-a033-7f9d7322d4f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.168.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c011b6a1-f54c-4954-89aa-9ddf699e0f28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.172.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7138d489-d848-4abb-9546-202cd3d995f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d3a782-2711-4782-9d7f-3b9c84007daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.180.135']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22361d51-f78d-4f90-97da-0f83f9e16e74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.180.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e0f2e9d-bc32-474b-b5d6-0decc8fa6b87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.180.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--374da096-ce63-4a55-b0e4-4fcc2922a9e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed6c214-dbd5-4c47-a3b2-8ce94932a0c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752dd2a7-5195-4473-9e06-a3cf1004b312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab8f0d3-0e4e-4c73-8968-faa0b51011b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.186.176']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6025f03b-5fae-42d2-a898-8768a6c98f57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.187.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84bced41-c9b2-4e82-9ec4-93d29ae30b86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.191.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036f1f3a-28ce-47eb-814b-fb6346fc42d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.192.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90a70651-65d5-4bab-a0dc-fec77e0bd0ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.192.230']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3068d155-7196-42fd-ac17-9a505c65dbc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.192.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8afd3130-b769-4642-a97c-2b397fc00a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.2.187']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b74e0f18-f5cb-4737-9e3b-1de29d6abceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77a2c8e7-aeb5-4638-a542-1cc8c83fb71c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49a86e92-7ff0-43ef-9cbc-746d0b3c91d7", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.129']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f152fba8-518a-48e5-9f8a-2b708084372e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb51101-178a-4ece-9958-03c0ab1e1e78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20204be5-1242-4a6f-9e06-3eee9e25b7e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14dadfa3-ddf5-4fb8-98d4-33b0b225262a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8446d86-a93e-42c8-a037-26b552c0a1c2", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bbf3795-fa1d-49d1-ad54-dad941969ae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.211.97']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4582c3-bad5-4321-9c22-4f0ccd527a39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.225.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc39fe18-a26b-4e19-8129-7dd639396eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.67.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d03256-ec93-4ae2-8ee6-d3b8b3ee5116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.7.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92cc8053-7c16-4e38-871c-67d11d91dad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.8.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d77a20f-ec0c-44ae-b878-392db14910fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.82.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34bb62ae-4c59-4c1d-971e-865c99f315c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.92.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a37c74e-6914-4779-a4cc-f8da3f3788fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.98.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1066e5f-be00-4f6c-8697-50f14ff43e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82acf69e-d2d3-4946-bd13-2d4d2b8d214e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c06a3198-c960-4bd7-8c5a-e8a784bc14f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c463ae-d68c-4e99-8fff-2cd43667739e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--636bad6c-858b-4060-b390-7eeefe6b695c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5169b76a-624c-4feb-aca1-1be79ee02983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df256069-2b04-4663-839d-b935a1ecf75f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.106']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--112aaae0-02d6-4ff1-997e-5f9217be5c23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9989cc04-96d6-4054-a640-0ef27c32826b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d3918e-d28c-492e-a706-8e44ab42cab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c89393-56dc-44de-8f9e-c3a5264ebe36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ee7880-880c-4910-8b9d-f384e21c6055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0b9c4b-63cc-41ac-86a5-6abbf22864ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced2ac58-98fa-4cd2-a37d-f533500d9fc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cffdab4-7bb9-444f-9fbc-366058cb0b89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de4fd179-43ff-4b0f-93d7-602fb9d1f73d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c082b75a-164b-44b1-996b-2c9e050f4874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e20a551-b098-4151-b8ca-6a3ece97affc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e45e25fa-a5e4-4991-9f09-9e24d877497b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8472cbf6-df16-4719-bf6b-c93dda78d3c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fbc8695-d267-4821-a708-44af7fbec29e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0385efd-ac87-4bce-9dab-54b5906e6e38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da2dd41-3941-4b48-9b4c-6a6ffbb2275c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4fc2fe9-f715-4dc9-b5b2-8e074fe39fb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18abecbe-a108-40d2-b1a1-2cc3743e69cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e353264-2c41-4c15-9f02-54f1b524754d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f85cd8-1513-429a-8888-ce0000ab8cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d3ab950-2bf1-473f-af9b-1dbc5850f450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db59610a-6ae5-4ca3-94fe-0f4b00763284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7657b9ba-5400-4510-a620-8992b5032d9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.131']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f6eb457-2934-415b-b514-4c43cd0ccc85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac6998d-b7bf-49ec-8809-f160282d4419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e517df-9f94-4e13-8b7f-05282a93ad66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80575b81-0b02-4b52-9e15-8707c6790fc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.135']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8989f69-f3b6-443e-8e84-3d358d5638f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a35197-ad5d-4875-a89f-5949abc93e9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d1294a-65c5-4582-b9ff-3d674b0682ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0876fc95-b3fb-45c2-9ea0-ba10cf56b922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.139']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7a8b5b7-66c0-4b8b-b88b-8ddcab2f2879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fbe019e-6b57-46c9-9b95-93cd823b54d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37bb17a7-8ca2-48eb-a7a2-81e3241f0e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b99f9da8-5b1b-43a2-8631-fff133ca0aa7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.87.249.200']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7607ba-8436-439f-be93-423f95e877dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.88.0.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d5ad70-e3a5-4ea6-a70b-6787f522f053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.90.105.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d371c64-fde2-4e43-b6a3-1ebfcfe0d425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--369e2d16-6534-401a-8f59-0b375d940949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a9ddfd-71d8-4858-906d-77293f70a332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.92.1.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ede1bbd-7b46-4632-ba8c-09c01755cf42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.173.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b7e82c-35ac-4b6e-8461-cd590558a7e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.232.106']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d2373d1-bf11-4cba-82a7-e5bab2eee9cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.253.153']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac24b9d-4738-470c-8bbf-bfcc59546a5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.40.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f418fd5f-e356-4e01-b839-8a0408515563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.57.131']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--056cb09a-eccc-4c29-b643-efbbc8291f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.9.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac7916b-4a26-486b-8115-57b0c899b1bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.9.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c362265b-7c83-4a32-a95d-ea908bb41ed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.90.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff88ea5-916d-49ac-971f-a1b73d76f061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d7e072-eb0f-4825-8d50-c36ee24b24fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.149.191.249']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727f3075-a744-48e3-bf59-7ef27d8bc7f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.178.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--937069a1-ed0d-448a-a07b-175c64823bae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d7fe3f9-15a9-42e7-bafc-46d0c66bdd29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.186']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36e0f23-78aa-4ed2-afd2-a3334e8f30c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.161.50.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39157ec6-84ed-4aaa-beda-4d7d8431c3ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.19.67.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b807d7-375a-434f-839e-0a367dec33e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.146.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16361379-bd25-4586-a89f-124f4f80bf1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.228.100.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--497a8829-2d2d-4019-8882-5fb50f7fdfb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.243']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c71157-ca17-40b5-abb6-55038f6b2699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e10a62a8-cbb6-40ed-a419-c521cb72dee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.250.249.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--817f4317-61a1-46a6-85da-4fc96f58fb15", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.33.209.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aa409bc-b7ea-46dd-b740-5eeb085d60b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.36.123.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b9121e-27df-4970-9706-39975a6a7cb1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.62.131.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--969354d8-3077-4005-a2ad-e9233bbff864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.101.11.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7121cd52-f329-4349-9d3c-f7a67b424eb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.103.204.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e4cdba-00e7-4b4b-a1e4-5964f6accd53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.115.231.183']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0da050d3-80e7-4419-8eea-ad279feb66e4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.192']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac08be1-da49-4415-9f52-ae344aa91c3b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7632b23e-7845-469d-bf20-a56fb7cba478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.181.122.192']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e668635-9a08-42c5-a45f-fb3e70a6f802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.145.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdbca0ef-685d-4782-8eba-3a0231b26e64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.157.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6985ba5-883e-4255-b70f-d1e0bdf6920a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.162.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c41f3cdf-a493-4ec0-ae5c-d30733ad40ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.198.185']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3abe9224-3a2e-4cef-9f91-82197b0d08aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.201.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f38d550-26c5-434c-9998-6c408e58643d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.204.159']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1c1702c-4c71-480b-ae22-ea1f7ca57cbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.206.106']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beb82d40-3197-4b8e-91ff-64fe37878639", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.108.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67198a99-7e21-4fb0-86e6-84720baef52b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.193.166']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ad17186-f5da-4526-a93c-ca74f524ebf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.193.246']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa22f6c4-9efc-4275-81e6-b242a4c1faf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.193.63']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8e8f2a6-ffc3-4b07-9eb0-9afb8e839299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.197.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1c83b65-ff26-4433-aa1c-bda473bbcc78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.20.150']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c755ee-bc54-4433-894d-11e775f8454d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.201.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81331551-ef7f-4501-bf49-f145f0815c7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.210.152']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b305ec-6a20-4728-b1d2-5588625bb902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.218.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd432612-4978-4e9e-a708-7cdc252854df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.223.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13761873-4faa-4532-8769-700c04044980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.30.186']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--906d34b3-a5ec-49c1-a9cb-7b05b555942a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.71.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e573f606-df05-4592-8365-6f826b4bcbed", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.76.170']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37a6ed23-9c5e-46e7-807a-394687b6a506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.238.102.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03de6f45-54d7-436a-a840-21f55b12bb12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.238.121.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c1ab0f6-de14-40ed-9cf4-13d90ea02f3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.239.11.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f42240df-b3bf-4d9b-a5e0-e3fecf853b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.239.57.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aafd2857-1f06-4773-a732-7469964f3c95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.243.201.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b23aa30c-aa63-4d29-8c13-6c8372f02dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.116.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e243bda6-fac8-4fd7-9283-e1b9112d1cda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.128.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0bd321d-7945-458f-9797-6ee0c6029fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.128.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e263141b-ed27-474c-95c7-1077691d81ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.128.96']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6998fdf9-c91a-4f43-891e-93db4958b025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.129.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc81b04-dc58-401a-ad5e-8ec840295b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.131.184']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f48b2c-4479-47d1-b384-a6be246a8ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.131.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--506aa0a4-9947-4e47-bfda-08d56bf6499b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.134.150']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a63201f-4aef-4ee1-ae9c-56cd3db4d242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.134.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6922f189-656d-47a3-b9ba-c6f10fb2706d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.135.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7de604d-6a0f-45cb-8439-bb3be725bc20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.135.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad7c25b0-706f-4c9c-b4ac-44b4838a25b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11cb3cb6-3a88-4c55-b7ee-f0053fb23728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e56b24db-5f40-4313-968f-9f030bc28110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1003699-d2e6-4f1c-b9ce-d270827eb0ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.249']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15dbe348-ed83-470c-9744-1aa464543261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--249a1471-4d9a-4032-8f92-c414110dd1f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--572b1563-1e9f-4815-9cd6-ffd35caf010f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.182']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f5460b-4420-46e0-9197-64004943a6d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9b2bfd-c9ba-4336-9dee-8c340ef0a642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.140.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32555213-eb26-4118-b22c-25b435ffbde3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.140.230']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef4b942-143a-497e-a2cf-e8565e9f4bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c20dbbf-ce62-401d-908f-4683e6740799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.224']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94887720-c671-4848-8550-e6108a04a7f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aeb4a73-7402-4489-ab46-68f6e7d2b91d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.176.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eceec770-07e6-46e2-8f90-c5b428b36983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.54.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--111e44a2-35a9-421f-88dd-2fe44aac1363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.56.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd06e668-e519-4416-8e78-e2925f831f28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.82.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0171f7c2-8f33-47d4-9f22-0dfba4c959dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.89.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--672b97c4-ab65-49a4-9613-92a555cba099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.11.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac0d628-53e3-4274-a664-a1b20b770923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.113.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec6ac8e8-a0f0-410e-a03e-0fc0d985c227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.12.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--980aa33b-ef98-4de6-a91f-d3003b24ae8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.122.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0c838a-e0a0-44be-8ad2-eb8760e4ca79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.122.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0330c543-9281-48aa-a57b-5c56f7b2199b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.122.163']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d349c348-ad46-47cd-801f-c9cd57b266d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.123.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf49771-ff71-4aa8-b4c9-3927bff3a0fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.124.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a056775f-ccfa-4543-80ef-94cb11aea876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.127.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d9a9dc9-5066-4a89-838f-43ce919330da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.129.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebea3e0b-d419-482a-ad7f-d14ace1eb313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.130.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec14682b-3e21-4e65-b400-279f196c5738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.135.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f865d3-2d39-4463-ac38-d3b921b8065e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.136.112']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7081f613-bd22-4bec-a66e-dcddf0ee7880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.136.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9d66482-5902-45bb-9b62-3b83409dd00c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.136.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b398ba92-0efa-46cb-862e-f8084a018276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.139.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d68db27f-72d4-4761-b074-99dba8b3ee32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.141.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaab7f68-5eba-40c6-8be5-d95922ce0724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.141.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0de6c350-c18b-486d-8611-7c73d6d68389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.142.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e00bf5-1752-4025-b984-c57af9307164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.143.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a8ee9b-688e-4dbf-879a-4ae847f87c13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.148.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa3fc6c-98fa-46bc-a246-012f5684943d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.150.150']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afde1d35-001a-4aa7-91cd-1d0f794185c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.152.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da73f08b-8014-4daf-bdc9-9d58cb236c31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.159.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab45cac-e120-4b04-8895-a2840079a030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.160.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752804fe-0697-4007-9a4e-555c7e34d53e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.160.243']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37b314f8-87eb-4437-b0f7-59244b30598c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.161.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ea7f63-4c16-462e-9119-cd8b27fc412b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.161.62']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--659dae25-ed0c-4956-8a96-ca54fc54353a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.161.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0044cac8-194b-48dd-85a9-5f77696035c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.162.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474aad39-db02-45ec-b927-35dfcd816c57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.171.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e53083-a7a5-48e6-a10e-2dc0d630689c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.172.64']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b72498d-5cbd-495f-aab2-4b49d193f062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.175.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b142f87-3a44-4658-add4-53c00676c49d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.178.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23956d4e-c1b9-4fb4-9167-0d060d059ccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.179.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c049709b-7dbc-4ea4-bd01-c53d2adf1b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.179.242']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cdd23f3-0cb8-4e7c-ba5d-6b6578f5adb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.184.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d3c7a69-bf1c-478b-8769-8894c21befbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.185.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c4f412c-a48b-4bbb-9a8f-7b3dfe5b7dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.186.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca52bc5-1dca-4452-888d-6e6bbce458ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.189.193']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73661952-8082-43be-aea9-28064b73c502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.189.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b47c285-992b-4aa0-a194-5e125f1c361f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.190.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1b98963-8fc4-45a9-bcfd-90d2b11175c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.194.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fab34a4-dc67-4065-b612-086fbd090584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.194.184']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e58340e-b72d-4b90-a310-6f298ca18ca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.195.84']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc14fb4-baac-429a-a898-b0ba1cd318ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.36.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5564b3e-0c24-4eba-acbf-e83abe10fbd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.37.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f99f112-6e54-4844-b199-fc2c951ff89e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.43.129']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd5b44b-20fd-4a08-9e6a-8382fc30b993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.44.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fbe3c01-9aea-44ea-928a-4eb728a53949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.49.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7bfee2-f124-4bed-af2f-4fae262ba7f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.50.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c39cae88-f0f4-458f-beeb-da5fb8dfaa15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.51.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e88b7cd-fbb8-40c3-95e2-88effffed0af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.54.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b65fe21-895f-4f0a-b6dd-920bfb7f1dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.55.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c475600-d40d-4324-850d-36584f281f42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.55.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b08052-3275-4ddb-bb6e-143817ecf389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.57.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6007b40e-573c-4ce9-83e6-2bf24969ec06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.83.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8d9ecf-d546-4bfd-938e-217558ff4879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.87.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce279c2-3836-4181-ada4-46072d26aae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.89.131']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae12f845-22a5-49fb-b185-06794b9adb07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.91.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f828da-8008-4d02-9b64-862475f6811a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.91.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c241330-7c15-422d-a3e9-e815e673002c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.93.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9472e34a-4306-4ecc-a22a-e742d9f5562f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.95.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13982136-5bcc-48ab-8294-07aa95d70874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.0.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c391e9f-a659-49ad-a932-91f94dc6dd39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.100.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b74ced1-08c7-4ea5-89a4-120526e3f84c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.101.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf357c50-6c6e-47b4-ba3b-7a5b4cd18889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.101.253']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c930328c-4638-450c-9601-456b7cb27042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.105.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc4f48d8-c6f8-4857-9db9-31b9efad8da8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.105.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f72fa14-2a97-43f0-9b79-18553684308d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.105.241']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffebaaef-9469-4065-ac7e-e45adcb3e76f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.106.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edfd892a-eaec-41b4-9c7d-c02ade0c03d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.115.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--198447fa-3885-48b9-bf29-cb5f85a1c1c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.116.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d3b0f08-3bbb-479e-a515-3b2ee1b94375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.117.187']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--603fb68c-c967-47da-bc54-6e9e15b401e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.117.211']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32112cd5-6e2f-4c8e-8439-3c0ed9b67bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.117.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a02b6adb-1877-486f-b6b9-b61d34b134d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.122.225']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6521202e-e07d-4c3f-9542-eacd17c8680b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.122.246']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f7d78b-06a1-453e-82f6-f3e30ee9222c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.124.200']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--608bde01-d4d4-484e-a36b-44c024a9802a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.124.51']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b4e108-daf0-485f-ac77-ee75a2af4738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.124.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4497a068-3e3e-4f61-a557-3cd79eb3c388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.126.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb99928-562c-40e6-a235-7ba092e74194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.126.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07ec38b-7107-40ab-9f8b-6dbb625bf2f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.127.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecdda0f9-0b5c-4eb0-a55a-c1268d1edc31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.127.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64a192bc-18c0-48d2-9a2f-9379d427b200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.13.59']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abbbda55-1780-49ef-b131-bd84e878bbba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.140.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53e655fc-b12d-4034-b6c8-f5b130885684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.141.186']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fee1913-773a-4422-a9d9-a1e2c54e5612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.142.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69cbbcce-d6a5-4a6b-8bcf-b4000890ef43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.164.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2acdd77b-8bbd-45f5-a9f3-980651311460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.166.182']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d04b7cb-c70b-480d-8251-ecb5e64bbae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.166.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60271119-0a11-4352-b22b-e2e940203143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.168.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f42ce193-76d6-4c8a-93c5-57b52c5b37ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.168.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b6b481-8059-4201-a8d6-da4bfc9ac847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.172.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8b27c89-2889-40d5-bbd4-4d0633cc0267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.174.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c371cb33-1e7d-4208-9c24-67118af5a3a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.176.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f980640-cd1a-484c-b38d-3287f637048a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.176.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ae8ad36-3a5b-405a-a6f7-16c631050e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.18.56']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4398764-c972-4092-9192-bc82c2a7c7d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.180.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af3835bf-a81d-4512-a78e-8842fc765716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.185.187']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f2246c-eb51-463f-b66b-42efb8976356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.185.192']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e802d359-1918-4a90-8368-e95dbd8c1be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.187.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c3fd4d3-4dc5-4764-82a9-7ad68e427e1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.190.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84675936-c9db-4a26-bfc1-01a1ff951177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.190.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc7befe-692e-48bf-8ff6-485c91df52c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.24.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2ddbb7-8be3-406b-8d2f-58636cef3347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.243.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5185d2a4-4085-48bc-bacf-977d4e78a99f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.246.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f76e3da3-0348-4ea7-9470-4a863016f447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.247.182']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66c92852-f9d9-4306-81d7-91169979c7c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.248.165']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad72b77b-5f51-4bf4-84d2-ada906cbe54c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.156']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf80304-f5c6-45ef-ba94-31b4226ac274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--027c3baa-002d-4cea-be2b-150b397d29aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.238']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc1ddca-3c7f-478f-9ebb-dbfd1c55128d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40fb1b7f-577b-47e3-a151-ec810cdc9feb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.251.225']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac50e6c3-7ce7-4740-9dda-ece28c9c0610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.253.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b11f3e07-4c1b-4cee-aae6-2d7244cf6a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.26.195']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca205a77-91c3-4412-a23b-7c34802a692c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.26.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f476f8d-f726-41a4-b342-3a2080c63444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.27.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1637dd61-6d87-4c68-8c79-64705bb6a323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.27.189']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91c95e1e-c317-4101-9b7c-a0cc295741f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.28.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--749fa2c8-0598-41b5-8ebc-117c74c34a31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.28.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57a5e57b-0a45-4ada-87fd-c45cc15dedcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.29.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d04a658c-eceb-49a5-839a-2d3f71f11b21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.3.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d3246a9-99f5-4b43-8ad4-a0b92c82b999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.30.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c9577f5-57c6-45ae-a98c-1e10931a88dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.35.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e1f4a7-79a9-47cd-8b38-7d91c696047c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.42.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3cbc653-6a9b-4403-aefc-783aa3cd7fec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.42.170']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca94d57-0d05-4c3c-88c8-f9741ce10dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.42.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e78b2d41-7c69-47e7-8f5f-fca5698d71e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.42.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b6f68e4-91ab-4868-aea8-e3e9ec6ef26e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.44.36']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eafab26c-4178-4fe1-a614-fa802fd66dd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.47.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db2dd31-6fd0-4723-8c96-63fd0a6722d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.48.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b19d3e6-58f2-4e52-979b-5dcbb122e715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.49.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50362d89-7bd7-4112-a0ec-c6c1a010810d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.52.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abefec45-ae4a-4174-8624-e5d51d86e49c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.55.106']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8389b483-a7b1-4ef9-bbe8-2f95f280d904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.55.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e5e249-c579-4cd0-864f-7f3cdc5730e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.56.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d81e15-2836-459f-b9bd-bae3994656af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.57.96']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cea6e5d4-fd1d-4d14-a237-6cd3f1468b2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.59.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d9aee2-9037-4984-ad79-051cdcee649c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.59.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d3131cd-fbb1-43aa-87d3-857067a91358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.62.188']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd34396-052d-4108-b435-887e112d448e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.64.158']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d32f6df-fef5-41dc-8171-8558d44413a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.65.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e35c0b-6a50-48d0-81a7-6ba74a3f9af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.66.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1433060a-c830-406b-93e5-b2c62f6fa621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.67.182']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e63b1b-8652-4c60-83fb-6694ac20230b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.68.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5adade9e-162f-42bb-aef3-fcf3f260e84c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.70.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f62d4c-88f3-49fc-a967-d38fb4d4f304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.73.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b835e666-36e7-40f5-b0f9-b0377fc1ba5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.74.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e05466f2-c707-48ee-bbb4-65bced24d482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.74.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ccb16ac-570f-4398-97c6-3be5c1dac5f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.74.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d01a498-cbf0-45bc-af48-7738df6ad697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.77.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b89dab-c3b6-4a72-bdb3-ca2cd921c594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.81.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--372ee0c6-5cae-4164-8e76-adddcd78bf99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.81.246']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8923a3bd-9488-4f23-8de6-4995936d2deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.81.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ec174e-ab46-4521-9304-de534d499bff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.82.186']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562dd71f-912e-4f77-a8d5-cbc27548e68e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.82.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ddabb7-0263-4160-8a0e-036007c2e294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.85.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73cec2cc-962f-4701-86c0-67a7e383a30d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.86.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc3ae4e2-9550-4414-9d7c-ca978642d90d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.86.217']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--210916ad-de2e-421d-87fa-94858e82214b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.88.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ba9c07-b016-486e-9db4-1f1247818fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.89.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a01ec2d-30f8-4824-9a5c-b9a04f9ac0da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.92.96']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5fe6a1-ed39-4627-883b-d4abb043c916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.93.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f5e07e1-0722-42b7-9d65-9e6d9aaf0183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.95.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d1bad2c-ff9a-4c8a-96bd-7b172afa1aae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.96.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efca596a-7c77-4ccf-8f32-5220e9d88b04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.96.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2cca21b-0430-4197-b438-ea08120df8cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.252.19.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba5ccea4-e323-4e55-9e12-dc0b62241522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.134.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ec256fa-b846-4b75-96ba-c61aebf5f3a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.14.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a0c179-6c7b-4cb4-a5db-86f786673986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.143.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e9ec54a-4bcb-4f53-ae14-97b4bc854f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.144.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--960b798a-d7f3-4e1d-8a85-6b48b227c060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.144.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2551f1ea-c0ed-4a23-9531-7c6ef2829a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.146.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b82e23e-2a2b-4371-af6d-25aa7022d1d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.148.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d13d2bf-686f-4c4d-bba9-d914659f71dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.151.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42aea973-8b93-48f5-af71-1ceb255c0a56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.153.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88940e0a-8853-4245-bd2b-b77de301d03e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.154.232']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbdf3a05-e992-4c11-a6f7-a315b57f6bff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.155.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e5376b0-b29e-4435-964f-33be7d9c84b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.156.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1972bd8f-d575-4918-86c0-19b14fd0c3cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.159.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dc19d63-6620-4f9b-8b9c-e0933e8f2751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.167.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac9be95e-16ba-404b-b08d-a0d0300d5cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.172.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4073fc77-adfd-4298-a2b5-a4610a2e7da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.173.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e28d247f-0832-4286-85ea-19c15ed9c8b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.178.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8540945-7d53-421b-97a0-5cb427623e29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.179.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ec1147c-e91a-4200-a369-2cd58d393a01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.184.200']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb9eccfb-cbd9-416f-96a6-86210f05cb6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.192.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b0b643-cc50-4176-9e44-d5a1eb3aa4a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.193.63']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b8c81d-a790-4bd4-83fe-35f8bfd1a177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.195.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93a9530a-28fa-4b28-b0b2-0af0eff08025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.195.162']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58cf2593-c343-4db1-a955-eb0b9c8bac70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.201.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e264fded-958c-4183-9c08-0367d271ccec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.202.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c062bac3-5023-44dc-94c7-bb054ed5b17e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.202.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f89494d1-13cb-4aef-b6b4-c14007b09bd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.207.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed5e7209-98ee-4810-8947-bd83095cd043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.207.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56df6547-0015-42f7-aa6f-04f3359e196c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.213.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c94649-6b18-4383-a77d-17560ec48dcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.231.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b83a82a3-ba58-4b81-9dd6-a1095ecf8e79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.233.150']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48cf5d50-75bc-4be5-aae5-f435904e68b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.235.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--175feab3-bc4c-4bf8-8749-f67f135ab5ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.238.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2162c51-ef01-4a08-a0df-b2911c25ec23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.239.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef56408-b57c-412b-b0b9-0c45fc794a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.241.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--081d1a82-ee91-459b-b7b4-cdabbe3075fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.242.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--524227b1-cd27-4be4-b2e1-07b7240d810c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.244.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbfe9fc4-1aac-4062-92b8-d98063b6012d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.245.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83fe01e8-f024-4f6b-9219-014cb540d385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.249.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--148052e5-a79f-45a4-9ebc-c7c386384b9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.251.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d1aa80f-3b30-4c99-9024-7e443ffcdde7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.253.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32933cb6-d151-49fb-bedf-f01ee7375e27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.254.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ed12462-aebb-48b4-bf35-082f8128c978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.255.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bff38b21-58a9-451d-831e-59cbea2970fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.32.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d318bca8-81b0-48c9-8c11-6aedf658837b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.36.112']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2cc2473-ac14-4288-a60e-596344163d86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.39.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f8dbef-cc5f-4ef3-a9bc-dccc23cb1ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.43.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d448e8c0-1c1d-4c6e-9574-a3a877769108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.44.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb7b437-bbd4-4395-b51d-95dc2f91ab4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.46.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b23940-9309-4f4d-a622-68d7a8794ccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.50.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2362ade1-a1f5-4be7-863b-b1ab62ee6e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.70.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb27547-898d-4851-a2f4-f1a460d75ef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.71.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--824b62f9-e2d8-4d68-8cac-0972a521de96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.72.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d6cb99b-b4cd-406a-a626-9d453fd14116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.74.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9d1df1b-2c72-4329-9287-514c98cd6227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.84.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd305fa-73d3-4d9e-9e55-4d0ca1012c09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.84.190']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33541a19-2389-48a0-bda0-f5487c85ad55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.84.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be630338-d231-4110-9e45-e674d473bfc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.86.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc736a2b-bebf-45ee-a9c4-3c4631b679cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.13.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--570de263-aa3d-4abc-b0d1-341885dd2036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.15.96']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e183ed-f6b1-4400-bc48-8591cde76423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.19.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21eedfd4-a5ae-446a-a63c-d15b7f0ac399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.26.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--300478db-79a3-47bd-bc57-e6331a882c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.4.253']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe628e05-3f39-4a3b-ab71-00791544ed9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.5.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec70cfde-8827-4afe-96f5-988d640f38d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.182.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ad7359f-0e62-4fad-8b7a-088a71e34a4a", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.190.158']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91187176-151e-4c66-970e-4f6ccc5ee876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.214.160']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--489c6ff2-b4f7-477d-90ad-876d597fdf51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.215.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--542e331e-c0a7-46ba-8f5d-d8f36cf2cde5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.216.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2350307-084d-4ea1-bd77-c300a47dcc29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.217.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd62b1f-212b-43b7-a2fb-d39eb3d25fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.218.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--525318e3-afe4-46c3-aa53-9af53a8fae94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.219.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9fcfecf-1bf3-450b-8f10-1ebbfaca28d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.222.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83df7759-15aa-442e-a800-2d5ed696bb98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.222.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3251c21e-ffb3-4b21-a74c-d620f2941b87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.223.200']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89b55798-c3f4-431e-b07d-28ecac1c5e85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.224.189']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--892e8500-a9a8-4ce5-9a7f-caaf5714aa66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.229.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04f20b0f-449d-44b7-8eea-cf59302275af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.230.225']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c431fde-dfe2-4ee0-b0bf-816c889d3a80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.231.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d26ade00-2084-4e7f-a656-0c078149fab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.232.193']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ab5f15-1d4d-453b-8105-e1eb222365d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77120f6c-4191-4253-b2fe-0a65746f3f05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.234.253']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6fec57f-0e03-4c35-8bac-e6f8744933ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.235.195']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad27363f-f085-4d6e-bf98-ed0e54f3be59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.235.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ecddc4-0926-4885-ad54-f6ddfc278e67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.238.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf4a54be-fdc7-4048-9306-f42ab292ef46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.238.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88eaa0e0-afb9-4113-b17f-8c92d0bfefec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.239.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df6f997-891d-453f-9a5c-c69e6c5e39f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.80.62.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a3595ce-1193-4728-98e4-62ef1ac0812a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.83.148.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aaaf6ff-a328-46eb-bbb0-f752aacae357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.160']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1607f10-e6be-45f4-a93b-dd4623caf3be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12451562-a9cf-4529-9ede-8de0c7926754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23fd1b09-f9fb-479f-95ad-779feee5de2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6387bc29-1067-4677-8295-a655d1e037f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1240b927-cdba-4f5c-a94f-f543bca0bd03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--168241b0-f322-4bb7-bb7b-119964fa504f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.158']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--776aab1b-f4bb-40ff-84c4-dd6cf0480fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.104.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84252f74-9afa-41c6-88ce-2e9757947ae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.131']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f9e9a8-37ad-4ff8-b79b-78c39d57d88c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.163']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6781b325-c97a-40db-b079-2f25b9730318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.106.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a9a2976-831f-46ca-a0c9-e88c1df1e8c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.106.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cae41f6-fea4-46eb-b09d-3033d6473af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.106.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e733e11-298c-4350-b89f-a95969131f73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.106.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b957eb41-1093-4987-8efe-409bacfe6226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.129']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf978b6-ab4c-4412-b009-c22f6b8072e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e00a66d0-ccbb-4cb9-9533-0b1ce8f24f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.184']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9651123f-1cac-40df-aac1-3c8de1f883b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.254']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b79c6545-5a11-4c13-8049-acad55c734c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02345d3d-0116-4f8b-93db-f37de3c78269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af6d6844-b903-4998-b7af-704cf3d8d505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77f3a7d-6726-4bbf-b19f-064e5b9dc2fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.112.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dffcfdb-fc4c-42a6-9dcc-24807c1d9aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.114.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5284c43d-7d89-4293-90a2-5b8543acd2fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.114.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34ecd1bf-64ea-4ea9-8924-5b66137863d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.116.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8508f66-de50-469c-9e4a-fac12bac9b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.116.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fdbf19a-e5bc-49c2-b36d-1b9ba4310681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.117.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b7af4be-a812-4c0c-b5e8-b2d4aa2f8872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.117.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c497f1ed-2572-4c82-8657-8008d3a168fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.117.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43939111-17d4-4a29-8aa9-763bfaa3cc3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.130.199']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab28fbc-20d2-49fd-ac22-0f3d7eb2690a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.131.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0d478d4-6d2a-4ad9-a3a1-751e07e69ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.131.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d92425cd-347f-4ee6-994f-2b61372972a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.132.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41805212-2e04-490b-b3ca-e6f031cd8222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.132.182']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--258faf3b-8b9d-435f-b03d-d2fa4b994181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.133.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9026e0d-072f-49f0-823f-b7e4b90b9617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.133.242']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--491bee70-6d8f-48a3-a6fa-ffc74f24eea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f4368e7-29bf-4d27-a4c4-8b884b91d6bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf9fe0f3-6079-4892-a4a3-ef352eeae2eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.135.131']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88a43e1c-b593-4d49-947b-36214a57ee69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.135.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faef106a-6953-405f-9d52-37facaace5a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.135.183']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--155fc65f-ea57-4681-8c06-6aabaaf296ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28edc11e-3e56-47d7-bd61-74f86472cba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d72b29a6-2366-4608-b4de-5d96596ba2ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c69c861d-c0b9-4372-a599-8791068198e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a5cb83-85ea-4ffc-b731-d194760448bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c56f93-4c60-4667-8830-278bd294225b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48250952-e8a0-4939-be55-48bfa5932b22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314a878d-40af-4ab5-b594-49f7a45672f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--139e619f-98a1-4841-a69b-6a7d3580f0b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.182']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ee947f8-92f6-4cfc-b985-6b9830348c95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30bbd1cc-e2b6-4b28-9cd8-22ea388d8ead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd8fdad-0fe8-4a31-ac28-95b010b068b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.0']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b26cf81a-ea1d-4bf5-ae1c-4ecc1f613f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f098fe4f-2f00-4bc6-9454-9fb6204635db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eecab3cc-3e03-4c4a-93c4-1f916c443906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--832afab8-e738-47f6-ad41-ce0fa420c3ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc182a0d-b617-4ff5-8eae-04347904f38e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a83749cb-973f-4e0c-be4d-2fca823566f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d12056-819e-4502-b7e6-d0cd6a4a4628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.177.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b8d9e9-34b1-4c7c-b939-9f6cab380f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.186.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6415f6cd-b1be-4b1d-aa49-49eae1e43a53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.188.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ad981b-83e5-4a48-80ee-15ad37378440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.192.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf651d4-db07-499d-a831-7153eed03130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.193.254']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21cfcc53-6330-4e38-89f8-bab6faaedac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.199.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5830f94c-e85e-4470-9d2e-3f242f8c3069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.199.64']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--706f9d92-54cd-4e18-8640-bab23c91ccbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.200.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5de7a8f-f8b7-4d6a-80dc-167068ea5283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.200.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--617812cb-1fbf-428f-b8b2-fa90e3e75176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.203.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd77e7d-1755-4aca-a364-ee5bf46c8576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.203.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4412a02-4b1a-44d5-84bb-a975fac1754e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.205.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab06fae-22f3-4a95-9736-d02d3157af7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.205.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--962e1668-46a2-43fc-8205-2b8300247ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.205.167']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e060d3a3-3c8b-416e-8775-192a4fa7be54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.206.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f727e1c-3b72-4c99-b808-c52c6812dbe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.206.49']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b74157d-7e88-47bf-85b5-32dd795f618d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93cec63b-f360-4e5f-9608-64c943291daa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.192']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--489421bc-05f7-4e08-9300-cdcb547dcdc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da2d402-0295-455b-9579-b01d0349ec34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.240']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c4d7ab9-7d2d-41a7-9c37-b7a7323927bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46807ff3-b218-4912-8c4a-d60efc3f4ae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.55']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77727458-421d-450b-b0ec-9c58309a6e5d", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.46.159']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e42cd4f3-dbd4-4088-8cd0-fc9a233604f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.46.241']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--748dec31-ecd3-4c6e-a85d-08e42bb52e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.1.163']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6327e090-9e94-4bc6-b574-5929dd19209f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.100.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b67951-64e2-4ea1-a3dd-c1d531fa5140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.3.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc31bca8-f245-4b61-a2de-7c6465d3bba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.35.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--997c5692-df2d-48e4-be32-e91ba45fa19e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.53.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--623bda54-e155-4709-b70e-570438bdbb3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.54.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac11e0d-a40e-48b5-88b4-966d18fd7b06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.84.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f575fd75-5fe1-4598-8164-4751a84e6a0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.94.171']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee082b57-7790-4a90-86c6-211716d0a33b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.192.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c2ab505-98eb-4d61-a73f-ae294a5e9e69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.225.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc485509-6983-44f4-8a4b-66ba258ed73d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.230.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea43ae40-a1c1-4e7e-ac75-14e76297f76c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.234.183']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--719705f4-2c53-437c-ac5a-b67a9f10eff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.243.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b46661-3c88-4e2e-953f-d86a29af007b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.250.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e5f0ef-37a3-43e9-9f76-e3bc5331ebcf", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.125.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7395d2e1-7862-4828-8932-2965815767c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.2.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f145ba71-ae65-433e-a27b-44ac47175fbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.25.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65f74e67-12be-429e-bcf4-5e6a6c730280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.31.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02ef4f5a-afa1-4aae-af21-a0ca4fd43a18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.74.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ba64983-151f-49cc-bc19-a1c0aeea7e4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.74.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc38e507-2373-4bf1-8508-095cbf2ffba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.90.160']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c3c40d1-7c91-4b81-a8ec-be8020b81ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.92.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0feefdb3-f6c5-4e03-8ece-4cd2cb90f922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.92.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d3d3f83-7fc8-497d-a3c5-3f489a14ef02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.94.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd78126-ff85-4104-bea5-5a825fd092a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.94.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8dcbb94-8310-464f-9c8c-03d4e2dcc295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.93.82.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--190ab2dc-cdd4-42d4-80c3-04748724bece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.95.234.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cb25e85-8c61-44e6-a3ca-86aa747d5935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.96.228.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f23b480a-4cc8-40d2-83be-fb4f8d8da88f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.211.213.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c9fd446-70f8-4181-98b1-40757072e9c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b46cef-a725-4685-a4ef-2040326bdf8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.160']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12c9b94-d93b-450b-83ec-467da69c6c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae61708c-da23-4fbc-97c1-e022b9fb8c2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d539e7-3e8a-46b2-862c-632ace30fe0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.53.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b61558e8-3826-42f9-9aca-e0d970ea6dc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.218.131']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02bf4896-391f-4bd7-ac9e-63771d04198d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.243.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2b58ee-a01b-435d-980e-8ac4a70f5163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.244.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d33874-c7c2-4d37-883f-ee56ce906a5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.187.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1000c013-1c03-4aba-bfee-4ccf02be4494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.233.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8113266-3736-42a6-94a0-68faf95e8b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.115.217.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd6057c4-0346-45e4-9fb3-657bba960e4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.144.16.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd5cb66-c9b9-401e-8e20-507bf1287382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.144.24.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117d4435-599e-4503-8367-c6792210ccc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.145.50.202']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd28ebe6-a580-4cda-8c3f-b80a56a373e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.149.173.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37fdf10d-9873-4120-8333-e3befbd275e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.213.153.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c5ee6e-b957-457f-adc1-64293563bad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.228.243.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9677f696-bfd3-460f-8104-e60dc4e8ae1b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.234.192.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0040c302-5640-4ad3-bf7b-7f439a8c200d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.249.205.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5218b701-1550-4ec0-a8fe-05d969b86459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.43.129.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--863ca295-877d-4d04-88c6-fd0ebf27f3e0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.43.224.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a956ce-0531-467d-a7af-0f9f076652cf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.204.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0edfa03d-5e7d-4d2a-9df2-198f00b79ac6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.72.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72136c99-aa28-466f-a14d-92a4b224ccc9", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.64.20.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb251ffa-8870-45ae-8815-20518deb7fe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.72.85.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--658dd5ef-3922-437c-86dc-32dd1cbbb92a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.73.128.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9832da73-c2a1-4e5e-aa16-16230f173972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.101.64.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e563edc-e9fb-47ec-a68e-8a8a36ce5036", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.112.185.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5b31354-a78c-4c53-aaf0-9179a7dbc897", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.133.192.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7fcf383-e9f9-4c54-b483-d361fc310e92", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.135.173.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82706eed-d3d4-4101-862a-da71d6a88047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.161.147.167']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb32f00d-d5a5-4cb6-9959-191ffc897de3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.169.63']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23494584-f484-4bfe-9004-2567b2b4d1e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.192.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae2f355-fece-4e9d-a06a-a512006b4798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.181.86.188']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--026a66da-6260-4072-8ad6-1d6a2b827c68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ef602d-1010-4f7f-9114-86230a1d947f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0357f5bf-aea6-438a-8554-8a682b7dbf2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b7bbeb4-852e-4631-82df-5d3f9f8d65a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c7733ba-f5b3-4412-b605-e61d5312b023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7acb24e-5ddc-4590-9b4c-e5ea42d89f82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0239653-eb8e-474d-8c96-64d01ffdbba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.189.130.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cd9962a-2e31-44bf-a359-d9b28639dccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.193.139.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a430b3-2985-4111-a748-21c9036b520d", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.2.124.162']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20bac942-9b35-44bf-82ed-cf42e276499c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.14']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3edac58-49ee-4e5d-82a5-816b6282c3ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b6421a-b45b-41f9-bc07-463c18ad603b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59b0f042-0695-46fe-8519-1c37edf23849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a291e8d4-2a41-4f15-866e-d2190705ea8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.230.201.253']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3663a2e4-2889-4874-8d75-a90916e4c609", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.237.106.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ceb14d-b884-445e-ab5f-93b72c497631", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.237.92.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d6bff0-0cdc-4a57-bdc4-1054f69f9607", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.237.94.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a8bf02-bb97-4f7b-bebc-2ea046906897", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.253.59.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f8fb0fa-bc1c-42f3-aafb-ebe8ce67996d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.36.101.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a3bddda-6562-4622-9cce-93df05569291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.36.69.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8386260-2cf0-4aa0-be99-3d2eefa4583e", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.39.49.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dd36fca-8ae7-460a-872c-fff6248b0141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.57.9.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd66084-b656-43d8-94c8-4d0afa75636b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b8428ce-c273-46fb-b881-3d622950375d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.224']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a24b457-fd35-4700-a19b-22a2b609c4aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e9c9a2e-3f55-491a-9c31-b5036838af86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2023-1389. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef895d31-9972-4b39-b30e-6f87a8361cff", "relationship_type": "indicates", "source_ref": "indicator--9e9c9a2e-3f55-491a-9c31-b5036838af86", "target_ref": "vulnerability--251356d3-ce40-44db-8086-e377a46c9bd6", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f3bc05-0828-4881-8ab6-de4dd75d7f49", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.44.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270dd562-0f98-4081-bf37-2a8898c1d9d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.78.205.169']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab5fd20-faf2-4306-9f0a-e8b4178f75cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9117a90b-6383-49d3-899c-062fb00c2e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.12.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8578b07-5bfc-471e-8525-d88333a8b673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.23.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0258d7-fd2a-4dd4-9426-1af84ba048f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.26.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d33ea488-8646-4cc2-8e18-7c3cfc23a4a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.32.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691a3d28-16d3-4abe-82d5-959845cc3c80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.33.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e90436a-3a5c-4c97-b120-bbdb5b3d17f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.48.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d699b14f-561f-4b3c-928f-5eb141c8dfb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.48.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d484fea-f574-4b1c-9462-25e9fe998ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.48.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e62375d-6a30-4e7e-aa66-f3d71cbe4847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.49.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ac5d92-ae6f-4993-bc46-a9d9c44e32cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.49.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7705af6b-18e1-4d9c-a6da-391e7a89ff0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.56.200']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0045d1be-b3e3-4405-892c-a5f4eeafec1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.58.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea80efe-4e49-47c4-b88a-e5cf0c6b5ebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.60.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329e09c3-a168-4d00-a906-fdb441d33747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.60.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff07139d-6330-4c90-85ba-a30ec83bc42a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.60.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb8c28ec-c9e6-4134-a3be-c8042a3e2726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.152.87.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f13afe32-dcf0-4f0d-8a6a-02c1e6a5d883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.17.59.188']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7edb26a9-28c9-4894-aa90-403b2c3ed87a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.19.29.189']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--414bdd0d-cb98-41fe-b4fd-7dcf7294e1f1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.234.242.238']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f61b6b8f-74a3-476c-929e-18b9a0bcf26d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.6.197.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9306a7f-0675-47bc-859a-79e8998d3856", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.62.135.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb714636-fa15-4969-96e1-d6132ab3258f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.127.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--776f4096-f3a3-4e9e-8d6a-17fa6f352fc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.233.211']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57911987-2276-4544-a416-fdadbd50e02f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ffc5f08-6353-4905-b86b-60ec80122af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46915cbd-6d30-4125-86ad-ed30ad6df069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.104.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ace56c-f646-4c2b-afae-3a6acccfb56b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.107.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b6b899d-12fb-458c-a9e8-3e870aac5b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.110.167']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a048076-ca0e-4b69-a2f8-1e2f0afba02b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.111.44']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff11c405-e94d-4ba1-b9b6-16a6e075d281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.161.128.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9dcd2cd-ba5c-4819-8574-5969e88a24e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.161.198.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--559168f4-dd7d-40af-bea7-cc18eee8c9ef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.195.183.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ad1b9b-6413-4c17-b963-0b5f40579f37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.210.0.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8255688d-2183-4b21-95f1-6949919a80a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.210.79.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36626185-67dc-4581-bd98-e2fefbcfa272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.222.40.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1539be78-40c0-4aeb-b65c-7a692addbd6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.235.118.49']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0922c172-18b6-4eaa-9377-a42c13ce611a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.250.102.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ceda434-744f-43de-9761-c452ec5f7c7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.250.105.222']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64bb779a-ecb3-421f-b8c9-6c3e99c2f167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.254.49.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dafc365-7666-470a-83d0-f8c5a8884b0f", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.255.66.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521469e1-bb8f-4291-9e45-42b0f9582e95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.36.51.225']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a0179b-cb82-4b0f-bd82-f828ad347b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.36.95.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c658a70e-64c7-47ed-8053-c7687ce9574b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.57.81.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc577053-b165-4509-a440-a62ad23c2b7d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.107.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f58d7fd-f3aa-4d1b-805b-4b2379601d77", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.236.91']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e73239-6fcc-442e-b1dc-bc1f7723dbef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.149.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceacf6b7-10a8-4f52-8e1b-31f1004c4ccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.53.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08dd67c5-948c-4e9c-a36e-af12b731ad30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.77.222.246']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ebddd18-7c11-4745-9a10-752eed3ae2ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.177.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--070a7080-e968-417d-9e7d-8447ca2013a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.99.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d02bacb3-b920-42a7-88a0-11956a12c3a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.85.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb8b7fd1-c4bb-476f-9f24-c0680db5af69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.21.59']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4875425-fef6-4141-bf0c-8287ccedc0c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.21.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d5102af-8e7d-4bf8-87dd-b2c87c73f32b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.88.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10597009-0963-4027-ad81-2f3466af7bc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.9.202']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e41b9ed1-e409-4cb3-800b-e6cc8feee7a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.161.178.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9cd32f2-abc6-4a7b-8d2a-773657897a6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.161.75.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51631725-2e77-4231-b087-0d87f1f36591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.81.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e940c0-4b91-4304-8721-40519f05f4e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.81.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9916c7ac-3766-4460-a37c-69d2013bb9f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.88.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81882783-c04b-43c2-b5dc-43764efb0c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.89.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c16368-99f2-4034-a97b-de8f3d94ca4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.89.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c39d445-ec4b-47e1-9939-3361e93f030c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--434ca339-d79a-43d3-8c1f-21bfce7117fd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.159']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e29e266-8843-4943-8702-495882edab1d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.160']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf73b85-3684-46e4-832a-7cb4e76f887b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ef55e1-fbee-4caa-b4b9-859c448baf2c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.170']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4567835-da4d-411f-9105-cad2d85b8987", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5bfc78-72eb-4629-a1a5-9783f07d71eb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc15a62-fb50-4b66-916e-b6dcb591a732", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.176']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d15d6e-3b2f-4ebb-bb59-6b92d877286d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--342a2762-7fdc-4bda-b3d7-19c8bf9b6e6b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb739234-1a0e-4ec2-b765-ae8bbdd43fcd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.189']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6bbcf00-4101-4220-8e4f-e1f971640be6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.190']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--206f6a91-8987-4b08-b155-c214a3bf0ca5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3273ec5-109c-4410-99b3-3be05dd8d8cd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6df97cd-76d9-4f30-9b13-4b05acf984cf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a891171-81b2-4289-9573-f06d8cf70b1c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.217']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f83bca25-f967-4412-a1cf-2152d80eba4c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0cbb4ce-a120-4794-b1c5-8d66f2d0937d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf3675a1-9740-4019-ab8b-ec5b9e485b20", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.222']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--684c032e-b348-4768-bf5b-7353f847fa4e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.229']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b76832-06b0-4597-ae83-22d06269ac0e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.232']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a29339-b5c4-4944-ac18-321889b19fd2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.238']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2fc0ab8-8c85-4afe-9296-80e63bbb77c5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--896aa168-5c3b-4bee-b1ed-372822f977d4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdac0656-4c46-4596-bf40-d533dec4d5ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.177.169.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b4c8f54-f898-4ab9-913f-8dc6bddb3a42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.137.14']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d90e63db-fc5b-492d-b547-1b7c927043b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.137.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50eb5f2b-d5d5-47b7-891b-47ef25270777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.144.185']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e444b8c-734c-4f3f-a28a-dc72537f27db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.145.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f16c0b54-0dc4-4213-add7-e478d79a54d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.145.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e8ea86-dde6-4fd7-a294-fb19ec9a7f32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.157.167']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a202e910-6d77-4699-ae03-dd39133d35af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.157.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc459513-2dac-4679-beb8-70e94bcf76a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.158.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec0d3fd9-60bb-4d3f-968f-5c5996dffc10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.182.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b318febd-6949-4444-9cb8-2a645f6d5b4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.185.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec8da5e-2480-45a4-9cff-231876a607b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.189.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8464007c-fafa-4b93-85a7-a94846fbf475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.189.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbfb1844-3e00-4599-82e3-899e652d7c0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.224.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb9d73f-c021-430f-96e1-77fb3a9b90e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.231.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96e79898-e0e7-4ca3-ada6-fcbe6ccd7eed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.231.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3912eff-1a24-4a94-af3d-5885068bd948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.190.141.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--525e3b06-84e1-425d-8f8d-48e8db2cf013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.20.198.190']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c87e82-08fe-46dc-bfa6-8ef87ef87547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.23.195.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--931452bb-57ad-4a74-a50c-7d079345e070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.40.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be14506-d663-4d07-91ce-c28101c8f5e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.43.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316dda36-d470-46af-8a05-68d07e0e138a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.249.221.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a086f25f-24fe-43ba-a258-db2daae777e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.36.131.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa7bbb82-943b-464c-94a3-092e54f8d53a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.72.125.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c0c340-449b-484e-8e74-253bad44aec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.72.180.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6d4ed9-1faf-4f2b-8ab4-775605131363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.90.78.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73fc8440-8329-4176-815d-8506e8ba7efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.91.175.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d178c3-3528-4f7b-af6e-e532adc81222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.91.2.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff1c143-d0e6-47e0-9738-2ee6cad32ebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.91.49.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd610be-3635-4fd3-93ff-795d9f762ea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.91.88.129']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--993619cb-9094-492b-b58c-a0615fe6a53d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.144.112.202']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c5430e4-4f99-4742-8b91-52a4bb95b17c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.147.54.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--defd48f8-945c-4927-8e53-f38003d46e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.152.10.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ef8473-4a0a-43ab-b93f-c669805a6957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.153.37.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c77dc22b-07d6-4750-b2e5-7b1f503a469a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.160.129.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e19e767-aaa8-42bb-a0ef-2e1ec4b8ab67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.163.219.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad1f1394-e4ca-421f-be06-6b3493144245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.163.64.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fbdbd50-2c4e-48b8-b5ee-4d576b66c0fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.167.52.189']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f66c4c08-8d0f-45c0-ba1d-cf5eb5dec135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.172.193.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f594dd04-0173-4721-9d5e-03059ab49326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.173.97.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c779191-42b5-4add-a85f-dfe1d459e25a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.183.244.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44fe4fea-40f5-495d-89c2-7db5b20abf7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.196.134.173']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a5d87fc-8dd1-4079-bce1-93853838c1ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.197.33.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--952c47d2-1523-4ff9-8f23-d94304849bec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.208.18.165']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e82718-390e-421e-bed9-e90c503b251c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.221.74.190']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c899ebb3-0a95-4df1-9a1c-acc2d7348ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.226.104.184']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff6aabbc-a19d-4c7c-b423-92ab591c1f76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.226.193.192']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a5aa1e-f959-4240-8a31-c09406795586", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.226.9.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88199f1a-16b9-42dd-bd22-2b5c0b92b083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.234.161.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceae60e7-a3da-46fe-b4f2-9b73d550d306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.234.228.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--232b1723-7cc1-41d6-9236-f0d4d251610a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.235.57.254']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b61afe39-806a-4850-a095-ff1f17fca3c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.242.57.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49552281-a861-43f2-97a5-156a066fd6ea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.39.184.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2059fe04-3dbf-4d7b-860b-7217cede1a35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.82.5.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f914b140-63f2-465e-a76e-a4d62192a93c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.84.219.14']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a86fc389-74b0-419c-9aa9-11b2c97a54b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.85.150.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44abad4-7880-4388-a2dd-adc629e4a0fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.87.22.59']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb27b282-82e0-4011-9e99-76bdf9f1d10f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.88.169.158']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e16f3f96-0281-45e4-875f-6756018773f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.91.3.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21fdf966-4677-4c17-a587-d755e39627d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.105.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de8543f3-96bb-4838-977b-d3d20a6705c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.98.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5104d5ab-ea85-4eb0-a225-d7ad0e35a448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.99.52']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--696768d8-d27d-4754-a3be-83530ca67975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.99.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe450813-5918-45cc-b084-bb2843082f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.152.34.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f783c31-9029-43f4-a03d-ed387fc402c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.159.30.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065834c1-8394-459c-9e7f-fb20671168ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.136.169.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0dbd826-a98d-4065-a720-5a0f20e2a6c1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.144.196.164']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30998382-1118-49b3-bce4-4fb76f3e6375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.19.105.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef78472d-2a51-4ea0-be8a-546382aae453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.19.107.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc0ff31-4bf5-4307-a5b4-548c4030d77a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.215.186.186']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51086458-5f2b-4adb-baf4-aa18aea12a2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.23.69.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e5e1550-2269-4a7d-9367-9128bbba492b", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.254.16.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74710d3e-4164-444f-8f90-10fc09e425b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.42.204.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e44f94-b04e-4288-9bcb-c110e627b427", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.51.63.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e2ea27-6cff-46be-9030-ef29156d6a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.69.107.206']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67560bd5-afe5-416d-9e4b-7bd1f849c138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.110.239.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96f9bb0-270a-4324-ab67-ac77e2b9c4ab", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.125.215.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46722e68-ccda-45cf-bc67-1ddf04687eb6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.180.165.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9971acb-70c8-46a0-85da-cc6af2e09c0c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.180.182.164']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--539e734b-2776-4e78-aa18-27c2fbda093f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.23.100.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f26beea-e7b3-4085-a356-16d89cb41a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.52.103.188']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d6576d-f248-4b33-b2ec-539a0968e6f7", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.12.218.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6213ff70-7cf9-4ab3-904d-7368bd626162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.13.6.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10eefd25-cd48-4646-b3f3-00a7a25af0a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.13.6.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9417a156-814d-4296-83c4-19dd3c33b64a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.13.6.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f35ce4-1903-4050-8cbe-2078bc16281c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.16.199.249']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd5df23-281d-4e59-ad00-a08fe9b4acdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.16.201.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d834c2a3-99ce-48b3-99c0-c66fda62987e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.16.217.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f561062b-7991-4e52-8381-230f5b7c5311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.166.82.164']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0622864-92e6-45f8-a03f-a96bbb2a3fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.191.125.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf11d62e-88cb-482e-a53c-fe353210f0aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.204.77.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a92d7fc-f41e-486f-b6f9-e60b2eff12c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.247.168.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8417bb0f-ba0d-4dd9-879c-738e599d2636", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.171.99.150']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd87869c-e31b-4762-8918-cc54ad7de63b", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.174.210.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d01c0ff-47e8-4e89-b9ce-1964c57554c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.182.2.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be83c7c5-6282-4933-ac52-c67697aa6ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.19.208.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd3f6db8-5d56-434f-a6ef-d438119c89d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.242.178.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d9c858c-9084-430e-baec-10f2bd63a9c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.245.120.164']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d5115e-d156-43e4-a183-9aac7e9ff609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.245.13.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2fd3814-4fb5-4dd5-b144-77d5889d8abb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.9.8.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f0020d4-0dab-4f10-8e1b-546c4708c1be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.133.62.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ed0ebf-26e1-40f5-a539-459da804881c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.133.63.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6239b69-8491-4a6e-8ab6-29b4d4ae7bdc", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.141.63.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f67ed0f-8b79-4e98-8c01-c23ed1667890", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.179.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fdeeff5-8f3d-45b9-a8a5-bc5aab45d0f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.182.85.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c8175a-5b7b-49f6-b786-4f99867f20a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.201.202.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62dd29ec-b045-42cd-9f9f-ce17f54a4723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.189.225']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c471a92e-c4fe-4553-a03b-d40923fe2cda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.199.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e566aa2-b25c-454e-a7a2-1df6c63b529b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.207.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a243820f-e0ab-4ee7-b997-2f169d0e4ae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.209.225']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff24d29-97ed-4a49-ba3a-f1ec4cca208d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.38.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a68f715e-f041-471e-86f2-4963e1bdffa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.221.127.224']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a3c385-be6f-43c6-bc46-680b5d266a9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.228.126.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f37da44c-7903-4322-a655-6849a4b48617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.234.160.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f162490-ff64-4e71-b0e9-999edfd84b05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.234.166.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9333879-fa00-42c6-b94c-9b5d1ace2f02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.131.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8add1e2-1061-43c5-a470-7c277fc8d176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.245.173']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41428a87-baf7-4e19-8200-4f121a2a24e1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.84.183.147']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b58006-abda-49a7-8e5e-c22562a25ecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '63.33.62.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a961131-56d4-41e5-9ef7-a491e2413a66", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.118.144.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--377a2034-a3d0-4fbb-9624-be9f20058c97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.137.188.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--115fd0ca-dc6c-4674-baa6-b9776b828d63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.117.129']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26912c8b-e240-4f16-85b3-dbb5968e7a50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.30.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c80d941-73fb-4a48-a1b3-eee4c8f5d518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.36.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--181047b1-7851-4e54-ab4c-e6293e09fa03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.50.193']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c44e17-cd67-43f7-8229-4a9db42b2c61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.71.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1e0887-80a9-47f4-9198-4f8804f3d037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.72.195']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c80035f-5e12-425f-8b04-fb7b59d4c8ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.93.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1edf4e3-408f-4161-90b2-b9347fdbd96d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.102.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24149242-8176-49d6-8244-0ff70e019ddd", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.107.192']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de56f5b-dbb3-4b07-9bd1-c2493756e9d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.12.52']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--381caff8-1409-46df-9085-2b8b63259161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.129.44']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec23c9c3-43a3-45f5-a3fb-c10b59a75a95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.138.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d28d7f4a-e695-43ef-bb1e-0412c04bf16e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.15.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e13b183-0bc2-4f7e-b927-c130f8f65153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.170.224']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ab7af2c-4f8a-4138-b153-1e656cf09a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.172.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8091db2d-c70c-4bcf-9d42-247bbc61ef63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.2.1']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--716dfb37-3a3f-49d5-86fc-2383959ee1ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.43.139']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb13ee7-73fe-44a8-99bc-0d2592783a71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.53.188']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1956627-8ebc-4fa3-ac8d-d7a55b38e868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.82.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd076ebb-9553-47ae-9acf-93c1af0758b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.82.187']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54fe8916-bda0-465a-a9ca-87eda04bc9fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.93.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c146e3e4-a60b-4d87-b78a-4376c4bd1f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.149.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d107fee1-bceb-4228-910a-358b8e80c880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.206.163']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f1f7b3-c4b5-4c63-9112-f84823bd1605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.218.246']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37394b67-da56-4173-ab39-83c915d5649f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.236.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab1aa2f7-9d18-41e7-92d7-034c7b148549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.31.53.170']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a43fe0-af7b-404f-940c-a265e8b9d922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.41.183.135']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--524f1ad8-7134-46f0-9bb9-b10bc5f4b0d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c7d8f6f-5840-4e8c-a90c-88940bc3e3b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--587c7bf2-65cb-4bc2-95e2-c468195a2e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce2f03f-a355-45c2-9a2a-6689d7cfaa01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--575233ee-9e7e-4dfa-8229-e2ca4480da37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14360f4a-fafb-4244-bcb3-3435672c523f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.112']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6367e290-2f4e-4358-ad5d-5424fcbc650f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b48acd2-c368-424d-889b-cc745d241e75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c666aa-fa57-40d8-8d2d-cd1eb25a3b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb07754a-7f26-4676-a9d9-04277d9216ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5fb66b7-e87e-450b-b860-263ffaada4d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f189a113-82ad-44be-8369-6e1d45de0b43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ba7ab8-3f98-406d-abe5-e2519b00b2a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a21bddc7-7333-45f5-b977-c8a223dbfbb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e2144b2-f8c8-4dd2-9acf-b3872cc9b25a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d2dbf3-372b-4759-9851-a9f1d3796293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4932a87f-1c99-42b7-b94a-511fcfbe7c73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5cc7593-ac53-42ab-9173-f7a1772b849d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4132727-20f0-4caf-b294-c4ffb636ab77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d6fc32f-a6f4-46bb-8c8c-3ec6dc13313c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7882c06c-1e4d-4895-9440-246b38d60f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.129']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c63049d-b08c-44f7-be49-0044975e277d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d29e5725-c9a7-4887-8538-b73c4ff3c6c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25301559-4fdd-424b-a5a1-4b392bdbf13e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9458e35d-07b2-4170-9a70-23b4c46fe3ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--742d6b10-a14a-4a26-8935-fd2c030d38f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.135']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7bc7209-6fae-426d-9f98-9bb7592912dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--811d27b5-b302-47e0-a56e-eeb47e279b42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38423841-60ea-45e9-8d0a-d25fba314296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.139']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16dbf928-8109-44e0-8e80-c81a3cccfabe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ae16a0-59a8-4ac2-926d-4c1a9bcf3259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4159fbeb-fe5e-4bde-a229-bbe8d4419f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd5d280-4402-4d6f-b606-b4317dffa5bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec19a43-f025-4231-aa76-436158910725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--246be7bf-ac5d-439d-bb63-6387e0797eee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f93052f-9972-4a64-914f-6ac035ab6e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0e0e05-3c04-4f8c-b46e-15b673987e26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--218a9728-b596-4e3c-9b70-1e5546a89327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.150']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cdb169e-3959-474f-aab6-84111ed2131f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.156']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ce347c2-ce7c-4e36-a6b3-46f819516fd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--322ea85e-73c1-4ec8-a3cc-58d2aafe7686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.158']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d858303-7deb-49e2-8a19-f5d8a95119fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d489c0d-b8a1-4359-a8ca-4f72d2d8d40a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.162']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40adcf78-3539-43b5-9c99-cdeaa7cc03eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.163']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8e897fb-eacf-47ae-b148-4a6ecd0cd3c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.164']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f730f5b7-a6f8-4b2a-9dba-7f23a575a5f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.165']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81710ac-ad12-47be-8f9b-b4b62b9c4028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.166']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a8308d-a27c-4cd4-ae79-d4ac7d7c4ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c191e87-26f6-40e6-ab9f-4c5d8bf4eed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--442c966a-0a50-4546-b2c8-216ebf1e9959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.170']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb149dc-146d-4d67-b8bc-09d1b2de1d70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.171']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6fbf1f1-494c-498d-9043-b0a806d842c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece0a62b-6ce1-4729-9fd7-10d38e64423a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.173']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d637a170-3a2d-44e4-a8e9-aa85493b3b41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e00f33a-577b-477c-b0ac-39f75b11d33b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c0876a-6296-49cd-9b9f-e463098968ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.176']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f04ffa7-e021-454f-9f5c-ca4d4be57f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b20a5774-21b3-4c23-bb13-b729698077a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16561f3d-6713-454f-930d-6e8b84f9ccdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b2377d-3811-483f-953b-aa7fbdc87bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72bc984a-b3eb-480a-b0d6-4de29d2d43ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28926501-44fa-4b9e-be16-baf020cf398b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.184']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c87a1b4-7051-4370-aaf0-6bd7fec9a127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.185']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7502c124-dcb0-446b-967f-cafc93766e53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.186']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae0d6ad-698a-4707-a477-5961b22e1701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.187']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6ae7da-8b2d-4fb4-b316-91dfb9293a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.188']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db0eba5-d978-419b-88e0-d32435e34fed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.189']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--338e41ac-3a27-4daf-b694-56f5d5fc375a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.190']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96437b6e-3e37-4da4-a53c-5eed5ae258a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d761f5a1-2512-4024-b86f-9b8bbc53b66a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.192']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5377e8b9-2764-4ee9-8b35-7fc9844f504f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.193']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da14fd49-d9cd-4aaf-be45-476c6744b69c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a450f41-e15e-4928-843e-8ddc4910b76d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.195']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21fbc0ed-9a5b-4c24-8bb8-8842e5843c63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb83704b-1952-4d79-9a4a-d7837c33fe37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28868bbb-0613-4554-83b4-faaff81c2b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe2867a2-5dfb-495a-b9b5-269bed254e7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.200']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd34ebf8-bf32-4d1c-962c-edad6d8ad761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57380a0e-55c2-4812-8876-e8492118558a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.202']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2126f6ee-46a6-4c54-b7e6-50ca117d2e51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26b07076-6abb-4a8a-8022-974e52ca8d10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--210e43fb-9ef1-45a0-8445-f14a955ca19c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1654979-dadb-4230-a076-598c7fac8474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.206']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f8bace-a8e8-4b3a-ba89-e7fd9d565cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff296a8-4de8-4e24-a866-5fca4a8a778d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b30f0d4-72a5-4edf-8db7-e4da81ed300b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cefd796-153c-495b-95ac-e1e50b1f996b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23add353-3cb8-4bbc-be10-27a2f1ab7e79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d365610e-9e73-4863-b314-d1002b8a1ddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d7eb2e-8e3b-4c3b-ae69-061a4718d528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.217']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57cfbc0b-4544-42e1-8aee-f6b894242ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d846cdc-b6bf-4e8b-9e4e-b4df953ebc0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d4cf471-4c71-49f7-9b1c-bbd9f8009eaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e65d9b-7553-4e9b-b199-a082236d941a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f10cacf-776b-4ec2-b33e-afb164cfba56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a5a0b29-5975-4003-bdcc-34e951c53980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9839914e-57e6-4168-98eb-ca12716eb2e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.229']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c597669-9774-4323-933a-c82edd727679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.230']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e1be7fa-aa04-4a45-9ae9-c4b713cc3a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1773a529-5f3b-469f-b9f7-8a337e161f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c4ad41-39b7-4619-850f-db095ddd0446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d6964ff-fb3a-4ad6-b645-924e78cc29dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f31dec32-0b44-467c-9264-ac9da498f809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c083b44d-1f9d-47c7-a912-6d22159a721f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.36']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86e7c5c4-749d-4983-a4bc-32e888507ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a72b1167-c710-4d6f-9e5b-008d6084d623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e75292a-00d5-47d3-be4d-4d55fa322db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.44']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--700ac9c3-63fd-44ca-89e4-73c84703c2da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--593f62ed-e103-4b9f-9438-44f9e5afaa71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b8babca-bf58-49cf-86fb-de9169087060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.48']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc0f4be-9445-4088-b74b-f8a40597120b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.49']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef6f1cba-b014-4f60-a3f1-a3f59764201c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a36c8c-1060-4150-84be-142ee72ec93e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.52']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6550d4c9-ee82-4a9e-803b-7dc5579e43ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2666cd6b-c1bb-44ba-9a1f-297404658b7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8670e5fc-e4bd-4cad-a3ef-eb52855bcda9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38ef3fa1-1de9-4391-b33a-50d10afaaa31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.62']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c52120-5eac-4024-baf3-34fe9e541d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c05aa0-06e4-4a4f-b238-af536695d8ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f54df4eb-6f86-4459-8ff2-f2bd0758681d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb9f65a-21d0-499f-ad33-fdfde756c3fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3076f289-4351-4411-8f22-758c05ce6d79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5745b252-1038-4124-a53f-f5f3f1be7674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c664cd-6aba-485c-bc2f-91ca204b8a8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d3650ce-fdfd-4792-ae24-caf4692319ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d21b56a-ee9a-4ec7-aaea-a43561d8ab12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c9489af-6444-486b-94f5-5984914e0d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ffa3ef-16d6-4368-bd32-db1a4a7b8286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8837da47-b9e8-40de-8ccb-c7ed051870b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.84']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--592f8fbc-83fa-4a99-bad6-cb4739e49a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fabb7d9-5fe1-438a-8845-2963673cc9e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99af5f64-97a8-42cd-9ed5-a8e4de468a9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1c3ccce-bcb2-41c1-88e5-268ecc815772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b067d5c7-fff0-480e-b841-35b660a867df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.91']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8653baff-f397-4b3b-9c8a-786c9419f8ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa1c665-9334-417c-8345-c82611508321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--924d391d-2f99-45cd-9d70-76287cce38dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de0c4ee-56ec-4e3a-98f1-81e2137a5136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.97']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73317aaa-c3e8-47cd-a2da-b67938f5c502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04f59c08-6f9f-475c-ba7f-e1222c5de5fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0da2dba-f554-44fb-bbb9-16d621d74732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46125f80-603d-4c37-8ba7-ba4fdbe87fe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14453550-6ecc-4c1c-92dd-764edddf577a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1beab7b-516e-42b5-8218-040391d689d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.106']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4771e624-655b-4ac1-8153-ee1668ebfaec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25eb8302-cd3f-4969-91e8-1fe84f9618f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bfa6d31-e02c-44a9-af40-eb2297d7ab61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50621328-40ff-4df4-9725-0362d1388961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb4577f3-1b86-4c32-8a4a-5fdcd474dd9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff0914c-93b3-4795-83e1-5b0f71f66600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde2541f-14ed-4d5c-871f-f9b221f1038e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5a7c0b5-7aff-4ce1-96a9-d3b6252bd654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8c6763-4c00-4345-a5ef-89ffbef353b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b62ea7f2-0efb-491b-b76d-57466151a17e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61e12f5b-b0e6-4770-820c-256bb612d9a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f63ae3fa-2ee5-47d1-bc8f-edb769e9bf67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.129']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67bdc59b-6650-436a-a0d7-b58f7fea9906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d18daf09-c253-4b48-b0cd-ccbae71e9bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.131']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f9e2df-4ba3-4f19-be64-213c08301c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfca90cc-c9e3-41cd-9941-d51d6aa81851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e3b191-480e-48c1-b5e5-51698f5e50f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5aa9dfd-b67a-4400-8d00-e5abbb8c4e18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.14']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ec0500-00b4-4e09-a458-4d6b0c8b303c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1909eb3d-b8a6-4830-b842-d611bbc30b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fcc1e01-fd57-4fe3-8c3e-655284a76e57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d0b6c8-4ebb-40ed-b77a-df7753ee8cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b68208-1a7b-42a0-a5d6-ab8ce623e4f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--132b4999-b253-4890-b399-1ec9b295fb33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.150']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae614f7-efc9-429c-82ca-c4d04aa8b7c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ece4a6f-a70a-4980-93b4-98076da20a17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.152']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc04d41b-c24e-4dd7-8c1c-ca4bc9be5277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.153']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d4cbc0e-5617-4ba3-8378-fbf801121817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c5c1a9c-8e26-4a30-a95a-90cb0f8cdc64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.158']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fabbe95-4be6-4282-8484-38b151621737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e7ae35-438b-43f9-a80d-b20db468c17d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.160']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d58889-47f8-48da-b799-f3911373d714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--708f8da6-cc8b-472c-9002-13bef26f5970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.163']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab85d76f-470c-4461-8364-826a3b175eca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.165']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd36940c-5201-4e74-b6e6-8617bf4dae92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.166']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e18b1170-70b9-40bf-8f55-cf9ce5ffe3e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc892cb-d5a7-4e08-a909-05adb1131889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.171']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8718bd56-ce56-4f6a-ab0d-2e6264e39990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--852cc020-2659-4f62-bff9-fad02ab0aa0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a3a444-6b63-47f2-96c4-76ac5ca967ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.176']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--028d079d-44bc-43d9-9cbd-d68ee673a7c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--659a4f2e-76d9-4190-a68a-1d1d574c4292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--976eba9e-7c8e-4488-89a3-abd80774face", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.184']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f767ae-0cf9-4024-8b2f-de4f9812c47b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.186']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--977dcb8b-c9d8-46dd-8ea4-8bcd63fac83f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--437ce2f8-ac6b-47ae-a81e-33c370e70e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.193']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e35ed449-f0f4-41b6-bbdb-8ce921e50929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6844569-c71b-4ee4-9712-de41ff27ee6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33daea04-0674-4e9a-afc4-8014046a742e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--345a8fff-2e94-42b5-b03b-84b2476ef792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.199']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9fade75-1b88-4263-b0c1-34a73891ba47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0edcd8c2-6985-480d-b908-d1e7e9640caa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d10da8fb-e4de-455c-95b1-b655f36f389d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e6a933-b196-4c8c-8c90-716e5f255f6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6939764f-e703-4dd4-a6a2-6130b4516a50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.211']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--575fac59-f1dd-4af3-8d1e-90bf558ab20f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb652f7-a245-4db2-8ff5-fdcb350685af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33aef7ec-1f2f-49f9-961f-7f1e0a9c67ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.216']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76cf3327-1c26-4006-8f5a-e550b7a305f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd2a3d2-45da-484a-b7e7-7e58460f89ea", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d7fdd6-caa9-4dc6-a282-97f485ee3546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.229']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf03d57-44cf-4efd-9b57-ca1d96776b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cfd5098-0344-423d-9144-2d8a16fb445c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.232']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fda4f4c3-1323-4957-91bc-a2d04b6f7caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5583cf6-03dc-4d42-bca8-0ace835257dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33f80d5f-ba9f-412f-a2b7-ece5bdb49feb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.238']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f8a1aa3-5cfa-48c2-ac2f-c1b531e2e2f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.241']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3fc853f-c89a-4c58-9986-b2eb745928c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e0a338-80e4-4ab1-a521-16e1ff5a49e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab4be314-d8f7-41f4-a978-ae87a554bf86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fefb4836-245d-436b-a954-67bfa40d4761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3fa1bd-caf2-463f-8a06-56eca23edbb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f60cc6b9-fbb5-4615-ac02-5e12d07b2041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6897008f-f6b9-4acb-9abf-2740f9fc0405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3786b10-3c75-4936-b78d-f9d8500286d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.36']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b438dbae-ee0d-41ee-9af4-3f8e709fbf79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b34f1a42-3cfe-4510-a8e7-a576d6571ab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78132efb-465c-448b-b882-352792b05f8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f70423-b70d-465e-9af2-f332f0fbdf0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6447acd5-0598-4960-8fad-e82b96649ead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.44']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23cc11cf-d66e-4372-8d8d-98691ec37142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95df3efc-2226-4b68-902d-3ee6a9005ea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949224bf-15d0-4bf8-8223-e8be9533318e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.49']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5708190e-ec39-4c17-aabd-61edc543587e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e858418-abf0-4473-92da-db4190979a60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.51']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--047c11ad-8400-4aeb-a82e-7d1021aa598a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.52']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e8c5a4-8215-4b0a-8261-937a5a386835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c2814a9-03b6-43b4-ac28-2b7153d908dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07a8845a-137f-482b-8537-cdc84e0dca74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.55']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec5ca1d-f967-42ae-9d1e-1526cd293381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d5313a-dc81-4509-ab56-ed1702c987ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.59']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f916cf20-96aa-4509-9677-ca6a99543999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71fb849c-3d00-49f0-934b-46e81c87a995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.62']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--181a97fb-28fe-4f9b-aa94-514fc84525ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.63']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a50bae-5f74-425b-9c43-17b667fece38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.64']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d001879-efa7-45d7-b7b9-31c0b451ca75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae1cc86e-bead-4383-a7e0-f464d457ab47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae0fb76d-ef98-472f-aae5-35cb5a7eee08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--311f230f-9bfd-45d6-8e82-4e49f291d95b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fdc95b9-39f7-4b43-ad0f-ddba3b8206b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8b802d-d9f1-4f83-b7fd-29817c9c24ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bff94c6-90f3-49e4-a5e5-7ada16704c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9208cb2-fefd-40b9-a77f-cb12c01261c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e997f48b-aeb9-48d8-8370-62f8b2101416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1ecc40-743c-4d5c-87b0-934c8d73a577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b129527-9523-47de-b2c4-2a5cb669441a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301a3e78-3917-43a0-b353-69dbb829c46b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f6dc908-7bcf-47c2-9759-9c29bf790ea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--467a6c5c-50b7-4623-b940-bf9f0e7c4164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.84']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4d9239f-bf8f-4ecc-a488-0eaef8ccda6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f572ef5f-99a2-4399-ae88-f02c2b62ced9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9045ad0b-5150-4784-adc8-75d023f48d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc49f22-241e-4f4e-90f5-2a981e43443e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ecc710-c103-46b0-8075-49903c4061c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0a2d06-72ed-4eb6-bc7e-728142692c2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.91']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d9ac18-9afc-4fa1-ad78-c4b21556de59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af7960b3-385d-4450-a0f0-7a311cd95f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb73672-8c84-469a-80b5-5b4a3d85dfbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--489d3996-12ba-4ed4-b5eb-d82ef6765b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.96']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90dd02f-82f1-432c-bef4-550b8dfc7a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.64.99.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c11081-c431-4644-9437-1ba58607e228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.82.228.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b70c86d-6e6a-4411-ae64-15ef8fe27daf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.160']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07adb5d4-5775-4c1d-af90-3fa585c5d85d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--450bac97-d399-4596-b6d2-bc4feb30251e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--699144e2-adb4-4e33-a2df-7d12db75b264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041bbf2a-5f84-4958-8fa4-ee970363e477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.131']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b821ed5d-bb22-4d7b-8c50-760bb32e4196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53e4cf0-a4e2-4d39-8d86-2d3efbd02d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c42aef-79b3-461b-a9a5-8c5d843f3d9f", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8503718-f8f8-4b4a-aa2d-018aa62283f2", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e9d9206-069b-4c61-a509-8b3f0f23c367", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d67521ea-37d4-4412-9cf0-28c5a9b38a9b", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.152']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be224a3-0575-4a3f-a2b9-6a19d0b61d52", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efffd556-c4d8-4c03-ada7-dc0250368b78", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.169']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d56cf93-23bd-4dcb-9735-4b4e26fe80d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14556781-6b07-4933-bc12-ad1b081df752", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6805006-2087-4ed2-933f-4000d14bdb37", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5f3c31-bdbd-4b87-97e8-d930f1f7acb8", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afff2685-ca55-4c16-b846-3ca9f08fa1aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4245bdba-9033-43dd-8f6c-33fb16c30f27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7216e940-f28e-4679-9f03-f2399d8945d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b8907c-474b-4103-8d65-1aa1573c7608", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3065bb80-8fcd-4e7f-b483-e252f853b26a", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.97']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--413c4b0e-c404-4081-876a-6b2bb8b793ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.95.11.176']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d286f946-cb8a-4c12-9915-f2ce6265cbc6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.21.113.253']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e4080f-e681-4f7e-9a23-9b439e47d88a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b576ef92-c5b0-4fbc-a0ef-cebc2963b021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f93a63f-115d-4b1e-9d37-61cf72e25b04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6531e43-2131-41a5-a15d-31eefe53e0e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee6fbd3-a24a-4396-99a3-0a8cb713f52b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1cccab6-c75b-424b-8eec-e37126fde14b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.106']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4113913-e81a-46bb-a7e7-8e08744bf7fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f15e4921-7fad-4dcb-b33a-ef3fd91dbcdb", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a7882c1-a6ae-46ec-9b4d-9ad903ede135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b2589d-4939-426f-a4ac-d3f93c2c90d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a4b3595-63a4-4b23-ab1d-c5f7f9d5f5f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.112']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--781e522d-c63c-4e91-9768-a7af056ecd5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b167cf7c-af7d-4f27-b31d-e09af7f3a338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c4dbff-8fc6-4764-ae3c-8f3cc0593f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c51930fe-41e0-4ef3-80da-36c219d24ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd4cf63a-6924-4913-9fe3-d7745754e61f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbe5a0ed-db04-4218-add6-6482b8705a56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e87c8ce6-ea54-4cae-a4b8-24205d02e3a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d36c17-4788-4f12-bab2-8688a0acce07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f6d00e-4a84-47c5-ac46-ef445f61b2cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.129']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e39be2-4a78-45ab-b896-05a1b25c7008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8bcc8c8-cd51-4b8e-8622-cf13acd5f67f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91a3a35d-c6f0-4867-83ee-1d2b45f38b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.131']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a8c13c6-d3ca-46be-b06c-bdbde9a92539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e8f554e-6e30-4c09-bbe1-3cb422c521e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e481ba51-7e2d-4df6-8ade-eb5b1fc85973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a8b6db-2c68-4e72-8979-f434e215fc35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a5a1ff-c8c2-410d-aa63-082ad54523a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.139']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d81c9a3-d494-46b8-ba0f-43dd4f9b89ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.14']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9833693-c912-43bd-811a-713d6f6979bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--464b1be9-a837-4230-a993-1b9721d0a653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ff3d57-9fb5-402e-8ccb-149098d8cc04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9f09d7-e790-4573-b303-16c9d447f720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e42c043-7f36-4c1f-b70e-c9e384493310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d3c5fa5-1a38-4bd3-92b5-746ffa7e679a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f4fb098-1643-4116-93e9-817549c8ee75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2da92b4-50eb-4215-8fa5-cdb6e0e26fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a0d6977-7140-4f70-bf38-010bf7ea9653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.150']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa6795c-17c8-44e8-8d6c-211f763b98d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15634d05-d451-41b0-9053-91d32d06e6e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.152']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d91285-ea70-4707-9752-d58de9e7750b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.153']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78422b33-7aff-4c2a-9dd1-fe384d1f5ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c87089e-d1c1-4519-9be3-a6ec5149c1bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90217846-0471-44d7-a0d9-aef74cdef711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.156']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--319f0bd8-afd5-4fa8-846a-f627e982f502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d6318db-1649-4fe0-b5eb-873dfd6098af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10db7296-7c65-423c-8395-74cf3b209f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.162']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1bc2d8-e641-4329-a889-31c45c5c4f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.163']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d7c8e14-c8ed-4312-be35-87cd13e12e6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.164']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29cd471b-48af-4bda-8e33-f931c5b79d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.165']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca122492-45ba-4975-a518-a52f236220a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.166']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d52ce84b-0305-43a2-bfec-43d99f82c88e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.167']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a501a818-f3b3-4b83-8d75-7a571a28c9b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6afd6e9-2b11-4886-b16a-fa13fb208117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.169']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da0ff1b0-8058-43cc-955e-c4144cb22c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.170']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ceb4f6-1946-4d87-8431-750e1cbe8adc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.172']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83280c1f-69b9-4752-a9ff-f66cb49f6bf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.173']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf6d287-5b81-4591-990d-be67aed884b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a0e22df-1b88-449a-8084-6a3c2b14e403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac0fe71d-efda-4208-991f-5fc53588de1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.176']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7388b9d8-c71d-4a65-b6a3-b3dcf18f617f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--871c4309-618f-4d0f-ab98-b306074af09a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df36843b-15e4-444a-b3df-57c40fb7eef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8290737a-34b6-43d9-b446-f29ae4df3105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af47160-da6d-4f7a-964f-0850771f96fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb26149f-ef9d-4970-9b9a-9257b4c236f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.182']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a4514d-c6a1-4c5d-bfa4-409c88901e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.184']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--740fa075-8773-4547-ae9d-04eb16d85687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.186']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08cc12df-3aec-48f6-8abb-81f46e1aa0c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.187']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e78e5fe9-0ac3-4148-b4f5-21644a5d2204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.189']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73f5011f-ca02-4215-9d88-b013b9d28fb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ae560a1-c18e-4c5c-bdf9-8fd4315e45d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.190']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187d5b4c-11f3-4cc4-b4e2-3d3ed721347b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b84cc7d-4433-4627-becf-ad2b3a437ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.192']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c231a818-354f-4e6c-abb9-8e23f13b1f80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed263ea-d590-4713-a000-d70c2995b61d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc037c28-95c0-43de-8993-107998ba6e27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6202709d-8dea-4934-bcf6-1db9a2ee02ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e97555d-f2bc-4a41-beca-f0c69a74e0da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.199']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c83e6ff-8408-457f-a26b-28e8ffd7f190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4cd9dfb-49a6-4ed8-862d-d23750cbbaa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f022da-c70b-4513-8ff3-47ccb1ed09b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.202']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--439db9cc-a1e7-4615-aec6-b0e740633494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3026677c-51a6-4387-a4f9-41e9ced5903a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9fe82f0-5a50-4e5a-9492-84d091386d2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb450729-3cc5-4373-be91-7a12ec57ebf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--190a080f-8d64-46ed-8e10-c2533305dbef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86572a23-646b-42c0-a37b-fef41a2d1a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.211']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b975f8df-b7ab-467a-a888-b3133a1dafe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa3e65fa-4172-4cbc-a1e5-22ef46cd2e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--191e900b-646b-4890-bdb9-473e1d96808a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d28b2638-cb6a-4f71-9044-67eb6043cc2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6960f639-d83b-41fe-92a8-344c2b9d1074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.216']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--033f8b91-2e8d-46ca-81ea-72f33a3d3c2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.217']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a63ad1c4-1de5-4f4b-8a01-dda74a9e4801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e77ff4e3-3724-40cd-80bc-45da55312de1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1319a8b-fc80-4d96-b5e7-75d554b4b9bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1834b298-1720-4a99-be52-49210469d27f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c006e559-126a-4a04-9b5c-1dabbbe91c5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.224']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7a56fc-bed0-4a39-aae3-d2d543a02a7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.225']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a40bd092-f160-4c45-ab78-f11d98684136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16aabf5e-4844-46fe-8e3b-b3ff7de5ede7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa65340-d043-49ea-9b5b-aa8736031aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb091e3-acdf-498f-8823-f90a770e8277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.230']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c130e7-432d-4e73-ae74-83a911a64aa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0413e227-1b32-4b23-bb82-7e739c73b3e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.232']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d850fb-7565-4ff4-a5d1-a583668958a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f9ca034-3df9-420a-8e58-0f8e2162cb56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3be3655-ecac-4d49-a292-406bd85e6343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fbd1a68-8404-4b39-be50-09cd5733b05f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d95e00d-ee34-4cb7-a6da-c421e0a520c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e96c366-90c8-44c4-89be-8f416292bdc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.238']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e839c9d-a5a5-4a6c-8e6d-bea07f2d8191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e095be16-7427-4920-b8b2-3601c51b111f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21f0a864-791c-4617-bc12-d0175ba14808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.240']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de24c5c8-522b-4505-a498-7e8b7281cd6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.241']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05a781f3-eab9-491c-8e79-6718a419ba8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28af8bc0-b34c-4404-86cc-96a412288f3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be37c6f3-8374-426e-b696-d6767fe15134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb121d44-008b-485e-93c9-14e095f12435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a60c555-06c7-4368-96ce-81f17b3e0a69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a0a8ef-a28c-47cb-af3b-ed04b851f54e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.36']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e7be26-d53c-480e-b9de-efccbb131f20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbcc651c-b8d5-424f-b379-80150c99f02c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b7dc38-6086-4e96-bb78-403649eff016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e80a107c-7680-4616-92f2-9864143f3de2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fde7ff9-a6bf-4b63-bcc8-f1a0d20ffd55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f204e22f-1db2-415e-81e6-5f2f253c8d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.44']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f170783-6afb-4032-bd01-e9d3f9819276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a8fe644-de80-430e-9bfa-a28e9a16fd41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e51eaa-4710-46c2-889d-397aeeda997b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b555c84-a009-40d8-98e5-6f9b75d4dbd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d485064-e6bb-4de4-b2fb-0df851c21910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a8c0744-060c-4e0d-adfa-bfe404dd7d0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bbdb142-2175-4d45-bb9c-cff7601b54de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.59']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6efacb2-ee2b-4512-9d90-42567f6a7279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.60']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d502a75-1021-4df1-afee-b9abb04b36a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efd76746-f1a0-4317-9164-77dbcf81eb26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.62']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa12e9d0-acaa-4524-abf8-ff4fa7c6db86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.63']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df48331-d0a7-4100-a20b-fab0c6ffffa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.64']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb5b29a4-d06f-44a1-b7e4-e9c30cd7a9ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d74d60-1da6-4c92-bd5e-bbc6ce5b583a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f71b8c-39d9-4917-85b2-c9b96426063a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c71677-1978-43cc-95a3-1c0cd6a8bb43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8d59943-6241-4ec8-867b-66df9eb10824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934d6fab-1e7b-4a51-aa34-d918f1c80120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae82667-3277-4235-8820-50d3e017e1eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e7eb7fd-1921-465d-b364-46f70e184224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--950274f8-de04-4663-9b5b-88a1b8629625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7de1e90-1640-4c5c-9ad4-600c6b576d05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4431bd7f-8c9b-4128-bae1-8d230d145db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971fc0bb-e8e9-473a-b606-243762832025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05494482-44f5-4b4f-8c2d-037851a3e080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a56778b-9cb6-421e-ad63-2d21a34b9bf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0620e3cf-8f27-4a3d-b5e6-7c89c218aeb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a2b89c-baf7-491d-aef4-31f5d7b56972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bea04a9-0510-43f5-bc8e-04531f473d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.106']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78737d45-c06b-4ed5-b689-c26c8f2db3f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--980d08a0-9f43-42f8-93df-f07a2f028ade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e8f34d-bec2-4f79-ae0b-f6098885211d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c8805a-02c4-4341-8a00-6912f9e0239f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--422e7a0d-e082-4545-821e-7205803b01fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db8d37d1-793b-4544-8e37-ea298efd3120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21428260-f067-4536-8583-e8397fcc6cc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c40f687-0a6e-48c7-af09-0c0fa7d808fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5074b96-2ec7-429d-a900-8a9b7e2b6e36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c314197-0941-48e5-af75-78c42f825ffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--272f9304-6f6c-4f89-8ebb-04a4ab2451eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9127530-669f-49b1-985a-f53a81759c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bbc0285-3c63-4b41-84f8-b5f02664312e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb7859b-36d8-4b79-b848-5d4312201243", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd81a025-9136-42f0-9eed-48c6a2b88790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c157a8d9-315c-4e7a-84c9-fd6cb8d1457d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75eea4c8-8273-4bc9-a429-c681d3871d5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2250e33f-f1eb-4289-951f-ae45aeb13a97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a49e2ab9-bb1d-4e35-8469-5d96a72c4895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--567e39e4-9451-45d4-bed1-4017923c5052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ee3133-44c6-4f49-a09c-b84872578d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a9d4b93-b047-434f-8f78-8d89d43b70e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec0e010-0a4d-4e1a-ae9c-242571fcfb53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--193a330a-fb40-400a-b152-29f7d5a68740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6612383c-c75b-4cc3-a6cd-168a065a93fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e83156e-0ee3-4f99-abbb-3e51b7961491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2303039f-669d-494c-b8de-49668222b600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02ffa4df-7563-4482-8a7a-a81edd5aa903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6308fa96-adc5-45e2-bf17-f0838b878ac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c77b30f-eb47-4515-b940-16d7d2b6a2bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc8236e0-4e3d-4c62-bd58-8f46ef53aa52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3cbe6e4-135f-4bc2-86d9-83b81948c6db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be5179ad-e9b8-4cef-99f5-861f5f390392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.96']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5310fe0c-c7ec-4146-b806-f414fc0a54c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.97']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e6acd7-2eae-49b8-b36a-56a2f47ec5a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.60.5.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c64199-43ce-477d-9c68-48b8bb241544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.60.61.159']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b585427a-f9fb-405d-aa26-84a6af53f2e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.60.61.173']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e11c5d82-f284-4c96-987e-ba226a8480d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.60.61.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1760ef5-bccc-4ec4-b1e8-c57e261d6ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.116.205.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--804ec31a-e39b-4ce8-b010-1bd866816e63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee135ee4-fc25-406f-815a-963b370261ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da5dc1e3-5e68-452f-9301-86d2080aa1b3", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ff32baf-b240-467a-bc6c-83f648dfca84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.112']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e98491f6-8b44-49e6-98ba-85b2c504e804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd12580-9966-4ed7-994c-3fb506072035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ab312e-625d-4991-a189-bb63e89e80b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d273a84-0948-410a-91df-5301f70d9114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db97c831-6681-4e4a-b6e5-74487847e553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a3a98d-8d8f-42c0-9261-4d5d5ceb73ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb03661-7b14-473d-bda3-5c6045c102ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c03b8188-a00a-4287-9caf-757160559bad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6c7b8f6-b8b2-45df-b7a6-099c941195e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d86eeb64-59bb-449f-86bb-9c1ca0317ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fa736f6-1362-4623-ad4b-362d2e102587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21fef60f-08e7-4a04-82cc-f49344580d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6bda607-2fde-4b4b-865e-d0b2939d62f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00980de2-a5c6-4e6c-a0d0-e0158926132f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa8031e-d960-4866-a160-eea8050f0e3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1f9586-70c6-4240-a3f5-218e756a441e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0202f812-1905-417a-b463-69f999d13624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbaece49-54a4-45c1-a644-120d69295281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08741db4-6a98-4571-9d9a-8601bc830e52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df580f5e-2e34-4a5b-b916-9ef83884568d", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3d64889-a1d3-459f-bc94-d9be00c447b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d56442a-33c3-418c-86b8-f50450dd1004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0878a363-344d-444a-9e5a-8bcf506a9a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757c42df-a55e-40a4-a003-45899e97a84b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c040346-8c6a-4f09-877b-cc9ad3c5f940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.147']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a455fcb-166b-419d-a833-287b4102fa5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec247655-f35d-4db4-905b-a706f643e256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82282625-6bd9-4fb2-89f5-29e8f0e5015c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.150']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ab2aa6-b47f-4b2e-b027-816ca51e5c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91c17e0d-8ee2-4f44-b05b-ae24f557e1ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.152']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a4f289-8a3d-4cc1-a2e3-25f60b62dac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.153']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482c0da0-c259-48fd-91d2-cd222d21be32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dbc2105-f95b-43bd-be2b-126ae8038cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac202ac7-e1d9-4659-87e7-080b35a2ffd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.156']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e22c372-785b-4a6f-90b1-b8220a164d0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--814cd59f-39b5-4ac4-8308-8699cbcf49e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.158']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be92b504-87d0-43ed-9496-8089cba009ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.159']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--300d3b16-a77b-44d5-b55b-456485077657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--696aa6e0-739f-457c-86d1-b0290edf2b0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--565e6b7f-0657-407c-9a90-c0a7df07061b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.190']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--268180a3-0f16-4873-9ef2-a404a1923e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2cd956e-e11e-4d5c-998e-27c9b73b1a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a0750b7-fa3d-42af-9c1c-bd09d4333e92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ff8102-3757-4137-aef0-0f11eb7caed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.206']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba3265b1-3929-46ee-99d5-2e31e1f191e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e3bf29e-2abf-4255-86da-b9b6eb780b69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87edc892-5c4f-44a3-bee4-5f28a8a45cba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--318fb024-971d-4ed8-b562-389bc7e13373", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd597b6-64d8-4e54-b8d3-ae1cefe0e0f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--950a70c7-da46-4124-9183-ad31ff7ac05d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.224']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1312da7-2df3-4d40-a86b-f2eed17693f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.225']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--901c526f-cfa4-47bf-8dee-9b614ef7636f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18cb6630-3815-435f-945e-5417f4a193c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67484fb3-43a1-4020-8a2a-297e9640c2d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05805c57-10b3-4339-824a-630c0a9ac5d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.229']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e4a6a9-a368-4a4b-8f69-b9ba7ae42d3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.230']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba735618-7856-4a07-81bc-8ecf28177af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e11f01d-7414-4dd3-b089-f0cc6e4d4250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.232']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--454aca18-cdba-41d9-a8a4-7671214956b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9bbf4e4-111f-4b5c-824a-32fe86964add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1bef495-9a13-42f5-83e7-92298ce1f9e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac30190f-a7f3-48a8-af87-74e8706dac2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2d66090-156e-477e-bda7-f9fdeb29795e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22539d96-b660-4a6b-a47b-abebfc1c8a25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.238']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4963c903-002b-4823-8612-dda210df6d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d986c8-b4b6-4bb8-b234-a47790058637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c6ef979-4261-496a-be5d-e6cde9caa179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd03e4db-cc14-491c-96d2-a574acbddbcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65343876-58e7-4ac8-b3a9-0fed59b755b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a56574b-291a-464e-a0dd-43d9d33de410", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d420dde-2594-4296-828f-5c1f03aa997e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf91036-6a52-4bec-8473-8ca2faf86201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0918b8e5-bd5d-4bdd-b539-37aa51baa451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada27b80-7edf-44c8-937d-6daec44d3941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a77d4665-f44d-4356-a5f0-faf3aa23ebfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10925968-8d24-4756-8391-74d2b61f2858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.129']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe7d13e-21ba-4ea6-bed8-4c36bed9530f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e67c21b-0396-4035-9bc5-a9d0ac5695c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.131']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a875f88-b7f3-4772-a61b-f3563b5df4d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2171a2c7-48ac-4653-8796-b9507e184c31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46561221-716a-4ac5-bc41-5b0fffd29ab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc96baf-3b5c-492d-8f49-f1aca1eb4be7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.135']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b18d4c7b-6131-479a-961f-5954497148d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a3276f-1928-4c77-a31b-47d6c1bf78c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad227b57-d4ba-4593-b54d-7d8265339369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c01845dc-2e24-4bc8-9a03-585a3ec368de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.139']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26b5d20-f35f-4f2d-bbe3-ea0b44cd08a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d66b488c-0dfd-41ec-bf0b-3d3039542f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a43064a3-7146-471e-bab6-806c62b65aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f30fc658-8b69-4a83-ba88-0024656e0338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.163']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc571a15-299d-4c8d-9eff-eb9754196dfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.169']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec173a10-d95a-4ac4-ae1d-984d9cef08aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.170']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26e39a9-b3ca-49f1-8cc6-915cb2ee5a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c60b6aaf-acca-428f-b341-c1827c0dd5ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4f913e-ad8e-4f4b-904b-f21f2b253b80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3740e47-84bd-4604-9d3d-bf6d7d10915b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ee53b8f-c1d2-407b-887d-1c0d69957caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.200']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11bb407a-f7ad-495b-9f5e-e57f152bc34b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9547f692-2cc0-4379-ba85-bf327a7469c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169a17ca-4c9d-4e90-a20e-b0d57684ccf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f5325be-d434-4ab6-8d03-504f7c70342f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56208dbd-a3bc-4555-8dc1-96d8cb841f52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.211']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e92321e-ee21-42d3-918f-1d819915f888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceef0a54-deb6-42b8-bb8d-aa59f74aba43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92406914-736d-4517-bb36-c93f5a726a0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69311078-469f-4dff-8cae-80b83dacd8a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ae4b99-c1d0-4d3c-9814-66522584d0ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.216']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c875dec0-ba71-47c2-86af-78057fca1697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.217']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c37bf01-5997-4eb8-92a1-169802e966d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6ee227c-a720-4aaa-8cbb-c32abbc1c1da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b585ca46-9e0a-4ec1-9e2d-f23d38284b86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c164ea7-942b-4f53-bb73-e7f686ffd686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa8da45-81cd-4278-a0bd-0b540d145eda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.222']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--279816c2-b490-497b-8493-955f95c6c4f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d74db772-285a-426a-a22b-afc3bfac0ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.224']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e6ffdc-6d40-4692-b062-3173159d9eae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.225']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c2dba17-cecd-4554-82d8-89789caa1a90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7de1f4fe-a6bb-42d7-b7b5-30ce6a337c15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd549d5-f632-406a-a79a-ed3f3f465c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a404de41-3e25-422d-b069-b45f85ea874d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.229']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897655ee-725a-4fb1-86f0-3929926c8aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.230']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a964a2ed-b0e5-4107-bc15-0921c8114409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f951dd0b-fb23-4eed-80cb-3491628a223e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.232']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35020a54-100e-43da-9ec0-09a7c86d2aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90bfb3d7-acb1-4af8-9af0-fe5871807c78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c20d73-47b2-4cfc-8fcb-375b74d17650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed650e51-23f5-4d81-a41d-5f5f1f7704dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de8cdd22-a842-4648-950d-adc1f97d38ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f8c6664-3956-4ce8-b053-d14e6baf2d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.238']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e95617-7df6-4c65-b4c6-9ce9af9e0761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3d54d9-47a7-4e0d-8f7e-231a9982b100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.240']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7fecf36-b93c-4484-9cb2-0506c88e137e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.241']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c4432fb-6123-41d5-9841-c62469c2e720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.242']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f50b0685-1647-4da4-b4f1-16b488037647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.243']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd21f8f6-b46b-4384-a282-3055f7339211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8b32062-aade-4c6d-bbe2-a060fdd6463e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--038de942-1336-433a-9990-a268db4005cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.246']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7283e585-e045-460a-8412-912fd15013bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4930f1ec-2798-4348-93dc-0a273d9792b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08d9d5e7-76f0-4bd9-b0ea-27fc859aa91f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.249']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6687df82-dec4-4bd2-b6bd-278346e4c8f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.250']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7687077b-763e-45ef-9842-e72c2e99229d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d70e0b27-f1e2-4173-aa3a-a81b73f6c62c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9144de7e-4e68-4dac-9e6b-2ff0b4b59470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.253']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ac52b9-e6fc-4799-9beb-7fb44959a074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.254']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19f69606-a3a7-43f6-9145-a03a9ec8abf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49691047-bec5-4a07-8b62-c3128b958fec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75526e36-25e0-4419-b77f-36982fee51ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7890a14-be09-4bb8-9af7-f47ff5432dd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d34385c-d447-4fd6-8095-42e14b1cc445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a12cef0a-7c1d-41e2-a5fc-cf4144b9676b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2c8c61e-c6bf-40f1-ada9-f2381ad69474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db6766c1-bc3b-4d6a-b766-1766ecb70339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94878925-7eb3-468a-87ef-9629c8a81aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.147']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--851d7e8d-f007-4ba9-b722-982f0d226bac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a98cc61-161a-43b5-acde-33116bf56059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db7df4af-6f8a-456c-ae27-35bf713858b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfae1a4b-9f43-4472-9e37-da84c744b6d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.150']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9141144d-5e23-4a0a-8e8b-7b0dc6b759a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.156']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06fbc6ec-3a3c-4b51-ad4e-850efaf9f1cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1279cc53-6472-4b63-80d6-c5e1e1bc463e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db647ab-231f-4ff4-bea3-836628b8d1ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c5ca470-7500-49f4-bf6f-94ff9062f78f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad72b52-5de6-45c9-87a0-13b42d37c9f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b88be670-3e75-418a-aa07-406a41605976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0569e5ed-e0eb-46c9-b12f-a2f6bf55a0cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f073cc41-c9cf-4a6f-a955-904c7baf1274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3850bb6f-cbd4-4fc1-9dfc-87a075101637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4947b42f-7cb4-40cf-8bf2-692cc9b56483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da2ebf6-825f-49d6-95db-4e3857bba3fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6d61493-cf08-43ba-81c7-eb96649f6439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6187c65-2efb-47ce-be72-440492a5dd46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2fe5af7-1ed5-4aa3-8793-6cc2a359a93c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d1e1c8-a03c-4f20-96e1-590d606f095c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--701c4aa4-5154-4985-9a14-24d9d45d5ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b09fa76-3ee8-4a87-846d-580b87396930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a59443c-9e6f-40c0-9bdf-26e20cfc811c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--215f6ea7-2cbd-4bff-9611-13bbf29f708f", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.44']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f8e264b-434b-4d9d-9bfb-f7c8d096844d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a3b52e-2df9-4127-a823-3045de3e934d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.48']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f87f351-486a-4c01-8819-c1fb3d23fc46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.56']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9478cbf8-9185-421a-b673-bab6a411ff5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca9bb369-6ff9-4216-8479-71ecd0926c2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.62']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a486fe02-8265-40ef-9327-a237cdb78b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c91fc0fa-d9ab-43c0-b474-bd854d3d4560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a6ed1c-d5f0-497e-89d3-18a79bdeb116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b91254d-bc8a-4fc4-a82b-cb25aecee996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba776d47-0bfc-4c56-9c41-2ae601c813f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--279f6bd5-eae8-49f5-8ed6-1664d5f320bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d0a96c-b225-4b14-9c0e-655a5f036108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--477867b3-f075-4fc8-9d12-cf141341c26d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.96']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d8daaf7-cb6b-4429-8f34-5c7226cc6631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.97']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a140ccb-74f8-4404-911b-677762526c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b0e7ab-0c55-4b7d-be4e-e1d17c73e9a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb2a690-6a54-453d-95b9-3c88349a03c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c3bf70-311b-400d-9479-712f08200815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1867d0a-033d-4107-bb27-bea0bdd22fd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf9ff58-bf35-4ad6-8d81-20a3831a8e76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3941d5a6-a1ca-4376-ae6f-a24144cf5064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68ad6d16-f16a-498d-aefe-1c03da657131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14731983-0c7c-4102-a388-20e4ebfadc99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54df7311-cce4-4390-b164-a341f6a05019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb60f4b-b07f-48ce-ae63-1293eced477a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c67d765-4d4f-49e0-b5ae-23c2af2cb293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.229']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c6aefdb-de90-485a-a04c-4bd9361558ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e159031-c096-4e9f-934b-23a38a2cbba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--facc7b2d-5a51-4ea2-b75a-3ef3051dff3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8489a27d-dff3-467c-a7de-3bec3d6e6acd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83bc0c71-3aff-4530-879d-469f69487a05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--550503cf-1af1-4502-8a57-676f52f88a96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9209539c-3417-4297-bf29-97696457b912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aaa476c-9380-4a1f-a4f6-a282d0dbc2c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.84']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--969d3e07-4cfe-4372-948b-76ab8bb0e6a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ba9bce-78ee-4842-9490-f583aceacd77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.209.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b324504-929d-4a2c-8ef0-37342b75ea8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.209.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d93dab-225c-4f8a-b03f-31ac602a6400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.210.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d66512-af5a-41cf-967a-6443e46cc5c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.211.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd20b69-c80b-462a-9892-a220e98566d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.211.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1d21be-5483-4dbb-86ea-9f652f226045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5c2c76d-0f39-4af3-8744-1faa699bf92e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db40c734-d402-4426-9275-1ec7bfea0cea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.220.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa4a45bf-cc11-452c-b4c3-43d474c4ee36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.188.16.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb939b15-cd74-485c-8f8c-bb20f9eeba5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.34.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f26be2-4afa-4f8a-84a8-4d0f441e0388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.35.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--979256cb-16da-4917-94c8-d024c7d78ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.36.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a70116-945c-4ccb-9c05-18e61c0cbfee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d96eff3-6736-4b18-ae26-76ab29e8d3d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8444a0e6-d5d5-424f-ab2b-2fa4d89ffa0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.41.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e750bb-df67-4a81-ba2d-9d5080f95664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.42.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a005ec-b3e6-4fd1-a838-e29d46b33b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.43.106']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c75cee9-c0fb-4261-8fad-8475d1849cf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.43.214']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd7b41d5-f9cc-4d50-b21e-4a10fdd88696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.46.112']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36ac3aef-ab86-4826-9698-997c4577ab16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.47.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e03f492-347e-4dbf-a7d6-504dd07d0961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.47.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be37af9-4f59-49c5-baa5-b2118c15f9fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.47.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b5e324c-b5d8-43bb-a628-24b79352792c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.47.158']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48bab5fc-bf7a-47d4-aee1-c5d02da58739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.47.162']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e0be7b8-84ac-467a-83da-1875319746ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.47.167']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d04ddbde-8949-42ea-94e0-fa154cb630bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.47.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b0e850-3a7c-4055-b46e-92a94a3aabe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.47.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df7c44d3-065c-47da-8b7b-0f0e18ae934c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.47.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0492be9-2bab-4e43-84c4-02af70312722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f463b39-291a-4098-8728-e3445c8d1dcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7c6556-79f6-4331-9e60-5a3c463cb126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.162']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e3fdedc-4ca4-4742-a362-22606920858c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ebe4c2-3c7b-4780-93de-e3a8c809e70b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f66ec417-322d-43c0-a656-1b17ac385c56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.62.150']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--245676b2-3545-4563-b825-a4efbe5c324a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.205.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd54b825-a2d3-4bae-a8cb-935a7d594d61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.223.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb4af29-3e5d-4da0-b8ea-96481069ee78", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.223.240']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b08531-a6c2-4589-bafb-960a6e1718ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e415cc-8233-48d4-a13e-98f600b18cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e62c96-844c-4e32-90c6-4be18f1de3a8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.69.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e962c2-24ec-4e85-9f78-1fc1dae1f5f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.9.160.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--440df71f-8cd5-441d-a91b-ce7390f5cb26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.90.98.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e638dfc0-96eb-4d13-837f-a563bc617f47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.93.9.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--733ece44-b85d-457f-aae0-d34173f06dd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.96.207.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fadcc9f-5645-4df6-b85b-046e9a5f79a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.193.108.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314d3342-40d1-4fef-9998-7651fec2d3e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.193.99.250']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c8eaf6-878f-4b94-a927-b39850a2b33a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.151.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69323a67-6d9d-4698-b136-9826de605476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.165.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae3c8b7-223b-46be-93c7-d449a195440e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.182.193']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f5bc7a-c782-40ff-9492-dc9a24d20b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.184.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e6367a-4a0f-4b20-b611-e5a475aa0b55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.213.127.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc5d543-fb9a-46e4-a7fe-c7a50e41e29b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.217.62.62']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9fe295-0ef0-4998-bed1-1f1531b3eda0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.154.115.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e215d56-e99f-4443-b8ef-90fca22ae3bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.132.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff49b9a7-b061-433a-9613-dec7fe7dfa30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.143.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd4207e-15d4-42da-99ff-634907dee769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.165.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d936f38-89cc-463e-ba44-e0fbabb25504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.193.243']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fbd5673-e4ed-4bbe-b9bc-2f37941a923b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.206.170']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24eddd6d-628b-4b2b-9669-3a5f5ec66d55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.234.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c58a0a-494a-4d3f-a375-702d05d04a4c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.242.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b3318b-a292-46b6-a71f-689a4e1f5b42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.54.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--707d453e-aa1b-4a78-8fd6-45d38d264c3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.77.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1601248-84dc-461a-9138-a827d6c5e658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.81.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c486ce5a-4934-412a-8fde-653bb1b2a146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.81.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5ef8d0-606c-45aa-9173-857de977353c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.83.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--305dcb84-257d-41e3-8b04-23e713ffd3d2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.220.60.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c7b6db-ab08-4c84-9131-589457f5bb3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.37.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8206ad5f-b851-4e39-b9c1-a002dd8da71b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.52.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e7b499-ff2e-44a5-bfc1-06ed1cd8e000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.57.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--499eec3c-1c45-42e3-a511-da49381731c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.61.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac444722-c805-4716-9e8a-a0cf8d6b1063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.69.177.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d88baf7b-cafb-47ef-97b3-3e9aad8e59b5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.12.64.44']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f14f68-9594-4ef1-9546-53493d04fc01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.203.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329a8696-1341-42f4-8c1b-12badb32e8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.210.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccb4e6d3-61b4-4cc4-8e82-f061cf6924b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae33b33d-a5d3-4155-a347-315072f78b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.243']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8113e929-cb0e-49ac-9974-a0a141d3a407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.215.192']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--836fd9b1-4695-4c06-80ca-0aa9a1f4976e", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4530de94-4343-4717-befb-b10f0c4bf093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--166b17d0-5498-44f7-abec-6d7d66cf6218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.219.183']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80604428-53ab-416d-b6f5-343801143896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.175.92.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e1f78c-e008-4979-93c8-ea429c87be7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--151b5a5a-a872-467c-9b4f-ac4b3d2727e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc0f697b-a8cc-49df-a7ce-1923eabb2918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c936b2d8-5532-4be1-965d-5758c29e7675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13301712-9705-4074-a5a1-935cbc6e1968", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.106']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2240fe83-28c6-4f3d-9a5f-861fd3109796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9630c95-a461-4c62-8d8a-8dc9e0f2582d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf026f2-4ec3-4a1c-a764-c60b000e0943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd78533-e1ea-44e7-ae3f-8f87ac2cbc11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d072e326-8889-4f20-8f14-04a9d08c5bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a96fae-59b0-48b0-88e9-807bc48e9552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.112']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8026131-109c-4c6e-abc4-f2594727629f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d61c8756-bed1-4a1c-8f16-8b3a5bd1f7e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e4f59dc-9f66-4389-9691-1d6a1997fe20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f620853-0d54-450a-a9a6-da9dd5d074bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abffda0d-02b6-444f-88c8-1d3a03e129c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8b0719c-80a5-48c9-b6d9-a82d49b88eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43599aa-17c2-4976-a5d8-cc0923fbd112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--621a1c8b-ee76-48a4-99ca-4f9590315e67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c670d43-7803-487a-a2a3-1ff896059f14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3534d036-c193-454f-9ba6-47d7fda31cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857e524e-eb5a-4863-b3e7-3f0ea12dd5cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d561403-e2cc-429c-ac0f-34366e87e2b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.14']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c81260-9252-48f8-b84e-e64d94129c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4dcbae6-9ea0-4123-9e75-cdb6ab0c71dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--103fc168-d59c-4799-b66e-95adb5947c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f41863a-289e-4b5e-b18c-d287b4854d3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f6753f-14d8-4122-8bee-abdb9511c4ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9faacc24-16de-4b3b-9512-29a43bfc546d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e15af92-6bf0-4431-b45b-2822d6495a2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--762f5d80-2559-4ec9-ae5d-415a2697313e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03211eed-c11e-460c-b22e-9044fc47d8b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b218282-fe98-4b69-bd15-4d7db22db17c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f8bd82c-4cdf-4147-a65f-15019c29774e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fac3f42-dff0-442f-a3bd-7cc696bb4101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7439cb6b-4684-4198-98be-5a2601764782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cbba8b2-544a-4faa-92d2-93196a420c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89980675-080e-433c-8e89-dbcbeaf9a8da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e07893d-db9f-45e5-875b-e0466c7724a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa7d5675-8290-489f-8885-ed8a55035f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6438fee6-b4d0-4dab-b9bd-088cbf3fc01c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b55121f-35de-4d2b-b41e-38cffaa7e5c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b3ee8d4-55d1-4e05-8afc-6899ca64e3cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.36']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d79fee85-546c-4004-b8b5-4273ed638814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cbdbe8f-5e4d-46f2-9bad-2053ddbde1f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2c3ae1-7d7d-43d5-8fb1-120a5cd3bf7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd8e76db-3cc6-498d-aa5d-664008bbcd9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72b6bd65-fbe5-4246-bea3-e5ee02dd8a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0fc04c2-2603-4669-9b75-93dd92a42878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24bc9210-6fa2-484d-9e36-3401fe02bbd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.44']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7fd8942-96a5-4184-a650-ba4fe03f0a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68661a6a-e064-4cce-a309-cecff9d712c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ae239c9-825b-482a-8b18-bca83ed3a3b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.49']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--408116e5-b64e-427f-a5e8-f8cebd8adb40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--388b600a-3e09-420a-8d9a-06a6b6cc108f", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f9a8369-4896-4199-926f-170c7c7c14ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.51']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b94be0b-fe80-4091-9122-42ae0f5ae57b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06ba148-488e-472c-8bed-cf512fd410dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.55']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab8afe0-978b-42dc-8805-694e192d42bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.56']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a051143-6141-4160-8ccc-07a460561d50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0216e769-13bf-482f-8c83-c9f74844079e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c88a197a-a42d-4bd6-b9b1-820cd22235f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f5d6cb-c5f1-4d96-902e-b2ab354c6fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.63']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de035d79-60fe-4447-815a-1643a636b86e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.64']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d5d017-59d6-4a6b-8402-4b1db49413b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70065d9b-4fd9-45c6-9e08-9758d83abc77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b834c43-a047-4562-9d89-26711a3df2e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b6e022-8bd8-4a36-baff-0c3f9cd63ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--931bbf0c-e294-4701-98a9-64d02a5b5fbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1252e7-6507-44f9-9883-d4cb7cc0fb17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e8ac4a-8c96-45af-93b8-cbcfc55750ac", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a435662-8cc1-4785-a1e6-273e7d633afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cceeac1d-c59b-4db2-ab50-d803945a1922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1954141-30d5-4b66-b482-106b6a7cbcde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--964256a7-bf64-4ec9-91a7-e5fd97d489c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be1ed735-8bb9-4454-86e1-ff62c07884f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e228aa7-4c16-4196-ad9f-577c248354d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c506be9c-144a-4402-b503-f78ce7e99e6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f1d7852-14e1-4c2d-895d-41b2024a9fb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7715b29-dcdf-4a45-8b3d-df2691c87575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faafdac5-9330-4f64-bbcd-406d5bae754f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46998d75-5dcb-43fa-9ab7-0f552d5ab5a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ad7fad0-ba30-4e6d-ae67-ef1acce73339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.82']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97b89b63-c958-4c8e-a990-956ac629f0d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed08b495-4c08-44ef-a144-c710ee416215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.84']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c647b712-b047-41e3-bcc0-a871f4dcced1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a50d47-297e-4a45-b5dd-162b5d0b05cf", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2151f1f5-59e8-4a71-bf2a-b3861182b4a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d0d8d8d-21ac-4348-ab58-330dc6725a5c", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5a49d1-19a4-4518-b252-9afbf9827c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db8b7ab-f752-485c-a95d-92cbb62c6d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad83ffe7-3091-4c1a-8215-0237f984e539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.91']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cf70af7-7ecc-4e7c-9d09-22140a4226b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6188dd2c-7569-4962-8bfe-0d2cf7c37f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d6a148b-b6fe-46f0-a49f-236d426a0cba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8e0d9c7-b760-4ac4-8a06-a53d5863ece6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.96']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff9b62c9-298e-4ad5-b492-587fd8b69a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.97']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8495bb94-e887-4640-b0c2-79d025baab39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa1f5382-17d6-43a4-ae60-f1816d4b54d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac6b64e-31ca-4797-9a09-7726b6e900fd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.6.249.0']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac83075-4340-44e4-8c4c-fffd0f20fd01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.63.64.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc5abd1-c21b-4bf3-b4c8-7d62fdf389aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.67.173.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c37468f-e5fe-48ce-9639-1ce621dd7426", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.73.187.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38b685ed-1569-4493-8414-c24f4e5f84dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.70.200.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d582fe0c-720f-42b2-b04e-c4ef10d7a948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.178.110.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a52d42-b6b2-446f-9ab6-37f701092b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef719399-13ca-4ed6-90e2-5665805ca702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.229']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1175c400-bb0b-4174-bbe1-52f1f05bca1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.230']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e55c668-247a-409c-8c8c-fcb72cdfe8e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ecdddd9-a3fd-4ac0-bebc-67141b6a2503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.232']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a438c5-5146-4529-bbe2-eebc410c2133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8968bae2-47f7-448d-b3e2-981521e2ab71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cdb7b7a-32cb-4b70-aee7-3cff0045635c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c780f848-54fe-4fe9-ab4b-c43515315481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9187a96f-e5c8-484b-8d9d-7aae5617aad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cea397aa-1043-4adc-ad49-feac5073c2d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.135.131']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c832864d-7b91-4832-8ca6-c7f2acd70d17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.146.186']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e936f347-3133-4c8a-8ec4-c3a8eb9ad214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.147.254']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0769a04e-35b3-4e60-b6c2-478fb597bf89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.158.166']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ef3c3c-91ec-4677-9ef3-6fa84ad051ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.165.200']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--586e0153-88ad-46b3-ba94-fa27233df021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1dee002-8ac9-4cb8-b499-8c378c21518a", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2927301-a617-448a-a1ca-fcd7f4204318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdca18c8-a2cf-44e3-b356-f96c0195d64c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ef1ccd0-257a-4ba3-8ca5-102ffffa9a19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--797105a9-7a2b-43d8-afed-e343daa6734c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec4d096-0970-43be-a042-0305dd51f6ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c53473d-4245-45f6-a1a9-6d8322bdbe48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b419e09-8033-4b97-8f77-156f9885dd61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a875a53-64c5-48d8-acd0-8fe5437eb9c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.152']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a77e6bd-41a4-4b83-928c-b973f2940640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c7e51a-48f5-444e-b0d2-f24567ce90f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.176']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e42be5-adb3-4eca-8af8-c3e32ca37db8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d7f84a4-ce67-43a2-9ee6-d309c26965e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.182']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad670155-baff-4fa2-8b29-70b17af979aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.183']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63bf3e73-6566-4b58-bd9e-3e52621661df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c71921ce-051f-4298-becd-6bc3a58b80ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--208025ae-3896-4a56-9d73-4a1c06669b7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e8236c-8269-4d93-a2ea-6a00449568a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e8c070-be3f-427c-acd2-c201db144ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21eef725-4170-4c58-9702-0d8e8e90dc33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.217']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82bd5f9e-3a9c-4cee-a5e2-08dc651a4490", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb1aad80-bc98-495d-a3f4-fb869ef2503e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--394abc7a-3fb7-4ce0-af0d-e9a712fce53e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f6f320-1a6c-435c-a458-f1cc63b34e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.252']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dafce368-7c5d-4b3c-b572-f4a65b5795a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.240.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49afcedd-4401-40ee-b229-54aa42f7f0ff", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.80.228.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3822c631-1ca5-4989-9fef-19aae8059354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.11.149.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90a8c344-6a44-4e85-816d-01cccc8be929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.176.160']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--387cf90d-05e9-42e5-9f7c-26f683355c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.178.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--988dcf2e-6c9e-48c5-a61d-049674c935c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.178.186']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b0a128-8a17-47d6-ad97-f3d37019ff65", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.3.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d33d7c04-55b4-4bd7-adad-e9f3d6d35086", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.27.64.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6848ae62-6185-487e-9313-bdd8d63e4f43", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.88.220.96']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--361ac883-b777-4cec-8e6b-db8157a5a556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.90.84.62']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc569c74-77cf-46da-a892-d882fae91bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.90.88.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73de8a89-6882-44a7-a832-7cfa37a4e75a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.240.187']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b07b01b2-ac5c-4b96-9fd6-2d0b18c7c2e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.241.211']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f36e187-b71f-4bed-8c4c-51f8176f8bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.252.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bed0684-6529-4060-801c-a2ad346ceb18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.252.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e0f211f-b9ab-4579-8a69-d7e7f3d8cd5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.253.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f72455-ce16-4352-a862-0c1a9ffdc99e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.225.162.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94290541-1a6d-4285-a798-91f123a778de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.100.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e936a6eb-e250-4b82-a6ac-4cacac6c3b38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.100.195']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b1f9ebf-b894-432c-a139-fe2e0716ce63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.100.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8388455-7b0a-4ada-8762-bbd9e2735c7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.108.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c853e98b-d5cd-4ab9-8bc6-2c29a81c3ba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.178.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7e6757-0346-4847-890e-642821f696a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.178.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b75392d5-c43d-469b-840b-ccd12f0769d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.184.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acfa9fa1-2643-4bea-aac0-2c451b1c5d2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.192.232']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3528a524-6708-44ec-881b-26c18570dba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.192.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaee9b11-9d00-4e61-80b1-55a5353ef224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.48.56.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be4882ef-8382-4f9b-a768-00e13f9470a2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.175.131']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c65965c5-b44f-4af0-83e5-553379f777e1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.228.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80651975-4b73-40c7-9262-25f4db87ccfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64050d04-22f3-4e75-b75c-c49f2581345a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c5af65-cdac-4b82-93b4-65456dcc8aac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.14']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38250ee4-965a-4c4b-b101-cb12686d8156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--262879e6-6a57-459b-ae65-07cb117b753a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e71f1e02-991b-42f4-a267-3710d4ad2c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.2']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef33c860-67c1-4508-918b-63f46180789a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ca0d50-8f54-4a6c-9afe-5005281ed614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--637506b1-eb03-4449-800c-6974c7249978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007f246c-751b-4ec7-a453-88df33df9c1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06fec941-b8e0-4122-b821-77314639a5f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff4c2c5-acb0-4dc4-a8e3-8c25b2eea6d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--436e8462-c13d-4073-b4e9-0f4854f0a12f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59bbab00-b45d-4f5a-8730-df0e4de2364f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d34c34a7-eec7-4cfd-bfda-619d5d55bf78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--538c0bda-a6ed-421d-950b-d12e69325bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9922efa-cdd6-43e0-a3e4-841fa8466d18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff61ce45-5d89-4f9b-bd34-40ec5fad236a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d077bc47-e91a-40f9-b8aa-01e119925c36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b08ec2-d493-497d-9e0c-53fecc2a68c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab1872bc-dfaa-44c4-b674-4795f19397c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.48']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0590978-8dc9-412e-994f-a513ea4980a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.49']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c89ebbe-08fc-4327-a7af-0f3e276cd04e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57a17fb1-d7bb-4ded-b3ad-c0b533732c6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.51']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62eae36c-4ae2-4aa8-9b45-0f8e8ca7921e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c4404b-7a40-4d52-8381-737d699e31c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.56']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba7cc38-e08f-4a69-997f-667ecf11770d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbbae586-06b8-4209-a4f2-32c1cda64a1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49bfceb8-b57f-4c76-92e6-48a7d0c80a66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d3ece2-aa7c-49e0-b0c5-c52d0019aceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.177.39.49']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3671dd5-4c9c-4de1-becf-d0c4a31cfb1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.187.110.192']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d095bc3-3954-4f2b-bf79-46dc779e992c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '76.103.231.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e2a65f8-7e99-403f-a3b5-b8d531092027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '76.74.254.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d40b0bba-01f6-4cf9-bfcd-4c1b0e6deb09", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.105.161.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07a118b9-7ce0-42ed-8ec6-ad8343bc5ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.198.64.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7fa549e-555d-47fb-ade4-f37904c9a259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.25.143.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a54169-d17c-428d-a28b-d54f32ed32a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.46.147.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c13530-68bc-495b-9321-e041f6c39513", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.240.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07453867-8385-4e9a-b147-49843fbb88a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.176']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3bca4c5-bbb4-4298-b0c6-67a84369001c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd6f5ae5-6cec-4835-840b-6e86bcce71b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513cfa3f-f7a9-4718-a64d-311be6af29f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.54']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bcdb8ef-6db1-4f0c-a413-4c66f5858542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71dcc9c1-df6a-421e-b6c8-78c5da9f2e4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--288478e9-50da-4bb6-ba5e-8697d7df9592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96677132-3f64-42c3-a785-48e8b474e483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--625de4dd-f1d5-429b-ada1-42354c648cf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.238']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f5d920-5ba5-4474-a0cf-c34bc9c4c220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--277f028b-41ba-4988-924b-a5c8740fe528", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9fcb3fa-737b-4938-85cc-78dacdaedfe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b35f32e5-b4fc-43d8-ade2-28e309a7b7c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba3ee84-6212-452b-ad2d-33bda8e41a3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d5f59dd-8451-4d3f-afc7-7b98fdc327f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6013bd0-1209-4e66-a9b1-820f7ccfb02b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5523eb66-de46-4812-b154-8a84fff21df9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be31011-d702-40fc-b3f8-e43f467bbb34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.94.47.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95d319b-2d7e-4d72-b698-e6cdbb3d0f4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25636e9c-38e7-42bd-a640-bbb9f0fc9264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.225']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f5f43e-f94f-414d-86c9-27233649acd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.242']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c94bc7-d05b-4c1b-839a-8be86d6373cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.246']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9086127-33a4-4e6c-a0f8-054dd724793e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce54000-87d6-4c61-9950-77bc7f775fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--844065ca-8cef-4309-90d3-dc8bbbe0df5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.6']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--459bf294-e14f-4673-b464-03ab5140f220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c4f704-e8db-4eee-a304-bae859794e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ea2cae-f342-4f6b-bc82-8b50998f4351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19318811-6a25-44bc-bbcc-0ecdd3df3b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86db84fd-1309-44b1-bdce-6692bfea5007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3d5323-9c0c-4d4a-8850-3fcbbe4f5a85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ebb8ca8-962f-45f4-9e39-8d50cea54997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.162']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd121f5c-b6eb-44ed-a6fc-c45db766dde4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5cdeba-afa8-4419-8d2d-5869b504c3ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--351535f8-e2f6-40d7-9241-797ac50654eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96956be0-4485-4a1d-bb76-d02aa7f19747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d7dce13-7201-4281-90a9-f7a294cb809c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a39a47-311b-4860-b608-e00e50658994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.156']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01f1fe80-9ba7-4202-95a5-aaef54f63aa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.159']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f87e1e2-ea21-435a-be6c-03d5e6c1cc18", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.155.20']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7839f19-fd40-44b3-abf2-33942700e1c9", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.188.26.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be47337-0175-4f12-9bca-03b67df0b4e8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.25.5.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc65233f-52b2-4820-a071-76fc0e60ac28", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.39.109.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e8329f-fa57-439f-932b-19421630d0e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.47.4.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5337078-88c3-4881-8ddb-113064bc4ca3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.117.56.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15f7ec82-f6fe-42b6-9801-39a792f75017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5760f82-9b8c-4f3a-ae8a-4851f95f90c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a82ac5fa-c512-48ab-9662-379486dc55ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dab4dacb-92c9-442a-966f-97e80624d88d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e50cae-6338-482c-aed3-b818716707f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.166']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc854f4f-15f6-4fd4-8fff-d341f52c5832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.170']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a1982fc-3b2b-4cc6-8df3-bfd6811292e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2021-26855. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--faddab46-3e66-48db-b563-a41096747813", "relationship_type": "indicates", "source_ref": "indicator--0a1982fc-3b2b-4cc6-8df3-bfd6811292e1", "target_ref": "vulnerability--243f14d4-473a-4fc7-b86e-710ae7d9d752", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b31fbdae-85db-4df4-8c62-aa7b6227ba6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d6809c-2909-4d95-a87f-445fd155b716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.186']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c52d3b-b59e-4ce1-afc1-2da855767e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce3121b0-7b27-4434-86cc-22393b7ded49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af60d7d0-f3ca-4445-bb30-2857a6f00347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b251d147-017d-4bd5-b4a5-3a170e97eef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--325c5f0a-2765-4068-b66b-413a8efadddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--942fc755-d7af-4f91-9869-6d23fea22af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a29449cb-911e-433c-98c7-93e61e404d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.162']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8310a6a-ec0d-4faa-82f4-0ce9a44225a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.78']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd4272ad-bc92-4076-b67e-3e00205f08cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.60.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7bf4282-6d05-4a1c-be9a-06cf26901354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949bc4be-d764-4ee4-9f99-0a9386831047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0cdbbd-a25b-412a-81a8-15ae1a920b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b6e9358-6d27-4bb3-9466-fd56061aa0fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.230']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e84845d-c59b-4eed-8613-1f65dea034b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.143.178.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecdf0bf4-b0d3-414e-9612-2e728e75c1f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.175.176.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e029f6-553b-4707-b4fa-8db44966fdcb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.43.242.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b9bb40b-84ce-4f7c-a743-20587cea30a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.8.46.135']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ccc3d7-3eda-49ef-85da-7655e29aa979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.130.161.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d064d99c-e560-4a30-bb58-af8808852a52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.134.85.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7769dcc7-30cd-4545-912a-c6f9d71da6f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.138.155.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd6cee86-c2ce-48a8-8c3c-057699423a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.138.219.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0756899-a0e8-4a78-9cd1-0c87445ec215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.146.237.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1adeb13-9f29-4a73-ad3a-0fa5506ad478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.148.218.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ddca11-ec33-4dcc-bc3a-a094a7fefd73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.148.81.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--515c198b-63fc-4d64-ba23-8f90c7a6486f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.149.240.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0ef078-c198-47cb-bf32-5b1ded3d86e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.152.103.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa51a13e-75c7-4c07-90bc-f7e866e787f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.100.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53be574b-1643-45ea-9365-65b75cf2e85e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.108.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e2831a-67fd-443f-a357-7f7d2e7719c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.109.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac19311-4279-42cd-93bf-c73a720b6935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.112.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c79f1a-5e7c-403d-a8fb-d43a88df7cdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.115.1']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc8c5cd-15e9-480b-af1e-cae650e329a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.124.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed526b00-ce9a-48a9-9ad1-685997d2daf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.126.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--054d12e7-f230-47b9-ad10-453dc8461dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.201.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f706896-fadb-46df-92b8-d2bc4481b53a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.201.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34225a94-6bfd-4e13-beab-3871b093f866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.238.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c4c1d97-f934-430d-bf5f-faccf3294a48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.238.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04a9538-2f0f-44e2-9ebb-0938f75a7684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.64.131']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d92116-9213-4a49-8229-f82c63f8f994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.70.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302de9d3-2103-4cbf-8abf-d194ecea70fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.74.160']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d953e557-8276-42d4-b321-5d4db3ad8b07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.82.97']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf21ba87-2dd1-4f51-86f8-91220f044e19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.83.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b45701dd-34e2-4375-ab75-d6f30e922357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.85.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03bb7793-9ab7-489a-96b9-e52e50e221b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.89.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c6b7bf-fc97-4d22-99a7-856245206b3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.96.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec96259-cf13-4c67-8761-8786d9a3060d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.97.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d33e616d-84bd-4406-9b09-a1ca103b0404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.210.18.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c9d2f9-df7a-4fe5-81ef-f353584fa541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.0.173']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4170cbd9-60ae-401d-bb1d-1ed2ab46e123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.12.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a72c841c-3361-4b2e-8fd6-b80572edb533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.12.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f80096e-7d3d-469f-ab3c-658b90db8dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.128.112']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff4a9bb-14a4-4248-a3a2-976c086e6b51", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.134.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa081a0-98fe-4547-ac37-3026f7abff02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.141.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77734252-b9d9-4d35-b6df-652cde98f5c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.141.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c47a4ed5-098e-4a63-9cbd-ec817affea3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.145.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2036171a-95c3-49a0-b85e-b130b0b83521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.15.153']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1036d85-2947-4353-93da-51a8894ea3ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.15.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fba5fbaa-48d6-41a9-80c3-300fdafae999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.154.230']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a092c0f-9e4e-4ae0-9745-780326575c63", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.155.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20de47f5-84df-4320-b4d3-0b184ffe382b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.16.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e2fee16-9d7b-447c-adab-b4234afab27e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.162.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0ecfbad-833c-44ee-b2ff-51f07f4a9672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.166.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3077ad28-d2ac-4f3a-910e-2cbec8870da1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.19.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19068d1d-ba37-43b4-bebc-14706d2e1b59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.2.225']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c96bab97-be7c-471e-a7bc-e88bcc2f2aa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.25.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b847a1-2637-4439-ac3d-dd06e0a7b1f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.25.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ab8764-2e28-4962-b50f-e05c51bdf9eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.29.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--668bf9ae-6524-47f5-9d50-398d7dc93cc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.32.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95df21bc-3fb1-445a-81ba-edcf03e02ca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.33.200']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7576fe31-7dbd-45e2-ad1a-434f1172abb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.33.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4651e944-55d6-443f-963a-79735947b1f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.37.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dee741f-632c-4671-8834-bac02f448b26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.38.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10cda643-a6d3-4cce-8493-429c15035442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.39.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32260aef-c95c-4328-b02d-3fe298a5548d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.41.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93fb4a90-2f2c-4378-8ba9-d6575c207ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.42.229']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0f2a2c-4ef3-41c5-9079-d3ef085529b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.44.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09406b37-f6d6-4eb0-aed4-b1fadf6bae91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d9f21ce-27ff-4a59-a6d7-31aeb00256b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f95ff8-c012-42ff-9ad3-0b4fe5ac416e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cab0a7d-e8ab-4768-affa-93d35be4ecb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.46.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4597a72-cbed-4dcf-94ea-ac001809e0a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.47.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--150e04d9-0ec6-4049-851b-b8c1181377e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.47.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ffcfae-1e87-43fc-bd81-98ac3bc0edf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.5.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c227eddb-7e0f-400e-987f-eceecd543f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.8.167']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb7287e-a81f-4972-baec-c259637d70bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.9.248']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--489f0862-2fc6-4b5a-b7fe-2e0c0b19ddec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.0.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b971247-c1d3-453c-ac12-da88e2c9942a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.1.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b76e8b41-3cec-47d0-af65-48656f5e2cef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.1.47']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07a20915-4726-4ec9-8897-c774a7ccfc65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.10.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5034c3db-f0cf-4491-b2b1-74079ed6d68d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.11.171']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3306f1-1108-4514-a765-d889993a04f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.11.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--663e2223-2714-4e3a-b4c9-ce482f06e124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.11.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b957716f-84ca-44c7-9331-c8319ec02c2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.12.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8de3fc0-70e9-4628-8211-4f3e4dd5828a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.12.140']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d169307-3139-49bc-adc5-135c80908c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.12.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f68b43f-a4b3-481e-8231-53e44a806ab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.12.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244d2f95-8f5b-49a3-a9fc-da067784f3dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.249']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca1b1ac-9b56-49be-9892-15da70a94afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.14.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ecfcf1-e181-4ec2-aab2-679364b95ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.14.190']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a65ada3-4ee9-4098-9c26-29531db8a915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.14.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d08e7f3-2890-45fa-94b1-4bad3d5fb582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.15.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c6267e-462f-4d02-a575-3aba35c02d4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.15.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3edf90b2-df57-4b60-9c3f-ad5c18fdf368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.15.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e28144e2-3301-48e9-80d4-512de9c90fc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.120']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--777c3a3a-623e-4d31-900f-77d4265e2c9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5de9610c-5f0c-4fb3-bc62-7b779db04be8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0dea8b5-723d-4254-b4e7-a3474b2cd1fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.162']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a88cfee-dc4d-4cdd-a569-0bcd8010b365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.18']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be27e37-b068-4c29-af06-b00178351f31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.200']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68567de6-ea2f-4cc3-b3a4-3d688804fbc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e620f978-d201-4b4c-97a3-c5cba4530b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12468795-b551-437d-a19a-65a8345d6e8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.135']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d8c13d-3a11-4364-9dcc-bd5c7fdf8188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.163']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--290b080b-566d-43b9-b269-2f11e294ae9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.176']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--069b3735-bab7-4bb9-99cf-9339f8d3f0dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17258538-6c9e-4bad-a34d-c3f7473e3c0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0a9c759-aef9-46c1-9d27-7858ee18e20f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.61']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24590fdc-d2e7-4f33-8a41-f07a3878c141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.84']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd593ae-2781-436a-b393-bdddfd3d827f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af59f6e-df26-430c-be03-4dad7f1891e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d9fb3c-ceec-426b-aa60-d2634146e78e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce2430c0-2aea-4aa9-a648-8d5d93794b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c4b7b61-cde8-47b9-9373-2d5bd2522e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9188453-bf86-485e-bca8-4623ad0d4f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9fe1924-51e5-476e-884d-0ab22d541820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.63']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e2e2c0-9fea-4519-b434-27c361b7a7c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab935740-3599-4cb7-897c-9755ad2bb5c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.148']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c7957a7-56f5-45c8-be15-d7919cbf4cfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.184']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5f6dbd1-93bc-4ec6-891f-2e2e862fe9d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffe5f170-cfbf-42f9-9f78-cf2deceaed99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5648655f-cdab-4b7c-b041-90c1498d0533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd650435-1746-48e2-8602-f26b11f89123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.241']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca10081-0415-46e4-bfa2-5d666a6b80c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c22d1a5-d5f5-4c9c-9724-46115b516bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cdd1779-fd0d-4c13-b9ca-0dcf96eaeeb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a22415f2-18f8-4281-a973-0ef9347d1f30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee5a1cc-bd95-4113-822f-a2b407e2bd87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f606ffd3-a20c-4140-8a6d-28162cd94508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d541d7fb-0b8f-4ee2-87df-c18da289a084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.246']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a3ae85-d6f9-4057-bfde-ecc3c55bd535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d402589-70c2-418b-a00f-5d8141c4490e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad02f2d-ffd6-4c66-ae12-829021b2958f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa212be5-d402-4b1d-9631-52728d7040ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55935b9e-08a8-4866-b1fa-8d818dba48d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2204ed9-7894-4259-a499-2b95ad3c573e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.189']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b3957ee-eef6-46ea-a452-aec2b986339d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77335b63-e3cb-4859-b193-117dc4cc21ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.220']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b17be841-a088-4bdb-ac03-1791313aaad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c432e64-810d-4c0a-abd5-5ad77486650b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--769e2e7d-d513-43e9-b914-b0542ec0e598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5baa9c2-0649-4fd7-8933-9f536891921a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62d64228-4c30-4d18-a5e4-2517f81c7afa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db92d0f7-f6de-4bfa-9133-560130886906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--201ef4fa-b87b-4a66-acec-948b4d042433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b593f39-f266-45de-af15-38a686786d21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c20cd346-9eb4-47f6-9830-84fc4ee93d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6984d8-0826-4c03-8279-8afad9b7d668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.246']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--449170f5-62f1-4fa2-b035-903987765496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.64']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d9e668b-6b32-4edb-9b46-1bf8e94e601d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f48ad2b7-1089-4ed5-a7a7-978a4c98b8c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.85.238']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fc34352-28ed-48d8-b194-4646ae1a0329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a62ba369-9a78-4948-9333-aab014185c1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b06e680a-eb0b-4e65-9749-114aa1ba6a4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.195']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ceb8c1e-f956-4855-9dab-e76ce269f408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e01baa-974c-45d8-8330-fa7c08505fd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5abac377-5b19-4ef9-acc9-086dd0b38c2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.91.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbac08a1-ad0d-44e1-b50b-9bb419a3857a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.217.221.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eee0d69-670f-496e-8d2a-3b8f55355d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.109.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e902de-c6ed-4214-8215-9132f5fd1e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.11.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c991bfca-1ff1-48f1-935c-2b696818a4ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.112.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de8bf19-0817-4f81-9bc6-4b5bbbccf0ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.114.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd3abc31-ae32-4c60-aa17-17f83db2a9be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.132.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc10320-00a1-4ac3-937a-6da72e2dc6b5", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.222.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1233bc0f-5ef0-4ef4-8695-6385d7c2dd91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.68.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e713c7da-bfa0-40af-960c-8ce6fd21f20c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.79.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e9b6ea-25f8-4d39-a23b-a30ac1b932d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.96.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--202f7b44-31cc-4b31-93b4-3e84cdedd9e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.221.139.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed68e9c3-4767-4730-936d-463a2192fb26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.135.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1aa381d-a2b0-4a7f-ae5d-a867beb8e83f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.160.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34873229-3cd2-4963-8abd-b4eeeca4cc3d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.178.0']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b98d0d3e-b989-4a8b-b251-63e9436fee78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.188.116']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33182665-603c-4621-9b85-742359df9f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.242.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dac344e-8837-447c-9a12-3cbaac57088e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.178.102.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6b2578f-3855-4787-abae-5630a29ab99e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.245.93.163']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0ee0442-2eab-40b3-bde6-ce1672ff00c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.251.153.240']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e99b1532-802c-4cfb-b580-aaee25283ed3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.49.158.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--290a954f-2f51-4e05-ae3b-43daa7283637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.72.211']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75942f84-65bc-46d9-bf08-1454169adfd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.76.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3523bf3-b639-4b7f-a45a-cfe74a4e0014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e75cf2-ba2d-41fa-b129-100c3633c7e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b78d38f4-5083-4667-bc6e-192a446cc601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.85.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adcdb721-7bd6-4506-bedf-0fb2cf759065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.70.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b472122-34a3-4dd2-b987-8866b76d031e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.70.228']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a9f4853-d21f-422d-a378-cd0e809ceba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.139']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce7435b-abb3-47e6-9a79-0947e5af7c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd707482-f7de-406d-a7e7-8bb2b46b9db4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.85.84.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--268c28e7-5ddb-4a3d-a6cd-32c0f6c6bca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.87.206.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41538cff-91a3-4b0d-9bec-2fa446c439eb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.164']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ade1e11-5dff-43a9-8234-2cdd9c498360", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.165']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298a46b6-f4bd-42e4-a809-a568cb406e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.166']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f87cd6-f458-4000-b9f8-91badd354098", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.167']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--420b5a26-d9f5-4041-bd25-b3f6a6d671e3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d35a034-a823-4009-8c7a-a4a33e42b282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.169']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81b0e1a6-75f0-4d70-8c07-8eaf56302c2a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.171']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d2b0096-f570-49a2-9ee3-043a40c2dd1f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1541227d-15f8-4d34-af07-3efd1ccd367a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.187']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea7bbb5d-7a0e-4e6e-ac2e-c80878e5894f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbad85cf-b1c4-4371-ae94-13b95d0ffd62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.211']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf8dbd5-bc18-445b-a432-e2f4720e232e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0045eaaa-c9da-4e09-964f-fb02d246fea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17661e4a-81cc-4c63-a258-c670b1fae0f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d33d90aa-2e57-44ea-b2b9-ce6ec67a11c9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.95.11.58']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--765428f9-c132-46f0-b5b8-c87d78e21093", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.10.24.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c413a0b-e0a6-4236-89d5-c739927d246f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.16.177.200']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ebbed1a-845b-4cd5-8214-6e5afd2be739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a24e5f31-1718-4e2d-b35d-f84f9ec85eb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.102']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee33ff12-edb5-48a3-8d10-4842b154e903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c9d915-39d9-4f12-afba-24ec6a521f10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52fe3ef6-3f7a-4774-8c26-0f97fbd491b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5ebd65-e888-41f6-8b86-1574933a9a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.106']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--492594aa-9794-4707-b3f2-18e38d60ee0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb45bfe9-8744-4e48-ab67-aee39db53b20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.108']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5961de-d900-47be-a6f1-bc472e25fe65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9653bdb2-e25e-4a5b-9319-d93e3001773e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.110']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aba091e-4c55-45d1-92d3-bbd89fd35106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9a51160-2869-4e90-90d2-263fe047e45c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e60a0b4-1fa4-43fe-b781-e57bfa4baecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e06a5d-d92a-4409-9237-10fd5fedf7fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f1a1ef-173c-47f8-ae74-7c8a6c37b9e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea58b05-81b4-4269-b018-b7c9587f4856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.126']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11284b33-943c-4aec-a6cd-0749b57f8994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f7ecf2-4326-4285-a085-2fdf1da6e5f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc645cee-c4cb-4ab0-a486-02f3e202aa74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd3872d5-5095-4065-ad09-c81904fa54a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86d423a-02d7-4231-bc02-16d40792d4ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87366957-baff-4144-9eda-05879c07faf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9bbb9fa-5989-4638-99bb-ce82f2d4508c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a539890-7bba-4302-8523-41f010fe9854", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--379faacd-e4e7-42d2-b186-f2252798e629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9641e5e6-a8bf-4321-8251-abe87bf59585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.80']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b510732-5ef0-41b5-b194-d5b9dd2016d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--814f2ae2-f37e-44e0-a7f6-e4f10f09559d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2483f3cb-3c8d-41e3-9160-db4e416c860f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.86']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90a0b445-decf-423c-b6f9-20c486d3dcae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255c15a0-dad3-472c-b6f2-164ffb33f8d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c4d66e-7c41-4431-86b6-d153be397190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--832f1e15-a5a1-41ef-9562-a8ad4ebc31c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b88c6517-504e-4f65-99fc-9dc2b85e591f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.94']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f64deba-3f11-4651-bb07-c1b0f40a7854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99cec232-e79e-4e18-a402-1778efee97f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.96']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93262868-10b9-426e-893d-3b039861831f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75922516-69a3-4e0c-a62b-e356790dc141", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8acf65c9-00b3-419f-a634-0b6cb75652fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdd7d9b5-7efb-497e-8b97-3a71d03bf9d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.246']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6601a8d2-6d84-4a27-bcc7-44d76ee8bb1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.249']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e40c69b-b6a9-43d4-9516-e7f68293ef60", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.70.2.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--467d9490-f9d7-4940-a6aa-10c66978eab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.71.93.64']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb7f3444-61ba-4a69-8d5d-4a5a07738cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.153.246.240']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2becd59b-e816-4f83-b41f-fff96d85d067", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.156.34.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f6de00-c6af-429b-be18-2bc745584334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.167.54.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b08705cf-0141-4408-ab7d-8f5e17d05de9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.205.27.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25185014-869b-4b81-be7a-c10e288822a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.21.206.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8b80172-b97a-4607-9f30-53cc522f459a", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.25.63.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3a5bbc9-99cf-4ea3-b1a4-8057ea8c6e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.58.131.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11ca6df-847a-46fd-8267-6d44c370f86e", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.65.142.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--640b95a6-bb12-4815-af6f-d1f52925d3e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.7.67.232']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c5573a-d8f7-4c76-99f6-e3daac461cc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.209.162']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cb76b52-b953-4fc0-b37d-bbe22979c8be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.168.106.26']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6018fe84-be10-4558-92fe-2d5a30f9a0d2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.219.159.253']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f76c15db-53c1-47da-a261-761b5ab24463", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.226.19.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42731cff-a70c-420f-9129-c9345c55809f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.235.183.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef162199-2458-482b-9177-19b99f9e1de7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.250.171.64']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--665b92e1-59ad-4955-9c5d-df14ea324531", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.7.67.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d2c6bb-c066-4367-ac8b-ae90eaad7480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.17.52.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff0bce1-8eb9-44bf-a977-a3b3c1b84f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.201.20.243']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d40bac-4d4c-4d1d-a44a-4f233585f78c", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.22.101.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63826eb6-cc09-4187-ba71-87e6cab6b2b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.239.14.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d095bb3d-bd1a-4197-9b80-6e5be73765a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.247.138.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba023e2-5c01-45b7-867a-1c16df977ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.39.176.250']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d3174e-8167-453c-8009-33d32e4e51eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.54.3.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--654c1026-bf61-483f-ab14-d04e7fb713a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd73aaf3-7b96-4b24-894e-8f806921f01e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.128']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8d5d78-1f3d-491f-af17-9817bf0f2f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b9ed5d7-62b7-4028-b130-26a2ded426da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.111.68.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e853247-2a3b-40d9-81ea-48f42d6e2f7f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.133.193.72']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--558e488a-f833-44d2-bfbd-b20aefb54307", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.193']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d24a69-334d-47d3-8d0f-0953dd7ea32a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e2a6803-20ab-4afe-bb6d-447cbea7fe03", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.195']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b993bc22-3e55-45e2-b23d-67cfdabfb860", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.196']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--607104b3-0a6a-4d2c-b46c-214567dc260d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c89e722-75f8-4e84-97bf-13c9fda93d06", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c36ba42-d48e-4cc6-af70-810d35af7fee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.199']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a394b553-5884-4a7d-98c2-7922ba56f76f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.200']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--744800ee-bc89-4c47-a1fa-f1819a7a9cc2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17047a51-34f6-4203-bfa8-a7b1ec90a3c0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.202']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24545635-35a4-4aec-bba8-47e8cd7fe646", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a31109-6e9c-457c-ae04-495d17be51f9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b86fdcfa-d723-4bd4-a1e9-d36817bc4012", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dfe82a9-df5f-4071-b763-9246bccafdba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.206']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--948bec78-b282-459f-a87c-823c28714ac3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b41d2db-05ad-432b-bde6-296c1c5302b5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c6f07d5-9298-444d-b300-305f00341899", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d853cb6d-14ac-483d-99ac-b9cefda0f86c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.210']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aacd0ae-9c54-43da-babd-8df24361d003", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.211']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96c2fbf4-42e6-4e40-aa86-eb200cf4e513", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa28f91-87a3-41b7-b130-1bbec2b65369", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8870e89f-960a-4cc9-80f8-4ebeb2d2f6c5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da1e6ced-f9b5-4d58-9e3f-1e43b6037ed6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c97563a9-b991-4644-937e-f162b41ecc23", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08fb1b59-5845-4818-b245-3e574aac6f4c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d477439b-b7fc-46cf-b174-600bc0f37cf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.36']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff21b80-3ef0-44dc-b2bb-57e846f4af1f", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--865f8e19-088e-48c2-ad75-f4cf57fa5b6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.43']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93493277-08e5-44ec-ac75-07754ad34eb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.49']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--124a9a74-1492-41e7-aa98-8645829dbc88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.14']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36ba9dc7-4111-41bc-a30c-46bb94168c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.30']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34ea687e-defb-4c63-85b5-af0828f3ac75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f7f6b89-321b-4af0-b206-c51765184d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d67d8a9-5d6d-4143-ad8d-ae11f01cbdc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.236.20.50']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c163d9e-ca17-463d-8f96-e9b0ee1b4525", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.151.41']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec6da9b0-5d98-4100-b0c3-c53b92e9a810", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.5.148.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--093a0c9f-c4c3-40db-8bce-20b4abe8eadc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.176.100']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66cbb53d-6261-4759-8391-32fdff8d1d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.187.163']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8ffc395-3a29-44ff-9b50-56d12d053c10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.166.107.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bcd01bc-f59a-464c-b7ff-864b76163010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.254.114.246']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b578fc-81f8-41cc-b4f7-09467d0da7a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.25.234']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb53208-2468-4025-9ac0-97d8266061cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--005b1b85-716f-45d3-af05-8b7cf0f17f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a173e522-9d91-454a-b5fd-956735463e47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.36']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4087ef72-693e-4ebc-9569-e1c37690b211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aebdb0dd-56c2-43f1-90ac-52754e1a3e5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.40']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d620bc-9583-4cc1-9f4e-b163f24f994d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.44']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba0067a-c80f-4048-8415-543619dacb09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abb980f1-0a76-49cf-b1c4-b411094a19da", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.96.17.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc5b5e24-9c26-4205-b88c-7f436bfd30f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.106.6.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--992bc6f2-9a09-43ae-a738-7ce1b5772d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.120.93.160']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2dc1423-cb1d-468c-a5e9-c64d28557836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.69.138']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e17ed7-cfda-4974-b111-a213e530412c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.202.33.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b9c1fb6-f169-457d-bdcb-ad2bbef1783c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.51']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad3262a-15ef-4334-b751-3a04732ba4d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.53']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--121461e4-8c63-4a9d-a256-2f940cccbd62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.62']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88bde832-9c63-4b9c-9b38-0b6c54eec35b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7356be27-1be0-4f1c-bdb5-bcda1fd6a888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--403a0bdb-27ab-4ada-920b-8032f6efa0f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.156']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f32964-9b27-4d2f-b498-5b5d55741290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86058012-a229-4be8-9958-5606adac1721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.158']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f79e22e-a23b-47e1-adf8-8897751ede89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.79.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--793bceaf-1c6f-4904-9321-d7c378e4dce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.201.1.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b1c3b5-7aa9-4aad-a532-017fd3fd6c8c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.203.20.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2900a5b3-8a03-40c4-9944-2116bc56c465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.63.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5681557-3d3c-466d-865b-2ebea86d57cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.24.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a24518-b6f1-45bd-92ed-fbd877e13587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22fdb5cb-eb11-4ed0-b426-ef0326f536ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d91762c-3841-4e80-9643-72001dfff958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8abcc7fc-2013-4f40-b7ec-71ab251b225b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.26.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31dec975-4cb9-4465-988f-65c00d9bcec5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.225.210.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68cacb78-8fa1-4bd5-8f6e-97c63be55745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.226.226.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf7da546-0a73-4e39-900a-75edee03b1d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.80.189.24']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b59c00c-300d-489a-a84b-72b9746bfe9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.80.20.49']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6d5ad40-dd5d-472a-aa03-6b1bcd98bddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.108.118.91']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b97f0c-1cea-4c17-9a50-4549782f15bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.117.63.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51587fa5-c1c3-495c-83d7-e6823b957794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.145.166.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d0d9fb5-5512-4ef8-b59e-2a68e707a417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.145.167.242']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01206ae-a6f3-49cf-a476-1ac81dc896ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.163.145.38']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8fb9327-4d91-4193-9abc-6bde8a58a24a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.163.206.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f9237f4-7656-4ac8-aa4c-0f8cdd7ec48b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.167.10.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ba6284-5b4d-45af-9488-1de0c8598f42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.167.71.153']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e9a3512-67fa-4a7e-a11c-f93429c7f01b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--890636f6-da67-48a2-ad82-e2b15615a3a4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7522bcf4-ae78-4aa8-8a1b-7e123a3ebf32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402c4a0a-aed0-49e6-b2ba-7a72a50cc37f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b2264a-6bf5-4686-b29a-db297845b098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1295e8a2-6618-4810-971f-463c54186ea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.135']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--701c6fe0-8603-4248-a1fc-7669df1216b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01cf9a84-b39e-4016-8a22-1683366be13d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff112e4e-2563-4583-bbbc-ebb32c004fd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.142']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--060d766b-07a5-433c-acfd-0458a10d90e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db095bf0-0d76-4eed-9198-82e55e3e01e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a09a14-ecd1-4549-955a-6824c6a93e93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c94919-9284-4e7c-914b-4efc9e6c81fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb244cd-11b3-4f1f-ba85-4cda767e03dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.150']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab68ac54-a28a-4a1e-a582-dd2a616530cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.152']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e9b3dc9-9a26-42e1-80a7-a5c6770e9f9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db598bc3-c03a-457a-a56c-63626fcdb3a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adeae893-b09d-4527-9b7c-d2f826b2d3ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--538d3683-ebbc-4578-8399-27446be2e9f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.158']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d776cc-39c1-476e-84ba-e92f8ab7fc88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.163']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--801ae6a7-4e8b-438a-b892-d909ef4d475b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.164']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c674193-d359-48d9-98bd-630060f0b5c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.165']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--882a1540-a24f-4b9f-93cd-7b178c32e7a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.167']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e437d47e-73d4-4da3-9510-aefa6e38a990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.169']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3235b4f8-15ab-40ae-b59c-044412c81922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.170']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50089b7e-2766-473b-8d0a-974fdda32c4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f3092b5-1c5e-45ec-b9e8-63f9a1dac311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.176']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d02e7af-a886-4857-953f-6dad5a1ab594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--749704f2-8044-4235-b7b4-68464a277284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69bd4d30-8702-4a2f-b9e2-8a921ef4eb34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c49fbda-2522-4dd7-a737-ee0d0c19e786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f0f0d80-3932-4e4e-90aa-cb2f596acc06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.183']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae437293-f126-47ea-a190-508965709837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.184']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba4cdd19-6dae-444d-ab73-02535664588a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.185']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b11bbff8-8b2d-406f-ab72-be82061b303f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.188']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37499e4d-ccda-4864-ab37-f1826bc82f32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.189']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06798c51-e4c8-4653-b848-dc1f547dd05a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.223.69.22']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fe18773-799e-4f72-9e66-0adb7ab6a50a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.23.113.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1636f1b7-ca89-47c4-a7c5-4cd8fa500f9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.163.200']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--042c4dcc-7c19-4040-994b-e427c4d87a48", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.167.131']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c21390f6-ea70-4437-b809-dce4cec29291", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.168.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f345699-4eb6-4927-9ac7-7c01e793cadc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.168.36']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c82cfdd-b5d5-4523-a8fb-f75078db23e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.117.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c07da726-18c0-4586-8cf5-6b183db3c32c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.117.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16255a11-5f3a-45ed-a35f-82bdc7410a05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.132']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bcdd102-4cb0-45f0-9d8c-f411abd9b952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.158']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a13d98c-8725-4f70-a9b1-8a7ce9448bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.38.96.216']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd704a97-14c1-448b-8b73-fb307a30be53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.43.133.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d92321-8976-45a2-b63d-cf8d179dff00", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.58.10.55']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5aaac5-6d1e-4d72-963f-56424f83816a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.10.182']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--581e59c4-81f8-4c7a-86b5-8960f75d55c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.10.190']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66833a41-0402-48aa-9521-f9cad9faad03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.8.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de59100-b0ec-4d76-bd8e-0f45d4074f37", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.107.151.199']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa5f5acc-89c0-4f10-8836-594627a83888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.107.188.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac399d9-4bad-4a66-8293-2f8e5cc4bbef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.124.209.51']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75c80772-654b-4bd2-89fe-ab9a762ee2d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.150']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c81aa82-f245-4d80-b30c-e9a66c539489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.177.245.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47155fc0-f81b-47eb-bbf6-857909e0a43c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.185.75.244']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff8c355-2ab9-446f-83e6-d947b89ed6ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.118']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e5fb6e3-79b5-4608-ab8e-a7ec630aa876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40b81b50-320e-453e-bf23-a7017ffbe666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.46']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d8e543c-58d6-4828-979a-f9ec40baf94a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--824033b6-8ce1-42f4-ac9a-13de7104227e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--accecc64-e436-434b-8f7a-83a50720f70f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.101']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6c205b3-1ced-4610-9607-392f9208838d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.106']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08840bfa-a2f3-4fff-b453-ebdce088993b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--256b6390-f5b2-4e85-9b5c-0ad29bb8e315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c258865-1732-41f6-9f68-db1f88083fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.114']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f292400e-8a16-46ab-987f-7235385ec5cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e77c77b-f4c7-4ddd-84a9-45083d5c8830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6293c6bf-71d9-4aaa-96be-f02d567c972e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22144208-55c0-4913-9e70-794a2fb48d51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.124']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--356f55b4-6a15-492f-a9ed-58484e2e29cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938ecf75-7bd0-4ce3-8874-63af8d1fa078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6827f1b9-7414-4e33-bcb2-bd9dc4ff1f47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.177']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a772f6b-c8b4-4b62-b2eb-ea476e2a9e67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.179']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a74b5da-2dd7-4ce3-abca-163906dda475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe39830-9687-4d49-aee5-d8742bc7daf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.183']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ab7b6c-03ce-4f7a-87e7-76439eca0d77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.185']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0d8124-2860-406c-8a6c-e493367a5d85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.187']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c575bb1-e42b-4087-827f-d49aa1ee0fb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.189']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6779b89b-63d9-4a7a-879f-8ec93f4c435b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d90e0e0-19b5-4698-8a32-86df18380537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c9918b-6b2d-4c26-a72f-b6180264e4d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5f61103-9c87-4562-9f6b-8bd1fade52c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.211']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0840859-6e7b-4536-915c-45f702d49605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fed4822-6d97-41c9-be7b-1e03ec08545b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1cbd46b-3824-4260-a37b-4331310a195f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.217']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ec7a84-91cd-4a35-a3d1-868ad5873c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.219']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a81e675-b4f3-4844-9c32-43314ef3f5c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c16140c-b4b2-4c93-9272-a45a61bdff94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.223']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a2a9d3e-beba-4b60-a237-e3932140a04f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a383a53-ee0e-451d-87d1-ab5cd3e18b27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--095929a9-ddf4-4a90-9f60-ffc2dc578401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.33']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37001750-ff9f-4c51-8e16-1b5d6ee770cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.35']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6638c87-284b-4e2c-a4ab-cd4d7d5ac148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5995d25b-afc2-4e42-8039-8a263fce1381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.39']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--191d66c8-adff-4970-89a7-5f22d4ba3398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ca4cdb-7e1c-411c-916e-ee1bcfaa47a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa1df26-61b2-4426-ae08-0031b2407ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.98']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a97015dd-3461-43ca-95fc-ae478e136fc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.199.163.52']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0fab7d6-7d8f-4548-aec6-7c4d2c234d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.204.209.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f87cade-708d-45a0-9a0f-8947dd48ecd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.210.108.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7086aaf3-1444-4790-9517-beea2677a012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.215.85.193']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ded75c-1498-44c6-a6bf-d08c64a8f476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.218.66.198']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--753e89c5-60ed-4368-8f6d-029d41a5cca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.223.69.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cda9f81-272e-4c85-9042-fbd315586a9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.147']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eafd183-fb23-498f-9528-0809bce41b27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.32']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de18d52e-0629-4d4e-ad99-45f8fad449d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.1']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a54aeb-db22-491e-92a1-f7153481f05f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb3810d-90c6-4e78-b32c-43d952138afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f579f69-5210-4cb0-8ee7-29c1beff78bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a7ca5c-60c6-4a2c-8673-a386c0627cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.123']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f23b7b48-d845-400e-bad0-a85d04d98dc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.125']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c69953-4921-4d5b-ae3b-a9368f7d1b6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa4ad8b-0220-4464-afc9-b11ac724e465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.129']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf24e01c-7e51-4fe6-acd7-01c9f15c38f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a1dec8c-2e86-48d7-ae9e-7666ebbaa285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.131']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f18f6c97-d5e3-4dd1-b671-a85a5fbb11e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb0ae43-a6dc-497d-9b39-afc44ecc1080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.135']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ddca4b-81a9-4aa6-9fb9-1ddad53892c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad039b0-2829-49a9-a6bd-c746e1f40761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.139']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c50997ce-cd26-406e-a49b-57720357ac45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0add24e-62ca-4eab-8049-a1deaaed9ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90906d07-22aa-4453-b2e8-760bdf8cb0b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efab81fd-b818-437c-ad29-b55e1613dc55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5efb2dad-3533-47a5-9a70-2e6c2f921248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe51dce7-0205-48a3-a4bb-58a5b5de82fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.153']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec67bef-1929-486b-a167-249abb757f25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f398de0-997e-4f80-8638-b0058a6acf34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.163']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fc9e6b1-d41e-473b-b006-182a05347f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.168']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59e01dfe-ce96-4830-b889-c08e28cbb2a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.169']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae1121c-6143-4baf-86f8-f345f1316f04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.17']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab3f85db-f9a1-44cc-848a-2bd29e26365c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.170']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76114172-cbb2-45bc-8eba-ff26a7102760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.173']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe34a60-19c8-4720-ac17-51268174d2d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.174']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e543d47-dcad-4ee9-a7da-41726ba24386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d67be1b-a456-4447-b0de-6fb11849ee08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.180']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c7b9de-13e3-4d79-9d0d-8a91b390de37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5db46e4-938a-4645-b42b-27296668068d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.185']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4d9051-9f3b-44c3-9874-df674d257822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.187']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dfb3630-36eb-4bd3-a1ed-dcabdce81313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.189']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f68c26a5-9c58-43a8-a42d-b45cba557b71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.19']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a8da786-e93c-4eb6-933d-c1b53d3cdd1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.191']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b798da1-0239-4251-a9a2-9654db2915a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.195']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e067d435-d9be-4c3a-92a6-ea30f87594cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.202']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09405a18-485a-45d8-92b2-3ac3f3bd7c4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--047aa72e-f237-4ece-88f6-6afeba593019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc23e55-b0ef-404a-ae92-d5a93c1724cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.21']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a619f46-2be4-4d75-9e79-ecc08e65594c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.211']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4549f80e-6fca-4a76-82a1-bde543acbe40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6830fe22-66cd-4951-bee9-3557adc8063c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7560879a-5c9f-4dc1-9b21-37b52c726e64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.226']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b890c2f6-964b-4a3e-9bbf-fb6b5ff3cc88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.229']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c85df91-bec0-484f-8c3b-d20a1336d10d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.23']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2124a864-1a4c-4410-b6d5-4375e3f1075d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--718772e7-9aac-4803-9384-1dfe3ee00ae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5cd1c1e-33c7-4cff-b24e-ee622929234b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb00967-488e-413c-8e73-5a6735bb9aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17bbca69-8da3-47d8-9be8-7d6bf86b83d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.242']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef39131e-9582-4f02-a835-fa65c89a2ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eba8b68-269b-4c75-b891-fc0f9062a9e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.249']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b10d99c-6e70-4e2b-8552-ad9d84b6b57e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.25']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee0fa4ef-a379-481c-bde4-565ffb6d5765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3e6fa18-7f7e-4e32-8c60-2c2579cca5e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.253']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a4b739-e956-4518-95e7-3b146a5eb1e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.255']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e75d71de-32e8-4082-b879-d2d60e3f3c8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9dc963-ebfe-414f-b96b-b6358b2124ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07513496-dcee-4967-ab18-6ed713fc5cc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d54470d3-6b98-4004-80f5-beb95bca9c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.31']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--008fe50e-9ead-4d79-ade8-9444b9cd7c73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df48759f-9530-4467-9ded-ad71e52340fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f58cc1e-8769-4c56-bda3-f0caf8938b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e2c81a4-094f-4253-a2a0-6fbbfb47e37e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e1510b-8346-4ee6-aef7-889063f25540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--367a6ce0-55a7-4f45-b2eb-2507e3e3f97d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42beb3fc-e3d8-404f-b4a5-8a4fa9282f05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.76']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d54c987-73f6-427b-bd32-2c9f75d1c090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c576cbdd-8565-462d-aa0a-cf06ebe0f805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--739ec108-379c-44bc-a7e1-59581ae66a97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bd0e4cf-4462-42f7-9d49-c205de98b5d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.89']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9a9c0cf-c79c-482a-9b2e-b723b0421777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a11b1a-8799-4e43-a3ae-2692e8872544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.91']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--166a104c-6152-44a4-bd86-cfc059ba401d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.92']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a06cfa-0358-4d98-b610-a46664102445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.93']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4800729f-c5ca-42f1-ae91-7960147afee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.95']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713cfbc4-7d32-4c35-91c7-e54130dacf3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.99']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db705fd2-7f56-4b44-aaa1-0e33585c363a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.1']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a268970-74c2-413f-9fa1-9c021e2107b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.105']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb8128a1-dfc6-4d70-a835-fd5f838f3391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.107']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8da1f81-f671-4022-8693-9d80e3274ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.109']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84271772-2ce7-4c55-a9e8-5c77cbdf8d92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.11']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e03f72a-1b0b-4249-8b53-12aa125f7d5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.111']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c74b920-e6a6-4468-af9d-5d5e2d7b3c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.113']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d339610d-db28-4935-9062-2a1acdf2c616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.115']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b0cc52f-8fdd-4a34-b8da-ad6746e1e428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.117']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d47b6647-8fda-4dca-b548-aaf88e760f6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.119']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a89d8cca-fba1-4d58-b4e6-267bd53e1d57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.129']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77625fe-f33e-4f37-a4d9-fa15a9fdc520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca4399ff-66db-4e37-9942-c1eabf43b78f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.130']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01be5a5-c71f-40aa-99e7-05da58175e8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.131']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d3968a-9790-4a2f-824c-a743a2ebb078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.133']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a0976b3-c340-4168-867f-0780ea6e5c5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.135']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--094d50a8-5946-4899-84fb-356ac7d589be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.137']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c88daf0-334b-4551-b030-398fe0b65b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.139']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f02f19-67be-4486-9114-f329c73782d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.141']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a7f3093-c671-4715-b018-6e26548620d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.143']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aa760a0-d044-4b57-b3aa-e9e756459c98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16061259-42cf-43f1-b238-12cd62f672ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.147']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71efcef4-9d51-40ef-9873-51e47600e1c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c8691d9-45e6-4feb-a963-4b3f8f7d0e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.15']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909e4e6d-a569-47d6-9e43-ac42f23a7452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.151']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57f170b2-187f-45eb-8eb9-1e22fb494b8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.153']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--336534ba-4e8c-4bdd-8a39-c93abb541a1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f3f785-d7bf-4267-9c5b-3cbf95bdd16b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--345661b5-1dca-4e17-8f1e-dc4288408ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.159']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7da257e-47b7-4f7f-9d16-dd68d8a74d22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.169']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26a2dac4-a7a9-4f85-aaaf-ab6926e9d7e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.171']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e878cf9a-a87b-4b99-9b87-b0b23c832b05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.173']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--814e2132-0794-417c-abb5-906ae6a1becb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9dfcc3a-bf88-4b2c-89d8-7237afd102c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.178']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02bf6aaf-06e0-4a67-bf97-e38d5228dc6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.181']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e34e78-9b22-4957-af85-c70a373c57da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.187']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e15dee8f-a727-43cc-97b8-64b8601f1d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.194']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ab70d7-d802-4a06-b772-df420d03ca1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.197']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbbf8361-3837-4839-b32b-a4f29c18efe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f90bf8f-b79a-4839-80d2-8749e056a155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.203']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38311db8-7196-459e-b108-590ff6d8a270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.205']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba56b75-b128-43d1-b246-9e16608f1dd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.207']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d30b13-c569-49fe-bda4-ec8fd9f5331a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.209']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b10a970d-fc16-4491-a681-6b9298c035f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.211']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e8482b1-5440-40af-97e4-82e1b5d5dfd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb54aa0-8d57-464f-a042-e1b71aa6340b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebbda40-2905-4c2c-8179-d35d13e2996e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9090ca1d-0838-4d9d-a7f2-32d1e943bd06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.221']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4573c4-ddc3-4c76-8f07-201e8e3af30f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.225']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c548fb-599f-4cca-a2fb-904b641fbfe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.227']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed64f56-bac7-4809-9d9c-74de487b0a7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.229']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--951f3a15-ef6c-4b3d-95d1-7b7a4c9e5d43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.231']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b75957c1-92c0-494c-b9a4-d628e4c483ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.233']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--903779da-9018-446f-81cf-0a47c12083d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.235']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1065a80c-3574-4aa9-be2d-fac6c9a484df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.237']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98526d40-1d7e-4e11-8915-6182b12d3944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--044e8c59-9289-4721-a9e4-b52475e19961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.241']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e45870-d305-4a6d-975d-3b7b0ac57f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.243']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f369d9-af55-4eef-aeea-f346d838c96e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.245']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ab9660-0cb5-48f5-afed-d1cb3e9c0043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.247']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31bd2dfc-1ab9-4f9d-9c86-acb61863bd54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.249']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--804f3cb4-c8c5-465f-8213-f37aae9c318b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.251']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea3a0f8-6e6b-4cc3-b492-6d7cd76a7991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.253']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1257326-fbd5-4e68-93bd-eba6757648ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.255']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72715af1-1979-4876-b5ae-03ad7c8f09a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.27']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e8e64c-3dfe-4ed4-85fa-75a8b22c5900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5e300a-17e4-4c74-a036-c1e440347aa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.42']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c21c7b-ec31-41ff-9212-0c91aa1b90f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25681cf8-82db-48cc-97fb-722bdadbc432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e54a68da-cf1a-42fc-96a2-a88479474a32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.51']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8984a802-4e7d-4b14-a9e0-482efe6efa88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.59']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb7b9db4-6ffc-4206-9e9e-c10617425b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.65']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6c2fdd7-1c1f-4776-aa44-4480b2f81bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.67']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97deb0e0-c17b-466f-a2db-993d6c023b13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.69']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11c6f14-8182-4855-8eb6-5606228bb0b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.7']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--096c204a-0f91-4767-9b5b-275c6babe050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.71']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbb1a523-2b0c-492e-8e8d-5db78fc0f6b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.73']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f6085fe-3f8f-4798-a571-30099f9909e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.75']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f54b3077-8480-4682-b099-e4ebc3162d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86fab4b6-0d63-4af8-9bdb-c9d096dceb88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.79']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e30b3213-29df-40cb-9ec7-13404be6bcca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.81']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccee47be-2ac0-4d4d-ba0d-79f030a57c01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.83']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e97b02-1919-403b-8c8a-35ee6850d965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.85']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7ffcec-6e80-4daf-9e88-44bd86847da3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.87']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--611354e4-60cf-4a0f-b3e6-2b9a2400103f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.9']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d04a7acf-e270-4a71-9c82-77bcfb28f8ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.245.124.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98760681-4d8a-4217-ba70-cffc76a6e0e5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.80.194.212']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f2fd0c-651f-47cc-b1a9-a3c296b15e13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.243.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e282649a-81ce-4594-aa7f-327bb214eacd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.162']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb5eab54-0576-4269-a33e-718ea9fd6d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.170']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b76356-88f8-4954-83c0-557a546585d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.243']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a65c3de0-66c0-44ff-9e56-c1cbebf17e38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.28']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c0546a-bf42-48d6-80e7-2d5f7e6ac40d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.98.236.136']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c97f49-19f6-4335-bfd5-1c74073f550d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.98.80.4']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0abfee3-013d-4b23-bf1b-76d3d78769a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.99.214.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f08ba04-1880-415a-adac-7dcb5df86ff3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.236']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2600c967-5fd2-4f24-87f7-d0b4633400da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.74']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56bd0d66-99e9-4dca-96d3-55eb9b037be8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.204.128.149']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--596ccad7-6639-40e9-8f3d-5de23772336d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.205.232.88']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb4bda38-3afe-415e-b350-debc9405a02f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.246.141.175']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f918e9-e591-4a03-8e7f-73d55b6a592b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.52.159.122']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a14bbe3-681d-4a13-9c21-4226a93aea81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.5']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8105fc65-9b24-4e33-8bc6-6f198eb30676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.115.126.77']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca39c939-d8f6-4bb9-a960-813fe13d56fc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.109.52']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f7591a2-3152-4b50-9994-0c470cdca06c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.109.62']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f39a3c8e-72db-43a3-af6d-07a399c039ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.72.166']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d5d085-77d6-4eea-9bf8-27d669288c6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.127.197.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e048e3f1-2f72-4e96-954a-046bf96a67c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.136.235.70']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--babd9e3b-31b6-43ad-b50d-91995f7ae2d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.171.221.208']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--443767b3-b9e2-41dd-be5b-e9dd5a07236c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.93.12']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed250269-e2ec-4096-b837-282467051ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.95.106']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--960e0b5b-7b3f-41ae-8a4f-540c72cfc373", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.155']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:mysql", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b48a8463-af23-4380-948a-b3018b14268b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.193']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91527e1b-308a-49fc-9c61-f4149b9917b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.159.110.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eff6a93-bfc0-467d-a19e-411514d79cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.159.98.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92444a7-d01f-41fa-87f6-e91f7ff687a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc8867e-6c70-47bf-9133-124532335d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.13']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e059a2-7ef0-44cb-bd5c-8c727b3cc148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.131']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad8f739-1f84-4ab6-b293-17c1e9fecb84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.134']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6513ec6-c77c-43c4-ad82-608e75c13b43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f003a645-3e39-408d-a9ab-44acb66cce9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b259513-866d-482c-8ded-cffa02c1d0b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.202']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd1ed0a7-6ad8-4b81-87b7-3bf424b80d3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.204']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50edd5f6-f2f1-44d7-8f65-19853967de46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.206']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9408a170-41c4-4b63-8944-3d64d11749e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.249']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eca4702-786e-48ea-b9ed-5faa5453f318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.250']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--165c3821-7a50-435a-96d8-0a11188b9836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.253']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662dc8f7-e56f-4caa-b331-d935e9ee38e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.3']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f205e1e9-afd5-4e71-8a00-b9d2f9b7e281", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.236.142.97']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b61e079f-5f5f-43ce-9c32-ce3794e3c37f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.243.8.164']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c62fca2f-3eb2-4567-99b9-2a3098e61cfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.250.61.10']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--189cb311-778a-417b-85f3-2e36046acbec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.103']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e514fa9-4ecb-4bf3-aad8-67715005fb32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.201']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72405ebc-3586-4507-882c-04272395fa2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.29']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--563c2822-247a-4038-aad5-fed0fd9d2f32", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.88.44']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a1b9fd1-678f-44b5-97b7-2f28cf2ccec3", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.88.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed410830-e02f-4b82-b9d8-8ad14a69a2c6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.127']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb641d9d-8580-4668-a561-b895ae626828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.130.170.146']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26bc6eb9-eede-4ada-bceb-f5d4985e40ab", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.139.151.45']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2a1a6f-0197-49eb-80dc-d9837bd4a1de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.155.151.16']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e372d5-8db3-4838-8bdc-afa0654c7c7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.53.157']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--967c02da-e851-4f0d-911e-c4aefaa3d5c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.54.37']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a54d7f5-c85b-4d26-a077-c9a97816ac63", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.215.0.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7958b72f-8a09-482c-b229-bacf08727999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.215.108.8']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da877b96-58b6-4480-b0d5-22817d82fea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.95.126.254']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2bf4cae-edba-46ee-ae17-38d06bfd9470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.101.34']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53db055d-66d6-4ec3-85d9-c78c145f1ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.101.66']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa48791-8da9-4440-aefd-264e629382b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.102.165']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7afcd4e5-ecc5-4ead-9b38-401ecd616e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.106.90']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d34f4f7e-29c3-4b5e-b10b-7df84f4b3e30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.107.68']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb05cbcf-ca4a-4bd7-be52-4860558e36ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.127.172.215']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--226e16b2-65d8-47b9-b99f-ef2eac37e9bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.127.172.218']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd174b0-8da8-41ba-a5f1-0557c546b00f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.127.175.154']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53508111-54ef-4237-85e9-61385a3fa748", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.78.175.36']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e31a0d2-1864-43b8-8cb3-7f25ea08fcbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.130.64']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46e705b7-9303-4681-9c8c-b2687d36c93a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.131.202']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--641326e0-d4dc-4537-ad1e-7f15ecb99da2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.133.213']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb41832d-691d-421c-aeed-6517c106667f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.134.173']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c4c9e49-5d92-4831-bd00-1f643a83704c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.135.104']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8718c0d1-7475-4de6-aae8-c7f362364346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.135.229']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee030c7-1731-4fca-a0e3-c65e1bffe9d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.141.150']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b4dcb90-061c-4426-a7ca-56f2c0d8d4df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.142.239']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a4ee8a-5508-469d-be0b-226524327473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.142.57']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed50823a-2b7e-4e54-aade-53dfe6f6536f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.74.236.238']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ddab630-b127-484a-a44e-54f0807b58ce", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.74.92.144']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--790ae8c0-455a-46cb-93bb-15820136cb34", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.80.4.1']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43bf4727-0fc0-41fc-bf17-733eacadb788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.81.82.145']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f88243e-a562-4c83-934a-ca0afb2a4fce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.82.12.121']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf0e852-1d1e-4090-bb2b-d6ad06124eb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '99.232.141.161']", "pattern_type": "stix", "valid_from": "2026-06-04T00:00:00.000Z", "valid_until": "2026-07-04T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-04-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6edf859d-fc51-4dfa-87ca-67ecfad0e912", "sighting_of_ref": "indicator--4472bb96-e12a-4864-b252-be2711650f12", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c2cbef4-717b-48d0-8486-fe00a3e59889", "sighting_of_ref": "indicator--f449e8db-4464-4e56-8802-d2cbfbf7dbbf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--126c2e6e-52cd-4ced-8652-3dcfc3286a53", "sighting_of_ref": "indicator--3d80e1dd-01ea-4b9a-9721-a55113e80544", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61000e86-51ce-4de7-ad6e-011dad017395", "sighting_of_ref": "indicator--926171c8-6d9e-402c-8b9c-5ad737b5053b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abbd286b-2598-4ea2-8073-0fb12c3faf5c", "sighting_of_ref": "indicator--879a765d-1834-4211-a78d-df291e65d8f8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc93b53-404a-4ec6-b984-89580bc9c169", "sighting_of_ref": "indicator--14febcd1-6fb1-410e-86bc-4bb46091ffc7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520fb8b8-77ed-4de7-a4bd-e2dd5c344fd7", "sighting_of_ref": "indicator--46467508-9238-4d88-a567-a52444356847", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f642695-5ae7-451f-acf1-01d566455a15", "sighting_of_ref": "indicator--e6eb4bf4-ccd9-4606-9272-a8b6dff3b324", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb33626-281b-4c9f-a078-e370e0ee62d6", "sighting_of_ref": "indicator--f928f252-3439-4136-b615-5ef886d55f95", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47885d92-29c6-4ab8-a838-35f3da6358ca", "sighting_of_ref": "indicator--9b07b099-5a55-4415-b653-1e082b227f0e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf28118-cbae-42fc-be00-bf15e9b46ec9", "sighting_of_ref": "indicator--78b03749-a2c9-4a79-848e-5db189de3b17", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b98637d0-b576-46cf-9e90-bf57d4007307", "sighting_of_ref": "indicator--7a2094ac-c2c8-4ffe-b9fe-e383ba22c51a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a56eabe-2d84-4784-95f1-2cd13b9aef56", "sighting_of_ref": "indicator--f98d4e4b-130d-4361-9c0d-6b942954d586", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d274859c-8d41-4a6f-877d-d6002ea166d7", "sighting_of_ref": "indicator--d5c82e59-179f-481e-9e6c-52aa8266c858", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--297ec97e-f09a-4675-aff1-0fc02f5b51b4", "sighting_of_ref": "indicator--238642d7-a36e-4e2d-8c69-5d44391cf78a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ee1dfe-3f12-4e09-ba6c-113ab5ffe44c", "sighting_of_ref": "indicator--d54dd216-5a1f-4307-81ab-5f66bc53318e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615e7998-611f-4670-92e7-4154bb67edce", "sighting_of_ref": "indicator--e5af01bc-78b6-491e-a2ca-b0cfebfd1e33", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e100d11f-caaa-4d02-8f62-a2789290ee0d", "sighting_of_ref": "indicator--f72c6f65-6522-4fab-bc58-08ac938a194c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--874231b6-2cae-40dc-b8cd-46dddd79520c", "sighting_of_ref": "indicator--fcc385e5-9750-4741-a0d2-057a60067455", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d382da-5a0d-4b34-ad65-680adec8f109", "sighting_of_ref": "indicator--b93b3ee8-dbab-4bb8-b4b8-5c9f15233879", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54232a1c-ef01-4f35-9fbe-c9e49ef5aa85", "sighting_of_ref": "indicator--25864060-2df9-4b0e-916b-0c14b6690942", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35986d5f-962b-4496-aba6-bdc2b1ac7bc3", "sighting_of_ref": "indicator--28be8fc9-0549-4f94-8ee5-2c00c7286335", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc61c323-40af-49b6-98c8-12c3c3b87ab3", "sighting_of_ref": "indicator--9c8b3f44-392f-46ab-b1f9-5a310d3bfa3f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ceeefc-81cd-44e2-9051-97661c535a99", "sighting_of_ref": "indicator--b713f8f0-6a4e-43db-88a1-557e5181b3e6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036a02da-8bb6-41ec-ac90-801cef837846", "sighting_of_ref": "indicator--8c1b5720-8514-4146-a21e-16c176263e86", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c8da4c-2093-419c-8ae3-9a40494d5afe", "sighting_of_ref": "indicator--7d2e8ba0-fb48-48e6-ae0d-7c53bf00482d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a72aee1a-939b-422a-bcd8-48721653471a", "sighting_of_ref": "indicator--7d2e8ba0-fb48-48e6-ae0d-7c53bf00482d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044e193f-7bd8-40cb-b057-e7452a9d3887", "sighting_of_ref": "indicator--7d2e8ba0-fb48-48e6-ae0d-7c53bf00482d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b44a0a9-4714-4fd3-bb83-abaaea6fde82", "sighting_of_ref": "indicator--daba67b4-626d-4a91-ab13-5b6755514d76", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc486a52-afb2-4260-8e4e-ce7d5705567f", "sighting_of_ref": "indicator--12d2939b-3ff0-4127-bfca-1ee501696c2f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f63cc8a-b536-48c7-8a0f-75e428178ea3", "sighting_of_ref": "indicator--0036266c-6d1e-4cef-8088-5944f0249e8d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3005eb0-12f7-47a8-80ec-eb0779472e9b", "sighting_of_ref": "indicator--f1f13c27-6c35-4cf9-be2d-d4f5faeb2a17", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef936251-2b2d-4ea3-a438-4088a7e445d5", "sighting_of_ref": "indicator--f356cebf-d549-4827-960a-b7065fb2edb1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d659f5f-3a91-4a7c-8ef2-66169cba21d9", "sighting_of_ref": "indicator--f433d694-c603-4cc0-80ed-cd2c6971f54f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ecc70b-f945-4b24-aa52-6f6f997d0b4e", "sighting_of_ref": "indicator--11b06752-1ff8-4cbf-bb33-19239007a489", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42184c1e-913e-496f-a8a0-917188c0ffb6", "sighting_of_ref": "indicator--11f5d785-c03f-4323-b011-b4c7c4b5745e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e173aa-94e7-4978-a2d2-90d73664087f", "sighting_of_ref": "indicator--087e9c0a-2c0b-4016-bc79-e38a03bfe9ba", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15599ba7-8401-4ab1-a27e-fef4ab677c16", "sighting_of_ref": "indicator--e56ca3a2-7f9e-433c-b69f-dadfa6bc6333", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846b9437-4148-41ff-99bf-d0e709f52480", "sighting_of_ref": "indicator--e56ca3a2-7f9e-433c-b69f-dadfa6bc6333", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71734c7-5e66-44dd-aa57-32899294b786", "sighting_of_ref": "indicator--fed2f63c-2d17-4316-9722-b9c82166c2df", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--481ee90b-6946-473b-b5ba-82bd088af7af", "sighting_of_ref": "indicator--fed2f63c-2d17-4316-9722-b9c82166c2df", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e724d4-9162-4581-9cfe-40c40b52331c", "sighting_of_ref": "indicator--f7754c5d-5c80-4594-a018-9c818d197fe8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bdd21b9-0dc1-49fc-9770-32d40d4f048d", "sighting_of_ref": "indicator--e6e0cbbc-826a-45c2-8394-1b5e432690db", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c538a82e-3749-41da-94f4-5cc87afc0fa5", "sighting_of_ref": "indicator--8fd7f54f-f3d9-4267-aa28-3755cf9b33c5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea224779-4509-4a49-90db-93d6f4390a29", "sighting_of_ref": "indicator--be1a7d22-f227-457d-8cbd-9834191533aa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167e9a35-0501-4026-bb72-dfb2487be3fe", "sighting_of_ref": "indicator--6d991a74-4e9e-4ec2-89e3-0f47f0e75915", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd13a7bf-b892-4d05-8f1f-a3003fe5eedb", "sighting_of_ref": "indicator--201c25ec-3b7a-489f-a10f-25a508ca367f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2301f445-383a-4822-9da2-23e450ec75ea", "sighting_of_ref": "indicator--ed5d50c3-d13c-4e63-8b49-797ff6f77454", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7df3682-342a-4776-b780-07d4852c35f9", "sighting_of_ref": "indicator--d9235c63-4b75-4a2c-863a-6c6482c44512", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e186a0-b3c2-4d18-a79f-7c9d2627cbfa", "sighting_of_ref": "indicator--6cb65dd2-3430-4654-a543-d8dc9c56298c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01beee8-c162-41fc-ab2c-67679b5d1f24", "sighting_of_ref": "indicator--b3aea4ef-371e-43c8-a92a-2525d3a7b4e2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a29c2f39-f3cf-4b58-9ab7-16a58c244c5d", "sighting_of_ref": "indicator--bc2c1a4a-4cba-47a2-86b3-9fd48287de81", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca245b7-4150-4e7c-8f3c-5ffdbe757bb5", "sighting_of_ref": "indicator--781537da-e639-4377-87f3-90df592e3ee5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26fd19c7-60ab-42a0-8a94-82415cd76a8a", "sighting_of_ref": "indicator--6a27d5f6-46f1-4aca-9e2e-c24cd7cc51db", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea6996e-ba53-46c8-b04e-0fadadd73db6", "sighting_of_ref": "indicator--7a45ddab-eba0-418b-9257-0c92ba0f16f2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec27434-9a60-4605-8fa7-fb0fe5bcb489", "sighting_of_ref": "indicator--7a45ddab-eba0-418b-9257-0c92ba0f16f2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed619f9a-e3d0-4685-ab8c-70a16213a399", "sighting_of_ref": "indicator--ee0b258d-4b69-40bf-a4b4-0601d8ff6584", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--505c1ecc-81cc-4457-ad91-43af754d2b4c", "sighting_of_ref": "indicator--ee0b258d-4b69-40bf-a4b4-0601d8ff6584", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce8e9b78-db6d-4d36-af91-123f67f5dd10", "sighting_of_ref": "indicator--077354f4-285a-4e30-a88c-7f0eb9250a8a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2669a2-b56a-4bcd-b7f4-fb327dab17aa", "sighting_of_ref": "indicator--e732afdd-68ae-4cbc-93df-3f8ec51382be", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b0beaa-35b1-41bc-aa58-b2f25eba86fe", "sighting_of_ref": "indicator--82bba8a7-3599-4a3f-a894-da1c6ce81e1c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564841ae-a7ac-4830-b595-c3935b12bc09", "sighting_of_ref": "indicator--82bba8a7-3599-4a3f-a894-da1c6ce81e1c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f525c63c-35c0-4ecd-acf9-088f8769f200", "sighting_of_ref": "indicator--29a8d6c3-f5d2-4238-a10e-a625d611eb8f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99bc736-a614-4ce3-b449-de6511fd851f", "sighting_of_ref": "indicator--ae6e3301-83ed-49f2-a399-14887a0f8934", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336008ba-fb73-42ec-aff4-38fb5393c2d8", "sighting_of_ref": "indicator--ae6e3301-83ed-49f2-a399-14887a0f8934", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e53fcd6d-6b71-42aa-ba99-037e13fd776e", "sighting_of_ref": "indicator--480d6418-6821-42e1-8f18-17b452b75463", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e6e81b-406a-4998-8218-8e621ff88859", "sighting_of_ref": "indicator--ee5025b3-5be6-42fa-87c1-ef9d73f257c5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41e4a95-9e7d-4219-b8d4-903430e1847b", "sighting_of_ref": "indicator--0f456336-c794-4487-9688-b63082dad1b2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d0fbf44-5fc7-4595-941e-fa774ebcab52", "sighting_of_ref": "indicator--78556831-f41e-46e6-8d71-c8a1ddb013e6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08512bb3-bc55-4420-b724-8700bd63e74d", "sighting_of_ref": "indicator--7553808c-7b78-4d1a-bec9-162d61934b53", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf7c203-1581-4ac4-994e-6c81b7afea1a", "sighting_of_ref": "indicator--62fb63d3-027c-4383-876f-96caf01c4960", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139e9282-74dd-4899-89dc-b0b0140763c5", "sighting_of_ref": "indicator--ded1ebd4-4430-4d22-91e1-7a725b5b1769", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a4696a0-5bfb-4a19-b364-10d5f704289a", "sighting_of_ref": "indicator--dcc275f7-e206-4e12-99a3-0c3484fa07b8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aed9b42-5aee-4b35-ad3e-9bc559eeff4b", "sighting_of_ref": "indicator--b76b0d89-3d24-4874-a509-5fd68eba75e3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527a9ddc-0e1a-461d-bef3-01e9bc897f95", "sighting_of_ref": "indicator--8b685c8c-7e94-4085-a947-6b64d0b01b02", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f35249e8-21a4-4b26-a5a1-a1e123f8d828", "sighting_of_ref": "indicator--8b9b3145-b2da-4c7c-93c7-5fa52c8b2701", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--401578cc-751e-4a32-849e-635cc37ab80b", "sighting_of_ref": "indicator--f7e7c83b-91a8-49e7-aa7d-c75a28dadc75", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--722d76aa-2f1e-46c8-bc2b-dd586525e89d", "sighting_of_ref": "indicator--ea036b99-883b-4ec6-ba9d-4ea78f3bdbb6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee3ba1e8-f251-4bc0-8270-7d3039a0c444", "sighting_of_ref": "indicator--8d9b54a1-3d68-485a-84a7-7f236154f5b9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96a7418-7f3c-45ac-9291-22832a0aeaa0", "sighting_of_ref": "indicator--8d9b54a1-3d68-485a-84a7-7f236154f5b9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc37288-9d03-4385-9be5-909ebb52a41f", "sighting_of_ref": "indicator--c02b631d-431d-4796-9080-e833e17804c2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6c3957-039f-42ab-80e5-2821b79091e7", "sighting_of_ref": "indicator--12065e40-4ced-48c4-b615-b203e5d8917f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6744b1-ea32-4eef-8ee0-47e281c54a50", "sighting_of_ref": "indicator--8fccb47e-e8a9-4d68-ba3b-4c5e5206dccd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0050085e-c757-4aad-9251-722775eb9e65", "sighting_of_ref": "indicator--8fccb47e-e8a9-4d68-ba3b-4c5e5206dccd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--918c4049-b429-4e79-aae2-5d2c517feca2", "sighting_of_ref": "indicator--8fccb47e-e8a9-4d68-ba3b-4c5e5206dccd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--702e2ce6-9804-4548-a8a8-c5c3e1f6feab", "sighting_of_ref": "indicator--61b883e6-6918-41dd-9287-c7a595f4a547", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05f11a9-7f58-402d-a884-b001cd46e024", "sighting_of_ref": "indicator--61b883e6-6918-41dd-9287-c7a595f4a547", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5769ede6-328f-4e9a-a288-126b1d908a0b", "sighting_of_ref": "indicator--61b883e6-6918-41dd-9287-c7a595f4a547", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c13c81f8-71f2-4f80-b443-2e82493135df", "sighting_of_ref": "indicator--139e0b66-aa4a-4cc3-9729-8c711ae5aa65", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55afbe48-2fd8-4946-bfe3-988808246e6e", "sighting_of_ref": "indicator--525b0e28-3b45-4e82-9642-ebbb30e6cf45", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc6d1b4-036c-472d-9119-b4dff71f711f", "sighting_of_ref": "indicator--f2797e64-9082-4f5e-9981-d7fcbd86667c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5326805c-6769-4c0a-a3f6-0eaf84efde8b", "sighting_of_ref": "indicator--4e710207-7ad2-4c8a-8d3b-9d8d8fe2a27d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c5708ea-afad-41b9-a667-1a2aeab2fb82", "sighting_of_ref": "indicator--55c76039-1873-40da-974f-978c5e183bbb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--622e2325-dc5e-4edf-9914-af7c5e1a5ce7", "sighting_of_ref": "indicator--55c76039-1873-40da-974f-978c5e183bbb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa2a92f-2212-4d92-b634-24c3163aaeb4", "sighting_of_ref": "indicator--9b55c447-f3cb-4b00-8bc7-cf8c20b4a258", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--337f680f-0a4f-4e0f-82ab-ce08e6c9afd4", "sighting_of_ref": "indicator--b3f6767b-afdc-4cf9-ad04-3b9c28d6d5a4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2425999-b9c3-4176-9d9a-67fbd6093933", "sighting_of_ref": "indicator--e1fc37a5-f4c8-4617-9a7f-546248949758", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ad8208-061b-4eab-a44c-2997f882fbb8", "sighting_of_ref": "indicator--e1fc37a5-f4c8-4617-9a7f-546248949758", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b61d05a-8021-4faa-9598-415872c4753b", "sighting_of_ref": "indicator--084c772b-b203-41ac-a2da-51af6b46085f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--211ca927-aa90-4a53-837f-bff52ba331c7", "sighting_of_ref": "indicator--e1652e42-5450-40f1-8b2f-8473474cd4aa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce73959c-f385-45eb-bc38-07e7538f9d7a", "sighting_of_ref": "indicator--34a3ff99-a481-43a3-9300-6b58adfe13a8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--badcc297-1671-4e6b-adb6-a8407c85d480", "sighting_of_ref": "indicator--f100d123-5935-47e7-ac0a-32cbb85a10c0", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c511e128-ab6c-4ef4-bcae-a6cec5798386", "sighting_of_ref": "indicator--ad2632cc-27c8-433f-a1c3-48ad6d8f1820", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6d9043-d925-4ce8-a525-10e83b366e6f", "sighting_of_ref": "indicator--b36a42b4-0705-4ede-9ac2-3332b8c79d72", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c51c01-3304-457c-bad6-72c8a9853e4f", "sighting_of_ref": "indicator--f7f0ce28-e5fd-49cc-a881-4e7a8a99c1f4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d73d357-88d1-40b4-a30e-dc2a65e0d0bf", "sighting_of_ref": "indicator--3102c8e6-a797-4c71-b8bb-2fa1151ba4d7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007f25ff-324d-4739-a437-5f8133c397fa", "sighting_of_ref": "indicator--3102c8e6-a797-4c71-b8bb-2fa1151ba4d7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b34a6a-64de-4a02-85a0-7ba6ddf93dd0", "sighting_of_ref": "indicator--3102c8e6-a797-4c71-b8bb-2fa1151ba4d7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc748197-1270-4944-ad73-ed5b7e0a4225", "sighting_of_ref": "indicator--b4fe1d9b-5c52-40fc-a27d-14bf311b7031", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eca6caf-020e-479b-bf41-f4a818ea9eb5", "sighting_of_ref": "indicator--b4fe1d9b-5c52-40fc-a27d-14bf311b7031", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbce6705-7cda-4ea2-828a-a3a200a5dc15", "sighting_of_ref": "indicator--d957e777-9710-4cdc-b23c-fcbb418c2f0a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a90d0d8-e1dc-4c9c-9d6f-034b621235ae", "sighting_of_ref": "indicator--d957e777-9710-4cdc-b23c-fcbb418c2f0a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c828cc-2fd9-49f4-8e63-c7e66b89eafa", "sighting_of_ref": "indicator--d6adc76f-3ab8-4c8c-91b9-fdc19d4234f8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f821077-f28e-47c2-9ec6-c9197b505b69", "sighting_of_ref": "indicator--d6adc76f-3ab8-4c8c-91b9-fdc19d4234f8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed99f035-31e1-44fb-9138-eede6236df3d", "sighting_of_ref": "indicator--5b25d390-c8e1-4284-9877-43b3ae098a56", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab42cb92-6a68-46e2-8def-455d0cbeacf3", "sighting_of_ref": "indicator--5b25d390-c8e1-4284-9877-43b3ae098a56", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e530c0-dec1-4d3c-b93d-ce969c35de89", "sighting_of_ref": "indicator--5b25d390-c8e1-4284-9877-43b3ae098a56", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1040c47-6ff4-471e-b178-44c78b3bf3a8", "sighting_of_ref": "indicator--58d175ed-c583-4b4f-8287-a6916f13c1f1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2d55a5-71bf-48fb-a08c-fb1bd6e1fd31", "sighting_of_ref": "indicator--72911eed-d3a5-493f-a727-1167f42f44eb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb8729e-79ec-4eb9-9683-e919dcb3b97e", "sighting_of_ref": "indicator--72911eed-d3a5-493f-a727-1167f42f44eb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e034294-6add-4d2c-b147-7dd78253aed0", "sighting_of_ref": "indicator--9288e39c-3336-41a9-b8c9-1e2e6bb6d2db", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d35c89-80d4-46dc-be8f-bb9e797d339e", "sighting_of_ref": "indicator--fd4b6306-c10e-4927-a761-909a27aa92eb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47de53e8-15f8-4671-aac3-6abffd8b5277", "sighting_of_ref": "indicator--fd4b6306-c10e-4927-a761-909a27aa92eb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1bf9ba3-cb63-4f89-b950-0c0557b1e22f", "sighting_of_ref": "indicator--fd4b6306-c10e-4927-a761-909a27aa92eb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5494f2e1-1641-4cf8-8a31-9ebff679461a", "sighting_of_ref": "indicator--b4db2c78-ab0e-48cb-a27c-894349d96295", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66191392-5a5a-45b0-9f19-2574cad934b1", "sighting_of_ref": "indicator--72bb1f16-9e7e-403c-a6b1-fbf9b44e20f4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce36d2d-bcc8-4e11-add4-e7014e1b07b0", "sighting_of_ref": "indicator--72bb1f16-9e7e-403c-a6b1-fbf9b44e20f4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcef8089-0b41-407b-b587-c914dbd13c3b", "sighting_of_ref": "indicator--72bb1f16-9e7e-403c-a6b1-fbf9b44e20f4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf62077-027e-45c3-bf70-fad04457f326", "sighting_of_ref": "indicator--fde0e3f5-b73e-4b3c-9aab-37a8ddc3e519", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa917b7-5d81-40d6-b7ef-a62c9b72d090", "sighting_of_ref": "indicator--fde0e3f5-b73e-4b3c-9aab-37a8ddc3e519", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bceac1d2-3982-4e86-a858-c62cddd3de31", "sighting_of_ref": "indicator--fde0e3f5-b73e-4b3c-9aab-37a8ddc3e519", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--771c5f7c-af45-4357-ab59-d2c4d9d8cae8", "sighting_of_ref": "indicator--33509b4e-1bfe-4ab7-8e93-42992ed9c1b6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a6bf59-3e5e-407e-9406-7024c9bb8a32", "sighting_of_ref": "indicator--33509b4e-1bfe-4ab7-8e93-42992ed9c1b6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824b0798-2367-4b63-a178-ef5307905763", "sighting_of_ref": "indicator--33509b4e-1bfe-4ab7-8e93-42992ed9c1b6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e478ea5b-0275-47c3-bae6-78eaeb27ee7d", "sighting_of_ref": "indicator--bc9cfc4d-495f-43a7-9090-d65bc3c6a52e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49331d83-4a26-45a8-813b-3d7e158bb719", "sighting_of_ref": "indicator--bc9cfc4d-495f-43a7-9090-d65bc3c6a52e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b352692c-2c74-4ed6-9914-6b18503c5063", "sighting_of_ref": "indicator--bc9cfc4d-495f-43a7-9090-d65bc3c6a52e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--494e19ec-78fa-4270-88cc-071652b5c84a", "sighting_of_ref": "indicator--d573afeb-0e4f-466a-9309-ac6be5160df6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3576c9c6-ddb8-4d66-9c48-24c5792963c4", "sighting_of_ref": "indicator--d573afeb-0e4f-466a-9309-ac6be5160df6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e007eef-d77f-4996-8101-3e037b5bec0c", "sighting_of_ref": "indicator--d573afeb-0e4f-466a-9309-ac6be5160df6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c92310-3560-4861-beab-b494f4193785", "sighting_of_ref": "indicator--2c71b513-1137-4fc0-8256-5463b60fc0e0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28fccb61-01ee-423e-947f-203aa495f1b5", "sighting_of_ref": "indicator--6dcc0260-59ba-4da9-a71d-f75622c6734c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08dabe22-99b2-4cbe-a1ba-8866dcbd363b", "sighting_of_ref": "indicator--93d561f1-4bdb-4676-9e1c-63ca6d22c578", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4df2714-c3f5-4f64-8425-bb979e6fb7d9", "sighting_of_ref": "indicator--93d561f1-4bdb-4676-9e1c-63ca6d22c578", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f160ee2c-4007-4d8d-a192-01dc3e352fc4", "sighting_of_ref": "indicator--93d561f1-4bdb-4676-9e1c-63ca6d22c578", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58464c2-18b6-4749-8be2-69bfbf00deee", "sighting_of_ref": "indicator--40670f39-4b32-4848-9b93-3f1be07ef57b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abaaf322-6d2f-4719-9d82-e591a27faa63", "sighting_of_ref": "indicator--40670f39-4b32-4848-9b93-3f1be07ef57b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4fd2c90-a846-4084-b6a8-e7aca257d11d", "sighting_of_ref": "indicator--6abd7620-33c4-4dcf-a783-7e3daef16243", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d6e724-cdfd-4cdf-82c7-d889444cfbd2", "sighting_of_ref": "indicator--6abd7620-33c4-4dcf-a783-7e3daef16243", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed0f3ab-b8d0-4dd4-9006-09dc2764dfa2", "sighting_of_ref": "indicator--f8f4c88b-0e01-4b23-bad1-17b5c087751c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa7d3e4-d2ba-4619-8a19-88300db82e79", "sighting_of_ref": "indicator--a2867243-1284-4344-9f1b-fbaf3cf78f3a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83af5eaa-68f4-4fde-b6c7-c726c3625a29", "sighting_of_ref": "indicator--a2867243-1284-4344-9f1b-fbaf3cf78f3a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba8642f-1f18-443f-81a2-6ad4dc837f65", "sighting_of_ref": "indicator--566c556b-ae46-420a-ae22-66ac65e3afe4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af72bc03-774c-4806-b1b0-3d78aacd29e4", "sighting_of_ref": "indicator--566c556b-ae46-420a-ae22-66ac65e3afe4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de673a0-3ba7-4eb8-91ed-f296325e5793", "sighting_of_ref": "indicator--566c556b-ae46-420a-ae22-66ac65e3afe4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b5c0f1b-dbd6-46a5-932a-229e01a8118c", "sighting_of_ref": "indicator--368f81c5-8d2a-470f-afaf-c69471b73070", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b096b28-8427-419d-a79a-5060228ee53a", "sighting_of_ref": "indicator--368f81c5-8d2a-470f-afaf-c69471b73070", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d6226f-7795-4837-901f-fc994d1de5a2", "sighting_of_ref": "indicator--409a6bc3-6df7-4da6-9eb5-9299b62410c2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26db210e-ce60-4b0a-9105-c7ab05ef2fb5", "sighting_of_ref": "indicator--75cc4e34-aab1-41c1-8c9b-7a896f7b3a4e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e265ed-d030-4df3-acdd-6932db26ff72", "sighting_of_ref": "indicator--c36eb4a1-fb72-4874-a908-ccb4d0c1f4b5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c32dfa-f32e-4458-bf13-0709f2868b6d", "sighting_of_ref": "indicator--8647da8a-39ab-4add-beb9-6c0a16a7ad7e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--464ce1d3-85dd-4c5f-8c95-2c14bc71f6f1", "sighting_of_ref": "indicator--302fa8b0-460a-48bb-9515-797529005da2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36bb04a4-91c0-4eea-bebc-0445ec894fc5", "sighting_of_ref": "indicator--0ff466ba-d46d-43c4-ad84-d760e51d2b42", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a1be84e-3180-49e4-a1f2-9d1daa566885", "sighting_of_ref": "indicator--aa302b3e-8214-448a-ae06-71ddc8445783", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f83db8e-a7d5-478e-9f69-ca76872faab3", "sighting_of_ref": "indicator--5214aa80-54c4-4f7b-87f0-8dc406a88fed", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67fb5f24-ffcd-45c9-84ad-1cb2f1cc8b27", "sighting_of_ref": "indicator--16abbc8d-8597-4d5e-870d-11df4fcd6004", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f5b558-20f1-427c-9e3e-ef1461144e05", "sighting_of_ref": "indicator--6f397a77-72bc-4b97-87da-6f8ed96b80f9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46a7a66-968e-41d4-a6bf-c897473ae552", "sighting_of_ref": "indicator--58a440b0-4086-434e-aa04-2650e368285b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--807cea67-015e-489f-b123-e1510e68bf81", "sighting_of_ref": "indicator--15e9793c-3134-4cd7-9e62-c02cfa60decc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac62115-0df7-47db-8127-5fe873490246", "sighting_of_ref": "indicator--ac307d42-26a9-4e2a-8661-3a1bb76adea9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db91243b-d26f-4521-8761-34323e39d259", "sighting_of_ref": "indicator--9e5e87c8-abac-462b-90ee-afc5dcef94cd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f3a65f-de60-4f77-b8b6-ab3331bbea9d", "sighting_of_ref": "indicator--909f5ef2-a994-4633-9673-6ad8c864658e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf21988-3684-44ab-8419-a12d1c1740ea", "sighting_of_ref": "indicator--861b080a-2446-4e89-a425-5b140d938f0e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae7cc772-8439-4226-87d6-f8b719002d82", "sighting_of_ref": "indicator--3295972c-2bf5-4cae-8011-96d1a78a34dd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf8c354a-789e-47b0-896d-06eba6ae0679", "sighting_of_ref": "indicator--f2cbd733-e9e9-4797-9e14-56d693dda66c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e515c36a-aad6-4348-b5ee-43a77b31ffc3", "sighting_of_ref": "indicator--8892e644-689a-4d09-b07a-a6d8b4f80df1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85458baf-e63e-45c3-9738-bbcf42be60c4", "sighting_of_ref": "indicator--5288a2f9-ee6e-490e-8496-c8d0b89822ba", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07968300-bed0-4609-bbf4-f8451ff61058", "sighting_of_ref": "indicator--4e344e06-294e-4419-b6d2-14d642d00e29", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a0761c-a93c-4ee0-a2da-8c2457858bf9", "sighting_of_ref": "indicator--cb3216ba-a876-4dc3-b7ea-7eacf01ba0fd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1127d4-8b63-4f8c-b1d9-8c35a6460d0b", "sighting_of_ref": "indicator--1863e84b-bee5-4097-9e44-4dd6c8161a3a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c397732-3932-4adb-a8b9-e6797ff09707", "sighting_of_ref": "indicator--3898ca66-c70c-4124-b969-45cb0017b747", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a211380-b5e7-4e68-8a1f-a9001679c88a", "sighting_of_ref": "indicator--a16c26cd-2202-46ae-8483-4858ef03edf7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f1805f-5eb0-41b9-a38a-43e1bbc5cc58", "sighting_of_ref": "indicator--a16c26cd-2202-46ae-8483-4858ef03edf7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a49c339-6356-4049-9874-8526255705fb", "sighting_of_ref": "indicator--a16c26cd-2202-46ae-8483-4858ef03edf7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f26daef1-1127-4ea9-9bbb-58dac79cfc34", "sighting_of_ref": "indicator--279e1d87-0a92-49d9-870c-27cb8818df4f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eebeb52-a010-40ed-990c-dde03dc5eea4", "sighting_of_ref": "indicator--8d2a31bc-40d3-4bb0-9e7b-9c585b88d891", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ecfd320-b624-4626-803f-cfac37b02aee", "sighting_of_ref": "indicator--ba171bc5-d383-43e7-bea4-d0c36921f1c2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a6bc34-b82e-4e43-bec1-0bc67e2dc1d0", "sighting_of_ref": "indicator--ba171bc5-d383-43e7-bea4-d0c36921f1c2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6333a7bd-cbc8-44c9-b7d8-0e1d18c92bde", "sighting_of_ref": "indicator--ba171bc5-d383-43e7-bea4-d0c36921f1c2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b76a78c-aba4-4dbe-9371-f004222cc1ad", "sighting_of_ref": "indicator--a95471a0-878b-45f5-9251-732944561dc2", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79965b06-f066-4e5e-b242-ab33bfee62f9", "sighting_of_ref": "indicator--b6ea94e5-cad4-42b8-b197-e433d3320c0b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--109dd937-8a85-4415-8bf3-5b49bdddd115", "sighting_of_ref": "indicator--699c82da-cc61-4794-91bf-67f8bd12d261", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4788c536-796d-407a-975d-2a47b50440e0", "sighting_of_ref": "indicator--7cce0af0-3cae-4a1a-958e-81449ea51c3d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c8fde4-a771-4d50-ad3c-04a112b65d83", "sighting_of_ref": "indicator--ad851f3a-3c9e-4315-af4c-500c61e8527f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34973c5c-5ff9-4f0a-b007-e06e674a92eb", "sighting_of_ref": "indicator--ad851f3a-3c9e-4315-af4c-500c61e8527f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e173e00b-e820-41b6-812a-b00b105fff1a", "sighting_of_ref": "indicator--4132f361-5610-428d-b56a-d1c4aa21f020", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f95bb0-40b7-4306-9365-ea8e5f8c0ebe", "sighting_of_ref": "indicator--3ff6c8af-476a-4a08-9d54-7b9e63b3eb14", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee2c7b2-1769-481f-961f-e18102e67e0a", "sighting_of_ref": "indicator--2fceeeea-fabf-46b4-90d4-3592d856797f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e791460-3256-48c3-9cfb-244432ea9fad", "sighting_of_ref": "indicator--2fceeeea-fabf-46b4-90d4-3592d856797f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff15deab-d13d-4817-9d47-6f09593e95d4", "sighting_of_ref": "indicator--53cb5ecd-d228-4434-9a53-7cc9c87534a5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd34cb21-c96f-44f1-9ce8-de6681f290b1", "sighting_of_ref": "indicator--53cb5ecd-d228-4434-9a53-7cc9c87534a5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ec01bd-259b-4310-a49e-11288d7d7b14", "sighting_of_ref": "indicator--1b9afc25-7aa5-41be-ba5a-2bf0dc96a23d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8975b16-9bce-4981-95f1-74f6a687b513", "sighting_of_ref": "indicator--1b9afc25-7aa5-41be-ba5a-2bf0dc96a23d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ee5018-df1d-4323-abf6-934d159d4906", "sighting_of_ref": "indicator--1b9afc25-7aa5-41be-ba5a-2bf0dc96a23d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8744fdd-02dc-4829-bd1a-ccec6f796119", "sighting_of_ref": "indicator--1b9afc25-7aa5-41be-ba5a-2bf0dc96a23d", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c286c00-f42d-4999-83b6-1bffb712e685", "sighting_of_ref": "indicator--be3c75dc-fa99-41ad-89de-1f23e5dec579", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545976cf-e3ab-4bc3-92f9-935bd8a7cbd5", "sighting_of_ref": "indicator--29c2eb9e-bbc4-4c4f-8f7c-dda015e211aa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee15b70-f619-4b10-a1fb-f363a5c7ff79", "sighting_of_ref": "indicator--8f0287c1-083c-4a95-89e5-5df9fc1f3e82", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a7c955-b292-41bd-9d03-eac3097cac16", "sighting_of_ref": "indicator--279f3e29-f7c1-406e-bb6d-c7d53e5415d1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb159761-1646-4dfd-8ccb-81b88544a9ee", "sighting_of_ref": "indicator--279f3e29-f7c1-406e-bb6d-c7d53e5415d1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c624cff-d84b-45c0-8b4e-9f4e7f503117", "sighting_of_ref": "indicator--67d0cce4-0b0e-465f-985f-10cdb797f3ce", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b459ec57-ecb5-409a-80f9-bd19bcb9c980", "sighting_of_ref": "indicator--875aacd9-97b8-4625-bbd1-3a93f409ec38", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--581d27c4-0766-4c84-ad9a-2209fc3f641c", "sighting_of_ref": "indicator--96b0290a-d8ce-4123-a38f-5c03ad826d09", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4da3d9-614f-4363-bfd5-2042be6ce19f", "sighting_of_ref": "indicator--96b0290a-d8ce-4123-a38f-5c03ad826d09", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef9f2b1c-8169-42d9-86d2-106203c60c8d", "sighting_of_ref": "indicator--96b0290a-d8ce-4123-a38f-5c03ad826d09", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a80dcfd3-ad2b-486c-9412-c825dae89d83", "sighting_of_ref": "indicator--5bcac0d3-2d13-4415-afb2-096b583ffc23", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a55042ac-b388-423c-ae34-80293d826fc2", "sighting_of_ref": "indicator--5bcac0d3-2d13-4415-afb2-096b583ffc23", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb83d5a-ed0f-4053-836b-28cafc8f59f1", "sighting_of_ref": "indicator--5bcac0d3-2d13-4415-afb2-096b583ffc23", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62bb520e-1795-4c99-8519-ce8ac9ba47e3", "sighting_of_ref": "indicator--3d089c04-a802-4615-8e6c-a7f339627d03", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad91687-4eee-48cd-a504-761107c5e688", "sighting_of_ref": "indicator--3d089c04-a802-4615-8e6c-a7f339627d03", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f913967e-c841-447f-819a-7fe6f3d1f957", "sighting_of_ref": "indicator--94edb223-aa80-4e85-bb84-de672adbf20f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84ff913b-b3ae-413a-93b1-e4323d19f72f", "sighting_of_ref": "indicator--94edb223-aa80-4e85-bb84-de672adbf20f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c91ae05-5feb-4417-9fa9-9b2875304ed3", "sighting_of_ref": "indicator--94edb223-aa80-4e85-bb84-de672adbf20f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ef2cf7-c8e2-4394-b229-4d18bf13ff16", "sighting_of_ref": "indicator--b02ab9aa-0c74-4fee-ae41-8d55cad355a3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213d88a6-5b4a-4a4e-9710-68780b621f23", "sighting_of_ref": "indicator--e161f1e3-46dd-463e-ad0d-a2d209d7b290", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85f3a12c-01af-486e-ab7f-3444836421a4", "sighting_of_ref": "indicator--e161f1e3-46dd-463e-ad0d-a2d209d7b290", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1139a31c-959f-437e-a7d8-786973ee05a9", "sighting_of_ref": "indicator--d4454eef-f0d6-4b5d-bbc3-50ffbf5560cd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61017bf6-fb85-4b87-bbcb-2b9331f5d842", "sighting_of_ref": "indicator--d4454eef-f0d6-4b5d-bbc3-50ffbf5560cd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a5d6bc-51b3-410e-8649-2d3592da62bc", "sighting_of_ref": "indicator--7a4f3ac0-6d5e-4b0e-848c-d0efab54e5de", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca7ee16-dcd9-48c2-a662-6e017189cfe0", "sighting_of_ref": "indicator--8b07d737-3f2d-450c-bd81-937f46499dcf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97eb71bd-fc0f-46e7-80e0-95e39aeb68f5", "sighting_of_ref": "indicator--8b07d737-3f2d-450c-bd81-937f46499dcf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda68c5d-48c9-4f0d-b229-6a83cc81f7b4", "sighting_of_ref": "indicator--41123e97-f82b-4089-8ce4-d8d99d53e2f2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688585a9-1878-47f6-ac25-1bec6d0ae0ac", "sighting_of_ref": "indicator--c2891803-b7ee-4950-a134-111f1951e0ed", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7fd746b-0152-4245-80be-914ab0fa17cd", "sighting_of_ref": "indicator--1fcc8a24-b100-4b61-b089-b40a84225c68", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d64548e2-c4dc-4b85-9b01-f3a3655a08f0", "sighting_of_ref": "indicator--799d1af6-f63e-4761-9118-4dfd38114454", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce89ccf6-23e0-4486-9460-ee49e737af6f", "sighting_of_ref": "indicator--451c1dbb-b4ef-421b-816b-5e8c4ff17e5e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e6459a-1d73-4519-bb7a-f0e10ce1d628", "sighting_of_ref": "indicator--74ccca75-f077-4715-b390-00dfc2134901", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2033540-e302-44ef-9074-35924a6c5d1e", "sighting_of_ref": "indicator--a2fed407-2e45-466a-8f01-893e06e538e3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e5cc6d-6d1f-44e2-ae13-5b5dfa054552", "sighting_of_ref": "indicator--a2fed407-2e45-466a-8f01-893e06e538e3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd51549e-a903-4e4a-8354-8cbdc0e7e72f", "sighting_of_ref": "indicator--627e2b2b-11ef-449c-871b-87961af626d2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8797b5a4-e576-4754-924d-5143238e8fe9", "sighting_of_ref": "indicator--627e2b2b-11ef-449c-871b-87961af626d2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f73f07e-2801-4275-9c1d-b1c32ef232f6", "sighting_of_ref": "indicator--90307bcc-6ebc-4dde-bdfb-07f0fe84a762", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bedf79ec-8732-49da-ac11-96da34db161f", "sighting_of_ref": "indicator--b05c665f-12c4-4bf5-8479-b1efdcd39fd5", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4901064b-f990-4678-bdc7-037d3df71cfa", "sighting_of_ref": "indicator--3040f354-d907-465f-b02b-cbd1785a4742", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c01a1a4-c34e-42e9-8bb1-f01e35f570ba", "sighting_of_ref": "indicator--98111d1e-e91e-4378-b604-8de5a3b4b170", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910375e6-abe9-42ec-8188-cdc72f1db5db", "sighting_of_ref": "indicator--f50dd90b-1369-44f1-a067-3b73a150c12d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3a48bf-bd89-422d-b0e5-9d2a77b8a70b", "sighting_of_ref": "indicator--f50dd90b-1369-44f1-a067-3b73a150c12d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a93b1301-497e-4ac4-98ea-e96eff358b87", "sighting_of_ref": "indicator--e8d0c92b-9ed1-4d40-bee3-f2492cd72d9f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a78e5db-0b19-4d13-a817-188677e1d202", "sighting_of_ref": "indicator--2f62b5a0-74f5-4bb7-9ffb-08c150bf1a54", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50938b1-bb75-4647-aee3-10ed13525e19", "sighting_of_ref": "indicator--2f62b5a0-74f5-4bb7-9ffb-08c150bf1a54", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516a86e6-3446-400f-b0db-fc8cb13d45ff", "sighting_of_ref": "indicator--2f62b5a0-74f5-4bb7-9ffb-08c150bf1a54", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46e8e14-ed93-4ab3-a593-71e3241e6305", "sighting_of_ref": "indicator--255b2e24-1f91-4b0c-8149-67e7d2748f5b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01bdcc08-74a9-4255-b52f-c4e35320577f", "sighting_of_ref": "indicator--255b2e24-1f91-4b0c-8149-67e7d2748f5b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aaa62bf-9f6e-465c-9ce1-c53b3881dfba", "sighting_of_ref": "indicator--2e0612a9-474e-42ac-a5b1-8b63ab22d857", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d8aab0-13fb-4af1-8b70-89602e044977", "sighting_of_ref": "indicator--e673088a-5ed9-4c8b-9763-0c4cfe6b0050", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ff4a73-0d8c-4169-a53f-fabeecb7d09b", "sighting_of_ref": "indicator--248f5a2b-9428-4f78-bc07-34467c636785", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45577820-c4be-4c49-9a0b-cb7b2edc731a", "sighting_of_ref": "indicator--351c8851-147f-4f54-8b05-eb910ca58eb7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b99f55-1052-43d7-b629-03bc44861a24", "sighting_of_ref": "indicator--9a568429-61c1-4b90-9246-7da56c41fd5a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f588e618-4081-44fb-b22e-2c4b54986368", "sighting_of_ref": "indicator--9a568429-61c1-4b90-9246-7da56c41fd5a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e248b5e-6a7d-4376-be54-154e46dc3c87", "sighting_of_ref": "indicator--1794352c-3e3d-4381-8190-30769c820f12", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d454cc3-fde4-46e0-85e4-9c7ee7cbbe8c", "sighting_of_ref": "indicator--1c681b04-ad09-4119-b46d-2661f4b1d26e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27af1dc7-6acf-4057-b1ed-d9d29bca4a79", "sighting_of_ref": "indicator--3c069e4c-3450-40da-89a0-b8fc1ca186b5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07dcc3e1-eba8-42d8-8456-879515a8acb8", "sighting_of_ref": "indicator--16a62320-71c4-4ac6-9ab7-eeabc79d7159", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0fa5ca9-9ff7-4008-98f4-dac3c76c625c", "sighting_of_ref": "indicator--9f395f44-be4b-4e30-b6df-5c11ea972802", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1465f83-9576-4bcc-8e5f-07c9cd1720f5", "sighting_of_ref": "indicator--c5dcdb7d-f079-44d4-b3be-1b2df6598e62", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10311eeb-1333-4f5f-a652-41f4fc9120d5", "sighting_of_ref": "indicator--3ca9b837-5146-420d-a322-1e2305157ef9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59d05db-93f1-4524-8be2-10150aa8f777", "sighting_of_ref": "indicator--21eaf6c9-5a39-46a9-b0c2-4291b5029a23", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e9cfbb-4118-47c5-b3df-fdb7ea3aa16a", "sighting_of_ref": "indicator--090a865c-9f3e-4c91-8f3a-d6b4e233dae3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a2dc97-8582-4707-a15e-9f23afc02da5", "sighting_of_ref": "indicator--e1682b1b-9e31-4e7d-8019-93a4e981a30f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a74ea2d0-d9d5-4dc7-8522-ec550caa4b9e", "sighting_of_ref": "indicator--1047ffd9-e85c-4eae-9f76-32979a5afc7b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785a5e09-02d3-47be-bd5a-aa3f997c53c2", "sighting_of_ref": "indicator--4e763692-cb1f-44ac-80b1-917c341ac735", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--245ff786-1b7b-4c8e-b28f-e96562f4eb84", "sighting_of_ref": "indicator--1f732305-c5a2-438c-82a0-700fb5726c58", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fefa7273-6510-43f6-aa63-dd91824fb1e4", "sighting_of_ref": "indicator--6a777b04-cfac-4c9f-b5fd-f01489946da4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9887fb21-4b35-43ba-9030-b29e8a9a1c6c", "sighting_of_ref": "indicator--a7701ce1-074b-45fd-9e72-9386c82a3eff", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387250e5-2e4e-4d09-942c-97a1a503105f", "sighting_of_ref": "indicator--a611f994-5cb9-4563-b62e-3324cf56aef4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65679eb-e9d1-40d9-b241-c6922bc6e849", "sighting_of_ref": "indicator--a3738818-a28b-4fc8-9490-98270de9d278", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8107c72-de44-4927-9436-8583b73532aa", "sighting_of_ref": "indicator--36433767-c35d-466a-b721-6b40fb4d7131", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2c3c20-2624-4985-9739-a9bae456fd90", "sighting_of_ref": "indicator--93444352-34cb-479e-b255-c4bbbb05fe60", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb177dd1-4479-4d41-aebe-b899449117dc", "sighting_of_ref": "indicator--19a405d7-a02f-40ff-a933-6da224c24595", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--068afca7-2c7c-45d3-9d86-a6c5d8a5230f", "sighting_of_ref": "indicator--ccaa15a4-1b07-406c-8a82-e63a7a745217", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d2a53f-e44e-46e1-a2a5-5ea22736df53", "sighting_of_ref": "indicator--ccaa15a4-1b07-406c-8a82-e63a7a745217", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d28817-6e3c-4bb8-9be6-1b5607ae91af", "sighting_of_ref": "indicator--cee962ca-1d2f-49ea-b5fc-7ffafad85635", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba638cc2-43d3-4751-ba70-2e7edfbfc4f9", "sighting_of_ref": "indicator--b3155dec-3cbf-4e01-b0e9-787649a4e847", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2438c7ef-c7db-40d3-94f4-0918b38dd7bd", "sighting_of_ref": "indicator--cd631472-d8fe-4050-b58d-40aa3d78a435", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f59245c-ffb2-475f-a7a1-915f7cbc60fb", "sighting_of_ref": "indicator--bdf5a219-0d55-432b-85a8-814c08493cf0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--758041fb-208f-4f9d-b3ef-e99366225708", "sighting_of_ref": "indicator--93c39181-7209-41dd-a2b8-af0c8886aa6a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4b6c36-e1b2-4aba-a757-b9e7b3be1176", "sighting_of_ref": "indicator--93c39181-7209-41dd-a2b8-af0c8886aa6a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abfd5166-6eac-4ef0-8868-15469a472142", "sighting_of_ref": "indicator--7e67f175-116b-4539-b49b-a63829e37621", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d13958f8-6065-435b-b3c5-2f18bf716a69", "sighting_of_ref": "indicator--4f6a774c-dd7b-4660-bdcf-cd4160746aaa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3559288d-7ba8-4c99-8d7f-897515aa5d06", "sighting_of_ref": "indicator--c1f92dee-02e6-4aa0-962b-413bc3c3bb82", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55094472-4825-4553-8061-786164f830b7", "sighting_of_ref": "indicator--09d21fa2-b9b2-43d3-bb28-ba31f0121eef", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30638ad-1fba-4664-8b18-40cfcaefeb41", "sighting_of_ref": "indicator--09d21fa2-b9b2-43d3-bb28-ba31f0121eef", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d13006be-8827-4754-94f3-129279a74aea", "sighting_of_ref": "indicator--60e373bf-f3c8-46aa-9102-98601919229e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88046db2-c473-4d47-a167-e5b55723acd1", "sighting_of_ref": "indicator--60e373bf-f3c8-46aa-9102-98601919229e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86810fa0-554c-4bf8-b060-902641e8e52b", "sighting_of_ref": "indicator--3bc4803f-6197-4b93-b962-6cb7b7b34b70", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45df86a8-f0fc-4903-a2f6-2c362aa6b491", "sighting_of_ref": "indicator--3bc4803f-6197-4b93-b962-6cb7b7b34b70", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d468749-75d4-4033-a01a-ce6619b2f279", "sighting_of_ref": "indicator--3bc4803f-6197-4b93-b962-6cb7b7b34b70", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b405611-a11e-4b35-876a-b21df7dac729", "sighting_of_ref": "indicator--a72e2ff6-663d-4057-bde9-29959e9504e0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55baac53-04df-4fb4-a846-76ba335597ac", "sighting_of_ref": "indicator--0a3e8d75-275c-4fc1-9697-7c1e13723510", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31b3ce3f-c40f-4c59-bd81-9f5d14c64c12", "sighting_of_ref": "indicator--0a3e8d75-275c-4fc1-9697-7c1e13723510", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877d01cf-6ed1-4f58-ac11-d8ca2ef99961", "sighting_of_ref": "indicator--8bd8807e-3e2e-4899-b02e-eebceb1a5107", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25817704-8023-4fc2-92fb-17f044e875ac", "sighting_of_ref": "indicator--1f666281-782b-4ad4-8881-4dfc739ae2a7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa860e4e-c843-41b5-b3bf-4da756e199cf", "sighting_of_ref": "indicator--2bea664c-d5bd-472a-a1f4-c1a79cd7ddad", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f860d438-160d-498b-84cc-348d9c553edc", "sighting_of_ref": "indicator--2bea664c-d5bd-472a-a1f4-c1a79cd7ddad", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7550198-5858-4113-be81-8f1b65049dff", "sighting_of_ref": "indicator--af7c75b6-b48e-408c-bd1f-3cc9bcf3da25", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9729e6-44dc-4c3a-b0ae-14253173b09f", "sighting_of_ref": "indicator--ba5ad6db-dfc7-4b36-8f55-7e0da1931c10", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c86f15-6ef9-423a-a9e0-a54d0efba721", "sighting_of_ref": "indicator--1c347907-4320-4069-bdf6-4754e6d8e84c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71fd6b1-ea1c-4ea6-a7c8-b78399e34296", "sighting_of_ref": "indicator--0d9a5563-097e-4e03-9c7f-86ffc7e38318", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d0ab122-86ce-4dfb-9298-28feff75c29d", "sighting_of_ref": "indicator--4fa1b394-812d-49d7-9d1f-586b97f730a8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c37d927-8ecc-4308-83df-c33ce0955a11", "sighting_of_ref": "indicator--4fa1b394-812d-49d7-9d1f-586b97f730a8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a3da7a-af1c-4b41-a253-8bda13be20a2", "sighting_of_ref": "indicator--6bfb15e6-491f-4115-a307-2bd0c9bbedbc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d89f7199-017f-4de2-9f2b-00acd5a7d0b7", "sighting_of_ref": "indicator--6bfb15e6-491f-4115-a307-2bd0c9bbedbc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--375283b1-80ff-4af8-a2f1-0271546a62fa", "sighting_of_ref": "indicator--1e7108aa-fef4-4ec6-bcd4-a40167550860", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1a664b-99bb-46e8-b168-700418cce21f", "sighting_of_ref": "indicator--1e7108aa-fef4-4ec6-bcd4-a40167550860", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c93760d-6b10-4ce1-be6c-0d4d2072aac7", "sighting_of_ref": "indicator--cb05ae7c-edfa-4f16-8e06-1e83a5d7a4a4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b7d3f3c-f8ce-4f1d-b8e4-9277c4e99dce", "sighting_of_ref": "indicator--718bea39-c275-4bc3-a6c6-28bad621edde", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb7e6f3-a1ae-4297-b30c-2a7a6b2bc743", "sighting_of_ref": "indicator--4ecba469-7fde-4d2a-9408-385cda7caa86", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df1eeae5-380e-4258-8830-b1d63b76888f", "sighting_of_ref": "indicator--d4664aab-79a1-49cc-8837-03afb84ff1dc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2ba377-74a5-404f-916c-5964b3092ddc", "sighting_of_ref": "indicator--87045ba7-941f-470a-a5e8-81e771600ce5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d034a88e-603f-4e09-bf66-c3998a3f453c", "sighting_of_ref": "indicator--95e33d80-4229-410f-b435-19f693ddd3f9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e8c2b9-eca6-41f4-82b5-15dcde90e12e", "sighting_of_ref": "indicator--718018fb-8213-4920-9ae3-7fcac1bbb3a4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20107dc-c685-4bad-ade5-f3fd1ac6acec", "sighting_of_ref": "indicator--7a988ce9-161c-4b27-88e8-4f6a2a913844", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a84a62e8-cf4f-489b-8e09-bfb05fde37a9", "sighting_of_ref": "indicator--8423c1ba-244f-4abb-98d2-86da977a5d7f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca49aef-6305-4602-bba5-5c2dde50eb37", "sighting_of_ref": "indicator--8ffb0e11-dfab-4dfc-a045-4bd4fd3a7eb2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41999ef0-da38-4f65-9c39-6cdafbb9f120", "sighting_of_ref": "indicator--8ffb0e11-dfab-4dfc-a045-4bd4fd3a7eb2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ffd05b-4f58-4076-89ae-9de78f02733b", "sighting_of_ref": "indicator--559f0aa4-40c5-4149-80cf-fd5e45e166a1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513427de-3939-4fcf-9d38-779475b59832", "sighting_of_ref": "indicator--57b22ce1-ae62-485f-b42c-3c72b75b8173", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff24bde-c43f-4d51-9a72-81afe31b9426", "sighting_of_ref": "indicator--57b22ce1-ae62-485f-b42c-3c72b75b8173", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a7a0f00-16a1-4bf6-877c-bf629c7f1b1c", "sighting_of_ref": "indicator--d18dbf7c-b360-4250-ab42-7fe68ab37d05", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52609bc6-cde5-4c29-92fd-1cb74f7365b7", "sighting_of_ref": "indicator--9acf6b67-1806-43ca-998d-a68114adfe9f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2ea287-f6a9-40f8-a887-440be5d7c462", "sighting_of_ref": "indicator--3bfeb0fa-fa15-4c4d-98b6-15adebaa4cd2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4664a40-3230-4b9b-a3e8-5e4f508b137c", "sighting_of_ref": "indicator--c4fef7af-841b-46c7-ac6a-936bce5f3ac3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6389541b-21bc-4954-b2e5-88b03402814f", "sighting_of_ref": "indicator--ea3db5f4-d515-4306-89b0-52314b50f77a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c111bf6b-2a1b-47d9-a893-2427c9c5b59a", "sighting_of_ref": "indicator--d36a8d81-1b62-49b8-b19c-679d51c2afad", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4403870-8c2a-42c5-8972-425a8fcd8b5f", "sighting_of_ref": "indicator--45a0a193-6d62-4ec9-8142-5fd2df99cc3b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57162c79-2537-4d2c-8264-82b11ad1a0cb", "sighting_of_ref": "indicator--1d6b46f4-22a6-4c08-89a6-852291deaab5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e8a1a4-e251-4a50-aa52-7a269fecd501", "sighting_of_ref": "indicator--03f45421-29a8-428f-a0b9-94726bb22399", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4cdc7e-9999-4668-9429-d9a638d1df8c", "sighting_of_ref": "indicator--03f45421-29a8-428f-a0b9-94726bb22399", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8597ecd-2322-4762-b0ef-156185fa1835", "sighting_of_ref": "indicator--c0b18a36-5697-47d2-aa1d-e38172948f37", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d40cc05-2553-4bf4-ba5d-83b1736b0d4f", "sighting_of_ref": "indicator--ba6ca4e0-8755-40b8-a9e1-cd5b5c845bcb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf00d49-45c4-4176-a06a-34dc869e7604", "sighting_of_ref": "indicator--009456ca-d5c0-4cb6-ade5-c102320355a7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed02704c-1f1f-4e10-a70e-bf3f340fbbac", "sighting_of_ref": "indicator--b13d0a2a-3271-44ca-b14a-297f3e719c55", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6115b956-f89a-42fc-addf-efe33611ffcc", "sighting_of_ref": "indicator--b9006fb9-f13d-4869-85e3-cf53bb942d46", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1f7953-6f58-4532-ba3c-ad0a1b3fcffd", "sighting_of_ref": "indicator--69a58c93-e8d8-4dc1-bd58-06f5aa7de132", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ba2d07-ad89-41c3-9b1f-10ae25853818", "sighting_of_ref": "indicator--c7ac2466-eda1-45fc-bdb0-6e1e4f31fd63", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db537ac-2f84-45e6-a232-50c0c3c9acde", "sighting_of_ref": "indicator--9fe825a1-87b1-40e5-8bad-60d4fa8b4989", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf7bd72-6fe5-425b-8d22-9d60030611dd", "sighting_of_ref": "indicator--9fe825a1-87b1-40e5-8bad-60d4fa8b4989", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0841241-34b0-4d01-9f00-c7cd33388624", "sighting_of_ref": "indicator--05b8f7b8-9d79-4e70-a07a-cae75271dfe2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2bef910-f528-4294-8341-707a6e723ff8", "sighting_of_ref": "indicator--05b8f7b8-9d79-4e70-a07a-cae75271dfe2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69da2af8-b79c-4bdc-8246-b2b7c75aaf2f", "sighting_of_ref": "indicator--2e8c58ce-4e58-43d6-83b2-b32019c5f251", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7a5715-b9d1-41f4-8b94-ac487690fdf1", "sighting_of_ref": "indicator--2e8c58ce-4e58-43d6-83b2-b32019c5f251", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45d3180-84d4-42c2-8cf7-6d56298dac08", "sighting_of_ref": "indicator--308a9d93-2a92-4711-af0e-5f344fb57dbf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a304f5-02d4-4450-a8ac-788f2e2bf0e7", "sighting_of_ref": "indicator--308a9d93-2a92-4711-af0e-5f344fb57dbf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731110d1-aaf8-44fe-899e-856f01ad88d9", "sighting_of_ref": "indicator--ae23045e-f619-45b2-be01-88a13002b6fe", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df891a17-fec7-4eaa-9fc0-9be4913de310", "sighting_of_ref": "indicator--ae23045e-f619-45b2-be01-88a13002b6fe", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81fbffbd-fa78-4e7c-9b5d-f0b2e176bc37", "sighting_of_ref": "indicator--2654ac70-c5f5-4890-a199-d7e59231780b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6bfa4d7-a1f7-4be6-9ab6-a599631b6f70", "sighting_of_ref": "indicator--4d3f0a20-8ee0-4a87-aec9-cbf9f838b470", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--580f820b-cd71-408e-b885-d1968f144c4f", "sighting_of_ref": "indicator--4d3f0a20-8ee0-4a87-aec9-cbf9f838b470", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1d1acb-a292-4b19-b5dd-41b2c679dd56", "sighting_of_ref": "indicator--2e09afc8-c6a3-4010-a2b7-00915cb9efca", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d6ca40-753e-4b22-a55a-da20d4b9ce70", "sighting_of_ref": "indicator--557d2f93-9ef3-4e62-96d5-88281475456d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0cce02-16f5-4abf-ad4a-e910996c6586", "sighting_of_ref": "indicator--557d2f93-9ef3-4e62-96d5-88281475456d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d65658-235f-4b7a-a07b-fdfa29a32604", "sighting_of_ref": "indicator--021267fc-583f-4ebe-8bf1-b4ccde834fca", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e21aa9a-0b63-44b8-84a1-0cc07ebbd1ad", "sighting_of_ref": "indicator--279d681e-aa03-4ec2-ae0d-f7fef93824da", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c35cd6a3-49c5-431e-b58d-c7ff1cf03c2a", "sighting_of_ref": "indicator--9ddf7ddd-b12b-4d5a-bbf7-b4a70348baba", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf3c394-fc3a-4398-9799-2240ca46b5f8", "sighting_of_ref": "indicator--9bae01c0-26dd-4980-82dd-851a1828db17", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e7574c-3bd7-4f40-9193-c979915b9f40", "sighting_of_ref": "indicator--f2533f40-bfae-4d6b-aa8f-e7c9e132210e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59875542-4353-45d8-b687-d49eaa5f95e7", "sighting_of_ref": "indicator--f2533f40-bfae-4d6b-aa8f-e7c9e132210e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af9b89d-a68d-4a05-9788-1aaad63dd66e", "sighting_of_ref": "indicator--f2533f40-bfae-4d6b-aa8f-e7c9e132210e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f57ae7-c92d-4c0e-93cc-4341e7a98bf1", "sighting_of_ref": "indicator--ad006fcd-9501-4c42-b6a8-9795733cafe2", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b8f93f2-8bfa-40b7-ba7b-3e29b78b67fe", "sighting_of_ref": "indicator--ace862a9-c78f-4598-bbe8-e46520a8362e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abde63ef-2bd3-47b6-8d7b-6f3d5a14cc33", "sighting_of_ref": "indicator--1f330233-a1b4-499b-aa5f-00c8e4438666", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb007bd9-335d-4558-8138-2807b6d5584b", "sighting_of_ref": "indicator--57c2875d-4f20-4d0a-9668-697e5e33d32b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bff03ad-281f-4a40-809e-62cd41659665", "sighting_of_ref": "indicator--57c2875d-4f20-4d0a-9668-697e5e33d32b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--296232ef-5b3c-47b5-b62c-e3e560b2cc59", "sighting_of_ref": "indicator--f8b9a0ba-8400-49fe-801c-3c9b0edfcf7c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72fdeb5d-8e6e-44fc-8e2a-f3a5dc7ac06e", "sighting_of_ref": "indicator--dfe8166d-4253-411e-b71e-07b029fb41c5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b37d04-520b-41e9-b532-4db56bd4280e", "sighting_of_ref": "indicator--dfe8166d-4253-411e-b71e-07b029fb41c5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4136da-4c4b-4ab7-b34f-b9cb6c346b31", "sighting_of_ref": "indicator--7ec63379-3334-4191-8a88-45465481004e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05b0ee2b-9a14-473d-9779-701d2b3cf399", "sighting_of_ref": "indicator--7ec63379-3334-4191-8a88-45465481004e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9835afa1-c7e8-44b2-92ec-57fe8d80b437", "sighting_of_ref": "indicator--69dfd687-6952-4070-8505-e44cd25267c8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b54629-ada7-4ea9-a454-32de5cfcd2d6", "sighting_of_ref": "indicator--69dfd687-6952-4070-8505-e44cd25267c8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52b4599-8514-447c-9906-740dfd36cf0b", "sighting_of_ref": "indicator--0f990db2-1ce7-4645-a0f8-170e5367c261", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53332f1-9de1-4d61-850e-0241fa9a03b8", "sighting_of_ref": "indicator--0f990db2-1ce7-4645-a0f8-170e5367c261", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--494b4089-c068-41fe-b765-eb35715aac3f", "sighting_of_ref": "indicator--f99287a9-a9a8-423e-b5a1-2508b123c1e8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0499edeb-4b4f-4ce2-a81f-5fa823ace1ac", "sighting_of_ref": "indicator--01cb1a9d-5609-4067-a817-699de1f24ffe", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3235bc45-1747-4863-8313-70eb94f5890f", "sighting_of_ref": "indicator--01cb1a9d-5609-4067-a817-699de1f24ffe", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9f5052-00f1-4c4b-bba0-e1b623f6bec4", "sighting_of_ref": "indicator--4e0437df-16ee-4928-a2d7-aca6a60ad708", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--986ae6b3-1717-443d-95de-41b0641964c8", "sighting_of_ref": "indicator--4e0437df-16ee-4928-a2d7-aca6a60ad708", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d035b3c8-de03-4d93-92f4-bd5355917dfe", "sighting_of_ref": "indicator--6469ddc3-522c-4be8-81ef-6a1754a74e43", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d04a188c-a337-4266-880b-0f6b9dfc63cb", "sighting_of_ref": "indicator--2fc42b28-4794-40d7-b8c3-e2ffb2fdfac5", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891683b9-3370-4d34-92f1-edde511051c9", "sighting_of_ref": "indicator--a4a801ab-f558-4b82-bcfa-a65102838610", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd26afb5-f3c1-4c4a-bdda-5b3860646f72", "sighting_of_ref": "indicator--46962e0f-5c81-4cff-885e-16b91710d36c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff53bfc-4ae8-48e1-a8cb-5b94305e90c5", "sighting_of_ref": "indicator--5093775a-091e-4cbc-9c40-a795ef7d44b4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d43d954-5b0c-4c78-b44c-b6586e72e8dc", "sighting_of_ref": "indicator--c9c6d396-0af7-4fb9-936c-79387c60af3c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be8c386-65d5-45df-af36-9c04dd97d15c", "sighting_of_ref": "indicator--073fff93-9409-418f-9e51-dc57ee71b6e3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56501615-a4d6-4e67-b4fd-9dc6015cb12e", "sighting_of_ref": "indicator--a05dc190-02b7-4dde-83bb-5501179a5416", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ddfcac6-498d-4e81-a04f-189bf2e1e80c", "sighting_of_ref": "indicator--e7178a33-7869-4f63-b5d7-8f243236cb75", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8787bdbf-8c01-451f-b1ed-150d64b587dd", "sighting_of_ref": "indicator--c8da7ac0-d2cb-452c-b33e-c4971b88d456", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950b1c4d-4093-4280-ba62-453c2bf66432", "sighting_of_ref": "indicator--8e85d822-2429-4290-a75e-e7b39bcced3d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce0ffb3-db54-408a-a139-669c32b8fc70", "sighting_of_ref": "indicator--e6888b3a-57c0-4d42-82e8-5813aeae3c3a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29313796-d0cf-49a7-83b0-bc0bf4a4f304", "sighting_of_ref": "indicator--a9e27a52-3f1c-4584-8f08-fdf00961983a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb8baac-b622-4d42-b329-362bc184cc07", "sighting_of_ref": "indicator--e5d797b3-5e6e-494e-a461-bf7c1da3994b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f467fc-0e92-4636-acfe-250a1d3705d3", "sighting_of_ref": "indicator--bfdeafbe-a38d-4309-b704-b4acf63992a0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930a718b-74cb-4810-8345-67ff8e129e14", "sighting_of_ref": "indicator--019bd78b-123a-4091-8f23-a915cb1b776a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fcaefa3-bedb-4775-8285-2119ea75da98", "sighting_of_ref": "indicator--f30e192b-b1c6-4243-af82-d95c2fb4bc0f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17370da1-0846-402e-a41c-ec7f1b171549", "sighting_of_ref": "indicator--11f41d8f-7f69-4de7-87eb-eccd49a3bc19", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21cfbf12-4075-4c8f-bad6-05f530a6cf63", "sighting_of_ref": "indicator--3376b52b-6a68-478f-a3df-e86bf1bba4bc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcae6338-a0b8-4126-936b-012a781dc602", "sighting_of_ref": "indicator--7c21a3b1-22ed-4e0f-88f7-5a1a7d29a178", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336d6f45-af30-4a0f-b368-19e388658d9f", "sighting_of_ref": "indicator--1467d037-7297-4de8-bcd1-5808c9a27d66", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1459780c-a16b-43a9-8752-86829ffd405c", "sighting_of_ref": "indicator--ae6253ba-86db-4be4-87f4-50dc3b51d90c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e182b84-04bc-46d9-92ec-099f77d23530", "sighting_of_ref": "indicator--cbd18224-4743-4508-8a4c-6257fbd6318b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6752f9fb-84d3-41de-83ba-c6f6d426b5dd", "sighting_of_ref": "indicator--0eb779ee-429c-40e2-93e4-cd4a90184e6f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e99d302-426b-4a05-b816-b5f9a3c79bc2", "sighting_of_ref": "indicator--01234e5d-780c-4fe9-ba29-642ff46bfeb6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe9f9c8-d4be-4d01-8ab4-02307098ecbd", "sighting_of_ref": "indicator--0af23f83-6f10-4702-b06b-f8b4c6616642", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce17e7c3-4179-4097-a693-cc006ce40148", "sighting_of_ref": "indicator--25085faf-b2b8-4042-bc59-305d613308b5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--045f42c0-efd7-4e8c-8269-8a6014817db1", "sighting_of_ref": "indicator--0e2f3685-101f-4c2f-a43f-467bfcac5b75", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5834434e-4edf-4f3f-8283-c464b1a67ac1", "sighting_of_ref": "indicator--bec6636f-144d-45cd-baf4-41c368dfff41", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa598c0f-6ebc-4577-be73-86ff3da611fb", "sighting_of_ref": "indicator--bec6636f-144d-45cd-baf4-41c368dfff41", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94bed82e-e49e-4d2d-b23c-67af3061cf44", "sighting_of_ref": "indicator--1252f2f3-8de3-456b-8c43-6657f99a5150", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d0aaf4-6a45-4fda-930b-8d44995a54e7", "sighting_of_ref": "indicator--1252f2f3-8de3-456b-8c43-6657f99a5150", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92dd5af5-8434-4885-90cd-4781299f3fa3", "sighting_of_ref": "indicator--1252f2f3-8de3-456b-8c43-6657f99a5150", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f356cc7-76d0-4603-a435-7bea5bd8457b", "sighting_of_ref": "indicator--43ce746a-7147-414a-a5c6-1202ee187459", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b0ba1c-44d7-4557-9bb4-0eb0476a10e6", "sighting_of_ref": "indicator--43ce746a-7147-414a-a5c6-1202ee187459", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d3fe42e-30e6-48f0-bb1e-96dcb5e3958c", "sighting_of_ref": "indicator--43ce746a-7147-414a-a5c6-1202ee187459", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--121e34bf-21ff-4c8e-ad02-84adfe350efa", "sighting_of_ref": "indicator--5b9f5278-fd12-44f8-9ac0-d541db7033cd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a014ef-d139-42d0-a333-b8b21e026947", "sighting_of_ref": "indicator--5b9f5278-fd12-44f8-9ac0-d541db7033cd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5483e33e-3e57-4aa3-b3f1-9fd1934388bb", "sighting_of_ref": "indicator--a1b83bd5-1aaa-4dda-a202-5535ee076eb6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--813ab6c0-a40b-4f03-bbef-e033fae4f151", "sighting_of_ref": "indicator--a1b83bd5-1aaa-4dda-a202-5535ee076eb6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c817b7-4cd6-4312-bf7a-3cbdd6cbc11e", "sighting_of_ref": "indicator--6fbd022f-0eb2-41cf-9421-22188bcbbd99", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03de7b8d-9d30-4111-8f2b-8fa3e1abbbf4", "sighting_of_ref": "indicator--35ae38dd-a4cd-4bff-b819-6cebc527ef4f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c917d1-9d1f-414e-9cb4-ddbc0d5097ec", "sighting_of_ref": "indicator--0e7ea870-adc9-4bc5-8046-3503eea5e594", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc23673-610d-400b-a7b0-af2fe4103030", "sighting_of_ref": "indicator--99760409-bf57-40be-a492-688a813d87d9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32bba51e-8fb2-4804-98f3-572fc44861fd", "sighting_of_ref": "indicator--c0539c99-2ff7-4638-99ed-48d7da86fc25", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd020da7-9957-4ddd-8aae-8c17b5ab9a12", "sighting_of_ref": "indicator--4a0d8066-6553-4564-8fa7-b37d1202cd05", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a844a35-b156-4ea7-8b19-a15c9e000bfe", "sighting_of_ref": "indicator--4a0d8066-6553-4564-8fa7-b37d1202cd05", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f247e3c3-251e-4e0f-9d5b-df402d5c8182", "sighting_of_ref": "indicator--318c362f-d326-4796-80b6-a8f19fc1af77", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d91cae4-1a1d-42e1-b7e7-d2a28ab76c09", "sighting_of_ref": "indicator--318c362f-d326-4796-80b6-a8f19fc1af77", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd566ccb-9265-41ce-9f4f-a8358dc6afaa", "sighting_of_ref": "indicator--318c362f-d326-4796-80b6-a8f19fc1af77", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a595f484-bcf8-4149-a033-ff354c0d83fc", "sighting_of_ref": "indicator--28d28827-2ce2-4322-ad17-6b838a8aa132", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a529a422-81fe-4f7c-bc80-6292ae860bdd", "sighting_of_ref": "indicator--f8dc2c4c-bcb2-4d8b-9aa6-d9e2ddec0e3e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e54b54ac-2d3b-42f2-bc9f-0764d7c580ea", "sighting_of_ref": "indicator--7754128b-da7d-4451-ac34-0cc4c1014620", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a151505a-dd3f-48c3-a843-0b3b1eb4edba", "sighting_of_ref": "indicator--7754128b-da7d-4451-ac34-0cc4c1014620", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a85ceb-6fee-45db-b8c4-d66fb658c4f0", "sighting_of_ref": "indicator--7e3f7cb9-5dad-448b-a7e1-c31a0ff98b6b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91570bd0-e2e3-46e2-bd3c-984a089a7fcd", "sighting_of_ref": "indicator--dd0e1a6c-24e1-4f5e-b04f-3d1a3bcdd655", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba0566ad-9f2d-4dd4-8258-cdf7995a3e37", "sighting_of_ref": "indicator--3a3838cb-38fb-4710-8291-39af26f2511f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c786f90-f08e-454f-8c9e-6381b6a189a2", "sighting_of_ref": "indicator--0fca09e6-c1f0-4569-98f6-9ab6a64f5246", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a2f081-2a95-4148-9f08-e025166dd52f", "sighting_of_ref": "indicator--573fb153-bb39-4ef1-81a5-afda3cd8cc75", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--986966e2-ae6c-40b0-8655-ba16a3c2f22c", "sighting_of_ref": "indicator--07e3029f-fa6c-4588-9373-027a7755c1c5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e4e642-ff2b-4b1d-a7b4-af5a94951e18", "sighting_of_ref": "indicator--07e3029f-fa6c-4588-9373-027a7755c1c5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d447557-6d4f-4b7b-b433-37443f505457", "sighting_of_ref": "indicator--07e3029f-fa6c-4588-9373-027a7755c1c5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ae7f10-8fb9-4ca2-a615-484a95d9a855", "sighting_of_ref": "indicator--9d24ad63-f2ae-4c25-9af7-d6d809cc1342", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe52c2e0-88c8-44d9-b408-1a143a1e9971", "sighting_of_ref": "indicator--cb4a68c3-6bde-43f8-b72b-d67a3434ed11", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b3043d-0bfa-4f70-9d11-796fdd6a6315", "sighting_of_ref": "indicator--cb4a68c3-6bde-43f8-b72b-d67a3434ed11", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea8ec73-9807-4c60-bd2b-ccc74af23ba0", "sighting_of_ref": "indicator--cb4a68c3-6bde-43f8-b72b-d67a3434ed11", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a93082f-0681-4825-8fd0-24d3742855f5", "sighting_of_ref": "indicator--373c6449-a69c-4757-9f9e-0b7cacf876a6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f84cbfa-bf7d-4f80-a2c1-8e52e3060b86", "sighting_of_ref": "indicator--373c6449-a69c-4757-9f9e-0b7cacf876a6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1249a8fc-cb7f-4668-a068-9c8767000667", "sighting_of_ref": "indicator--373c6449-a69c-4757-9f9e-0b7cacf876a6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab8ade0-50f8-4b69-b161-eef6427eb90e", "sighting_of_ref": "indicator--ac5b1643-fb18-4ff2-a1d1-ca4427c0a46c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5552f0c3-5d49-47dc-a34a-b8936599732b", "sighting_of_ref": "indicator--3826fc4a-6fea-4274-80e8-bc1829b8ddf2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdceb6cd-173c-4539-aaf7-03ad5e060538", "sighting_of_ref": "indicator--9692504f-3b24-4871-81b8-a6ca15d9ca59", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3081cf78-b843-4db9-aec0-5ab4a1b1693d", "sighting_of_ref": "indicator--9692504f-3b24-4871-81b8-a6ca15d9ca59", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0664e69-b96e-4cae-9912-fab54f30911c", "sighting_of_ref": "indicator--65096188-f640-4bb8-be33-39bfacef4c26", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2173981-43b2-4e86-b4a1-023061de3651", "sighting_of_ref": "indicator--cbdf5423-b5dc-4ace-ab22-3eae3fa691d8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec6c1aa-d5d3-4cc8-a05b-c68d9054e547", "sighting_of_ref": "indicator--cbdf5423-b5dc-4ace-ab22-3eae3fa691d8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--371436d8-dc0b-489e-b831-4f3a79f1883d", "sighting_of_ref": "indicator--cd8e797c-6cb4-4725-98db-af80b5e19cfc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--967edb5f-9e32-461f-ae0b-cbcf3124c2e6", "sighting_of_ref": "indicator--6c548c8a-a819-4b85-8eb4-50aae6346a7f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad713e0-7d94-4270-a624-393e62852c02", "sighting_of_ref": "indicator--4e8fe626-d491-46b8-b8a7-4e5e30b6bfd7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2294ab27-3d66-477e-adfd-eabae60bd3f7", "sighting_of_ref": "indicator--feb4bd90-ec57-450c-9447-5413309be7d5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ce2899-a867-4a50-bbf8-90a63cecc50d", "sighting_of_ref": "indicator--2b314783-38bd-4086-a7fd-ab76f768eacf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d75407-9a3a-4d69-a86c-73feb8daeeac", "sighting_of_ref": "indicator--59c5b88b-452e-4252-8bed-805137b0c91c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed866129-ce17-46ce-8f3d-5cd3a584ca98", "sighting_of_ref": "indicator--12629ab6-e4ce-4640-afff-d16859117bad", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b701f200-49be-4d87-9300-ec7a82550b1b", "sighting_of_ref": "indicator--aef1cf95-ab59-4dda-9349-419c400d43f1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ee12fe-57fe-41df-924c-fd4df1c0c45f", "sighting_of_ref": "indicator--52817ced-c637-4c30-8f29-801df0edd7b0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5904b047-933c-49ec-a33f-de80dcd08980", "sighting_of_ref": "indicator--dc9b1fc8-16ae-4f09-b73f-96d7710226a8", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c6d17ff-227a-4865-a600-29a1fc68f105", "sighting_of_ref": "indicator--41196653-7986-4d35-affd-6f0126c81855", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f00081c4-3fd6-4f59-a9f0-24aabaa5c01f", "sighting_of_ref": "indicator--5a1a1574-db8a-4aaa-b34a-1d5501b7c24a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c10277-2fc0-4a95-9f48-131a601ceced", "sighting_of_ref": "indicator--5e89ee7f-04dc-4060-8b9c-ee71776c3bb8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81034d6e-4dd3-4468-abdb-6457e0708d1b", "sighting_of_ref": "indicator--23970bf8-1df8-4543-be65-287657931d9f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba84702-1881-46e9-b5ff-d9c7d11b48ac", "sighting_of_ref": "indicator--95d2453a-6add-4562-8836-4099e1abde0f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a182053e-05dd-4663-93fd-9788d0f1ca46", "sighting_of_ref": "indicator--c13d857a-abfc-4b2e-9100-4b2b996c0e36", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92639a5d-bc8c-409f-8a98-ec18e4591f45", "sighting_of_ref": "indicator--b0248946-2afe-46f7-bc59-ad0994a46d2f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d49daf-a040-4faf-b98d-03a428a960d2", "sighting_of_ref": "indicator--9e4a928b-90e4-4324-8ffd-453dee9ec683", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee462e1-35a9-4a53-96ac-83c60bc218db", "sighting_of_ref": "indicator--8cda505a-39e8-400d-bbd0-9b1b8da42474", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6649d95-bdba-43cf-a76d-4737c656e30a", "sighting_of_ref": "indicator--8e11dce9-8f7a-4d5e-a5dc-716c14053cdb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20cfef86-6930-4179-baa3-d3246d8578cd", "sighting_of_ref": "indicator--bd40c5fc-2282-45fc-b1ab-d8f803101001", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80fa531-d416-4a69-bc07-053aee0264bd", "sighting_of_ref": "indicator--f304bcb3-80cc-4988-a160-3d0392e547fd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0bad822-ceb8-4ad7-b42a-77d4377892b0", "sighting_of_ref": "indicator--f304bcb3-80cc-4988-a160-3d0392e547fd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a156a5b-6822-44dd-bd98-47048286a0c5", "sighting_of_ref": "indicator--208790fe-5451-4936-81b4-c83b7c11d094", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2608af95-ad98-4cb7-8b8b-a1a3ac71429e", "sighting_of_ref": "indicator--49cb5a10-35ce-4235-97c3-b2286c7d3dea", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f78125-aff1-4c1c-a695-9e174a416ade", "sighting_of_ref": "indicator--06cf4661-a542-4658-a61e-3d4da8cfff5d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c1c7b1-0975-495e-831c-824f8b1a6de3", "sighting_of_ref": "indicator--215b5e42-b3a4-4dde-85a9-b1e193998d5b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5be8858-cf8d-4527-9e8a-84b051a46e14", "sighting_of_ref": "indicator--ff0e476a-7371-4071-9797-0fe50ea1ea40", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa58076-fb72-44f5-a5d5-de36f160b5fb", "sighting_of_ref": "indicator--ba29b19f-f45b-4c33-b9bd-ba7ff56b4a3e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91fc56ad-71d3-4046-a8ba-8c7cfc2b35ff", "sighting_of_ref": "indicator--cf923c56-ab2c-478d-9922-881d9be40740", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6a4ef8-5591-4a78-bd12-22e6724ea93a", "sighting_of_ref": "indicator--9e14e489-ed9b-4608-8808-35bc54a8cdf1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26fc454a-0879-4924-b720-0e302c16c0f8", "sighting_of_ref": "indicator--ae95612c-232b-4d08-acc5-773f4ceeb0a4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983fa5a6-28d5-4779-aff6-dc9d29f15999", "sighting_of_ref": "indicator--3187be78-72e8-4e29-89ee-be1c504b0f77", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500858a2-b4a1-48af-8cc9-746496158295", "sighting_of_ref": "indicator--e73bec8f-3655-4a6c-b5d9-c1786d9fbd8d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f0ede8e-f29d-4606-bc4e-0947674cdded", "sighting_of_ref": "indicator--895130fc-4e33-463b-96ae-e4bd8301e922", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbda097a-506d-42b7-bc43-1c6438e6de44", "sighting_of_ref": "indicator--e26f9dda-d15b-4dfa-b5ad-9c26e72dc869", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15936621-d336-4975-8fd5-44efe414926e", "sighting_of_ref": "indicator--0c79b6d3-9c87-4fd6-a7c6-46386a46624f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e069b0ca-c622-47db-9672-4e0e8490a6d0", "sighting_of_ref": "indicator--09e466de-0183-4a0b-92aa-53b103b03866", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b74a1241-7fed-440d-8ead-1a30e1242747", "sighting_of_ref": "indicator--5aee2daa-9204-4930-a584-9bced33b4d47", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6208f90b-5f2b-493b-93af-bcab8f6e5f2d", "sighting_of_ref": "indicator--188dce6e-c1dc-4f67-b722-3b10927cd6e8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1402db3c-2a1a-4ff2-89f9-a57cc3d2f10e", "sighting_of_ref": "indicator--26c137c7-7251-44be-a932-06dc982aa814", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ee149e-9f54-4bd9-b11f-0d6634d5e413", "sighting_of_ref": "indicator--aa8c8979-0fa8-41b3-9197-bf28dd9ef22f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a02bc78-5565-4791-8fe3-a4c95744f13f", "sighting_of_ref": "indicator--fe9f43a0-aefa-439b-9466-125956620f53", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53dd6dc0-ddcb-4389-90cd-02376c452441", "sighting_of_ref": "indicator--6e9817b6-813b-46b9-960e-e4641535595e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f87c824e-c444-4d4e-a99a-702d036a9f62", "sighting_of_ref": "indicator--4f755db6-f5d9-40d6-904b-864c576c9ea8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f4b511-42d7-458f-9b4a-f3ef88104869", "sighting_of_ref": "indicator--6cad25b4-d3f4-43ca-bff1-1887835f00f1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1c515a-3219-40a1-a099-65867e1af530", "sighting_of_ref": "indicator--114a71d6-3328-436b-9c79-cb787674a72a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b71dca-fdd4-44fa-ae77-384e32b4ad46", "sighting_of_ref": "indicator--86a090bf-1bd0-48db-95a0-f0fc770a3556", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28466b17-7c4f-4cfb-96fa-d6f5177b5a3a", "sighting_of_ref": "indicator--c2e414ad-a5aa-4496-bee0-82ca1ad4c85e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc0f6816-4ff4-4878-893b-67bfeee0e3c3", "sighting_of_ref": "indicator--e84a751e-5752-48e0-a42c-42207220258a", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4885be-804f-4879-953e-03dfa797dd27", "sighting_of_ref": "indicator--283842e7-19cb-40a3-a028-c489fcb2cdf3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3726ed82-b602-4899-b471-e5247c3bee1c", "sighting_of_ref": "indicator--1ff220e9-6f80-4f5c-8cf6-83ec7f07224e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418d69c8-19fe-4d1e-8cfe-cc97d70440ae", "sighting_of_ref": "indicator--6f472967-fd2d-4abf-9938-bb778e2ce8a1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb3a813-1eeb-4596-9cce-92b2ef139139", "sighting_of_ref": "indicator--76f856e8-1606-469f-8679-b9c38c2ba8a1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a9d7951-cde9-46af-824b-07a4f0e0ff5b", "sighting_of_ref": "indicator--ac00b198-64fe-4fe8-a1b6-cbc9f6a2f71c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d3076c-1ca3-4a9f-bb0c-7d97631b4175", "sighting_of_ref": "indicator--bb631354-76dd-4c69-86fc-b16931ad1b85", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62efdbad-4ebc-489c-998e-e1624a9e3954", "sighting_of_ref": "indicator--70c876f9-d1e1-4312-bc18-8c5696709249", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c1e1d26-0f8c-4c2e-9ab9-3384e6c3f58a", "sighting_of_ref": "indicator--70c876f9-d1e1-4312-bc18-8c5696709249", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15519a4b-8f7f-45fd-a734-1a923d9b9fe6", "sighting_of_ref": "indicator--70c876f9-d1e1-4312-bc18-8c5696709249", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0483feea-9c57-41a2-b82d-3433f0399048", "sighting_of_ref": "indicator--2b03dc32-0780-4328-af26-8e641841b860", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e982fb-adc8-4a58-a361-45b8f05c62d5", "sighting_of_ref": "indicator--71499085-616b-4a57-9706-b0876377df83", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d85cb2bb-8e54-42f4-a5db-f2abc3c0a694", "sighting_of_ref": "indicator--71499085-616b-4a57-9706-b0876377df83", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeafad49-a75d-4604-82ae-f9ba76a5952c", "sighting_of_ref": "indicator--7a9dd18c-78cf-4247-b219-12a5571e70ef", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6206ef-74c0-4f33-8740-128fc4419029", "sighting_of_ref": "indicator--a75f1d57-e0f5-4704-888c-4608866cc3f5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca6c8e8-e5ef-48ef-b1e7-10555e12d4d8", "sighting_of_ref": "indicator--210947ea-cbc4-48c9-bf30-df9cb3c1523c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8faf89aa-02b8-4080-b5b7-268c9b68fa54", "sighting_of_ref": "indicator--210947ea-cbc4-48c9-bf30-df9cb3c1523c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f093ba-d991-4cb6-9c65-0840c3284199", "sighting_of_ref": "indicator--210947ea-cbc4-48c9-bf30-df9cb3c1523c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91840a97-23bb-4cb0-bb01-23fbcd4d887d", "sighting_of_ref": "indicator--f96867b9-41e0-4462-9c20-fc4741deb797", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64803625-13b7-4ac1-896e-78bf4f42f469", "sighting_of_ref": "indicator--b85b4b2a-a563-41b2-b9f0-294a2700f7de", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bdf80f7-0487-4522-b1d9-e2efe3fc3af2", "sighting_of_ref": "indicator--b85b4b2a-a563-41b2-b9f0-294a2700f7de", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e15d2d0-950a-4b07-9fe1-95cbf6a8708c", "sighting_of_ref": "indicator--49c9e205-fd36-4a60-95d4-16fff0da8f12", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5de305-2b08-4173-86ea-b91662d93120", "sighting_of_ref": "indicator--6d971520-1f6f-4e52-acf4-aaaeefa40cd7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195c6eaf-e369-4608-b17a-ac6e4a1d18f2", "sighting_of_ref": "indicator--0627e13f-6e6c-45b3-ae8d-ef5beb13065d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0fd22e4-075b-4aff-ba22-8f9fd304ff31", "sighting_of_ref": "indicator--0627e13f-6e6c-45b3-ae8d-ef5beb13065d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531c4c17-e006-4915-baeb-9f6843a29d68", "sighting_of_ref": "indicator--929d76a3-7a5d-4592-8167-a9346f0fcce0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a21fc2f-a970-42f0-9bf0-eb6f07542e88", "sighting_of_ref": "indicator--929d76a3-7a5d-4592-8167-a9346f0fcce0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd0c8d2c-2908-4b01-b90c-feac18f6ed87", "sighting_of_ref": "indicator--929d76a3-7a5d-4592-8167-a9346f0fcce0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea52c36-b3b9-45d8-ac7c-b21c1bc841a6", "sighting_of_ref": "indicator--779d8a86-d132-45cc-9caa-8167656877a7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee0b2aec-91d3-4be7-8063-e530436044fa", "sighting_of_ref": "indicator--ec83737a-fd9d-4def-a0cf-1ea2cb752387", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ea3289-4924-43d2-b83a-6062f3065a3a", "sighting_of_ref": "indicator--02eb65bb-8924-4209-a30d-a3871b760922", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2cce03b-a6b4-4aaf-95dd-46f7c3679987", "sighting_of_ref": "indicator--02eb65bb-8924-4209-a30d-a3871b760922", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b7fb99e-bca5-4d00-9b98-115a01dd7f9c", "sighting_of_ref": "indicator--81de64a3-ec2b-49bf-aa62-cd04bfc0faee", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9dbd23-a8ae-4d1d-af3c-870efbddb5ab", "sighting_of_ref": "indicator--81de64a3-ec2b-49bf-aa62-cd04bfc0faee", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b32d980-c1da-47aa-b2ec-3ac088f24a77", "sighting_of_ref": "indicator--f11e84df-b2f4-4a02-b071-86ac43086256", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d092e484-ae2e-49dd-96d7-f9b3d8ef415d", "sighting_of_ref": "indicator--f11e84df-b2f4-4a02-b071-86ac43086256", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b62211f9-26c8-4f62-a1f3-d1984bf815ef", "sighting_of_ref": "indicator--74a9abd8-f4ce-4611-974a-9a4801d3089a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904357e9-3fe1-41ae-926b-cedf1621c553", "sighting_of_ref": "indicator--f0cc09df-e1d8-4515-a371-5ba2568bfc2c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cefc8db-5830-4088-bc4d-af4d9be079b4", "sighting_of_ref": "indicator--dbf0cd95-1636-464a-b4bc-885e932016ba", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7bcd252-a248-453b-9873-bdafbb104a70", "sighting_of_ref": "indicator--dbf0cd95-1636-464a-b4bc-885e932016ba", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d720e718-3ad2-493d-bb45-d30c3b1167f1", "sighting_of_ref": "indicator--8e4e9870-ae27-407c-85f8-adfc735fb2ae", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb9a2e5-da3a-4ac7-b091-9fe990949718", "sighting_of_ref": "indicator--c3947b35-58f8-4f8a-afc6-58bc3049ebdb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85fa265b-ba41-4de0-ac56-54d8aaab4ab6", "sighting_of_ref": "indicator--1dde7e9b-4f09-4023-8297-ecaa8302298d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4577f33b-bb9e-4476-ac10-2c8f9f7f9af6", "sighting_of_ref": "indicator--b61affac-e1d7-4f7f-98f6-f52d825a2123", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--088ef82e-6f54-4846-9073-c5970ad1de31", "sighting_of_ref": "indicator--ba4e1c11-e6f6-4ea2-b960-15f8cc554fe7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32979bd2-0898-47bd-89fa-6dabebc1e602", "sighting_of_ref": "indicator--08d8cb18-6c9f-48ad-a045-957d92d3ade4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2b3010-491f-46d2-973e-697837f950b3", "sighting_of_ref": "indicator--08d8cb18-6c9f-48ad-a045-957d92d3ade4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0020a9e2-d64b-43f0-b3d3-965644d53999", "sighting_of_ref": "indicator--9e17dcda-d8e4-44ad-9a7b-8cd54b8558a6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--337870a2-348b-410f-be91-c8e3dfec1b89", "sighting_of_ref": "indicator--9e17dcda-d8e4-44ad-9a7b-8cd54b8558a6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535d9689-c539-4953-ae29-59f695a7eaf1", "sighting_of_ref": "indicator--9e17dcda-d8e4-44ad-9a7b-8cd54b8558a6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--506437de-aaf0-4bf8-a2de-9f16504de49a", "sighting_of_ref": "indicator--128119db-c4f0-4064-bf5a-a573ef2e2531", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac2dc9f-9e41-4362-b00d-6d2eba548782", "sighting_of_ref": "indicator--128119db-c4f0-4064-bf5a-a573ef2e2531", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f858a484-599a-43c3-9048-c2bcd2568118", "sighting_of_ref": "indicator--128119db-c4f0-4064-bf5a-a573ef2e2531", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa44fd3c-fc16-46d7-92dd-36d67909aecf", "sighting_of_ref": "indicator--c6601d64-3d70-4ea4-81d3-10cd72ff6964", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d10c87-506b-46f6-a690-b8ff3ed4928a", "sighting_of_ref": "indicator--39f10b94-7baa-4be9-a226-2eddbaa85dda", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba6ba9c-a1f2-4335-a447-1ecf6e14d944", "sighting_of_ref": "indicator--73839636-e7d2-466f-8e3b-04b9048a5727", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5791b056-f072-45ff-a829-28e15f50d9de", "sighting_of_ref": "indicator--24dc5647-34d2-48c5-b9d5-20bd9c473efc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b916f4c-f3f3-417b-8380-0c84f38e84eb", "sighting_of_ref": "indicator--d4d94092-6b23-4e51-8103-034e8671831a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb66050-c0ae-40df-a73c-e85c5a08918f", "sighting_of_ref": "indicator--57d8a74b-59ab-43a7-b30f-b3615305f09e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d40f6c5e-8006-4ccf-b928-825a34fac5e1", "sighting_of_ref": "indicator--57d8a74b-59ab-43a7-b30f-b3615305f09e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa1c3d67-74e6-49d8-b83e-c56724411e98", "sighting_of_ref": "indicator--f6747a45-c6ef-45c8-9eb0-7273e46a2578", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84b61b1-b5d2-4bae-a129-d164899502a4", "sighting_of_ref": "indicator--b15b37b2-cb4b-480d-b351-5724d4091325", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6887e7b-b546-4d18-aa6c-05a55cb81d19", "sighting_of_ref": "indicator--28b635cb-d7d8-47e3-8199-576cc1ea1130", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f18349f4-5de8-4682-8808-6ee3f116977a", "sighting_of_ref": "indicator--28b635cb-d7d8-47e3-8199-576cc1ea1130", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c3bba2-5deb-4645-a171-f698fa7c26de", "sighting_of_ref": "indicator--11a6b73d-f131-40db-8116-f0dea97a9324", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beca0340-56b9-488e-8ac0-3e7b7a0a7b4a", "sighting_of_ref": "indicator--11a6b73d-f131-40db-8116-f0dea97a9324", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4e0881-cfa5-49f0-a01e-1fd8cf571d7b", "sighting_of_ref": "indicator--1fe850f3-f015-45e6-a038-cf632da0e886", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117eaf73-f5be-498d-b664-e4e2201c01c3", "sighting_of_ref": "indicator--1fe850f3-f015-45e6-a038-cf632da0e886", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7045c307-3403-491c-b2df-def564ab5d80", "sighting_of_ref": "indicator--515f3ec7-7cdc-4d06-b926-167c527a8cca", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a7a7d5-93ea-4b94-84e2-ef6f4381f49d", "sighting_of_ref": "indicator--515f3ec7-7cdc-4d06-b926-167c527a8cca", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00eaff39-80a4-440e-8578-1a9740847645", "sighting_of_ref": "indicator--d27fcf5f-f24e-40cc-93d8-a9b1a1136396", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb94e0e7-7d0d-4df5-b472-6b40f0c593ff", "sighting_of_ref": "indicator--d27fcf5f-f24e-40cc-93d8-a9b1a1136396", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8a0093-c62e-4014-b173-1db786a3a6d4", "sighting_of_ref": "indicator--73897a3f-3a59-451e-9d0d-71ddd0262f29", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3d031f-ba5e-4462-8a33-f16bc1539bed", "sighting_of_ref": "indicator--0f8b425d-3c4a-4e24-920a-c16306f0b38b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--849d7a45-55ef-4e71-b86e-614be19b3691", "sighting_of_ref": "indicator--0f8b425d-3c4a-4e24-920a-c16306f0b38b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d5a998-d504-434b-8cf9-f7ae362387a5", "sighting_of_ref": "indicator--0901da6c-4fa2-4bbd-849c-131fedfa09c6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51303276-d32b-42ea-b665-cd12e4e1bddf", "sighting_of_ref": "indicator--0901da6c-4fa2-4bbd-849c-131fedfa09c6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a45a8d-385f-4a47-9651-3775f102c1f5", "sighting_of_ref": "indicator--0901da6c-4fa2-4bbd-849c-131fedfa09c6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbbefef1-e88e-4fac-a6bb-fb3ad1328166", "sighting_of_ref": "indicator--9aaccc1f-a56f-4327-ab78-8342984ff6a9", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c203c7-7ab1-4af9-be02-0c336bb290aa", "sighting_of_ref": "indicator--2e406f46-5f7c-4815-8cc4-48f972330c78", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1122ee95-bea1-445a-8228-5b8b30209fa8", "sighting_of_ref": "indicator--2e406f46-5f7c-4815-8cc4-48f972330c78", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e99837-bbe9-4594-9033-b5755a00fe50", "sighting_of_ref": "indicator--6327759b-2601-4a6e-b2b7-09ada56b8e84", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3d5d69-601f-4aca-b985-fecef96038ab", "sighting_of_ref": "indicator--b8773de0-c10f-4557-8bd2-f11d4bc66e95", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddad4e78-e161-4158-817f-cdbc0bcd8c96", "sighting_of_ref": "indicator--3ff55a2c-637b-4328-b0d5-917ae4765ead", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db73c7cd-fbe5-4ca2-952b-0ef0c732ab81", "sighting_of_ref": "indicator--3ff55a2c-637b-4328-b0d5-917ae4765ead", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29937f2-93a3-467d-9a95-eb19982e5744", "sighting_of_ref": "indicator--d294fa47-2900-49af-8e4b-ca91aa0c8723", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb78dee-5ddb-43cb-9993-f12df2274100", "sighting_of_ref": "indicator--1b9e1034-daf4-4f7c-8d23-19a09b151f8c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec2b412-aa34-47ac-b263-fed3243c8932", "sighting_of_ref": "indicator--1b9e1034-daf4-4f7c-8d23-19a09b151f8c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd12051-ee7a-4626-96dd-e22469c89fa8", "sighting_of_ref": "indicator--1b9e1034-daf4-4f7c-8d23-19a09b151f8c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fbdac28-96e7-4313-968a-2e058c1d3c6b", "sighting_of_ref": "indicator--b03156c7-afd3-4e98-90a2-06eb4d8d5908", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd102ea1-b14f-41db-acc2-fade6dd7051b", "sighting_of_ref": "indicator--b03156c7-afd3-4e98-90a2-06eb4d8d5908", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--151ee3c0-973b-421c-bdff-08f528f6ae59", "sighting_of_ref": "indicator--511b4ca4-448f-41a2-a0d2-ac83f67be7cc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ac9663-0de3-454c-b583-9ba2a6f8be01", "sighting_of_ref": "indicator--c8aaa1d3-a2bf-42a9-9ae3-c196380570a9", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d2a5a0-63af-4e1f-8b94-5d4ef48bfb2e", "sighting_of_ref": "indicator--ba493d0d-ed4f-4475-8899-a614dbbaba16", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9d2d6c-b132-4270-a659-582935be8886", "sighting_of_ref": "indicator--00eed4b3-675d-4a2c-bde8-6c872337317f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb3cc52-8e23-480c-8e34-6d1e1ebc53d2", "sighting_of_ref": "indicator--00eed4b3-675d-4a2c-bde8-6c872337317f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1201010-54e9-4bcc-bd13-45b7301b4922", "sighting_of_ref": "indicator--00eed4b3-675d-4a2c-bde8-6c872337317f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff51d6d-cc82-4d9f-bd5c-6a3f7763e27a", "sighting_of_ref": "indicator--be494564-55b7-449b-b37c-111cfeffec2b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36939128-7391-43ca-8736-8c0f87f8602f", "sighting_of_ref": "indicator--be494564-55b7-449b-b37c-111cfeffec2b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a81812b-15e3-44ef-a206-d2f366b61e6f", "sighting_of_ref": "indicator--bb459366-4ee7-4d97-8d2b-c803fc0235ac", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba2dc31-14d5-4e38-8067-11ed132f3bed", "sighting_of_ref": "indicator--4991d408-0ffb-4cff-b79a-f396f15863ab", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ac1bb2-c921-4ed7-b651-171d0f1acd45", "sighting_of_ref": "indicator--6c58fa4f-3f61-4b91-98d4-83b78c48d296", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98610294-6fc8-441e-87e0-2c87b3e6d8cf", "sighting_of_ref": "indicator--865ce832-eb9d-4075-bb27-14089e63a145", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78f5410c-13cc-48d1-b822-60025786e279", "sighting_of_ref": "indicator--c9a1d5d2-0bda-436f-af97-8d8b89881154", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--481c4e51-e05b-4c0a-8e28-95213e46b038", "sighting_of_ref": "indicator--c9a1d5d2-0bda-436f-af97-8d8b89881154", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd30b37-e2a9-4872-b451-a0b4a16b0cda", "sighting_of_ref": "indicator--c9a1d5d2-0bda-436f-af97-8d8b89881154", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--871afc80-bd6c-4f8c-9c85-e6fe560c1972", "sighting_of_ref": "indicator--c9a1d5d2-0bda-436f-af97-8d8b89881154", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71712ac-1f93-45e4-9be8-3d82fa36e7fb", "sighting_of_ref": "indicator--1db45b42-fd04-45fe-a065-ef6a9a984e4b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8cc8ae-c66f-49d6-89b4-344d66083160", "sighting_of_ref": "indicator--8a15192b-1e27-48f3-9f53-56da054e97b2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085f3c4b-c956-4a16-864e-c614c7fcafa7", "sighting_of_ref": "indicator--d6641b2a-dab3-46c0-8355-c8799c999f2c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0608c052-90c9-4bf2-87b1-f7dc49b4bd14", "sighting_of_ref": "indicator--d6641b2a-dab3-46c0-8355-c8799c999f2c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d75bcf-ccb9-4328-a293-7e998d16f4f4", "sighting_of_ref": "indicator--2850388a-f609-4bf5-8e1b-13390d401c4e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0219f4e7-d550-4608-ab5a-646eb8d13573", "sighting_of_ref": "indicator--2850388a-f609-4bf5-8e1b-13390d401c4e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1c82e7-446c-4691-ae6a-13557b70ee3f", "sighting_of_ref": "indicator--858665db-195a-4caf-a955-215e2cbcb396", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4a707e-ce46-4eb0-a591-7a0e951267b6", "sighting_of_ref": "indicator--bc46a4be-a733-4b52-908b-e42717686f68", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d74d3d0-42e5-4c0b-be79-dba4c46109b8", "sighting_of_ref": "indicator--23637e26-8679-4388-97fd-4f7436a2a40b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec8daa15-3bf2-451e-8dcb-0d437b2bc99e", "sighting_of_ref": "indicator--77d69403-a7e1-42e1-9408-de4e75f41d68", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d07cac9-82ef-4949-bb26-11e6d0ef8198", "sighting_of_ref": "indicator--2b9250c4-d1a1-482c-be23-69177703f993", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e4b29c1-757f-458b-9290-65f55978c367", "sighting_of_ref": "indicator--38a8bcc0-1307-4c6f-b83e-36519d3d8e46", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0412021-e22d-4068-b7ed-1c7c72a388ff", "sighting_of_ref": "indicator--3305cdda-832b-4837-b03c-5b4e10757b7f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84735530-894c-4e05-8cdf-a5a92c6040a7", "sighting_of_ref": "indicator--0340e50c-eb2a-4253-8495-48718d7e1b89", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec64307-7b83-4a6e-bbd5-38e6c0817c56", "sighting_of_ref": "indicator--b5ea9b92-1f14-4560-b641-c25e86c1a706", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd67db1-9cdf-410a-b64f-a943b651a1a1", "sighting_of_ref": "indicator--70189537-5e11-4f81-a160-fe5fd3295e51", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc87df12-c048-4aee-8298-08c22c1597fd", "sighting_of_ref": "indicator--ba3656ec-471e-454b-ae96-514fcf7e1a86", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7aa0b6e-d5d3-4a55-9839-a9b4ca2ca885", "sighting_of_ref": "indicator--d7865397-9b8c-4404-8a35-ff84a6611867", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e67b4b-80d2-417e-8b4d-407f9d127179", "sighting_of_ref": "indicator--d7865397-9b8c-4404-8a35-ff84a6611867", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7566d522-c89c-4722-8e1f-6c43f3bc9fd3", "sighting_of_ref": "indicator--85351c46-6907-479a-b6a5-7ad035a17487", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--084640de-d68b-4546-8e87-af2c02c3aa27", "sighting_of_ref": "indicator--cc92bbd4-0605-43a7-b6ab-97c1b4bb88d5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b69ccf-b1b0-49c6-8ce2-ca536a2e6ae3", "sighting_of_ref": "indicator--c92146cf-1ade-402f-b201-42281a3d6d10", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a638a092-fb21-45d8-8461-a2f45f48bbfa", "sighting_of_ref": "indicator--7a711115-956a-407b-bce3-0b007022185b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca04e64f-865b-45a7-a172-9be968dc1660", "sighting_of_ref": "indicator--ef63e34b-fd7a-4c0b-9eda-8fe5658da78f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1310d70-4354-406a-9adf-b168226ae15f", "sighting_of_ref": "indicator--96e6cb49-503c-4c49-80c8-ffc69ea38dca", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--803f15d5-ebae-4898-a69a-cba453a44c1c", "sighting_of_ref": "indicator--103f3f95-0f64-4561-99c7-97ed4dfb4142", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc979c8-fa05-4b17-82f9-f49825f87e7c", "sighting_of_ref": "indicator--135881fa-3022-47ba-a67e-fa34ca1c33f3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e8ba6f-d49a-4d00-93c8-733b96e19b77", "sighting_of_ref": "indicator--6fb466d0-a4cc-45ef-9dce-30ce71e5f1f5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c492cc-716d-4a4f-80e7-5ae3bd049231", "sighting_of_ref": "indicator--3289adcc-8317-4262-82a6-21d6fd052f76", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e00367-4e90-470e-8db1-9a6546b96971", "sighting_of_ref": "indicator--c9205e10-94d5-44d3-bf2c-f702130b869e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cedeab3-dfd1-4625-a163-c70579e298a9", "sighting_of_ref": "indicator--cccd2ece-792b-40b6-8372-8e37948099c1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95172504-0431-4a1a-af58-49a4ca5d323c", "sighting_of_ref": "indicator--3c89497f-3757-49b7-b9f3-64a492ffa4fc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e62d687-5650-4515-b317-a7b2a7a99e17", "sighting_of_ref": "indicator--3c89497f-3757-49b7-b9f3-64a492ffa4fc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a0289f0-e876-4f00-8bd1-3855a9e0b1c7", "sighting_of_ref": "indicator--9a009b31-c5ef-448e-9816-8d4e995990f1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db2597d-ac18-4e57-b277-127f31c3532f", "sighting_of_ref": "indicator--134b2816-74ee-46aa-9691-866729c4e6cf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d832bd28-27b5-430d-a2cb-0a9b0e01b5d7", "sighting_of_ref": "indicator--fc9ecdb2-bfc1-4dc0-b21b-836508d90983", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--236a5d53-6f05-486e-8485-265a535b743c", "sighting_of_ref": "indicator--fc9ecdb2-bfc1-4dc0-b21b-836508d90983", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9399505a-eb83-4400-91e8-218b36255bc4", "sighting_of_ref": "indicator--465332f6-62dc-4937-95be-6f8c2df16efc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c7826bc-199f-43bb-9bc4-b5a0c88a7f9f", "sighting_of_ref": "indicator--5dc22d41-3415-4864-9d2c-d41b69905c65", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ccaada3-5cd5-4103-92d1-bbec97bd2cd1", "sighting_of_ref": "indicator--5b50206d-5db8-4312-a1f9-b87f14282d08", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf2107c-0809-4286-8aeb-c25834aef92f", "sighting_of_ref": "indicator--5b50206d-5db8-4312-a1f9-b87f14282d08", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c2ca57a-e707-43ce-882d-32e0d4d9ee12", "sighting_of_ref": "indicator--5b50206d-5db8-4312-a1f9-b87f14282d08", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0039ce33-1485-4e9b-8361-ad27467f448c", "sighting_of_ref": "indicator--5b50206d-5db8-4312-a1f9-b87f14282d08", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad138ba4-b8f2-46ba-a3ef-d2ca195868a0", "sighting_of_ref": "indicator--165e4d96-006e-40d8-b581-9eb31e4f99dd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157407bc-2bfb-4665-9ae1-39562b889e3e", "sighting_of_ref": "indicator--ac24b681-0af9-42dc-993d-03172b3b6113", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa7f3ff-f291-43b8-9470-9757158f50dc", "sighting_of_ref": "indicator--d57d0893-6117-475c-9a0e-5b4643826157", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd16c503-4daa-4cf0-9016-0d338610186c", "sighting_of_ref": "indicator--fb9aeded-584d-450a-8986-6693b50602c4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d933e76c-c170-4123-9586-c855c6ec8e6f", "sighting_of_ref": "indicator--efb86a8c-eaf8-46d7-8bb3-d60a2387e5df", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698357b9-1381-4648-82d9-608a267eb415", "sighting_of_ref": "indicator--f437f8b5-eed6-423a-a107-30b4a87162bb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--455589a5-c07f-4e14-a480-8508f3bdc3f7", "sighting_of_ref": "indicator--dd55f3eb-b49e-459f-9f1d-46f78216744c", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2b366f-856e-4ed9-9a95-0c4b2c3dd6d6", "sighting_of_ref": "indicator--df67f8b4-5077-431c-9fd1-0cdb81ce038a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92893111-0539-49d2-bcb8-8d827dd27702", "sighting_of_ref": "indicator--fcacf67b-f26b-4d4f-819f-bbc24c5faa70", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2132746d-13d6-471d-8fac-bbb898aa2bba", "sighting_of_ref": "indicator--c4a03485-c348-42ef-a19b-e0ca13df751f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e6821b7-13dd-487d-934e-51361406f169", "sighting_of_ref": "indicator--264e1577-8eea-4f3c-af90-2fc17d990b10", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4719743a-4a95-4602-a14e-fd484db7c710", "sighting_of_ref": "indicator--cb40274e-331f-4e62-9598-ef0feb8c263a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11bbe982-0f17-464f-967c-af1b2cbda322", "sighting_of_ref": "indicator--3fcaa392-1894-4d3b-9d9f-9435e36a1eb7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886432bd-2b59-4649-a8e3-9c92e9f8b66c", "sighting_of_ref": "indicator--59d6be9c-06e4-4a18-8a95-4cb518fb8de8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b29108b-9b3b-4a01-94da-0511e0d805ed", "sighting_of_ref": "indicator--601f10af-e00c-4627-bcdf-25bcc554855d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52345b17-1387-43c9-95a6-5766fc435a9c", "sighting_of_ref": "indicator--c2d512b7-ae3e-409a-8abe-9f236bcf69aa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b28f53-849e-4d38-b9c1-2a25040fcb1d", "sighting_of_ref": "indicator--eafd7942-9448-43c3-9283-e8da9ce40556", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ad0eb6-d25b-4d70-8fd2-5d9cef2acd28", "sighting_of_ref": "indicator--84a10061-e773-401c-9a6c-528d0fec0190", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e1281da-6995-4bb1-9722-15e1e4e64f6c", "sighting_of_ref": "indicator--b12300fd-6eda-43e7-a4ae-862f46342c04", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2da968-adff-4b4c-a6fd-fe43e8b86058", "sighting_of_ref": "indicator--3dcfc730-c4af-43db-9eda-8d87ad46646c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a283b304-704e-4d6e-838d-7f7876aecafc", "sighting_of_ref": "indicator--d4b7ab75-fd59-4605-b0e6-46de5dddfa62", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c12bb3-a449-46a8-be2b-0e5dd8df47a4", "sighting_of_ref": "indicator--9a9390a1-3c43-48cd-8222-5cc122e91d26", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92941f0e-b24c-49bf-ae99-7b582ad3b235", "sighting_of_ref": "indicator--41727f57-f710-4186-afaa-eeda73dd3c44", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3444946-4d68-4bfc-aa6e-7f41339a97c1", "sighting_of_ref": "indicator--bc055442-fa6b-4493-9215-8139536daf88", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a4b315-6d48-48dc-bf0a-45181ef3ee86", "sighting_of_ref": "indicator--bc055442-fa6b-4493-9215-8139536daf88", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb3bbad-a8e3-438c-86b2-523105f4e944", "sighting_of_ref": "indicator--c1e87686-a055-4583-a36b-c80bea8399a1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08601ba1-e94f-41a7-8ccf-e920316287bb", "sighting_of_ref": "indicator--511aa3e1-0000-4567-9f0d-0f6407eed2ab", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d19135-9e31-45b8-9640-4c4a43c5879e", "sighting_of_ref": "indicator--722a219d-404d-48e1-beff-591d5430abc2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4375164d-2101-47e5-9be5-9b6101ab7195", "sighting_of_ref": "indicator--fc539b77-db25-41d2-9395-2d2f276e453b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--960bce82-78ef-466f-8bfd-53ef9ac53da0", "sighting_of_ref": "indicator--07ea0433-d54f-45f9-8295-fc7f6fea7218", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ef93fb-f40a-43dc-a854-d243f0478871", "sighting_of_ref": "indicator--f60d0be0-9b00-48bd-84b3-ae65099ee29a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b8643a-9b13-481c-9738-2d0cb4f45453", "sighting_of_ref": "indicator--0ffaac3f-eaae-4fda-af28-09f4b0133eb8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--770d01ed-b48d-4a82-acce-fc52935b2c47", "sighting_of_ref": "indicator--2ba0b3d6-bdc0-4212-a5e9-3ce32e4fff43", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--297c3d17-e852-449c-baec-9bf3ccf9440d", "sighting_of_ref": "indicator--084c5032-b9c6-4d4f-87c8-210bb17d0e7f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94108640-cc87-4a77-bd4d-d16f0c95f35c", "sighting_of_ref": "indicator--ab0c3c5e-b42d-44ff-bc90-ca619f9228b0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5b3a41-35af-41cd-b5f4-d4c5e76e300c", "sighting_of_ref": "indicator--1f5e629a-4d93-4f25-8262-4320abc90699", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225fdd7d-f884-4d69-95af-c5dbe2e6f0f2", "sighting_of_ref": "indicator--d5ee123f-0096-4802-be9a-34a280e650c6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b44bb9ff-7fce-4ce6-b3a4-9747119afc56", "sighting_of_ref": "indicator--f411cd2f-3540-477a-9dcc-ea52a20a5990", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de87b8ab-41a0-4947-877a-72793ba1e8c1", "sighting_of_ref": "indicator--74406235-ff14-44f8-98e2-12e59ddb9e96", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ccf7d98-be7b-499e-9d07-925f4a3440ce", "sighting_of_ref": "indicator--f74444ab-865d-4200-b62e-49272ab1a459", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3812cd-b9fe-4dee-834a-6f497442eb64", "sighting_of_ref": "indicator--74d5e432-014c-446b-99ad-cc26c1477db8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4859d311-88cc-4891-b500-e4ea9d46a977", "sighting_of_ref": "indicator--fcdc8e94-b231-4ba7-994f-4e465d59745b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f1b214-c75d-42e6-a2f7-b035e1e39033", "sighting_of_ref": "indicator--33526d32-d13f-4230-8568-d74a5d01e783", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3b8923-3a41-47b0-9ca8-fda857cf5b07", "sighting_of_ref": "indicator--908b31ab-543c-4a2d-b69b-66fffd30a935", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b185c63-5354-4b02-83c1-c790c868166d", "sighting_of_ref": "indicator--54e2bc37-163a-45ba-a0fa-a7b8806d9cb1", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e85dcf-cba1-4585-9d0c-dd0241455dad", "sighting_of_ref": "indicator--2ab53992-86df-4411-a1ec-9da3973401cf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b14578c-c302-4bac-a07a-79081405af94", "sighting_of_ref": "indicator--f6daa12a-2bff-49c9-9ed8-498899b5e4fe", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12c11d2-f4d1-405b-ba8e-b339aa6072a1", "sighting_of_ref": "indicator--3d7a8ea1-b383-4862-8da6-5b11638114c2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa48a37d-93ac-4fc7-a2d2-e7244a43e550", "sighting_of_ref": "indicator--75af47ef-4edd-4918-98a9-84acdc48199d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f010857-67d1-4ca8-9665-a004b52d883b", "sighting_of_ref": "indicator--a3a13fbd-51e2-4311-90c1-50761ff3e6fb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a99d24e7-01e1-4500-b296-807f53457f9d", "sighting_of_ref": "indicator--8d2a0020-1bbe-4ce3-81f2-d48ee65e22d2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea901455-480b-46f4-9c42-c324670a4ea8", "sighting_of_ref": "indicator--6a16a25c-36e8-45f1-b2c0-6699b0140e29", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1056723b-0e19-4ff8-a903-850984252cd0", "sighting_of_ref": "indicator--7742fecc-0f76-4bdf-a252-02af6a8d94e7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aacf09f-d9dc-4139-8bd3-3749cc535de6", "sighting_of_ref": "indicator--960a4668-366b-407e-bb63-55039cc479e7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a12c69-3165-4f21-b690-540b44aa09a5", "sighting_of_ref": "indicator--9741d013-184d-43d0-b7fd-8c9665f9f695", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2484bfd5-1f41-42a3-ab89-c3d896370778", "sighting_of_ref": "indicator--1ca56749-cef4-4316-941a-25a6826def2f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a01897-fc4c-4188-90f7-8c1f201ca89e", "sighting_of_ref": "indicator--e4b39735-5d84-4aae-9256-310e3c55bdf7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c52bc6-f51c-457b-94e4-b30a30744bd9", "sighting_of_ref": "indicator--2a90cbe2-5cdf-48a1-944a-be3a995683ee", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141a308e-8880-4acb-a547-4518c8a6dd52", "sighting_of_ref": "indicator--8677d2ab-544c-4dee-a1bd-0e10f5f3ff57", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeefbecc-4d62-4f35-bec4-0bfb8add89a4", "sighting_of_ref": "indicator--d5e10781-a915-4c80-b981-805a68a04bb7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8b4862-ba5f-4713-bf10-1a4d8bdcd76c", "sighting_of_ref": "indicator--35c2c3b6-ece2-4b5b-b2af-4e4e8adf247c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b115566-cddd-4c57-8da7-bf17e53188f5", "sighting_of_ref": "indicator--d98c40b0-c586-4edd-b676-7e312248536f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c20e4d-8c56-4f26-853a-43ef8dac8939", "sighting_of_ref": "indicator--f4ae34b9-fb2b-410a-9a03-46319b971de9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--077b218f-f50d-47f6-b36d-0c77d20febd7", "sighting_of_ref": "indicator--3039acce-def5-4332-ab01-bc314bcbbbc6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336c12ef-6006-4cbe-8f74-e710e43f4d55", "sighting_of_ref": "indicator--81e23408-599e-4c0f-b6ab-4f07f4f460bd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ceddab5-518e-478a-bb48-f855182ccacb", "sighting_of_ref": "indicator--d12d944f-0b86-44f9-9d37-6acb6ab53d0d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e36fa6e0-9a43-4c2a-85d7-46ebc9442a60", "sighting_of_ref": "indicator--4fe4ab76-6383-46d4-96f3-5eee284d7f81", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9133ba5c-9fa4-4cd7-af11-43fd33dd3f68", "sighting_of_ref": "indicator--868455b7-4ac8-44f8-8c4f-c285bebe9783", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c55263-3b42-4f06-862f-b9d391acd7f9", "sighting_of_ref": "indicator--a71588c3-19d4-4477-ba8c-84e212928da9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9253bbb2-a905-48e2-a028-82b53c54f15e", "sighting_of_ref": "indicator--d47253e1-3f52-460b-99b9-719c5fa8ac9e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71257f90-2b96-4609-a883-05a0ddf3c7a3", "sighting_of_ref": "indicator--cf0fc82e-1e71-4b93-bba2-7d0ce05c9590", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ccaf325-3321-4f13-b58b-2884acc3c1df", "sighting_of_ref": "indicator--f46d0ce7-93b5-4c4f-879e-464b4584a125", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--016070b1-e762-4566-8723-85ef42f286ba", "sighting_of_ref": "indicator--c965b4db-2e2f-44bc-b451-b26bc3a214de", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c0ed95-b94f-4260-8276-ac9e12fe730e", "sighting_of_ref": "indicator--0f278fce-6351-4bcd-a463-04c4c2dae9c6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b510eb03-da57-469d-9791-b73079f20bcd", "sighting_of_ref": "indicator--713edfe0-53b4-48d6-93f0-d01a00d97f86", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4aecba6-f3d1-4f38-b71a-2507ae47b39f", "sighting_of_ref": "indicator--b6df843c-2e62-40bf-85da-0f80a3c4103e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93915c8f-fe6c-487d-a5b7-0e68e238299c", "sighting_of_ref": "indicator--7bec1cad-ef44-4dde-818b-d47aed6a8423", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c7e771-7344-4033-8e09-20206af5773b", "sighting_of_ref": "indicator--f1317487-40d9-47d8-97aa-4e485fd8011e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7599488f-d01d-46d3-9e3a-29be8a6af5c1", "sighting_of_ref": "indicator--1e62e2b7-cdf3-4865-8f77-1c0351d40162", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--779468e7-813a-4996-a671-116769cb9ef9", "sighting_of_ref": "indicator--f36d20d7-9bfe-4ae6-bb24-de02441a99dd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa59b06-7e15-4dc0-ba50-6723c3ab80a6", "sighting_of_ref": "indicator--153c5674-ffc7-4f19-80eb-c6c8aeec2ddd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d85c9d75-fd73-42a4-bdda-dfea10b0aa99", "sighting_of_ref": "indicator--5b85ea72-f8f4-4e0f-8ab4-8a10e8bb6d1d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc1ea7d-e9c4-407f-9806-abace5508400", "sighting_of_ref": "indicator--3817f2ff-8864-4473-9736-a63ec5f6c564", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--006b5b68-b6ff-4e00-a3db-d0147c848348", "sighting_of_ref": "indicator--7e5d02d6-6997-4ae3-89da-b21f75152744", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c7cde7b-d1a7-4923-a888-39b7cc6bbc50", "sighting_of_ref": "indicator--266dcb62-87d1-4973-8b91-8b20c01e2552", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c954312-3036-48c0-9512-b1768d71f3dc", "sighting_of_ref": "indicator--c0500af3-cd89-49b0-8ad8-a9a59205b3ed", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ebf981-d984-4d2b-8bc2-f978c5de440b", "sighting_of_ref": "indicator--1fb15f9a-0548-4569-b322-c240729c916f", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4b4ce9-ec6c-4f80-bd0b-5b71e84fb686", "sighting_of_ref": "indicator--6d7607b4-5a6f-48a9-ae3b-90a84c57a6a7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0275beb-bd95-4633-953d-75e72cd911f5", "sighting_of_ref": "indicator--40c0793b-4a73-4d89-9b0c-8162cedd2c99", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e708ffc-2486-4660-9a30-b4fdbee9de9b", "sighting_of_ref": "indicator--54da81a4-2fb2-4ca1-8af6-c64bbac36dc0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe40408-5d4e-4ad4-85f9-b034bf192695", "sighting_of_ref": "indicator--b1a811d3-afe8-4f40-a588-f816db627c5c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d72c20e-2edc-4f3c-b1ab-9cba2af3670e", "sighting_of_ref": "indicator--9c4be643-595c-4991-b1e0-d9814afd67c9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411e7906-bc84-43c6-bf24-6fcc3be12bd6", "sighting_of_ref": "indicator--6674827e-217a-4a21-8a73-9e5a3c571a1c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78fa547b-61f8-4d70-a382-4538ef5a5b74", "sighting_of_ref": "indicator--c20a6c61-0305-45d7-a087-c2b50007e860", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--640183e4-15fa-4865-9b02-1b0a2e063904", "sighting_of_ref": "indicator--0cfdf28e-25d1-4293-9697-9221c4cc7a54", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3d7d99-a8b6-4c78-8b03-65a3b182cf3c", "sighting_of_ref": "indicator--55095bad-bf6a-4c28-ab5f-00080b99e05b", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e389ebea-e8b6-4fb1-ab15-45a076c6ea33", "sighting_of_ref": "indicator--4a2b341b-466a-418a-97a5-13c992b858e4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a390561-4aef-4b5b-9b5e-2c0527b4c2c3", "sighting_of_ref": "indicator--3e9f6b96-6bbd-4797-bb85-40632de0184e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--355190f6-d5cc-4824-ad95-65f717d44089", "sighting_of_ref": "indicator--6829d90b-f723-4118-b136-81fda8d5114e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c29953f-9e12-4255-917e-caa189ab4b5e", "sighting_of_ref": "indicator--6829d90b-f723-4118-b136-81fda8d5114e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c38afc-e743-4069-8c0d-3ce5c8f71c09", "sighting_of_ref": "indicator--c59b9abb-e072-4438-9e85-058a63b6883c", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b64fd79e-63fc-4660-9804-c901c0540cfb", "sighting_of_ref": "indicator--e05ec267-8128-4874-b02e-7c244aa7e392", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--140cce9a-6df3-4a50-ad2a-bb7fbd2e11c5", "sighting_of_ref": "indicator--6f485416-59ec-4249-b42d-33ae6c8eba14", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba2c7f4-1272-48b1-a86f-3a23583f2faf", "sighting_of_ref": "indicator--e855d187-70f9-4bf9-876e-f2bb968242f3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e2db09-18b3-4a12-9f47-a540eb537c9d", "sighting_of_ref": "indicator--f9200f64-5e02-4047-8f09-d817202f24d4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd1bca2-098c-48d1-a7f8-be34cb8f836a", "sighting_of_ref": "indicator--f9360188-a488-4612-943e-b07d6896a634", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f009e8d6-79ff-4ba7-983f-ab2a24b55bb0", "sighting_of_ref": "indicator--357618cc-de5e-412c-9832-7e448ff7b1e5", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90204ee2-494e-48ee-9fde-58b406d29b09", "sighting_of_ref": "indicator--34fd378c-7eb0-4724-b935-3407033d9831", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b106264-050c-4b92-baa2-a8d87bd32270", "sighting_of_ref": "indicator--fc332b7e-0c25-418f-bf08-4f6446cdde17", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70bc6fc0-e917-46f5-9048-f8f65659d1fb", "sighting_of_ref": "indicator--698bbf0f-ac26-41b7-9152-0e300593af3d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9055d7df-473a-44df-b038-f04498cd54e7", "sighting_of_ref": "indicator--50934aea-b64f-4424-b724-03744a02f1c2", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bbc2cdb-d464-4b0e-a12b-bbd3f376ee58", "sighting_of_ref": "indicator--2466c15d-b79a-4bac-880e-80b44f487a43", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a66f76-5617-43b3-a452-873ccafddcac", "sighting_of_ref": "indicator--2466c15d-b79a-4bac-880e-80b44f487a43", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbea1c89-eea5-4bc5-be1b-c083912abcf9", "sighting_of_ref": "indicator--73c08eea-1c95-4c1d-a053-917cbd4e0766", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--509f38ca-7bb3-4b2e-abfb-1fae8fe82878", "sighting_of_ref": "indicator--fc9822a7-592e-4e6f-865f-0b8af1de8bf6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405b3c74-ca68-409d-92c3-3b79988917a9", "sighting_of_ref": "indicator--e51b7f4b-0f65-4f0f-979b-f528a89d347d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8554ac5a-7cc0-4441-99ca-46155350aebf", "sighting_of_ref": "indicator--82fa3f3d-f3f1-4aec-b0ac-358525a096ae", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b1efce-8d9c-49c4-a3c4-f06af92372ca", "sighting_of_ref": "indicator--cdda4044-b26c-4c42-bafd-15a64b4e8dc6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1373b771-6838-40cd-b447-a69351e6d612", "sighting_of_ref": "indicator--53bb9b86-a0ff-46cc-af65-b065a5f1a23a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4aa470f-e16e-49e2-b0fd-9a8d2fbf65f3", "sighting_of_ref": "indicator--c663090c-6853-4f20-8597-fbdff3195637", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e4b597c-49f4-4039-833b-bca081b0b900", "sighting_of_ref": "indicator--cecde680-37b0-498f-8a3f-33f4fe1445d2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f8cb2f-6ed5-4a33-a84d-c50b55338353", "sighting_of_ref": "indicator--ad466c2e-e675-4a33-8f12-b360205fb53e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e27035d2-d817-49bb-aee2-9ba7e3abb983", "sighting_of_ref": "indicator--ad466c2e-e675-4a33-8f12-b360205fb53e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5208254b-2535-48d7-b92e-282aa0c955c6", "sighting_of_ref": "indicator--ada25d40-ac8a-4e7d-801f-9c9c176f9bfd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247c3944-cc0d-43d4-be3f-f8ccc786d726", "sighting_of_ref": "indicator--906ac774-cb98-40e5-bcad-8d88a769ceb8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf9d2d48-7713-481e-8202-a2c826b5440d", "sighting_of_ref": "indicator--aac6ffb1-b691-46fa-8fc4-16c7e8cf2085", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82346ea8-798f-47bf-a7a3-27961953e371", "sighting_of_ref": "indicator--e81d9d7d-e194-4f78-a410-b9699d9dcefd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa532d2-3c4e-41e7-beab-c85fa727233e", "sighting_of_ref": "indicator--7d691f33-ba3a-4aa4-b1e1-f21128b2969d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a92fadd-f4e5-4507-a91d-2a1d1774137d", "sighting_of_ref": "indicator--db4b11b1-8879-41d3-bf44-44cb1b3b73c2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f41962-5ab2-458f-b9ef-3a51e654d104", "sighting_of_ref": "indicator--db4b11b1-8879-41d3-bf44-44cb1b3b73c2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba81053-9ab9-40db-a71a-68dbf9c72987", "sighting_of_ref": "indicator--a9fe59ae-fb53-46ae-b57b-f1415750d423", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f5a148-3fa2-4a78-8031-0751df48b8d5", "sighting_of_ref": "indicator--a9fe59ae-fb53-46ae-b57b-f1415750d423", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ff4a1be-b6ff-4377-b9b6-d514656ac732", "sighting_of_ref": "indicator--5615863a-03f2-4ef8-8fb4-8f900660b68f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dabf18d9-b2fe-4e6f-a1dd-9861a4913a6b", "sighting_of_ref": "indicator--b32d17ea-d685-47aa-a2fc-987cdb2ab2e1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b502a935-b082-4139-977d-31ef8842d197", "sighting_of_ref": "indicator--5d0e3268-fb64-4cad-87f3-37c58f57b40d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9813201c-3dbf-4e7d-8e1e-2648997f5812", "sighting_of_ref": "indicator--b2e3125f-32da-491d-bbd5-cda20f2e6c64", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--057b616d-3763-4087-a81b-284c1c50bcac", "sighting_of_ref": "indicator--927d79ca-eac2-46d2-ba3c-66b22e0dff45", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb89dab7-3cc9-48d4-b70b-8dfe9112eff0", "sighting_of_ref": "indicator--4dce5d6a-8bee-47be-add1-064e5348f0e2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ee709b-983a-4f5f-bf0d-8c37a1fe8713", "sighting_of_ref": "indicator--b1b73b76-4c60-4d29-9072-645e9ce380f0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4693b5f2-6c6e-4b56-8740-863ee0fb8f91", "sighting_of_ref": "indicator--320b1133-c23f-4317-a771-7f6a27b16d15", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda50f13-e61e-4006-b288-f7c4a07b112c", "sighting_of_ref": "indicator--7b7e086e-0075-4dc6-94cc-4c6a20517baf", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60512dbf-f55a-4d2a-b55f-70c6e0f9ed6b", "sighting_of_ref": "indicator--0077347a-2427-4bc8-97f2-bb6b3b70c8fa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4db1b8a-cfee-44e7-be3c-b62b11322942", "sighting_of_ref": "indicator--f1265d37-c13f-421e-a0e5-804c2a7bd5c0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1cf9a94-7583-4eb4-84f7-d3cefd60df8d", "sighting_of_ref": "indicator--248b7797-3aba-47e6-aeed-e1c2afc435f1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2cc100-f368-49a6-b3d4-7d04f7baf0ee", "sighting_of_ref": "indicator--248b7797-3aba-47e6-aeed-e1c2afc435f1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a4c536-c30a-4723-9474-e50a728c69ca", "sighting_of_ref": "indicator--248b7797-3aba-47e6-aeed-e1c2afc435f1", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a20a87-249e-4745-9545-1a5fde1748c2", "sighting_of_ref": "indicator--e27c9048-0f61-4fff-8a26-7f7f4270aa9f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830cfdde-8f37-4051-aaf1-347b28a26773", "sighting_of_ref": "indicator--c6b4a0f7-dbdf-47a6-baa5-5123d8cb5289", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e61682b-fb2b-4c5b-8331-06d7227af9da", "sighting_of_ref": "indicator--22ebe115-843a-4cf3-95b9-29c274993240", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ad769b-3674-4999-bd3b-9fe13c708bef", "sighting_of_ref": "indicator--20beaf4d-f313-4fde-a855-0d3fb65bacc6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9951034f-36d1-4320-8bdb-4538ff2228ed", "sighting_of_ref": "indicator--f20965b9-cf7f-42cb-97ea-444d2a50e3e8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0f0579-1243-42d0-af2f-27194a91c707", "sighting_of_ref": "indicator--41baf088-a4cd-4b60-9d07-8053a190a5f5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--101964c5-8a00-466d-9ab8-c669433698a4", "sighting_of_ref": "indicator--1e704080-0417-446c-941b-a38197779b95", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15cbb627-6585-407a-b0bb-fc6c18de3085", "sighting_of_ref": "indicator--1e704080-0417-446c-941b-a38197779b95", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f169c23a-2edb-40d4-865d-12afdf4dd301", "sighting_of_ref": "indicator--d6a3b447-e3f1-4386-b561-c95ef45d0c1e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05583ec7-50e3-4043-83b6-b1934d5cd26b", "sighting_of_ref": "indicator--d6a3b447-e3f1-4386-b561-c95ef45d0c1e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b435ba89-4a2c-4ce2-91a4-721677a9e1ba", "sighting_of_ref": "indicator--d6a3b447-e3f1-4386-b561-c95ef45d0c1e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92920a24-931a-4f3e-b3a9-95460179b821", "sighting_of_ref": "indicator--373d1c6f-3ccc-4dfe-a0fd-fb9e9f427344", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b1b3ab0-59f3-4ef6-8096-c0375c46a61d", "sighting_of_ref": "indicator--373d1c6f-3ccc-4dfe-a0fd-fb9e9f427344", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbfe53d-63b4-4b93-a675-c4fab2bc45a3", "sighting_of_ref": "indicator--834a967a-a427-44cf-9ae8-c229576a4be5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af68c542-7205-4e0d-94d4-a48a31036f60", "sighting_of_ref": "indicator--3c3e72c2-2e58-4316-8f92-945b2f997c3a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d6d406-1aa3-48b7-bf08-623df4a38c2b", "sighting_of_ref": "indicator--ea8b590a-e5f0-40ce-b70f-d5187595beb1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c59c4e7-78fb-49f5-a802-2122df82056c", "sighting_of_ref": "indicator--ea8b590a-e5f0-40ce-b70f-d5187595beb1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2374878-0f14-4210-98e6-445796f48970", "sighting_of_ref": "indicator--75b4c2eb-ac67-44aa-bbef-eccd28a6e8be", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a68671-635e-44ba-a29f-d020b59bbc53", "sighting_of_ref": "indicator--75b4c2eb-ac67-44aa-bbef-eccd28a6e8be", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16bc02f1-6486-4cf6-95a8-68fe68594069", "sighting_of_ref": "indicator--23907e7a-86d4-4b28-930d-3bba00b70f0f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de2ca5f6-6f7c-466a-86f9-dc4709daa3d9", "sighting_of_ref": "indicator--fcf5bb49-760f-441c-be43-648a601c929f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--057338b1-24f9-4181-9a2f-1d92cb38b20a", "sighting_of_ref": "indicator--fcf5bb49-760f-441c-be43-648a601c929f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f171841-033f-4013-a0f8-ba43d316af5f", "sighting_of_ref": "indicator--cb71fa6b-4cc6-4f57-bdcb-9272458dc136", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f824cbac-a126-47c4-a95c-07050d492ca6", "sighting_of_ref": "indicator--cb71fa6b-4cc6-4f57-bdcb-9272458dc136", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235f2a23-3e03-44ea-a85d-ee4527ceb2c5", "sighting_of_ref": "indicator--b52b7ad0-952c-47aa-a4f1-7f2c0cb58ad4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fab9a3f-5174-4b5f-8a3d-43b602aba685", "sighting_of_ref": "indicator--b52b7ad0-952c-47aa-a4f1-7f2c0cb58ad4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb13735-67df-4eb1-8b7b-2a9aedca6baf", "sighting_of_ref": "indicator--a0710e7e-33f5-4473-8ead-eedbccb916a0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2487ffc0-b1b6-4254-be75-fb6b484fd273", "sighting_of_ref": "indicator--bcf8f37a-74fb-4004-b767-6669da3cbdc6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c2a26f-e370-40bf-ba7b-566edf6df6d7", "sighting_of_ref": "indicator--711c29fe-6917-48ed-b4af-02a09a2f3b19", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--807389c0-8d41-45d5-916b-64f0899f9636", "sighting_of_ref": "indicator--711c29fe-6917-48ed-b4af-02a09a2f3b19", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91146a7c-39ed-4587-807c-4f70a1f1c611", "sighting_of_ref": "indicator--711c29fe-6917-48ed-b4af-02a09a2f3b19", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e5ae56-33d4-4df6-8722-5e0402dd8163", "sighting_of_ref": "indicator--ecaabe8e-d76a-458e-9dc5-d2a5931c44c6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b53137ba-30a0-4d53-ac11-03e9d3d8f0fc", "sighting_of_ref": "indicator--ecaabe8e-d76a-458e-9dc5-d2a5931c44c6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7850b559-7ad1-4e90-a529-cb33dd52b8c8", "sighting_of_ref": "indicator--ecaabe8e-d76a-458e-9dc5-d2a5931c44c6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8ef388-4836-47f7-97f5-17ba5f642911", "sighting_of_ref": "indicator--0f45caad-8cb0-438c-99fc-a10d5ead37d4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfbc859b-a37d-4dad-b5c1-5cec9bdf7386", "sighting_of_ref": "indicator--cbc85406-91a1-457b-ba13-c6296fe15343", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49cb5f4b-9350-47a9-95f3-b3b7c4bad6e0", "sighting_of_ref": "indicator--cbc85406-91a1-457b-ba13-c6296fe15343", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd1aeb8-b6ce-4e1e-a8e2-ed48ae6e7e41", "sighting_of_ref": "indicator--8f4e0123-bf24-43a9-97e1-aa564d7dabe1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a129f8d-5b7d-4304-ad10-72c342fe73df", "sighting_of_ref": "indicator--b2752cf1-86d6-4d9c-bac1-b82e8e4945a4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--423897c7-6f36-407e-83aa-6696d387fd7f", "sighting_of_ref": "indicator--b2752cf1-86d6-4d9c-bac1-b82e8e4945a4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0639be7-c3be-445d-97eb-0ece605463f1", "sighting_of_ref": "indicator--35ee6147-a138-4a9d-b1f0-f929276a8813", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bcbc682-da33-404a-aded-f93961c04456", "sighting_of_ref": "indicator--35ee6147-a138-4a9d-b1f0-f929276a8813", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c798dd-28b2-494f-aee1-ef138c1845ac", "sighting_of_ref": "indicator--56a236d7-10c0-456d-a5ec-25ef409f8096", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261ba07b-2d36-4210-b5ea-80c799d404f7", "sighting_of_ref": "indicator--56a236d7-10c0-456d-a5ec-25ef409f8096", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1ae591-d7eb-40fa-b2c6-43d972795f69", "sighting_of_ref": "indicator--5c39522b-3cfc-4b8f-9afe-6615e5111dcf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7736e7ae-76db-4517-9084-eeff15e575b9", "sighting_of_ref": "indicator--70fba2e8-d0de-4b0f-bd83-4c15b8ed8f4d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1056915b-872b-4df1-9a4e-8706034c57d5", "sighting_of_ref": "indicator--865a1933-73cc-47d1-a4ee-6b769a91b5ad", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c3fc5d-fc8a-4f0a-aa7c-9c3069662488", "sighting_of_ref": "indicator--8a10d3ba-d274-4f61-a45b-3a478eed4449", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0641c03-929c-4770-86b0-7f39d7adcba4", "sighting_of_ref": "indicator--8a10d3ba-d274-4f61-a45b-3a478eed4449", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01bd628-e6df-4a02-a283-431a5d484b41", "sighting_of_ref": "indicator--8a10d3ba-d274-4f61-a45b-3a478eed4449", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd9c7a4a-6dc6-4182-a6a9-1347ec1916da", "sighting_of_ref": "indicator--d7914c98-cd39-49cb-9007-e59aebe61c17", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ead274-bd2a-4e6a-950e-fc0e515ba697", "sighting_of_ref": "indicator--d7914c98-cd39-49cb-9007-e59aebe61c17", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f515703-dd8e-4e16-ad47-158a26735345", "sighting_of_ref": "indicator--d7914c98-cd39-49cb-9007-e59aebe61c17", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49de47b-a544-47a8-8272-40070d26d1f7", "sighting_of_ref": "indicator--42b993e3-be06-4960-addf-4e770892fe8e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db9bd1cb-1383-4d42-a051-8d3ed5bde600", "sighting_of_ref": "indicator--acaf1f4d-e002-437d-b9b8-d898cfb826d7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0594151a-0970-4858-b9d6-179aa73c5bc2", "sighting_of_ref": "indicator--5e2f9a8e-0a6d-4e69-aa8a-31a2b572daa1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45271ae-ac85-4800-a7ac-c018306274a4", "sighting_of_ref": "indicator--5e2f9a8e-0a6d-4e69-aa8a-31a2b572daa1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--969ca7dc-fe4d-4593-9d90-04a82ebdd57f", "sighting_of_ref": "indicator--8d0e65f6-8d78-4317-944c-fc22284d7e17", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832b1133-3c3d-408e-84dc-985effc61005", "sighting_of_ref": "indicator--8d0e65f6-8d78-4317-944c-fc22284d7e17", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67aec3f1-e552-412c-bb92-ac490b206280", "sighting_of_ref": "indicator--df9e0a5a-4e19-4c53-8479-bf858109b49f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688c6efe-f65b-494f-b997-84aff986fea4", "sighting_of_ref": "indicator--2d692980-13ff-499d-9458-60bba2734489", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da694f40-65a7-477a-9992-9b11e991f407", "sighting_of_ref": "indicator--2d692980-13ff-499d-9458-60bba2734489", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a9b3d7-bac5-4bd2-96d8-a6a1a01a428f", "sighting_of_ref": "indicator--2d692980-13ff-499d-9458-60bba2734489", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--743744a6-713d-416f-bb22-eb8576f661d1", "sighting_of_ref": "indicator--5dbf7657-cc4e-4de2-b5a0-384a07bd3306", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c280de57-69d4-4edf-b6c2-b552ce8c7562", "sighting_of_ref": "indicator--5dbf7657-cc4e-4de2-b5a0-384a07bd3306", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609a0cdd-04c4-4cba-a010-0cc7836095d1", "sighting_of_ref": "indicator--5dbf7657-cc4e-4de2-b5a0-384a07bd3306", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c242038a-fcf2-42c0-b00a-7e66359fd54e", "sighting_of_ref": "indicator--2e1e1159-2d8f-49b9-9b5f-ca3a5cc1d3ec", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7417910d-5615-4215-8111-03fea8d3d1db", "sighting_of_ref": "indicator--dde5f687-99a8-46ca-9239-9c68f69997a3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5b8275-f78f-43e6-a31e-49dfb7625923", "sighting_of_ref": "indicator--dde5f687-99a8-46ca-9239-9c68f69997a3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142fc0b7-7b50-4af5-9118-e43b1d7d5fe3", "sighting_of_ref": "indicator--3779431c-9091-469b-86f6-503709082188", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3a7787-16d1-42c4-87c1-205a49bc5499", "sighting_of_ref": "indicator--3779431c-9091-469b-86f6-503709082188", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a9ad671-1e79-4e7b-a15e-be889a66a13d", "sighting_of_ref": "indicator--780b8e2e-92b9-48f2-81bf-8b3e1c5c4f28", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c875d6-745b-4b57-af3c-c69338136ae9", "sighting_of_ref": "indicator--9ab9c9a9-79e5-41d2-8d39-92962ec261d4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b902905-1115-4e69-aa8b-01fd6208184e", "sighting_of_ref": "indicator--a05d633e-3efb-4a32-91c6-4c88f33af472", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a8fedd-7274-4793-9ef8-a41db252a9a1", "sighting_of_ref": "indicator--a05d633e-3efb-4a32-91c6-4c88f33af472", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0597a5-8dbb-4f2d-b42c-66c70c407342", "sighting_of_ref": "indicator--a05d633e-3efb-4a32-91c6-4c88f33af472", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e72a20-2e9f-4b24-aa5b-03d94c69829a", "sighting_of_ref": "indicator--a25cf364-69c0-43d3-924c-16b5600d9a96", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46d6fdf-4b14-4c97-bed6-32796e8abc52", "sighting_of_ref": "indicator--a25cf364-69c0-43d3-924c-16b5600d9a96", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7a89ce-3ac8-4fbf-b50d-8fc0c290a40a", "sighting_of_ref": "indicator--a25cf364-69c0-43d3-924c-16b5600d9a96", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c3f22d-0d22-49b0-af34-194531eb7284", "sighting_of_ref": "indicator--5a4880d9-9914-4ac6-829c-64b0f1328989", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed46487e-efd3-43b2-b8d0-1eb9131b8009", "sighting_of_ref": "indicator--5a4880d9-9914-4ac6-829c-64b0f1328989", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c1ce90-72ce-43dd-b9c3-1774f5f16e52", "sighting_of_ref": "indicator--5a4880d9-9914-4ac6-829c-64b0f1328989", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f67e8fd-d94d-4f03-ab7f-a5526fcb5937", "sighting_of_ref": "indicator--4ed660bc-3104-4fb4-84b5-76989669d304", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d8a006-7aa3-4623-9caa-bb6361f37784", "sighting_of_ref": "indicator--4ed660bc-3104-4fb4-84b5-76989669d304", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4848e72b-ed03-44fc-b463-f763e2bc67f2", "sighting_of_ref": "indicator--4ed660bc-3104-4fb4-84b5-76989669d304", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e380ae76-fcf3-480d-a361-8a526376f3e6", "sighting_of_ref": "indicator--99a5e456-5dab-4a53-a08a-df04a5dd3d50", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0279ce17-f11d-479f-936b-ed4dd317cf7b", "sighting_of_ref": "indicator--99a5e456-5dab-4a53-a08a-df04a5dd3d50", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71062191-bf01-4358-aa60-029c9a5015bf", "sighting_of_ref": "indicator--99a5e456-5dab-4a53-a08a-df04a5dd3d50", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c2bf7c8-9ba1-4685-ba5f-5a10a4b1463b", "sighting_of_ref": "indicator--63b0a079-9c34-454a-a88d-8fc7eca4f8c5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cefa39c-185e-427c-8182-6d52adea4ae2", "sighting_of_ref": "indicator--63b0a079-9c34-454a-a88d-8fc7eca4f8c5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--287aa5bd-af41-47ec-b66b-91d402ee9e64", "sighting_of_ref": "indicator--63b0a079-9c34-454a-a88d-8fc7eca4f8c5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a1fb497-2abb-457a-ae6c-ab1e682e9ed0", "sighting_of_ref": "indicator--3114ec4e-9b00-4405-b7a6-0ddaf7620b3a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3eec0f-cb7a-4ed2-9d99-25fc3e35f59b", "sighting_of_ref": "indicator--3114ec4e-9b00-4405-b7a6-0ddaf7620b3a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab8a239-03e7-473e-adb0-fde01b4527df", "sighting_of_ref": "indicator--3114ec4e-9b00-4405-b7a6-0ddaf7620b3a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524c94f1-d0db-496f-b4ff-74fe31a167d2", "sighting_of_ref": "indicator--4bcd0e27-bfa8-4e34-878c-7967d2e49218", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b73bc4-3168-42d2-9e29-38fe7f34147a", "sighting_of_ref": "indicator--fd2f0fd6-b700-4787-aac7-747c1a9b107f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a9955b-4889-4851-a9bd-55b01aa3623b", "sighting_of_ref": "indicator--68d97833-9e72-4d91-9817-6168371f1ec3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d488201-b304-478e-9816-f469b7d98650", "sighting_of_ref": "indicator--68d97833-9e72-4d91-9817-6168371f1ec3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4afb0a1d-223e-40fd-9c27-25cda3bcc0fd", "sighting_of_ref": "indicator--68d97833-9e72-4d91-9817-6168371f1ec3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0caf6dec-a757-4c6e-a010-c67da1a6fb81", "sighting_of_ref": "indicator--8f8da917-64b0-46bb-82c0-49be270aff42", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a16d1e4-eb15-4ced-bdd3-c6f533ef5da5", "sighting_of_ref": "indicator--90fd4db4-bdd7-492e-9bcf-52ff5f57b89c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6469f7-967d-4d72-99bc-48ac9f702d6e", "sighting_of_ref": "indicator--91e0ce32-3849-493e-a2b8-cc60670fe92d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05fda1f-632a-418f-b98c-50648f6d950b", "sighting_of_ref": "indicator--80082eb4-7576-4981-b6c5-94a5d67e0adb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1007dd4-e574-4c04-9d70-958d034a8651", "sighting_of_ref": "indicator--b5527098-ee0f-4c6a-ac43-91daafe8b838", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d0cd6d-3c18-48b4-92db-ae054af9fc3f", "sighting_of_ref": "indicator--b5527098-ee0f-4c6a-ac43-91daafe8b838", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127fc449-ba21-4374-b6a0-c1e8c49476b8", "sighting_of_ref": "indicator--a08e409f-35ff-4c6d-93af-9092b655ee3b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e7a927-4107-4eea-a133-46fb704a1d71", "sighting_of_ref": "indicator--a08e409f-35ff-4c6d-93af-9092b655ee3b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e158bc56-dcae-4aff-ac14-a2d5008c688d", "sighting_of_ref": "indicator--a08e409f-35ff-4c6d-93af-9092b655ee3b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed65783a-163b-4a41-949a-59f34fcbc5b2", "sighting_of_ref": "indicator--16f0270c-172f-42a1-9e5d-983b06ceb7d1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93fafc11-92df-45ba-a82a-50f554dafdd5", "sighting_of_ref": "indicator--1191388e-0b3e-4243-a8d5-90b9ee82f219", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc900bce-e70d-4137-b664-6e2721251563", "sighting_of_ref": "indicator--4eeb4718-e830-4604-959c-0c40ce1a7032", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb1171b9-941b-43cc-a007-2758212355a7", "sighting_of_ref": "indicator--09acbfa6-0ae8-483d-93f1-70abe98f763f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9155b2e2-44f5-4495-b82f-b62c449b8bd5", "sighting_of_ref": "indicator--6d030435-cfff-45b1-8f5e-ce1e27bfc0d8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6c3e93-6f5d-45bb-bca9-231636b25e4d", "sighting_of_ref": "indicator--64f2042d-7364-445d-8db7-2d8bd3b12a83", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--176c1892-8697-4112-bcb3-e497e040b3c8", "sighting_of_ref": "indicator--eab58c1e-0e42-4c7f-aafb-1ba768eaa85d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--179db03a-d9fb-4742-ba9c-83c29c4e4d7e", "sighting_of_ref": "indicator--4fb66674-a16d-4cd3-a68d-035583f41420", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6864a3-b7f6-43b8-b1e9-8323e2b25c3d", "sighting_of_ref": "indicator--5f36cd0c-5494-4c1e-a685-a347e4aa0a09", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0493102-fceb-41f0-8daa-ea39e0275801", "sighting_of_ref": "indicator--e608597d-217d-440b-957f-934fe25d8aee", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73daf874-f20e-48c0-b57a-309850f10e90", "sighting_of_ref": "indicator--0d8bc563-def2-4569-b63b-0b51985f984c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b71b7f1-936b-4c52-a598-28904248fc58", "sighting_of_ref": "indicator--a794085d-bda8-4b13-9dc0-8908816317e2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83bfc1af-1a86-4b1c-8046-cc8df38c36c6", "sighting_of_ref": "indicator--a794085d-bda8-4b13-9dc0-8908816317e2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9aa2b5-4e5b-41c2-a4a7-9c9a8fb44e39", "sighting_of_ref": "indicator--a794085d-bda8-4b13-9dc0-8908816317e2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--352436ec-1a21-4204-9d73-a0831879c19f", "sighting_of_ref": "indicator--b07d1180-96a4-41ae-bb58-055f3113b584", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--324f8611-efca-416f-a3d1-0528f0c0b1c5", "sighting_of_ref": "indicator--b07d1180-96a4-41ae-bb58-055f3113b584", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef43493e-af18-4180-827a-73efe2e236c4", "sighting_of_ref": "indicator--b07d1180-96a4-41ae-bb58-055f3113b584", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c96e7f1c-efbd-4ab8-95b0-820822bf8539", "sighting_of_ref": "indicator--fbbcc973-2057-4834-84cc-6d163192e983", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3000d4fd-5002-4614-a479-8aa3f3c7ed34", "sighting_of_ref": "indicator--fbbcc973-2057-4834-84cc-6d163192e983", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb03f646-7f5b-455a-b2e0-59061ecf0e94", "sighting_of_ref": "indicator--fbbcc973-2057-4834-84cc-6d163192e983", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8741c6-1c0c-4394-9284-7e36addb96f8", "sighting_of_ref": "indicator--8e7d69a1-2b75-4697-a272-edeb6f67afd8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b473d21a-4369-4861-8e5f-e173eea2c2bd", "sighting_of_ref": "indicator--8e7d69a1-2b75-4697-a272-edeb6f67afd8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64691df-6bc2-45c2-be31-adbd1ba5410d", "sighting_of_ref": "indicator--8e7d69a1-2b75-4697-a272-edeb6f67afd8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6d8f4f-9b6e-4ff6-bdd5-1592b6221a9c", "sighting_of_ref": "indicator--e77c589f-98db-4e51-a2fc-b0fa87cb73a4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40686b3c-7c47-430c-baab-7a126d4cbbae", "sighting_of_ref": "indicator--0766a6a4-f9d6-4bc1-9a8f-3fdafbd039f3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b84399e-4393-4341-ba45-b170a2f40df9", "sighting_of_ref": "indicator--ad321873-5f1e-4c8e-8735-6e64d9623208", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a09552b5-5e63-49f7-ad78-4f98bd65b304", "sighting_of_ref": "indicator--2f6d66d9-e337-4e0d-b3f5-404be6f352bd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69dc5cee-b2d0-46a0-9103-ed8bac1b596a", "sighting_of_ref": "indicator--3a043b72-21bc-417f-8552-907f7fc80511", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--101757fa-2dd1-4b7d-904f-7f32f8eb2b26", "sighting_of_ref": "indicator--3a043b72-21bc-417f-8552-907f7fc80511", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11bf4fd9-eef0-4bee-97f7-da8f5b990f01", "sighting_of_ref": "indicator--c59a3f35-35fb-4b04-8adf-f0b005ea6fe3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d30bf3-d206-4fef-9b3b-5736825a6f9e", "sighting_of_ref": "indicator--6209d987-51b7-4c01-9f87-c0fcfa7e5266", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d8e52f3-5e92-4f51-a25a-135cf8ff2bef", "sighting_of_ref": "indicator--f49e8a77-ed70-4000-bd75-5dc7aed60b2a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27b9d1d-89e2-4e0b-a373-e66c8d68e25a", "sighting_of_ref": "indicator--1b720eaf-64cd-4a17-93f6-c5bf9778e976", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7141491-e565-4dc9-8688-94ca0734083f", "sighting_of_ref": "indicator--40192b65-b8f6-4987-8a83-1f738bf4bb1e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e5165bb-b28a-4dcb-a256-35da97c6299d", "sighting_of_ref": "indicator--d519a617-fe7a-4f63-aa8b-e9a89fbc8fa1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--536f5c5b-f06a-4de7-b4ae-acad86c3ebfa", "sighting_of_ref": "indicator--20afbdc0-907f-4380-8438-15a4330376ba", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60170648-6222-4380-9c27-dc25f8d112ac", "sighting_of_ref": "indicator--0e84693b-da37-491e-b4b2-ea6e8e0e1b1c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa11099-3d5a-4a62-a0f4-48bcabac6b30", "sighting_of_ref": "indicator--96653f90-32d7-473f-b0cb-07276a0826a9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70153c4a-b33f-41da-b297-3867dc040068", "sighting_of_ref": "indicator--e59868e5-8d61-4679-8e3b-2f1ec444ef1b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a25d4ee-98a2-4f06-8333-8064d79e30ea", "sighting_of_ref": "indicator--ca3c5655-6083-4bc8-8761-4a78c534a4de", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a74abe7e-08f9-4c96-8b60-ead06cdde460", "sighting_of_ref": "indicator--9cc52cd4-c61f-498a-bc0e-4087d1d7cc9f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9daa2a-0439-411e-bf23-9cd2191dfc67", "sighting_of_ref": "indicator--72d56b3d-aa0d-49ef-aefc-b68fc4d8c82c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f45051b-33bb-41d2-a86f-9db831896b78", "sighting_of_ref": "indicator--d486dc6f-7572-481d-a01f-d4afccbe90d7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c889a0e9-4cf1-4c4c-9cd2-85d332fe195f", "sighting_of_ref": "indicator--103fa9e3-cda3-4122-8338-7b60b4f556bf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe63ae20-4985-4dca-acc2-6faa88d17231", "sighting_of_ref": "indicator--ab2e6a5f-b489-4e74-8904-f7e29d44c838", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d81407-5672-4e32-8d47-110b1c38e64f", "sighting_of_ref": "indicator--7c95d1b1-67d1-4820-9073-3382734716b1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93032b91-552f-41c3-a20f-b42f62c74f0d", "sighting_of_ref": "indicator--fa32db3f-4e21-452c-a1ed-beb1e2c5b280", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65f7d959-e651-4377-bfcf-61bd564a778b", "sighting_of_ref": "indicator--00dad5a9-bbca-40d1-95c7-fc315c5910b7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e44024f-9194-48b7-a2be-f9734d33838e", "sighting_of_ref": "indicator--f60d31d3-1a93-42b1-a829-85dea0472cd6", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff6e202-8929-4b1b-a416-bb0e4f0068c1", "sighting_of_ref": "indicator--fe69a808-ba4e-4049-aab2-07d591ba2dfd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d35eddf-7a63-465b-ad00-6398a549c747", "sighting_of_ref": "indicator--78fa9e94-0501-49dd-8203-28788b5187df", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a9b6da0-fabb-45db-9ce8-a32b8fadad81", "sighting_of_ref": "indicator--0020eb97-b6eb-4f30-bf7b-0dc1a9e6ca05", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e7d5c8-3736-43f0-9036-57a85d2aa62a", "sighting_of_ref": "indicator--a1ff0e72-eda2-49f8-9218-b44b1c4fe134", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de3d518-7375-4f86-96a0-29872aee9215", "sighting_of_ref": "indicator--a1ff0e72-eda2-49f8-9218-b44b1c4fe134", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641e2c9b-8bab-4402-ab92-51a21d75b9b7", "sighting_of_ref": "indicator--9c61a77b-905e-495c-ab1f-e52da93e6bfb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d9338d-bde5-44a4-8902-344dffb13c87", "sighting_of_ref": "indicator--b082d014-1884-4a90-b27e-2bfce6203a32", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498872d5-886a-4c6d-9d51-b0b06cd41f93", "sighting_of_ref": "indicator--fd0c9e0b-388c-41cc-b9d8-0106142538ff", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae1e0fa-02c0-4fb1-8e59-d469547cc868", "sighting_of_ref": "indicator--c6a9df53-994e-4e58-be07-bcd1a6fa493e", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ec562d-0c99-45f5-9638-ed74521b4482", "sighting_of_ref": "indicator--a11a18ae-bb92-4b27-94a5-5a01baf73dc7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a03abca8-06fc-4f23-bbfd-8fac41c6db03", "sighting_of_ref": "indicator--cee49e23-4e2e-4347-b291-c611439a9a87", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c54eece-0fae-4823-8302-c78f43db4060", "sighting_of_ref": "indicator--06b6deaa-a980-4d99-ac1b-6ef9d2b167d0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23dfdcd2-66e7-4fae-8aca-dfb2794c5cdf", "sighting_of_ref": "indicator--30dc8c86-83f6-4a6a-b753-365e52964501", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03fdf11b-d7ca-4a9f-9535-64eef1e1a4d6", "sighting_of_ref": "indicator--839c428a-9bfe-424e-b27c-f56b146ae9d2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f30fe28-2120-41c7-8f7c-5aa7b3c24a52", "sighting_of_ref": "indicator--a44e7c14-c099-45fe-badf-b37ac9e9972b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4bb8623-610b-4770-a74e-d05008264974", "sighting_of_ref": "indicator--bd0122dd-9046-47f9-abe8-33e23577f779", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68af51fe-d46e-4da3-98b3-6d76da29c216", "sighting_of_ref": "indicator--e5ce0ee0-f3b4-47eb-8a5b-a84c22e800be", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4ea97c-95ba-499b-8088-2cb936b87cd4", "sighting_of_ref": "indicator--edf67daa-996e-4433-a74e-88e0e774009f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee0a145b-055f-4aaa-bcbe-886dddcab935", "sighting_of_ref": "indicator--af1e89a7-da5d-427e-962b-7f7c3b4dbad3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0205c574-eea9-4db0-bce7-272d55fc0926", "sighting_of_ref": "indicator--beb8b556-d091-40a2-a3f0-3d5968ef47fd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--595a7120-3468-4236-bfb6-e16fa2b8eb97", "sighting_of_ref": "indicator--04fbad5c-f170-484b-bf27-31ebed671b3a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a27b110-62dc-42dc-b94c-4423a0edeecd", "sighting_of_ref": "indicator--04fbad5c-f170-484b-bf27-31ebed671b3a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df595608-b3eb-416a-a866-ef344081e044", "sighting_of_ref": "indicator--9f5b7421-297e-42ff-ae56-7a9989461623", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a643a5c1-c293-49f3-bc1b-628d79f6aedc", "sighting_of_ref": "indicator--2202d6c5-1e40-411c-af03-48cf9bec37c8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4bc424-cf3d-45f1-bb0a-a251b1d7e2c9", "sighting_of_ref": "indicator--17200fad-ce59-49f6-b4d0-42327eb4f58e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c10d44-6977-4fb5-85d4-6ed21844db05", "sighting_of_ref": "indicator--ff407d70-df1b-4fd3-8fed-1daf47a4c80e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11a4a81-ccf9-4575-a577-009767c743d5", "sighting_of_ref": "indicator--a06eec87-023e-46b3-b28a-2323661176f6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d5f47e-2d28-40f7-9a8d-6353c6890c95", "sighting_of_ref": "indicator--eaa2a66c-169e-4e07-b441-097f2bba838f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00cbb8cd-c4e4-447a-aa4f-b859deb7dd02", "sighting_of_ref": "indicator--bd453179-ebbf-4b4b-91b7-6054c23a1224", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f6d160-1bcd-4e2d-9d53-6d2a3269a7c8", "sighting_of_ref": "indicator--fdccc113-5ed6-4105-8a32-dccfb4b3f248", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8f2534-c6bd-465d-a1e4-077a62460842", "sighting_of_ref": "indicator--d6ed60a4-e670-4b7c-bf80-fbe4fb4fa120", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7dc153c-50f0-48ca-bfa9-df10a3d66851", "sighting_of_ref": "indicator--c9f23502-7c26-4583-9caa-4d9f5a2cad0f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96aed0ff-0cdb-4e6d-8380-e78963bd2669", "sighting_of_ref": "indicator--cb59c73e-ff4b-4e8d-9d6a-576ac0c9892d", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03b671f-b5c8-4959-890c-c3b826020448", "sighting_of_ref": "indicator--b266190b-c5cc-4062-a084-9ffb2254a0d7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1622e755-59d5-42a6-8457-a754a22cdf16", "sighting_of_ref": "indicator--4aede7cb-0f1c-4939-9a30-47d096f4fbb4", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a720d3aa-bb80-4842-bf9b-ad45d31ac0da", "sighting_of_ref": "indicator--bcf49a16-369c-4dfa-9a94-aa69f914410a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca30c1f3-a411-49c5-a29e-78d1a229a3b2", "sighting_of_ref": "indicator--862fd9b1-0f08-48d1-b654-d4ad13306e7a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49399ad6-a007-4bbd-b207-bafc0f4466d0", "sighting_of_ref": "indicator--5d6a08b0-a3d1-438d-818c-aba5ed4dc535", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c76b6531-255c-49f5-9451-b4ac69effbca", "sighting_of_ref": "indicator--a022aadf-0f1b-489d-9432-2cb73aedf9af", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018e2cb8-670e-4675-be3c-55425c4271c2", "sighting_of_ref": "indicator--99a82b03-f373-49f2-af4d-e1ca50520fe6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218b8da5-ec5c-4f07-9a8e-6f5e20608cba", "sighting_of_ref": "indicator--805355cf-9178-4dd0-9d78-8954a44c8674", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f0067ad-a3b8-4827-8b98-1b77cc4ae366", "sighting_of_ref": "indicator--75479223-3ca8-4483-8873-8b805656f997", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a8eebf-ec8e-490e-b013-900506e1cd53", "sighting_of_ref": "indicator--f32dd085-9277-4437-97f0-214b5dcfdf84", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b98e900-a302-45ae-b8bc-de654709ce0e", "sighting_of_ref": "indicator--aad96954-b7fb-4e8c-a2c5-7bde76016957", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f765ff-7db3-49a5-b258-075887182d18", "sighting_of_ref": "indicator--01537321-4e12-47d3-af91-cba533d80517", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a5d88d-4718-49f9-ace0-62997d2726c6", "sighting_of_ref": "indicator--bdd0d628-0e36-4994-a096-96c5fcacc7aa", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c38391-d936-4bec-92cb-2752ee566c2f", "sighting_of_ref": "indicator--2a05b0ae-18c9-47f8-98f3-5d32fd4e0846", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaec43c7-968a-4b64-981f-631794dd6257", "sighting_of_ref": "indicator--c22e5138-1e14-4a66-b202-092171c885fe", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91dbfdff-c6e3-4992-8cd3-9390ef3bd7bf", "sighting_of_ref": "indicator--5602e114-ecb9-45a7-a1d2-820ae7338aec", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5696b0-6b71-4527-8739-9bf9820c736f", "sighting_of_ref": "indicator--f57bbf94-1f6a-4ca6-955f-d8caeaf101ee", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37566e65-85e2-4ff4-ab24-c711e8e37ae4", "sighting_of_ref": "indicator--2f30f90c-0166-470a-bbaf-5e5eaa45b5d8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffac0fc1-44d1-4003-8d9f-45c268b13e13", "sighting_of_ref": "indicator--eb58b73d-a687-499e-a0e9-a97895934f86", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c2e8b70-e17f-480a-98f3-ff8420605b52", "sighting_of_ref": "indicator--6f9fb9ac-efe9-44e3-ba05-40be989722da", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4245ee9a-e64d-463a-b536-fe3ac3354564", "sighting_of_ref": "indicator--a23ab418-aeb0-463b-9fc3-93f100e017ff", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7efeee8d-4cf0-4e74-b338-591531fa052b", "sighting_of_ref": "indicator--862a69c0-db4c-4b41-bfa2-0b6fa76bb53d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2fd242-60aa-4fc0-ab30-4c4035f49243", "sighting_of_ref": "indicator--4de7b2eb-fbbd-471d-9cda-4c7997587d77", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d9fa8e-c5ae-4d69-8cb1-6634bb801fb3", "sighting_of_ref": "indicator--01306337-3b70-4bfe-afd8-f176238a6b61", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b26aeb-f437-4ea1-a25f-e8bc23b3b470", "sighting_of_ref": "indicator--c4ccc427-22ee-4407-9feb-dcaa476d46eb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5094b16-0b79-48bf-b028-311e69e2448a", "sighting_of_ref": "indicator--56d24fbf-1387-422d-b813-619f17129608", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072578f5-228b-42d3-ba43-bbeec318ebc7", "sighting_of_ref": "indicator--25f73ad3-f886-491a-8b86-d25b26cb8f23", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b77d59f-5588-4540-89a3-3c4ccaacc899", "sighting_of_ref": "indicator--ad03912c-4e84-4829-be5e-72c03ddcef84", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b60d105-ce2c-44ba-be16-d567b1e05ece", "sighting_of_ref": "indicator--ad03912c-4e84-4829-be5e-72c03ddcef84", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--430e9a8c-dfce-4f0c-a4da-b015cb3239be", "sighting_of_ref": "indicator--ad03912c-4e84-4829-be5e-72c03ddcef84", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--510f07ee-5735-4281-ae63-366a12766488", "sighting_of_ref": "indicator--f69b9d3f-c887-4477-901c-760410f3a20c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b368f7-4e8a-4947-a1fb-b9e9b9688d5f", "sighting_of_ref": "indicator--31c50a6e-b560-4bd5-9e50-b9866b301d89", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--900203e0-f66d-405a-8d3c-3dec8cd9595c", "sighting_of_ref": "indicator--5bbc45d7-c975-49d7-8ab2-10e6d9fe4842", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a588db82-ab1e-4392-8435-89f83da5fdf3", "sighting_of_ref": "indicator--5bbc45d7-c975-49d7-8ab2-10e6d9fe4842", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac0c03b9-3bb9-4c2a-a9b1-c41ed72be152", "sighting_of_ref": "indicator--5bbc45d7-c975-49d7-8ab2-10e6d9fe4842", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7df0c0-204a-4e06-95d8-32e18d2e06b8", "sighting_of_ref": "indicator--b10c9298-352b-441c-8134-54aab841dcbd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6ac473-eb30-4b3a-978b-5bb1bd5c5918", "sighting_of_ref": "indicator--b10c9298-352b-441c-8134-54aab841dcbd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4b9564-3888-4c64-abdf-0661d14f880d", "sighting_of_ref": "indicator--51beafc6-89fd-43b0-9295-9872d8f5c6f9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e10782-5769-4d58-9529-a15af2706912", "sighting_of_ref": "indicator--51beafc6-89fd-43b0-9295-9872d8f5c6f9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96940a0-842f-44ec-b956-c0ee66952d61", "sighting_of_ref": "indicator--51beafc6-89fd-43b0-9295-9872d8f5c6f9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7702302a-53f1-4352-9a16-40a70d567e6d", "sighting_of_ref": "indicator--6a3dd87e-2407-4bcd-bcec-01fd820ae3bf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bea4a2ba-0ebd-42bf-acac-36cc2a842ab2", "sighting_of_ref": "indicator--a892795c-2d1d-4199-a297-71b104a1d2c9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77bb552-6d65-445c-9a20-d1472b3e707e", "sighting_of_ref": "indicator--85bfac98-867c-415d-86c1-384f67761a1d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--021b774f-f009-4d64-ae51-0138c975dfe7", "sighting_of_ref": "indicator--aea1c39c-b5a3-4338-9a87-5aedec62ddb9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df3b835-6d95-4774-bf06-502d36257f72", "sighting_of_ref": "indicator--ab85ad9a-7b51-484f-9d15-dd76cf377b05", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1023c2db-46bc-4877-ab67-1a6b0d19ae96", "sighting_of_ref": "indicator--f7324ad7-d07f-4af5-8e97-d6cec66e4d4f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f584f5fe-28ff-4437-875d-e893944a087d", "sighting_of_ref": "indicator--f7324ad7-d07f-4af5-8e97-d6cec66e4d4f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70710745-4877-4688-849b-1577cf1e87a5", "sighting_of_ref": "indicator--d80b4370-05f2-4869-8d42-a9745169bb51", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e444f7a-501f-4a3e-9836-2d390db13751", "sighting_of_ref": "indicator--750c970f-c0f8-4f8b-b03c-5e049ce2d003", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60140ae4-c175-419e-ab34-130a834af676", "sighting_of_ref": "indicator--4e3a43c5-966f-4cf3-9880-b93eae335066", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7caafa38-49fd-4994-bab5-36a905a091b3", "sighting_of_ref": "indicator--4334514f-7ccb-4e69-8d70-61d4b10e11cc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ec3b25-a2d9-45ff-9c9f-049c891df3c9", "sighting_of_ref": "indicator--5f063d80-21eb-498c-a479-c2da274391d2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--798d1917-6030-4948-816e-a7ec7096fcb0", "sighting_of_ref": "indicator--55e2a88f-eeda-499f-8db4-56491202f215", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e4b3032-ed2a-49b8-9202-62ed5aac5139", "sighting_of_ref": "indicator--9982ecc5-dd48-4443-b00f-0def187d77d8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdcd9163-df67-4567-a480-15199a70290e", "sighting_of_ref": "indicator--6a162f0f-1273-4f53-ba19-951abd723fba", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da73449-5f86-4ddc-86b8-ace9fc78cfb0", "sighting_of_ref": "indicator--509eae73-708b-4f5d-9fe4-59c0461afde7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e5816e-d64e-4e47-b03f-e269ab10d6d8", "sighting_of_ref": "indicator--509eae73-708b-4f5d-9fe4-59c0461afde7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88764aef-4ba6-4633-942c-6510d7a2c669", "sighting_of_ref": "indicator--509eae73-708b-4f5d-9fe4-59c0461afde7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a5df8a-bc47-4580-9a1e-f04f6ad239b4", "sighting_of_ref": "indicator--9e00ae10-5283-487e-bc07-6513d7072b64", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba2a090-721d-424d-9137-ce09abeb39bd", "sighting_of_ref": "indicator--a88ad123-d81a-433f-9aac-cbe733c25b52", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ccc30b-996b-47f4-8e78-2eec0c898880", "sighting_of_ref": "indicator--49765a86-ed56-40c7-a5bf-69af07f9b0e3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d335e7-c532-452c-98bc-9a245c5c56aa", "sighting_of_ref": "indicator--7a74015d-2334-4860-9219-e39e29adb49f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584ff8ae-fe61-4320-95bf-c255b09f5f01", "sighting_of_ref": "indicator--bba4bae3-44e2-4324-b038-cf499831716d", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8dbe82c-3b06-4820-96cf-b8008083b0d0", "sighting_of_ref": "indicator--8c59b579-d85e-4042-a267-eefc4e2d7bd9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8d6fc2-9e9f-489e-bc94-3846a5842d0d", "sighting_of_ref": "indicator--f0524de1-f850-426f-b0df-0051a379ac6d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--774a723f-5fe4-40ea-a836-107c72cc0470", "sighting_of_ref": "indicator--6b22943e-c593-4acc-b898-7ef3998ea8f4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c94075-c8ba-410d-b3a5-bb2eaa734e41", "sighting_of_ref": "indicator--9d8e34a3-51f9-4f51-9630-e183daee5321", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ac78a7-766c-449d-b74e-1e4c1d12a64b", "sighting_of_ref": "indicator--c385c327-17b5-4527-8431-d2742d66117e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be77cba3-1a56-4e24-afcd-1d43e140552d", "sighting_of_ref": "indicator--fbe8b3ca-3215-4f38-9eea-b57cae4fd9ac", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae80eea-318e-44c0-933b-ad2844a0f905", "sighting_of_ref": "indicator--f4ff22dc-d94a-47a0-bf79-cce588c8bf4d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b339f8-0746-42a5-8bdd-5f0bc5133c29", "sighting_of_ref": "indicator--52463672-abf8-4dc8-853f-195d5a49b56f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb9b57d-20e7-43e5-b0f8-4234165a046d", "sighting_of_ref": "indicator--2295b7b2-6c14-4229-8711-aaa1ed7cbcd3", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2085a3f-bdba-4dfd-963c-e9dc428395d4", "sighting_of_ref": "indicator--f9cef751-f4d2-4948-b76b-d6f8d197bcf0", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b7a3a6-d5f6-4242-a3f0-110d7a5e9be7", "sighting_of_ref": "indicator--6ece02ab-3230-4ffb-9f2d-1d489fcd4100", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4e0454-ce43-4ee4-8bb2-3d2034dcd9b6", "sighting_of_ref": "indicator--bee074ac-889a-4ae7-9c83-ba4900d0b44e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a7a0204-f64f-45ca-8c71-72898a3dc8c9", "sighting_of_ref": "indicator--b5ba6c83-53ef-49f1-9476-b28a5253fc1d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44659403-9c67-4c7e-9e10-eec0474bdb96", "sighting_of_ref": "indicator--e65f496c-5922-437f-ab3d-d6d2a222ea3d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa95bde1-858c-4280-ba64-ffbb205db107", "sighting_of_ref": "indicator--be0115d8-583d-4cfa-90b3-dd7504e70dd5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317f02bf-e916-427c-86a6-9e66a19ebc66", "sighting_of_ref": "indicator--0ad43e3d-1965-4f43-bbd5-79cb4d6f5f4b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4dae066-5164-4222-94a1-5f29dc15e39d", "sighting_of_ref": "indicator--0ad43e3d-1965-4f43-bbd5-79cb4d6f5f4b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5051360-20c8-40de-8388-b8d5405ba37d", "sighting_of_ref": "indicator--bc217ee4-5754-4963-b5b1-e8e9f5263095", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e58e71-5dab-4e64-ad66-15ec7c5051fb", "sighting_of_ref": "indicator--ff68c2ff-1230-4bee-b133-9902a81ef079", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b22e254f-e6dc-47dc-899b-9f132edea6c7", "sighting_of_ref": "indicator--9714109f-0030-43ba-80b1-3c600d4d5dff", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b65e40-c5d0-4b31-bf02-3577ea1f2193", "sighting_of_ref": "indicator--0386aa43-d74c-473f-b01e-81102ecbf611", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9cf1dc-4fb0-45f0-90f9-aab8b01eebc5", "sighting_of_ref": "indicator--b7998875-0319-4b33-befb-a878cfc23eea", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73d70f9-9258-466d-b0b0-ac54e8202d0f", "sighting_of_ref": "indicator--b7998875-0319-4b33-befb-a878cfc23eea", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8ee44b9-61a9-4685-b131-a4f103b018d5", "sighting_of_ref": "indicator--b7998875-0319-4b33-befb-a878cfc23eea", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de3fc46-ece2-453b-bbd6-054b604fd944", "sighting_of_ref": "indicator--73c9a731-9f6b-4040-aa5d-6c4b5546492c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b544047f-a43c-4376-8415-969e0b2f9d0f", "sighting_of_ref": "indicator--6a6f743a-79b3-4209-b1d0-91d88fcdbed6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b4ba67c-38b4-42e4-be21-facae4a739c9", "sighting_of_ref": "indicator--0b39f20c-6b7d-49df-83cc-22a1aec85713", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ea268b-b093-46e8-8d75-1ea3c733fbb8", "sighting_of_ref": "indicator--0b39f20c-6b7d-49df-83cc-22a1aec85713", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3f2784-2370-4b50-bf06-6704ee1520fa", "sighting_of_ref": "indicator--0b39f20c-6b7d-49df-83cc-22a1aec85713", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e82db0-5ae1-4547-92f0-60f7ca7f5f23", "sighting_of_ref": "indicator--6b953236-98ab-4fe8-b693-45d3485743aa", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9bfafc2-1876-4d0f-9bce-c5a65baa6736", "sighting_of_ref": "indicator--9e16403c-1e46-48a3-9868-b3dbb1151a05", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bce0178-b583-43f7-9f17-5d11ba0774f4", "sighting_of_ref": "indicator--a55fd820-492e-4e26-9cc3-49a700cec04a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d30dd5e-2c96-414f-810b-2ec5f898a965", "sighting_of_ref": "indicator--a55fd820-492e-4e26-9cc3-49a700cec04a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1a3472-83a5-4a5b-9908-3e76c8d7592f", "sighting_of_ref": "indicator--a55fd820-492e-4e26-9cc3-49a700cec04a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed54d79-2e31-4e6d-b677-d2692f24c299", "sighting_of_ref": "indicator--73d1e618-d052-479a-ba54-59db5f45fee4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1fd3ddf-19e2-4496-9061-c9e0b89a0e3c", "sighting_of_ref": "indicator--73d1e618-d052-479a-ba54-59db5f45fee4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca69471-a69f-443f-85b2-804005805f19", "sighting_of_ref": "indicator--73d1e618-d052-479a-ba54-59db5f45fee4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30cdcc3-3c51-4b5f-833d-b964f2d8ae6a", "sighting_of_ref": "indicator--0975112d-1106-4591-bcd1-6428eb84436d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc5075a-a522-4947-b859-eda4f4a2c917", "sighting_of_ref": "indicator--0975112d-1106-4591-bcd1-6428eb84436d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7247afc-fc8c-4f4f-a8bb-9cf44f3b5e8f", "sighting_of_ref": "indicator--0975112d-1106-4591-bcd1-6428eb84436d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de6daa55-8be6-47b0-a80b-7c6e5f200213", "sighting_of_ref": "indicator--1cf82a8b-2764-4fce-b308-592429c0495a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9479eec-34f2-402c-83f7-2bd3d07f7187", "sighting_of_ref": "indicator--1cf82a8b-2764-4fce-b308-592429c0495a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c863f253-9223-4430-afa3-b1c123661e14", "sighting_of_ref": "indicator--1cf82a8b-2764-4fce-b308-592429c0495a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667c11e9-ef58-49f3-96f6-66bf95607eac", "sighting_of_ref": "indicator--64d679d0-4e79-4207-9168-0083202c6d73", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c3f001-d2d6-41d3-8ef9-66261ad57ba7", "sighting_of_ref": "indicator--64d679d0-4e79-4207-9168-0083202c6d73", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b978833e-85fe-44cd-bbfb-ffccf28ac0b5", "sighting_of_ref": "indicator--64d679d0-4e79-4207-9168-0083202c6d73", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0b6b92-e554-4df9-b31a-e82b38f1c6ab", "sighting_of_ref": "indicator--902486c4-70e7-44ba-8281-e01b5c04fd66", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fc375b-c7b8-4ff3-b89e-2b62a02e309e", "sighting_of_ref": "indicator--902486c4-70e7-44ba-8281-e01b5c04fd66", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b70704-a5a5-4c4a-803e-f5dac00c8d29", "sighting_of_ref": "indicator--902486c4-70e7-44ba-8281-e01b5c04fd66", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760e5c0f-a8ba-4bb5-971c-8c1b5281b1b3", "sighting_of_ref": "indicator--58a2074a-f5d2-409c-9065-7499674ca0da", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bceb6c87-c46c-479b-8557-1dedc34bfc9e", "sighting_of_ref": "indicator--58a2074a-f5d2-409c-9065-7499674ca0da", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59cf2e69-66fd-40c4-bc6d-88a1e7d54a15", "sighting_of_ref": "indicator--58a2074a-f5d2-409c-9065-7499674ca0da", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446e9015-0806-4f55-93ce-fc7faafc2838", "sighting_of_ref": "indicator--04c21d54-601e-4499-b667-0e536a17166d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7dc80c-d8e7-43c1-83b1-cf7d8bbf0c88", "sighting_of_ref": "indicator--3092f86e-2d97-4e6a-96a7-5672d85d3ad5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d86a393-c6f8-473e-92ad-ebc603f56eac", "sighting_of_ref": "indicator--d490b1f3-b58f-4a31-94bc-616be98bf715", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9609f91c-cd11-4ca5-8081-f9d7b1ed5c59", "sighting_of_ref": "indicator--2570d425-19e3-43ce-84ee-7e028918f9bf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c11ce59-8ceb-4fae-846a-fa2819486f68", "sighting_of_ref": "indicator--f8856f74-689b-4948-a8c6-7b0ef1b3472f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c993192-e3f2-4b5b-99f0-8a19069a47ac", "sighting_of_ref": "indicator--f8856f74-689b-4948-a8c6-7b0ef1b3472f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eab35ac-82b4-4c93-9227-6c255621cb87", "sighting_of_ref": "indicator--b63e54c4-d64b-4626-b827-aa01967d1e33", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b3a6368-1a5b-4ec4-9c13-e376a52c88b9", "sighting_of_ref": "indicator--877ca6f8-83be-420b-a7d0-6c2e579af17f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e50bbd-ce63-4c57-b8d9-0a4abb583496", "sighting_of_ref": "indicator--1311b4f2-36d9-44d2-9bac-ac1d100c6381", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adfa3286-587d-4b8b-82c4-e10025dd24e0", "sighting_of_ref": "indicator--1311b4f2-36d9-44d2-9bac-ac1d100c6381", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cccb621-7a07-4f42-8a9a-629265a65d77", "sighting_of_ref": "indicator--40c77751-ea48-41a9-b953-ccea72d738c1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da5d5ba9-49e7-4a7d-9477-ceb29945b5a2", "sighting_of_ref": "indicator--0b3e6313-4a71-4dd2-b02e-5d08390eee83", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d814bb-5be3-4698-8c1c-7297cfa1f809", "sighting_of_ref": "indicator--18e249bf-5942-4831-9283-985a36f2383d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f307dcbf-1b70-4736-84f9-2b1d8b44c953", "sighting_of_ref": "indicator--a20b41a6-a7b4-4616-a63e-9f6177a63049", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9ab431-5e61-479c-98bb-4e687d45241c", "sighting_of_ref": "indicator--e8bad05c-1e2b-4114-b2f9-bff978b60067", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99635ad-895f-49d1-80a8-c6afacc3f4f8", "sighting_of_ref": "indicator--457f9637-477a-482b-934e-144f6f246415", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0419c22-8bd6-422c-a9ea-413726844bb1", "sighting_of_ref": "indicator--6102cc17-be73-41ad-acd0-477d9efc6dcc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ba2342-26d9-4b07-80cb-1510a836ad75", "sighting_of_ref": "indicator--ad985cf5-6727-42cd-8686-5cb316ad09d7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9332448e-04b1-4c61-9b26-80870c5c2f3d", "sighting_of_ref": "indicator--a82b713c-7793-4ad4-9238-9a14d6cdc59f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e5f6c53-04c5-4905-8720-6a7664c505a5", "sighting_of_ref": "indicator--16cd744a-5b80-463e-8c8c-56eb9c2d38ce", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--342190e2-0a17-49ae-b79d-ad45a94f98b3", "sighting_of_ref": "indicator--655fcc91-bc24-4d20-8d98-baa5c0c5a055", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d87722e0-7838-4143-bd53-84ac0650e3ff", "sighting_of_ref": "indicator--08a48b36-d433-4856-9133-011750ce2f89", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2de88f0b-cb67-41de-980c-d778521fc31b", "sighting_of_ref": "indicator--698ddcca-722a-46c3-ba35-b0d108fbd9b8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb58d83b-b395-4b45-a944-d17e5f79934f", "sighting_of_ref": "indicator--698ddcca-722a-46c3-ba35-b0d108fbd9b8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3af93a-0a0b-46c6-aa22-fc84c5b2fce0", "sighting_of_ref": "indicator--91ca052c-b40a-4994-84f2-d44f25e23a52", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15b6726-d9ab-4126-b4d2-4a76b37536b8", "sighting_of_ref": "indicator--4804433f-a700-4149-be68-d464fc02d17b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ee7066-d980-4c1b-9d3a-76e630af5a33", "sighting_of_ref": "indicator--5e1cddb8-3d06-4e47-8f8f-89762eaa3c47", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31de1e54-b711-4231-9731-9d3391375844", "sighting_of_ref": "indicator--e7f17760-d5da-448d-8610-c56d0ff3f010", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522c3beb-05e1-4cae-b2dd-df45ceed6bfb", "sighting_of_ref": "indicator--4527a3ab-10c5-4dbd-aebf-c0ebfeee0673", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564468b1-f6f0-4410-b489-788764912b4a", "sighting_of_ref": "indicator--71f7d7bd-212a-4f08-b7fe-9d057e4299c1", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba81de0a-431e-448b-b664-06035d2aca97", "sighting_of_ref": "indicator--73d969a0-60d1-4040-ba56-292a1b22e890", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a03039-c961-4c1a-8f2f-e2ee2e2c0e30", "sighting_of_ref": "indicator--495c615a-a537-44eb-99a5-4865d705b69c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd6b083-ff85-44d8-b40a-bd706ce8696e", "sighting_of_ref": "indicator--37568bd8-61cc-4dfc-b283-d5b9385034b9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ff9f06-d6df-45b9-8825-c506f9beff13", "sighting_of_ref": "indicator--37568bd8-61cc-4dfc-b283-d5b9385034b9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce31c67-d195-4106-aef2-f73c9099771f", "sighting_of_ref": "indicator--95ff63e2-594f-4c0b-bdf5-e6c0d949a25f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23925966-f8c6-4604-8f83-e74dffc7907d", "sighting_of_ref": "indicator--95ff63e2-594f-4c0b-bdf5-e6c0d949a25f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f65d5264-7203-4b54-a5c2-c4f05e315938", "sighting_of_ref": "indicator--f9cfceb6-e37b-463c-9541-f1cd68d187a4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e6ae52-9032-4647-bd21-24388057780a", "sighting_of_ref": "indicator--cebf7418-7b95-4a8c-9e5e-f9e5dd58ce8d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e88847-2c5d-4d69-ab48-5638b4cca732", "sighting_of_ref": "indicator--924005bd-03fd-4c56-8c89-c3fb9537a2b9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--799c0605-2e63-4170-9b05-724029cee014", "sighting_of_ref": "indicator--944d9428-d2e9-4945-ad69-ab8cc3704717", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d133501d-f0ab-4c60-92a7-de74ff2f0889", "sighting_of_ref": "indicator--e062e897-d053-42dd-93f7-a9538498558d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3627019-b573-4ab9-b750-bc07ab32a0da", "sighting_of_ref": "indicator--84af459f-18ae-42d3-beb3-16aee67279af", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd7d026-3579-443f-ad13-cb88497877ff", "sighting_of_ref": "indicator--adfa6d1b-d138-4184-b321-b2ddb602af15", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a7e2c3-dd90-40e2-914b-093b55450f02", "sighting_of_ref": "indicator--adfa6d1b-d138-4184-b321-b2ddb602af15", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b3a7ca-7230-4f86-833c-cb80c6de5df7", "sighting_of_ref": "indicator--241e2151-9d89-4dbf-96fa-9b7e2df55272", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241bdc59-6baf-4d92-b0c2-f29b7ff85256", "sighting_of_ref": "indicator--207e8201-7da9-43db-b1ca-04a93dca634e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5485c2e7-6eba-4fc7-874f-532216b63038", "sighting_of_ref": "indicator--cf3bcb43-9ec6-4293-9bd7-9e25a5fa6c9a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89297f0c-728e-4c10-896f-f42fbb656a12", "sighting_of_ref": "indicator--cf3bcb43-9ec6-4293-9bd7-9e25a5fa6c9a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2967c78d-a952-4a29-8473-1c588197c94e", "sighting_of_ref": "indicator--11f0e6fb-ed5e-4ed5-890d-4719361f7121", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e061c670-f0c3-49d4-85c6-3a4bff429e8c", "sighting_of_ref": "indicator--e57fda07-0e2b-429a-b48c-f30ef19cfa48", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60830047-4ac6-4e29-aaea-02be75ac2bd9", "sighting_of_ref": "indicator--c29abcc4-aeba-4c31-8007-3b213142bc4c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a9d809-7bba-4cb8-a83a-86e74015e151", "sighting_of_ref": "indicator--c29abcc4-aeba-4c31-8007-3b213142bc4c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3461bc8-92fb-47dc-b246-55287d93b0a1", "sighting_of_ref": "indicator--ec79ecb8-9d9c-470b-b9dc-4afe3285a26c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013c2bc7-f439-441b-a542-ad5fabda57e4", "sighting_of_ref": "indicator--ec79ecb8-9d9c-470b-b9dc-4afe3285a26c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ff29f9-94ff-4b5e-b542-512ccb21c6c7", "sighting_of_ref": "indicator--ec79ecb8-9d9c-470b-b9dc-4afe3285a26c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97121690-0727-415a-bcca-5d053202d1ae", "sighting_of_ref": "indicator--eb4a5bb6-4d4b-44c9-833e-5e1bc060e92d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--110ffffb-64d6-44fc-b89f-656e26b283d4", "sighting_of_ref": "indicator--eb4a5bb6-4d4b-44c9-833e-5e1bc060e92d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567e289a-74b4-4be2-9a90-892a0f2f8390", "sighting_of_ref": "indicator--5fb388d9-a3ab-49bc-bd4b-b92d659551ae", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1bdd996-3b15-4861-b738-56a72b11455d", "sighting_of_ref": "indicator--5fb388d9-a3ab-49bc-bd4b-b92d659551ae", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9393b70e-684a-422f-8075-78bde9ef5fec", "sighting_of_ref": "indicator--5fb388d9-a3ab-49bc-bd4b-b92d659551ae", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e056039f-8ebc-4e68-86ca-18bc1799818b", "sighting_of_ref": "indicator--c0d84813-80c0-489b-8ea2-ad5b133c9205", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d85a1e-ac7c-4e07-bfba-0bfc8f3fafe9", "sighting_of_ref": "indicator--3ba658eb-3c23-447f-ad14-bdecb9660984", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67953754-1976-4da2-b6e2-723376889ee3", "sighting_of_ref": "indicator--377fa96c-8036-4bbf-b4d6-ebe91d86d1ba", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0826b61f-b565-4bcc-a54b-e3825fad73b4", "sighting_of_ref": "indicator--6cdb9a55-b63d-42d7-9e7d-44c3135e7ca9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--224867cd-765d-441b-bf91-54a1356d9f58", "sighting_of_ref": "indicator--9e6b56c8-174a-4d19-9c54-22ebb469f318", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c4389a-bbcc-4248-a420-d8ced00edd20", "sighting_of_ref": "indicator--87650cdc-6a12-48d2-89ce-01180988b16f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf403b4-e3e1-48ed-a273-e256bd42480a", "sighting_of_ref": "indicator--1d403298-02e8-464d-a152-7c9e3ece6f81", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb1580cb-894d-4bde-8975-5a922a3b9fa4", "sighting_of_ref": "indicator--76598f3f-c9ee-45a3-9834-9c70590238e9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c55777-75f0-4d9f-84ba-f127ae2cec2f", "sighting_of_ref": "indicator--8745c97d-8c18-4967-918c-0c0a7b5e581e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41adf433-fdd2-49e2-bedc-1900bd43842e", "sighting_of_ref": "indicator--7bf7019f-53f0-4677-aa60-6485eaaaea9b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed15c565-4f7f-4ea1-8e7b-1432e1110e20", "sighting_of_ref": "indicator--c775003b-ba03-4fd2-a299-59e445eef58b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f4fe12-9d9d-4fa2-8e5a-a73036ebaed4", "sighting_of_ref": "indicator--6c0d8374-0948-4210-99d8-55dd340eea27", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d14394f-92ec-4939-a375-830351ef2018", "sighting_of_ref": "indicator--37ecf797-bfb5-4ce9-b204-2126edb03a84", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e008b356-8901-49d4-bf03-7ee6f2c91686", "sighting_of_ref": "indicator--20eb39b7-297e-4505-be19-9c89d8ba0ec4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e185846-213d-448d-8c02-32df7b62d52c", "sighting_of_ref": "indicator--8fda1bab-c8fc-4b21-a8aa-7b1284247a5d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9457d8f0-a322-4fad-921c-8fa8168ad716", "sighting_of_ref": "indicator--71a790fd-8ad8-44e4-b0c5-365546c76219", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8bb1840-746b-4247-9427-df0a62412808", "sighting_of_ref": "indicator--c04bff95-f39b-415d-bbb2-a05bd9fd6e77", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086573e8-20d6-4aca-8023-0a2de0e21505", "sighting_of_ref": "indicator--89543776-7b2e-411e-86e7-bb9173feddc1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947e9a51-0e22-4c7b-9b54-7b43fd8b6f90", "sighting_of_ref": "indicator--73ff99ec-0df5-4ce7-9cca-1601fbccd9c1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d4055d-e1eb-4ee1-aba6-21150e5cc61b", "sighting_of_ref": "indicator--9951d893-c0ac-4496-9687-198f8b21be46", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb4f439-9c78-4a99-a4ac-7fbdf9595a1d", "sighting_of_ref": "indicator--c540b49d-1c24-47c7-a1e1-18997b5818d9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37160942-48f5-44ed-9427-bb6fa2ac4945", "sighting_of_ref": "indicator--1f466cfa-4332-4fdc-a5f9-b26b6d636860", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a3cf4b-c71e-41b7-a5b5-ed8ce3d51d41", "sighting_of_ref": "indicator--e315cbaf-7f03-4415-8f66-8670c7198534", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5ce2c91-8104-414a-9c97-ff3cd03413f2", "sighting_of_ref": "indicator--e1ba9338-c70f-44a3-8e38-1a6a352f3adf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bdd8878-164c-4297-9a38-36c255a8fce7", "sighting_of_ref": "indicator--e460fe7e-769a-4f54-a274-546cb81dcdf9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b01ffbc-dab1-4de5-bb5d-0ea7a243661c", "sighting_of_ref": "indicator--48da60d9-fc4a-4839-87a8-814edc2e9624", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a528a3c-a464-4197-8670-2c282d92822c", "sighting_of_ref": "indicator--ae83b278-9137-4ce4-8574-eed942c27ecc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfdc014c-3623-447f-978d-df60d783adca", "sighting_of_ref": "indicator--ae83b278-9137-4ce4-8574-eed942c27ecc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd314c1-951f-4187-a0b8-94a9a99a40e1", "sighting_of_ref": "indicator--39318b88-c64a-41db-834b-eb2982efa99d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcfad480-11df-4237-aeb0-647aa9352894", "sighting_of_ref": "indicator--29c4a261-f233-4712-b03f-f4feb491a677", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d6cea4-8558-4fc3-8472-95de57ecf8a7", "sighting_of_ref": "indicator--eb52cd72-84cf-45e6-9e8e-1840492d23e1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e1e7188-db67-4a3e-b55d-e439fee4e5d3", "sighting_of_ref": "indicator--b3a4033d-2a07-4334-85df-36401fb283d4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb0bc1ee-8895-4bbe-98b0-0fa311f6febe", "sighting_of_ref": "indicator--c08689b6-88d8-4a8b-a94f-a85f537dcdb4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cbc8b5c-8702-46d6-a373-3fc893bdf0a9", "sighting_of_ref": "indicator--c08689b6-88d8-4a8b-a94f-a85f537dcdb4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdbaf354-d360-4101-807c-c64ae7876b42", "sighting_of_ref": "indicator--09a43698-c75a-480c-bfcd-206f64d5e2ce", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d944a143-51bd-499f-abf1-1beb01f4b7af", "sighting_of_ref": "indicator--3ee452cb-35e3-4ec5-87f1-f7e97a02bec6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb9def56-9225-4d6f-b65d-7e749add1a15", "sighting_of_ref": "indicator--7f0cfd19-9f59-476d-85c2-06fb9d784fc7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54947e81-524f-45d6-a587-c06a970917e7", "sighting_of_ref": "indicator--123f1484-36e6-4af0-ac87-2421d98e1af2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548af0b9-aabd-4e38-bd48-0d29df8e373d", "sighting_of_ref": "indicator--277eb2cb-2aa3-4d82-bde8-43e673c39f44", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd086a98-7cf5-4ed3-80fb-b9a434685a66", "sighting_of_ref": "indicator--4ec5f46e-9b23-4542-a540-031c152799dd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e3aa3e-adb7-401d-ad17-c0ec5c3de7b0", "sighting_of_ref": "indicator--2aeba6d8-a067-4a33-8a80-fc3d352a4399", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e134947-752a-4a2b-b023-cdfdaef0ab88", "sighting_of_ref": "indicator--e6fc2a76-3619-48ea-9064-7f39f1125def", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a20dea6-d28f-4399-9e1d-123534677fa0", "sighting_of_ref": "indicator--e6fc2a76-3619-48ea-9064-7f39f1125def", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00585ec8-efc4-4938-bbb9-d14c061d31da", "sighting_of_ref": "indicator--4169bd22-3046-4261-b663-2019b577d02a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58bd3a64-dbe4-4002-9c50-ba9d4d56b054", "sighting_of_ref": "indicator--4169bd22-3046-4261-b663-2019b577d02a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef5f2454-6778-4910-a97f-f10054074599", "sighting_of_ref": "indicator--bfe2cec8-667d-4409-a4e0-5446c380c50b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d2fc1a-6a44-4af9-9efa-7c214806cd69", "sighting_of_ref": "indicator--90f705c6-d65e-44b8-9960-ba63ee8cec5b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975736cc-2cf5-472d-8a57-b06d0f172df4", "sighting_of_ref": "indicator--c3acbd79-4f2f-468e-a9c9-379b6f841f44", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78c7d43-7a29-4b9c-8805-f9adf9da6996", "sighting_of_ref": "indicator--06d94060-dd33-481c-8848-939e85f9b755", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16562217-eb45-4eba-9405-cdebc64246b2", "sighting_of_ref": "indicator--4dc48dbe-e3da-4a04-93d0-2c8b84cf6288", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f304ca-6117-4496-a614-bb9b98bc0373", "sighting_of_ref": "indicator--9ef630a6-55f2-4e66-9dc6-59ecfe13fa65", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9494b645-0f76-4607-9719-047882608832", "sighting_of_ref": "indicator--9ef630a6-55f2-4e66-9dc6-59ecfe13fa65", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb6dc90-4e7d-4e4f-880a-2e613d1e8780", "sighting_of_ref": "indicator--c649b88b-7043-4ba0-932e-dc5c299f7c3c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f678ab4-3bad-4663-909c-511cd5395997", "sighting_of_ref": "indicator--2ef6cfc5-b1ad-429b-9a98-799d4e67998e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d59c8b-8082-4b94-8a76-9e61d85324a2", "sighting_of_ref": "indicator--c21a5b15-1228-45c8-a840-a1d1f9d3eda7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0602bd6b-eaf2-4393-b753-819535a4be7b", "sighting_of_ref": "indicator--43b9527e-e449-4082-b635-57fb8e2f6020", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac68b52-2a0a-4977-843f-05de650ff316", "sighting_of_ref": "indicator--9a16451c-a4ee-47c9-82d0-653bb89c6c05", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c349ad-6175-4a86-9409-ab85fc225fd0", "sighting_of_ref": "indicator--dd90174f-1a0d-41b1-bfc6-0e954b63a77c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ee7c2b-81b8-4382-b2e3-2a86e3552fbd", "sighting_of_ref": "indicator--1108c923-a39a-4e24-a75e-692ecf9674a5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6c8072-14d0-4748-8ad5-4597e163b561", "sighting_of_ref": "indicator--1108c923-a39a-4e24-a75e-692ecf9674a5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd540a9b-89c0-4350-a070-f58ff30836ff", "sighting_of_ref": "indicator--1108c923-a39a-4e24-a75e-692ecf9674a5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e53303e4-1c48-4add-8d7a-535bc1f7dbc6", "sighting_of_ref": "indicator--b89a965a-4ccd-4612-a2e8-c803f86a89a7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf79766a-40af-48ef-a0ea-a8f5a4993608", "sighting_of_ref": "indicator--7889bf2b-ea79-449b-bd42-fdba2fb15715", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb473f2-b654-4857-9899-0091c5d5b99b", "sighting_of_ref": "indicator--c9bf4279-43b2-4a7a-a557-09c3598a9f27", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b425e413-4955-4ccd-adee-819b7c2c2667", "sighting_of_ref": "indicator--cb777780-0c0b-4ba0-b6d7-ba4086f18356", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--788ef141-a19a-4467-83ce-c2f38c144857", "sighting_of_ref": "indicator--4d0fd9f7-f488-49f8-bc96-a1fe251a5d8f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e10d541e-3b8f-4ee5-ae39-352cf7d43191", "sighting_of_ref": "indicator--65cc8245-0bde-4857-9b1c-0e962145d9f9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd8df78-b968-4e22-800e-7fe569601b7e", "sighting_of_ref": "indicator--1ec886d9-cb70-42e4-b055-cb9aca318507", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7870ae-8b5a-490a-a0ba-89a951f6496d", "sighting_of_ref": "indicator--b04d4919-8a75-4cf9-aafc-956d82b61db9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a722e6c-d7a0-48d4-b837-36b6962220a5", "sighting_of_ref": "indicator--b01f039c-1e18-4158-967d-eb32373b0df0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df41caaf-d7f3-4340-acf5-0e721042c4eb", "sighting_of_ref": "indicator--f5bf4f16-ad5c-4aef-b453-f6a25478c67e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a7aff2-4131-42da-8759-373206676a49", "sighting_of_ref": "indicator--bbf7f4dd-0dfb-40b8-a935-6e1b6e5097d5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--174bd645-a630-47fc-b977-c08f9723326a", "sighting_of_ref": "indicator--bbf7f4dd-0dfb-40b8-a935-6e1b6e5097d5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b7aeb5-630d-476e-8b4c-e7d31bf4b557", "sighting_of_ref": "indicator--9d0035b3-5e7d-4e52-ae6b-85b91db9de24", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e195b21-c89d-4171-8f1a-aabaca4ed74d", "sighting_of_ref": "indicator--983b3b0d-addf-4b7a-bd33-4cdca650cf6c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1db197-f117-4c2d-8cf2-8937a196b5bd", "sighting_of_ref": "indicator--79fc8307-08b3-4fd1-9f9c-201b8e097882", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8a0a05-3abc-4f0c-ba57-f80a27aae550", "sighting_of_ref": "indicator--12188743-47f3-45ab-a0fb-fe721490e7ee", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c4aeb0b-297b-4feb-bc0e-d72a06fdb067", "sighting_of_ref": "indicator--12188743-47f3-45ab-a0fb-fe721490e7ee", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2756eee1-f9b8-4d44-a21b-f1c769c9605a", "sighting_of_ref": "indicator--090e10e6-622a-4d1d-ac07-7ecf69a01fd0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c34065f-7918-452c-b286-58bf50486b7d", "sighting_of_ref": "indicator--f47ff082-da1a-4d2b-b630-7952272e021a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f90087c-acde-4029-a601-322bf57727ac", "sighting_of_ref": "indicator--cd69eeac-b574-4635-baf7-449e206739d7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089e1ac3-d11b-4452-8b20-791abca73ac0", "sighting_of_ref": "indicator--f8bf5334-8cbb-4c3b-a9bb-c0f8240892b3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54143680-bd54-4f1d-8c7e-2ac3a6b60e2c", "sighting_of_ref": "indicator--0f91d96b-88f1-4b22-a7d8-51d6155527fd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff9ace5-14cb-48bc-a601-f2cfac5ae640", "sighting_of_ref": "indicator--2a2a8766-8ba7-4e9f-b670-62450aca2667", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51bb576c-1a58-4f1f-a350-57051ab35bba", "sighting_of_ref": "indicator--0ff5ddbb-21e6-414e-a403-240d6d906732", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a4d7a8-3613-47a6-8685-218656fa1ff6", "sighting_of_ref": "indicator--56b11937-6052-4ce4-be91-db42640908a8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e9cea94-6fda-45ed-92b0-e12fcb5e6eec", "sighting_of_ref": "indicator--e6ceb161-8ffa-4e29-b2b9-033d1b082a09", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--486ddbe3-2bf4-418a-b640-60badbfb8670", "sighting_of_ref": "indicator--8f2486e0-4488-418c-b438-863eb35c20c5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae898ec-686a-4c7d-8fc9-ac8a08cb49f7", "sighting_of_ref": "indicator--d8c4b76c-d646-44b3-9d59-9988cb63b9cc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240d4e8a-0b0f-4692-b597-68ef1b15127e", "sighting_of_ref": "indicator--bdde3172-cc44-4606-856a-51ecb8d15482", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856c9a4a-f1cd-4f15-90b9-4372f1ae482a", "sighting_of_ref": "indicator--e23be8cf-4594-44fc-b8e9-02d42790d1cc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca82c659-1ebb-484e-aeb7-5e3b7f79cf74", "sighting_of_ref": "indicator--3dd4f35e-fe87-453d-82cd-307df869aba2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d350fd-f66a-4037-aae5-ad2bdcced639", "sighting_of_ref": "indicator--3dd4f35e-fe87-453d-82cd-307df869aba2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2776eadd-1ef6-44d1-8e3e-2f99192cf21b", "sighting_of_ref": "indicator--eb0257ca-0ee9-4ef5-b2d0-89fcce59b792", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48e65f8-5e46-4364-bd46-6ab27cfa0c31", "sighting_of_ref": "indicator--4bf7f717-828d-40e6-8aef-c4d8c32a3fe0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f03f19d7-495d-4cab-be14-d8b63da83d55", "sighting_of_ref": "indicator--89ad1569-f859-4739-a21d-98b74b459fb1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087bc01b-6749-4ec6-a327-79bc7f0eaee7", "sighting_of_ref": "indicator--2432ff0f-9ba9-4917-a997-99d6b4a86615", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbb4531c-4c17-4500-a919-f8aadbb26062", "sighting_of_ref": "indicator--33ea97e2-14be-42e5-aacc-38765a8e8add", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e3824c-4510-483e-9913-b189fe519f9d", "sighting_of_ref": "indicator--efb75584-6401-4cf2-8205-62023737e6b1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6699566-9aeb-4001-8cf6-fce79b136b17", "sighting_of_ref": "indicator--0969d8d2-5fb2-4bc0-bc8a-b2b5920d7e08", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa5952b2-5f59-4b1d-bc1b-042808644876", "sighting_of_ref": "indicator--7955d79b-f645-4c47-b42a-6ddf41f3eb13", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--714f3f96-9ea8-49fe-8341-b7d4a9ee88b4", "sighting_of_ref": "indicator--cbd34c7a-a55d-45b0-bff3-29c621abc784", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038cbe93-bfd5-4176-9dc7-ca85d7638da0", "sighting_of_ref": "indicator--dacb355f-577b-4ad3-aa1c-18775b371aef", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4e750d-c612-4fcf-83e8-6aedb6ea0b9c", "sighting_of_ref": "indicator--a39e1bf6-9ca3-4c0a-bada-e3ec4b8207c8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150131ef-ba57-42f8-adc8-c3aa0527e0db", "sighting_of_ref": "indicator--a563bc53-f031-497e-a3b8-abc5c6afde46", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c33411f-53fc-4440-badb-0cb2b20da20b", "sighting_of_ref": "indicator--61dd76a3-5e9d-404b-af90-b285bbec4f42", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--988ba4d3-37e6-4119-a497-064d4eec7bd5", "sighting_of_ref": "indicator--dae15e42-3e63-450d-93a8-2cc0c29f345a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23aca202-c115-4402-a47f-72f2ca1ced47", "sighting_of_ref": "indicator--c1d099ee-4d74-446a-9a67-6c4503743b3b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf9e91d-e4cd-45d4-9b6b-b88c1c9b47a5", "sighting_of_ref": "indicator--a41f68c7-eedf-44a1-8450-56c7b67ba390", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d13d354-4fe9-44c2-a0a5-1022b8ba3689", "sighting_of_ref": "indicator--84ab0c4e-09dd-40b9-890c-8136721dab4e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57dbb8a1-8be9-4855-9654-f1df67b23712", "sighting_of_ref": "indicator--79e04671-9d27-4c74-872e-97aa1ccb2287", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a88425cd-07e3-4e08-9857-62d187b51631", "sighting_of_ref": "indicator--c6aaa406-d087-4598-969b-cf7140af6454", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ccb35e-4bf6-4912-970a-22c119427734", "sighting_of_ref": "indicator--b10b2b83-8a54-4704-8e8e-3753233f2d14", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b54ea71-1ea0-404b-b295-5345069c3e84", "sighting_of_ref": "indicator--0b5d242d-a8ed-43ef-8370-e8929be0cccc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd2753d-22d8-464f-a061-f5e2c0476918", "sighting_of_ref": "indicator--0790651e-a68f-4a3c-a0a0-ef47d4ce97a1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b2cf6d6-a51a-46a7-b2f0-6129b526cdeb", "sighting_of_ref": "indicator--5721bce5-a6d2-4c0b-add5-4f83724d1a99", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98cd2ece-e777-45d7-9a66-e1b1cd1ae388", "sighting_of_ref": "indicator--a75f2283-c49e-455e-aca7-2febb747a430", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--312b0779-3808-4b98-878b-48861b337988", "sighting_of_ref": "indicator--848d1b2c-369a-4570-a6db-83cb6a5b74ca", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea159569-5449-40cf-bb2a-b37e8c929a8d", "sighting_of_ref": "indicator--329a4d3c-d494-4a36-8d22-1246ed685d2d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e39ba8ac-0dd2-4f02-9f07-2afd950b354e", "sighting_of_ref": "indicator--90d471c0-10f5-4eae-922f-5592373b751d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8b978a-ee28-4490-be52-a482563fb392", "sighting_of_ref": "indicator--7c88e9a1-4703-49d1-9be0-9fdfd105279f", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8081db4d-24cb-49fc-8df9-f95fcdf032a9", "sighting_of_ref": "indicator--2ecfff05-a892-4c5c-ba16-64a4a31aa0a3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c85d6d6-1334-43ab-9a79-299a80efdc90", "sighting_of_ref": "indicator--fd36c839-8269-4677-a383-93640ffc30f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2bbf36c-71bd-45d9-9093-652827d7501e", "sighting_of_ref": "indicator--4b1e1877-7fa6-4e06-8729-edc13afb7429", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33149014-898d-4307-b1d7-5de44b17da64", "sighting_of_ref": "indicator--b43603ab-4dd8-4b27-8ab4-29d7c8c77770", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55780bd7-dbc8-49c6-9cb5-6e38fb68c811", "sighting_of_ref": "indicator--30db3d22-5dcd-40b8-a870-ea5ee0e51995", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6780b011-380f-4c47-b4aa-3c1f8e7c44bc", "sighting_of_ref": "indicator--f349d8ff-1261-44ea-980f-82f43ad61f8d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c2af09-89e7-4abf-8ace-3c8d52305840", "sighting_of_ref": "indicator--500a1e77-8d5b-440a-8b77-45307db79c7e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d77d5b-6af4-44a0-8f5a-e39305550634", "sighting_of_ref": "indicator--16d516ad-49ea-42bf-84ba-71a76020ff0b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237efc3e-c51c-41e6-9954-6c3579a27ded", "sighting_of_ref": "indicator--c21d74a4-b5ba-4ab5-a4d6-f5ee5907c572", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac53daf-1a4c-486a-95b8-74eb97f95e14", "sighting_of_ref": "indicator--46d745bc-22cd-42ca-a891-aa2b4e463017", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d99058-e025-42bc-b4af-bd1d202373bf", "sighting_of_ref": "indicator--b6da9328-81c0-4beb-a1bf-1fe43bc321f4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa13c2c-d577-4dfc-bfab-d980f6e19ac3", "sighting_of_ref": "indicator--ebcabdfe-1864-4b12-bd54-2c126797d498", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856ccde3-bc48-4f67-8e46-a805b441053a", "sighting_of_ref": "indicator--ebcabdfe-1864-4b12-bd54-2c126797d498", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9a8124-a919-466c-a30a-c7a951785e95", "sighting_of_ref": "indicator--5cf20f13-5e0b-408f-a3f6-758c9ec14b6c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--024c24eb-7b20-440b-aca6-170915e7911a", "sighting_of_ref": "indicator--5cf20f13-5e0b-408f-a3f6-758c9ec14b6c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c0fa2de-49e0-44d9-b87b-f4c4fbd6487d", "sighting_of_ref": "indicator--b211f5f1-3f60-4b10-8488-ef92daa9a224", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd70903c-7c7b-49a8-a32c-eeb34bed446f", "sighting_of_ref": "indicator--c91537f6-ceb8-4661-9615-eb0acb9c1065", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f1b8f8-661c-4936-860c-1e8a9b8c3ef7", "sighting_of_ref": "indicator--d14d4969-a90b-4382-81ed-aee8a4b6743d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f51de7-4a67-4fbc-8004-4b80266f4f61", "sighting_of_ref": "indicator--66f2f95a-8a5b-4866-9819-49c788c360b7", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b02ddb-8cdc-4ccc-a91f-d0c833950579", "sighting_of_ref": "indicator--8e4c2997-eabb-4283-839e-1a229b76e3dc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21f20d8-6225-4d17-abbf-43022ff86e95", "sighting_of_ref": "indicator--8e4c2997-eabb-4283-839e-1a229b76e3dc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--061f9161-20b1-4741-bb5a-d30bacff9e1c", "sighting_of_ref": "indicator--5caeca45-18b9-4e92-9649-bd2911a960e7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5fc3e61-916b-471d-89a3-53e88cf3b80a", "sighting_of_ref": "indicator--2c046eb6-b29c-41ef-96af-b875d2775d34", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68fe02e5-9fd8-4440-9a62-9c93a82d1c87", "sighting_of_ref": "indicator--2c046eb6-b29c-41ef-96af-b875d2775d34", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--859e3dc4-ae6c-4eed-825a-484252f93857", "sighting_of_ref": "indicator--ba541eac-dec6-47bf-b8c9-b9283d4bc031", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f17f64-45f0-4ae0-a8a0-28b31f9deda3", "sighting_of_ref": "indicator--8dbcf4ed-0c75-41af-9fed-8db057353376", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9242fe17-e642-4ec5-b2b0-2b2ef2b1239b", "sighting_of_ref": "indicator--8dc447af-dada-48a6-b609-887fdb9591ea", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6295fb36-dbce-4fc6-b7c8-c0e7a7a543ce", "sighting_of_ref": "indicator--ccc2bff3-7ecd-46a7-8fbe-3f1e27ecfa00", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe0ab53-e63a-4d50-b68f-b91fd96f09d7", "sighting_of_ref": "indicator--7d6a13e3-8a02-48bc-93e3-055f6e1ed553", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce3f0a88-4297-4f3a-8c5a-4dcfd8f78e44", "sighting_of_ref": "indicator--8080df48-3808-4745-9a94-b9874b8aba4c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92c510a-3bee-4a74-88f6-22f050a62e6d", "sighting_of_ref": "indicator--cd8ac125-b941-4177-a866-fb0713bb5270", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047c1ea3-36c7-447e-b1ee-c27b2c158d7f", "sighting_of_ref": "indicator--3e9ba252-6d82-4a7b-9ad3-8614dad73d38", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e157f067-f872-4e5c-ab29-f4bd1c2e6c82", "sighting_of_ref": "indicator--d420ffed-cd37-48bd-baa6-68852b39c866", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55a0efb-3c4b-454a-b411-b8893aa47eab", "sighting_of_ref": "indicator--c714c2a0-f9d4-4df6-a474-ba194becdbec", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2b35d9-5427-489a-884b-b01a18fb2df2", "sighting_of_ref": "indicator--8ebff431-f524-4d93-afec-9c7ff4fad622", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3638a78-d64d-492c-a54a-603f6e97a31e", "sighting_of_ref": "indicator--e776409d-f81d-4247-8297-ead626f4b992", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb8502a8-bae1-4668-8e44-1e287a253cc6", "sighting_of_ref": "indicator--2cfe5f3b-7cf6-4fdb-b13f-e28b2683700d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fafed967-1724-4f63-b76e-8e24d567285c", "sighting_of_ref": "indicator--acf06c49-0cab-4077-a8d3-9167c4592e7c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c788e5fe-16dd-4fe6-ab01-fe118f0c7fb0", "sighting_of_ref": "indicator--acf06c49-0cab-4077-a8d3-9167c4592e7c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bccff6e-a4c6-4a5e-a3ae-29edb00e0cad", "sighting_of_ref": "indicator--acf06c49-0cab-4077-a8d3-9167c4592e7c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16bbb835-e481-46bd-8e76-ecb59cff2262", "sighting_of_ref": "indicator--10402c0c-e713-4cbf-9389-b6ce01a17661", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e65c523-8902-4eb4-aff6-b3b81d617a96", "sighting_of_ref": "indicator--10402c0c-e713-4cbf-9389-b6ce01a17661", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--217bd4b9-ba2f-4d41-960a-05c45459b012", "sighting_of_ref": "indicator--10402c0c-e713-4cbf-9389-b6ce01a17661", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1ab26f-e6c0-467f-a957-5fbdf1949df9", "sighting_of_ref": "indicator--1ae66794-0822-4ce7-8e7d-f6dfa47c96ad", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698f3c19-9fb3-471a-bce8-41623ae696be", "sighting_of_ref": "indicator--1ae66794-0822-4ce7-8e7d-f6dfa47c96ad", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acec000d-4726-4906-b02a-206e234329b2", "sighting_of_ref": "indicator--1ae66794-0822-4ce7-8e7d-f6dfa47c96ad", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04faa0c9-3437-4af5-a3f5-6c6caefff197", "sighting_of_ref": "indicator--58f1cd3c-a16f-4379-9e4e-f4e980cd37b5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3298c73-6b07-4205-9137-00f96481941e", "sighting_of_ref": "indicator--4963218f-c6f6-4747-bdd3-f9b408bed367", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b9e262d-47ef-47d8-bf73-b9ba8a233876", "sighting_of_ref": "indicator--0a54377f-040f-4344-941e-3a0ab86ec01d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819a9bec-e0fc-4802-babc-bfc7baa710db", "sighting_of_ref": "indicator--298630f1-ef60-42b7-9c63-0b801141fa5f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1245a46a-2454-46a0-9216-00339e73efff", "sighting_of_ref": "indicator--a13a80c6-ec4f-46b2-8d8b-449796d885fe", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c9f32c-faad-4d00-90f4-53f430cafd81", "sighting_of_ref": "indicator--a13a80c6-ec4f-46b2-8d8b-449796d885fe", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--858e8b45-fa8d-4a8e-b807-52f6dc3aa251", "sighting_of_ref": "indicator--a102ca1d-6fba-4d76-b1ca-3edbdb5a4e1e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79244d2-ba2c-40f0-82dd-cb4aadcadf27", "sighting_of_ref": "indicator--a102ca1d-6fba-4d76-b1ca-3edbdb5a4e1e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8d08dc-ca73-46ed-8a89-1fd8b35c9716", "sighting_of_ref": "indicator--a102ca1d-6fba-4d76-b1ca-3edbdb5a4e1e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f909e6a0-27c1-482d-8bc6-4239e33ee43c", "sighting_of_ref": "indicator--6319df2e-bca4-4035-8dd4-46e7375cfa53", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a72f7c20-7458-4ee9-b9a8-78a2c6d9467f", "sighting_of_ref": "indicator--777217ed-3cb5-4fef-b0de-66ab59b03845", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b639bb-c408-4565-99c8-81abe9345aea", "sighting_of_ref": "indicator--5c3b3b03-06d6-4801-a8a0-4e87953225b0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85893729-d77d-47fe-b2b9-77820a21a5b1", "sighting_of_ref": "indicator--c836b376-9237-457e-8c9f-f14ddf4f1115", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba01a9f-e8f2-4cdb-b6e4-44c020bbee9f", "sighting_of_ref": "indicator--779db754-a1ed-46c9-9944-8bcaf5452010", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be3f9c9b-b48d-4f82-852f-128644bb45ba", "sighting_of_ref": "indicator--3a45b68f-45de-4607-92cc-25398be1f07a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79622f02-9c08-4336-b185-27e5a67b42fc", "sighting_of_ref": "indicator--dbdab9a7-5a19-488a-be46-a2ec1ac3b12c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e982084e-10e2-4da7-9d4b-369f088e9e64", "sighting_of_ref": "indicator--1d37574b-1acf-4656-b537-d40eb60772d8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--233bbe2f-56dc-48be-8eae-b396dc4b4543", "sighting_of_ref": "indicator--8402618a-a141-423f-9201-7b953a1c411a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c79ba57-e7bd-4d70-8832-a20d621bdc30", "sighting_of_ref": "indicator--e608fd10-e20d-4fed-8c47-a43a12902b89", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c70fe2f-05fa-48bc-8737-b24b3eb63519", "sighting_of_ref": "indicator--e608fd10-e20d-4fed-8c47-a43a12902b89", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee8f9532-1f2f-4761-9c1e-ce80feb02444", "sighting_of_ref": "indicator--e608fd10-e20d-4fed-8c47-a43a12902b89", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b2a7918-f253-40f4-b8d8-0928e35d452e", "sighting_of_ref": "indicator--89f9c70c-cfde-4ba3-8f06-d8b0a49ef77b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da3eaf6-be84-46fe-9a91-c98b63e3f441", "sighting_of_ref": "indicator--89f9c70c-cfde-4ba3-8f06-d8b0a49ef77b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349bdabd-27fa-44fe-80a2-5260a0af583a", "sighting_of_ref": "indicator--89f9c70c-cfde-4ba3-8f06-d8b0a49ef77b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b186e3-2faf-4cd5-89c8-3756310c4dd3", "sighting_of_ref": "indicator--c10fe286-a75e-4d7e-8f00-afedecb13a46", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d2c107-9da1-4104-8eda-b35e7bcdc667", "sighting_of_ref": "indicator--c10fe286-a75e-4d7e-8f00-afedecb13a46", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64936005-69e4-4f1d-bcef-4db910132ddb", "sighting_of_ref": "indicator--c10fe286-a75e-4d7e-8f00-afedecb13a46", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f219e4d-71be-4fbe-8e5f-71be21c209ef", "sighting_of_ref": "indicator--2fe10f4b-fe2e-42bf-8898-8b307bfdc86a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e59b503-b4eb-4a2a-967a-f6ef16df8590", "sighting_of_ref": "indicator--cdb71a52-3847-4b5d-9b8f-f1726d8f0b14", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf5c0db-fc13-4483-8c69-a3609f631526", "sighting_of_ref": "indicator--d83c1364-b9b0-4d80-83ec-d8170187a711", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ed4e73-47d5-42c3-8f5f-602b68158f6a", "sighting_of_ref": "indicator--cd6fb14f-7148-4e6a-95da-782367879182", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f514631-e605-4e6c-8304-5b1cf87e5e67", "sighting_of_ref": "indicator--cd6fb14f-7148-4e6a-95da-782367879182", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a4be43-14f5-4063-8154-8a44aad74247", "sighting_of_ref": "indicator--cd6fb14f-7148-4e6a-95da-782367879182", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d09ee3-32c6-492b-8b59-fa10757f7072", "sighting_of_ref": "indicator--bbc9ca24-560b-4041-a30d-fd8b6a50d10e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116d4646-95b4-4fdb-a3c0-12d02533d13b", "sighting_of_ref": "indicator--bbc9ca24-560b-4041-a30d-fd8b6a50d10e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9604fae9-d0dc-4b9b-81b4-c2cde99c9546", "sighting_of_ref": "indicator--03a0551b-a7c5-403d-a228-f42480e45fce", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33c85b4-e946-467d-ae93-debf9f2cc685", "sighting_of_ref": "indicator--528b4d5f-35ea-40c5-91cb-26d6e3b41fa9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee624e0-7500-4573-9916-4fdefda887dc", "sighting_of_ref": "indicator--528b4d5f-35ea-40c5-91cb-26d6e3b41fa9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--953d6757-568b-48d3-a242-a5f9251ed440", "sighting_of_ref": "indicator--528b4d5f-35ea-40c5-91cb-26d6e3b41fa9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f93697-23a3-420f-a57c-a9bb5d5340bd", "sighting_of_ref": "indicator--2745126b-9bb3-4edb-a302-3bbc50dc3e3f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6742362e-d0e2-4ef3-9d75-ee2dda9b9f4b", "sighting_of_ref": "indicator--ff20a521-dbac-476b-9615-8dcd1337f7aa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46c8976-bb40-4462-88c2-833dfb8fb4d1", "sighting_of_ref": "indicator--032794b1-f58e-41c3-b70b-e3b335c17fe8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2cae907-eefd-49af-812b-90b7f23d6cd7", "sighting_of_ref": "indicator--15791bb7-8396-4d6a-9fda-84e67ff3f5f2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e55242e-ee49-44b3-95f9-ef48c0400a9d", "sighting_of_ref": "indicator--b48a5cfb-53d3-4b4e-8dd8-532339fb4b94", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--637865a8-bfc1-4c12-9ef6-f2a62c2407a2", "sighting_of_ref": "indicator--d11dfc85-7ebe-4cb8-954c-454b7cd92c75", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc41933-efa6-460a-8537-41a5018df82a", "sighting_of_ref": "indicator--e6327d2f-5891-459d-ab8e-0113fbee9ad4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b81b7a-9487-401d-8bff-10cf3a9eb22e", "sighting_of_ref": "indicator--5625707e-06d9-4cb0-9dbb-bdb514e4f890", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff443f0-0feb-4d0a-9d5c-22a31ca59091", "sighting_of_ref": "indicator--bd73e485-14a3-452a-aac4-fa2ddde4e33e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f16fd9-2cb4-41d7-81ed-f5069163858a", "sighting_of_ref": "indicator--c61e5333-99ff-473c-9980-a4da7c56a8e6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772adc72-485a-4682-a6c9-996b534c8b31", "sighting_of_ref": "indicator--29f6ab6d-2226-48df-8b1a-9db22084dd18", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca5853f-5342-4319-8729-bf501b3ce368", "sighting_of_ref": "indicator--29f6ab6d-2226-48df-8b1a-9db22084dd18", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90536272-ea8f-4b71-8e79-046a4c43e1cd", "sighting_of_ref": "indicator--6ba5063d-bd75-4c65-a178-72a46813aefa", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59624705-20bf-416d-b6c8-5afdc023eb97", "sighting_of_ref": "indicator--4a61309a-b9c9-4244-91f7-b4e53b9b1fd1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee8c61d2-4719-4c82-b2b1-36d59767b192", "sighting_of_ref": "indicator--34b78316-ac23-4b39-b2ed-7c7f5f6c7b5d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96bbbf6c-c9e9-435a-aa0b-a76fe3ce1ab0", "sighting_of_ref": "indicator--9ac78ed8-16ee-4bec-9b3c-2481dd8a1080", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da42a6f-9ee6-4907-900b-b9b2249cb5f3", "sighting_of_ref": "indicator--b3b4fc19-c2f2-4b7f-a1dc-deb709bd5ad6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8046a5fc-8b61-433f-8583-149db6006409", "sighting_of_ref": "indicator--62d49df1-1171-4142-8d8a-e771e2f14f9f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2301a713-8181-49dd-b937-98701b728985", "sighting_of_ref": "indicator--244e1892-42eb-43da-a11b-083d66ced3b6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26fcd763-921a-48ed-9837-07e2bfa96e08", "sighting_of_ref": "indicator--29b8a6f1-2ee1-4bad-9a3a-7a6631cf25ad", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--550ca0f1-4347-49c0-b5fe-caf00a343e2b", "sighting_of_ref": "indicator--311ecc5e-a4b7-483d-afa9-183821fbef29", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae1f8dc7-4213-49b1-96c9-d63594241cbd", "sighting_of_ref": "indicator--35f5f150-ed7e-4422-907e-d60a66a55ad1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fbd1efe-c4e0-4f06-baf2-40d754d726aa", "sighting_of_ref": "indicator--ff8c6ef6-237c-4d7a-8be2-56053b3558f1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aecb4491-180f-43a8-8715-6f592ebc4109", "sighting_of_ref": "indicator--8e269e94-bdd0-41e5-ac94-95fe51ab9fb3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d4c0f0-de33-417b-a6d6-36da76e19aec", "sighting_of_ref": "indicator--012e37a2-78ac-4977-a17c-be3fa9c47059", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c671137d-e27b-4ea4-a609-7156e4474156", "sighting_of_ref": "indicator--b00dab99-74db-41a9-88e1-9a2572684f7f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab4a7c8-e592-4c63-9894-97d0b0539d90", "sighting_of_ref": "indicator--4e11f05e-d192-469b-83cb-09f715b74ecd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19cfe834-c49c-4888-aa25-fa9f6a952952", "sighting_of_ref": "indicator--9dcde660-029e-4b48-9bb5-917b513a41ea", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb69a88f-cadc-48d0-b170-dfadd195dfab", "sighting_of_ref": "indicator--c5d85506-3c4f-4e1d-a2c1-8a46df811f14", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b2b6a1-131b-45b1-9724-7f5de6647432", "sighting_of_ref": "indicator--1e70325f-94fd-4994-94e7-ad0b3ae91f0f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d726799-105b-4554-a230-d32b91b618f4", "sighting_of_ref": "indicator--f06fc643-1ed3-4ea4-9525-46765b18780b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afcef9c8-1f79-4d60-9434-0c8b1b2a8dc5", "sighting_of_ref": "indicator--e6b6d517-f62a-4212-b4df-682546b721f9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0643c0-97ef-442f-bb4c-37b74e97df18", "sighting_of_ref": "indicator--df8277db-028f-4171-b7a9-164f05754d8f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7245dbd7-c9c8-477c-ab7c-f7b201b77929", "sighting_of_ref": "indicator--635a1b59-fa22-42b6-97eb-07befbb66f56", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa23470-ce89-4fb1-b649-aa90eb2252b9", "sighting_of_ref": "indicator--2fb6005e-378f-4404-aa88-4d43d49dde04", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d95e2f5-11cc-4649-b3c3-f1bc1f6fe58c", "sighting_of_ref": "indicator--8a099bce-2c8a-42e2-86d5-ece0721740b0", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4b20c3-f438-4fb0-a86a-15589af1c218", "sighting_of_ref": "indicator--2cb1e655-3ff4-48cb-a240-4866de48c0c6", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a234361b-bd46-422d-830e-01af0a09e3d9", "sighting_of_ref": "indicator--004082be-4b20-4d92-995e-e21f0462f80d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5cc224c-5f9b-4ee4-adc1-715c73b835b0", "sighting_of_ref": "indicator--375936dc-c8b7-4ff7-bf51-a53098625134", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32cf91e4-34fc-454d-9001-0e4aa571fc31", "sighting_of_ref": "indicator--02255c94-bd08-43ab-99cf-ae5f0c7e83c9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8762e8-f52e-4f49-af9c-b2f74a2e905c", "sighting_of_ref": "indicator--c20fb284-dfa4-4f1a-abca-a6cbd36c213a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d9fd9d-0adf-42da-9fe9-75affda9780c", "sighting_of_ref": "indicator--c20fb284-dfa4-4f1a-abca-a6cbd36c213a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0afa295-dc4d-4c89-b9ef-b75508906c69", "sighting_of_ref": "indicator--98c5cbf2-6e16-4d76-af32-f50142f54758", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d683319-337d-4918-8789-eea1df4c3bb7", "sighting_of_ref": "indicator--dd423e6e-8371-4cb4-a241-3af941e4319b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a006783-713d-4632-b24b-b9d3d2b72c71", "sighting_of_ref": "indicator--8e110f35-f655-4768-a651-1ad83380eb7c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f749d965-dbf8-493f-a608-1980bedcf82d", "sighting_of_ref": "indicator--bdf7ae46-aafc-4a18-8735-f534b9249419", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c8c8cd-be3a-4713-b577-85a7f7accd64", "sighting_of_ref": "indicator--fb21f94d-4343-431b-b248-c684a80f9295", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73cb2f39-0bda-4bfa-bf00-c59dba8b3b72", "sighting_of_ref": "indicator--ea7fa2c1-79f8-41b5-a731-60099f5bd388", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c8b5fc-3346-4185-b5e8-330fb86c2063", "sighting_of_ref": "indicator--84e1455a-d208-4e7b-8bd1-1e4eeaae740a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baab2c93-ff9f-485a-9e0f-9bfc99c20bd6", "sighting_of_ref": "indicator--8c2959f3-185d-4075-8301-a064ce657e5a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d99c68-dd45-445d-9e41-43c32d912f84", "sighting_of_ref": "indicator--3af41f8e-c026-4811-8ced-e0ca0875b7d1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ef9194-56d5-4cbb-94a1-5375b51e92c7", "sighting_of_ref": "indicator--f183674d-d471-4ba4-ac1a-84059be94d68", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1062023c-abf1-4758-9e7a-1fcc55c88687", "sighting_of_ref": "indicator--a3440ed2-a64c-49db-930e-b428f0104006", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6688a2e5-5502-4e38-9746-1a3ebe701253", "sighting_of_ref": "indicator--b1794d66-38f9-4b46-9f2d-7fbf3b9702ff", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6611501-f8df-4dd0-b09d-89205ba3d06c", "sighting_of_ref": "indicator--e26eb517-e366-4123-af88-5ad8aab027f3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c9312f-212b-4977-81e4-3c82b08698a8", "sighting_of_ref": "indicator--4f9baf38-e8c6-41f1-a58d-c0cec921b809", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56a1a7d-3660-4c44-b325-29596e9a8e93", "sighting_of_ref": "indicator--f55e80e5-d609-4f3c-b5d0-ef5e7fbc64b1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e0cdac1-0ecc-4e6b-a919-dc0b8fe5f974", "sighting_of_ref": "indicator--a8d62e4e-8076-489f-8fc2-c5ae34a58b1b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dbf47ba-2c96-463c-b4ec-803a2b8fedee", "sighting_of_ref": "indicator--bbcc05db-531c-43f3-9963-2d36e538996e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f6597a-b40e-48b2-8971-d1283beccefe", "sighting_of_ref": "indicator--bbcc05db-531c-43f3-9963-2d36e538996e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7bdd2dd-acfd-4d32-91c5-8103f69d249e", "sighting_of_ref": "indicator--f4d0513f-effe-4f39-9ff7-3f8b8dfc6b78", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--733c64f4-d8dd-42f2-8a70-c7671edd0597", "sighting_of_ref": "indicator--45fe5b2d-a5d2-48ea-8d52-5f28a1883b7a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25a04bc-8421-4ba3-ac25-9077c9af25d8", "sighting_of_ref": "indicator--df275826-133d-4518-b0fb-9d7e2c91b081", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2425845c-e6bb-4c3b-a66e-2901cd8fea88", "sighting_of_ref": "indicator--df275826-133d-4518-b0fb-9d7e2c91b081", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a84bafc-1afa-4217-a6ca-d202e7e9d9dd", "sighting_of_ref": "indicator--df275826-133d-4518-b0fb-9d7e2c91b081", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6628e4a8-e4d2-48b5-93ae-7a6b03bbdb37", "sighting_of_ref": "indicator--aac0f189-a7eb-43b9-bfc3-2559db02615d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--652e6b6e-8b5b-429c-b06f-2f24331dd961", "sighting_of_ref": "indicator--f6c6435e-c779-4082-b7b4-96d089f297c5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d0eaf6-5d9a-4976-946b-a1e077947e14", "sighting_of_ref": "indicator--b8384d93-7cc7-4f23-a188-6aa8f0b9460d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b79b7b-1f5e-4528-9958-1923c2338e43", "sighting_of_ref": "indicator--fe1ba7f7-3ebd-44f7-8957-bc1674e6f3a9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66661c2-e72a-4e94-aca4-6f23b122bf02", "sighting_of_ref": "indicator--504c0117-0859-4e5b-883b-5a0f51d6b3bc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f481e8-8beb-4acd-9f25-54bc876f901c", "sighting_of_ref": "indicator--40048171-3279-4e2c-826f-4f862a74c3b8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f796d57-16a1-4b4d-86b9-ec832ae1eb89", "sighting_of_ref": "indicator--80b86c5d-4836-4263-a0b1-5780b3671386", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f3dd1a-6481-4bb6-a10a-90fa5c4b6129", "sighting_of_ref": "indicator--511c19e8-f297-44fb-8e12-3e15611d985a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bacf10e3-7706-4bb7-8ebc-c1bbacd3420a", "sighting_of_ref": "indicator--f0967e82-cad6-48c7-9695-d23c6dd40b96", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567f63d0-ad4b-4fc9-8c2a-c8ab42d08c37", "sighting_of_ref": "indicator--fd1d716d-2e21-41db-ad5a-561b56574abf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dbb441d-a43d-4172-a518-00107b4d7328", "sighting_of_ref": "indicator--3d0c0aa1-1364-4ab9-8664-88a25db51a09", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b97868-62e4-4680-a43f-cbd332836376", "sighting_of_ref": "indicator--71110a0e-c5a2-46db-b01f-6dc2dddda4df", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e5f05b-5727-4003-b85b-6ecdca5c7405", "sighting_of_ref": "indicator--41f53ba6-2c5c-4066-b66c-f939f5e1f3d2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef62e2a8-a495-4efb-a54e-1608ed31d48c", "sighting_of_ref": "indicator--41f53ba6-2c5c-4066-b66c-f939f5e1f3d2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ab4312-def9-4171-a01d-bb667d445105", "sighting_of_ref": "indicator--2e6398a7-edfb-4a02-8576-d82047504073", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27addafa-7e63-4326-b582-559cb3af9d6a", "sighting_of_ref": "indicator--2e6398a7-edfb-4a02-8576-d82047504073", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da686708-f5d6-4a39-831f-936c8ced96d4", "sighting_of_ref": "indicator--2e6398a7-edfb-4a02-8576-d82047504073", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b77b8d3-767f-491a-bd4b-de7bae5bfb7d", "sighting_of_ref": "indicator--9689c64c-8497-44b9-b782-f0004329a120", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6220be1-dbe7-4f23-8d65-f2aeffc12c18", "sighting_of_ref": "indicator--2f9be9fc-b4d6-4b77-8242-6caa347da4fa", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76301146-b4b9-4549-bea9-cd225aa281d9", "sighting_of_ref": "indicator--386880a6-b90a-4d84-b181-bf25207f7165", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3040b480-9cf2-469d-8dad-8e68d6be2e8a", "sighting_of_ref": "indicator--6dbb5172-9a9f-47a0-89e3-1ff8060fcdb8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--756d3f93-14eb-47e6-9652-ebf1a2ec64a5", "sighting_of_ref": "indicator--e92230ee-e43a-4519-bee8-ae69ea0b7a3b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d8c960-98b6-47af-8104-852ea55a2644", "sighting_of_ref": "indicator--aff7bb2b-81a1-4685-8023-b6a43189566c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--899c159e-2131-42d6-b3d1-8548dc64b00d", "sighting_of_ref": "indicator--2f9c8111-c5f6-4358-a4f3-303bd42b6a02", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d2d0100-05d6-4a31-9e6f-1e1fc0238183", "sighting_of_ref": "indicator--ff074867-5297-4eee-b5d2-58b9d2723b04", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c13780e9-c3e9-4239-9b62-fc3e33c28c10", "sighting_of_ref": "indicator--212e8587-13d0-46ae-9f58-082454317254", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae0e03a-5509-4494-8393-76accbc3c68f", "sighting_of_ref": "indicator--212e8587-13d0-46ae-9f58-082454317254", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34825663-bcf3-4ffc-8f4a-fed08fce4c78", "sighting_of_ref": "indicator--74715b3f-e580-4294-906d-9f0e1b06db78", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30464667-6752-4b3b-b861-d9cc338ecbcd", "sighting_of_ref": "indicator--0e57a6ee-4f34-4696-8d47-63cbe0589803", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5591b30-6ad3-44ac-806a-d7604d5b4012", "sighting_of_ref": "indicator--68311bbb-6d4c-4bef-b4bb-72a727fb9318", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e6b70f-ed4e-4dfe-978f-d48618a9d6f3", "sighting_of_ref": "indicator--f95df14a-8e3b-4518-b3d2-996fe0d1e703", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e227f572-5c04-4f91-97c1-189215173d22", "sighting_of_ref": "indicator--dc5ccb8e-565c-4b14-aa41-ddf81f2669f7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--857a88cd-07a6-4147-8925-fe76706d4c54", "sighting_of_ref": "indicator--221d24f5-8fea-4a05-a1d5-e43220767077", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662846ca-84a5-431b-8f6c-2ec729605a0a", "sighting_of_ref": "indicator--e2d04566-ebe3-4f12-950d-b393d20c5db7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc691c80-f702-4ac2-978f-df1cb7079fa9", "sighting_of_ref": "indicator--e2d04566-ebe3-4f12-950d-b393d20c5db7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b0b7bd-d70e-44e5-bbbf-71377ad3d2ce", "sighting_of_ref": "indicator--36db9145-df31-4abf-8ad8-74282d47d00b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13dc222e-1eeb-4de5-ae7d-ca072ce3b88d", "sighting_of_ref": "indicator--9e6da3ca-b65f-4814-b018-96b85a4fdfad", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b625b282-30f1-4a29-837a-f85cfb98cac2", "sighting_of_ref": "indicator--e48927f7-c6a6-48b1-a902-9d19fd28af50", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b64d43bb-a8af-44aa-861e-6e8d3814c87b", "sighting_of_ref": "indicator--8a3f79b4-225e-4fc7-afbe-3ea50ea6a298", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb489128-2fdd-4eca-aaa8-ed5063e8aebb", "sighting_of_ref": "indicator--8a3f79b4-225e-4fc7-afbe-3ea50ea6a298", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641c0393-35c4-437b-8b0d-e6bf45d0b850", "sighting_of_ref": "indicator--88d74c63-2caa-444f-963c-c56b0ffd759b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa49b3c2-9f60-4aec-8209-76ff8331860b", "sighting_of_ref": "indicator--fe53fb65-27cd-4d56-bbe8-8d6aa0ddbfd1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f794250-f01a-4979-a655-00ccae5c59ce", "sighting_of_ref": "indicator--4cbc2755-f781-47ad-8ece-50eabb23c1ed", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b38055d-c090-4c30-947a-8dda44e07592", "sighting_of_ref": "indicator--8f0c3814-a566-48d0-a91e-e7b8d8137a8b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1b68f8-0a3b-4490-bc41-8e8335cc8f95", "sighting_of_ref": "indicator--022449c0-c0bf-4fd3-9450-863430e2c9b6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7515ccc-a899-47f2-95d0-3306c5743e82", "sighting_of_ref": "indicator--d9320171-8ed4-4bda-9caa-8ac1ae5bf29f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e767cb3-eb6f-4462-882a-6ce90c5cb169", "sighting_of_ref": "indicator--2b28ed61-2f96-4042-b7a4-e85e67ef3379", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8434d60-9c7d-4e4a-99df-6b97aba01ce1", "sighting_of_ref": "indicator--fa4fba7b-e83e-4551-b690-a368d4ecc3a9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9477c6a0-c9c0-47fe-8b68-477ec60c806e", "sighting_of_ref": "indicator--ce708bcf-1590-432a-a12b-4e5e6f45100b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8838db53-ea7c-4c1b-b105-ce0d8ceeece1", "sighting_of_ref": "indicator--85a6101f-6a10-4f27-8b4e-9a70a07f5b0d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--452f040a-3564-457e-a624-359038144a90", "sighting_of_ref": "indicator--fa19d88c-f45e-4e3b-baaf-26e8a398c95d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a06081-aa4e-4b9c-b676-d9822420cc9a", "sighting_of_ref": "indicator--debac202-ed51-4e30-bed7-f45f921297e9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea39e689-ae98-46be-b06b-5bccc8d6742e", "sighting_of_ref": "indicator--1b6eecb0-e4f5-4650-9112-f27b27a632d8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a97def25-b0fb-4c25-81d8-137cb68b7e08", "sighting_of_ref": "indicator--6cd54bd5-bbe5-4625-9b4c-396f64b7e306", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--353c2ca5-dc3f-436d-8eb5-364a56b6660d", "sighting_of_ref": "indicator--5d881936-47fd-49d7-ab43-3895648e9976", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24207678-7e10-4c38-9153-26fe99639a90", "sighting_of_ref": "indicator--5d881936-47fd-49d7-ab43-3895648e9976", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc15dd2-d334-4477-a65c-c6c3341d2e41", "sighting_of_ref": "indicator--5d881936-47fd-49d7-ab43-3895648e9976", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec53d06-3c7c-4e79-bf32-eb865e8c0170", "sighting_of_ref": "indicator--9fd3067e-81a0-4179-ba93-223fc623a18a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6993f67f-5c35-42a7-97ba-390f99e3b50e", "sighting_of_ref": "indicator--9fd3067e-81a0-4179-ba93-223fc623a18a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba88195-0a2b-412b-87e6-606953559b7f", "sighting_of_ref": "indicator--9fd3067e-81a0-4179-ba93-223fc623a18a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a959569a-7698-4ce0-8e0e-0b636f522f75", "sighting_of_ref": "indicator--6604347b-6113-4bdd-8070-cd20bb5da581", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ff636b-832f-4048-b1cc-efb8c3448ace", "sighting_of_ref": "indicator--6604347b-6113-4bdd-8070-cd20bb5da581", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4191da6-2cd3-4a03-84c3-2bef2b64da1e", "sighting_of_ref": "indicator--6604347b-6113-4bdd-8070-cd20bb5da581", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--729a7a56-61d6-457b-b8a4-f16aea43b87e", "sighting_of_ref": "indicator--6630089e-15d0-411c-8a2f-cfe5d2e18e70", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0340a30f-91e8-4c15-950d-649892d8b5f1", "sighting_of_ref": "indicator--6630089e-15d0-411c-8a2f-cfe5d2e18e70", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898458fc-6e64-4b51-b177-22027e576672", "sighting_of_ref": "indicator--6630089e-15d0-411c-8a2f-cfe5d2e18e70", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5fd2a0b-cd78-412e-bfe9-f200a29deae7", "sighting_of_ref": "indicator--221178dd-7d61-4c93-8e12-8c3fef1d3718", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7130a2e2-5006-4c65-8104-d6f980908449", "sighting_of_ref": "indicator--221178dd-7d61-4c93-8e12-8c3fef1d3718", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a1e19d-0a60-4453-9ed1-42c9d0b062f2", "sighting_of_ref": "indicator--221178dd-7d61-4c93-8e12-8c3fef1d3718", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf58b05-7dfa-4067-9a18-043c5b7ed82d", "sighting_of_ref": "indicator--c4a57be6-0be9-4919-b9a8-324e73770c18", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253251b8-0670-4b84-89d1-9fa9402972ac", "sighting_of_ref": "indicator--c4a57be6-0be9-4919-b9a8-324e73770c18", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d11c26-0a73-41e8-816e-6e1f781ea1ee", "sighting_of_ref": "indicator--c4a57be6-0be9-4919-b9a8-324e73770c18", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2189e19b-0a47-4c7e-aa9c-e56ace0e5c12", "sighting_of_ref": "indicator--92c0c78c-df0b-41a0-b1eb-3cb4f6b0c257", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4d7738-e150-4509-b430-d47b65c466c8", "sighting_of_ref": "indicator--92c0c78c-df0b-41a0-b1eb-3cb4f6b0c257", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe20f60-b9fc-45f5-9e36-5522a2f98250", "sighting_of_ref": "indicator--92c0c78c-df0b-41a0-b1eb-3cb4f6b0c257", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86377122-8f20-4aab-8e2d-00775d707457", "sighting_of_ref": "indicator--9c422af6-c9f1-4477-bed4-d66e95d289c2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d746ec-17e7-45c7-85f4-0a9c6430aa57", "sighting_of_ref": "indicator--9c422af6-c9f1-4477-bed4-d66e95d289c2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29131dfb-d8c1-41e0-b13c-3a0a200d8fda", "sighting_of_ref": "indicator--9c422af6-c9f1-4477-bed4-d66e95d289c2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb1c7ee-1920-44b2-ad81-2f64977e5b6d", "sighting_of_ref": "indicator--b2205974-1de6-4a48-9ea5-5d4a22c19aec", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603e05b3-02c4-4fee-9b07-457b52014128", "sighting_of_ref": "indicator--b2205974-1de6-4a48-9ea5-5d4a22c19aec", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da87bf3-df59-4a3e-a0a1-99aa68eb7117", "sighting_of_ref": "indicator--b2205974-1de6-4a48-9ea5-5d4a22c19aec", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5731130-a203-4257-8f29-7a83f6c7a6b0", "sighting_of_ref": "indicator--16f16c9e-b5dd-4beb-97cd-b7c5ff353668", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f22599a-2bcc-4b3c-8764-213114dab447", "sighting_of_ref": "indicator--16f16c9e-b5dd-4beb-97cd-b7c5ff353668", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72bfbd77-daf0-43ed-8c3b-1f29cbfeecfe", "sighting_of_ref": "indicator--16f16c9e-b5dd-4beb-97cd-b7c5ff353668", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9cebf3-e8bd-4c96-a132-f6696406ffc7", "sighting_of_ref": "indicator--8f240092-7d8a-43d3-860e-1768b8766845", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb083bc-6b3c-4997-b57d-4eb650e19c6b", "sighting_of_ref": "indicator--8f240092-7d8a-43d3-860e-1768b8766845", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a21d1a9-b41c-45e9-9ebd-1185fd71b39d", "sighting_of_ref": "indicator--8f240092-7d8a-43d3-860e-1768b8766845", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f88939-a748-4cfc-ab24-cb1dd3e2618b", "sighting_of_ref": "indicator--1b8a49d4-fdaa-4c3c-b220-b13ba3995df2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--497c65cf-4732-4939-9835-59a1604d6b2d", "sighting_of_ref": "indicator--1b8a49d4-fdaa-4c3c-b220-b13ba3995df2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387efe9e-c87d-41cc-9d98-b192e3d3c860", "sighting_of_ref": "indicator--1b8a49d4-fdaa-4c3c-b220-b13ba3995df2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb36e32-fbb1-415a-9778-503837a971b2", "sighting_of_ref": "indicator--02381b80-fa2a-4e56-a43f-9ffe06b74efe", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de99ea78-3379-41d1-a94f-5acdf0865385", "sighting_of_ref": "indicator--02381b80-fa2a-4e56-a43f-9ffe06b74efe", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70b2217-fdb5-4349-8d44-a3353c738b26", "sighting_of_ref": "indicator--02381b80-fa2a-4e56-a43f-9ffe06b74efe", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cfb3867-3843-4629-8450-5f348786a01e", "sighting_of_ref": "indicator--2c568300-9371-4383-917a-7bc54ce6d07b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51cb2a4e-f273-4c8c-806e-881d1490de3f", "sighting_of_ref": "indicator--2c568300-9371-4383-917a-7bc54ce6d07b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc3ad043-2218-481e-8a78-d9987e9e4319", "sighting_of_ref": "indicator--2c568300-9371-4383-917a-7bc54ce6d07b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c8e0a2-2ac2-4ebc-8ee2-bea9a7bec5ff", "sighting_of_ref": "indicator--728c61f2-6dfb-4757-8bb1-3f3a60f2f7d6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--164a2001-059f-49b8-bff1-78cf6f77c082", "sighting_of_ref": "indicator--728c61f2-6dfb-4757-8bb1-3f3a60f2f7d6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19815041-9909-48f5-9ac5-629fbf06b194", "sighting_of_ref": "indicator--728c61f2-6dfb-4757-8bb1-3f3a60f2f7d6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9df336e-70d4-47c7-ac30-c4c304322c34", "sighting_of_ref": "indicator--484fb4ed-641a-4c53-8cce-e702f611f212", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f6d31b-7edc-434d-9961-c95ce9eb3663", "sighting_of_ref": "indicator--484fb4ed-641a-4c53-8cce-e702f611f212", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--637b1f3f-03c7-4349-8f79-181004b3ab90", "sighting_of_ref": "indicator--484fb4ed-641a-4c53-8cce-e702f611f212", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--042c0d13-c08b-40f9-a912-24f6db1cf390", "sighting_of_ref": "indicator--ff9ae686-4fee-43a8-9e8a-4fe48a48ef82", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca30f0af-192e-4601-9b0d-bfb884366018", "sighting_of_ref": "indicator--ff9ae686-4fee-43a8-9e8a-4fe48a48ef82", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc046f3d-7819-4c08-9049-86643a75871c", "sighting_of_ref": "indicator--ff9ae686-4fee-43a8-9e8a-4fe48a48ef82", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b73a3eb8-4c62-40fd-b524-4b411fea5b4c", "sighting_of_ref": "indicator--428277a3-8c88-4f63-a219-bf86ff995146", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8661fd30-389b-4645-a532-e020b22be4e0", "sighting_of_ref": "indicator--428277a3-8c88-4f63-a219-bf86ff995146", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05b70063-fced-4810-8604-5e90cd3a6f10", "sighting_of_ref": "indicator--428277a3-8c88-4f63-a219-bf86ff995146", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f312af67-5cdf-4b11-8ee4-ff21eea34d2d", "sighting_of_ref": "indicator--0a31a3da-ec90-46ee-a26c-d9b128e90630", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9062cf-c422-425c-8971-882ec2483c1f", "sighting_of_ref": "indicator--0a31a3da-ec90-46ee-a26c-d9b128e90630", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aeae2b1-c260-4b41-a791-ffc4d0042e30", "sighting_of_ref": "indicator--0a31a3da-ec90-46ee-a26c-d9b128e90630", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ff8de6-4727-4e6d-9b37-18e7917ddbd5", "sighting_of_ref": "indicator--bf35b74a-f03c-41a2-b249-ee15d4e72116", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031bfb45-ccdd-4739-b013-7e151eb81262", "sighting_of_ref": "indicator--bf35b74a-f03c-41a2-b249-ee15d4e72116", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79295c3d-b858-4a57-87ff-f06b03a6aae6", "sighting_of_ref": "indicator--bf35b74a-f03c-41a2-b249-ee15d4e72116", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f300f3-80c6-4681-8df2-7cdb8b9aa64b", "sighting_of_ref": "indicator--c259a9e4-438a-4f1c-8244-43c4d4052765", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb14f54f-5362-412c-96cc-32eb5b99df0f", "sighting_of_ref": "indicator--c259a9e4-438a-4f1c-8244-43c4d4052765", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f0e0a1-b717-4f5a-accf-75151d6a143a", "sighting_of_ref": "indicator--c259a9e4-438a-4f1c-8244-43c4d4052765", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46bfcf31-69f0-428f-8c21-6ebc965596fc", "sighting_of_ref": "indicator--a99cfefb-0e15-4dd0-a072-ee2ae6100447", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a823107c-0f8a-4cbe-9be9-a5b89d9b77cc", "sighting_of_ref": "indicator--44315e20-9130-46fc-9f48-b11cea36f8db", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ed2cb4-94ea-457f-ae14-097b43e2d1c7", "sighting_of_ref": "indicator--42e5b69a-9c3f-4a83-908d-dd0b9c54ade7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da39d00d-f631-4b8f-92e9-2284ef9a4a7b", "sighting_of_ref": "indicator--cb909128-2ec2-4c85-b547-4b38e37bfc6f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49b8a4b-2923-454f-8474-a299d36a3002", "sighting_of_ref": "indicator--fa914452-7287-4e29-bc69-89ce84900997", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6ec777-ae6f-4913-aac8-7cd5d8db9d1f", "sighting_of_ref": "indicator--f5fa515f-cd77-4916-9850-69be81659fe4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce576fc5-db97-4305-9448-6f23b2883d63", "sighting_of_ref": "indicator--d7ae946c-bb2e-4c88-9fc0-1562b4f875fe", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e010760a-f28a-48e8-87af-12bed2b4759b", "sighting_of_ref": "indicator--a12bc69a-7284-4e29-978a-f375a52f9cb6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2802422-2e65-4c78-8008-fd4888839f88", "sighting_of_ref": "indicator--c9915824-2726-4e4d-a9c6-383dddc16e34", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c082a74d-fcb2-42c5-b124-9044c6300152", "sighting_of_ref": "indicator--c45917ac-a255-4d66-855e-ff7ea310def1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e6feb2-493d-4529-9292-087a9f2b767f", "sighting_of_ref": "indicator--c45917ac-a255-4d66-855e-ff7ea310def1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e1f0c9-c7bc-4fd6-a7da-e485b466a64a", "sighting_of_ref": "indicator--c45917ac-a255-4d66-855e-ff7ea310def1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f029ba2a-d395-45ec-949c-57d69d6a2cc3", "sighting_of_ref": "indicator--1be149cd-3cde-4534-a9c8-1c34e32b46e1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93d5e88-7cd1-4672-bdf4-e0c64b6403d1", "sighting_of_ref": "indicator--1be149cd-3cde-4534-a9c8-1c34e32b46e1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb079689-bbcd-4581-aa19-40e6acff2962", "sighting_of_ref": "indicator--1be149cd-3cde-4534-a9c8-1c34e32b46e1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e851c8-d5c9-40c6-8b81-0b25c74bd211", "sighting_of_ref": "indicator--4bfc325f-0269-4354-af43-40bb04768ca0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b591d1b0-1dfd-433a-9843-50e72da9d78a", "sighting_of_ref": "indicator--4bfc325f-0269-4354-af43-40bb04768ca0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f2d2ae1-018d-46a7-9c7c-f960f384486c", "sighting_of_ref": "indicator--9a0b186c-22c6-41c3-965c-c1fdc1822970", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78375584-4a81-43d5-a403-6691921ccaaa", "sighting_of_ref": "indicator--6a8f2565-4ed8-48e2-8673-ec21064e74ea", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3846960-aada-4721-a151-cfdd49f0fc4c", "sighting_of_ref": "indicator--2ae78696-2a29-42e5-9f54-10de23abffdc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6962e85-41ad-4756-b0ad-7e5992e6e47c", "sighting_of_ref": "indicator--b1c75859-a73f-4a6c-8ef8-b378b49b9b1d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd39bcd4-5bec-425f-9d13-2b44ea575d3c", "sighting_of_ref": "indicator--9f0e2680-21bd-429e-8eec-70406e70edc8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c8f373b-ac4f-43b6-bfb4-41bb74c121d7", "sighting_of_ref": "indicator--279433e2-9884-4f6f-918c-da298d584dc4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b27c5474-6a77-446f-9365-fa3d3c59f613", "sighting_of_ref": "indicator--e069d5cc-cae7-48b5-b662-f24005b62f59", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66373076-14a3-46cb-aa5b-b777a318e995", "sighting_of_ref": "indicator--166c9c98-b423-404d-94a8-d5fa3c894301", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ae7ebd-6768-42ff-a439-c42784d0f016", "sighting_of_ref": "indicator--c42c1c29-614b-4fa7-8be5-a9c493beb36d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d3acd2-708c-4e6f-857f-5abc39188ccd", "sighting_of_ref": "indicator--c42c1c29-614b-4fa7-8be5-a9c493beb36d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1fbffa-7ca0-471e-a36b-b2888555af95", "sighting_of_ref": "indicator--c42c1c29-614b-4fa7-8be5-a9c493beb36d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c9a08bd-52ce-4228-b469-239d9ba2eccd", "sighting_of_ref": "indicator--33356df4-5c2b-4e2c-bea0-3ea12f980555", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d2fbc2b-e76a-4f8d-a48b-3482a739fa5a", "sighting_of_ref": "indicator--29110daf-91a9-418e-ac24-f36916681f39", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a4542e6-68e0-4600-9f80-c8c256e4fbc4", "sighting_of_ref": "indicator--29110daf-91a9-418e-ac24-f36916681f39", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19f7819-fa62-49ca-b133-ce5ef10c328f", "sighting_of_ref": "indicator--29110daf-91a9-418e-ac24-f36916681f39", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c08785be-398b-4f46-a843-08a2ec31d010", "sighting_of_ref": "indicator--373979b4-c0cb-4dd1-a1d2-755dc7d27ee3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c916e71-a6f9-4aad-aa93-c06d8d3337aa", "sighting_of_ref": "indicator--3421311d-2792-41da-a458-25b1e973cfde", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb84b406-2285-4159-9674-2b4be549ae38", "sighting_of_ref": "indicator--e04bac74-273d-455b-a0b7-28386fbe59b8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d654bf98-39b5-4e84-a382-34f86cd91d68", "sighting_of_ref": "indicator--e04bac74-273d-455b-a0b7-28386fbe59b8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--629436d5-2586-4a17-82f9-db2d0f6a5fbf", "sighting_of_ref": "indicator--e04bac74-273d-455b-a0b7-28386fbe59b8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f53ec6-0bac-4b21-b797-546c377ea871", "sighting_of_ref": "indicator--814c2248-6683-4e8a-ad8b-abb6eb7ac652", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be3f66a-d99d-45a8-bedc-60086bee33be", "sighting_of_ref": "indicator--814c2248-6683-4e8a-ad8b-abb6eb7ac652", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54600a05-cd2b-41f5-9ad8-47128636672c", "sighting_of_ref": "indicator--814c2248-6683-4e8a-ad8b-abb6eb7ac652", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cafb1ce-b6e2-4248-8318-2ff524a721f8", "sighting_of_ref": "indicator--34cecbbb-4517-4dc5-baa3-02ff152f638a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27341b4a-4a65-49ac-a154-d2e718899931", "sighting_of_ref": "indicator--34cecbbb-4517-4dc5-baa3-02ff152f638a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d64ae91-008a-4fe9-9597-c91e909e5864", "sighting_of_ref": "indicator--7650a7d3-2c16-4190-8add-3281247f6719", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273fc4d9-ea04-4fdd-b539-a6c5356af754", "sighting_of_ref": "indicator--af505955-c205-4cb3-87d3-e5088270ffe1", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda35135-4141-437f-a4ad-097a57b262d0", "sighting_of_ref": "indicator--e70901d2-271e-4606-84c5-763e82a33eb0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa536f92-c850-4524-8d79-a5ba5c2c1c62", "sighting_of_ref": "indicator--e70901d2-271e-4606-84c5-763e82a33eb0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9df4770-663f-4ef9-b3a2-884783aea419", "sighting_of_ref": "indicator--e70901d2-271e-4606-84c5-763e82a33eb0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422cf0af-731f-4ce6-9c8b-c387d0ff91b5", "sighting_of_ref": "indicator--822d6f06-bd2f-4d62-bcf7-8b92870ee088", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd25936d-9c33-4993-b99a-ffb0025cb4f4", "sighting_of_ref": "indicator--822d6f06-bd2f-4d62-bcf7-8b92870ee088", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b93439-1386-4c85-b1ab-a516a8a8fbe3", "sighting_of_ref": "indicator--2c7305a6-756a-4ce7-935f-a12a13207b07", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f54619-6aeb-449f-9fd7-1fb9870f7d98", "sighting_of_ref": "indicator--0c00741a-c2dc-4acd-b85c-7032cb1a7266", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a0a896d-fc64-4749-bc8c-a1425741d1a2", "sighting_of_ref": "indicator--175c56ce-fc61-4c07-8d95-2e379d6d41bd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47a9b8c-80df-4440-a734-925aee4e24ea", "sighting_of_ref": "indicator--739c84be-7b25-4f78-8e5f-64ed7bbee9d2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf5a33f-fa3d-41e2-9ad2-070c418621e0", "sighting_of_ref": "indicator--d19c9af1-0aef-459d-a709-e6eb099ce113", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d085e5fb-4cf4-4ed2-9ba9-645d71d056ac", "sighting_of_ref": "indicator--172e559c-a6bd-460a-88fd-07fde4b170be", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6470ad22-c04d-480a-9b99-b621824d445f", "sighting_of_ref": "indicator--7953ea79-b3de-4c23-b415-25f1f2f788e4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e5c285-0e36-4009-b216-46293d8cd612", "sighting_of_ref": "indicator--b37d37d6-8128-45f3-9448-853ebcb87ca4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357a6d77-3db6-435e-a8dd-fe95447f90f6", "sighting_of_ref": "indicator--b37d37d6-8128-45f3-9448-853ebcb87ca4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b7819e5-b3f1-4207-818f-1af393ca35d1", "sighting_of_ref": "indicator--0aac8bdb-3d7c-4edb-b726-902ee2113a2c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e1dfcd-09a4-4bee-89a2-7ce0ca54abd5", "sighting_of_ref": "indicator--a7a8eedb-9c12-4e54-b134-8cfa91c023ec", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27cb6f75-7663-4bf2-a97d-ee67299b1d93", "sighting_of_ref": "indicator--2bbb9b23-401b-41a4-996d-3a737ee925f7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad0776c6-fc47-4a58-8af5-1fdc875fd118", "sighting_of_ref": "indicator--2bbb9b23-401b-41a4-996d-3a737ee925f7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a45a760b-2871-47b6-97c0-78eed23e7e21", "sighting_of_ref": "indicator--6fd5bab3-f5d9-461f-9663-9bca32288f54", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0acce8ea-7bb5-42cb-86e8-ee87ae07943d", "sighting_of_ref": "indicator--6fd5bab3-f5d9-461f-9663-9bca32288f54", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326ecef9-2674-43a1-866f-ba9113ff5143", "sighting_of_ref": "indicator--66f3a593-96bd-4bcd-bb64-ca247ede4b5a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e15ed9c-e608-4b3a-ad12-ccadac5790f6", "sighting_of_ref": "indicator--1c5b95c0-fcfc-42c8-9141-0e4d269330d9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef3aad2-5296-4f5f-81bc-64a3af9f2eba", "sighting_of_ref": "indicator--7ed89a86-da77-4cf2-817a-b124016d1a23", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3856fd8-e194-4d72-9fad-994b97fa23fa", "sighting_of_ref": "indicator--7ed89a86-da77-4cf2-817a-b124016d1a23", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e5967d5-add5-4a63-ae4d-1da63ae5266a", "sighting_of_ref": "indicator--7ed89a86-da77-4cf2-817a-b124016d1a23", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ee1a39-5a8b-4339-bfff-67427794fa77", "sighting_of_ref": "indicator--a23f43ff-a1dc-4e97-aca5-9ad8ed696cce", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0b454d-a43b-49c2-8b9e-c486f48a67df", "sighting_of_ref": "indicator--a23f43ff-a1dc-4e97-aca5-9ad8ed696cce", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--115f292c-74d0-4c38-87cc-5c2214ec95ac", "sighting_of_ref": "indicator--1fe93e13-8ab1-45a9-9425-6ef1aba82309", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d10552e4-e849-4bca-a33e-ff05e30558a6", "sighting_of_ref": "indicator--81832378-4712-42ef-98cd-dbdb591e61b6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecbaa572-c772-456c-a0cb-751a3abfb9c4", "sighting_of_ref": "indicator--7a2dd310-078d-4e12-aafe-2ae23ce01e06", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97db9a7-dca7-4ee0-af25-68fa9048a0d9", "sighting_of_ref": "indicator--7a2dd310-078d-4e12-aafe-2ae23ce01e06", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33bfefe-aa26-4e5b-a3bf-fc21c6a49548", "sighting_of_ref": "indicator--1da3c1f4-dc01-4451-a647-7dcf379137cd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba7fb73-59b8-4cae-a245-13bbd33db44b", "sighting_of_ref": "indicator--1da3c1f4-dc01-4451-a647-7dcf379137cd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8565145-647b-4507-b57b-acffed19990c", "sighting_of_ref": "indicator--346f84fe-9d3a-42ef-a674-6d6b3178f99c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f5deb20-4797-443a-a1dc-0d4502be0c64", "sighting_of_ref": "indicator--be464bcf-276d-4563-9627-15694a1794f4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22fa21c5-348e-4907-bdee-c367b0eb4817", "sighting_of_ref": "indicator--be464bcf-276d-4563-9627-15694a1794f4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29af1d5-59b7-4b0a-8821-9267435758a7", "sighting_of_ref": "indicator--7da1ff5e-0ba7-446e-8238-2dbc7d0d5ce8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99caaf0a-6bc8-4981-9bcd-d236725eeac2", "sighting_of_ref": "indicator--7da1ff5e-0ba7-446e-8238-2dbc7d0d5ce8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5fde4a5-6cfc-4837-9659-a52c51a879b5", "sighting_of_ref": "indicator--7537d4ab-fa29-4b74-95a6-a269f0b42fd8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3fdfdc0-9e96-48eb-a5d7-fc1a4e119e34", "sighting_of_ref": "indicator--7537d4ab-fa29-4b74-95a6-a269f0b42fd8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc35b7fc-4dc1-41b3-ba83-3b8cc0b3b17d", "sighting_of_ref": "indicator--7537d4ab-fa29-4b74-95a6-a269f0b42fd8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--630a9ec5-73a3-47e5-a783-48ba2c1872a9", "sighting_of_ref": "indicator--77b5e913-02e4-47db-8238-3ca6cd4eea1b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a46fc337-10aa-4a96-9ff1-07ed8a326903", "sighting_of_ref": "indicator--77b5e913-02e4-47db-8238-3ca6cd4eea1b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--826b69e0-355f-4c1c-8432-3513416f8676", "sighting_of_ref": "indicator--77b5e913-02e4-47db-8238-3ca6cd4eea1b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e61571dd-be22-421f-a9a7-bafe53db573b", "sighting_of_ref": "indicator--cad22c3f-8d50-4bb0-9b0d-0168f11a970d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e87183e-3a35-4b19-84e9-31e234e3a073", "sighting_of_ref": "indicator--cad22c3f-8d50-4bb0-9b0d-0168f11a970d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd6c25f-84b9-4222-b57d-49ff7da02777", "sighting_of_ref": "indicator--bb3eec8e-30f8-45cb-8735-63989021dc20", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ff4bd3-66ab-496b-ae5d-0d5b01231d21", "sighting_of_ref": "indicator--7509da13-816a-484d-b347-1dc3f9f8d323", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f14f45-11b1-47ba-afc3-7ca434ef5e07", "sighting_of_ref": "indicator--7509da13-816a-484d-b347-1dc3f9f8d323", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf59711d-071b-400b-a22b-fb989adfe44f", "sighting_of_ref": "indicator--6e8a543b-d14d-44c8-8183-e81b1b1a4b9e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf06f3c-1c0f-48e5-8fa6-282d62a09794", "sighting_of_ref": "indicator--6e8a543b-d14d-44c8-8183-e81b1b1a4b9e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de8ddf1-daf2-4c54-b440-3bdd0747cdb1", "sighting_of_ref": "indicator--42d7aa22-395b-4646-9009-cc19511aa759", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db9cbc4-b391-4343-9296-991abf9aaaef", "sighting_of_ref": "indicator--42d7aa22-395b-4646-9009-cc19511aa759", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72045246-40fa-4340-a604-16c4070d48bc", "sighting_of_ref": "indicator--4a064129-ee96-4353-9455-e234b541b6b0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9784e0f1-4121-4412-88c5-a5f36f4872b5", "sighting_of_ref": "indicator--1d6447dc-df8a-4c21-8346-db138be03b7d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a71e34-a5f5-47e3-b06f-a7f9011be244", "sighting_of_ref": "indicator--1d6447dc-df8a-4c21-8346-db138be03b7d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a433b130-bdd0-4ac3-b37c-4ebb62c6b786", "sighting_of_ref": "indicator--f193e8ac-091f-4b49-9e6a-87788c8d13cd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e80a08-b56d-4bb6-a6be-a161276024a6", "sighting_of_ref": "indicator--f193e8ac-091f-4b49-9e6a-87788c8d13cd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f8038d9-5011-4203-85ff-79e8b975df64", "sighting_of_ref": "indicator--f193e8ac-091f-4b49-9e6a-87788c8d13cd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84fc0899-e054-4432-a1e0-4cc79ba3cf3f", "sighting_of_ref": "indicator--a9d45c3b-5ea7-45c8-86ca-9c09b8df0b01", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7097b85-ffc0-4771-85e7-703db5548f02", "sighting_of_ref": "indicator--8ebfdc16-4ff5-439c-88f1-61854dfaffd6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d32c68-70db-4f28-a4a2-0c5cd68f6cd3", "sighting_of_ref": "indicator--db9837b0-4d72-436f-86f9-1675b5845e40", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9e7c8b-de34-4670-b0ec-0ade9d403f36", "sighting_of_ref": "indicator--db9837b0-4d72-436f-86f9-1675b5845e40", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23984a3f-3b93-4b4b-bfc6-a98fb899dfe1", "sighting_of_ref": "indicator--b70f5d54-a8fd-4990-b3ce-0768779972c4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b7a46e-9834-4dee-ace2-44b01528a24f", "sighting_of_ref": "indicator--07fc7ba1-e860-4e93-aa75-7e091422a86c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013d2ba9-3dca-4631-9816-f6a038dedc15", "sighting_of_ref": "indicator--07fc7ba1-e860-4e93-aa75-7e091422a86c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa09c2c-5f33-40b1-aeff-d8f2ff1e73f6", "sighting_of_ref": "indicator--177afba9-1719-49cf-bb4a-a4d729b6fb7d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55a22e7-953c-46e5-9b4d-093e3b6d1b71", "sighting_of_ref": "indicator--177afba9-1719-49cf-bb4a-a4d729b6fb7d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7f51cb-26eb-4993-b0f8-64099a651a06", "sighting_of_ref": "indicator--177afba9-1719-49cf-bb4a-a4d729b6fb7d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da011977-3163-4a97-b835-afa95bca6cd1", "sighting_of_ref": "indicator--3f4dd990-9fb9-43f8-95cf-0b28c0e91f78", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1badd3c7-4655-46b7-b228-92eb7f555721", "sighting_of_ref": "indicator--3f4dd990-9fb9-43f8-95cf-0b28c0e91f78", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6268a39d-b794-4b9e-abf7-b31c23a20012", "sighting_of_ref": "indicator--01548647-f38c-4fe6-a9c6-3a693f2391a9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a0b33d-4d4a-46a0-81e8-67fe961c7098", "sighting_of_ref": "indicator--01548647-f38c-4fe6-a9c6-3a693f2391a9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4a8ed6-89e6-4e42-a45d-8a15517a3828", "sighting_of_ref": "indicator--01548647-f38c-4fe6-a9c6-3a693f2391a9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7019784d-26e7-43f6-bf9c-9a6bda0eec65", "sighting_of_ref": "indicator--8f73ca06-35de-453b-965b-5c8be4f8d1dd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d79350-227a-448c-b25a-eb32f19cd620", "sighting_of_ref": "indicator--8f73ca06-35de-453b-965b-5c8be4f8d1dd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc5f67d-6d88-4068-a1cb-f0e6907660b6", "sighting_of_ref": "indicator--5cb0b2ee-0b2e-45df-b7b8-a1240c0c5e0a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23853de2-c0fd-42a9-88db-d86afd650b31", "sighting_of_ref": "indicator--5cb0b2ee-0b2e-45df-b7b8-a1240c0c5e0a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f74862-1ce3-4884-8bb6-5ad1c9906631", "sighting_of_ref": "indicator--87b63582-ad74-47e7-9819-43b7f5128244", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d487f1-9b03-4014-a96b-4452edfa7759", "sighting_of_ref": "indicator--f4fd8fc6-2a1b-4fff-96ad-5111648dbb6f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785a5306-a5e5-4bd2-b6f1-5925af0d247b", "sighting_of_ref": "indicator--f4fd8fc6-2a1b-4fff-96ad-5111648dbb6f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e593e0f1-e010-439d-919f-f962a7ebedf7", "sighting_of_ref": "indicator--f4fd8fc6-2a1b-4fff-96ad-5111648dbb6f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4f514e-feb7-471a-86e0-f2f645f6aa9b", "sighting_of_ref": "indicator--bd9d5157-47ed-47ea-bc07-0fed001846cd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed5bea3-743a-418e-b826-fa91a085bfa0", "sighting_of_ref": "indicator--bd9d5157-47ed-47ea-bc07-0fed001846cd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa29119f-8ae7-439f-aafd-e45d1c406b4a", "sighting_of_ref": "indicator--8cd479f4-5869-452b-9f8e-1f42b5605eed", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b603dcb-8a4b-4ec7-a821-da722549f052", "sighting_of_ref": "indicator--8cd479f4-5869-452b-9f8e-1f42b5605eed", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa0dfe7-b6ef-44ee-a056-b2fbef2acd56", "sighting_of_ref": "indicator--92a9aef2-3b66-4afb-ae25-dbd85211a6d9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d00230-412c-4597-a798-988b8928cd06", "sighting_of_ref": "indicator--1a5f1a89-fb38-4288-99e1-338d48a31169", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--757d8a32-deea-4bfc-9e97-5e8aa2bb9571", "sighting_of_ref": "indicator--1a5f1a89-fb38-4288-99e1-338d48a31169", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--702186b1-d847-4df9-857f-560b62563917", "sighting_of_ref": "indicator--1a5f1a89-fb38-4288-99e1-338d48a31169", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98254efc-17c2-4a58-a7b4-f18aceee6b56", "sighting_of_ref": "indicator--444f0a3e-307a-416a-8c2e-68e43a4a08e8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907e608d-e3c4-4f46-ba03-adea43f67bce", "sighting_of_ref": "indicator--444f0a3e-307a-416a-8c2e-68e43a4a08e8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dccef241-2b58-49c8-ae99-6a7661e4ecd8", "sighting_of_ref": "indicator--a5c112ca-2a6d-4ab1-aafa-b0721a53a8c4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678f00b0-ff90-4503-a46e-edeb20189c9d", "sighting_of_ref": "indicator--a612fd1f-b145-4597-9eec-45d61f506962", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3816eca3-6ae4-42ec-8628-cc2e8da77525", "sighting_of_ref": "indicator--a612fd1f-b145-4597-9eec-45d61f506962", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae250dca-255d-4d4e-b324-078f1fb9863b", "sighting_of_ref": "indicator--507cfe34-fed1-46b1-84d4-2e779839e7fe", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--391203f4-71f0-4e3c-af5d-b7b40da41b17", "sighting_of_ref": "indicator--507cfe34-fed1-46b1-84d4-2e779839e7fe", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8189e213-e2f3-4adf-b55c-db6a4e4953a3", "sighting_of_ref": "indicator--507cfe34-fed1-46b1-84d4-2e779839e7fe", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da2691d-5369-4fc5-b80c-f29394cdb891", "sighting_of_ref": "indicator--495e44f2-ff03-4cd0-8ac9-7c79ad8a02d8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72d79cfb-8bbb-4a27-95b4-31a95325f701", "sighting_of_ref": "indicator--495e44f2-ff03-4cd0-8ac9-7c79ad8a02d8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71fe204d-c216-4b45-8bd4-21f10ace93ac", "sighting_of_ref": "indicator--f75e9a3c-415a-491f-b3b7-76ff5f7f7fd5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c62e70-f545-4636-8960-9ffac0174330", "sighting_of_ref": "indicator--f75e9a3c-415a-491f-b3b7-76ff5f7f7fd5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ba661f-db04-42ae-a01b-78a93045ad81", "sighting_of_ref": "indicator--a5357c43-6bf0-4c74-b1dc-314a5ceeee81", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079665e5-c6a2-4e25-8c3d-ecd66b7f3de8", "sighting_of_ref": "indicator--aaa9a04f-24c8-42e4-8c90-4a6df67b9c87", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a70b46-e4c6-4f3d-8143-fb3f5493a6ec", "sighting_of_ref": "indicator--d4f55843-c1ed-47c6-94c8-c0c0343e0217", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96124754-a1b8-4b50-bbff-44601f16cbef", "sighting_of_ref": "indicator--72ece50d-18b2-4e98-8a1d-294aaba91f07", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01e9dad-bc2b-4f61-af92-9596bb8cc711", "sighting_of_ref": "indicator--c1234d70-49ee-447b-8158-3810b8e49ed0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9428d87-ac6b-4cbc-98a0-3ef077510930", "sighting_of_ref": "indicator--24b27c9d-58ca-4b3a-a76b-7f7d68054464", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd5ff0e-5821-4464-bea6-b5944f4a8960", "sighting_of_ref": "indicator--24b27c9d-58ca-4b3a-a76b-7f7d68054464", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f67fee-8c68-4d89-bbdf-3bf7c44ef331", "sighting_of_ref": "indicator--0fe67db8-2f83-48ec-ad1e-bf9e30c49112", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca98d646-7c82-4eab-92ff-90114cdd29f3", "sighting_of_ref": "indicator--0fe67db8-2f83-48ec-ad1e-bf9e30c49112", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef3e33f-927b-4673-b10f-23ccfcd17910", "sighting_of_ref": "indicator--eca7829b-6c32-4117-a763-3f8e5c09e4e8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6afaa7c-88d6-4d6e-b1ea-e3fdee88c973", "sighting_of_ref": "indicator--eca7829b-6c32-4117-a763-3f8e5c09e4e8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e77337-348d-49eb-9012-3b945f19d714", "sighting_of_ref": "indicator--28117350-3b12-4e49-a2d7-eb76855673bd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--372c1b3d-e157-4920-afec-a0dc5134ff63", "sighting_of_ref": "indicator--28117350-3b12-4e49-a2d7-eb76855673bd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a755c3a5-3ce6-4204-8006-f84547c76e6e", "sighting_of_ref": "indicator--0d827977-1481-45ed-99ec-a4f96a76fdf8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fdc12a9-0bbe-4cb8-a668-a25ce3f2404f", "sighting_of_ref": "indicator--ddba5cc1-83a6-436f-81a4-f1f7a8ff34c3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ae9f92-5696-4cf5-aa5f-f675a686c867", "sighting_of_ref": "indicator--ddba5cc1-83a6-436f-81a4-f1f7a8ff34c3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42cf216b-655b-4736-90e5-478f53e48a4b", "sighting_of_ref": "indicator--ddba5cc1-83a6-436f-81a4-f1f7a8ff34c3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc68129-99da-426e-bec6-4e9bf2fce954", "sighting_of_ref": "indicator--1f1e869f-f242-4310-94df-85a9565978ab", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93b4492-c8a6-4cab-b956-74f0d5ca82c6", "sighting_of_ref": "indicator--1f1e869f-f242-4310-94df-85a9565978ab", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a823c27-e8d5-4052-b458-bb75fa13a638", "sighting_of_ref": "indicator--bd7e9983-007c-43c6-8783-051d1d00c215", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd218979-6907-489a-915d-582156c8a16f", "sighting_of_ref": "indicator--bd7e9983-007c-43c6-8783-051d1d00c215", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66ce0aa-7037-4733-bbb7-2b2db58ac2ab", "sighting_of_ref": "indicator--048b7792-842f-4d31-a9bb-41b1624789a4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d90ba65-2d28-4337-8f3f-a84e1dca3966", "sighting_of_ref": "indicator--048b7792-842f-4d31-a9bb-41b1624789a4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4267634e-48a7-42e2-9aad-75693bc14e81", "sighting_of_ref": "indicator--b4d82a0d-0a44-4231-8342-ba6304195c2c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ecbf706-89f3-46e7-9d1a-8fb5ed5ce2f1", "sighting_of_ref": "indicator--b4d82a0d-0a44-4231-8342-ba6304195c2c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90325eb-7590-4448-b72b-004255262439", "sighting_of_ref": "indicator--b4d82a0d-0a44-4231-8342-ba6304195c2c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e85417d-811e-40f4-983a-4ec6b64208ab", "sighting_of_ref": "indicator--27090e9a-e2a4-4e44-8d54-dcafafc68ea4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42249e87-86dc-4764-bc5c-4841f2758d74", "sighting_of_ref": "indicator--27090e9a-e2a4-4e44-8d54-dcafafc68ea4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a91b62-ac8f-4b78-808f-b3f63ac3698e", "sighting_of_ref": "indicator--765b6260-6b8d-4d92-b8b0-cafbce41f66e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f3dfb7-141f-40e8-8a3a-81ee31f9a5d6", "sighting_of_ref": "indicator--765b6260-6b8d-4d92-b8b0-cafbce41f66e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087ee4d2-7c96-4896-a1c6-73e4e831a6ab", "sighting_of_ref": "indicator--9f5b3a4b-aaa3-493d-95ca-062bbaf67d4c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762f6ce9-07b2-4b1c-bc6a-b00afbaac35b", "sighting_of_ref": "indicator--9f5b3a4b-aaa3-493d-95ca-062bbaf67d4c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce66158-628c-4380-9168-319b5e536d25", "sighting_of_ref": "indicator--0ce93da6-b02a-4983-9fcc-6796a9113722", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564a093a-49a4-412d-9076-1e0836c7f58a", "sighting_of_ref": "indicator--0ce93da6-b02a-4983-9fcc-6796a9113722", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee2b4b74-5c85-4b19-93f0-5ae2fdc0261f", "sighting_of_ref": "indicator--3a10245d-281f-439f-8cbc-158c56008b37", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0619c2a6-6c89-4f5c-8205-f5b518bc1e94", "sighting_of_ref": "indicator--e7f7e7ac-08d7-4c0d-a320-3fbc6255e234", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ff39b8-924e-4063-a1dd-0970b90d91d8", "sighting_of_ref": "indicator--e7f7e7ac-08d7-4c0d-a320-3fbc6255e234", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ee9cf8-cc96-4efe-afc4-9fb4c1f6ccc5", "sighting_of_ref": "indicator--fe719169-92b4-439f-b14a-6a13a01f6241", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da0526a1-efec-4676-9c98-bd4048f5a33f", "sighting_of_ref": "indicator--fe719169-92b4-439f-b14a-6a13a01f6241", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1d34cf-5dfc-4ba9-9195-6744211e8640", "sighting_of_ref": "indicator--4a4fd90e-ee70-4295-82d6-2e23341cbdae", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30dd8f4e-51a4-4433-8a6a-6fbfee4df9fb", "sighting_of_ref": "indicator--4a4fd90e-ee70-4295-82d6-2e23341cbdae", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2674518-fa79-4b16-a9db-b018f5c3657c", "sighting_of_ref": "indicator--4a4fd90e-ee70-4295-82d6-2e23341cbdae", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5deaea6c-3e68-4fa2-b5b6-0bfc25eb71cb", "sighting_of_ref": "indicator--438af783-e0e0-4909-94c8-731f2bf31128", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e91e840-46b9-4b0e-a62a-08153e811bf2", "sighting_of_ref": "indicator--438af783-e0e0-4909-94c8-731f2bf31128", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d29ba07-1bdc-4fec-976d-cb5b938d2924", "sighting_of_ref": "indicator--438af783-e0e0-4909-94c8-731f2bf31128", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406cba4d-5843-458a-a854-e660b08f8e94", "sighting_of_ref": "indicator--6217579f-a317-4b28-9b01-a38e48021cdb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--863ac5dc-b675-4f2d-95e9-eca2f1970b4c", "sighting_of_ref": "indicator--6217579f-a317-4b28-9b01-a38e48021cdb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5484cf4-9372-4f8d-80b6-9b2db13ee1ad", "sighting_of_ref": "indicator--6217579f-a317-4b28-9b01-a38e48021cdb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82871fdb-5a21-40bd-9a9e-e995572eca8f", "sighting_of_ref": "indicator--9a432dbf-fa4a-49d2-858d-e4c90597dca6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02db61c-4485-4ada-877f-84e706d642e8", "sighting_of_ref": "indicator--f866cfda-7cfd-444d-921b-54a2e5ce420c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc80e03-cb95-4a02-a54c-96d964404454", "sighting_of_ref": "indicator--b0463fe3-3aac-447d-b342-64d150eb9d76", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95dbb46a-0f13-4097-992b-c670d0788430", "sighting_of_ref": "indicator--b0463fe3-3aac-447d-b342-64d150eb9d76", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3035d43f-0ce4-47ba-99e3-7d5b52995d10", "sighting_of_ref": "indicator--9cd6edd3-562d-44f9-bf04-284c676aa110", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5afb18-4a25-4678-8622-dbfcb695fec6", "sighting_of_ref": "indicator--5eb40aa3-cab5-4d17-8741-fc7117601a7b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd20209-af47-4d9e-99f5-97858b71c177", "sighting_of_ref": "indicator--5eb40aa3-cab5-4d17-8741-fc7117601a7b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--825a177e-9ba3-479b-82f1-a1cfe653a354", "sighting_of_ref": "indicator--e4a6fb7c-7145-476a-adcb-da2df4345779", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6bdba42-57ed-47d1-a4b8-3cf34644b690", "sighting_of_ref": "indicator--930127d1-739b-448a-a496-d787424a66e6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b229d2a-be0a-4bad-b607-15dcad6648b7", "sighting_of_ref": "indicator--930127d1-739b-448a-a496-d787424a66e6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172e1b49-4c5e-4271-977c-b5773ab557b3", "sighting_of_ref": "indicator--d97d5b48-acac-495d-8c0f-cd8c28b1c43e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79106b93-5793-4f53-bd8b-3929a78c6977", "sighting_of_ref": "indicator--ec71e075-2af2-4f34-a149-e1fc55a51b64", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b08de08-a781-4ddd-a7af-e83ac4f4aa4b", "sighting_of_ref": "indicator--ec71e075-2af2-4f34-a149-e1fc55a51b64", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a671c3c2-7764-4bb0-b8b9-6588a47b3f77", "sighting_of_ref": "indicator--9ba726be-7462-4eb5-b3a0-e4ad21c32622", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5147b8-f206-4e6b-bcdd-997490fb46b1", "sighting_of_ref": "indicator--9ba726be-7462-4eb5-b3a0-e4ad21c32622", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1daf5d37-9796-4d28-9be4-7d688983a6b0", "sighting_of_ref": "indicator--69cf24fe-50fc-4c3f-9737-52e38e148830", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb23956-304d-4a50-93da-c49815bf431f", "sighting_of_ref": "indicator--69cf24fe-50fc-4c3f-9737-52e38e148830", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7367dbb8-f2d3-4890-8733-7173ad885918", "sighting_of_ref": "indicator--8a65717d-82cc-457e-9ebc-5b33e77b5d38", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d474d07-6180-495d-9ce7-3fd9d6e630fb", "sighting_of_ref": "indicator--ceb9c63d-fc12-4dba-8bee-5fc7034843ef", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc09b386-eda2-4ce0-baac-cc42ad9691d8", "sighting_of_ref": "indicator--ceb9c63d-fc12-4dba-8bee-5fc7034843ef", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7316fcb7-843f-4c35-b337-d22ac634c67f", "sighting_of_ref": "indicator--ceb9c63d-fc12-4dba-8bee-5fc7034843ef", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7df1ec-638f-4189-9e6d-5d89ac27b6b2", "sighting_of_ref": "indicator--6d0a0565-0be2-4792-b744-2ca4bda92a40", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb58ea9-adfb-4422-980c-6ee2a01aa049", "sighting_of_ref": "indicator--6d0a0565-0be2-4792-b744-2ca4bda92a40", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8da8942-feaa-493b-87ec-3ef982511e96", "sighting_of_ref": "indicator--62e97f53-2709-4144-954d-d6c571b180d9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0041f37-33b6-47e3-8af3-f53ea7d10307", "sighting_of_ref": "indicator--c349b293-51eb-4383-8630-2dd354e1c7a4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe9460a-49b5-49c7-a5b6-06caf7b3d9fe", "sighting_of_ref": "indicator--6a3d2388-accb-44a6-bfb7-0c27b29ce34b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--184821ed-7b20-421e-91d3-dfe20caf935f", "sighting_of_ref": "indicator--23f45959-f117-4a38-8d4d-80825082c87b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0829bf6b-fcc6-4687-b40f-85b8e47c9c05", "sighting_of_ref": "indicator--e4187e43-ce2e-462d-8151-2a9e42fa317e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c345fc-0acb-4f91-96e1-f5dd1be8c832", "sighting_of_ref": "indicator--e4187e43-ce2e-462d-8151-2a9e42fa317e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb5c988-5cb2-4f1c-99e0-792a29321088", "sighting_of_ref": "indicator--649a80d6-9536-44fa-85d6-3ad5266fb5d1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ff069e-6a11-44a5-830d-1ef96929a4cb", "sighting_of_ref": "indicator--6d18512a-038a-474e-a244-db09709cb13e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4d85762-68df-4e70-9367-983f036a5fa5", "sighting_of_ref": "indicator--6d18512a-038a-474e-a244-db09709cb13e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2141e58c-4531-4258-9cd9-3d5ffcec0219", "sighting_of_ref": "indicator--0587be8d-5191-4f77-a6a5-fcd918ec3151", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c20156c-292c-40aa-80e1-69ed640b17f7", "sighting_of_ref": "indicator--bd1d3ce8-8d32-43ef-ba53-67ade39521d0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059b30f1-10d4-4fc7-90ef-55ffc94caa2a", "sighting_of_ref": "indicator--bd1d3ce8-8d32-43ef-ba53-67ade39521d0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8472f60f-cf77-4c05-b474-1f55e45bd82e", "sighting_of_ref": "indicator--bd1d3ce8-8d32-43ef-ba53-67ade39521d0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3287fc7-0b2a-415e-9252-3b9874ba6f87", "sighting_of_ref": "indicator--01cf16f5-8e7b-4b49-9f7d-b4715abdacaf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a06778-4167-4efe-b8ac-815d7d70f779", "sighting_of_ref": "indicator--01cf16f5-8e7b-4b49-9f7d-b4715abdacaf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487d17d6-f731-49e1-8d22-235d35d1e29f", "sighting_of_ref": "indicator--01cf16f5-8e7b-4b49-9f7d-b4715abdacaf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad7fad3-2353-4ad1-8377-baadecb62c28", "sighting_of_ref": "indicator--702dedff-8020-4719-ad07-cc8b1678e376", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8622764e-3c40-4323-be30-0e24b01f4ea2", "sighting_of_ref": "indicator--702dedff-8020-4719-ad07-cc8b1678e376", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--defc6734-c231-40d7-8f3c-6ae9d58c5348", "sighting_of_ref": "indicator--7f816c75-3af4-42a6-8f87-4c134ceb6cbc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25fd1f3-3442-472b-9cbc-d32344ba2107", "sighting_of_ref": "indicator--7f816c75-3af4-42a6-8f87-4c134ceb6cbc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--601b2d86-6fa0-4baa-bba5-e939ec1f9b29", "sighting_of_ref": "indicator--fe887116-3566-437f-bf0f-4ee1a2b752ac", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b0663c-3e6b-4735-aa54-a30b39a3839b", "sighting_of_ref": "indicator--fe887116-3566-437f-bf0f-4ee1a2b752ac", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be2b630-87e5-478b-9ea1-90b67c89ba4b", "sighting_of_ref": "indicator--c8789fb9-19fd-412a-9f9f-8a26c04bf6c4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e2b9d3-cbae-4ae9-acc8-8d8623c94d74", "sighting_of_ref": "indicator--c8789fb9-19fd-412a-9f9f-8a26c04bf6c4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253120af-e30a-479a-b800-096a3b62a6eb", "sighting_of_ref": "indicator--dec1dfe4-327e-418e-8b57-91741051507f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98d2c2a-a208-4a0e-be32-75423c894853", "sighting_of_ref": "indicator--356e8ca7-f659-4241-88aa-c1ff32e66f8a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b7185c-d688-4b4d-a1e0-46536f2f6a74", "sighting_of_ref": "indicator--80e25c12-b577-433b-a165-8f7141c0077c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1eceb9b-8a45-4cc8-91fc-eeb0a4999c57", "sighting_of_ref": "indicator--80e25c12-b577-433b-a165-8f7141c0077c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613ff87f-4469-4e58-a936-32e94f825993", "sighting_of_ref": "indicator--b3474e28-a99e-491d-ad6e-f5e1857dea45", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b07583-344f-444e-9d8e-ed741fd7966b", "sighting_of_ref": "indicator--b3474e28-a99e-491d-ad6e-f5e1857dea45", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17adfcfd-f374-4ce0-a8b2-20496d03a3b0", "sighting_of_ref": "indicator--53c05af6-28ae-4556-a6d6-b8010f7fb75f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d60b79-686f-4b00-868d-b5997adc2a31", "sighting_of_ref": "indicator--9eaff77a-6e76-4077-a844-3997b6cd2d69", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f91cb8b-d856-4a59-99b4-4fccd29d5783", "sighting_of_ref": "indicator--9eaff77a-6e76-4077-a844-3997b6cd2d69", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b6a6a5-ee1b-4e37-aab7-eca70f90fd0d", "sighting_of_ref": "indicator--9eaff77a-6e76-4077-a844-3997b6cd2d69", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--969cb198-a3bf-48cf-b756-84281b911cdf", "sighting_of_ref": "indicator--49cac457-67bf-4ec6-924c-bc2a1ced9ecc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6bb42e-17dc-42ba-aaeb-f7357abffda3", "sighting_of_ref": "indicator--28c21790-cfa2-4a61-8b70-227cbdb08113", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b75428-e61a-47e1-9ac0-b94c2299ce88", "sighting_of_ref": "indicator--172581d2-405b-43fc-9f8b-4112b5c568af", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e66791-15aa-4db9-89e9-aab8969632b9", "sighting_of_ref": "indicator--172581d2-405b-43fc-9f8b-4112b5c568af", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b41f1147-f6cd-47e3-89a3-e2b0d6de11a8", "sighting_of_ref": "indicator--b6bc617d-6ea2-4895-81d9-634a490dbb4f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc1d59dd-c7a5-4fef-9541-088828568174", "sighting_of_ref": "indicator--74dc2025-86e8-47ef-9989-855bd878abba", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86498678-6e00-4d78-a318-5941c01f33f4", "sighting_of_ref": "indicator--74dc2025-86e8-47ef-9989-855bd878abba", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea21b2b-9608-4c87-b6f6-609f915a4520", "sighting_of_ref": "indicator--7e7c158f-eced-4690-91bb-cca73122bc82", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2fad7e-cdcc-424c-a8b1-202bc92971bd", "sighting_of_ref": "indicator--7e7c158f-eced-4690-91bb-cca73122bc82", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272e828b-0ad1-4bcb-af55-8cbf23698251", "sighting_of_ref": "indicator--7e7c158f-eced-4690-91bb-cca73122bc82", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a16c39-e742-4237-878c-27154503fdfa", "sighting_of_ref": "indicator--d49a7bc7-3092-4a52-91c9-f537d56cd1a0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f284779-bcb4-40cb-92b2-28aef64b9f6b", "sighting_of_ref": "indicator--233ff513-d834-470f-809c-eee86f28b2bf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316b1f23-43c3-4878-9966-2c47f0a3a644", "sighting_of_ref": "indicator--233ff513-d834-470f-809c-eee86f28b2bf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d94c157-e2ff-4f7b-aa09-58e1934bf57f", "sighting_of_ref": "indicator--62c93fa4-1dbc-43b3-97cc-cda445c6ec77", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cdb5045-9f92-4ba6-b6aa-be33a7c97ba7", "sighting_of_ref": "indicator--62c93fa4-1dbc-43b3-97cc-cda445c6ec77", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73242b1c-7e95-42e8-97a6-0d68370e9b74", "sighting_of_ref": "indicator--2f4424eb-3f84-4a7d-ae8b-2683d6c07276", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26337141-4a90-4348-9649-2c23c26058ea", "sighting_of_ref": "indicator--1f9354dd-bec7-4bef-ac7a-45d2112afdae", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2a015b-e3a1-44b7-953e-f506904cff76", "sighting_of_ref": "indicator--228b3570-0dc1-42b9-a983-149b508a2499", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6081228-aa04-4474-a2be-97a67890e126", "sighting_of_ref": "indicator--228b3570-0dc1-42b9-a983-149b508a2499", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c84a51-46f9-4f3e-bdce-64b0eb8183c8", "sighting_of_ref": "indicator--228b3570-0dc1-42b9-a983-149b508a2499", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c556d904-a35f-4cc7-be49-5b2c10a242f3", "sighting_of_ref": "indicator--1129aba9-da69-4530-864b-04b9ff90938f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d23e47f-7569-4aa8-b226-de7529704ca7", "sighting_of_ref": "indicator--78d4f34b-8c51-4b33-890c-2d53670ee9a7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d08a5ecf-6bc7-4ea3-ba4f-bc84dc66cf8b", "sighting_of_ref": "indicator--cd031318-4d60-48e4-8aa3-9f75e0ff6d1e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--024a19d1-89d4-4d79-bd3b-18977ace00a9", "sighting_of_ref": "indicator--b5b56ff4-119b-4229-af37-f17d182f02bb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1683ec70-dd7a-4407-9f88-d1688331b385", "sighting_of_ref": "indicator--686876c0-0806-4b9b-b052-30f20e17c540", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a644633-7638-49bf-8173-a78319ee82fa", "sighting_of_ref": "indicator--686876c0-0806-4b9b-b052-30f20e17c540", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e2dd5d-2c42-452a-9cc9-8a7f62c73b84", "sighting_of_ref": "indicator--be840fcc-7ac4-4c81-b80f-271f0aa25663", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c6021f-2c29-4df0-89e0-74bc4627ce41", "sighting_of_ref": "indicator--dc67cc1e-4365-4dc2-8b55-77bfdcb4d0f7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--960373ca-883b-4cb6-a268-8e2711481e46", "sighting_of_ref": "indicator--3bc14233-1f9f-4908-852c-429285415307", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e46e21-cd97-40da-b77a-509765983e19", "sighting_of_ref": "indicator--334e81a0-b46b-42fd-ae8c-20fc0fcac125", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cffe6ccd-443f-4dd8-95d2-96e65d6dc02c", "sighting_of_ref": "indicator--334e81a0-b46b-42fd-ae8c-20fc0fcac125", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e76327-434b-466d-a690-49a8ba0a254f", "sighting_of_ref": "indicator--334e81a0-b46b-42fd-ae8c-20fc0fcac125", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a7976e-5d5f-4eb4-8d6e-554469169e6b", "sighting_of_ref": "indicator--82b71edc-e6c8-40ef-a886-1c2fbb32188b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c4659d-c05f-4870-934e-c53263a8f124", "sighting_of_ref": "indicator--82b71edc-e6c8-40ef-a886-1c2fbb32188b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1546aaa8-de17-4453-8c92-2f3af79fe9ff", "sighting_of_ref": "indicator--82b71edc-e6c8-40ef-a886-1c2fbb32188b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd662640-cbe2-4bae-9771-8fd81b120255", "sighting_of_ref": "indicator--ce786ceb-7593-4e50-bee8-b24127851159", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae5bf87-5b28-4572-baa7-ce760d84e8f8", "sighting_of_ref": "indicator--fedef0b0-efde-4025-b508-76829e213c39", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f0c075-8de4-4113-a8ae-61adb0647543", "sighting_of_ref": "indicator--fedef0b0-efde-4025-b508-76829e213c39", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c059b18-2030-4733-85ac-99b958aa7f16", "sighting_of_ref": "indicator--d660ff05-3213-4f5a-8a6a-4a30ba8fa5d3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3606b19d-f4f6-4733-a449-53a619957ce2", "sighting_of_ref": "indicator--50702e45-c63e-4154-9354-0d6f65ce1f13", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e435d57-aec7-494e-884a-0945757617fb", "sighting_of_ref": "indicator--0577203b-5297-4d49-8e45-978d86cdfbac", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d87539d-5af9-4278-9267-9a9a63ac99b3", "sighting_of_ref": "indicator--0577203b-5297-4d49-8e45-978d86cdfbac", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2065e972-60e8-48df-ae88-d063de7d00be", "sighting_of_ref": "indicator--f329af21-6c69-4a01-883c-ece6c067c2c2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b0f48e4-5dbe-4318-80f0-a23f2956b969", "sighting_of_ref": "indicator--c0ebb22c-7d34-48d2-8bbf-08ea2af25634", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f545927-61c7-445e-a284-8f29738c209f", "sighting_of_ref": "indicator--ab634689-faad-48be-b261-d5e3354f3101", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec7d55fa-f453-41a4-b3e6-8ab9801f52af", "sighting_of_ref": "indicator--7ef6ed3b-edfa-4cd7-a532-acd8a040a1f5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa29a29d-d310-4449-9800-82151a3575a5", "sighting_of_ref": "indicator--9206e729-cb77-4964-b88d-760334376433", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--518a2bf9-4acf-4127-b2ef-51348763380e", "sighting_of_ref": "indicator--9206e729-cb77-4964-b88d-760334376433", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89606818-9ec3-456c-ba2b-5540f061c600", "sighting_of_ref": "indicator--9206e729-cb77-4964-b88d-760334376433", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2efffbd1-a299-4dd0-8d19-aa9eed092cc8", "sighting_of_ref": "indicator--312f9a87-518b-497b-8fef-03eccf8f5ee2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409cd353-67f0-41f7-ac56-58163c35afcb", "sighting_of_ref": "indicator--2058e848-4b4f-4715-8103-85de3c0d47ce", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa3cc93-cbd7-49e8-98a7-6a66c7e94f31", "sighting_of_ref": "indicator--2058e848-4b4f-4715-8103-85de3c0d47ce", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92dacce3-3ece-45de-9a3f-7ee78fb55b5b", "sighting_of_ref": "indicator--31f37306-0e9d-427a-a661-947b008ba702", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba451f5f-4e40-4ab5-ae39-12557374e740", "sighting_of_ref": "indicator--31f37306-0e9d-427a-a661-947b008ba702", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24484d39-23a3-49cd-8f16-a80e2dcfcb00", "sighting_of_ref": "indicator--f3e7a60d-6f76-4389-8d53-3ff303c9cb43", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--469c1d9f-7a1e-46c5-89bf-464ef71be0ca", "sighting_of_ref": "indicator--f3e7a60d-6f76-4389-8d53-3ff303c9cb43", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a275a5c-0788-4335-8741-d73febd7412d", "sighting_of_ref": "indicator--f3e7a60d-6f76-4389-8d53-3ff303c9cb43", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ced73d6-e710-4ab4-b5c9-2ab8eeecd9f3", "sighting_of_ref": "indicator--a177e814-de02-4da1-a359-72650dc64812", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c259b2-ec0b-4c7c-904a-74bfc3acb827", "sighting_of_ref": "indicator--a177e814-de02-4da1-a359-72650dc64812", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc402df8-48e8-487c-bbb5-5fcdc7d15a41", "sighting_of_ref": "indicator--0a94c58f-0f7a-4abf-9255-4851c8d3c004", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e7b7c5-0869-49c5-8637-8a8c21c21d02", "sighting_of_ref": "indicator--0d7ce5e6-b6e6-492d-95f1-1d5abe522c24", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab728e3b-c0ae-49af-bec6-fc601f967d78", "sighting_of_ref": "indicator--427fe815-3992-4a55-9a10-214012ace5bd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6048dda-72d7-468a-8968-848604f74beb", "sighting_of_ref": "indicator--427fe815-3992-4a55-9a10-214012ace5bd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778656f1-efa7-465d-9726-1bc17ef5c5d9", "sighting_of_ref": "indicator--427fe815-3992-4a55-9a10-214012ace5bd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e950562e-a22e-45cf-80c4-b6a85c32ad84", "sighting_of_ref": "indicator--0aa6c883-5fa1-4351-9d38-9af5343fe836", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e05f92-e43c-469d-8fe6-f687fd7c77f4", "sighting_of_ref": "indicator--0aa6c883-5fa1-4351-9d38-9af5343fe836", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94619513-5c87-451b-9572-452408dc6102", "sighting_of_ref": "indicator--2a6f42e1-4662-4cbb-8e33-0dba3396adcb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a13a762a-2857-4b38-9a28-472d0c77a711", "sighting_of_ref": "indicator--2a6f42e1-4662-4cbb-8e33-0dba3396adcb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5177199f-edbc-4d26-af0e-076be2d51dcf", "sighting_of_ref": "indicator--2a6f42e1-4662-4cbb-8e33-0dba3396adcb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c96e3228-7574-4eb4-9bea-d2fb3f40510b", "sighting_of_ref": "indicator--6ffc1ca2-171f-44c4-bfd1-1f64a9541e4e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531c6244-314d-4cd5-9f03-cca6b11fedc3", "sighting_of_ref": "indicator--6ffc1ca2-171f-44c4-bfd1-1f64a9541e4e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275cf089-5070-435f-87f9-d24b00d3e73d", "sighting_of_ref": "indicator--aa935ba9-2090-441e-904d-05ad256441c7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c59e198-4ffb-4cfb-88d9-0b02726e4912", "sighting_of_ref": "indicator--760d6a20-fd1b-453a-a856-56ad3baa354f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--390c63fa-d3fb-4ddd-8836-187773f89b46", "sighting_of_ref": "indicator--76ce5e09-3fb1-4ab8-969d-ae18d501e67a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf249960-288c-4d35-9cf4-e1eff0ff8b87", "sighting_of_ref": "indicator--76ce5e09-3fb1-4ab8-969d-ae18d501e67a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca9961b3-5e21-41b3-842a-378ade7daf01", "sighting_of_ref": "indicator--58106f67-6a26-4eeb-948f-4c838ae5f88b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b583c6cf-f02e-4247-aae8-c960f70aeed9", "sighting_of_ref": "indicator--58106f67-6a26-4eeb-948f-4c838ae5f88b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ee45d8-cf4b-4cd7-b54a-612dfe417824", "sighting_of_ref": "indicator--6100ec6f-3369-468d-b3a2-195261001959", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a7fafc-f397-4545-9824-0c007fbe293d", "sighting_of_ref": "indicator--678fcd44-f6b3-49db-96b0-9087637363a1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e8b5f3-e00d-427e-a34a-409252bd5ada", "sighting_of_ref": "indicator--dca90b58-c45e-448b-8839-bfbf1f1042de", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6c8cf2-528f-4861-84c4-fac501d78ae2", "sighting_of_ref": "indicator--d770def5-e0a8-45f6-a4ad-6e82b5357cb2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4729f3b-c8c7-46ee-b368-967d44ae6b2f", "sighting_of_ref": "indicator--d770def5-e0a8-45f6-a4ad-6e82b5357cb2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2662de2f-3e26-4a5d-b118-1a72f031c2d6", "sighting_of_ref": "indicator--bc6a7d18-3800-4ec3-92d8-83e0df410c41", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff52560c-bc9c-434a-9537-56e118394495", "sighting_of_ref": "indicator--bc6a7d18-3800-4ec3-92d8-83e0df410c41", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019cb78c-c372-477f-be20-4dbd154fa1f5", "sighting_of_ref": "indicator--841487e8-559b-4ef7-b693-491ced11f921", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65528ca8-2ff5-43d4-b198-e7df6eca35bd", "sighting_of_ref": "indicator--1a608a7a-f115-4aa4-b34a-4f24b8b049eb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ad9239-c188-41b7-a9b8-ac7978040396", "sighting_of_ref": "indicator--1a608a7a-f115-4aa4-b34a-4f24b8b049eb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878d5f12-f64c-4945-a36c-5be0c332bf05", "sighting_of_ref": "indicator--1a608a7a-f115-4aa4-b34a-4f24b8b049eb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e65a0c0-96d5-4ece-ad79-9b487c429f52", "sighting_of_ref": "indicator--60c76cab-d43d-4f8c-be1e-dfa4e3a971d1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cff81a2-ff38-4294-8342-c251337cd6dd", "sighting_of_ref": "indicator--60c76cab-d43d-4f8c-be1e-dfa4e3a971d1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6280954d-4862-49ec-ac69-c5e2da2e4eec", "sighting_of_ref": "indicator--d3293c19-926c-4444-a0c7-ea6957338da7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5de3f4b-1737-4dfc-8068-538c4b9ce1d3", "sighting_of_ref": "indicator--3c96e7b0-dfb4-41d2-a724-8133561b0254", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62916fba-eb3a-4978-9881-a3980318d6c9", "sighting_of_ref": "indicator--4fe6567e-1355-4906-80a0-719335e739fe", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b689119b-0b5a-44d6-ab9b-704a00708a46", "sighting_of_ref": "indicator--4fe6567e-1355-4906-80a0-719335e739fe", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5602f406-1fc8-425b-bed3-f9e15127cc4c", "sighting_of_ref": "indicator--b0c6b9e7-d257-4ae9-9e05-15d8f2dfb404", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c78a1f97-9dbc-4087-be89-0ae50c398613", "sighting_of_ref": "indicator--b0c6b9e7-d257-4ae9-9e05-15d8f2dfb404", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea3b2ac-7c68-4686-9b86-31df780bd32a", "sighting_of_ref": "indicator--b0c6b9e7-d257-4ae9-9e05-15d8f2dfb404", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dacc257-4248-4f54-8701-09195f8c97c3", "sighting_of_ref": "indicator--c290ca51-8dac-4cbc-962f-812ca6a796f5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdbf5de0-afc3-4c1b-bb53-1327735c9577", "sighting_of_ref": "indicator--c290ca51-8dac-4cbc-962f-812ca6a796f5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5722a9bf-339f-4ac8-a213-05ec1a62e51d", "sighting_of_ref": "indicator--cf9c9c1c-f560-42f7-96b5-d37faaf1b221", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc77866-eede-4ec3-965d-32d424cb4069", "sighting_of_ref": "indicator--cf9c9c1c-f560-42f7-96b5-d37faaf1b221", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d314c4-ec4e-40b2-84d2-ed04a333b64f", "sighting_of_ref": "indicator--a0e6aa69-1582-443a-9273-53a71197fd96", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--124a58d1-516f-4757-8950-94f35d22cf50", "sighting_of_ref": "indicator--fac060d3-7573-450a-8683-024e65541803", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17dbf10c-5386-43be-bd1a-b96d53b3c4f1", "sighting_of_ref": "indicator--b4456908-03ac-4e6a-88dd-71c33f4e9afc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27811176-247b-4563-8936-7820bb4c0dc8", "sighting_of_ref": "indicator--b4456908-03ac-4e6a-88dd-71c33f4e9afc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4289203f-3968-4f11-b258-970cbe331125", "sighting_of_ref": "indicator--a08a61d9-2da7-4067-88df-8a68aefd4483", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb90ce9-834a-403f-a125-62b7e96469b4", "sighting_of_ref": "indicator--7cf1080f-f897-4951-8a8c-bde2be786495", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ba8be3-6ac6-472f-b707-47fb6c0717e5", "sighting_of_ref": "indicator--7cf1080f-f897-4951-8a8c-bde2be786495", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34cc021f-c2a2-4ada-b5a2-02c46d041025", "sighting_of_ref": "indicator--41da5415-5c2b-4b96-ad1f-4df8d75ce866", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e220129-54a6-450e-950a-31aae52bde62", "sighting_of_ref": "indicator--8cb36bfb-96dc-4f8b-b522-8d7a0f1c4b3b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9bd23bf-ff7c-4fcc-8f76-274fa189517f", "sighting_of_ref": "indicator--4b2c05ef-d447-48e9-bdc3-284a3e3ba1ed", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16fd44e8-a6f0-4782-ad3a-d49a75c7ede3", "sighting_of_ref": "indicator--4b2c05ef-d447-48e9-bdc3-284a3e3ba1ed", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced4b276-74a0-4d34-9eee-c1efc6040b22", "sighting_of_ref": "indicator--4da7209c-a30d-44f1-a47d-0e6199d30fcf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21387d60-23b1-464e-adf3-6c9843148ef1", "sighting_of_ref": "indicator--175df841-4aca-43b8-b18c-0e92eb4c4c16", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20974ad4-efbf-4094-be67-2936c0bdf5a5", "sighting_of_ref": "indicator--4adbf638-d0f1-4e69-b5d1-e65f4cea9a57", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc7a333c-86d3-4a69-9afa-8ba97334e5fa", "sighting_of_ref": "indicator--4adbf638-d0f1-4e69-b5d1-e65f4cea9a57", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49903f72-82e4-4d15-b8e7-fb8f5f2a4275", "sighting_of_ref": "indicator--2eb8e29a-b9fe-4d51-913f-898a97c68a23", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553680b1-7235-4989-b5a6-b464d1577d16", "sighting_of_ref": "indicator--d2934edd-4a42-4f3c-a07f-f8a57696cf16", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68839a23-8fc3-4306-a309-2c13594c68a9", "sighting_of_ref": "indicator--d2934edd-4a42-4f3c-a07f-f8a57696cf16", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e50449e6-c59d-43e7-b8cc-054f0062c914", "sighting_of_ref": "indicator--2a4b690f-a1f3-466e-9138-92aeeb8897a7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2df221e-9698-4cb3-871e-10feddc2c1fd", "sighting_of_ref": "indicator--2a4b690f-a1f3-466e-9138-92aeeb8897a7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bb7363b-ae7e-4a82-930b-220c67830d3a", "sighting_of_ref": "indicator--eeda246e-75f0-4d7e-a1e0-fdbfd7994bc2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f94838-f1b2-4205-978f-5b9e94429f34", "sighting_of_ref": "indicator--220fa65d-febf-4f74-b211-01c7585209d3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a472848-d7ea-4755-b4cb-dc091af0094f", "sighting_of_ref": "indicator--770de3d6-4a9b-4520-8a51-dbfbff520b0c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f211b931-13c8-4465-95ae-698be2209528", "sighting_of_ref": "indicator--8e1d1e95-13e9-408d-b78c-1688d055d603", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9012f99-3f4e-48b9-a2ea-7355ed59b51d", "sighting_of_ref": "indicator--8e1d1e95-13e9-408d-b78c-1688d055d603", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff2bbd5-b50c-47f5-8b0a-bb69eab17830", "sighting_of_ref": "indicator--8e1d1e95-13e9-408d-b78c-1688d055d603", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5335eea7-0b35-404d-b73f-51d8930bf80b", "sighting_of_ref": "indicator--2b5a8a53-3f06-4f66-8a43-c0ec36a0ba60", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34565a48-5a10-46a1-a390-755dda4edf6e", "sighting_of_ref": "indicator--2b5a8a53-3f06-4f66-8a43-c0ec36a0ba60", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe3a1bb-d77d-449d-bad7-193bfe3cd3c4", "sighting_of_ref": "indicator--7b614e0f-e8fa-4193-8566-74ccd542d244", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--152b398c-a24f-476b-8de0-aa20069dbf37", "sighting_of_ref": "indicator--d360f231-2b05-40ef-9bc4-f2b8dc854859", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae2ea4f-0b8b-4581-89c2-0351c2a2e91f", "sighting_of_ref": "indicator--5c6a1358-83eb-4a5f-9fa8-49412f40d5c6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cda446b-8538-48ee-a46c-2512d53fe7b3", "sighting_of_ref": "indicator--48a65dcf-356b-4cce-b64b-543a6b79e408", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97217079-f8ef-41cb-b7e5-df4bbfc1b364", "sighting_of_ref": "indicator--91910a05-45db-4d27-b026-b0522fd5bc7a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ac8bde1-a697-4d8b-aa00-b55750279291", "sighting_of_ref": "indicator--4f1d3993-04ee-4355-ae66-4360d4c74b64", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc6df988-6aad-43a8-87e4-047deafc1023", "sighting_of_ref": "indicator--0f595e41-3f84-4ff8-a1da-bf505945732c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec669a25-094b-46af-b2ec-572fb5f8d30b", "sighting_of_ref": "indicator--b057eea5-7181-44ca-b1cd-1735037eb22f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64aba100-9f54-4f03-a642-f8bc82f8f59d", "sighting_of_ref": "indicator--b057eea5-7181-44ca-b1cd-1735037eb22f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f177593a-15ea-4c46-a177-f4e5f05bad58", "sighting_of_ref": "indicator--a07d26a6-8042-4c4d-a046-6069dbce7b63", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46030383-d97d-49b8-bf7c-23ebe980b023", "sighting_of_ref": "indicator--a07d26a6-8042-4c4d-a046-6069dbce7b63", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61caf7e9-68ea-478e-91c6-4dff50af227c", "sighting_of_ref": "indicator--10f70092-3ef6-4e1c-b73b-a3087eb7cb0a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d336e62f-913e-4364-a7e5-1ea3cd0e4fdf", "sighting_of_ref": "indicator--ab1618f2-72d2-49ab-81ce-16bb34ca5bd6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a80b3a-d914-4d17-bb7d-db4b06f18cec", "sighting_of_ref": "indicator--ab1618f2-72d2-49ab-81ce-16bb34ca5bd6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--736c44b5-7b64-467c-adf5-b35d96904063", "sighting_of_ref": "indicator--319d6148-8784-4c34-8f1f-56c21830a081", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5431004-4bdf-4c42-bc33-441cc5437a5e", "sighting_of_ref": "indicator--319d6148-8784-4c34-8f1f-56c21830a081", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c4872f-04b4-435d-830b-e1e0bc097069", "sighting_of_ref": "indicator--319d6148-8784-4c34-8f1f-56c21830a081", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf4ca37-c439-4051-bdda-1601c97f41a2", "sighting_of_ref": "indicator--ae95ac43-01ed-48c8-a087-4238b7927c0e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f39f74-bae1-47ea-a56f-9bfc83fce7e9", "sighting_of_ref": "indicator--41822af5-8e8e-4996-9d85-22040802fa7a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2827c6ea-a5df-4d58-a98b-49032f819e7d", "sighting_of_ref": "indicator--41822af5-8e8e-4996-9d85-22040802fa7a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21fb4ca7-57a0-4747-b0d2-a1a8f83b9204", "sighting_of_ref": "indicator--41822af5-8e8e-4996-9d85-22040802fa7a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef553b13-45d1-4ecc-8ace-ef48449b8881", "sighting_of_ref": "indicator--d3ac9b4b-ab85-4ae8-af7d-9842d4bb5944", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a1876fa-5704-472c-ac12-014079c11e44", "sighting_of_ref": "indicator--d3ac9b4b-ab85-4ae8-af7d-9842d4bb5944", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2dca5d7-d1db-4ddf-95af-f7457f863fc9", "sighting_of_ref": "indicator--1392fde4-dfe4-4f31-a627-35b6431e693a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c894d9-ef15-45df-9ca7-aeef1ad3f22d", "sighting_of_ref": "indicator--74f60985-02a4-4b6b-aedc-33ac8bff6505", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f579278-78e3-44e2-ba03-32a9b6f7ca93", "sighting_of_ref": "indicator--74f60985-02a4-4b6b-aedc-33ac8bff6505", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77217f48-d05d-4cad-a3d3-834b97be8ddc", "sighting_of_ref": "indicator--994cac3a-b154-4ce0-9a5c-c47f4316a975", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35fb1091-f92b-4327-8a0c-e099369405a6", "sighting_of_ref": "indicator--994cac3a-b154-4ce0-9a5c-c47f4316a975", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f557441d-0220-41d7-bed2-f269acc7bdad", "sighting_of_ref": "indicator--994cac3a-b154-4ce0-9a5c-c47f4316a975", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b2c253-c6ca-416b-a125-d9a354e761ec", "sighting_of_ref": "indicator--a0871b0e-37dd-4d6f-88df-06bdf4dbf1e7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--812d66b1-3155-4f30-a5bd-ac30ef33102a", "sighting_of_ref": "indicator--d7fef8ce-470b-43d5-a286-4cf6a7dba308", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7a4736-a57b-4649-8e1e-a00d334261e2", "sighting_of_ref": "indicator--d7fef8ce-470b-43d5-a286-4cf6a7dba308", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a4fbf4-5e7f-409d-b776-5b52442ffb49", "sighting_of_ref": "indicator--d7a9659d-04cc-4b6a-b923-310dbaf3bdb3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13eeaa18-07f3-4a2d-b6ec-e4765124c04d", "sighting_of_ref": "indicator--d7a9659d-04cc-4b6a-b923-310dbaf3bdb3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45cd6e98-eea3-4bed-8175-446be24d97a6", "sighting_of_ref": "indicator--7168d1f2-a761-4eee-a04b-2991e215c074", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77fe0f95-6596-4300-b3dd-87af4c7563d9", "sighting_of_ref": "indicator--7168d1f2-a761-4eee-a04b-2991e215c074", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b096c82a-9152-4668-a4f5-e50624e02a55", "sighting_of_ref": "indicator--7168d1f2-a761-4eee-a04b-2991e215c074", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0e092e-8988-4a1b-8a33-bebb215a5fd1", "sighting_of_ref": "indicator--5a2232ae-91c4-426c-9fde-746e3c291bce", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da95746-5224-44af-8dfd-5e6fb78c0df9", "sighting_of_ref": "indicator--5a2232ae-91c4-426c-9fde-746e3c291bce", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb373cd-79b2-4941-bf60-451b9ee281c6", "sighting_of_ref": "indicator--a3eb4a9d-5462-4573-9898-8789cf250a27", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78dcc866-f282-472b-98ad-c4f1dc9bfd41", "sighting_of_ref": "indicator--0f2ac45c-7cfa-4e01-9fc0-b419a310afb4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d92b36-f20d-49e4-8060-9c445de22d1e", "sighting_of_ref": "indicator--0f2ac45c-7cfa-4e01-9fc0-b419a310afb4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e68aff-6d0f-41be-a770-0383a547730a", "sighting_of_ref": "indicator--d00414df-7ea2-453d-9d7a-8b2bfef5761b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--300f38c3-f586-490b-9553-0be48a5f1776", "sighting_of_ref": "indicator--d00414df-7ea2-453d-9d7a-8b2bfef5761b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad5641d-6e7f-4a74-9d03-13ec0bc7e669", "sighting_of_ref": "indicator--8a4f3139-6c7b-47e4-bb0f-adc59ba540ca", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f62d08-aa55-476e-9ae2-b68e2e76bd29", "sighting_of_ref": "indicator--8a4f3139-6c7b-47e4-bb0f-adc59ba540ca", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5491a985-e164-453b-91f3-241b42ef2833", "sighting_of_ref": "indicator--575b3d02-9383-43c2-99e9-7a1660111ef9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c36140-46d5-4c3a-9718-cfcb3a6d7341", "sighting_of_ref": "indicator--575b3d02-9383-43c2-99e9-7a1660111ef9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2762c281-761a-4490-9714-ae634e0a99c6", "sighting_of_ref": "indicator--1694f406-81c4-4a31-b79f-511bc8433055", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dec1dfe-5ef0-4b70-8dec-b01da534ea07", "sighting_of_ref": "indicator--1694f406-81c4-4a31-b79f-511bc8433055", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1dac81f-b842-4c79-bf19-2f11c4925b50", "sighting_of_ref": "indicator--1694f406-81c4-4a31-b79f-511bc8433055", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72cd8bf8-4556-4d2e-b13b-f95a313efb34", "sighting_of_ref": "indicator--6b414002-970b-4fe6-974d-ec9ff849ccab", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccdd7654-c564-48d8-9eb7-2ab95c2bcd92", "sighting_of_ref": "indicator--648c25b5-8eee-4613-a7a3-6ac1b55946f2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1608b7e0-ec5f-40f8-bac1-87dad69d6431", "sighting_of_ref": "indicator--ce87c2ba-8cb0-42c5-a556-c0618b83467f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--addd645b-24f6-4bd6-84df-0755f832cf7b", "sighting_of_ref": "indicator--ce87c2ba-8cb0-42c5-a556-c0618b83467f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385c54a3-6300-4672-9ed0-b7113f125a96", "sighting_of_ref": "indicator--ce87c2ba-8cb0-42c5-a556-c0618b83467f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a993b5-1d92-4e78-91fa-13c7d8c2aaa2", "sighting_of_ref": "indicator--45c83bc0-c3dc-4ac9-ac26-42f070d5c53c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee5b8c9-f6f9-4820-a076-53ee4b421f8c", "sighting_of_ref": "indicator--45c83bc0-c3dc-4ac9-ac26-42f070d5c53c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c553f93-9adf-44ee-bdcb-d2c6096e328b", "sighting_of_ref": "indicator--11b645fd-b188-45b5-86ca-d4a5a9c7f003", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2024669-3049-4a5f-bfc5-307e7dd0bfaa", "sighting_of_ref": "indicator--11b645fd-b188-45b5-86ca-d4a5a9c7f003", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c443b528-384a-40e0-80ae-8dc521d169c8", "sighting_of_ref": "indicator--11b645fd-b188-45b5-86ca-d4a5a9c7f003", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--323e68ff-c661-4699-b13f-395165b17b38", "sighting_of_ref": "indicator--6872b8df-4a4d-49c5-9f9b-2261a9880149", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04db8d27-dc71-44a2-aa61-c81ab2ac4df5", "sighting_of_ref": "indicator--66719692-de90-4410-a922-0eb757359eb2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84623d27-650d-4660-968c-389f428e7bf0", "sighting_of_ref": "indicator--66719692-de90-4410-a922-0eb757359eb2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4b06ea-c10b-4442-94b2-23f43ab552b8", "sighting_of_ref": "indicator--8f57c566-52e2-488b-ac07-14c21db912a5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc124b1-b65e-478b-a2c6-a03f96258c4b", "sighting_of_ref": "indicator--8f57c566-52e2-488b-ac07-14c21db912a5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8644ddf-62b1-4791-8c7e-cbe3b3fe712d", "sighting_of_ref": "indicator--35008ac8-8a52-4c6f-ad5c-4956cd4c3503", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed9468e1-f8c8-4c28-9f30-a09796d78b03", "sighting_of_ref": "indicator--35008ac8-8a52-4c6f-ad5c-4956cd4c3503", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c083d6e-022a-4ec8-9839-b40f8218f75b", "sighting_of_ref": "indicator--73bbd676-fdad-4ec1-8192-64a3b4c92140", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad38de3-bcb6-4bcf-9aae-d8c9b0841b0f", "sighting_of_ref": "indicator--f59471b6-180a-4ed0-ac5e-d35e0e88ae35", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8424b71e-ed1a-4d37-ab6b-08f534d9ecf3", "sighting_of_ref": "indicator--0fce971a-63bf-4f6b-9d3d-be301a1bd98f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e019816d-bc52-433b-ba49-3ba9cd536ffa", "sighting_of_ref": "indicator--0fce971a-63bf-4f6b-9d3d-be301a1bd98f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c35d53-dd5d-4457-8a04-7336db4f1de1", "sighting_of_ref": "indicator--580e2c7b-ad3d-42c3-83e7-dea7df6d4164", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10cd9914-f29d-46f0-9ff7-b3538a47f1ea", "sighting_of_ref": "indicator--580e2c7b-ad3d-42c3-83e7-dea7df6d4164", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae5be85f-5198-4144-8be7-7cec2af75765", "sighting_of_ref": "indicator--824fc463-7ebf-4437-b84a-b84e255b38ea", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77690400-0dc3-4f94-9c7e-3f0e2f3a2a28", "sighting_of_ref": "indicator--1f2e428b-b30b-4b5b-a8d6-111b8fb49d0e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9852de9a-1804-4bb2-a766-00e46bb1590a", "sighting_of_ref": "indicator--0af57014-82a6-4e89-8090-3aa12e807c71", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a9f92a-c3bb-412d-bcb6-737414a73d53", "sighting_of_ref": "indicator--3b2bb4d1-3169-47eb-894f-fd39aa9a1727", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2526019-6603-411d-b245-d05bcffd64f5", "sighting_of_ref": "indicator--3b2bb4d1-3169-47eb-894f-fd39aa9a1727", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b956acdf-2f03-463d-a32a-31885ad9df7b", "sighting_of_ref": "indicator--3b2bb4d1-3169-47eb-894f-fd39aa9a1727", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--161c5f89-59da-4362-94da-dd0074b940bd", "sighting_of_ref": "indicator--58671460-3fa1-4352-9dee-a111f07fa695", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44456c9e-2dc9-4926-880a-0a0559ddfa87", "sighting_of_ref": "indicator--163d8cb8-22ea-4a07-b909-7e9f2701736e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4771bc2f-2058-4b66-9033-b68651c8ae1c", "sighting_of_ref": "indicator--163d8cb8-22ea-4a07-b909-7e9f2701736e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5291038d-29c5-456a-bd03-9c1e2c2cd7a4", "sighting_of_ref": "indicator--c5700f3c-811b-48e2-a041-e25943d1f8d3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff9bda5-fada-4480-bd33-c77fdf26f11f", "sighting_of_ref": "indicator--c5700f3c-811b-48e2-a041-e25943d1f8d3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a734b067-2647-4579-982c-6527fc31bd21", "sighting_of_ref": "indicator--87acd229-97d3-4488-8bc2-b12e38bfbf57", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d47fd9e7-78cc-4ef8-b220-819909c193ab", "sighting_of_ref": "indicator--87acd229-97d3-4488-8bc2-b12e38bfbf57", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f19f97f-b81b-4c82-9996-5f420e79e1f5", "sighting_of_ref": "indicator--0cd88722-2c9e-4fe8-bf44-803e12a30c75", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d96538b-80d8-4a40-bb39-afbebf74851b", "sighting_of_ref": "indicator--0cd88722-2c9e-4fe8-bf44-803e12a30c75", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a259261d-2fbd-45e3-a107-9fac36a22599", "sighting_of_ref": "indicator--0cd88722-2c9e-4fe8-bf44-803e12a30c75", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4cc1b01-9f0c-41a5-9f04-c0f3e2efedd5", "sighting_of_ref": "indicator--6058c714-bf73-4a74-a679-6dc3d95214a9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af2b472c-d2ba-4151-b41c-58c59a62aafd", "sighting_of_ref": "indicator--6058c714-bf73-4a74-a679-6dc3d95214a9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa63aead-7a1e-49aa-a05f-651f69a74d05", "sighting_of_ref": "indicator--6d5b2edd-96ee-4d1e-8f17-b2f247de6027", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d70bc0d-f8ae-4ec2-9c35-1041d6a4ab9e", "sighting_of_ref": "indicator--826832c1-0c76-428d-b0af-1f179bd2aa7b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983d32c0-b950-4414-9233-603c9ae760d9", "sighting_of_ref": "indicator--d4f9ab78-a0fa-4b75-b29c-bcecb28ce356", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2d65c6-fbfd-4e35-adf3-734e7a8d99aa", "sighting_of_ref": "indicator--d4f9ab78-a0fa-4b75-b29c-bcecb28ce356", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89fe552-f2e7-4ba6-92c3-6dab8e45d181", "sighting_of_ref": "indicator--26192c65-4420-4342-8080-d425c18507be", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c509d7-bd3d-45e7-92d8-57b6f79cc0a3", "sighting_of_ref": "indicator--26192c65-4420-4342-8080-d425c18507be", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6e3b25-68ab-422f-8c1d-ed276e12046d", "sighting_of_ref": "indicator--993604c1-1a31-44ee-a8a7-31c18f431d0e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c8b843-54bf-4e3a-892c-7ec0639b1618", "sighting_of_ref": "indicator--9a244a2a-7349-49f4-a955-dfecfc47af89", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe8b501-9649-4c64-825b-82a6eaff921c", "sighting_of_ref": "indicator--9a244a2a-7349-49f4-a955-dfecfc47af89", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2efaa052-054f-447e-8417-549cca275bc1", "sighting_of_ref": "indicator--46f922d3-4507-40f7-b019-e765032de16f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28134a97-f57c-43be-a728-a9e0a139b0cf", "sighting_of_ref": "indicator--546c5955-d911-4d8b-b650-37deab5dad99", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f19e46-7984-4dd0-b03a-b967b951d440", "sighting_of_ref": "indicator--546c5955-d911-4d8b-b650-37deab5dad99", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b175fd-876f-4792-8dc2-6fbb56fc148c", "sighting_of_ref": "indicator--546c5955-d911-4d8b-b650-37deab5dad99", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85fd1bf-557a-443b-856d-e10f1cc64401", "sighting_of_ref": "indicator--94616e73-57cd-4e3b-8612-441734cb6243", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c9827a-1121-445b-bf98-2d50354eac0c", "sighting_of_ref": "indicator--94616e73-57cd-4e3b-8612-441734cb6243", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1512e0a-12d4-4f96-b490-98956a3b9b79", "sighting_of_ref": "indicator--94616e73-57cd-4e3b-8612-441734cb6243", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c10498-7692-4ec0-9eba-6175612f3fcb", "sighting_of_ref": "indicator--655d89b3-1606-4b70-bf97-765e485f1d7f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dcfb9ba-ee52-4b8f-a3f5-f0aa9852b251", "sighting_of_ref": "indicator--cebc6699-c58d-4cc7-aa4e-f20ec798581f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f17119c-25a3-4f95-86cf-8fdf15c36bbf", "sighting_of_ref": "indicator--cebc6699-c58d-4cc7-aa4e-f20ec798581f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d198e629-0289-4819-ade7-f18083e4dc98", "sighting_of_ref": "indicator--00084eda-ecc9-47c8-be15-e629beb4f90a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065b5394-b570-4c13-a48c-407e365e51e9", "sighting_of_ref": "indicator--00084eda-ecc9-47c8-be15-e629beb4f90a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cea6cef-a87c-4e26-a828-c3ca28eb242e", "sighting_of_ref": "indicator--82d4b15e-5580-4dc5-b9cc-45fecbfe88d9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9229bb-f937-450c-8cde-5a332dba8483", "sighting_of_ref": "indicator--b969db78-a09a-4e08-93c1-7c63f5c60b90", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6fd9ad-349c-4354-b101-c91b74414d22", "sighting_of_ref": "indicator--ab050869-dbf3-4941-99d3-9250205af573", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db57af6-c3ec-4f02-9eaa-55a97c1c01ab", "sighting_of_ref": "indicator--ab050869-dbf3-4941-99d3-9250205af573", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d8ffcc-f169-48b4-b439-2f20efea3ab0", "sighting_of_ref": "indicator--c00ff51c-eae3-4d8e-9d56-807aab00c847", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb155b3-ce97-42b5-a979-d7ce296555b2", "sighting_of_ref": "indicator--c00ff51c-eae3-4d8e-9d56-807aab00c847", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f385e56-548a-4ebd-8a3a-4f4fbcc5cb39", "sighting_of_ref": "indicator--9676de09-3e13-465e-a50c-b69f038b4615", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc16ecdc-b655-4d2f-94fb-613e701bb4dd", "sighting_of_ref": "indicator--9676de09-3e13-465e-a50c-b69f038b4615", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c5df72-db98-459e-bea9-bb25ed15d84f", "sighting_of_ref": "indicator--ae151501-0a24-49bb-933b-1bfc20b44f5e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf2c390-786d-4a24-b896-b0f11b831133", "sighting_of_ref": "indicator--ae151501-0a24-49bb-933b-1bfc20b44f5e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab68676-5419-418d-a381-888603076b13", "sighting_of_ref": "indicator--ae151501-0a24-49bb-933b-1bfc20b44f5e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ed8fc4-e53b-4614-b9a8-952189fe20f1", "sighting_of_ref": "indicator--e8ef52ef-de91-4480-b2f7-4d6c0edc7c53", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02f6c2d-f697-4366-818b-09096a5a7a5b", "sighting_of_ref": "indicator--e8ef52ef-de91-4480-b2f7-4d6c0edc7c53", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ecb78c4-c066-4c82-bf17-d735dc589aeb", "sighting_of_ref": "indicator--4ac16a19-3941-49ea-ab65-f3e7b554e64e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0536be91-8c5d-4903-a17e-06c7b932eddd", "sighting_of_ref": "indicator--4ac16a19-3941-49ea-ab65-f3e7b554e64e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5672b1c7-0aad-4a2c-8a16-d7768bdcc9a3", "sighting_of_ref": "indicator--7a2186da-20ab-4e3e-9cef-749bd268ce1c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--717cb8a8-d11d-419d-802a-a72a65360190", "sighting_of_ref": "indicator--c1c8c52b-b1e1-4c41-a8dc-22a4b8b6834f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c7dcfc8-184d-4259-b049-79c4c30a33fd", "sighting_of_ref": "indicator--81850397-ace2-4cce-b760-6e28678d43bb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa509820-ed38-4e7c-b8d2-3a4cda418b0c", "sighting_of_ref": "indicator--81850397-ace2-4cce-b760-6e28678d43bb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ff25ed-6e66-4417-b61c-c67f97e2787f", "sighting_of_ref": "indicator--4f77bf6a-285c-4f5e-951b-36e41bd3e3a8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c15ba2a-89b9-427d-9bd0-3375680ea274", "sighting_of_ref": "indicator--017bf43a-ea33-4e55-81fa-067c6969543b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2753549-c65a-4f48-af8e-21b004c3655e", "sighting_of_ref": "indicator--017bf43a-ea33-4e55-81fa-067c6969543b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614b0d3a-bc74-415b-9022-ffa1b71bdbc4", "sighting_of_ref": "indicator--017bf43a-ea33-4e55-81fa-067c6969543b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16a62fe-e646-436a-9561-0576a1fc0918", "sighting_of_ref": "indicator--5ca474be-136d-4d05-b2a0-766f9f8c5916", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7cced4-e922-484e-9fc8-d73a7c325cbd", "sighting_of_ref": "indicator--5ca474be-136d-4d05-b2a0-766f9f8c5916", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d225f9c3-f4a3-405a-a69f-c8b234ada2d8", "sighting_of_ref": "indicator--c6e1ec23-b315-47f5-bb57-b7c4203bcdfd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f118175c-134b-4626-91d8-83df991363d1", "sighting_of_ref": "indicator--c6e1ec23-b315-47f5-bb57-b7c4203bcdfd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b784d8b-4b20-4d9c-bdc4-906ffd62f343", "sighting_of_ref": "indicator--4e831bd1-01b8-46bb-b559-c563f72c7801", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01349b5b-b7d9-4c97-9423-5f1e53467481", "sighting_of_ref": "indicator--4e831bd1-01b8-46bb-b559-c563f72c7801", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535f74fc-5319-48dd-a5aa-a807ed8a9a84", "sighting_of_ref": "indicator--773df016-6e40-4638-ab17-42a562192cc4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62003dd7-c5d9-4101-8d4b-79a3617fa8b8", "sighting_of_ref": "indicator--69fe66d3-42a1-4ff8-99d4-aa2480997ac1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c1c8f0-6533-445a-b969-491212c7664e", "sighting_of_ref": "indicator--69fe66d3-42a1-4ff8-99d4-aa2480997ac1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59350c9-4d31-4ae3-b967-f2919c14d2f6", "sighting_of_ref": "indicator--fd3cfd1d-1ebd-4538-918b-22f02fc86fe7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac384a6-9083-4f6a-b21c-9b9c97af24eb", "sighting_of_ref": "indicator--28d5dac0-b012-4fd7-9b4d-de3b8b69d9c9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f14d46-e77f-4ad9-b11f-060e4fbe2078", "sighting_of_ref": "indicator--28d5dac0-b012-4fd7-9b4d-de3b8b69d9c9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52796b7-28ce-4537-8620-c40c86f68427", "sighting_of_ref": "indicator--c8af7db1-6deb-4fe7-bee1-87f8ccd101c0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f38e98-7786-480f-a3be-61ee9295f812", "sighting_of_ref": "indicator--c8af7db1-6deb-4fe7-bee1-87f8ccd101c0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dab2095-8f87-4c25-8ef8-7a2e329681b6", "sighting_of_ref": "indicator--898ae340-45e0-4fcc-9895-5ca5cbaadfb6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b76e852-a6ea-4919-a6d1-7a9a166deadb", "sighting_of_ref": "indicator--898ae340-45e0-4fcc-9895-5ca5cbaadfb6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c543bba5-7f3d-459e-9e3d-821ed9819fae", "sighting_of_ref": "indicator--06a949b6-9e6e-4313-9e77-c28e2e6bbee0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc31988c-0371-4233-b7bd-5f5f9fb7d96d", "sighting_of_ref": "indicator--efc7e059-45ef-4917-8b0f-f87c5e5641d3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4281f293-e4d1-4f3e-90c8-69260de184da", "sighting_of_ref": "indicator--efc7e059-45ef-4917-8b0f-f87c5e5641d3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00545bb8-3852-435e-afbd-a0d095992f4b", "sighting_of_ref": "indicator--69385a09-374a-49c9-a77c-72db71e3a4bf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78382e12-822c-41b9-ad61-56c652a3486d", "sighting_of_ref": "indicator--69385a09-374a-49c9-a77c-72db71e3a4bf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8114ab51-ed22-4736-9403-1ed1a5a28114", "sighting_of_ref": "indicator--7f1306f9-a76b-481c-837c-87ed514e98f6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3af319-2746-436c-b9ef-eb684ae84552", "sighting_of_ref": "indicator--7f1306f9-a76b-481c-837c-87ed514e98f6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e83bbcb-88ef-4239-bc78-cf681600296e", "sighting_of_ref": "indicator--585fec24-7c2f-4d22-a1b3-4f0a0ddbf403", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf7313db-1fc3-4a4b-adee-c6031c6674d3", "sighting_of_ref": "indicator--0293f816-c2af-422d-a2db-5fbaa192d7eb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f82c58-0981-4595-8ff5-d8136e37343a", "sighting_of_ref": "indicator--0293f816-c2af-422d-a2db-5fbaa192d7eb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--623856f4-3063-4f5c-b533-32e0bc266e28", "sighting_of_ref": "indicator--55454b69-3a65-4e22-9921-66c3e7e8db62", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75148ac0-afcc-49c4-adad-7c4bdcbc036c", "sighting_of_ref": "indicator--55454b69-3a65-4e22-9921-66c3e7e8db62", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9edb75-0532-45ff-9690-6ed28d622364", "sighting_of_ref": "indicator--55454b69-3a65-4e22-9921-66c3e7e8db62", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4441befd-c317-4627-a670-1a0fcc2880ec", "sighting_of_ref": "indicator--ddf66d97-1fd7-4370-83ee-f65c92460c1b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a6ea61-d0d9-42ea-a042-a28dd66cbd98", "sighting_of_ref": "indicator--ddf66d97-1fd7-4370-83ee-f65c92460c1b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a7de1c-be18-42f9-a47e-c46147230b62", "sighting_of_ref": "indicator--ffc94b0a-ecde-4efa-829d-4cd03ea98fd9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd574f3-9a78-4fd0-89f2-75208433deb3", "sighting_of_ref": "indicator--ffc94b0a-ecde-4efa-829d-4cd03ea98fd9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3388ad8-2815-4c1d-8afc-e81abd50d464", "sighting_of_ref": "indicator--c11c780e-db8e-4bc5-9c57-8c7ced0f0591", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc2b8ce1-081b-4c6c-850c-412937cb5a0e", "sighting_of_ref": "indicator--9f1f2202-38f1-451f-8805-1aa120f040f8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56109dad-9884-4532-a00a-07f30e070078", "sighting_of_ref": "indicator--9f1f2202-38f1-451f-8805-1aa120f040f8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7121003a-337e-4e8b-8c81-e72e34027395", "sighting_of_ref": "indicator--f5ff5a01-6897-4e84-8c4c-a34112206dd1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514f1644-55a5-4d8d-9dcd-8dace59d7781", "sighting_of_ref": "indicator--e4738cbf-7cab-4cde-8a20-79588cf4f554", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c41df94c-91f4-4b8f-90bc-9e2600690dd3", "sighting_of_ref": "indicator--e4738cbf-7cab-4cde-8a20-79588cf4f554", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a4626f-2700-47b0-95d3-0290401ce0c6", "sighting_of_ref": "indicator--e4738cbf-7cab-4cde-8a20-79588cf4f554", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9306908c-7b55-48e8-b56c-69d7efe37c1d", "sighting_of_ref": "indicator--11d3f29d-4a8d-4d47-b1ae-343e70b3f5c4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5479ce37-9092-40d3-9837-99f4bd089661", "sighting_of_ref": "indicator--ebefd154-4283-4c7c-be8f-63ac2484e7a5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90978f88-7c44-4b37-a346-7b1fb9ea3b80", "sighting_of_ref": "indicator--af82e0d9-0c43-4113-9a02-061a1529d6f0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e9f6fa-e79b-4544-87a8-484f467cbbc3", "sighting_of_ref": "indicator--f46da84b-346b-41f6-a206-0978230fa4ab", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6441d68d-5a3a-4180-9b27-b487e479940f", "sighting_of_ref": "indicator--f46da84b-346b-41f6-a206-0978230fa4ab", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891b4802-713e-45fd-aa07-d634b22a53c4", "sighting_of_ref": "indicator--443d1769-cb73-470f-ba64-c9c376fa8739", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67136afa-8754-4e4e-ba7c-f102ed02662a", "sighting_of_ref": "indicator--40e625c8-c653-4b5a-8022-d474ec55a1c9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21778973-0841-42f3-be94-00be26595b17", "sighting_of_ref": "indicator--63625e37-39a7-4180-bc3f-5872df309177", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742b6806-1d6d-4b7c-8d74-0e42fdbaa2fe", "sighting_of_ref": "indicator--a257e075-40fe-4e41-938f-a882330cad54", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa1773c-0b78-404a-8d3b-2a6cb3864324", "sighting_of_ref": "indicator--a257e075-40fe-4e41-938f-a882330cad54", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6d9956-b940-471e-876e-776475d14fac", "sighting_of_ref": "indicator--33a70513-2b0d-4beb-a10a-7594b99576a3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11562328-bb3f-48a2-8bfe-386ff1c72d08", "sighting_of_ref": "indicator--33a70513-2b0d-4beb-a10a-7594b99576a3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa63deb3-943e-4c30-b43d-8ba8699a92b7", "sighting_of_ref": "indicator--275b3d78-ea79-4595-b3c3-3266da851e11", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff3dceb-dbf0-4340-96f3-e7abcea4956b", "sighting_of_ref": "indicator--275b3d78-ea79-4595-b3c3-3266da851e11", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb638a9-2e97-436f-bca9-40f10ea2e5f3", "sighting_of_ref": "indicator--275b3d78-ea79-4595-b3c3-3266da851e11", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa0f5f0-d225-4ac1-9dd4-9f90434fecd5", "sighting_of_ref": "indicator--9b4b88ff-7e0d-4937-b952-c986aee39997", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2062061b-5e5a-4aa7-bad5-28eeeed35126", "sighting_of_ref": "indicator--9b4b88ff-7e0d-4937-b952-c986aee39997", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a037458-2a9d-4101-a957-f274db4a738d", "sighting_of_ref": "indicator--af36f918-3d56-45ec-8ffe-6f3b998f1a7a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--639e1776-0af7-4227-8c4c-bdae4dd2e974", "sighting_of_ref": "indicator--dce2547e-1454-4c54-86ca-dfad99ba9806", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2e2279-5040-48ac-9070-465ff5dc0b02", "sighting_of_ref": "indicator--7293d72c-10fa-4974-9499-c43fc3c7925d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b89be44-2e0a-4fea-bd9b-13a3349c8e80", "sighting_of_ref": "indicator--74cc44ab-9b82-492e-9d93-23caf0e01d2b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af58d63-385b-404b-b83d-f9bbb3139fe3", "sighting_of_ref": "indicator--74cc44ab-9b82-492e-9d93-23caf0e01d2b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc35cca1-a037-470a-ba5d-94392ab35456", "sighting_of_ref": "indicator--faffaa20-fb00-4552-8a17-a72cd8d31e88", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2a0c96-3272-4966-8c5d-b4cf91a15b38", "sighting_of_ref": "indicator--faffaa20-fb00-4552-8a17-a72cd8d31e88", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf95bd64-55d2-4aa1-824c-c74199d8f7ee", "sighting_of_ref": "indicator--faffaa20-fb00-4552-8a17-a72cd8d31e88", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--257589e1-a5e8-4b1e-a378-37cf80bc0fdb", "sighting_of_ref": "indicator--e63eb209-b60e-43a1-be19-7ce82ff94c08", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76dc0552-da81-4c5e-8753-b8e4e8a35328", "sighting_of_ref": "indicator--e63eb209-b60e-43a1-be19-7ce82ff94c08", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0202bf6e-69b4-40f8-a945-0cd55b59398f", "sighting_of_ref": "indicator--775f8dae-beb1-4fef-8966-ded0b8d08ace", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--123c6850-810c-4034-b40d-e3d140e3e627", "sighting_of_ref": "indicator--775f8dae-beb1-4fef-8966-ded0b8d08ace", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf7e2c4-7885-48ea-bdbf-951be35a1dfb", "sighting_of_ref": "indicator--775f8dae-beb1-4fef-8966-ded0b8d08ace", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17305479-9a14-4371-9901-9464008c19ef", "sighting_of_ref": "indicator--a90075e9-f8a7-42f1-9813-82ca895f812b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a113791a-9d02-4f3f-840c-6bd792958a63", "sighting_of_ref": "indicator--a90075e9-f8a7-42f1-9813-82ca895f812b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf594ee8-b81b-4114-8712-0870afa6742e", "sighting_of_ref": "indicator--a90075e9-f8a7-42f1-9813-82ca895f812b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23eb7fab-a234-402a-a767-87d672c0f2c5", "sighting_of_ref": "indicator--8fc23c70-193d-4278-80e3-9309e0880c37", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57773ff9-7c79-4175-8e4c-6fdbc562af42", "sighting_of_ref": "indicator--6d0307a6-9312-4ac6-a58f-b058e1dc7470", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df6921f-5d31-4ca2-adbd-98d01bb7f221", "sighting_of_ref": "indicator--6d0307a6-9312-4ac6-a58f-b058e1dc7470", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e047b1-7c74-4d71-940c-c8dbaa62a5ee", "sighting_of_ref": "indicator--30dd1043-5ffa-46ef-aa8e-4d0e62a78cb6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e9227d8-eafb-47b5-be94-53575155e16a", "sighting_of_ref": "indicator--30dd1043-5ffa-46ef-aa8e-4d0e62a78cb6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf1b5a1-ceb4-480a-a9b6-66fc173ea43a", "sighting_of_ref": "indicator--ce14b049-99e0-4ce5-9082-ca5f3877c654", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2eec362-5a51-4464-b8bb-ff74a255ea01", "sighting_of_ref": "indicator--57284f8b-9414-4013-ad38-07bfbfe03661", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a02f0b-5eab-4558-a088-944dd78e7b27", "sighting_of_ref": "indicator--2a251a52-a2d4-4a2f-a1c9-4c506e6a8c1c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80deb551-c261-4981-81f0-7dae8c1b3d70", "sighting_of_ref": "indicator--2a251a52-a2d4-4a2f-a1c9-4c506e6a8c1c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be22d808-e3b8-4dab-8655-aa07ea475de4", "sighting_of_ref": "indicator--93b64161-b0ca-4646-b4c1-a6fa4ee71738", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523f8abc-81f7-4be4-a674-1e8f893af5db", "sighting_of_ref": "indicator--93b64161-b0ca-4646-b4c1-a6fa4ee71738", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67e5d8e-066d-4dab-846f-38f7d063bee9", "sighting_of_ref": "indicator--1e3b0b65-483c-4ba3-aa10-5b2c38525d61", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c605752-9626-4210-bd28-65029878dfee", "sighting_of_ref": "indicator--b11035e5-0b72-410a-87a2-7f251213cf88", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0350559b-318e-4fde-90e7-2a6d3196acbb", "sighting_of_ref": "indicator--b11035e5-0b72-410a-87a2-7f251213cf88", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ea2aa2-3ad7-4e16-8f90-aaa70ec664b6", "sighting_of_ref": "indicator--38de8274-2728-4f5f-8027-b74c09f02648", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd4c318-7c24-4111-a074-ea733637c7c3", "sighting_of_ref": "indicator--38de8274-2728-4f5f-8027-b74c09f02648", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda8003c-edc9-4827-9ac8-cf7961033d3b", "sighting_of_ref": "indicator--1e80a3f1-5e06-4ca4-8449-fc124d54c751", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9203f6d0-4060-4d15-8ee0-9c8e40c158b2", "sighting_of_ref": "indicator--1e80a3f1-5e06-4ca4-8449-fc124d54c751", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebddd227-0f0a-4d6a-9f69-87551cbdef69", "sighting_of_ref": "indicator--a7cb16d1-98be-462a-9577-54700636c82a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053f5faf-6838-4981-a1c9-29af7c16f804", "sighting_of_ref": "indicator--23824e7e-160e-452f-ad89-46a2200259d0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5de029-31d1-4b09-86c3-1609e286c03b", "sighting_of_ref": "indicator--2793e8aa-ce3f-4a8c-8cfe-ad57e5cb51b9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b79955-383f-4707-b8ee-fa4ea78d5101", "sighting_of_ref": "indicator--2793e8aa-ce3f-4a8c-8cfe-ad57e5cb51b9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b05999b-0e0d-4683-b873-ab2edfad121b", "sighting_of_ref": "indicator--07f42124-5d3e-4079-837c-f4f5d7fa6758", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd97e13e-727e-4867-be86-ea70619f0936", "sighting_of_ref": "indicator--ad5fa5aa-db8f-4e5b-9dd5-6f822503c96a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba945e26-feea-44b5-8496-aff114d5f3f8", "sighting_of_ref": "indicator--ad5fa5aa-db8f-4e5b-9dd5-6f822503c96a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97f6067-28fe-4b77-9770-e6da958c934e", "sighting_of_ref": "indicator--45aaabbd-ada9-4dc5-a5b9-f1ea71157c97", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261199a8-53b0-4168-a17f-7f460a406a9f", "sighting_of_ref": "indicator--c039ef9a-bc80-418e-8cd7-ec29baf38f17", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379426a5-cc56-4d55-9c08-2f0670e15cd4", "sighting_of_ref": "indicator--c039ef9a-bc80-418e-8cd7-ec29baf38f17", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c69159-6fb5-4184-bdd9-5f16b23629b0", "sighting_of_ref": "indicator--562ef766-6fce-49a7-8bc3-a768d827c4ed", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3536987a-9957-43ad-bdbf-c97ab0dc6ce3", "sighting_of_ref": "indicator--943b37db-2500-4efe-a112-2531f4872cad", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad56cf6-9c42-481c-a79c-e45c5d146de4", "sighting_of_ref": "indicator--506de894-02bf-4b0a-aa7e-7acec9ee9f9a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091ffe9a-c1a9-4a8d-83c7-e2ef6403a97e", "sighting_of_ref": "indicator--506de894-02bf-4b0a-aa7e-7acec9ee9f9a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b2e109-4d6a-4ba9-96c8-4158f0bbb0cf", "sighting_of_ref": "indicator--8cceb74c-5e2a-4b16-b0fd-bab849c4a4e2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--674fa21f-d0e3-43e4-9c89-f19c7b11cf5f", "sighting_of_ref": "indicator--2aee7fe7-4881-472c-bed4-a46d65a3a72c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bacf3a30-23eb-4466-b889-1f071cc9235c", "sighting_of_ref": "indicator--3b62e23d-4651-4b9c-9bcc-7d1030676d2d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a25fb6-5421-4506-87af-589099b126ea", "sighting_of_ref": "indicator--3b62e23d-4651-4b9c-9bcc-7d1030676d2d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35bbdab7-4d26-4688-8289-e15c8f255b60", "sighting_of_ref": "indicator--3588187f-ddef-46d7-8364-fe5ff56d0775", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32db51b0-566d-418b-8998-b8844e1a1f43", "sighting_of_ref": "indicator--3588187f-ddef-46d7-8364-fe5ff56d0775", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30ee046-8a70-4390-b004-0bd9b38ae77a", "sighting_of_ref": "indicator--3588187f-ddef-46d7-8364-fe5ff56d0775", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb8f417-6bec-411b-8ac5-f41440a96c41", "sighting_of_ref": "indicator--9d14b292-f6b0-4fd5-b4f3-4092a186ad07", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df7f640-e1bf-4f63-bde6-040e247de40c", "sighting_of_ref": "indicator--9d14b292-f6b0-4fd5-b4f3-4092a186ad07", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e01d02ba-14f0-4c78-8c99-32946bbc455d", "sighting_of_ref": "indicator--29aa480f-abae-43f3-959a-bb23dfeb5439", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f10b88-336c-492a-a1b3-3626d37b64f3", "sighting_of_ref": "indicator--b076e67d-9d95-4b56-8df6-fe7ca73d8c16", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df954713-1d2a-416e-99c6-b546f88c359f", "sighting_of_ref": "indicator--2bb5f95a-b3cf-4fcd-b021-5015a2f89142", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89fe8f3f-4285-4fd6-b381-be91da7f6e3a", "sighting_of_ref": "indicator--2bb5f95a-b3cf-4fcd-b021-5015a2f89142", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d276ed8-6e76-47bd-a626-f692bbfd1bbd", "sighting_of_ref": "indicator--2bb5f95a-b3cf-4fcd-b021-5015a2f89142", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb356f4-bf8f-4ae5-a73f-2d930f401f21", "sighting_of_ref": "indicator--7851c110-fb2d-434d-ad04-d54ee56ac2c6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3cbd72e-d214-426f-9ea5-5a56ff02b5dc", "sighting_of_ref": "indicator--7851c110-fb2d-434d-ad04-d54ee56ac2c6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e069377d-3982-421b-9302-32e170d67632", "sighting_of_ref": "indicator--aaf30948-7c46-4b31-98bd-c6cf1c26540d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905db6a2-886c-4536-9830-59cba98260ae", "sighting_of_ref": "indicator--f9da35b7-2235-4802-a3cd-a27c80627140", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e51e3e24-ca4d-4877-aa91-24488966d982", "sighting_of_ref": "indicator--bc83b6c6-1917-495a-8ccf-eb6ca4955c14", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2dc21a-4f6f-4247-a9a7-8ccd39a9dc9d", "sighting_of_ref": "indicator--bc83b6c6-1917-495a-8ccf-eb6ca4955c14", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c29be17-02ce-4009-9145-f223acd1c7f6", "sighting_of_ref": "indicator--dcc09a3d-2c2a-47e3-a592-44ed72b681ba", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e364b1bb-8df8-4885-b050-f10ff209b6b6", "sighting_of_ref": "indicator--dcc09a3d-2c2a-47e3-a592-44ed72b681ba", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84d2f2b-a10e-4b72-82f3-e4e99ea2b18f", "sighting_of_ref": "indicator--f37b0c06-339f-49f4-88d7-01dabba297b1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2e2cbd7-80bf-4ede-bc89-0d5bbf72bfaa", "sighting_of_ref": "indicator--6cc39373-277d-4f97-9c98-fb8bea83ee14", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--915a4f63-b8c4-4b57-aa58-e1e748ff8d48", "sighting_of_ref": "indicator--f3209c3d-5a47-4379-b943-761e259af809", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef2c56a-0b79-4e0e-a5c7-9720c7d90283", "sighting_of_ref": "indicator--f3209c3d-5a47-4379-b943-761e259af809", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475b00bc-b8e7-4c89-bc66-d7d1a7ecb112", "sighting_of_ref": "indicator--c8e22049-e87b-43a0-9dc1-0559ceb8aed8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa51122-ca89-45ec-a276-bd6245e10251", "sighting_of_ref": "indicator--c8e22049-e87b-43a0-9dc1-0559ceb8aed8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195fddc8-ab23-454b-8588-561c8e23a068", "sighting_of_ref": "indicator--6e9b73cb-2a76-449e-a8b3-19def2486ed4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b13fbbe-6423-49c5-a1ba-f76cba71d000", "sighting_of_ref": "indicator--6e9b73cb-2a76-449e-a8b3-19def2486ed4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0645f3ad-b710-4fb9-a12c-547cd3138a34", "sighting_of_ref": "indicator--fde5a52f-54a4-444e-9400-906e74d6a4ff", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4856a7bb-bed7-4c38-adee-c17e66e9312c", "sighting_of_ref": "indicator--e91d54d1-2539-4df0-a3d5-e0d31db25cd6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d659a67-738c-467c-9437-e4da8983a1ce", "sighting_of_ref": "indicator--ed45f108-bbba-4a34-ba02-b2022b601369", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b61b60-be5c-4578-baff-f1371ef9a5bd", "sighting_of_ref": "indicator--997c52d8-c566-4d96-ac19-5cfc2dd093cb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e51ea0-f3df-432d-9fd6-c2d8148a9f2d", "sighting_of_ref": "indicator--5ed55be1-289f-4c63-8618-176797fe7662", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3430ffa-aba9-48b5-b48d-1fb114ab45d5", "sighting_of_ref": "indicator--5ed55be1-289f-4c63-8618-176797fe7662", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387af5bb-fe92-45df-99cf-d02b47a402ee", "sighting_of_ref": "indicator--2ffdfe4a-3f9b-43f6-97eb-9c4bc4e7fcd8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5768f93b-5104-4e43-a804-b55853735e60", "sighting_of_ref": "indicator--4c9cd053-6b96-4691-aa76-4b8c4bff5ef9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130ad9b5-0fcd-4a90-9528-6530955d4d2a", "sighting_of_ref": "indicator--4c9cd053-6b96-4691-aa76-4b8c4bff5ef9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f9fb9e-a70f-4f71-9ea0-ce0ba04d875d", "sighting_of_ref": "indicator--9e076fb2-cd72-40d6-b119-f2ffbad73ca1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d546c3-ab66-4523-977c-87b54d35ba25", "sighting_of_ref": "indicator--b6ada0cc-aec7-4c25-8998-f71c7bbb639d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b5d6dc-f39b-434b-a71f-654290d9ce7c", "sighting_of_ref": "indicator--b6ada0cc-aec7-4c25-8998-f71c7bbb639d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45854db5-596e-423c-bed4-c76e8ddfe305", "sighting_of_ref": "indicator--2d2ff99a-7075-4885-9a69-b055a34b3d4e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2237b16e-fba4-49bb-8b37-f40f33c85569", "sighting_of_ref": "indicator--4cc19d9e-9e58-4cad-b60d-48d48dfda376", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf07bdb-c15f-4374-b325-43d3bb2005d1", "sighting_of_ref": "indicator--43b4967a-896f-40b5-a325-90114d8f1753", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e22c5cf-696a-4617-ae82-d377b64e7abe", "sighting_of_ref": "indicator--5ee9ac36-f39a-4bbb-81e3-8a3d082d8fce", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358f3a52-af3b-4b62-8325-7d85f244bea3", "sighting_of_ref": "indicator--5ee9ac36-f39a-4bbb-81e3-8a3d082d8fce", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c06235c-b283-405c-9377-4c3fd34f6948", "sighting_of_ref": "indicator--c83b734d-9c7c-459b-90f4-b7c9caf8dfba", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d42ce0d-046c-4230-908d-33cd0fd59d11", "sighting_of_ref": "indicator--2b7751a6-6c9b-4e88-a24a-5c25209cc725", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be75c5ea-35f5-473c-a20e-602d30407748", "sighting_of_ref": "indicator--2b7751a6-6c9b-4e88-a24a-5c25209cc725", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2d3c12-c5d7-450c-9d44-5d5ffd8c4882", "sighting_of_ref": "indicator--2b7751a6-6c9b-4e88-a24a-5c25209cc725", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b304417-47ff-49fe-9f45-7c30bcd5ff6b", "sighting_of_ref": "indicator--50916eb5-183a-4d71-a3ce-593b479d8757", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4250d0c-9729-40c1-be97-4d06d8ecbfa6", "sighting_of_ref": "indicator--566017ec-79ac-49b9-9915-9cd13d7f815e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7eb17d-e021-4f28-a933-29cf477fd321", "sighting_of_ref": "indicator--566017ec-79ac-49b9-9915-9cd13d7f815e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--746d3312-43e9-45e4-a60b-d58d67d7e6be", "sighting_of_ref": "indicator--3284bc08-5138-4ef6-b285-4a9a6071ac1c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6f995e-7a01-4d99-9353-c1a21a76ff45", "sighting_of_ref": "indicator--4606401a-9d2b-43b1-a010-1d0ba3f5c83e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70222b2d-35da-481b-bfe1-a50535eb878b", "sighting_of_ref": "indicator--4606401a-9d2b-43b1-a010-1d0ba3f5c83e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da38af9b-8a5e-4cfa-9ae7-c1b712116b59", "sighting_of_ref": "indicator--056d65c6-966e-4013-affa-3faf4127eede", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--784e7b22-7802-4776-9a6e-3b1176357f4e", "sighting_of_ref": "indicator--056d65c6-966e-4013-affa-3faf4127eede", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9cce3c0-a937-43dd-87b2-cf423b59c6b4", "sighting_of_ref": "indicator--044aab60-1298-4d67-a9a9-a448e861c300", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c8941b-2edb-4967-ab39-7fa729ec5a88", "sighting_of_ref": "indicator--541c8231-7cf3-4b0d-a48e-2b8151cbbe8f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cef98ed-ab5d-4dc4-8c8f-e29810e9e89d", "sighting_of_ref": "indicator--541c8231-7cf3-4b0d-a48e-2b8151cbbe8f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41bdb2c8-99a5-43e5-a1b2-245f5ee853a5", "sighting_of_ref": "indicator--df68dab8-f102-4423-b914-1f2fe58092e5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c96b08-c086-4998-9ce6-84481083f27b", "sighting_of_ref": "indicator--df68dab8-f102-4423-b914-1f2fe58092e5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecfcb8f1-ab7d-4ba5-b329-047f914187b3", "sighting_of_ref": "indicator--7242ffc2-7fcb-4b0c-87dc-10ee89537449", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f96e06-84e3-4e22-8b69-d491a17af2a2", "sighting_of_ref": "indicator--7242ffc2-7fcb-4b0c-87dc-10ee89537449", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8fbfbe6-dbe2-4c3f-a37b-e0a66667746d", "sighting_of_ref": "indicator--bb178407-e318-4ce9-92e3-79c53c7104a4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f95f02-b4ac-460b-b931-2b676752864c", "sighting_of_ref": "indicator--bb178407-e318-4ce9-92e3-79c53c7104a4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ba2027-c78c-4da8-b84b-759717d32145", "sighting_of_ref": "indicator--26ffc86f-51c6-458b-b030-448ca13304e4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f98bcc07-34e1-4fc8-9682-43b35ab966c4", "sighting_of_ref": "indicator--9564e6ee-9d45-4d47-bea0-876efd56ca12", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4137d48-208c-4f87-8966-a7e240a4e915", "sighting_of_ref": "indicator--6eaf0ff7-375c-4409-8329-932fec67528f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74fd751b-e3b7-408d-ac33-442853d6bb3f", "sighting_of_ref": "indicator--9eaddcc1-f01b-4c9a-a344-0a96a8775f68", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--780fce27-cd01-437a-a40a-3f5edd37e6bc", "sighting_of_ref": "indicator--9eaddcc1-f01b-4c9a-a344-0a96a8775f68", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac3143a4-3ae6-4bc1-a2ef-be1a2b448f6d", "sighting_of_ref": "indicator--6f75831c-55c7-4a25-ad81-2776af19ec9a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f507af-933b-48de-9708-aece0f05743c", "sighting_of_ref": "indicator--6f75831c-55c7-4a25-ad81-2776af19ec9a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce8f6e8-f641-41bd-9926-493a666c6921", "sighting_of_ref": "indicator--6f75831c-55c7-4a25-ad81-2776af19ec9a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b593aff-c285-4016-a46c-daa57c2cb69f", "sighting_of_ref": "indicator--a1a2f6d3-dc3f-4a27-9a01-bbbf3adf5a10", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b2e027-7b3d-4b4d-8997-834a0d672f6d", "sighting_of_ref": "indicator--a1a2f6d3-dc3f-4a27-9a01-bbbf3adf5a10", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2099ffd-946d-4f78-94af-e9d945737b8c", "sighting_of_ref": "indicator--a1a2f6d3-dc3f-4a27-9a01-bbbf3adf5a10", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d113127-0ec1-4db8-87c6-96c26d4c6ee7", "sighting_of_ref": "indicator--67431269-2710-41c4-b884-e6c78f7f74e6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c0a4df9-fd85-470f-bd61-54bd84c6bc3e", "sighting_of_ref": "indicator--67431269-2710-41c4-b884-e6c78f7f74e6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9408ec49-c4dd-445c-9c2d-ecf291334342", "sighting_of_ref": "indicator--67431269-2710-41c4-b884-e6c78f7f74e6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f14609da-f106-414c-83d3-7a8b74baccd0", "sighting_of_ref": "indicator--57603c5e-6631-44d1-a4e8-58454cf52240", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce81b61-d4e8-438b-a7d3-5885ef7a92c0", "sighting_of_ref": "indicator--34e0ad97-be4c-4405-bc31-06ddc4f1a273", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6408d49-fad0-412b-8340-883dc54db00e", "sighting_of_ref": "indicator--34e0ad97-be4c-4405-bc31-06ddc4f1a273", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ed4ac1-3f47-42f4-875e-2e76b58611b2", "sighting_of_ref": "indicator--b1ab8287-4601-4e33-859f-dda9204deb3f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d17327a-1563-4004-a802-33c8b4a2a0f4", "sighting_of_ref": "indicator--71376a87-8c0c-42e3-ae24-5a6c9c0162f6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a0c8674-46e6-4d46-badd-69518b70040d", "sighting_of_ref": "indicator--71376a87-8c0c-42e3-ae24-5a6c9c0162f6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf9c71d-9455-4082-907b-c1b1aaebbc71", "sighting_of_ref": "indicator--1b4f2269-1910-43c5-a181-b3634ac396e6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9646479c-0d79-43b8-b4b3-4c740d949059", "sighting_of_ref": "indicator--915372ad-0776-4fb0-97e0-26edb8d781d4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ebb357d-c0da-4de0-a373-7237b5fd8c0e", "sighting_of_ref": "indicator--8881221d-a6de-4e8b-b1e5-c4a9d760ea06", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366a2c37-e469-4f87-b88b-3be134f690fe", "sighting_of_ref": "indicator--8881221d-a6de-4e8b-b1e5-c4a9d760ea06", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--554ba40a-db51-4175-8ae2-69325cd51ef4", "sighting_of_ref": "indicator--b8bcba34-c50c-4b6c-9384-0b11795eec3a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c03ac00-2d3c-47cf-8c35-f25596434a95", "sighting_of_ref": "indicator--b8bcba34-c50c-4b6c-9384-0b11795eec3a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261eecd0-81b6-4ac8-bef0-f27079176b15", "sighting_of_ref": "indicator--19611dd7-309a-4b8c-98fc-eaceeeba0ab9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--821fee3b-1f84-4fe2-aee9-fd67ecdbd1b1", "sighting_of_ref": "indicator--19611dd7-309a-4b8c-98fc-eaceeeba0ab9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab35cb4-4a76-4f50-987a-1c0f6e8aefcd", "sighting_of_ref": "indicator--19611dd7-309a-4b8c-98fc-eaceeeba0ab9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd507b83-468b-403e-945d-9930d6ce5c5a", "sighting_of_ref": "indicator--4411eab1-773c-4721-a7ee-7ef2588f16c5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd10188-4955-48ea-8cd4-6e39be661f8a", "sighting_of_ref": "indicator--4411eab1-773c-4721-a7ee-7ef2588f16c5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631f2d30-325a-471b-92b8-10bd932d742f", "sighting_of_ref": "indicator--f40d92cd-8cb3-4159-80e5-22efd2a7a16e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0959874-16ad-45bb-a0f1-83c024f3d422", "sighting_of_ref": "indicator--f40d92cd-8cb3-4159-80e5-22efd2a7a16e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3912a2a1-6fc5-43cd-9970-93ff93468971", "sighting_of_ref": "indicator--cd01f7fa-2ecf-4b11-aa91-44236fd91696", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf92176e-7940-4d03-8c1a-4bb6aa5b9632", "sighting_of_ref": "indicator--cd01f7fa-2ecf-4b11-aa91-44236fd91696", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978dbdcb-c8f7-4840-9937-c7a17a77bb0f", "sighting_of_ref": "indicator--cd01f7fa-2ecf-4b11-aa91-44236fd91696", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db13a2fd-15f7-42a1-870a-3766534a298a", "sighting_of_ref": "indicator--ad25f59c-71b3-4ed4-8dc4-1fc3126f9272", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce2dcae-e310-43f6-9d49-45a158bafffa", "sighting_of_ref": "indicator--ad25f59c-71b3-4ed4-8dc4-1fc3126f9272", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad41f21c-e7cf-491f-941b-b82541707959", "sighting_of_ref": "indicator--7f7f560a-893d-4b78-a1da-9ff662d8fbcc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47e4a22-c6e3-4418-9813-fafa5caaaab6", "sighting_of_ref": "indicator--7f7f560a-893d-4b78-a1da-9ff662d8fbcc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50440845-dabd-4af3-a36c-70552bb9ced2", "sighting_of_ref": "indicator--de4e93bd-6c8d-4d2e-8216-36575c6a42cf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dcac0e7-7122-4fbb-a80d-fd37183194b2", "sighting_of_ref": "indicator--de4e93bd-6c8d-4d2e-8216-36575c6a42cf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4022b6b-5b53-4486-9412-8e789f8b88a9", "sighting_of_ref": "indicator--de4e93bd-6c8d-4d2e-8216-36575c6a42cf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ba2cff-b344-4e07-8137-ae9604a41105", "sighting_of_ref": "indicator--7e39d7f3-4588-4cf2-b915-36e00408a5f1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f49f7c9-8359-4043-bb81-f0acf3638cf9", "sighting_of_ref": "indicator--ad167c1e-9466-4551-86ca-361d48394598", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad243a1-b9b2-46f2-aff1-572bf8ae4e09", "sighting_of_ref": "indicator--ad167c1e-9466-4551-86ca-361d48394598", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0609e877-1404-4695-b344-dd621f4a57ac", "sighting_of_ref": "indicator--e7703a17-8310-4a80-a52e-8b37b756543e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dbba547-1ba3-463a-b773-0bfa36a111b0", "sighting_of_ref": "indicator--e3802cec-d0b3-4498-8ea7-5fc6b0e425ff", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a0fef95-a0a2-4433-b5b4-719cd96255f9", "sighting_of_ref": "indicator--eff07fae-0545-422a-910b-42baad6f7fb9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c5ca9c-7b88-4eb6-a35f-e5a4455fe0db", "sighting_of_ref": "indicator--ce2f9b84-44b6-43d5-9aee-ad87cbac4e68", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf4eddf-8c13-4e92-9991-3dd1b4998067", "sighting_of_ref": "indicator--1b9b35f9-5020-412a-bfa6-df2481c1df02", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8900cc29-51be-4145-8de3-1c25b2a15e26", "sighting_of_ref": "indicator--1b9b35f9-5020-412a-bfa6-df2481c1df02", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723e04b9-34e0-4445-8517-4f4dd294fbb5", "sighting_of_ref": "indicator--2c8fd881-7543-4065-bcac-7d36c919765e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb763a6-7a7d-41ce-af13-b8798a84e88d", "sighting_of_ref": "indicator--323d70fe-bdba-4dfb-9c91-16f8d04f285f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08d1854-93bd-423d-9e1f-ad7b69b2a184", "sighting_of_ref": "indicator--323d70fe-bdba-4dfb-9c91-16f8d04f285f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2391120-ddad-4bdf-a7e8-804560e8bc43", "sighting_of_ref": "indicator--323d70fe-bdba-4dfb-9c91-16f8d04f285f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2226417-d3b9-4a44-8150-43be7aae1a04", "sighting_of_ref": "indicator--b2340ab9-68e6-4a9f-a665-0fe7278d335c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1217a37c-52e3-477e-9721-5895a7bb2bfc", "sighting_of_ref": "indicator--b2340ab9-68e6-4a9f-a665-0fe7278d335c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd55241f-0126-41c8-bde1-3664cfe4dc50", "sighting_of_ref": "indicator--b3e24536-970e-45cc-aadf-52da8f9a98b4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1344a83-eb5a-4ee2-9e29-a8a639614faf", "sighting_of_ref": "indicator--b3e24536-970e-45cc-aadf-52da8f9a98b4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9151049a-3977-407e-a412-1c39dc1c2405", "sighting_of_ref": "indicator--e8cbc556-3d40-49fb-8f29-c8f2cb112c9e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d58512b6-ef30-4497-8e41-0dd23ac7ced8", "sighting_of_ref": "indicator--e8cbc556-3d40-49fb-8f29-c8f2cb112c9e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e564c449-fd3c-4141-a5e9-c48a94218695", "sighting_of_ref": "indicator--a980274f-29f4-409e-9244-33cefe1f05df", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bcff4d2-b13d-4544-9ff6-f9af9940ebaa", "sighting_of_ref": "indicator--a980274f-29f4-409e-9244-33cefe1f05df", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0510e734-1f05-493d-bf24-c776cc80517e", "sighting_of_ref": "indicator--b2177c83-5135-434d-af2e-09216e62c58d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28778c27-b38a-4bca-838a-0c7996dfce74", "sighting_of_ref": "indicator--b2177c83-5135-434d-af2e-09216e62c58d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--836374c6-b927-4033-ba22-0490f4cc1428", "sighting_of_ref": "indicator--f09da9f1-b2a0-4f0c-89c5-94a47097fefd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db14b3ca-4486-41e9-b521-b253fbe2a1a6", "sighting_of_ref": "indicator--7e3bbc37-9862-42a2-bb66-18a9770eff1d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8152ef91-0385-45f7-b992-1380229e09be", "sighting_of_ref": "indicator--0687e78a-49cc-432c-9ca1-d92c8fd60f65", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c699708-c4cb-4fc2-bbd1-9cae7d6fe578", "sighting_of_ref": "indicator--0687e78a-49cc-432c-9ca1-d92c8fd60f65", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d973d48a-6fe5-4457-8323-e63e2ef48bac", "sighting_of_ref": "indicator--a63b2c4f-6781-413f-999b-4444e184acf9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b40f746e-b3d6-4e56-a1c3-d4947f7e3f02", "sighting_of_ref": "indicator--a63b2c4f-6781-413f-999b-4444e184acf9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef70621-c2bb-4262-a0fa-b248a5830c26", "sighting_of_ref": "indicator--01f35f04-07ad-47df-abf6-ac40febf428f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad1c2d11-dc88-4e1e-a745-8421e9cf856e", "sighting_of_ref": "indicator--01f35f04-07ad-47df-abf6-ac40febf428f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef59a49-2288-4588-bc9d-bb5b0ebb101e", "sighting_of_ref": "indicator--f92764fe-9330-4561-af80-f26b01d2f3fc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9483de-c221-45e2-ae0a-40f1c3b0a917", "sighting_of_ref": "indicator--45846158-f745-4687-acf4-a89a23fb3e20", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ea2c72-5aba-422b-8692-d5308ef1dbf1", "sighting_of_ref": "indicator--45846158-f745-4687-acf4-a89a23fb3e20", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149dbc59-17f1-4b47-8c0b-b70c479179ec", "sighting_of_ref": "indicator--33e40dba-e76e-4eb3-9194-da2d7739df18", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd0feac-4673-40fe-936f-0babd18d3707", "sighting_of_ref": "indicator--268df560-6d1b-414f-9992-8835f85d71ea", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a092001-5a44-430e-90e5-c944d0c8f045", "sighting_of_ref": "indicator--268df560-6d1b-414f-9992-8835f85d71ea", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad69b9b1-c29f-47aa-81e0-f783937de632", "sighting_of_ref": "indicator--fe465aa6-d69f-4c26-99f0-d534afd94e4c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5187b030-f864-4d04-94d7-839dd22bcc60", "sighting_of_ref": "indicator--22ba8e04-408f-47fa-8ae9-72a44af64d4e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61dba646-2bbe-4048-a077-8e650f5b5021", "sighting_of_ref": "indicator--7304df5b-6d97-4a18-9607-7f869315f52c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83347ab2-e71e-43ed-a32e-da57bcde4466", "sighting_of_ref": "indicator--34b743ac-ac40-4ab5-9d74-52aea1acb138", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c521f5-c5c2-4561-a83d-66cce9d51a1f", "sighting_of_ref": "indicator--34b743ac-ac40-4ab5-9d74-52aea1acb138", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a5be5f-e236-4a47-b1da-9d92f25e9d93", "sighting_of_ref": "indicator--da6319ef-401a-4cde-8218-bffddb16d6fc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--552313cf-895b-4ced-a02d-42967cb8a5b8", "sighting_of_ref": "indicator--5cbbcb32-1a6f-4166-8c45-9134028de013", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ba6701-1e7e-4e3d-bf33-9b22078d93e4", "sighting_of_ref": "indicator--5cbbcb32-1a6f-4166-8c45-9134028de013", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad15b72-0d2c-4321-9d62-da553cd2ee1e", "sighting_of_ref": "indicator--78130b31-66f8-40b1-ae32-d3b999cd170b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739c2eca-a4d6-4d2e-9ef5-c20612b16c17", "sighting_of_ref": "indicator--9183cc0c-bad1-403e-a3ec-85a01a99f229", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e8c34c-8b06-452e-a9bf-89c071010cd7", "sighting_of_ref": "indicator--1461636c-bad6-4ed8-abe9-22ca438f2482", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa622d24-6856-4b65-8f08-f5e4c21fb669", "sighting_of_ref": "indicator--e3ac3fcb-b38d-4cf9-b37b-cffa87b4f45a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8d52c5-e571-4836-898d-36dc146e5ccf", "sighting_of_ref": "indicator--e3ac3fcb-b38d-4cf9-b37b-cffa87b4f45a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b6503b-dba2-4249-b765-64ac4993c00f", "sighting_of_ref": "indicator--ab9e6f6a-90e7-45f7-b9bb-7a61322d5bb1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c96e3d-95ac-4d65-84dc-222df1d33574", "sighting_of_ref": "indicator--ab9e6f6a-90e7-45f7-b9bb-7a61322d5bb1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b6cbcd-5430-4d74-a7c8-f431e25035e5", "sighting_of_ref": "indicator--9faafb82-0358-46a2-8b1f-d539f36f1030", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2930de-672f-426d-8116-806374df5e46", "sighting_of_ref": "indicator--9faafb82-0358-46a2-8b1f-d539f36f1030", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae8cce3-b4ef-4dc5-ad48-6a885feb300d", "sighting_of_ref": "indicator--62d8ed6a-b6a0-49c5-9701-60ea627bd3e3", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69776e40-6201-4ff7-9018-ea8c77b8a741", "sighting_of_ref": "indicator--5f064cf1-84b8-4fa7-a308-6f93961d378f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31724c3a-3108-4741-b858-27a4e28566aa", "sighting_of_ref": "indicator--12d218ce-7f25-4308-b9b0-0e1b567cc437", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--960ea2e6-0f11-435b-8c12-dfebe1cf410a", "sighting_of_ref": "indicator--8c9d2404-55d6-4449-a1e1-f9b7bb1a0a38", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--859bfeb9-5412-40d0-a52f-c1f37db7a95d", "sighting_of_ref": "indicator--6cf788af-452b-44bf-b7f5-e2be4a4093b9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344fa92c-4d3a-40c7-80d2-24f65f9eac4e", "sighting_of_ref": "indicator--6cf788af-452b-44bf-b7f5-e2be4a4093b9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d117ba-bb84-4267-8454-77893e6e5741", "sighting_of_ref": "indicator--6cf788af-452b-44bf-b7f5-e2be4a4093b9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6893ca1b-f14e-4d09-bfb4-24f72e47c698", "sighting_of_ref": "indicator--d07c543f-52a6-4b58-9ce1-9a6f91d242ac", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f95422-c857-4649-a086-32c56719def1", "sighting_of_ref": "indicator--d07c543f-52a6-4b58-9ce1-9a6f91d242ac", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ba68fc-82ad-42f7-b00e-cbfa024f378b", "sighting_of_ref": "indicator--0e33b5fd-b99f-45ec-94c8-4514f41e54df", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6e223a-85a5-417e-a195-ec32ff9c19c5", "sighting_of_ref": "indicator--91db0617-ac5d-42e8-aa69-6946a90a73bd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72841315-88aa-4e4a-9a1c-f181fa07a2ec", "sighting_of_ref": "indicator--91db0617-ac5d-42e8-aa69-6946a90a73bd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c1ff7bb-18cd-4c4e-b02a-97bfcc2b368e", "sighting_of_ref": "indicator--31122160-6a48-4e79-a0c6-99dbb7c20280", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56399131-0a58-4bb5-87f9-00d1fa7ca00a", "sighting_of_ref": "indicator--31122160-6a48-4e79-a0c6-99dbb7c20280", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d8307be-9905-471c-acb2-dbae89c2e4a2", "sighting_of_ref": "indicator--6007cef9-c595-432c-9e94-35b80aa93541", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce57b07a-f509-418c-bf70-3e0e6ec9d971", "sighting_of_ref": "indicator--85b1ecca-6b3a-4e9f-89e3-9ed24177b9aa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71a6cb3-caf4-4246-b93d-50fcc7d7b516", "sighting_of_ref": "indicator--85b1ecca-6b3a-4e9f-89e3-9ed24177b9aa", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb0f79f-4126-4e80-bac2-eaf4423df810", "sighting_of_ref": "indicator--85b1ecca-6b3a-4e9f-89e3-9ed24177b9aa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1015fc-b911-410f-aadd-855725a6c0b3", "sighting_of_ref": "indicator--a5258c19-6050-4477-89dd-66c3c75add72", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af2db7f-97ce-4409-bd98-c151c0d7684b", "sighting_of_ref": "indicator--08115141-940b-44ba-922d-775ff7e55ffa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c396cf78-f4eb-47c2-b230-877552117de0", "sighting_of_ref": "indicator--8d1bbf0c-b1e6-4c60-acee-9cf6a7c7752c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f051d8d5-7bfd-4e43-9be6-15a2495aef87", "sighting_of_ref": "indicator--8d1bbf0c-b1e6-4c60-acee-9cf6a7c7752c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd7c8a19-62b4-4541-82e4-f34164b6680e", "sighting_of_ref": "indicator--7865e9bf-9ae6-4b3f-b950-1c3d144660be", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ee5f27-1af3-4ee8-8538-cb470581024a", "sighting_of_ref": "indicator--44094e7c-cb66-48f2-82ef-7077e6f90e3c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c08f6391-96b0-4964-b5bd-566763ca6ab4", "sighting_of_ref": "indicator--a4e64d1e-3267-4f40-9374-19da924f80aa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6faac3e8-3630-4408-a03a-0eac9e178089", "sighting_of_ref": "indicator--1c9a5a67-7478-4fe6-9c42-0488a803a4ce", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe777420-a2c2-474d-b0c4-42a2987d852b", "sighting_of_ref": "indicator--af12230e-fcf5-4ee3-8a38-daa59965d4f4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45118a8-8ed4-4023-9a31-99f664e7a122", "sighting_of_ref": "indicator--755a25a2-7269-47b2-ba37-f7c8225f3660", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f120de-7c6c-48c9-91eb-e79b17faa524", "sighting_of_ref": "indicator--46a93a54-a845-4797-9739-b30823f9a9f5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e8351ec-fed8-4102-82ba-98c75412f1fb", "sighting_of_ref": "indicator--052eac13-4c75-44ff-a407-99f5084f0d25", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79ee92a-b27e-4759-a417-01beed4cddbb", "sighting_of_ref": "indicator--052eac13-4c75-44ff-a407-99f5084f0d25", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed624d57-8780-4e5f-b6ae-b19b0259b304", "sighting_of_ref": "indicator--a95be5c2-5f3c-4d05-9505-cb87960426cc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fccbeb68-6b22-403a-8ecc-28fa41bc0d0e", "sighting_of_ref": "indicator--2f52c38e-7d25-4302-9d29-b93922d7bc95", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2008d825-028f-42ab-b67c-8ab9bfdf6059", "sighting_of_ref": "indicator--2f52c38e-7d25-4302-9d29-b93922d7bc95", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92e6da2-d9ea-4d67-8265-302aa85fad24", "sighting_of_ref": "indicator--2f52c38e-7d25-4302-9d29-b93922d7bc95", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--414436b7-f1ce-4603-bd7f-5cdd8542870c", "sighting_of_ref": "indicator--2f52c38e-7d25-4302-9d29-b93922d7bc95", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--779bb037-caff-4ef6-807e-cd39e6ea31b3", "sighting_of_ref": "indicator--488cfd1e-b036-41a5-ac7b-ce8d35424602", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc47f33d-d911-4e30-853a-d076514d5b9b", "sighting_of_ref": "indicator--488cfd1e-b036-41a5-ac7b-ce8d35424602", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167cb08e-cf15-4271-85b9-5953d1dc9b65", "sighting_of_ref": "indicator--488cfd1e-b036-41a5-ac7b-ce8d35424602", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2387c0d-bdc0-4ec3-945d-82cd5e341a83", "sighting_of_ref": "indicator--488cfd1e-b036-41a5-ac7b-ce8d35424602", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23dc0fc0-fe7d-4ea4-b435-e5b1a6b05584", "sighting_of_ref": "indicator--1e48a477-ad2f-4793-ad08-104b5369435e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07096c85-da70-48cf-a1b5-0d6154096748", "sighting_of_ref": "indicator--906a4c82-898b-4ccc-9507-8631dae2e598", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c78d76-31d7-4363-be86-b11f71ef6125", "sighting_of_ref": "indicator--1b2c1660-aa7c-4aa1-a9e6-e40d8c2a66ca", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3923562-bf17-4800-bfca-7d9a7fcee198", "sighting_of_ref": "indicator--4c852733-0c6e-49fc-8864-65da4a482636", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51d41a8e-4558-4d77-bcdc-768d2afd3dd4", "sighting_of_ref": "indicator--0a35bbe4-c79f-4450-8238-892bd42fd311", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a7d181-8255-4a70-93aa-ce2672a65e35", "sighting_of_ref": "indicator--0a35bbe4-c79f-4450-8238-892bd42fd311", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13fe2af1-7f75-40a1-b7a3-c9e5e0c748af", "sighting_of_ref": "indicator--79be464d-ad2b-412e-89de-622da92ee8b9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea7fc6f-7070-4183-9376-ec17b23783b3", "sighting_of_ref": "indicator--684711b9-d652-463f-ad14-e36c6cd3e0c8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd26c4f-1b69-45ba-b47f-e010612a00b9", "sighting_of_ref": "indicator--3c60f060-8bf4-4693-8970-e749a670d92c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f71c98-1627-4280-b562-354111b9cbc7", "sighting_of_ref": "indicator--3c60f060-8bf4-4693-8970-e749a670d92c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f793f4ee-36d0-41aa-acc7-44b6fed9fdab", "sighting_of_ref": "indicator--3c60f060-8bf4-4693-8970-e749a670d92c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f6fd27-5359-4231-a2ef-2b374163b275", "sighting_of_ref": "indicator--19befd5e-35ef-46f9-9ab5-f24f6e46ace8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--148f901f-ccf5-441a-8591-7456f15b8c0b", "sighting_of_ref": "indicator--19befd5e-35ef-46f9-9ab5-f24f6e46ace8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec66bbeb-f34e-4b91-be75-307084e99887", "sighting_of_ref": "indicator--614b5183-a9ec-477f-ae10-43e2ed50d8dd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d27b073-2577-4fc1-95c0-30539df786de", "sighting_of_ref": "indicator--742c8ed3-9961-4d48-bb33-f835b883741e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f44f5789-46b3-47bc-8e6b-86ef50900b3d", "sighting_of_ref": "indicator--742c8ed3-9961-4d48-bb33-f835b883741e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fcbfe28-1e90-464c-bcb1-7737ae3f6a85", "sighting_of_ref": "indicator--99cd0d59-7d8c-46bf-b294-bfe23c661e71", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4053d736-a3aa-4d8f-92f9-0ca7b8080c48", "sighting_of_ref": "indicator--bfcc68f1-68bb-4693-856d-a08b97a1a1b5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd828c1c-3aa3-45c8-bc1f-800d8d4c885f", "sighting_of_ref": "indicator--bfcc68f1-68bb-4693-856d-a08b97a1a1b5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f561830-608a-4395-837f-e022d009ed4f", "sighting_of_ref": "indicator--42245738-0ca5-45bf-95c1-722a9cb3fb9d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049d0049-77a3-4190-97d3-03b16a8d5936", "sighting_of_ref": "indicator--91dae04b-5494-4a83-892c-b83260438433", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c6cfff-9e13-456c-b0de-97961e74cf73", "sighting_of_ref": "indicator--a47cc48c-0b52-4835-a973-35e25ec193ed", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b6239e-5a9b-43ee-aad1-066defe5cf38", "sighting_of_ref": "indicator--8f518a70-8d3d-4136-9393-55e94ad14195", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79697387-fb4c-4ede-b3b6-42c89be7740d", "sighting_of_ref": "indicator--42c75007-ff04-4594-9dff-9154b8b50ed4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d560acf-73f4-499e-b218-150f0668b907", "sighting_of_ref": "indicator--42c75007-ff04-4594-9dff-9154b8b50ed4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd1409b-b21b-4198-bd1e-a8225dec5095", "sighting_of_ref": "indicator--42c75007-ff04-4594-9dff-9154b8b50ed4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec7c8a6-5353-4cf7-a022-4a46132c7b6f", "sighting_of_ref": "indicator--1bb7d622-61b4-47c6-a81f-56d2b6804826", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3292b2d2-aaf8-4722-9b88-b143a5c51acd", "sighting_of_ref": "indicator--5b05e2a7-236c-4831-b927-c8d4a3fe25ab", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa50db5-2c90-4763-b04e-93c50027bb96", "sighting_of_ref": "indicator--af85a6d4-b511-4685-875f-85b7d4aa1cc5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82624163-1eff-4d72-884b-901805ba37a1", "sighting_of_ref": "indicator--af85a6d4-b511-4685-875f-85b7d4aa1cc5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df6c68c-c262-4e1a-b500-30d0b6f3aaf5", "sighting_of_ref": "indicator--fa8b9c77-35a5-4760-b224-874ccb43ea48", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e73520-f1ad-400a-8026-2d9d164a5874", "sighting_of_ref": "indicator--f1cbb5da-5d13-4ad6-8a3f-86b250cfd344", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a216a0c-b810-47b8-94de-94c3700964af", "sighting_of_ref": "indicator--e3e074de-bd30-41f2-835d-480e73dc1872", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1bd592-652a-42b4-a7b1-66b44f1407c5", "sighting_of_ref": "indicator--e1020e2f-eda9-4b5b-a5bf-d396a4d521bc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a3ce45-b4af-40a9-91af-1c0c96dc550e", "sighting_of_ref": "indicator--e1020e2f-eda9-4b5b-a5bf-d396a4d521bc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4edc99cf-8133-4784-bef0-a47c4605a4fe", "sighting_of_ref": "indicator--e1020e2f-eda9-4b5b-a5bf-d396a4d521bc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c92375-d310-447c-96a2-95f11fe7e99c", "sighting_of_ref": "indicator--b9556ed5-eb13-42e3-88bf-fce1c830caeb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc7462f-9cc8-44bb-9153-0927b86cc68d", "sighting_of_ref": "indicator--e8ddee7c-5bf9-43cb-bd59-4fa2135dfdc7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df27062-3785-49e1-b2a6-b91ec92553eb", "sighting_of_ref": "indicator--e8ddee7c-5bf9-43cb-bd59-4fa2135dfdc7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97474af-931b-403d-8a66-99127d5ee600", "sighting_of_ref": "indicator--a523f35f-beef-4603-899d-ac798d493af5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ce597c-3b6b-4897-aa93-b51850da45fd", "sighting_of_ref": "indicator--80a3b49b-7d1d-43a5-8bef-a4d0f026ba02", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f056c37-8065-40b7-9df5-7e896597a3b3", "sighting_of_ref": "indicator--c5d341b8-dd4b-456a-9d79-49e94b92b68a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27397000-e548-47bd-a64f-c40cc6506894", "sighting_of_ref": "indicator--306eb9ec-239f-4779-a544-53a0d8211c7b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--216495dc-5968-465b-96e3-b66066cfa272", "sighting_of_ref": "indicator--ab0599cc-3058-4c11-9f28-b626c397c240", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b0bbbe-0e8a-42c2-8d7b-587ef75d68a3", "sighting_of_ref": "indicator--0ef58690-0619-4704-baa7-e27df683838e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ea4327-3dbc-4f9e-af5d-9fc8b5b857c5", "sighting_of_ref": "indicator--bc28324c-1bcb-4c04-8136-f7c342a185c3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b7b1fca-7be7-4e08-9377-fe5c29c409cb", "sighting_of_ref": "indicator--bc28324c-1bcb-4c04-8136-f7c342a185c3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--794bc44b-abcd-4edc-8f49-8b381c3454d9", "sighting_of_ref": "indicator--7c7102c8-77a4-4f34-a088-150c8549aed6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3393011b-d0f1-46c9-9d95-109699412dbc", "sighting_of_ref": "indicator--7c7102c8-77a4-4f34-a088-150c8549aed6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd43130-efab-46a3-8465-c17fd7b5cec6", "sighting_of_ref": "indicator--eec1d636-d400-40a9-9d22-af92c1a5eb78", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c627510-2390-4410-be1d-3ce6641c141b", "sighting_of_ref": "indicator--4d5b511d-8f06-41cc-adfd-3f58dcd38dba", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2aa5e4-03c6-4306-bdd6-d8381d9edb8d", "sighting_of_ref": "indicator--30924984-c383-46cb-82e7-cb96adba42b6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924b7cc7-050a-4e4b-ba6c-81cea808a60e", "sighting_of_ref": "indicator--eaf14492-f137-4bcb-bef2-f3cb3fe9abc6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--632d42d9-76ab-4377-81ec-09cc1701d179", "sighting_of_ref": "indicator--379073f6-74a3-4839-89f8-942b3dca6262", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b92208-0369-484b-b00f-e1f4029fa848", "sighting_of_ref": "indicator--afcb29a0-fd82-4aaa-aa50-67343567ef5d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58185b77-853d-4053-8a8c-da11382972bc", "sighting_of_ref": "indicator--05994315-63dd-4b8b-859d-71239877c412", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924ca482-ffae-4a1e-9c1a-efc1cd039cf6", "sighting_of_ref": "indicator--44583a76-40e7-4bf8-92b6-9f03532facd3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd96e4e1-a6f0-4694-801b-fce9502fd568", "sighting_of_ref": "indicator--9e87cd01-c3b9-4738-bf02-f4e3ef5ba00e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9911e7-08e6-4280-8534-19d3e2bd8200", "sighting_of_ref": "indicator--d327f7a7-c186-4b5b-821b-1aa9a722fa7b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e829b7c9-a235-4726-acf2-9c5b1bcdaa03", "sighting_of_ref": "indicator--85f49429-1d6c-45bc-a5ae-d89ce1b6e2e2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cea258c-c51f-4e3e-a8ca-b968df6ff476", "sighting_of_ref": "indicator--bd7e61aa-1ee3-418a-a63a-9a58bd96678b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e20590-e6c5-4ca3-8218-15b6efc150f6", "sighting_of_ref": "indicator--e218072d-0123-4216-a868-c4c94966157b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b740f45-25e1-4240-afaf-e0974b4da0f3", "sighting_of_ref": "indicator--e218072d-0123-4216-a868-c4c94966157b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb334f32-2a14-461c-830c-7d8dd1c4e78a", "sighting_of_ref": "indicator--9825c922-2fd8-40ef-a852-fbaca82979fb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1316f171-07d0-47b9-9e9a-82b6d64587c5", "sighting_of_ref": "indicator--9825c922-2fd8-40ef-a852-fbaca82979fb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95bf978f-4237-4f85-aed0-cebdc28017fa", "sighting_of_ref": "indicator--9825c922-2fd8-40ef-a852-fbaca82979fb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81bff453-8927-41a1-97d6-2e6c28067ec2", "sighting_of_ref": "indicator--664b4570-9a97-473b-ad30-7b3cd7f75ff3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f542b981-8fe3-4bd0-baf4-7341795756fe", "sighting_of_ref": "indicator--3d46bad2-407e-445a-86a5-6d809c39cb6f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29cdd6f6-2a8b-4e5e-a6c0-2091709b3e0d", "sighting_of_ref": "indicator--3e027e57-3aae-4ef4-ad9a-7069bc9ad7a1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32fecd46-e64a-43c9-a5ba-884ced169100", "sighting_of_ref": "indicator--bf46742f-6d4c-4275-9fe4-cfb3e677f5b5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e8d71a-9406-4d3a-9a73-f2b25d3875ce", "sighting_of_ref": "indicator--4f28ea23-3fb9-4aba-b49f-1d7bea8db78e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9145d9-58d8-4ee9-9301-776b6d93c802", "sighting_of_ref": "indicator--b470c155-adb8-479b-b829-75187c285ce3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aed81c27-2524-41a6-98e5-4d4c037f7980", "sighting_of_ref": "indicator--b470c155-adb8-479b-b829-75187c285ce3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f12cda4-7766-47dc-a429-3847a8e44287", "sighting_of_ref": "indicator--64023d15-621c-4718-8fc1-f837df3fba4b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f48689ae-1afd-4dfb-87a9-ad6aa6a66507", "sighting_of_ref": "indicator--9f2ea0a9-5a7a-46ef-8c9a-07af54df0201", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb63bda1-f0b7-4208-8102-a435222bb42b", "sighting_of_ref": "indicator--9f2ea0a9-5a7a-46ef-8c9a-07af54df0201", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--913f9d15-34ea-4f6f-9f8f-f7f01e0d14fb", "sighting_of_ref": "indicator--8c316277-88e8-482e-9eaf-6932a9b124eb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24916261-42cd-47dd-a3e6-efbe64df60f1", "sighting_of_ref": "indicator--b23e918e-1dad-4853-b57f-637420c81ef2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065dc422-68c2-4757-8185-5167feb3105a", "sighting_of_ref": "indicator--b23e918e-1dad-4853-b57f-637420c81ef2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca15453c-846d-46b1-bbb7-1d71d867cc94", "sighting_of_ref": "indicator--e9aebf5a-1027-41f7-910c-716f30154686", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3816004-ed8a-469b-95c2-8d40bc752f73", "sighting_of_ref": "indicator--ca7687b3-5d2e-4a24-be15-00110b07cd0d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d001636-500c-4a3d-a994-fade521a1ea6", "sighting_of_ref": "indicator--ca7687b3-5d2e-4a24-be15-00110b07cd0d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92983a0-7059-4be9-a374-995c2f91af6c", "sighting_of_ref": "indicator--bc7f03a1-cf8e-4afe-b5f9-facf20315d31", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64716f1-5e5f-4ea9-bcb5-43efac119c65", "sighting_of_ref": "indicator--0c2b3c1d-e296-4f25-82d2-9a3b176c4e62", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bfacbe7-61ab-4c7d-ac53-e2d998a7519f", "sighting_of_ref": "indicator--887d7d35-a47a-4423-92f9-4caad084a10f", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd31f14e-2301-42d9-b036-d84e98493ebe", "sighting_of_ref": "indicator--896cb3d5-8ae1-428a-8c8a-79a021c9685a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--724b4f1e-3702-4cc8-ac2e-08a35b7c0cf0", "sighting_of_ref": "indicator--2689ef87-7aa4-44cf-9ed4-bcec1d6ec5a1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3a4660-8fbd-49e6-a425-b23ded778213", "sighting_of_ref": "indicator--8dd219ae-8c50-4623-9f82-9a98bda37092", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e39c554f-4767-4ac5-ad6e-ed1ca9325247", "sighting_of_ref": "indicator--433c08df-c0a5-4811-a3c5-8b8bbb9496a5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b5fc806-7dd2-4567-989a-7056d25bc7ea", "sighting_of_ref": "indicator--0a110a6d-0f79-486f-8151-37b24199466d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ebe35ef-36d1-4931-9518-316e12ed2b40", "sighting_of_ref": "indicator--a56ef779-1674-43db-9567-4438cef6aa0e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e554828-e049-4461-b1e6-90cedc8afad7", "sighting_of_ref": "indicator--a23ea9d1-3d3f-4783-8ce0-e1d748cf8d58", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1dcc30b-3826-4946-b4ba-d8bd5a8e9912", "sighting_of_ref": "indicator--5cd339be-3fb3-43e8-9657-53cb8afa148b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ff8c6b2-ee14-4c98-9992-94bd8e7c5bf7", "sighting_of_ref": "indicator--bef626cc-0fa6-4918-88ce-9be77442d34f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52cf8396-db41-4a88-904f-1573a69f51a9", "sighting_of_ref": "indicator--e03b603a-de6b-4480-b161-8f93ced5ea12", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c39ce8-d760-499b-a8f5-77cb92e3b122", "sighting_of_ref": "indicator--2544ed2c-d946-472d-8d77-607e666d5a86", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf34c59f-7a9f-4b6b-b2c1-36c80424e1f0", "sighting_of_ref": "indicator--17a2a684-1aef-4ce8-b24b-135e8d50f7cf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814a80be-3355-4622-9cc4-66edeafe0e22", "sighting_of_ref": "indicator--1b3b7cf0-5466-4832-a50c-210e9026d24b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb78504-5107-4f4e-aa8b-58f11f864d47", "sighting_of_ref": "indicator--51a3cc6a-dcc9-486b-8ccf-b67d76a0f9c3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19672209-c964-4df7-bca6-11cc80cb22dd", "sighting_of_ref": "indicator--72b7692a-0489-4188-b99c-1ca79004d96f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ddd8ab-6b4f-45de-ab78-acedbf201972", "sighting_of_ref": "indicator--3c9d0fb2-ad51-489f-a825-e568da367ea5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fdc11d0-64b8-415a-8014-fcce0f1b5679", "sighting_of_ref": "indicator--3c9d0fb2-ad51-489f-a825-e568da367ea5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df42ac8-b462-43da-bbab-551e0e992d33", "sighting_of_ref": "indicator--3c9d0fb2-ad51-489f-a825-e568da367ea5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3fdb3a2-6530-4265-9197-0a17b78521ee", "sighting_of_ref": "indicator--86fd1217-5dcc-49ea-b85b-3b47015ffe36", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735ea28c-e188-44c9-912c-df270b458e1f", "sighting_of_ref": "indicator--7b8dac1a-d805-4f1f-9758-4bc2f17efcc5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--046b6830-cfa2-429d-82a5-fa000a7eb778", "sighting_of_ref": "indicator--c1b8369c-f9fb-4427-a676-38f0ecdb6f57", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd963651-21c4-425e-b749-e76d8983d782", "sighting_of_ref": "indicator--c1b8369c-f9fb-4427-a676-38f0ecdb6f57", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc866c6-825b-43c8-8685-d60bb0bf4f3c", "sighting_of_ref": "indicator--e20a91ce-07a2-48ba-9ed4-7691b70fe084", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e28f5b-d872-4742-b9b7-d8aee3e05d4d", "sighting_of_ref": "indicator--70ce7509-22f7-4711-8cb3-2aca075e96b8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d30176-5ea7-4479-9903-aff565da8351", "sighting_of_ref": "indicator--58cb81ef-fb49-4e99-93c1-afd27e2b89a6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7cfcb0-1d88-4b8e-8b5e-e9d699148f50", "sighting_of_ref": "indicator--f98630c6-7f27-4f7d-87c3-ef8486298805", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f26a3a8f-33e2-4f14-b1c5-01ce86bee3ff", "sighting_of_ref": "indicator--cdd8d2ff-95bb-4130-a7ff-6e2b49a54bec", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688e58ab-e128-4b77-a62d-d79115f2572b", "sighting_of_ref": "indicator--4eb7bf7a-0f22-4c73-85aa-a89dc23446e6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab232f3d-5e6b-4c5e-9fed-322d9144c2ee", "sighting_of_ref": "indicator--4eb7bf7a-0f22-4c73-85aa-a89dc23446e6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27074a3f-417b-4f65-a8a9-c07ce4a10172", "sighting_of_ref": "indicator--4eb7bf7a-0f22-4c73-85aa-a89dc23446e6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda8c7cd-ba70-4ff8-9f14-ae4b5946ea0c", "sighting_of_ref": "indicator--597e4bb3-6507-48d9-b934-1d1c01449040", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab6d7cc-6512-4e0d-997e-f9d201cb8400", "sighting_of_ref": "indicator--00fcc2e7-3419-4099-961b-e7a2022d18ed", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888ea0f9-ffaf-4c0d-af77-454adad2de3e", "sighting_of_ref": "indicator--00fcc2e7-3419-4099-961b-e7a2022d18ed", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da4521fd-f5e7-4a4c-9355-ed9408068984", "sighting_of_ref": "indicator--00fcc2e7-3419-4099-961b-e7a2022d18ed", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c07a546-455c-4a8b-8818-727d1e56cfad", "sighting_of_ref": "indicator--ea628891-5c60-4e1e-b526-175894027a24", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d38d49-5b11-418f-80ab-d65868ad5db1", "sighting_of_ref": "indicator--3d5df67f-57cf-43a5-9144-8571e60a770b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd97bfc3-e919-4cf9-81fd-f203230f69a4", "sighting_of_ref": "indicator--4fa5851e-f98d-4fd9-aa92-d19cdbfda268", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d32266a-ac7a-41fb-89e9-4020b1a333f9", "sighting_of_ref": "indicator--eaafa55f-b7a3-4b94-bde9-d3dd22e4d853", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2f0c9c-918b-4575-8209-fda35f6c44a7", "sighting_of_ref": "indicator--0779bbff-cc40-47ac-97e3-05c76733cd9f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c645bc8b-b18d-4a63-8bec-ec0ddd2fa84c", "sighting_of_ref": "indicator--6cf7be62-6176-45ec-bb33-222110659902", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764d25c5-f622-438b-a70b-b079091e5dd1", "sighting_of_ref": "indicator--682c7db5-49df-4b12-9a3e-3f25bb949946", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc468a5-f3fa-41ff-b4fa-7464af72d765", "sighting_of_ref": "indicator--682c7db5-49df-4b12-9a3e-3f25bb949946", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09da8f2d-0fb3-459c-9d9c-5a1fa3f4fb5a", "sighting_of_ref": "indicator--7730559b-e40f-4f5f-8fde-82902e636c00", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ea879a-4c35-4f5e-a5c1-254fb05ab9d4", "sighting_of_ref": "indicator--7730559b-e40f-4f5f-8fde-82902e636c00", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a764ff4-5da4-4629-86b8-8521db110a36", "sighting_of_ref": "indicator--89c29d9e-962d-4e32-b777-aa4d91d68ae2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1693793-021c-4818-bbb7-51dedeb938a2", "sighting_of_ref": "indicator--89c29d9e-962d-4e32-b777-aa4d91d68ae2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2862af94-e641-4af0-aff7-7400bb0bd270", "sighting_of_ref": "indicator--9a64241d-39a1-442d-a496-658932a37c83", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c91d06-3441-4cba-9b5b-346146ce5541", "sighting_of_ref": "indicator--9a64241d-39a1-442d-a496-658932a37c83", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c49571-1702-4f83-95e2-fe10c601d59e", "sighting_of_ref": "indicator--9a64241d-39a1-442d-a496-658932a37c83", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ce9924-b64c-4023-9566-3e50bdbd7215", "sighting_of_ref": "indicator--ed143835-9431-4393-b392-e6309c2c6f83", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a7c34c-4b7c-4612-90c4-555dea93b3b6", "sighting_of_ref": "indicator--ed143835-9431-4393-b392-e6309c2c6f83", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517652fa-59b8-4de4-805f-839a5097b99a", "sighting_of_ref": "indicator--ed143835-9431-4393-b392-e6309c2c6f83", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb043607-3ebf-498d-8c10-c98e23316018", "sighting_of_ref": "indicator--91ad0950-da72-479b-8acd-53eb40d0427e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e51613-6a29-4216-86e2-281f42c96da7", "sighting_of_ref": "indicator--91ad0950-da72-479b-8acd-53eb40d0427e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b69420d1-2fe3-4a3b-b732-43c5243bffba", "sighting_of_ref": "indicator--3c47820a-7dc1-4bdd-b426-852de9e7533a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb5ad927-0503-47f0-88f5-6f64c8edbefb", "sighting_of_ref": "indicator--03589d62-814e-4141-8695-347279228cf7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c727218-12aa-427b-833b-c702b54b668e", "sighting_of_ref": "indicator--03589d62-814e-4141-8695-347279228cf7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44346faa-79e5-45d2-a399-0e570c3a19a1", "sighting_of_ref": "indicator--03589d62-814e-4141-8695-347279228cf7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df99d0c4-f685-4962-9931-7b217f2bd5a7", "sighting_of_ref": "indicator--8bd4183c-6b0c-442d-b784-320341823e71", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e1324e-e274-448e-8449-9e799010e3dc", "sighting_of_ref": "indicator--8bd4183c-6b0c-442d-b784-320341823e71", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f0839fc-9e0b-4bcf-a4b5-67d2b551ffa9", "sighting_of_ref": "indicator--8bd4183c-6b0c-442d-b784-320341823e71", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e49614-b96a-495c-a7c9-9eb9285b25b0", "sighting_of_ref": "indicator--37f20fec-2451-43d4-9ba5-393a6cd61ffa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--375f3782-c6c3-4f4d-a96f-6644fa56a6fe", "sighting_of_ref": "indicator--541f5c50-7ccc-4400-8490-7ec4b8c5f07f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--415aadea-423a-4196-bbe9-b977881f9a89", "sighting_of_ref": "indicator--541f5c50-7ccc-4400-8490-7ec4b8c5f07f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33bd773f-d97e-4ba1-8f8f-fd430cd456d4", "sighting_of_ref": "indicator--541f5c50-7ccc-4400-8490-7ec4b8c5f07f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ba2a6c-8843-41fa-abb6-0615e9341fa7", "sighting_of_ref": "indicator--16d58782-2380-426f-a2d5-af7372e2238c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd5099e-e6c8-4198-b4b0-fb082916b612", "sighting_of_ref": "indicator--16d58782-2380-426f-a2d5-af7372e2238c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a9205cc-a745-49f7-8b8b-7445635c7f89", "sighting_of_ref": "indicator--16d58782-2380-426f-a2d5-af7372e2238c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce60ca4-2b23-464f-8408-ed1f65136da7", "sighting_of_ref": "indicator--8b8098e9-cabb-4215-9f8a-15dc463c3dce", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec6849f-72d7-435e-8d23-6babfdfa9933", "sighting_of_ref": "indicator--d5e43437-1c73-469f-9e71-d59b66f23f66", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868c6c80-fb83-4655-9963-34082248b09a", "sighting_of_ref": "indicator--29b1626d-644f-40ac-9921-7d3981edf519", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ca78fc-72c6-4794-97ea-7148e754eed9", "sighting_of_ref": "indicator--29b1626d-644f-40ac-9921-7d3981edf519", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11792d05-e104-472e-8b0a-75e424d434ea", "sighting_of_ref": "indicator--29b1626d-644f-40ac-9921-7d3981edf519", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ded12b1-473f-469c-b799-f418e255f09d", "sighting_of_ref": "indicator--a9c0a62d-beb2-4577-aee2-01cdeb2ab12d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8018e4-3061-420c-a40a-c5f8e36f4994", "sighting_of_ref": "indicator--a9c0a62d-beb2-4577-aee2-01cdeb2ab12d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d727d482-5231-4876-8d16-49a2b302d8b3", "sighting_of_ref": "indicator--b754f6d5-4e7f-4a63-a7a1-bcc54437a9ac", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8e804a-8487-42d4-a589-3f9313a85522", "sighting_of_ref": "indicator--b754f6d5-4e7f-4a63-a7a1-bcc54437a9ac", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa86502e-299a-4d7f-a47c-f969c9c7ebe3", "sighting_of_ref": "indicator--b754f6d5-4e7f-4a63-a7a1-bcc54437a9ac", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0828973-d846-417e-8828-afb729deb69e", "sighting_of_ref": "indicator--ed885f96-ff43-473c-a8d3-561f2769c52b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5820b6c6-a58c-4485-b9c7-417aefe1ffc6", "sighting_of_ref": "indicator--792d4f43-b9ac-4314-9258-3032ca379d6e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87cf3f33-d6c6-4d3e-aa9b-70ab25204ae1", "sighting_of_ref": "indicator--792d4f43-b9ac-4314-9258-3032ca379d6e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298e8d06-569f-4bf3-a8b9-ee52c81661cc", "sighting_of_ref": "indicator--147147f0-6265-4e5f-a51d-563046dc610f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef88490-3998-4058-ae02-5b3f33767829", "sighting_of_ref": "indicator--147147f0-6265-4e5f-a51d-563046dc610f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd97190-bc04-4869-8844-fd5a3e0c2aa4", "sighting_of_ref": "indicator--7e18d5ee-4591-4610-8c5b-6f111c378f37", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f9578c-ba7e-4f07-a3f3-bdbcf75239e6", "sighting_of_ref": "indicator--7e18d5ee-4591-4610-8c5b-6f111c378f37", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc90a80-918e-4b39-bd94-38fe2e1a548f", "sighting_of_ref": "indicator--7e18d5ee-4591-4610-8c5b-6f111c378f37", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--859e6e61-da68-4fd5-aa22-8712c38a01e4", "sighting_of_ref": "indicator--31163e7a-4ab6-4046-b361-947dc9ab254d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29d8e54-f966-43de-a9b4-67862d356216", "sighting_of_ref": "indicator--31163e7a-4ab6-4046-b361-947dc9ab254d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abf0f33-b227-4300-abcb-98fe37ea75e3", "sighting_of_ref": "indicator--31163e7a-4ab6-4046-b361-947dc9ab254d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f041893-ebab-4d38-9f2d-3019853044de", "sighting_of_ref": "indicator--5c416378-b836-4c5e-8aca-ab88ff5b783c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--145bbf1b-8b46-4f8d-af3d-e11dc146e9fe", "sighting_of_ref": "indicator--5c416378-b836-4c5e-8aca-ab88ff5b783c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316214c6-c299-47f8-96dc-73afbe58dada", "sighting_of_ref": "indicator--5c416378-b836-4c5e-8aca-ab88ff5b783c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7fb3c06-34f8-4fee-a1d2-d8b9e11ed666", "sighting_of_ref": "indicator--bffe3d15-f52c-4065-b19e-7eb6cd7a1ae6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4af0a7d6-2256-4621-8d8b-0750550b3b39", "sighting_of_ref": "indicator--bffe3d15-f52c-4065-b19e-7eb6cd7a1ae6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc3c2c4-7dcb-47ab-bfa5-01d1636ddd37", "sighting_of_ref": "indicator--cfc5ac47-f2a7-4913-a3ab-04cabef96266", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd86887d-60e9-4592-a93f-7521e34c5ac8", "sighting_of_ref": "indicator--3ab41c3b-bdb2-4b66-9ef6-44e908e425fe", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c222e6-f137-4e08-8cf3-c4ec6e9fa345", "sighting_of_ref": "indicator--89d263c0-93a3-4add-b8aa-fc9c6901235a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6748f7cc-9444-4245-8b26-d6336bc8762b", "sighting_of_ref": "indicator--e1bcf288-4287-4b77-888f-054c5bae1a3c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3cbe208-3581-4565-a3f1-9ef295a82bfd", "sighting_of_ref": "indicator--e1bcf288-4287-4b77-888f-054c5bae1a3c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c9c5bd-b902-4c5e-a7cd-d832bebdff66", "sighting_of_ref": "indicator--e1bcf288-4287-4b77-888f-054c5bae1a3c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--180f8d4d-8c78-4e1c-b692-afc24abc9cde", "sighting_of_ref": "indicator--53ab3db7-cb1f-4e9e-80e0-2801abef04b2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2335b0b6-2671-4fc8-93c4-3595d2519099", "sighting_of_ref": "indicator--53ab3db7-cb1f-4e9e-80e0-2801abef04b2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd9057a-21dc-4a2b-9818-841a1e7179a8", "sighting_of_ref": "indicator--53ab3db7-cb1f-4e9e-80e0-2801abef04b2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57fdb94d-395f-4327-9ebc-79b20870389f", "sighting_of_ref": "indicator--65b57b5f-43e6-4f9b-8c2a-7bb5106286be", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6920f495-86d3-430e-afcb-034691b1429a", "sighting_of_ref": "indicator--65b57b5f-43e6-4f9b-8c2a-7bb5106286be", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f071bb6-7d8a-413b-adc0-1b14a5ca0aac", "sighting_of_ref": "indicator--65b57b5f-43e6-4f9b-8c2a-7bb5106286be", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ab2c2b-296d-47b6-91bf-48b02966a7a3", "sighting_of_ref": "indicator--a364ee18-7b26-4333-af5a-45fb9657de09", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e07c358-aa6e-4ed7-8f6b-28c341d74d06", "sighting_of_ref": "indicator--a364ee18-7b26-4333-af5a-45fb9657de09", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9944a5a-59e2-44e1-bd0b-df00b6e536a6", "sighting_of_ref": "indicator--d80f14b3-b748-46a8-8c3c-5f418c2d6210", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f0f827f-83a9-4b6f-a7df-eda86c619ec8", "sighting_of_ref": "indicator--d80f14b3-b748-46a8-8c3c-5f418c2d6210", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd69f9c-c262-46b8-bf94-6966effe8d57", "sighting_of_ref": "indicator--753c19a2-c132-412c-80db-a2b1ad326825", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9149a95a-d791-44b5-9b21-dc16b1065692", "sighting_of_ref": "indicator--753c19a2-c132-412c-80db-a2b1ad326825", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6097a87-34fc-4619-bcd1-617ffb8036ec", "sighting_of_ref": "indicator--753c19a2-c132-412c-80db-a2b1ad326825", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce36909e-c1a7-4671-b155-089f5e3635c5", "sighting_of_ref": "indicator--9b4ae539-4e41-433b-9479-dabb4e3124a4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7df4ddf-7b1b-44bb-84a2-f54965a753fb", "sighting_of_ref": "indicator--9b4ae539-4e41-433b-9479-dabb4e3124a4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6766a306-26e7-423c-9a9d-d8ba6d5c2813", "sighting_of_ref": "indicator--9b4ae539-4e41-433b-9479-dabb4e3124a4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1f8cd1-f242-48ba-a634-a81e4e24b92c", "sighting_of_ref": "indicator--a7e6d008-7927-42f7-9398-31c13b59b2b7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29267698-0986-4842-816f-472d886fc839", "sighting_of_ref": "indicator--e76a26e9-221e-4e3e-a239-7ce6d7c9eab9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78942c84-85f0-4b8d-be23-4a605365365b", "sighting_of_ref": "indicator--e76a26e9-221e-4e3e-a239-7ce6d7c9eab9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce5f73b-912b-4dab-8a96-960a6ed97741", "sighting_of_ref": "indicator--e76a26e9-221e-4e3e-a239-7ce6d7c9eab9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90840fa-3ba7-4b1b-98bc-0c612e4206db", "sighting_of_ref": "indicator--a2481796-aa2c-462d-a0fe-07bfdd51dc7e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c828955-e8eb-4aca-a6ac-30c32c108ce4", "sighting_of_ref": "indicator--a2481796-aa2c-462d-a0fe-07bfdd51dc7e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e00196-368f-47b0-8a1d-16ad5579174b", "sighting_of_ref": "indicator--a2481796-aa2c-462d-a0fe-07bfdd51dc7e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd9b393-f0dd-4db3-94df-335d070a901a", "sighting_of_ref": "indicator--b7b9b334-8c00-4ba5-a918-0020ad6a76b7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b041c23-6bb7-4ca8-8f79-faa2703b2df1", "sighting_of_ref": "indicator--b7b9b334-8c00-4ba5-a918-0020ad6a76b7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9581ef29-c17a-4dcb-889f-f66a85c4876e", "sighting_of_ref": "indicator--969c089b-d0db-4b7d-9a97-f1e913750fcf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3971c831-a2c4-4296-9d09-d36c43b9ed90", "sighting_of_ref": "indicator--969c089b-d0db-4b7d-9a97-f1e913750fcf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e6a296c-7bde-487a-95f4-296a3bd15a73", "sighting_of_ref": "indicator--969c089b-d0db-4b7d-9a97-f1e913750fcf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bdf30a1-c1f8-4b30-b48a-f6253c68ac1b", "sighting_of_ref": "indicator--0ae4767c-b465-44a1-b59f-5e354025a26d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47c59bc-3f01-4a85-9981-913bc8885692", "sighting_of_ref": "indicator--0ae4767c-b465-44a1-b59f-5e354025a26d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db5c918-7fb4-42df-a921-d019faddcf27", "sighting_of_ref": "indicator--0ae4767c-b465-44a1-b59f-5e354025a26d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecdd0d73-32a6-4f14-8057-d6bb4f92a180", "sighting_of_ref": "indicator--cc7e4297-d751-43e3-87c0-193b34a5307d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f561c8-5b56-47a4-a295-b335531ef189", "sighting_of_ref": "indicator--cc7e4297-d751-43e3-87c0-193b34a5307d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55fe2f43-7a5b-46ca-9892-d00cf4dabfc6", "sighting_of_ref": "indicator--99dfb8d8-a670-4052-b90e-e92cce9bd4b1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6939e2-ae3c-44f0-90a2-38c44ab8d11e", "sighting_of_ref": "indicator--40463d11-21ad-471f-89ae-9a7ca27855f2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--573abda1-41bc-49f3-9055-1fef6024c12a", "sighting_of_ref": "indicator--40463d11-21ad-471f-89ae-9a7ca27855f2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1662894-3351-4fbd-89e8-a627ff54190c", "sighting_of_ref": "indicator--40463d11-21ad-471f-89ae-9a7ca27855f2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d626d0b3-e376-41fa-beec-bf590d5a2c89", "sighting_of_ref": "indicator--e7852896-c5a9-47a1-88d8-5df405760219", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f541f04-9efa-454c-b231-cc6de284d584", "sighting_of_ref": "indicator--e7852896-c5a9-47a1-88d8-5df405760219", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b588d711-7235-4340-a3bd-e4ff9a637887", "sighting_of_ref": "indicator--6d11f2da-2816-4c94-b6f9-81acae4d68ef", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6724e30c-c128-48ac-b680-bfc7d7f4c568", "sighting_of_ref": "indicator--6d11f2da-2816-4c94-b6f9-81acae4d68ef", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1943da-6342-4d41-bc2e-1ce8e67ef668", "sighting_of_ref": "indicator--6d11f2da-2816-4c94-b6f9-81acae4d68ef", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf1a1a1-1986-4f32-a457-88f7d87a3f2e", "sighting_of_ref": "indicator--a336d71a-0973-496c-9896-32505f12ba6c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1d6c42-6afc-44de-92bd-49b3c991e50b", "sighting_of_ref": "indicator--5aa4f8b6-6a5b-41b6-9c6e-13409db09d85", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe34ae8-65c8-40a5-a941-4af8d2708e5b", "sighting_of_ref": "indicator--5aa4f8b6-6a5b-41b6-9c6e-13409db09d85", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a87998-c167-423d-ae6e-23253498233e", "sighting_of_ref": "indicator--5aa4f8b6-6a5b-41b6-9c6e-13409db09d85", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e596dd9a-ce6a-40e7-b1c5-e036f662bdc4", "sighting_of_ref": "indicator--3a18e9ec-de19-4a22-9a9c-15707e9370b2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3cf1088-d034-4b9a-9dcd-39e0041f84b8", "sighting_of_ref": "indicator--79135fc7-58c5-4f77-a936-5f4e652ddd42", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511ac55b-5d60-46f6-a8e0-1198e7f748c0", "sighting_of_ref": "indicator--79135fc7-58c5-4f77-a936-5f4e652ddd42", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e326a01-3179-40a8-b1bb-65b78eacb029", "sighting_of_ref": "indicator--349f0d80-fae4-414d-8a3f-d48c31a0e840", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a1b739-6ac4-41ed-9066-489426ce3d94", "sighting_of_ref": "indicator--349f0d80-fae4-414d-8a3f-d48c31a0e840", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0abf378-fd7e-41ce-8a44-fd1b25de2f6b", "sighting_of_ref": "indicator--349f0d80-fae4-414d-8a3f-d48c31a0e840", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18236dbe-4fae-40b8-92c4-3402904a12ad", "sighting_of_ref": "indicator--5b2de52d-7e58-4d61-a94d-6cfbc93717e3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e77bcb-6692-4bfe-8330-cf18cfb8ee98", "sighting_of_ref": "indicator--a8ba5234-77d9-44ea-9c49-0d814956ad78", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa9476fa-b195-4185-8ad5-26b6bbcd6907", "sighting_of_ref": "indicator--a473a26b-1d35-4248-bee2-0cc6ff29da39", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--224ae382-1f58-4675-91e6-b52ab29a0349", "sighting_of_ref": "indicator--a473a26b-1d35-4248-bee2-0cc6ff29da39", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b6fef9f-f5b7-4e24-a444-238f34626266", "sighting_of_ref": "indicator--a473a26b-1d35-4248-bee2-0cc6ff29da39", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca4645a-77e3-40f0-87a2-df97e28fa0e3", "sighting_of_ref": "indicator--0bfc36e2-fcdf-4009-ae6b-cd918b9097b5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90c1104-bbf7-4551-85e1-55722ef23d51", "sighting_of_ref": "indicator--0bfc36e2-fcdf-4009-ae6b-cd918b9097b5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3fce417-d91b-4ce4-91e3-0bf60176fdf0", "sighting_of_ref": "indicator--0bfc36e2-fcdf-4009-ae6b-cd918b9097b5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b01bc1-272b-4f55-820f-39decd0d4581", "sighting_of_ref": "indicator--d7a46086-a929-413a-8c2b-7db73f58bf74", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7a6610-d11c-48dc-9faa-9567d11f9570", "sighting_of_ref": "indicator--d7a46086-a929-413a-8c2b-7db73f58bf74", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22396ca1-cb5b-4b8f-9a62-9d8bdfb15bf1", "sighting_of_ref": "indicator--d7a46086-a929-413a-8c2b-7db73f58bf74", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8451a733-53c9-479b-ae06-97d89b891fa9", "sighting_of_ref": "indicator--4787a1b2-b603-4147-ac31-e1e4c3d5ffd7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01524a23-8212-49f4-89e3-c4275dd0ec05", "sighting_of_ref": "indicator--4787a1b2-b603-4147-ac31-e1e4c3d5ffd7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d055a591-d96c-4de5-8b16-8c1bbdcfdcb4", "sighting_of_ref": "indicator--4787a1b2-b603-4147-ac31-e1e4c3d5ffd7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--078fc41a-4a91-4c5a-a5cf-237a41504483", "sighting_of_ref": "indicator--418bebe1-f8e2-46d3-9741-df699e10ac3f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4006e8b-763d-4398-af18-1e272a46dc62", "sighting_of_ref": "indicator--418bebe1-f8e2-46d3-9741-df699e10ac3f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef73cb2-ee8d-47fd-a64a-e32a3e70ea9a", "sighting_of_ref": "indicator--418bebe1-f8e2-46d3-9741-df699e10ac3f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1921564-18c3-44da-87df-d0ea6c775dbd", "sighting_of_ref": "indicator--f9b502e8-ec05-41ac-955b-b5eb47fc7b39", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc1de208-f1de-454a-a7e1-40bc6f0e4a26", "sighting_of_ref": "indicator--f9b502e8-ec05-41ac-955b-b5eb47fc7b39", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f1c0f5-41e5-414d-a967-9d46710a1a76", "sighting_of_ref": "indicator--f9b502e8-ec05-41ac-955b-b5eb47fc7b39", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e0323e-55b3-47c5-9157-5aa5fcb99ed8", "sighting_of_ref": "indicator--0a82fada-c6ee-42fc-bd5c-0ff7b9c383bc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffcc68fc-9c39-4d35-8e50-ec316df54b72", "sighting_of_ref": "indicator--0a82fada-c6ee-42fc-bd5c-0ff7b9c383bc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085a6ef0-d5c5-463b-8b24-91b1b99f84a6", "sighting_of_ref": "indicator--0a82fada-c6ee-42fc-bd5c-0ff7b9c383bc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dffccf1c-df74-4ab5-8dcd-5902a2689243", "sighting_of_ref": "indicator--ff1d9b0c-bbca-40f1-aad1-ad5ca56fa810", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e8fdd5-10fb-4492-83cd-93e717d5614a", "sighting_of_ref": "indicator--ff1d9b0c-bbca-40f1-aad1-ad5ca56fa810", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e58b28e-af92-4059-bdd3-cc05a3d2f3f9", "sighting_of_ref": "indicator--65ebcab6-a6a1-4cf2-b0da-61c7ac30fd64", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82479127-8a38-450c-b472-e2e3bae6ad8d", "sighting_of_ref": "indicator--65ebcab6-a6a1-4cf2-b0da-61c7ac30fd64", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e987c7e-081e-4414-8cf2-e96300320dce", "sighting_of_ref": "indicator--65ebcab6-a6a1-4cf2-b0da-61c7ac30fd64", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71eb3424-b536-4488-9e77-088279d45f77", "sighting_of_ref": "indicator--7327950e-9bcd-41c8-ad6b-9b10f587348b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1415d8a3-1083-4a75-95e1-017b4c07334d", "sighting_of_ref": "indicator--7327950e-9bcd-41c8-ad6b-9b10f587348b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3866edf-d42d-4c03-abd9-4190e7055e2a", "sighting_of_ref": "indicator--7327950e-9bcd-41c8-ad6b-9b10f587348b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321629be-1669-43c0-96eb-d3359152037a", "sighting_of_ref": "indicator--396392af-0a46-47c0-be54-e972f727f088", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40d4497-e565-4298-9cd5-a9cab766177c", "sighting_of_ref": "indicator--396392af-0a46-47c0-be54-e972f727f088", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f8fd7f-288a-47cd-a9fe-6753715e00e9", "sighting_of_ref": "indicator--396392af-0a46-47c0-be54-e972f727f088", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7572ab8c-15fd-45ed-a25f-93b6113cfd57", "sighting_of_ref": "indicator--36005686-1668-4c09-ae45-58a2e440b907", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7127fa05-b548-44f4-b8fd-dc5a78d3212c", "sighting_of_ref": "indicator--36005686-1668-4c09-ae45-58a2e440b907", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d586b9-71ac-414e-83df-ee86e36a4826", "sighting_of_ref": "indicator--36005686-1668-4c09-ae45-58a2e440b907", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8977dfa-a1f2-4bfd-aa8a-8d39bf5e0b83", "sighting_of_ref": "indicator--b110ca39-1710-4364-9afd-e5daf3e7d0b2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167d64e1-a379-463a-8aa3-7935367f733e", "sighting_of_ref": "indicator--b110ca39-1710-4364-9afd-e5daf3e7d0b2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b796d9c-1ec8-4d19-92a0-0cb140b78698", "sighting_of_ref": "indicator--b110ca39-1710-4364-9afd-e5daf3e7d0b2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae851ba1-7cfb-46ed-95ee-c36a22ee21b1", "sighting_of_ref": "indicator--eef5f050-facf-4ef4-8849-c6d633785e72", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b9c98d-b7e9-4b5e-b72c-a6dc81fbb0c0", "sighting_of_ref": "indicator--eef5f050-facf-4ef4-8849-c6d633785e72", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e54393e-c845-4ff7-beda-2f1643d9b754", "sighting_of_ref": "indicator--eef5f050-facf-4ef4-8849-c6d633785e72", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e744712a-3809-4d16-985f-d0716cec1e23", "sighting_of_ref": "indicator--efc08ba7-02ad-4a97-bfa8-904e7da644f9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9281ff27-4286-4fb4-9249-a220c627bd2d", "sighting_of_ref": "indicator--efc08ba7-02ad-4a97-bfa8-904e7da644f9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc20205b-5e0d-4d1f-bfb5-02e3092ec3ae", "sighting_of_ref": "indicator--01e8d3e1-8a3e-475d-a5bb-350422218e4b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce57e016-778f-4bd3-bb27-fd24a15f1d0d", "sighting_of_ref": "indicator--8c84aa83-140c-4408-9c7c-73dde9ac7deb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0372fa0c-7fc3-4164-bcd5-52f9cfb403f4", "sighting_of_ref": "indicator--8c84aa83-140c-4408-9c7c-73dde9ac7deb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec87aec9-bf08-4c5b-8c2f-8bbc5ef11016", "sighting_of_ref": "indicator--8c84aa83-140c-4408-9c7c-73dde9ac7deb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27786941-ff6f-4c82-96d6-184b8907d8fa", "sighting_of_ref": "indicator--8bf4a857-4ddf-4902-b711-b1b96a9102b0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--770b75cf-3bfa-426d-968b-95fb2ae931c1", "sighting_of_ref": "indicator--e1fe14a5-58c6-440b-b7f7-b6dc1686ead8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a24b235-ecdf-48ee-9333-ec49920b443b", "sighting_of_ref": "indicator--e1fe14a5-58c6-440b-b7f7-b6dc1686ead8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09dabe88-7a64-470a-90bf-74f2f3deea81", "sighting_of_ref": "indicator--35164766-e831-44b4-8b57-9303f233b6bb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25eec96-f495-4603-802d-378e17b19923", "sighting_of_ref": "indicator--35164766-e831-44b4-8b57-9303f233b6bb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6acd6148-8470-458b-abb7-43d705c5eaa6", "sighting_of_ref": "indicator--a02b486d-7948-4d85-964d-bf6ee8047f60", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02bad2c5-a432-4eb3-ba08-daca2d8806d3", "sighting_of_ref": "indicator--a02b486d-7948-4d85-964d-bf6ee8047f60", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7ba3ff-90d4-4ab3-b3fa-704753597095", "sighting_of_ref": "indicator--4ba7f654-fa4f-41ab-9bdb-06bed9b7f4ff", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157f0ed0-0cbe-45d3-8109-eca20d67b9ed", "sighting_of_ref": "indicator--4ba7f654-fa4f-41ab-9bdb-06bed9b7f4ff", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b5f679e-03df-4b10-9405-399bb3d1c8e6", "sighting_of_ref": "indicator--b94faea5-7cc0-4040-84b0-e181c6cc86c9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47057e5-c815-4e28-9d86-c0d74c97da82", "sighting_of_ref": "indicator--b94faea5-7cc0-4040-84b0-e181c6cc86c9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9d8b39-3577-4f5f-9477-61c387a69f8e", "sighting_of_ref": "indicator--b94faea5-7cc0-4040-84b0-e181c6cc86c9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526793da-8fd1-440d-a83e-678c44c4a497", "sighting_of_ref": "indicator--00a267cf-77bf-4ed5-b6df-8fe470fff893", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dbc1228-0d63-4f61-be36-77137d64eab9", "sighting_of_ref": "indicator--00a267cf-77bf-4ed5-b6df-8fe470fff893", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb6ac7e-253e-4ac6-9e00-5d3157d521e0", "sighting_of_ref": "indicator--d4fff623-f4e2-4412-86c8-767da72d972c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d7a09b-048c-485e-bfb9-dd16878c0999", "sighting_of_ref": "indicator--f54100b2-0f38-492a-a387-d0a1654f16f9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--653eed1e-e724-4d21-8e64-eff18d2ce04b", "sighting_of_ref": "indicator--dd53b7f9-0c78-496d-8eef-18acaa069180", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--242516e5-0cb0-4583-bb7f-0deeb00d8237", "sighting_of_ref": "indicator--dd53b7f9-0c78-496d-8eef-18acaa069180", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb02b8a-8eaa-4011-b0ba-a672824ef571", "sighting_of_ref": "indicator--f1c73218-fcec-474b-8b5b-a7a157f80091", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627fd5ef-662b-44e0-b384-18ee3b0264ff", "sighting_of_ref": "indicator--f1c73218-fcec-474b-8b5b-a7a157f80091", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a9e79c5-35db-4c74-ae40-8f5daa6fcf8f", "sighting_of_ref": "indicator--c19a36f7-8355-4af0-b6c5-ee1939890233", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--998f2f18-2fe5-4682-939d-058f527938ad", "sighting_of_ref": "indicator--c19a36f7-8355-4af0-b6c5-ee1939890233", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f3804f-077d-4501-9ecd-ee5c66eae994", "sighting_of_ref": "indicator--c19a36f7-8355-4af0-b6c5-ee1939890233", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69bbd2b9-de71-4bb8-b01f-39d95652d86d", "sighting_of_ref": "indicator--7788690d-ef72-431d-9896-9d7208ef5892", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e0adf99-2584-467b-b0c4-6f31da4220d0", "sighting_of_ref": "indicator--bde1c0bc-4394-4e65-9821-83c58d6a2748", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8eb9a8-c5af-430d-b1f4-745c81d35cbd", "sighting_of_ref": "indicator--bde1c0bc-4394-4e65-9821-83c58d6a2748", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a4e006-426c-4022-8027-a43ce8dbd873", "sighting_of_ref": "indicator--bde1c0bc-4394-4e65-9821-83c58d6a2748", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81c5a9f-186c-4f2e-beff-8a01d2aeb0d5", "sighting_of_ref": "indicator--b3dc5bee-0a1a-4e9a-8e74-584c2e88992e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f41635-11c4-4071-8a93-b814477bb1b1", "sighting_of_ref": "indicator--b3dc5bee-0a1a-4e9a-8e74-584c2e88992e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e09dfb1-3db1-4648-b7dd-65a1d8ed4b0e", "sighting_of_ref": "indicator--b3dc5bee-0a1a-4e9a-8e74-584c2e88992e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c32d219-897d-4ff2-aeb8-213b72ecdbf8", "sighting_of_ref": "indicator--41b4fd1f-f43f-43da-8dc5-1f4a2b11367f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d4f7b0-0a36-422c-9fd6-09506f203500", "sighting_of_ref": "indicator--41b4fd1f-f43f-43da-8dc5-1f4a2b11367f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432e893c-7eeb-455c-9437-df2ca977f656", "sighting_of_ref": "indicator--c3f0240b-d077-4e45-b292-74908dd8c32a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee64a964-e07f-467e-8185-71e3f57c1033", "sighting_of_ref": "indicator--6b1907ff-5298-4025-8e6f-08156424f436", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda6fe52-faef-46e4-9dcd-7d76ccc2d578", "sighting_of_ref": "indicator--6b1907ff-5298-4025-8e6f-08156424f436", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a51a901f-a116-4d12-953d-dc9db771a138", "sighting_of_ref": "indicator--6b1907ff-5298-4025-8e6f-08156424f436", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade88f3b-871f-4a3b-9795-e12ba5962cc0", "sighting_of_ref": "indicator--0875a4af-a96e-4dd3-91b4-929a034767c1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b34767-e6ab-4ace-8654-ea8539c9d1f5", "sighting_of_ref": "indicator--0875a4af-a96e-4dd3-91b4-929a034767c1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--032db849-be85-4d0a-a2fe-ec482393886f", "sighting_of_ref": "indicator--0875a4af-a96e-4dd3-91b4-929a034767c1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f23915-aa9e-432a-8381-7c6fa68a14a1", "sighting_of_ref": "indicator--8074b17f-bb70-441d-9447-6685a8d90222", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e7e7e6f-f7db-4fd8-a1c2-302abbf16073", "sighting_of_ref": "indicator--8074b17f-bb70-441d-9447-6685a8d90222", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162f9e2f-3597-4928-9aa2-e47f1a4a2d95", "sighting_of_ref": "indicator--8074b17f-bb70-441d-9447-6685a8d90222", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d0a7495-6f96-47cb-8dac-fc16cef2f5d9", "sighting_of_ref": "indicator--c3fbec08-e7d9-472e-84b3-6308095ef8a0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed1d388-66dc-4663-ba47-9879a989b896", "sighting_of_ref": "indicator--c3fbec08-e7d9-472e-84b3-6308095ef8a0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee30dc96-c505-4d20-9030-7ab377b3fc8e", "sighting_of_ref": "indicator--c3fbec08-e7d9-472e-84b3-6308095ef8a0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0189d83-effe-4fb1-b01e-4f29ee52d128", "sighting_of_ref": "indicator--6433381f-c765-4311-95ed-66136a45c8ec", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e6580f-6227-4f87-bfd8-c5ba3e12b0c2", "sighting_of_ref": "indicator--d8cf1742-55b3-4c47-b65a-087d252cb08d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d22994-7812-46a8-a90e-5ceaa16a13be", "sighting_of_ref": "indicator--d8cf1742-55b3-4c47-b65a-087d252cb08d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70ebbf9-7c0a-4a9f-b788-b5246d9e5db5", "sighting_of_ref": "indicator--d8cf1742-55b3-4c47-b65a-087d252cb08d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b74dee77-4551-49f5-a59e-6193c42280c7", "sighting_of_ref": "indicator--f3fb3c27-d9a2-44b8-be23-2df42a9a3684", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ad46e8-8c97-4d45-9834-aa16c5e15bfe", "sighting_of_ref": "indicator--f3fb3c27-d9a2-44b8-be23-2df42a9a3684", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c23c589b-bb48-4628-bdb8-594befc3e774", "sighting_of_ref": "indicator--f3fb3c27-d9a2-44b8-be23-2df42a9a3684", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6f71b4-a105-4f48-8797-b23cecafbcf9", "sighting_of_ref": "indicator--8ecb8039-72d3-4fea-b6ec-259a5fda9cc1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a67d94-b497-4946-9e53-fd59868e5eff", "sighting_of_ref": "indicator--8ecb8039-72d3-4fea-b6ec-259a5fda9cc1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4309de5-403c-459e-a3c9-064a32837aa0", "sighting_of_ref": "indicator--8ecb8039-72d3-4fea-b6ec-259a5fda9cc1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fcf1683-af68-45fd-b48c-474436f82a68", "sighting_of_ref": "indicator--9b3c0909-e79f-403e-bb53-d6f09f9ed5cd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ca0d0b-a22b-411e-8fc0-6b129f72bc17", "sighting_of_ref": "indicator--9b3c0909-e79f-403e-bb53-d6f09f9ed5cd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--915eceb1-9aba-446a-b6be-cc8dbeb40efd", "sighting_of_ref": "indicator--9b3c0909-e79f-403e-bb53-d6f09f9ed5cd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9def8c7-b9f7-491f-8e14-668509bab0d8", "sighting_of_ref": "indicator--a8794bd5-f7aa-4483-8901-4a5f0e60e2b0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a47792-c8a8-44c9-a184-75803b80f9a8", "sighting_of_ref": "indicator--27bd6ae6-f36a-40e2-a8df-57dd4ef66d10", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f044027-9dbc-4892-8ebc-5254f9a76a44", "sighting_of_ref": "indicator--27bd6ae6-f36a-40e2-a8df-57dd4ef66d10", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9598328c-0bc2-40ce-a6a6-c89a3b3aa108", "sighting_of_ref": "indicator--27bd6ae6-f36a-40e2-a8df-57dd4ef66d10", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8adcdc7a-8c0e-4679-b994-e6e9338bc53f", "sighting_of_ref": "indicator--b9e8e59d-9d81-48e5-8235-6fadcf83cc25", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbba8307-dc5d-490e-9f9f-f6658bd32a0d", "sighting_of_ref": "indicator--316a30c2-c642-4047-81ce-58c8bec4a68c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8979d6e-07d6-42e1-a462-1c790d78e01e", "sighting_of_ref": "indicator--64b5afd3-f344-4030-99a2-156fcdc959b8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e12f429-512e-411d-a2e9-359ad56e95b8", "sighting_of_ref": "indicator--54cf8810-7082-450b-b87c-8cd4ab48960a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd4f414-ff42-4af2-89c2-d9867a955506", "sighting_of_ref": "indicator--54cf8810-7082-450b-b87c-8cd4ab48960a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a722b89-bab0-4b5b-8832-e4be400eaae4", "sighting_of_ref": "indicator--54cf8810-7082-450b-b87c-8cd4ab48960a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d783be46-4386-481d-baa3-aa77ed800d10", "sighting_of_ref": "indicator--e6ec41ba-304d-44f4-a608-a6bd54ee63e7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7263018e-119e-46d1-b8a0-637f3eec9e4e", "sighting_of_ref": "indicator--04a3ad56-cae3-4b59-b9c3-0bfb62938344", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5182e75b-f9dd-47c5-97b1-f45a8f1fa7e8", "sighting_of_ref": "indicator--04a3ad56-cae3-4b59-b9c3-0bfb62938344", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f13cabf-4779-4957-86fd-a7bfa329c95e", "sighting_of_ref": "indicator--04a3ad56-cae3-4b59-b9c3-0bfb62938344", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7aee6b-dba3-4da2-8cb2-92fd797ff9e8", "sighting_of_ref": "indicator--66a9655c-a01f-491c-9bd7-a43252381a49", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01642ae7-4133-4634-a715-2a71c8fe8979", "sighting_of_ref": "indicator--66a9655c-a01f-491c-9bd7-a43252381a49", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a079183d-1602-47ae-94b6-766fcc6cec48", "sighting_of_ref": "indicator--66a9655c-a01f-491c-9bd7-a43252381a49", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cae9a5a-45ba-4bcd-bd2b-8048894d197d", "sighting_of_ref": "indicator--62ea5eb9-7864-44b5-ada7-8aed6139a715", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2697697e-28c0-4844-95fd-091927a3396e", "sighting_of_ref": "indicator--2c31aaea-8ea9-4d66-8b7d-d08f8e50f5c6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a3f0d72-e062-4251-b971-f57583639ab0", "sighting_of_ref": "indicator--2c31aaea-8ea9-4d66-8b7d-d08f8e50f5c6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37e8121-184c-4fb5-b232-0e5b79160298", "sighting_of_ref": "indicator--be1c3ce4-489d-48ee-8dd1-f56606b2a090", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--672827bc-91fb-4f6d-a657-d8faa6e92e48", "sighting_of_ref": "indicator--a3851435-d8f7-4e70-bd32-bf635614cd9c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b9e8ee-081b-4edf-a6cc-3225001c4551", "sighting_of_ref": "indicator--a3851435-d8f7-4e70-bd32-bf635614cd9c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241315e2-e332-4c18-8c87-5531cb5739c2", "sighting_of_ref": "indicator--bc2ccca6-c9af-4b88-89b0-4f979b429c75", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a93ae41-807b-4024-81ad-898c59bf5905", "sighting_of_ref": "indicator--bc2ccca6-c9af-4b88-89b0-4f979b429c75", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9217de44-535a-43c9-b66d-516def0628e9", "sighting_of_ref": "indicator--bc2ccca6-c9af-4b88-89b0-4f979b429c75", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9514b81-3f7d-4689-904c-d1f59f31fab5", "sighting_of_ref": "indicator--ade3ce73-37fe-4a10-8cac-0ac4ea9dc143", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3b8b51-76d5-4bae-a754-2fb3f73fa8f0", "sighting_of_ref": "indicator--ade3ce73-37fe-4a10-8cac-0ac4ea9dc143", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe93ce4-8ddc-4d0e-9d9e-40a47471c2f2", "sighting_of_ref": "indicator--ca319c5a-c33c-40fc-b0f4-dfbb575db295", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec21e11b-e360-4693-a527-0431baefb0a5", "sighting_of_ref": "indicator--2d62defe-bd50-4db8-a137-00eba87b45ce", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a49b0c-e5ce-4277-a364-9cd11acbe950", "sighting_of_ref": "indicator--ac82a433-b2ff-45ed-8b65-b8ae14c3db70", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7540c8-76b5-4ea5-b012-8d46434138c5", "sighting_of_ref": "indicator--ac82a433-b2ff-45ed-8b65-b8ae14c3db70", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82dd8664-b9b4-4c1f-a4d2-486ecf325d7f", "sighting_of_ref": "indicator--ac82a433-b2ff-45ed-8b65-b8ae14c3db70", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb78141-8cb0-4cf2-9dc4-f39307719057", "sighting_of_ref": "indicator--99d9a498-7c2f-4190-84d2-7464fe410640", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19e3a18-7782-4c83-a64a-206e55c791ef", "sighting_of_ref": "indicator--d15ac951-3dfa-4fc6-afd6-b6e1f5bf21cd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e95331-b313-466c-82b1-e078d37a8d56", "sighting_of_ref": "indicator--4ba74db3-df71-41b7-8705-95d1d32bfe9b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59aaae15-ffd7-4db9-befb-8f67bdde8835", "sighting_of_ref": "indicator--4ba74db3-df71-41b7-8705-95d1d32bfe9b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4243219f-0285-49fe-b612-91d719fa4131", "sighting_of_ref": "indicator--2699027a-27cd-4d94-9db1-77f9701dae5d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f066232-0270-46b4-870c-a6770f501a5a", "sighting_of_ref": "indicator--2699027a-27cd-4d94-9db1-77f9701dae5d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6170056a-9d17-4c1c-b60e-ca66cdcd1bcd", "sighting_of_ref": "indicator--c4addf30-cb0e-47cc-84ef-e27e013ed76b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd358c5-2c9f-4bd3-8d3f-c51188dbec3f", "sighting_of_ref": "indicator--eed464f3-88f5-4104-9a10-29ec83b29573", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe1bb1eb-d15a-4328-a93d-b0a6cc024d3e", "sighting_of_ref": "indicator--e1a500e5-c946-4dab-a2c4-738479755d01", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--199b3433-dac6-4702-83ee-bd3a518c2806", "sighting_of_ref": "indicator--46c7d9ab-22ae-439e-a01f-31752eaac2f1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d3103e1-5add-45fd-96f0-5d7505765749", "sighting_of_ref": "indicator--e83d38b1-2ecd-4ce9-aa72-e74c913e6a04", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a7807a-c706-41aa-a9f3-1828b6099090", "sighting_of_ref": "indicator--df2db165-61ad-44de-b4a1-4f3062399177", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da64414f-037d-4293-afa4-3848056a2935", "sighting_of_ref": "indicator--df2db165-61ad-44de-b4a1-4f3062399177", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139bb13f-75e3-4dcb-a708-e1272cc384f2", "sighting_of_ref": "indicator--df2db165-61ad-44de-b4a1-4f3062399177", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2062fd49-df16-419e-a2b6-6393bb22911b", "sighting_of_ref": "indicator--73d9900d-ba8e-4e9c-8e72-174e5bc45822", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d09096-2192-46fe-800f-969e46960a99", "sighting_of_ref": "indicator--73d9900d-ba8e-4e9c-8e72-174e5bc45822", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04bc6ce4-b0a3-4508-9670-a2fa568834ce", "sighting_of_ref": "indicator--73d9900d-ba8e-4e9c-8e72-174e5bc45822", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d3ee4fe-bb67-4659-97cf-3948104f7825", "sighting_of_ref": "indicator--b049aff4-db61-4064-918e-ae79ddfe5ee1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de83816-f7a7-48ba-9ca7-47627d3366b2", "sighting_of_ref": "indicator--b049aff4-db61-4064-918e-ae79ddfe5ee1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae0847f-9803-4097-89aa-10bb927f96dd", "sighting_of_ref": "indicator--b049aff4-db61-4064-918e-ae79ddfe5ee1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9d884b6-c017-4a94-afa0-c1ce81c0a0ee", "sighting_of_ref": "indicator--e188ce74-3d6d-47d6-aefe-cb8b38f5c803", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ee06a0-b449-46b9-a8c2-986ea3bc456b", "sighting_of_ref": "indicator--663758df-adc3-47c2-97c5-979713db5e66", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e137c2-a2b6-4caf-b22c-175e0d211866", "sighting_of_ref": "indicator--adf4c98b-2d46-4de4-9743-3dedf3193ba7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd37894-4abf-4918-bd80-1f97f6a353e0", "sighting_of_ref": "indicator--f1af3e1b-96de-4e75-831b-9a2eeffb943e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4970988-3e29-4b5f-82b8-84b112f1dd16", "sighting_of_ref": "indicator--2d8371bc-e3d4-45df-aada-5d311c18fe42", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706c652b-5929-41c8-895e-beee0b64882e", "sighting_of_ref": "indicator--58674465-4534-4a5f-a334-dace89aa030b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ac1a65-1485-4955-b768-179b36604b49", "sighting_of_ref": "indicator--c9467292-e5cd-48a6-952c-b503b6b2045d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b78b81-3cd6-4cbf-90bf-fdb3b1345cc0", "sighting_of_ref": "indicator--3f303af9-4b0b-4468-af41-5d693a08b85a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d7edf3-d870-4f6c-94ab-768ef806d9ed", "sighting_of_ref": "indicator--c3591946-68af-4e4e-9ba4-0b6e211cee3d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2827dfe0-400f-4e94-83aa-255258028485", "sighting_of_ref": "indicator--6ab3c413-1c90-440d-8926-a6a7d7cbf1bc", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab415873-47a9-4466-bf38-f14590ad82c1", "sighting_of_ref": "indicator--3a6acdba-155f-4487-887d-e839e5adaf63", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f69a413-bab1-4425-988c-3d4ac92ab71f", "sighting_of_ref": "indicator--3a6acdba-155f-4487-887d-e839e5adaf63", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aabd7d0c-280f-4840-bf0b-4c8c48208dd1", "sighting_of_ref": "indicator--3a6acdba-155f-4487-887d-e839e5adaf63", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9428af0-4561-4ab9-8120-3b266ee1d36a", "sighting_of_ref": "indicator--70dc0ed4-ec37-4ccb-bb2d-91fe8afbe8a9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dfc584c-1c52-4591-a2ee-30beed1dc7ca", "sighting_of_ref": "indicator--70dc0ed4-ec37-4ccb-bb2d-91fe8afbe8a9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02c97dd-a1b2-4536-9e84-9b491d4ee7ba", "sighting_of_ref": "indicator--70dc0ed4-ec37-4ccb-bb2d-91fe8afbe8a9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a287d414-3578-4d22-b3d7-a15e406a4f15", "sighting_of_ref": "indicator--5cb9d60b-4e87-431f-9028-1884ff69c1db", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f09fb2a0-07c5-4fd4-b78f-dc86fd8436a7", "sighting_of_ref": "indicator--8a079fba-6822-4d70-92a0-07682c8aabbc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2dfd861-07e5-441e-889a-bc1fd905cc91", "sighting_of_ref": "indicator--e0f01d2e-c425-4f7a-a2ce-0b2612bb298c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca59fc10-fb77-4e38-95be-27db88174f29", "sighting_of_ref": "indicator--e0f01d2e-c425-4f7a-a2ce-0b2612bb298c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cba72f8-fe4e-449c-a5ae-39ff56d91a3f", "sighting_of_ref": "indicator--0146c058-48ab-4409-a07d-a239d9302ab0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e393784-e9b3-42bd-ad47-e4f9c994db23", "sighting_of_ref": "indicator--0dace035-966b-4626-b120-caf0069cabbf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01389b6d-6b24-44ba-a162-0ab80ba15835", "sighting_of_ref": "indicator--b08cfd26-43c3-411b-bcae-adbc0e1ff4fa", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d9a8b3-f8e3-4314-ace9-c42309159d24", "sighting_of_ref": "indicator--b08cfd26-43c3-411b-bcae-adbc0e1ff4fa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b7cbdf6-5e41-48d9-88f8-11fab8ef1233", "sighting_of_ref": "indicator--ee40cedf-5199-429a-b7bc-38cbc8b0962a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ebb801-e87a-4b7d-8e7e-a5730ff4ebf0", "sighting_of_ref": "indicator--f516103c-e7c9-4f4d-8b41-64925cdd07b2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b0d9d0-2754-45b9-81a6-2c351d714733", "sighting_of_ref": "indicator--0ce0610d-e6b7-49ed-a888-dc181673850c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709a70fe-c973-4fbb-9365-6ced6980b57b", "sighting_of_ref": "indicator--0ce0610d-e6b7-49ed-a888-dc181673850c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9aae8a-84e5-4106-b27a-6315a5786b55", "sighting_of_ref": "indicator--35d3c1c2-d796-430b-8255-72f6410aaa36", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a900408-5da7-4f16-805f-a9cff81d1f0e", "sighting_of_ref": "indicator--3fae84a8-73e6-4b3d-a1bc-bce38d1a855a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc867a46-7911-4bd7-9125-63004f709b2a", "sighting_of_ref": "indicator--d1c9333a-b3da-435e-a941-0325102d2cf0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4028305-e77d-47b5-a8d0-931a046ab7a8", "sighting_of_ref": "indicator--ae1ecc88-3da4-48e2-8b07-fe9146dd8bf2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99da9a4d-89d1-411b-863b-8170f68daaf3", "sighting_of_ref": "indicator--ae1ecc88-3da4-48e2-8b07-fe9146dd8bf2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce42267c-f4ea-4326-bca2-1f7fca5fcbfd", "sighting_of_ref": "indicator--be0180a0-d435-493a-8737-6a3f721031b3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5fea622-00cd-42cb-a4ac-5742d620a0f9", "sighting_of_ref": "indicator--be0180a0-d435-493a-8737-6a3f721031b3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbd1f4f-8e0d-46d9-94c6-923dcf751f2c", "sighting_of_ref": "indicator--7e26ca0e-3a12-4fa3-ba1d-f6c9bb8b0895", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--230dea9f-d49e-4d8c-8983-779428ddf5dc", "sighting_of_ref": "indicator--fa8cd27b-ee4c-429e-8277-e58df4e25281", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1607cc7c-26ee-4314-b39d-e93049549738", "sighting_of_ref": "indicator--653eeca5-189e-4e90-991c-9f2fcfe36f74", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0290eb5e-b30e-4432-9854-e09c0e197e89", "sighting_of_ref": "indicator--e58cd184-8156-4e04-bb91-6e6a44f8116e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2aeb8ec-e15b-40a6-839e-e71061880e08", "sighting_of_ref": "indicator--03d28bde-591c-4628-9784-85af31607fcc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f51ec3b-d8c7-4fb6-8955-3220f3b2a3b0", "sighting_of_ref": "indicator--702d5535-65be-439a-a332-f45f244c36f5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccad87b1-45dd-4371-be62-af4232d79ee3", "sighting_of_ref": "indicator--ed735336-bd13-456f-9865-815c8f65b20b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fce6152-6db8-4138-af0a-e5a4cd8aa3ef", "sighting_of_ref": "indicator--672996bc-9d35-4c6f-9681-21fca7f04538", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d4e22c-fbf7-4397-84be-62819916cf7c", "sighting_of_ref": "indicator--672996bc-9d35-4c6f-9681-21fca7f04538", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c338469-d0b9-4ec9-9e71-ce8423ae75d4", "sighting_of_ref": "indicator--f328f00e-4100-4d6c-846d-dddb2a3f6662", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47b8d1ea-93f9-47d3-8e6c-cc480db7a379", "sighting_of_ref": "indicator--5b56836a-65e9-4a33-b42e-150f94f9cbff", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc1819be-5d18-42c0-b777-7bd364812abc", "sighting_of_ref": "indicator--eefcd8d5-32d1-4460-b429-fe688afe0c8b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa5b90b0-1975-467c-9638-527fcb507deb", "sighting_of_ref": "indicator--eefcd8d5-32d1-4460-b429-fe688afe0c8b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b4203d-56a6-4d06-afd9-cbc524d906e0", "sighting_of_ref": "indicator--703dfa03-61ff-4678-907d-5537821037b8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b1da757-a175-43fd-ba00-f1416629acde", "sighting_of_ref": "indicator--aaf45494-a0bb-486e-b072-8de127d24d0f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--518da315-4d29-4c10-8c58-32a62ae0123c", "sighting_of_ref": "indicator--a0179bad-8c81-49cc-b3a7-8fed09473d0e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--635f642c-e910-430e-8146-24137b9f9fee", "sighting_of_ref": "indicator--62e1f562-4c46-4174-b629-0e9a0f45d27e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--844688af-1768-4480-a4dd-3066cb6d650d", "sighting_of_ref": "indicator--15ca1d95-accc-4e25-881f-ca1e17561957", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153f564d-da95-45cc-a733-01a3e38120dc", "sighting_of_ref": "indicator--15ca1d95-accc-4e25-881f-ca1e17561957", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f57bb74-cbd4-4081-9b94-2c4a281e2248", "sighting_of_ref": "indicator--8cd1fe5f-c323-4c69-8618-c700e699dc69", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ff67a5-8825-4c76-9a27-c4be615a5d0b", "sighting_of_ref": "indicator--8cd1fe5f-c323-4c69-8618-c700e699dc69", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b14c16-bdee-443f-b91f-ed4122ac013d", "sighting_of_ref": "indicator--8a9d9c9b-fb20-44e0-957c-dba1ad6af8c8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--335826cb-f249-4dd4-bda3-93213497e398", "sighting_of_ref": "indicator--1163d50d-30ef-440c-81e4-4b3cba3d7227", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee2fae70-b221-4d28-bef4-bca6227e6f59", "sighting_of_ref": "indicator--018ee9c0-12e5-4fbd-8535-3b215cead98c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb9bbda-7949-4540-ac25-de23cc9ee498", "sighting_of_ref": "indicator--ac77201f-aa8b-4dd2-bc56-12fac9d2574e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--219be23d-adaa-4bcd-b392-a836fad60947", "sighting_of_ref": "indicator--003d04bf-e954-482f-bd4f-a15e44049ac3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf76ba5f-ad66-4814-8e7e-eb9c0b8d2734", "sighting_of_ref": "indicator--82d773f2-96fd-4eef-ad52-39f1fb2096d2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f3d933-8dfc-4411-90b3-b575df23de16", "sighting_of_ref": "indicator--3704bb8c-5087-45bd-a9e3-6e7d97ba647f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39b7e6c-fed1-449f-932b-ddf375fe673b", "sighting_of_ref": "indicator--c8df69f4-a505-4c27-8e00-5069d312246d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aaf1d0f-79db-495e-87d5-5ab3bd083c07", "sighting_of_ref": "indicator--bf5d0245-ce95-44f9-8eff-ad05bf2350f5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc0d05c-db3c-4ed3-b970-53d9fbb43200", "sighting_of_ref": "indicator--61036960-d6a0-431e-805a-19ed519d6316", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f638e7-863e-4816-9324-f27ad3746e32", "sighting_of_ref": "indicator--e098d262-dfa4-44fc-ba80-5d48b004e915", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc9b311-f9e1-4e69-b279-66fb1d0a6730", "sighting_of_ref": "indicator--e098d262-dfa4-44fc-ba80-5d48b004e915", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe6d2e0-a712-49a8-a4b9-5f5013c1ca26", "sighting_of_ref": "indicator--7dda5bea-c390-4511-bf3a-122520075e7a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419c0172-ed8a-4b11-bbeb-42541ad4d737", "sighting_of_ref": "indicator--9019efe1-f2a6-44b8-930d-ed9d6ffd6295", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e220c24-dfc3-47d9-84cc-4b1cef023986", "sighting_of_ref": "indicator--433c8532-6576-4f8a-bdb1-f748add7dbf9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a49e64-985a-494a-82ab-b130f4240ef4", "sighting_of_ref": "indicator--c6feca58-1f15-4d02-b503-a3679c4e7fb8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8878f602-2839-467a-99d1-540248d62545", "sighting_of_ref": "indicator--c6feca58-1f15-4d02-b503-a3679c4e7fb8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce88b388-9574-4624-a2ed-3b86dfec2fd6", "sighting_of_ref": "indicator--91be8804-955c-49a0-b3fd-861951e610a8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c91f60-05eb-4e1f-ace9-5b5dd0b038c4", "sighting_of_ref": "indicator--603ed87f-2d52-44db-af42-26532030e44c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dbb7550-82fb-412c-9f68-b3a26ae439d1", "sighting_of_ref": "indicator--603ed87f-2d52-44db-af42-26532030e44c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b7c292-ef66-4e3b-9df8-fe2ec001ea48", "sighting_of_ref": "indicator--b1f24b7a-692c-4a46-8317-7dc8b08443bc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b84937-0681-468d-8bb0-5bb0bd264dcb", "sighting_of_ref": "indicator--2b078f24-58b3-4740-b7f8-dc214300f08e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6993ac-40b4-4d1b-aa95-ab278a709a16", "sighting_of_ref": "indicator--f98261d2-0c29-43e2-8209-428748740d06", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54731b77-5c4f-4779-a583-acf7498e38ef", "sighting_of_ref": "indicator--f98261d2-0c29-43e2-8209-428748740d06", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--852833c4-301a-4afe-8e86-e6871d2785ae", "sighting_of_ref": "indicator--0cc6d363-ba5b-4d6e-adde-aa34ffd4f8a8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5ab308-2930-44e4-bb69-a0e91ec5ca54", "sighting_of_ref": "indicator--02d02c34-7502-493e-ae84-342739d54553", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de712eb-cab1-4268-b1a2-363f5c800ff9", "sighting_of_ref": "indicator--089e2e1e-3814-49af-b38c-2c5e4c2e3f05", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13125b5c-3b15-4793-920f-5159a3232c30", "sighting_of_ref": "indicator--089e2e1e-3814-49af-b38c-2c5e4c2e3f05", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ecc4a62-9591-4e9e-a9ed-5e7220edc814", "sighting_of_ref": "indicator--503b4f92-b83b-4651-9099-ef69b57ee896", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cdb90bd-c0db-43ad-b4d6-1b7af6197553", "sighting_of_ref": "indicator--40c76344-6669-4f97-b9b3-2c55abf28795", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dfc8267-0289-4e1a-bad2-a690225ca42a", "sighting_of_ref": "indicator--f38ad61a-e914-4831-9931-77a221289f0a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--716b4a07-3010-4b63-8939-1c6c15271337", "sighting_of_ref": "indicator--f58866f3-43e8-445b-b6fd-c2a89825c628", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--232274e0-f6cf-4f77-92c1-1c7a95fb766e", "sighting_of_ref": "indicator--e7d87bd7-f9c4-476f-96c0-afea3fbdf705", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59d5c8b-09c3-4232-b412-c1363543d83e", "sighting_of_ref": "indicator--e7d87bd7-f9c4-476f-96c0-afea3fbdf705", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd41e48-142f-4a70-9570-c90802a70152", "sighting_of_ref": "indicator--1b3effbd-0341-43a8-a978-4ff9a78fd624", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24630bc5-1c5a-4f65-9656-9e5bd05aa87e", "sighting_of_ref": "indicator--90403eb7-46b6-4f0a-9d67-1e9607853f8b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1ea0af-bf45-40d1-b988-34322677a6fa", "sighting_of_ref": "indicator--9e68b5e9-1f21-48dd-86e2-10348f4f38d8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1480cfc-3622-4711-bc9d-37ee2de085fd", "sighting_of_ref": "indicator--9e68b5e9-1f21-48dd-86e2-10348f4f38d8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c1d34b-7232-4de0-81a2-b33242463d75", "sighting_of_ref": "indicator--91cfb7f5-0ca8-48d4-a749-e6ce0623d0c5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d7f6f9-d4bb-4636-9773-559d28753ab1", "sighting_of_ref": "indicator--91cfb7f5-0ca8-48d4-a749-e6ce0623d0c5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018f92bb-adf1-4aa3-bf8f-160d4c76785d", "sighting_of_ref": "indicator--91cfb7f5-0ca8-48d4-a749-e6ce0623d0c5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d613b0b-1827-414e-a8cd-79f4b8bc9291", "sighting_of_ref": "indicator--5782832c-535d-4dd5-8269-e756a5229cd8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb701bf-884f-4ac0-acc7-b3d2e4e263b6", "sighting_of_ref": "indicator--d21a0b8a-f118-4d3b-8856-c1baeb955006", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f2540b-95ff-42af-bf3c-971875ba56b8", "sighting_of_ref": "indicator--b8af6323-fd36-4f8c-ac45-f5d78d9e0389", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca7af51-430b-4076-9150-a615b53aa16d", "sighting_of_ref": "indicator--b855d474-aceb-4d91-8c81-de568ee05674", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec956b0b-70e8-44a8-bc49-fbc3ca8fc8a7", "sighting_of_ref": "indicator--12c7dac6-f055-4d3f-8042-25a2046f37cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09193890-ed83-41be-9d5e-0768a5e22151", "sighting_of_ref": "indicator--f006bf12-fd1f-46d1-b7c8-6bdd3156845c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31e4cff-04ae-4a96-b61b-58cb9a11b92b", "sighting_of_ref": "indicator--9ae09e37-0acf-4a36-9a55-1db3eae59690", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a87ecb84-1fb2-4eb5-9fb0-7998a8f1f4f8", "sighting_of_ref": "indicator--9ae09e37-0acf-4a36-9a55-1db3eae59690", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c749235b-4afa-4c1a-860f-d4a263bf18e6", "sighting_of_ref": "indicator--2ab42336-87c1-47ef-8f95-b6a28ef9d77a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b0b027-4edf-4a0e-a4ec-632a94bcaf4d", "sighting_of_ref": "indicator--afb2eb4a-ddef-4a62-958e-71419fe185e0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5a304d-1d61-44aa-94f6-4fd47f6ad3eb", "sighting_of_ref": "indicator--edd84265-1b21-4089-a220-f35e4d572f1f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a056deeb-015d-4bab-a1b6-86f329c3f87a", "sighting_of_ref": "indicator--57a861f3-4896-4b15-ac94-15b0f96be691", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8285a8-95b3-4e77-b302-57067c42ad98", "sighting_of_ref": "indicator--e0842201-739b-4281-9408-b1a3101748c4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c04bcd7-ef22-40bf-aaf6-e303af972b30", "sighting_of_ref": "indicator--8aa3d1c0-8fdc-4aeb-b987-1587616755c0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0912076a-65da-4329-b9c5-bfbffc19776e", "sighting_of_ref": "indicator--0e781a54-e709-4be8-903d-f16a7f5d1a8e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35bdb77-4577-4930-800d-9acc62ac783f", "sighting_of_ref": "indicator--21804636-9404-4029-a7fb-bf9ccc9bad13", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae869c6-cb0d-4570-8fb8-253d1d3d338b", "sighting_of_ref": "indicator--a37f8142-1d72-4bee-b0a1-43c51cbf283a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd3af8b-10b0-409a-b889-ddec2013a858", "sighting_of_ref": "indicator--c0627301-6036-4919-b35f-24f1c7c753e1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828d09fd-3811-4bdc-b4ab-5e26baf1eecd", "sighting_of_ref": "indicator--eebe84f1-67d8-4616-a0bc-c8cee0fcc534", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b33187-0a1b-408d-858c-0edb7b683532", "sighting_of_ref": "indicator--179cc602-1ba0-4b5a-8806-49a32a78bb75", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2819056f-e525-433b-b78d-af45dd7e074c", "sighting_of_ref": "indicator--cd35c995-36f0-4366-b16f-3b16abe4eec1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--176a2ce9-b4cc-441c-bf7b-e20c33161c70", "sighting_of_ref": "indicator--3dcc83f6-a0e0-47b5-a932-2434385a46a2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d8f3e6-ea1f-4f1d-a41a-b0400ed15fdd", "sighting_of_ref": "indicator--f2c81cde-7b1b-4db9-9e05-9f82be47f982", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--532ce193-1a2d-4660-ab48-afca847fb453", "sighting_of_ref": "indicator--8067f468-7199-45fd-af3f-ec39fcf810c6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--808f293a-67ea-484f-9764-f912f947fefa", "sighting_of_ref": "indicator--ccc7bc51-f361-4d29-a682-8dac07d08aba", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df890131-02ce-43de-aa1a-ee985b1f1057", "sighting_of_ref": "indicator--fc33f269-5ea7-48be-a47a-7b0b6c0b9e13", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--342d5115-490a-4941-96f2-b71f4387a4bb", "sighting_of_ref": "indicator--9f51e990-d846-467d-a1d9-953dcad630ed", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6086f97-b3ec-45af-baea-f0d34b8d452c", "sighting_of_ref": "indicator--4be9a7f1-83be-4499-b2e8-414ae4efecdc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12bb75b0-145b-482b-b0a1-1ec0c282b06f", "sighting_of_ref": "indicator--d7361df1-628c-45ac-8677-24b089023add", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7adc37d-4740-407b-b82b-9d33fd688095", "sighting_of_ref": "indicator--58288f24-32e7-4910-9d2e-aa0a5ea7b103", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c32f056-f226-4115-bee8-14ecf3594cec", "sighting_of_ref": "indicator--c3c0cbe7-d34e-42ce-bde5-cbfc065788eb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ffd560-1bad-407f-807a-a07d73bc5f84", "sighting_of_ref": "indicator--53642a4a-6115-48a4-a5c5-0e23c19d609b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43652390-ca54-4dc9-a2dc-9e9b15ca88cf", "sighting_of_ref": "indicator--b36e25bb-7065-451c-8d76-6cb54182645e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d1a783-088a-42f2-876c-8889a80974fa", "sighting_of_ref": "indicator--3f7b0d62-053d-447c-874b-b48f667179e7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d431881b-4e1e-4091-83d2-a06d8126ba04", "sighting_of_ref": "indicator--2b1d33fe-6f6b-4bdb-bfc4-ab5e3693708c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4944ded8-2bec-478c-8f5b-7e5191d6ae66", "sighting_of_ref": "indicator--8e5060fe-007c-4e9b-b305-a5d03d8a390a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a580f72c-9c98-427d-92e7-82ac273ab9f0", "sighting_of_ref": "indicator--d260e793-4f1a-4e6b-8cfd-b2bed0ffd2dd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee0fdc4-e4a0-47ee-a887-fa674defca77", "sighting_of_ref": "indicator--7bc9e658-9153-4c12-b1fc-4a3593522133", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ec3a6f-42bb-43f1-80b8-1a06a7e57ae0", "sighting_of_ref": "indicator--e629eb3c-8668-4059-9895-18eae20c94f8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840b7b46-a6e7-4763-bee8-ef9bd837cf03", "sighting_of_ref": "indicator--3946331d-6952-42ff-9148-44fccdb1dd8a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef70b66c-7e58-474f-aa68-11b0e69e120c", "sighting_of_ref": "indicator--a3d077c3-c088-44fa-8881-9ee2542f5ec2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e077656d-a8e3-45e6-b9bc-7cb384b38591", "sighting_of_ref": "indicator--810991ab-9341-4da9-a26c-b05e050d4ec6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--395e3945-5e08-425a-b74d-a38001dd39b9", "sighting_of_ref": "indicator--0ec5fd6b-f452-4106-89fd-11404f5ae4d4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1e0e08-1a14-498a-91ae-cc86aa858890", "sighting_of_ref": "indicator--d518c1aa-712a-4af4-8023-9d16ca5dca94", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe870e88-df5f-47b8-a1e3-fcbbd6e08eef", "sighting_of_ref": "indicator--573da8ab-eb11-4385-abf1-a7210b726e87", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40531252-cba5-4344-b2b3-2d9ebcbd1ff6", "sighting_of_ref": "indicator--d2c4c0c5-43cc-44de-9687-0c198cef64b7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9352234-87b2-4c2c-8348-9e18611600b2", "sighting_of_ref": "indicator--d4d5789a-4662-4f93-8576-6b9c8ef6ce92", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3307baa-8d27-4bb6-9cb6-dd65ef3e5c7e", "sighting_of_ref": "indicator--54349c94-dd7d-4e17-89c6-845eec47d740", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9530335-e2c3-42a7-abf3-deff0b5e70e5", "sighting_of_ref": "indicator--471c629c-f8cb-4c48-b423-d0a4e7a3dc49", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbcdc3a7-1cb7-4b10-a8ce-37318b92300d", "sighting_of_ref": "indicator--512c41ce-cb3e-4f84-967f-a660c05e7d76", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15a938f-38ed-499f-8293-739be3b46944", "sighting_of_ref": "indicator--7c3633ad-2c32-45cc-8c3e-17bf60beecb0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e956cf5-9a70-419c-bb84-7aa4af1cd7d7", "sighting_of_ref": "indicator--0801105c-24cc-4808-beb4-63c9382923af", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f177f67-55b8-4251-8dc3-fa75deb76d57", "sighting_of_ref": "indicator--05a35857-4032-41d7-b223-05b9a66e7082", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e71882-c6e6-4654-8344-fb99ad4411d1", "sighting_of_ref": "indicator--26aad55e-b5ee-41ce-bb2e-7ad0d236610f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6ea62a-379a-4faf-97ff-a57c52801540", "sighting_of_ref": "indicator--7176a89a-dbb5-4c62-8cb3-8ec371154a02", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e911c7-78a9-4fa6-afaa-f82d90243daa", "sighting_of_ref": "indicator--77c07c65-6b3c-464a-826b-a69d6f461ab2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a7768a-1228-460e-a168-9c115fdc33b6", "sighting_of_ref": "indicator--0fb3ff7d-25e9-477d-99de-d14aa27177fa", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53828ff7-e0b5-4793-ad18-7cd482cd4488", "sighting_of_ref": "indicator--91d33826-1b62-4d4f-b54e-aac7f053081a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379cb848-579a-40ab-80e7-2fe82994444b", "sighting_of_ref": "indicator--15cf4fbb-649d-456d-ba3d-ef1f02a33b1e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d4ae81-b1b8-4f27-be91-f72289faae74", "sighting_of_ref": "indicator--15cf4fbb-649d-456d-ba3d-ef1f02a33b1e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba5078a-849d-4ada-b4be-dd37dba6ecd8", "sighting_of_ref": "indicator--3ee1bc7c-de07-4695-abc8-86747afb9fa6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70292e39-8bf5-4283-b817-54d52f75b9e5", "sighting_of_ref": "indicator--361e443d-4506-46ba-8bbd-aa8197c6a79e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7e3ffc-50af-4ec0-b423-34cc54b53793", "sighting_of_ref": "indicator--39505c38-b9ee-47b6-96d8-426feef7437e", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc73812-4276-4b3a-8f78-9e76d0c81881", "sighting_of_ref": "indicator--b6dee27d-279a-4de9-a78d-53f64b9343aa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1033b67c-017e-4c2f-848d-e311a403ec9e", "sighting_of_ref": "indicator--84c64707-3b01-41d5-88f2-a4a536b4d1e8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee3fa1a8-9e4b-4808-a4c2-cfe2f8fe5f2a", "sighting_of_ref": "indicator--f482acab-3317-40ee-972a-5bcee5dfedb8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2630d9-a1e1-4735-b31f-e22a67ec47c2", "sighting_of_ref": "indicator--af53cf33-798e-40aa-ae5c-913d56fa9010", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dda31d1-2b97-4758-b41f-9c07ec98e163", "sighting_of_ref": "indicator--5509cc81-8992-40c0-8146-b4e6e8ca336f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a42370c-43aa-499b-95a6-2e6218623c5a", "sighting_of_ref": "indicator--0c196553-8689-42ea-8065-fd693049c915", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95dc8b69-81cb-480b-8337-f03fbf3228f8", "sighting_of_ref": "indicator--22b9e3e1-b815-4f6e-88fa-511bbd7967f1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d32c92-c05c-40b4-a7c2-42335d058003", "sighting_of_ref": "indicator--f4d7524e-e949-42f8-b75e-15a67ae82819", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9397e843-837e-4010-b017-1cb556248e4f", "sighting_of_ref": "indicator--756ee8f1-1aff-4d97-9a12-971e1a12c474", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7716b1-7747-4184-a401-82db80fdc40a", "sighting_of_ref": "indicator--ce1d31c7-b885-48c5-b3a0-4e08013dc678", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb928985-6c5a-4829-8bcc-28dd9e854760", "sighting_of_ref": "indicator--7d4a29b0-fde2-4353-a95c-49e963655aa7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf1ffcb-2c77-42d1-85e2-63a93c56023e", "sighting_of_ref": "indicator--b665227b-9e32-48e5-af2b-b6382b42b129", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--260dcc5f-9593-40f3-9b56-278be44e8cc7", "sighting_of_ref": "indicator--bf29e5ba-52e8-445c-a576-5338a387b07d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e32010a-bb64-410e-8763-6fd0c8b454b3", "sighting_of_ref": "indicator--9814f65b-c967-4393-a2ef-5342cc2d6104", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8c56d3-af1c-4b32-a608-41103e71fdc6", "sighting_of_ref": "indicator--ebb23e80-28de-4b46-9d3b-bb20b2c413a7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c6acaf-1e0e-4c7b-9d29-6fb1a814d584", "sighting_of_ref": "indicator--918a46b1-b174-4063-85fb-d0f8587b7544", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19182cf5-898a-4bf0-a825-654b24ef87be", "sighting_of_ref": "indicator--c46e5d6f-63fc-499a-a543-1b27e10edd13", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--032102a0-cd72-4ad8-86b6-0d0615afa77a", "sighting_of_ref": "indicator--c46e5d6f-63fc-499a-a543-1b27e10edd13", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15b6161-2550-4c90-9ee1-a5c5a235c056", "sighting_of_ref": "indicator--f616e027-6b0e-4ba0-8824-24d4316d39d1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d7de61-4cf0-4c2b-ba2d-37bb6a376358", "sighting_of_ref": "indicator--b8659575-5c98-4c01-afc3-390ebefb1c71", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e876898f-ed81-4892-abbd-3387e809cc60", "sighting_of_ref": "indicator--24b6d9f5-c442-485c-854d-49836ec8733e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--435bd32f-4fcf-4149-95c8-fd94383dac2b", "sighting_of_ref": "indicator--9e0c25d8-e96d-430b-a7ac-f9132c1c524c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98581cf9-8b9b-479f-b511-1dcb46a5553a", "sighting_of_ref": "indicator--3386f6f9-5483-46b3-81fc-0840014c3027", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75702bb6-d377-428c-a1f8-19b5708e7b2c", "sighting_of_ref": "indicator--88e7797c-9317-4d4e-9566-ca76b961d57d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1debd6e-8b67-40ef-a9ca-e51d2d2f29e3", "sighting_of_ref": "indicator--6220bd71-4fb3-465c-8429-39e5543d0f62", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46d6578-6bbf-4f6f-89d1-200366bb8f5f", "sighting_of_ref": "indicator--8a876d58-ced8-4542-aa46-9af884c51f97", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c426a0fe-4693-465e-bf51-670af17cbb37", "sighting_of_ref": "indicator--80a4ae82-24a5-44ef-9a00-5af8e1586700", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8b6ca3c-97ad-41be-aa3a-d513c7955d44", "sighting_of_ref": "indicator--af82a4b5-e325-4cfe-abfa-2706966bfbd1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eedb1a5-b1f1-4433-8246-c9509cacd94e", "sighting_of_ref": "indicator--af82a4b5-e325-4cfe-abfa-2706966bfbd1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f271ac73-6d4a-474e-96fa-af70a706e67e", "sighting_of_ref": "indicator--a16cf19a-fc6c-4a12-9f80-8322161f269c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07abde46-4e95-4e03-bd5b-3e2869240141", "sighting_of_ref": "indicator--3bbd8248-d782-4a51-943a-46917a81fd44", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c36a0e-8492-47a4-b677-557ed528acf9", "sighting_of_ref": "indicator--761f39a8-bdfe-4001-85c0-36a3063b5315", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8a9dc0-6358-4a2d-9c02-398be9f181ab", "sighting_of_ref": "indicator--ef20faff-6248-40c3-a980-651103691ace", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30dcbcfd-35be-4f39-8c04-6cee984cf8d0", "sighting_of_ref": "indicator--ef20faff-6248-40c3-a980-651103691ace", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887de097-48be-47d0-9e19-597656a67730", "sighting_of_ref": "indicator--fd64c015-5de2-4dea-a3c7-4278a92b41f7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f219601c-2693-42cb-9d53-57716d329f21", "sighting_of_ref": "indicator--d9ab86e5-aac4-493d-8b94-fa869dcf6383", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7c4c0e-30ba-40f9-9714-d1394dba2d68", "sighting_of_ref": "indicator--04a37f48-444f-45c9-824a-8425b5cda117", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3527395-be3a-4cea-8469-dab94259eeeb", "sighting_of_ref": "indicator--e7042c7a-d59f-417d-aff9-46b8670f9de8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419b8d9e-6662-40e8-a02b-32aecbb990d9", "sighting_of_ref": "indicator--309b2b2c-beff-40c5-af28-39394a7570a0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56962651-6f19-4921-9327-65ba581aca6a", "sighting_of_ref": "indicator--89f19f06-157d-406e-b2af-61b25d120e82", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51013c64-12f8-4995-b6b9-fb993b1ae619", "sighting_of_ref": "indicator--07319128-4d9e-4b2d-b369-e99bd85beb9b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd941483-1cba-4ed3-96ba-5d9c5e51ae4a", "sighting_of_ref": "indicator--2ec7da4f-5dba-458d-83ad-72b74d99c43d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb408ed4-b812-4622-bbde-a051aa3db5f0", "sighting_of_ref": "indicator--0f9d7658-4cd3-4b69-ad01-b51cf5e890e8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5ae7c7-c3c4-4394-b675-1fcffa6ee20a", "sighting_of_ref": "indicator--c37b2f32-e7cd-4c79-abeb-147b567518ed", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd98f7d0-a9da-475e-a679-d76f8fe16e5f", "sighting_of_ref": "indicator--1cee282f-b703-4aef-b3d2-4c77fe8b7acc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc669e5b-1c87-4eaa-8575-372aea57d906", "sighting_of_ref": "indicator--06469282-05c5-472d-bf28-a6ac8b447886", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c85705-71cf-44ed-b9dc-f84b0202ede3", "sighting_of_ref": "indicator--0a7295ce-ed4d-4371-9297-a176cc7b673e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76166db7-8c75-4986-9e33-46eedfdbed71", "sighting_of_ref": "indicator--f4bc6d5c-de91-4d0d-b691-647269690c35", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22800dc7-6780-425c-9573-19e38143cf9d", "sighting_of_ref": "indicator--bb6376d7-d0e5-4de9-908c-7608ddc19840", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c82da5-9e1f-4092-9486-d96ce88de685", "sighting_of_ref": "indicator--9cd28d0c-81e0-47cb-8480-f233f05e9f70", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c978eb57-fa40-4b01-8ee8-f1afd0a439b1", "sighting_of_ref": "indicator--a745bfe5-5bd6-4fbb-87e8-a20ced56a619", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da19977b-c5f2-4bd5-bbc9-441f90432494", "sighting_of_ref": "indicator--9bf2bc06-8d2a-4716-b2d7-707fb6de2e08", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ac6616-262d-4f57-a515-8167c108ac1f", "sighting_of_ref": "indicator--9bf2bc06-8d2a-4716-b2d7-707fb6de2e08", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7faaf05f-5e29-46f5-b12e-8cfc9ce2afb6", "sighting_of_ref": "indicator--9bf2bc06-8d2a-4716-b2d7-707fb6de2e08", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--949a1a2f-8d14-48a3-870d-1b0bd2da6d8c", "sighting_of_ref": "indicator--9bf2bc06-8d2a-4716-b2d7-707fb6de2e08", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24602eaa-0895-4d60-b6f2-48d98d741dea", "sighting_of_ref": "indicator--d9a70f2b-8291-45fe-a465-80ecd76f12bf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79a35b4-452b-4c39-8eb6-81bdc04404a7", "sighting_of_ref": "indicator--d9a70f2b-8291-45fe-a465-80ecd76f12bf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4290a6c-cec2-4977-abc6-42fcb55e8f48", "sighting_of_ref": "indicator--d9a70f2b-8291-45fe-a465-80ecd76f12bf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248d6c2c-661c-45a4-a393-d4914ebde641", "sighting_of_ref": "indicator--cd2bf981-c9e5-4d10-8b75-56a7d585b650", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb17c1bd-18f3-497c-81f8-92fb93355103", "sighting_of_ref": "indicator--cd2bf981-c9e5-4d10-8b75-56a7d585b650", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b882700-d567-408d-b78e-90b341bff2ac", "sighting_of_ref": "indicator--cd2bf981-c9e5-4d10-8b75-56a7d585b650", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0230737-6074-4c1d-9097-d531d91dd0d7", "sighting_of_ref": "indicator--2e648e88-dc62-41a3-8ea6-c212c999a4b4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07266b0-be3c-4d0f-9118-c3b420043127", "sighting_of_ref": "indicator--2e648e88-dc62-41a3-8ea6-c212c999a4b4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8800b209-b042-4856-8977-98fb101d611c", "sighting_of_ref": "indicator--2e648e88-dc62-41a3-8ea6-c212c999a4b4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--371eafd9-3a78-4832-a857-cd3758894f65", "sighting_of_ref": "indicator--6b36ae7f-f3a0-49f2-8a74-e7b2897fefdf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f51e3c57-1846-4c0b-860d-c8e90dc58e36", "sighting_of_ref": "indicator--6b36ae7f-f3a0-49f2-8a74-e7b2897fefdf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7101d5fb-dc0b-4848-af12-f3abebfae1f9", "sighting_of_ref": "indicator--6b36ae7f-f3a0-49f2-8a74-e7b2897fefdf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c681e0be-269e-4fa6-874e-500922109c84", "sighting_of_ref": "indicator--6b36ae7f-f3a0-49f2-8a74-e7b2897fefdf", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--841ca809-62f9-4afc-a64f-3d120a40f830", "sighting_of_ref": "indicator--7c00f4ae-adf4-455b-806b-668b84bdea80", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08813d38-be70-464b-a266-7b39cd518852", "sighting_of_ref": "indicator--3353aeec-02ce-479f-83ce-aa3910b7a251", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0750ca2e-6c43-485e-bc81-1acdbcc39991", "sighting_of_ref": "indicator--363bdc22-318d-436b-ac28-2dccca2b7c0d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e31f3eb2-9300-4946-a5fc-fd66ad259bbd", "sighting_of_ref": "indicator--2d1ad282-fbd0-4bc3-980b-674a3c436c76", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307cd165-1c66-49ec-a5e6-297cd3317a75", "sighting_of_ref": "indicator--84151804-6909-4731-b52e-85fc68d9af09", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2566de3-3eec-4340-b473-16875e541ebe", "sighting_of_ref": "indicator--6a8a3b64-520e-4b07-8690-27776f2caf9b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefdb8a9-5f10-4bf0-8bb0-92db353c68c9", "sighting_of_ref": "indicator--8c58a07a-5150-4165-b41b-b84a2ecca276", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1097b5fe-0609-42ce-a5b5-1d4c7e2f3fb9", "sighting_of_ref": "indicator--db5d75c0-f26e-41d4-9d9c-3c008175a25e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b0626b-0e4c-49a5-8a09-ca442c48889b", "sighting_of_ref": "indicator--eee01ea2-7d3c-433a-8f16-4fbe3e207864", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04df9412-b075-407a-82be-754e8be91842", "sighting_of_ref": "indicator--78916a50-0c63-4845-82c3-b18f8215ff64", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ab7079-1cd6-462a-9775-e00d3fe247fc", "sighting_of_ref": "indicator--d1d3354c-c033-45db-968b-513fabdb24f5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c960c9d-a02f-4d92-a7ba-6da3e1caeea4", "sighting_of_ref": "indicator--13c27f9f-2232-4e35-8f06-9c3494cf9d24", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ae0cea-a514-4235-aab5-c4ee1eb07f5a", "sighting_of_ref": "indicator--25549779-a8b9-4f63-9859-81bf8f2a9e69", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938d41fe-2629-483d-ad66-8b1ca96d36c8", "sighting_of_ref": "indicator--477eebd5-1c63-463e-b641-df9f1d37b707", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae87ff2c-6964-41aa-b7da-813e2017c6c1", "sighting_of_ref": "indicator--bb016ee5-7c16-4777-8988-5051e25e12ae", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e8e748-ee6d-4c2f-9b88-c0b16b4a46cd", "sighting_of_ref": "indicator--abc0df76-c8cd-4ac2-b504-d14425ff050e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b6d281-890c-48af-b446-1dabc4d4d956", "sighting_of_ref": "indicator--8a5c70d8-a717-4a11-8c2b-d02c89e555d8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f064290-026a-4b39-9837-1e8cf08000c2", "sighting_of_ref": "indicator--ece17f4a-147c-4bec-924a-b7337626cd78", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e34b04f-2e59-47ed-a908-a31d2d598aff", "sighting_of_ref": "indicator--ce30e847-57c2-40a7-8d35-6607eda875c9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab18e40-c6c8-4b99-bae2-c933a851a459", "sighting_of_ref": "indicator--615dce5d-e7dc-4c49-a3fb-87cc716428ad", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f41838-9737-4c7b-a0de-3cc055333087", "sighting_of_ref": "indicator--849b80b1-4307-4908-a185-049f47dfb87b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c34fdd-5c56-417e-9a4b-da20ad8c442d", "sighting_of_ref": "indicator--e47e9c60-b581-4059-ae9d-094026d7399e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a385cd4a-ce70-4e74-82fc-378135b8bbbe", "sighting_of_ref": "indicator--74470f77-920c-4775-aace-62af5a7e9b96", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f151fc-74ee-421d-bb90-392199ba9ef0", "sighting_of_ref": "indicator--d45195c9-89ac-4d5c-9b69-f11b107a4c3a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e0a5b0-b137-47a6-a6c6-7c6d3dd09c51", "sighting_of_ref": "indicator--307d1856-0c48-41f2-859d-1032eafc0dc3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a5c2a41-340b-4228-9857-6f7e459bb766", "sighting_of_ref": "indicator--307d1856-0c48-41f2-859d-1032eafc0dc3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1fb9def-02f5-4e40-8508-59c5ebf3ceea", "sighting_of_ref": "indicator--c7ba8987-ac02-4ece-9033-0e2001e245ea", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f1111a8-b6bc-4e5c-a622-77f56bda2085", "sighting_of_ref": "indicator--b12ba566-e4f7-4bd3-982f-37c0447d9085", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6228723c-e0ec-4be8-93bc-b8365e612726", "sighting_of_ref": "indicator--eca96126-e619-4ae1-9a5b-c624555e91df", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2031253f-01c1-419c-aae0-491026cb00c3", "sighting_of_ref": "indicator--47c678dc-d0e2-4d94-aff5-27b5ca9f1a89", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487d7e95-ce0f-4727-988b-adff48e49dea", "sighting_of_ref": "indicator--0a554c9a-1273-459b-a830-c2f907f87f40", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9aaa30-9704-42ea-ad03-034313dfe82a", "sighting_of_ref": "indicator--0a554c9a-1273-459b-a830-c2f907f87f40", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed1d0ba-e20d-4c6e-9f0d-7ab493caf68e", "sighting_of_ref": "indicator--b7d9efdd-2826-4154-8033-2bcc627795ae", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d59d56-bf8e-414c-9c91-788c545abc98", "sighting_of_ref": "indicator--b7d9efdd-2826-4154-8033-2bcc627795ae", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc62f48-7f53-4bb1-b909-2860d685cc15", "sighting_of_ref": "indicator--b7d9efdd-2826-4154-8033-2bcc627795ae", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6f216d-111e-4f10-8bc1-d8acf7eab504", "sighting_of_ref": "indicator--625df109-2ba7-4a61-b582-29349e426286", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9910eda-bc69-4502-bc2e-3782b86665e9", "sighting_of_ref": "indicator--07c9f654-b8e1-4b33-9aa3-4f4d9bb52b6e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0fc015e-0577-42a8-b1c8-ec42a79b79fd", "sighting_of_ref": "indicator--07c9f654-b8e1-4b33-9aa3-4f4d9bb52b6e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dec3230-1a60-43d3-97b7-a8db97dd2681", "sighting_of_ref": "indicator--7e699407-d9ec-4cec-93a7-a1fc164d583b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e189ea-1225-4baa-8b78-606d293fb622", "sighting_of_ref": "indicator--062c3e70-c162-4c22-9bf2-e443c0f8afda", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c28e24-6728-462d-a7e8-6941bcfb36c1", "sighting_of_ref": "indicator--062c3e70-c162-4c22-9bf2-e443c0f8afda", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8176fcbf-0b0a-4303-8450-78e538b86167", "sighting_of_ref": "indicator--0d905517-02e9-45c9-a0a0-82f85dfa9c8f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c846be09-c884-4d50-80fb-b4b5d8bf05b3", "sighting_of_ref": "indicator--6596b040-a68f-420d-b2f6-318f0b5ff4d4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9059edc7-4a4a-4db9-b5c9-dd438f145556", "sighting_of_ref": "indicator--6596b040-a68f-420d-b2f6-318f0b5ff4d4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df8c98b-d7ca-4e3b-b2fa-0aa46f3398b7", "sighting_of_ref": "indicator--7d691096-35b9-4a8a-b376-c6a4b6bcd462", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a616ef4a-7ee6-48e8-aa76-4f2b65f61108", "sighting_of_ref": "indicator--175f4101-f2cb-4ef8-9d85-a9751c34aab4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5af8d0b-4a17-4e4f-984a-a190a73db7e4", "sighting_of_ref": "indicator--175f4101-f2cb-4ef8-9d85-a9751c34aab4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d49123b-4294-40b2-bf73-9a4a040221c0", "sighting_of_ref": "indicator--a2ef57ec-ec41-417b-ad47-c64d0abc5f68", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d8cb4f-6075-4e10-9eef-15af91ead12e", "sighting_of_ref": "indicator--626f229a-2685-4d21-9a00-808c141b43b0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f5e6959-030c-48f6-9f32-351e0bb88072", "sighting_of_ref": "indicator--e3b3ac99-358f-463f-9945-1f6a74e35423", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e7c21b-0ab8-4520-8ed5-57b395bb2590", "sighting_of_ref": "indicator--e3b3ac99-358f-463f-9945-1f6a74e35423", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2ff8a7-14d2-45d6-8b66-481e7c2c8135", "sighting_of_ref": "indicator--aabf8e57-01bf-4656-9d07-5c33ee5fbac7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--629802b9-6e44-465e-a360-313fa3431186", "sighting_of_ref": "indicator--aabf8e57-01bf-4656-9d07-5c33ee5fbac7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe007155-5813-49f4-b53f-c52c5e7ccbf5", "sighting_of_ref": "indicator--76045ce1-a621-468d-94c5-b9169dee08ad", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2434c991-4b3d-47b9-854f-96f465db6358", "sighting_of_ref": "indicator--76045ce1-a621-468d-94c5-b9169dee08ad", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce79c83-044d-465d-8e4a-4012b41ed317", "sighting_of_ref": "indicator--fb7b6d07-aa0f-4f1e-b7e7-f4d185ed0e85", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b6013a-33b4-486c-b431-f537af2f257f", "sighting_of_ref": "indicator--fb7b6d07-aa0f-4f1e-b7e7-f4d185ed0e85", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1497a67d-5bfa-47f0-add4-17c920c7aacb", "sighting_of_ref": "indicator--48125a63-3496-4e56-81a9-2ac173c35728", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f528eec6-c43f-450e-8012-1ed1cc8bdf87", "sighting_of_ref": "indicator--48125a63-3496-4e56-81a9-2ac173c35728", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--104a675e-48e0-437b-973b-ffa6c3ba1580", "sighting_of_ref": "indicator--48125a63-3496-4e56-81a9-2ac173c35728", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--445e900e-9494-4242-9764-c977ba123a4d", "sighting_of_ref": "indicator--c6176dbf-78d8-4aac-ab5e-55fef9bb0ed5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4829ecc7-73ee-450e-ade7-9bcc75ff3b18", "sighting_of_ref": "indicator--c6176dbf-78d8-4aac-ab5e-55fef9bb0ed5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53be3b5c-836e-4bec-8812-5c76169521ab", "sighting_of_ref": "indicator--5843f7de-02b4-410f-8ca5-cec562335952", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41dc1085-a43a-460f-bf1c-2fbaf8cac223", "sighting_of_ref": "indicator--3ab84a5f-9ddc-4050-9cf8-cc4cd1ac50f6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb64ffe-6cdc-463a-91ec-ec6ab65a3650", "sighting_of_ref": "indicator--3ab84a5f-9ddc-4050-9cf8-cc4cd1ac50f6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e7abfb-99bd-46cf-b1f8-d541733c8d99", "sighting_of_ref": "indicator--284fbc79-24b6-46b9-982c-79bdf5c8727d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7495740f-764b-4afe-9797-0b72606d3a2c", "sighting_of_ref": "indicator--284fbc79-24b6-46b9-982c-79bdf5c8727d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2404f770-9143-488f-86d1-891a3ac4f199", "sighting_of_ref": "indicator--48e41d41-1e84-4af5-b53c-60e349206711", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--012ed5e4-062a-4050-b882-9a223a4e11a2", "sighting_of_ref": "indicator--11bbab91-b0ff-423c-9445-007396ad32a1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a717b7-8c42-45a6-9606-43b844f2740f", "sighting_of_ref": "indicator--11bbab91-b0ff-423c-9445-007396ad32a1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9cee63-1af2-4cdf-8c47-33f2386680b4", "sighting_of_ref": "indicator--9a525b0d-6495-4422-9064-3095d4ac9ee6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28accfca-e4c8-4207-892b-0c9cb72b1903", "sighting_of_ref": "indicator--0c605852-18c5-494d-830d-0e76a14b33e7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b3aa1f-eba1-4567-a998-d39a35efdda9", "sighting_of_ref": "indicator--fb4ea300-6cd6-4095-bdf6-b2065cf9c05a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ebbee6-f60a-4a50-943f-daef442d29ad", "sighting_of_ref": "indicator--fb4ea300-6cd6-4095-bdf6-b2065cf9c05a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c77d802-38c1-4868-adfa-f8287215c5b3", "sighting_of_ref": "indicator--1da54878-87c2-4efb-bc56-bc17305565ba", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dabc5433-5f3f-45e6-a4a0-355e25f4bdd4", "sighting_of_ref": "indicator--1da54878-87c2-4efb-bc56-bc17305565ba", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3604b6dc-7d16-48d1-abe2-9a991303d7fa", "sighting_of_ref": "indicator--106ebe25-e5c4-4033-a190-67a1c59e8e56", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a20af3-291d-4b02-b401-729d26f4245d", "sighting_of_ref": "indicator--106ebe25-e5c4-4033-a190-67a1c59e8e56", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f020780e-5e21-429f-a7ee-96e159256758", "sighting_of_ref": "indicator--106ebe25-e5c4-4033-a190-67a1c59e8e56", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d45dcc-a2b3-472d-aa45-98feace60b33", "sighting_of_ref": "indicator--539582b3-f295-439f-9903-4ce905c25b83", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3a7d72-4631-4e38-819e-5d20d53407a4", "sighting_of_ref": "indicator--539582b3-f295-439f-9903-4ce905c25b83", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf489c6-4cda-42fb-ae64-d45c582836cb", "sighting_of_ref": "indicator--539582b3-f295-439f-9903-4ce905c25b83", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a09909a7-56fc-44f4-b294-d71c4664a7a1", "sighting_of_ref": "indicator--10b84361-b939-417f-a1e9-4c29ab978920", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ada2ae-0a05-4ece-858b-e2215c37906d", "sighting_of_ref": "indicator--9abc26c0-8718-49b4-94ea-7aa840f6c7de", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9117ae8-db27-44d1-b1fd-556586975b7c", "sighting_of_ref": "indicator--36d34bf5-805e-42fd-a1d1-77c6f1c97d39", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ad5b63-1225-4582-9205-ae50478c9e5f", "sighting_of_ref": "indicator--36d34bf5-805e-42fd-a1d1-77c6f1c97d39", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83ce0d4-50b7-4706-a5a4-c2e898f92e64", "sighting_of_ref": "indicator--99745b55-e5b8-485e-89a4-1ded2262495f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572e65d3-73e1-42ed-a6ff-22476e5b9d75", "sighting_of_ref": "indicator--3b3d0634-5d40-4bb0-a312-8174261dc39a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e05823ea-d2ce-4936-aaec-feedd528a1a9", "sighting_of_ref": "indicator--d9576bc4-52af-4de4-95e4-4aa4d73f5259", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31fe8325-c30a-42af-960b-4b3478145da6", "sighting_of_ref": "indicator--d9576bc4-52af-4de4-95e4-4aa4d73f5259", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db28b66d-5491-4d44-b002-15025003192d", "sighting_of_ref": "indicator--d9576bc4-52af-4de4-95e4-4aa4d73f5259", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6b8192-c43f-414c-9ad1-171950150d61", "sighting_of_ref": "indicator--a4684d70-0012-4504-bb04-b9836906e93e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86663783-77a5-412e-9d23-83c7a46c10df", "sighting_of_ref": "indicator--a4684d70-0012-4504-bb04-b9836906e93e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5df14c5-bdd9-48ae-90b1-6eb56c5b2766", "sighting_of_ref": "indicator--b0bb8713-ac90-4ac4-9ff5-017a0e607f82", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee2e6d9-ed6d-43aa-9522-62aafa131b60", "sighting_of_ref": "indicator--2c716336-df93-432c-891c-aae1920d6353", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a2382a4-662d-4935-bf5a-0aed75f9738d", "sighting_of_ref": "indicator--c8c33044-e067-409f-92a3-99620e5bbaeb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1697a99-3e06-41b4-acf7-00c4ec9d62c7", "sighting_of_ref": "indicator--c8c33044-e067-409f-92a3-99620e5bbaeb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b34841-7ef1-4bba-98a3-0b27f77d8231", "sighting_of_ref": "indicator--e3c64af9-c386-42a9-960c-2bfac10c7d34", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a5e48c-1afe-461e-866c-394948184881", "sighting_of_ref": "indicator--e3c64af9-c386-42a9-960c-2bfac10c7d34", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a0a1e1f-bf50-4692-9080-80ebf0a30501", "sighting_of_ref": "indicator--e3c64af9-c386-42a9-960c-2bfac10c7d34", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e2ff14-149d-470d-88b8-0c1a9ab1190e", "sighting_of_ref": "indicator--024bb3aa-7eda-4ba0-8d9f-5b67bf8b7b48", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612d2a7e-6ab1-4073-9a35-65c2f8e7175c", "sighting_of_ref": "indicator--f7ac93d9-4132-48ac-b584-a6a107d4841e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9196dbf-412e-400c-8857-e381bca3b0c9", "sighting_of_ref": "indicator--6e81cb4a-7ee2-4db1-85c0-ac5750416ed5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4cfa3e-e601-4946-b74a-2e9d05c36cff", "sighting_of_ref": "indicator--6e81cb4a-7ee2-4db1-85c0-ac5750416ed5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30fbf818-5631-4ba7-8aea-87be57f47fd9", "sighting_of_ref": "indicator--943fcacb-b1a6-429f-82bf-dd55966a7b6c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5476b993-5927-4636-8c10-80fcfe2609e3", "sighting_of_ref": "indicator--2fb5b133-8c94-498c-ad58-a78bf457c32d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a093b2a-7584-41a1-a409-8b9cd0aefe86", "sighting_of_ref": "indicator--2fb5b133-8c94-498c-ad58-a78bf457c32d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2748fd9d-0328-4437-996d-ce8b945535dc", "sighting_of_ref": "indicator--cafa3400-b9a2-43f3-8ab3-dffbaa7ae07c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e03ed94-bd69-49b6-9fa2-e409af676a24", "sighting_of_ref": "indicator--cafa3400-b9a2-43f3-8ab3-dffbaa7ae07c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--552a1de8-4e1c-43c4-9959-cb86c476a6f5", "sighting_of_ref": "indicator--cafa3400-b9a2-43f3-8ab3-dffbaa7ae07c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c6f024c-f6ae-4506-81dd-a9b55f4b12b0", "sighting_of_ref": "indicator--2f42de6f-e3bf-463f-a394-5e43f0a360b1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac085f2-3014-45d6-b0d9-c002ee294574", "sighting_of_ref": "indicator--fa169232-ce6b-4eb5-a245-b3843677947e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be8562be-5d0b-441c-840f-b1618b9d4bb2", "sighting_of_ref": "indicator--fa169232-ce6b-4eb5-a245-b3843677947e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac911ea3-2616-47d2-9be6-f3b2dd76962b", "sighting_of_ref": "indicator--fa169232-ce6b-4eb5-a245-b3843677947e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1317ead9-a61e-4f2f-9886-ce6db0cccfae", "sighting_of_ref": "indicator--ab74f625-f96e-42f0-8596-25c47feaf417", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a77813-e1e4-42f3-9219-1672b0b42bd8", "sighting_of_ref": "indicator--ab74f625-f96e-42f0-8596-25c47feaf417", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc001e3-13ba-4e4c-bae0-14ab0aa18c7b", "sighting_of_ref": "indicator--c22e5498-5db1-43ad-ab4f-25c2748e6123", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c079e67b-0333-4e90-ac58-b2eb77a6b777", "sighting_of_ref": "indicator--bae198de-463d-4411-bc1c-40e20057e7ce", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c2f2d6-2c9b-4ca8-b796-ebb779d8df3f", "sighting_of_ref": "indicator--8a21d263-a8b8-47c9-8b21-32e2ee9ffa95", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35be99e4-6856-4a7a-90ac-ce17576d2592", "sighting_of_ref": "indicator--8a21d263-a8b8-47c9-8b21-32e2ee9ffa95", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a29f2de-3195-4f92-aa3a-602bef06dc68", "sighting_of_ref": "indicator--48db9fd8-032f-4362-9c90-bf2485dc1a00", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3283b6-9b6a-4ab2-8447-fba1bcaf83bd", "sighting_of_ref": "indicator--48db9fd8-032f-4362-9c90-bf2485dc1a00", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ee61b2-199c-4b31-b63e-2a5a5500b958", "sighting_of_ref": "indicator--8b47b326-a001-4367-a8a0-c6acf8e92567", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3030ede-3d13-49db-aeec-d2c968625e0a", "sighting_of_ref": "indicator--8b47b326-a001-4367-a8a0-c6acf8e92567", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b445867-5218-4077-9cef-4516b204138e", "sighting_of_ref": "indicator--9fa790c7-7dc2-40d0-8686-2813af21d7aa", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da09a009-f664-4151-8303-7b2d122d2f79", "sighting_of_ref": "indicator--5b76520c-0245-491f-9786-cdb9f12afc3c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--710a6b71-0c86-48ae-8ceb-8cf870389c0e", "sighting_of_ref": "indicator--ddc1dbc7-6a13-4624-b2cd-797fadc9c0b4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e138ba4-7ec2-4c9a-b152-1b8f2dd50b29", "sighting_of_ref": "indicator--ab6b32d8-3289-4ec2-b6ea-3afb0a3a0052", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57940810-a452-4e7c-9f47-5dbcdfbdd8ed", "sighting_of_ref": "indicator--f96d2fd0-7f0f-4bdc-9b41-d509ed043e03", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f314d40c-57af-4a42-a235-5b0cf7cc9a9c", "sighting_of_ref": "indicator--f96d2fd0-7f0f-4bdc-9b41-d509ed043e03", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--863a3386-c75c-45a4-a2fa-0aaf76180a67", "sighting_of_ref": "indicator--79c1fd31-9fae-40d9-bce3-09b82fc58be5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe3e3f2-6ccd-408b-bba7-8a2f71adba1b", "sighting_of_ref": "indicator--79c1fd31-9fae-40d9-bce3-09b82fc58be5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1a139f-5077-43c1-bc6e-dc4501e1d27c", "sighting_of_ref": "indicator--79c1fd31-9fae-40d9-bce3-09b82fc58be5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034fe6c5-adaa-4c8b-b558-72385ca75c4e", "sighting_of_ref": "indicator--0f0ee4ff-cb51-4bc2-b7bb-4ecc06ea0870", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2355ab40-876f-4d51-9452-c74f1f8b562f", "sighting_of_ref": "indicator--0f0ee4ff-cb51-4bc2-b7bb-4ecc06ea0870", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4eb0774-32cd-4f67-874a-d9459b02413c", "sighting_of_ref": "indicator--5bd1c452-f5b7-4d66-80c8-219594aa2534", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a6c3d2c-0ba7-470b-9eed-b9265590ce07", "sighting_of_ref": "indicator--e7d79eee-0149-452a-b0d9-9652a7c38d76", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c328f8-4716-4075-8400-138bd24b33cf", "sighting_of_ref": "indicator--e7d79eee-0149-452a-b0d9-9652a7c38d76", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--257cdb05-bc93-4586-976b-bb3c9729755c", "sighting_of_ref": "indicator--bd2424c0-965c-40de-bde3-f4443a58a6b6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f9ea55-f3fc-45e1-8a36-8cb7cd49401f", "sighting_of_ref": "indicator--6cc52170-d6bf-44a4-8501-8f4fac867520", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7fcdc4-9987-4e0b-b8a6-ae45e81e20f7", "sighting_of_ref": "indicator--6cc52170-d6bf-44a4-8501-8f4fac867520", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2229a2c5-1a5f-4b91-88ed-517669164121", "sighting_of_ref": "indicator--24a9487f-80bf-4009-9777-a27cc62e3ab1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896c4c8a-2afe-4944-88fb-239e7edc88c8", "sighting_of_ref": "indicator--24a9487f-80bf-4009-9777-a27cc62e3ab1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9c4231-b5ff-4b53-ac3a-09425c9799ae", "sighting_of_ref": "indicator--ae9c1b55-4d31-4b40-8381-15dc94a8fd3e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6920353-a528-45f7-a89a-7c7cbba30de5", "sighting_of_ref": "indicator--a954a828-e4fd-47ed-8fab-4bd04643efa0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f564b6b5-2dc0-4b06-8ad7-93e59e1827cb", "sighting_of_ref": "indicator--68a9812f-796f-4780-bb6d-45069a7473fa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76627e84-b121-4494-8814-041b6c297a02", "sighting_of_ref": "indicator--ce7a2181-2d81-4f0e-a7c6-4d89b0875262", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d931f4d8-d333-419c-8a4e-101cec4dc4eb", "sighting_of_ref": "indicator--27258b55-9766-4893-9cfd-e6e7e46163c1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa5c20ff-e095-465c-bd62-cc361bc0ab70", "sighting_of_ref": "indicator--27258b55-9766-4893-9cfd-e6e7e46163c1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aac8370-9d6a-46c4-b553-0bf45d33b7b0", "sighting_of_ref": "indicator--24057516-fca5-4b7b-9466-f7ebfe1d2653", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81aa5200-0d26-43d8-882d-5c89104244e9", "sighting_of_ref": "indicator--8c5f70cc-a5ca-4c58-a7b5-dc6ea2deb603", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e090ff-a62e-4e8c-9fc1-bac38856129b", "sighting_of_ref": "indicator--8c5f70cc-a5ca-4c58-a7b5-dc6ea2deb603", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7337f556-55e9-4c8f-959a-36236a312f1f", "sighting_of_ref": "indicator--f3fdef5d-2b6c-401c-a108-bf8cdf8fea1e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d73963b-974c-48f3-b501-f302b26784ee", "sighting_of_ref": "indicator--f3fdef5d-2b6c-401c-a108-bf8cdf8fea1e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7c0ae6-5b0d-4807-a610-6ec3e7486631", "sighting_of_ref": "indicator--8a109a5c-6ebf-4cf6-98bc-68d8686021eb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f3deb1-767e-4a47-8a79-8f8438743bf9", "sighting_of_ref": "indicator--8a109a5c-6ebf-4cf6-98bc-68d8686021eb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9efc58-5e31-49bf-9138-7652ae6a24c3", "sighting_of_ref": "indicator--d24e6342-bc5f-412e-9bc4-a684dbc336e0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d316da-725a-4461-ba42-cc5dfe44840b", "sighting_of_ref": "indicator--d24e6342-bc5f-412e-9bc4-a684dbc336e0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c25939c-d462-455b-ba5b-299974492bc9", "sighting_of_ref": "indicator--d24e6342-bc5f-412e-9bc4-a684dbc336e0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7303b8c1-cc79-4b3a-8ec7-668e41be811c", "sighting_of_ref": "indicator--ad7e1713-e1de-46ac-b618-090de3b4c1de", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2fcb1cf-7856-4b1c-ab35-b91523b4b535", "sighting_of_ref": "indicator--ad7e1713-e1de-46ac-b618-090de3b4c1de", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dfacf53-8ba1-4a1b-891b-f3a2122410fa", "sighting_of_ref": "indicator--31e2a51a-c69b-4908-ba21-ac2d601bd43a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8719c7ba-08e8-497c-a001-2f9657cd26f7", "sighting_of_ref": "indicator--f00f378e-88e6-41cc-bd75-97b371379d01", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b714f024-6df4-4750-82ac-ec954b3b0e7c", "sighting_of_ref": "indicator--f00f378e-88e6-41cc-bd75-97b371379d01", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6aba58-3af7-47f8-be49-471876092319", "sighting_of_ref": "indicator--1096bab4-72f5-400b-b92f-ad8e2d119d8b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e3c7736-4f5a-4da0-bce0-b76b3e3fba37", "sighting_of_ref": "indicator--1096bab4-72f5-400b-b92f-ad8e2d119d8b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c96a07-7752-4830-b284-873ec1ab2f49", "sighting_of_ref": "indicator--9c5c16af-c835-40d9-ba67-cfefcdc53bf9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--006254ed-e5cd-4518-a671-0d8e81bd4990", "sighting_of_ref": "indicator--33256028-a653-4968-89c5-9be957c52e15", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938e23d9-e3b7-4c71-bcd0-284c9a117e3a", "sighting_of_ref": "indicator--33256028-a653-4968-89c5-9be957c52e15", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c384a6-0b88-4923-a6e8-36a2f418d047", "sighting_of_ref": "indicator--91026d7a-0b2f-4bf3-9a4d-56eec8c87169", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81848945-8bb5-4a29-81c0-41add68347e5", "sighting_of_ref": "indicator--ddeaefb7-dbcb-4e43-a69f-faf54ac6eb0b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2344e5a3-c001-4824-a795-ed07c46591b5", "sighting_of_ref": "indicator--ddeaefb7-dbcb-4e43-a69f-faf54ac6eb0b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7bc20e-b0a1-43d3-8fb7-c9bb57e42b5a", "sighting_of_ref": "indicator--2a4d1963-6b00-4bba-a88b-6646dc46ec4d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db3b0cf-24be-4c58-9fa6-288e7cb36010", "sighting_of_ref": "indicator--ffe1b8ea-a173-4443-9472-3a2765dcb444", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--122ce5fc-1fea-4db6-918f-f1868c4871a5", "sighting_of_ref": "indicator--ffe1b8ea-a173-4443-9472-3a2765dcb444", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa07619-9b75-4bd7-acfc-da70572c98bc", "sighting_of_ref": "indicator--ca2c8f8a-aad6-4903-bdf6-fc41d52da57e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b686f4ac-bf10-4972-a4cc-22fa19b50cb1", "sighting_of_ref": "indicator--ca2c8f8a-aad6-4903-bdf6-fc41d52da57e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6971077-b05b-458b-85ca-f9ccf96d3c1f", "sighting_of_ref": "indicator--29e80520-d154-4657-8a47-836063aa8abf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f43fdec-7771-4add-9173-6d8b42b05a01", "sighting_of_ref": "indicator--29e80520-d154-4657-8a47-836063aa8abf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907da797-2e4c-4279-baf1-ac7fc05d4d7d", "sighting_of_ref": "indicator--2f4e4ddf-affb-47fb-b742-c35f6ece818a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6f444e7-44be-4db2-a00f-045ea6ae8885", "sighting_of_ref": "indicator--2f4e4ddf-affb-47fb-b742-c35f6ece818a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2976d265-c767-4986-8d42-d4348a4b9ed6", "sighting_of_ref": "indicator--2f4e4ddf-affb-47fb-b742-c35f6ece818a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe945b8-42cc-4c5e-a4f3-18b02ff5eec4", "sighting_of_ref": "indicator--8009eb0b-80d4-446f-a35c-a30826d40b00", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c31a80-9612-4c6b-bdf6-12f92d9dfcc8", "sighting_of_ref": "indicator--603ec8ab-9b3b-4c9c-9894-a705b9b9ec84", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d1b894-b81f-4bb5-8584-94c6d7cd9b87", "sighting_of_ref": "indicator--603ec8ab-9b3b-4c9c-9894-a705b9b9ec84", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1356c9-e262-4585-8bc0-b46a26da04d1", "sighting_of_ref": "indicator--d84c7603-e120-4ea9-812c-bf854d01c6c0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c5cb68-872b-433f-bc7c-7bb912940ea3", "sighting_of_ref": "indicator--d84c7603-e120-4ea9-812c-bf854d01c6c0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a705ae06-697e-4f6c-a5f9-6153ef953767", "sighting_of_ref": "indicator--a825c1ac-e1a0-4e32-bbbe-2227dce8caea", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0810540a-353d-47e6-a948-3876c98bcd30", "sighting_of_ref": "indicator--5aa5c6ea-2abe-443b-9053-4d0a2f002630", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83ae1fc-6e0e-482c-a034-4f9e18e0d54b", "sighting_of_ref": "indicator--5aa5c6ea-2abe-443b-9053-4d0a2f002630", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b28080-e537-4f5d-8826-90e4178e0ef1", "sighting_of_ref": "indicator--76826730-7cd2-40aa-ac5c-e5a1132b5804", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc595f28-59b3-4735-a041-bd707adaec9f", "sighting_of_ref": "indicator--e763d92e-db91-469c-afa5-e2e404812d25", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f85661e-3ff6-4f2e-9400-11dc518077bf", "sighting_of_ref": "indicator--d3fdf29c-2ce2-4d6d-a116-ad36d0625daf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d53476-4b7f-44cb-91a9-27e01710c9dd", "sighting_of_ref": "indicator--d3fdf29c-2ce2-4d6d-a116-ad36d0625daf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d84795-5412-4f58-b330-b9f729170528", "sighting_of_ref": "indicator--82a8124c-e3df-495f-93b8-d8f458cd9a58", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de7e6a68-fe30-4343-a84d-dbecb9edd9a8", "sighting_of_ref": "indicator--0ff952d6-3c5f-4f76-9f8e-978a0d46a4e8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48aa64b-0620-4572-b425-1a72e3bcb9d0", "sighting_of_ref": "indicator--53e0ed4c-a668-4e4e-9278-17e8e390e912", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49d0cdc-dac2-4c6e-9fda-aea2c4e612f0", "sighting_of_ref": "indicator--53e0ed4c-a668-4e4e-9278-17e8e390e912", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd3c2383-1541-449a-9b29-6474bdcbcc8b", "sighting_of_ref": "indicator--8df8ad0e-ff3c-4a31-9a00-1d92542ef0c6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--798d77d7-7d26-4274-99d2-c39d67eebf01", "sighting_of_ref": "indicator--0927e8d7-e743-417f-898d-c6ffd23e2b62", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6fbfd2-59cc-4807-9e31-071bbf4003c1", "sighting_of_ref": "indicator--905529e1-df3c-442d-b817-1a2508f9c27d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f11d91-5299-4ba5-b4f9-4465ab227f16", "sighting_of_ref": "indicator--905529e1-df3c-442d-b817-1a2508f9c27d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--078826a6-ddee-442b-83ab-fc698ef78664", "sighting_of_ref": "indicator--756c8cfe-2106-44ec-b69d-5127ebcc50d5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1adbc95-00d4-401d-859a-94a142c781c6", "sighting_of_ref": "indicator--756c8cfe-2106-44ec-b69d-5127ebcc50d5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1e07bb-398f-43c2-9610-ce2482dc4d8c", "sighting_of_ref": "indicator--cb3b96a2-4968-4cfa-8e29-b4641fb0d5d3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d4de03c-0249-4b1d-b842-1cc243b2bdf4", "sighting_of_ref": "indicator--cb3b96a2-4968-4cfa-8e29-b4641fb0d5d3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da76377b-0cd9-446e-a71c-563e7384e39c", "sighting_of_ref": "indicator--285c0033-673e-4466-bbe4-6d0f951d3e8e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b685dd6f-2aab-4247-8649-e4a27a354000", "sighting_of_ref": "indicator--285c0033-673e-4466-bbe4-6d0f951d3e8e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15bb9284-c9a0-41cd-8e7e-01a6c36b5449", "sighting_of_ref": "indicator--baa5ce41-6597-4bb7-bf96-28cc081f1970", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b71f6ad-cf82-4d7d-90d4-ca32ed2d5423", "sighting_of_ref": "indicator--fbd096c3-ba2f-444d-9e62-fbf2dc8f6c99", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7686b932-3fc4-461d-879f-6be185f184d2", "sighting_of_ref": "indicator--67a8336d-4e21-49d3-966f-58daddb14071", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07c933c4-29b1-43ad-a86c-47f69b7a8b4f", "sighting_of_ref": "indicator--67a8336d-4e21-49d3-966f-58daddb14071", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575ae601-0f0d-4e2e-886d-cf44f5b1caa6", "sighting_of_ref": "indicator--b6313868-5836-4508-a19b-32541be33d62", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a58de5e5-117a-4607-8716-725001773568", "sighting_of_ref": "indicator--b6313868-5836-4508-a19b-32541be33d62", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fac3374-d126-4100-806d-bb6d24d93bd5", "sighting_of_ref": "indicator--b6313868-5836-4508-a19b-32541be33d62", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9de1198-2143-4ad9-b118-8d4fa2ef2d3b", "sighting_of_ref": "indicator--e7b07c61-2db4-4da3-9329-d8db451d7666", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81edea34-c641-43fe-8eb2-63be2f9c84a0", "sighting_of_ref": "indicator--e7b07c61-2db4-4da3-9329-d8db451d7666", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b883942-10b7-423d-a1d8-592ed7f57706", "sighting_of_ref": "indicator--08c6a870-acc3-4700-b90d-1e20e503efdc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d243895-2c57-4fb5-81d3-df2ef481739b", "sighting_of_ref": "indicator--08c6a870-acc3-4700-b90d-1e20e503efdc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2940605f-7d33-4c57-b5b2-96c26ea13124", "sighting_of_ref": "indicator--08c6a870-acc3-4700-b90d-1e20e503efdc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b041f0-6f5a-474e-bddb-86dd6ce26e2a", "sighting_of_ref": "indicator--5e968edd-42c5-4ceb-83e0-41cba1134c4c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb7452d-dd84-4ee1-a025-f6d5fa5a8183", "sighting_of_ref": "indicator--5e968edd-42c5-4ceb-83e0-41cba1134c4c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b9bb86-1526-4164-b30b-37c5e3851a94", "sighting_of_ref": "indicator--5e968edd-42c5-4ceb-83e0-41cba1134c4c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb4d6a0e-1f75-46f6-82e6-8aca41ad63a9", "sighting_of_ref": "indicator--aa60b366-fef9-40c3-9a27-c433dbe3b269", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0edc10a-bd88-4330-8a16-75787eefc206", "sighting_of_ref": "indicator--a56d710b-1c1b-4a4f-b430-d19ded255596", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db2d1ee-8c73-44be-83ea-2fbdde24da7c", "sighting_of_ref": "indicator--a56d710b-1c1b-4a4f-b430-d19ded255596", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb462bb-4725-4e09-b345-7ac0544478bb", "sighting_of_ref": "indicator--7dfb5425-d8a1-4930-87c0-062b9e46d08f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8da2f9b-56b8-4c3d-9b1e-3fb03f4852d5", "sighting_of_ref": "indicator--ff70e714-c66e-42d8-9331-8371a8ff0fc3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80792ab9-4e84-4ef0-a3f7-56a3741d333e", "sighting_of_ref": "indicator--05803bc3-436f-4c0f-979c-e4c56ed29a06", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97fd03e-9b62-41ea-88d4-b45fc4fc027f", "sighting_of_ref": "indicator--05803bc3-436f-4c0f-979c-e4c56ed29a06", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f870d4c2-f5ae-43c5-9ae4-9cc94e669749", "sighting_of_ref": "indicator--05803bc3-436f-4c0f-979c-e4c56ed29a06", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906bf574-380a-4e46-9f26-7a87f02b3956", "sighting_of_ref": "indicator--6b3fdf4f-a58f-4698-83ca-f6116620c169", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc9a35b-2cb8-4ef8-b2b2-038cb2a36a27", "sighting_of_ref": "indicator--99ed03bb-e6e4-4a5a-9835-cb7b1e942c69", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ae0462-c0e8-4186-9983-3ccba82dcf7e", "sighting_of_ref": "indicator--99ed03bb-e6e4-4a5a-9835-cb7b1e942c69", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3341084-e961-48b7-a468-ed2f29266166", "sighting_of_ref": "indicator--99ed03bb-e6e4-4a5a-9835-cb7b1e942c69", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4a9113-1c6d-4b1f-be2e-d7a9c2f346d4", "sighting_of_ref": "indicator--f11ecf8d-6af4-4ae7-939d-997c0aaae800", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--670b0832-2e57-4d3f-9a0d-c53abe0d64a3", "sighting_of_ref": "indicator--53467a8a-0f12-471d-bbd1-b8007e3ee811", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3668686d-d01d-4bdc-95c0-d07ebccd0ea9", "sighting_of_ref": "indicator--53467a8a-0f12-471d-bbd1-b8007e3ee811", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a633e05-68d0-4b23-b2ef-e059b9d863fa", "sighting_of_ref": "indicator--04861f87-9ae6-46c8-b376-696cbcf1b62c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29d04a2-719d-40be-a638-0d2996ac375b", "sighting_of_ref": "indicator--c737ff43-1186-4c51-bb27-71bc3f1c6bde", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--716c12b7-8ee5-4b94-a657-2a71ea8ffae8", "sighting_of_ref": "indicator--c737ff43-1186-4c51-bb27-71bc3f1c6bde", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--455b3605-55bb-4556-9f52-6ac31af2ed17", "sighting_of_ref": "indicator--88ccf4b8-c260-4885-a8ed-227d58e943a0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f658d2b-7dbe-4f0e-9f07-4b957be2ae2e", "sighting_of_ref": "indicator--57143553-535b-473d-96d7-203b491ea3bc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a801604-8e34-4957-a0b0-e801db142992", "sighting_of_ref": "indicator--13e3f091-e91e-46e5-8481-8250f130b4f9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff68d52-f0bd-4897-b5ce-adf12cbfdc99", "sighting_of_ref": "indicator--13e3f091-e91e-46e5-8481-8250f130b4f9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8374afe2-9733-4f4f-a30f-5780711ee93f", "sighting_of_ref": "indicator--13e3f091-e91e-46e5-8481-8250f130b4f9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4ef832-ba05-4609-98cd-1eea580796bd", "sighting_of_ref": "indicator--9785eb02-5e98-49b0-bc8c-8b5ff21d7eaa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f297c82e-4137-48ba-a8fd-fc8f8f3cb383", "sighting_of_ref": "indicator--9785eb02-5e98-49b0-bc8c-8b5ff21d7eaa", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59870da-b000-4040-be6c-bb8fce41daf4", "sighting_of_ref": "indicator--6086d5e5-c806-4c1e-8581-d548bdc80978", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15421a55-4030-48c7-9b07-a86aea1b821a", "sighting_of_ref": "indicator--6086d5e5-c806-4c1e-8581-d548bdc80978", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2560956-d29c-4273-99e4-1e00bb93a9da", "sighting_of_ref": "indicator--081a5f7f-3866-4ce6-b60a-b7e575efd35d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ad8bf6-24da-49f0-9b26-1a88345447fe", "sighting_of_ref": "indicator--081a5f7f-3866-4ce6-b60a-b7e575efd35d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf17312-8d1b-495f-b995-8e33e0e3a2a8", "sighting_of_ref": "indicator--081a5f7f-3866-4ce6-b60a-b7e575efd35d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8e94fc-2cd1-4ff4-99ca-33bc23c11ae0", "sighting_of_ref": "indicator--ef7c7e32-73e5-4d89-b4ad-4d34e5e69cf3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d83d507-134d-47c8-9824-e65a85430ec2", "sighting_of_ref": "indicator--ef7c7e32-73e5-4d89-b4ad-4d34e5e69cf3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d474f0-8bcb-478c-af87-f0fd16b79e9e", "sighting_of_ref": "indicator--ef7c7e32-73e5-4d89-b4ad-4d34e5e69cf3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c948e7fc-54b1-4844-ab3b-50ed16b6b0f0", "sighting_of_ref": "indicator--c3033ff9-c5e5-4005-a7cd-c47f83ab6147", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f83c0ff8-108f-4816-8f43-171aa2a32cd8", "sighting_of_ref": "indicator--c3033ff9-c5e5-4005-a7cd-c47f83ab6147", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d8edc6-27fc-4d0f-983f-9de43d22ee4c", "sighting_of_ref": "indicator--c3033ff9-c5e5-4005-a7cd-c47f83ab6147", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c7c2b2-441a-4c87-b17b-f3d7f7f77833", "sighting_of_ref": "indicator--ad4683ff-cb4d-42d4-a242-58763ba0637d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef60048c-fdb9-47cf-8f94-f61e1e84feb0", "sighting_of_ref": "indicator--ad4683ff-cb4d-42d4-a242-58763ba0637d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eadd2873-4c9a-4ded-9658-661af4102694", "sighting_of_ref": "indicator--e492c29e-01f9-4d68-9ee8-bf858f281e70", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a170c211-692b-4be2-ae4a-58eba3c3da16", "sighting_of_ref": "indicator--2fd795a5-688c-4155-8d64-d8f6a8ebe041", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0047c5b-cb7e-462a-9b54-690a1458e373", "sighting_of_ref": "indicator--2fd795a5-688c-4155-8d64-d8f6a8ebe041", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5519191-dd61-4096-b0c7-80dcf634b215", "sighting_of_ref": "indicator--0488f617-e8fe-4347-96b0-38bb228e0fc9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28579223-df2b-4fa9-8012-c77e92270afd", "sighting_of_ref": "indicator--0897d389-7c75-4a14-a2a3-275f84b99899", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c776295-833e-4e06-a902-6f308b18ccd1", "sighting_of_ref": "indicator--b57d0529-b0eb-42c5-91a1-4dad9a7c0dc1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--064a8e1c-2853-404c-a7dd-69332d272ba9", "sighting_of_ref": "indicator--1b0ba29d-af2a-42c0-be44-ddc05fc2431e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6f096cf-7676-4e64-b23f-14801faa0fb1", "sighting_of_ref": "indicator--1b0ba29d-af2a-42c0-be44-ddc05fc2431e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65cd6aa2-d143-401c-bb0f-fa9def2b089c", "sighting_of_ref": "indicator--25750ec2-800c-464a-bcb5-ef5b396dee75", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f90f9cb3-e1d2-4b09-9f96-9db24cf10fc0", "sighting_of_ref": "indicator--7109c74d-5be2-4d5d-b0ad-c175636b7156", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2efd543-78a0-4d0a-b6f3-c7f9b6070e5c", "sighting_of_ref": "indicator--ddd6e982-f140-4431-8ce6-e12c02ba7e91", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad1bf6b7-40b3-40ff-90c5-ac8f0f7d6cc0", "sighting_of_ref": "indicator--ddd6e982-f140-4431-8ce6-e12c02ba7e91", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8075c6-071b-4e21-8759-b21ab871eea8", "sighting_of_ref": "indicator--d344dd6b-4e7e-492d-b209-93625991f39b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bed2be1-ce37-41d4-8def-0c0157f13933", "sighting_of_ref": "indicator--2312b341-f790-4353-88a2-062b74a47c29", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76633dd7-f64d-4023-8f92-f51a8499f9ff", "sighting_of_ref": "indicator--2312b341-f790-4353-88a2-062b74a47c29", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce33ea90-81fb-4ec5-ad57-b208cf9e332a", "sighting_of_ref": "indicator--cd63d912-5526-4c05-abfe-ac5827471a7e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c54530-51aa-4d38-8791-99d423eab071", "sighting_of_ref": "indicator--d5e8ef75-1890-4786-b90a-14efaba10e2a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f754804-113f-42ee-9ccb-9f7dcb57557c", "sighting_of_ref": "indicator--d5e8ef75-1890-4786-b90a-14efaba10e2a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ce94af-f7a2-4714-970f-553b38bc0fe2", "sighting_of_ref": "indicator--d5e8ef75-1890-4786-b90a-14efaba10e2a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572ba5a6-2fc2-42cb-955d-b87196e49ce5", "sighting_of_ref": "indicator--6caa89aa-4aec-4503-a5a7-c03525bc9088", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c864a0-fedd-45d1-b940-de857629b2fd", "sighting_of_ref": "indicator--7c1d21bc-31e7-4d1d-9a69-df1d384dd79b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9db9706-4e55-41ff-8adc-6656887d5661", "sighting_of_ref": "indicator--7c1d21bc-31e7-4d1d-9a69-df1d384dd79b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10607dbc-fd4a-4d62-a695-da090dfc3527", "sighting_of_ref": "indicator--7977286b-5908-490a-826a-46860daceddf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2754604-c0a3-4b04-986e-9c318bf593ec", "sighting_of_ref": "indicator--35021da1-c810-4531-bafb-b324e279dceb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aebabdb1-fb75-4411-9972-938a6724fea8", "sighting_of_ref": "indicator--35021da1-c810-4531-bafb-b324e279dceb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5631c373-e3a5-4466-9b3a-ae639722976b", "sighting_of_ref": "indicator--7f86cd70-d5ba-4ec6-806f-8bfe053d6300", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b598d3-30fb-409e-a694-b920ceb21a2e", "sighting_of_ref": "indicator--7f86cd70-d5ba-4ec6-806f-8bfe053d6300", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0112f3a-6d7f-41f7-bb94-01ec01954332", "sighting_of_ref": "indicator--86e27ed9-83c9-4ec4-9178-a1e520cdcc20", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f10fdb32-d206-4f4f-8208-9850da424c0b", "sighting_of_ref": "indicator--f032cad3-210f-4a45-8253-c5bbc576616d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54637da-3efe-4ea3-a46d-597ccda4a17e", "sighting_of_ref": "indicator--f032cad3-210f-4a45-8253-c5bbc576616d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c646388d-238e-4527-b83f-340645fa468b", "sighting_of_ref": "indicator--326e23a7-f76f-4fa7-bfc5-cd8c44286b47", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46cf965-365b-4c8c-bc64-3d89d11bed7b", "sighting_of_ref": "indicator--326e23a7-f76f-4fa7-bfc5-cd8c44286b47", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b3a75d-d1b5-47a8-a239-2fcae29ff231", "sighting_of_ref": "indicator--326e23a7-f76f-4fa7-bfc5-cd8c44286b47", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--784e9fae-cec2-42c5-8c12-6442a3db25ba", "sighting_of_ref": "indicator--c52f4f2a-bca4-478d-a4eb-ded8dfe5d693", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d090c8-0139-472a-a88b-60ae948cafcb", "sighting_of_ref": "indicator--c52f4f2a-bca4-478d-a4eb-ded8dfe5d693", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef682283-81f0-4f65-9260-2d6e1e02f15a", "sighting_of_ref": "indicator--41650203-80f4-4343-8901-d46b317be662", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee954c4-2e94-4f72-b151-fb54085a193f", "sighting_of_ref": "indicator--25ae7521-ab7c-4c5b-846e-3ccb1170d723", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2c6a81-012e-42ff-a38b-fba1391e1287", "sighting_of_ref": "indicator--25ae7521-ab7c-4c5b-846e-3ccb1170d723", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea68114-e482-4760-baa3-0fabae2475b3", "sighting_of_ref": "indicator--25ae7521-ab7c-4c5b-846e-3ccb1170d723", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef93840-acaa-444e-be5b-4fb71a4cda1b", "sighting_of_ref": "indicator--360b4f32-8850-4e52-8cd7-7ffb73475be6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff86b57e-b885-4ae4-9c85-f60ec5dbed4c", "sighting_of_ref": "indicator--26522790-e5e0-40f9-b430-d30e8069952b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf802d18-84f0-42fe-867e-c95aa49cf6bd", "sighting_of_ref": "indicator--26522790-e5e0-40f9-b430-d30e8069952b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8228dca-06b7-4823-989a-72ead8026eca", "sighting_of_ref": "indicator--ea8d4419-8a35-4761-8193-f41f8dae14be", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5166bfd6-8e59-4e32-83d0-eafb82e9a7de", "sighting_of_ref": "indicator--ea8d4419-8a35-4761-8193-f41f8dae14be", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4667df1-2342-4917-81b4-f9d383eee308", "sighting_of_ref": "indicator--c436c8f9-83f7-4879-81f3-d7f1b0fbfdfb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e414989a-1d8e-40f1-9bce-c43efe51afd1", "sighting_of_ref": "indicator--6c0f7b90-418a-480c-a2cd-10081e73f5cc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5191c1e8-ca8f-48ff-b9f9-d41167b3d33b", "sighting_of_ref": "indicator--8d274f6c-854e-48d5-9da1-50329a7aa93c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8feecf-1fc0-41c7-8bdb-ded81515ca8b", "sighting_of_ref": "indicator--8d274f6c-854e-48d5-9da1-50329a7aa93c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1741f62-e188-4c1d-a45c-e1269f92645d", "sighting_of_ref": "indicator--8d274f6c-854e-48d5-9da1-50329a7aa93c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--554a0089-963e-4c38-8b3f-bf06ea2d96a2", "sighting_of_ref": "indicator--c2b23fca-7edd-435d-89d4-e6e11464f6f3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aaf71de-2bfb-4d62-8ae6-5ab37f8decb7", "sighting_of_ref": "indicator--c2b23fca-7edd-435d-89d4-e6e11464f6f3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c9daed1-db4f-4ffe-a13f-43487ab7d409", "sighting_of_ref": "indicator--026a7a22-e91e-4be0-89c5-6cecf93b0caf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8fb67c-d486-42e0-ab54-fec2184e74d4", "sighting_of_ref": "indicator--026a7a22-e91e-4be0-89c5-6cecf93b0caf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9835fed9-2787-4bf5-9fe8-74b977211ad8", "sighting_of_ref": "indicator--27ffbb65-43db-41b1-bef2-d5ab12c7e982", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f24f4b-d6f1-4c1b-9e93-7a420ee69c12", "sighting_of_ref": "indicator--27ffbb65-43db-41b1-bef2-d5ab12c7e982", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45af9900-c61a-4367-a540-b75a8bc054d1", "sighting_of_ref": "indicator--27ffbb65-43db-41b1-bef2-d5ab12c7e982", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--786606eb-ed30-4a24-aeed-38c1ffe87c8f", "sighting_of_ref": "indicator--f962d272-4b71-4930-9644-5a6c50da4bd1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d13c5f2-3afb-4aba-80e1-69e551579f4c", "sighting_of_ref": "indicator--f962d272-4b71-4930-9644-5a6c50da4bd1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e13a1b-1bc9-4934-a240-7af341ed2956", "sighting_of_ref": "indicator--719b00a9-a353-4702-a8b1-bfe2b03d3856", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4132fd0f-d4cf-4f9f-a6e3-4c9a3e0e6f8b", "sighting_of_ref": "indicator--719b00a9-a353-4702-a8b1-bfe2b03d3856", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a82133f-bcb6-4eea-95aa-ef9e31bc0b3b", "sighting_of_ref": "indicator--b8f214e2-1b9c-4124-91af-9ae056f6b151", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f3dd107-96cd-47e4-aa02-39523c099ec2", "sighting_of_ref": "indicator--b8f214e2-1b9c-4124-91af-9ae056f6b151", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4ab0d4-71c9-4f20-b820-5121b1961f81", "sighting_of_ref": "indicator--1da5d1ff-8e47-4475-9c83-de1e97ba926a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df93bd11-47d6-437e-9f4d-6e28ccb4736f", "sighting_of_ref": "indicator--e57cd856-f777-4b76-b6ae-60e28dde78fe", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e41cfa0-f571-470c-98cb-b5925d0a7a57", "sighting_of_ref": "indicator--e57cd856-f777-4b76-b6ae-60e28dde78fe", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee19c559-3cd0-4d5b-b493-d14ab6910054", "sighting_of_ref": "indicator--73970457-ce69-49d2-9735-e04d64057f2b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9079af-ca6d-430a-b677-6ab300109276", "sighting_of_ref": "indicator--0a5a7558-9e83-4776-8d91-eb21fbc200e0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e16239b-d536-4f14-a468-4f935efd292f", "sighting_of_ref": "indicator--05ea8bd5-5ae2-423e-8b80-b8ac9e225718", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e1f27a-e032-4a41-95cf-fffdc6e7f4e6", "sighting_of_ref": "indicator--3ffef4e4-2965-41d0-bafb-7ca8b3a9ee10", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c07260-3b85-4491-bbb9-d7172c53ac40", "sighting_of_ref": "indicator--d90c066c-c889-4796-b5ce-45f1a0bca725", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ccf3cfc-8aef-48f7-b798-084e3010ccb4", "sighting_of_ref": "indicator--d90c066c-c889-4796-b5ce-45f1a0bca725", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8012b234-f087-4e7e-bd90-d1174f00c46f", "sighting_of_ref": "indicator--ace6ae59-6849-47cf-ba0d-17ea012f2567", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3c79176-d75c-4e83-92e1-160f9b98a636", "sighting_of_ref": "indicator--ace6ae59-6849-47cf-ba0d-17ea012f2567", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f09c34fe-7628-4b62-bef5-12b74d7fedcc", "sighting_of_ref": "indicator--6d553fcf-e520-45dc-b2b9-f2b4479679b0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1760a0-e83b-4e14-9ef8-f931dda130d1", "sighting_of_ref": "indicator--6d553fcf-e520-45dc-b2b9-f2b4479679b0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4717e5be-c0a4-49ab-8f40-d287765eef6d", "sighting_of_ref": "indicator--f0ac46cc-0aa2-47c2-938f-4430b574475f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d95ef0-1ce2-4472-a99e-2ca5e87b8c24", "sighting_of_ref": "indicator--f0ac46cc-0aa2-47c2-938f-4430b574475f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecdb252b-2d92-4c38-8606-ecea07419ca8", "sighting_of_ref": "indicator--629dd2fd-3466-4324-8b91-ae1be675dc10", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87cf8966-a592-4e7e-a748-ce48fdcbb386", "sighting_of_ref": "indicator--6a8c5a3a-c449-48dd-9d9f-3a41ec75bdb2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f60e4b85-2835-4ac2-a2d0-5bb573994d6a", "sighting_of_ref": "indicator--6a8c5a3a-c449-48dd-9d9f-3a41ec75bdb2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7375602d-a108-44e5-87e3-d007c77d7d1c", "sighting_of_ref": "indicator--bec8b965-aa72-4724-92da-e69f52e98e0d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d4d4e9-1ecc-4795-a154-405d287b1f7e", "sighting_of_ref": "indicator--6359fa32-d9af-493f-9a43-2c6d1a8212e6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456e7bbd-c122-4eeb-ac81-5c8977e957d2", "sighting_of_ref": "indicator--6359fa32-d9af-493f-9a43-2c6d1a8212e6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d78344-5e36-4c35-9f3b-a0739adb314c", "sighting_of_ref": "indicator--c02bd96f-1356-4cdf-ba8a-069d7153b6a5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a37a750-25f8-4954-a95d-bc6dda60a147", "sighting_of_ref": "indicator--c02bd96f-1356-4cdf-ba8a-069d7153b6a5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15089afe-a62a-4504-b224-bf9f9c2847af", "sighting_of_ref": "indicator--c02bd96f-1356-4cdf-ba8a-069d7153b6a5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e2e2ca-a7a8-4d61-9949-606fd060e3b6", "sighting_of_ref": "indicator--b7dccfc3-5d9d-4804-b4d0-9b6b6fcb89a5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb69c64f-a813-4bb2-af2e-5dc449c1dbf1", "sighting_of_ref": "indicator--b7dccfc3-5d9d-4804-b4d0-9b6b6fcb89a5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c9f1f5-5981-4721-856b-d64090555602", "sighting_of_ref": "indicator--b7dccfc3-5d9d-4804-b4d0-9b6b6fcb89a5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008b271a-00b0-499e-8b30-44bc4115e917", "sighting_of_ref": "indicator--99b03057-796d-4a96-a9ff-cdc2f3e97255", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5aabaa9-0997-45bb-a856-e0bea3b7dbd5", "sighting_of_ref": "indicator--34f500ae-5f8b-46ea-ab10-46197f032942", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5594f95a-d3cc-4acd-b9aa-aa04041d57ea", "sighting_of_ref": "indicator--74c1411f-75b2-4ea3-81c2-543d5afb4e2d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c73a96-41fb-4266-97a6-b0a54433ef62", "sighting_of_ref": "indicator--74c1411f-75b2-4ea3-81c2-543d5afb4e2d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd92b53-c3c6-4279-9aef-a169197079dc", "sighting_of_ref": "indicator--302b9530-b091-4716-acac-349012304800", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485f520c-27e4-49b9-81e6-9b73373713b8", "sighting_of_ref": "indicator--2d5aee96-b739-4c46-84e0-3d5c1b8366a7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd452767-6a29-4c1b-8be6-ed3e96f5203e", "sighting_of_ref": "indicator--2d5aee96-b739-4c46-84e0-3d5c1b8366a7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4315dd-c036-41e5-8bac-874a01330d7d", "sighting_of_ref": "indicator--bd37b70a-01a2-430f-9222-8a655a188abb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a64341e4-c7ee-4e1e-b1c7-b171777f5bde", "sighting_of_ref": "indicator--d3b8f8ec-aa25-4f78-9d82-d4a4680c7c60", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409d0205-5af5-4553-8592-1e2214f14511", "sighting_of_ref": "indicator--e36b01a7-1a64-40c1-8b75-3b507eb8d543", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c08f9c-87b8-4290-b584-113b58af1739", "sighting_of_ref": "indicator--bff9febc-7f95-4fad-bab0-dcd6094163f1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34dcca4-983a-4e93-a74f-268f8e4c0878", "sighting_of_ref": "indicator--18219dc9-1899-4e95-a5df-361f43186660", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5995bf42-7d94-4144-9879-3ec81ce6e6e2", "sighting_of_ref": "indicator--a798f675-8dcd-46bc-8d4a-f094050eab6b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f30678-6750-4185-a4f0-902d6509d0f5", "sighting_of_ref": "indicator--a798f675-8dcd-46bc-8d4a-f094050eab6b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db3044c-5141-4088-af4a-3b0fa58d7090", "sighting_of_ref": "indicator--0061feea-f6af-46a0-95b0-74615936ed73", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe3f9ee-db23-4ce4-8caf-512e0dd636c0", "sighting_of_ref": "indicator--8bc5d7eb-78c3-414d-bff1-d3e736ea8048", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a51c3ad-7f18-4de4-9fa4-051f1ce39b44", "sighting_of_ref": "indicator--8bc5d7eb-78c3-414d-bff1-d3e736ea8048", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a9743d-8a1b-470f-afdc-afc58ecebbf1", "sighting_of_ref": "indicator--78024c56-0329-40f9-9c45-2ef61d4291b1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--271bf8b6-a2ef-449c-a247-65d851aca039", "sighting_of_ref": "indicator--0c7cd57b-a2e6-4afe-b866-7bf8b18a9851", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222a2b5c-2087-44ab-acac-0ba056b48ab6", "sighting_of_ref": "indicator--0c7cd57b-a2e6-4afe-b866-7bf8b18a9851", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20be0063-939d-4c93-978f-f7f869270dec", "sighting_of_ref": "indicator--de4e441e-fb8f-47ba-a969-78d17b60faa4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddec3e63-5292-40e6-aad4-f2c8c0584933", "sighting_of_ref": "indicator--de4e441e-fb8f-47ba-a969-78d17b60faa4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92d535c-2c83-495a-b2aa-f9fe94b31146", "sighting_of_ref": "indicator--82b5a33d-5bb5-45f9-ba16-abcb4d85efec", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70466807-b294-4037-8b0f-534c01f7fa72", "sighting_of_ref": "indicator--82b5a33d-5bb5-45f9-ba16-abcb4d85efec", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1e9509-69ae-459f-9469-de2642affcd6", "sighting_of_ref": "indicator--99aa47f8-ebae-49e4-8627-a7cce7449a2c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce11ef37-2e0f-415b-88da-0813e2340a54", "sighting_of_ref": "indicator--000cc0b1-7303-4566-a4ff-2c439846295a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a525364-628c-4b7d-a77e-317afdff67ce", "sighting_of_ref": "indicator--d58767b7-41d2-479b-ae0f-84accad8d5ef", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb44dfa-1f03-4d47-b6a5-9ea8e16fc3ed", "sighting_of_ref": "indicator--1f31605d-b47d-4e41-abb0-30c4b6130244", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--269e1b8f-4426-451a-ad06-1a484a927e71", "sighting_of_ref": "indicator--9240c05c-bdba-42cf-b7c4-fcfc9310f5a5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b59522b-d187-4db9-8557-b3e2b864e03e", "sighting_of_ref": "indicator--9240c05c-bdba-42cf-b7c4-fcfc9310f5a5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f69f40-5720-4cbe-9cb8-ed89452fa23d", "sighting_of_ref": "indicator--ac132b08-9ed2-4637-8d34-d6683f320fe2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a7bbcd4-8ae6-4add-8797-16f5d676c848", "sighting_of_ref": "indicator--b4043ab6-4e59-48a3-9894-42d862c60a56", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e33ab276-43ba-4898-b58f-210cfa034fa8", "sighting_of_ref": "indicator--b4043ab6-4e59-48a3-9894-42d862c60a56", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae714a9-8bc1-4b2b-80b9-368f090e906f", "sighting_of_ref": "indicator--b4043ab6-4e59-48a3-9894-42d862c60a56", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c5626f-a754-4404-b905-55cae7190e3a", "sighting_of_ref": "indicator--8b096eb8-31ac-4a30-8ee8-f413b2428a71", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e6d86f-ccd6-40f6-b653-340b2755c2aa", "sighting_of_ref": "indicator--8b096eb8-31ac-4a30-8ee8-f413b2428a71", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f462250-a80d-491b-adba-56e288053a08", "sighting_of_ref": "indicator--ea86f917-f1fb-4ff9-89bd-9428248a8a0b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0dd9c4e-a920-408f-b758-02437297dcc0", "sighting_of_ref": "indicator--fe4d16cb-8155-4d7f-9535-7069b5c6bab9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9787438-b43d-4676-8910-f1690f70ddf8", "sighting_of_ref": "indicator--6487f6d9-273d-4a53-9897-c60c0d0c389a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3dfc1eb-45e1-4be6-81d6-1a726e249d6f", "sighting_of_ref": "indicator--44e3b0c2-a4ea-4152-8c0d-0fd3064b72f0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c635252d-b090-4209-b45d-1eb69c001990", "sighting_of_ref": "indicator--7738aadc-f052-4719-9435-74202b0aebc2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1074c481-0cc1-4eee-a421-52f5e1b2107d", "sighting_of_ref": "indicator--7738aadc-f052-4719-9435-74202b0aebc2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3bf96d2-7b10-4525-b447-544c6aa78c76", "sighting_of_ref": "indicator--7da7fcc6-bb85-476e-a73b-f020154c1227", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff510c7-dd2d-461e-a5e0-4ff86b38ad1c", "sighting_of_ref": "indicator--7da7fcc6-bb85-476e-a73b-f020154c1227", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd88b9eb-7090-4e20-87d9-4fe659866e21", "sighting_of_ref": "indicator--5d7c05f8-b371-4942-bf28-c09a31012897", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--443c0835-4831-4368-89e0-91cad262a750", "sighting_of_ref": "indicator--e9941b4a-5c4c-405f-840b-bf0e062fcc8f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45757a9d-57fb-4422-84de-c76e1d1cc983", "sighting_of_ref": "indicator--e9941b4a-5c4c-405f-840b-bf0e062fcc8f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45cac2b3-29b7-44c3-9b2d-832e7dc205d2", "sighting_of_ref": "indicator--03629f5e-cae1-4244-8d1b-436fe16784e6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95288a4c-3530-4304-958a-03b0a097b4c7", "sighting_of_ref": "indicator--c0bc47ab-a7ea-42d3-83f0-4eda801ad9cf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ffaf9a8-2ba9-495a-a77c-c70e799dbbf7", "sighting_of_ref": "indicator--7fc81def-0c35-4562-80c0-0bcbddd1ef71", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a58239ec-75b0-44c1-a5b4-e42c318570b4", "sighting_of_ref": "indicator--5bc31b12-5119-4f75-91db-f7244831050b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c92530-7c95-4f2b-9d32-81dc4ada41ca", "sighting_of_ref": "indicator--5bc31b12-5119-4f75-91db-f7244831050b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fcdfe4a-50cb-4b73-bb48-5ca1fbd37418", "sighting_of_ref": "indicator--e1c6d9cb-48e1-4733-a11a-c3299889d73a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bec5f0f-c046-49b1-b5e2-bd9bc2f1964c", "sighting_of_ref": "indicator--cb5f3c98-fcf1-4ebf-955d-5fcab8274181", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a9ce7d-5955-4dc0-b431-21d998bf019b", "sighting_of_ref": "indicator--cb5f3c98-fcf1-4ebf-955d-5fcab8274181", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a742ba-55f1-4bf8-9f94-f0d075c9aed3", "sighting_of_ref": "indicator--cb5f3c98-fcf1-4ebf-955d-5fcab8274181", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cbf3f1d-fbe7-44fc-a1d3-94a4ade3d5a9", "sighting_of_ref": "indicator--13321b5c-ed63-4ac5-ae6e-4c05a4b56524", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28edbffa-943d-4679-ba60-1e4095f3e160", "sighting_of_ref": "indicator--13321b5c-ed63-4ac5-ae6e-4c05a4b56524", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd21d4f-8ece-4c50-a8d3-257b07300cf2", "sighting_of_ref": "indicator--20c682e9-b475-4d49-aa21-f0b88cb4daa1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c26eee8-9c83-41eb-a803-cc031aa33676", "sighting_of_ref": "indicator--0e45338c-58ed-444a-a55c-ebb72a14dfec", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b26414-9ca3-4b3a-9fc3-fe7d53c47053", "sighting_of_ref": "indicator--0e45338c-58ed-444a-a55c-ebb72a14dfec", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc301bb4-bb44-49c0-8fd8-0a2334b32660", "sighting_of_ref": "indicator--4e1e105d-e6b9-4bb1-a303-44418b6af49c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b475df-076d-432a-a50e-75473d2d45bc", "sighting_of_ref": "indicator--af401505-85ba-4a49-b4ef-b412b09c4e30", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbeb6cc7-f989-4d74-8e41-c8caa3600925", "sighting_of_ref": "indicator--6d241571-9930-4934-8dac-4fd04c2690a6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa9ee8b-f828-41d9-8780-b55740d71065", "sighting_of_ref": "indicator--6d241571-9930-4934-8dac-4fd04c2690a6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--823d3d20-6ae9-4239-bba6-def7be272a9b", "sighting_of_ref": "indicator--1727fcbb-a426-47d4-9e81-a3ea7e6e40a6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c813a6af-36d2-4b8a-8d58-dcbc5f5998ec", "sighting_of_ref": "indicator--1727fcbb-a426-47d4-9e81-a3ea7e6e40a6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece0bfc2-fa50-438e-a5ee-15210a7ef51a", "sighting_of_ref": "indicator--e8edcc8e-d9ba-4812-8f87-01144ecb7239", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e8932f-0aa1-492b-97c7-4a01a539f999", "sighting_of_ref": "indicator--e8edcc8e-d9ba-4812-8f87-01144ecb7239", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ce3009-13e3-4700-96a6-10e47c099254", "sighting_of_ref": "indicator--82567b81-78fd-4fbd-8eac-ea3000c8a1de", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a769cd-ee65-4492-af7c-b3c5772a9789", "sighting_of_ref": "indicator--82567b81-78fd-4fbd-8eac-ea3000c8a1de", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e4582ca-31d0-4d3a-8b0e-3676f56a89d3", "sighting_of_ref": "indicator--d20f80e7-4424-4e02-a852-7914b7748498", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae467d35-71ce-42ef-a050-9b7e38b06523", "sighting_of_ref": "indicator--d20f80e7-4424-4e02-a852-7914b7748498", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368e71f5-9294-4724-a081-79386d17be5b", "sighting_of_ref": "indicator--76828707-3637-49e5-811f-a1ffd3cc13e8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b618255f-61d3-4ad3-9b9b-fbf8ef0c9526", "sighting_of_ref": "indicator--d3848858-8ee9-474d-b260-4f118d55e76c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a30bf60-3914-4d2c-979b-046c643d3ae4", "sighting_of_ref": "indicator--eee34dde-8d7b-4fe8-9356-b7e378d601c8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce58eb53-d030-4ca0-984c-6ed1a10ffe64", "sighting_of_ref": "indicator--eee34dde-8d7b-4fe8-9356-b7e378d601c8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa631bc9-7847-4c75-998e-8e57f6bbfdb4", "sighting_of_ref": "indicator--26e1ee6a-3ad6-4c37-9c1c-cdfed589c499", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4f1eac-8aab-4500-85ec-503b35778ba1", "sighting_of_ref": "indicator--26e1ee6a-3ad6-4c37-9c1c-cdfed589c499", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4b5c1d-3435-4b48-97d9-6daf7b4e953f", "sighting_of_ref": "indicator--f6b14964-dae8-4208-9653-4bfdeaa4b458", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93be4d5f-b925-47ce-bad5-cff9bee6030e", "sighting_of_ref": "indicator--f6b14964-dae8-4208-9653-4bfdeaa4b458", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cafe8f69-39dd-41ad-9d7b-9bf5d27cba83", "sighting_of_ref": "indicator--5eb33486-ed5c-4101-9f07-491752e3aa43", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43dde581-8e72-48c6-b70f-7d5e0ffcab03", "sighting_of_ref": "indicator--5eb33486-ed5c-4101-9f07-491752e3aa43", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2ec3f9-af1e-41a4-be3c-dd8b741c9806", "sighting_of_ref": "indicator--84aa5943-5c7f-4772-ae90-ff3f9ba1c966", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ffb5938-31f7-49c5-b171-f35d9e4f1063", "sighting_of_ref": "indicator--84aa5943-5c7f-4772-ae90-ff3f9ba1c966", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e68aab-20ab-4dcd-93eb-b13fb3b122d5", "sighting_of_ref": "indicator--2cc59938-d558-4e70-b4c0-b319a612ca83", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe0a891-0765-4383-9e9a-f651224df46e", "sighting_of_ref": "indicator--c036ba7d-f5ac-4930-9d99-e3d687e362af", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992b1ac8-bc7c-4081-934f-e0965875ba85", "sighting_of_ref": "indicator--3dbd9070-63aa-44cf-acc7-57d543e5c619", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a305321d-af7f-453d-b688-5b9b3bc55a0c", "sighting_of_ref": "indicator--01f41d1a-9c8d-4814-a08e-19e99359e623", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0525b052-580f-48a6-88f5-4d9db4226b7b", "sighting_of_ref": "indicator--01f41d1a-9c8d-4814-a08e-19e99359e623", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71142910-80ca-45d9-b782-fc4d5622396a", "sighting_of_ref": "indicator--68a0a1b4-81ab-430d-845d-5a21b5c88ea8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e132b19-e98f-4e8d-a67e-a1c0e923c536", "sighting_of_ref": "indicator--68a0a1b4-81ab-430d-845d-5a21b5c88ea8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a196d481-afc8-4dd6-a490-3592d88e26c7", "sighting_of_ref": "indicator--0eaa9f06-0e20-4980-8e8e-3373718ac829", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae76af0-617e-4859-9ff1-0b26739b843a", "sighting_of_ref": "indicator--42a004ef-cf3e-47da-8086-2f66d650ea10", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae8aa73-9bd1-4093-9324-04c6d9b24a95", "sighting_of_ref": "indicator--55e6a8ad-1976-404f-9012-e9cf17085d94", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6bf6c4-f056-4649-abbf-338b84b65891", "sighting_of_ref": "indicator--55e6a8ad-1976-404f-9012-e9cf17085d94", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34bf1b88-4b47-4c48-af8c-a9a11f64ed88", "sighting_of_ref": "indicator--27aeebdb-2ca3-48d3-ba6a-ed919feff40d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0982aa6e-b7e8-4d85-82e3-f13e60f779a8", "sighting_of_ref": "indicator--27aeebdb-2ca3-48d3-ba6a-ed919feff40d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8673387-604a-4f63-84c4-9930ecd0cd83", "sighting_of_ref": "indicator--c711eef9-6d9c-4d9b-bcf9-87236a9659db", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6086c8d5-0f57-4a04-9689-6548ee1de872", "sighting_of_ref": "indicator--da9ebcf1-6023-451d-a3b1-bed4de247816", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847de3c0-8996-4ece-8ae8-0db2997e8692", "sighting_of_ref": "indicator--466c0a17-8f8a-4a4b-a694-e3fe8f960c0f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aed1d12d-ac30-4acb-86a6-1363c223deaa", "sighting_of_ref": "indicator--72b0ef07-d332-40ea-bd99-3d9aa501b998", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be74d0ec-3ac3-4e8e-a5c9-63addb4038a6", "sighting_of_ref": "indicator--72b0ef07-d332-40ea-bd99-3d9aa501b998", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0daf56a6-7312-4354-907a-433cb3d5331a", "sighting_of_ref": "indicator--f958ea66-d749-42e2-be42-8795d3cd4243", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc298d5d-f56b-4b94-8066-a6cfc45694ed", "sighting_of_ref": "indicator--f958ea66-d749-42e2-be42-8795d3cd4243", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a60a66-1a7f-4038-839b-90f5fd2be924", "sighting_of_ref": "indicator--3820c043-540e-427d-93d6-5e06993cf9fa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed05f914-e282-4bc7-89ac-e4b6da4ecafd", "sighting_of_ref": "indicator--f69e324d-9720-4786-a0c9-13d74faa745b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3e5370-75ee-417c-8f5d-c42d38e196f7", "sighting_of_ref": "indicator--f70f7bd2-e68b-437a-bb84-427ee993c39c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe99bc6-8212-4035-b453-cf4a9d2da80f", "sighting_of_ref": "indicator--f70f7bd2-e68b-437a-bb84-427ee993c39c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6166742a-013e-4a6e-b230-ed9d953f9b0d", "sighting_of_ref": "indicator--19e727eb-2a2b-4fa4-b8b4-db09daf24496", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60aea705-b730-4518-a495-a59cc15d6e58", "sighting_of_ref": "indicator--7f8684ae-3f1c-409a-8e72-7c3f248169c0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5b190a-25fa-487f-9335-6b588032b0b0", "sighting_of_ref": "indicator--9500d903-8215-4c3b-b3c6-ac8275d1369e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272e5383-aaaf-4acf-a0af-cc7cefd6c7d4", "sighting_of_ref": "indicator--976ec348-01e2-414f-97da-ce86f5cde07c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534e093d-e757-4612-b3e7-9cad3af62234", "sighting_of_ref": "indicator--2d2033b0-2be1-4394-a99e-5aa6cf755c8e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1818117-b044-4d2f-8f1d-6197fbe883e5", "sighting_of_ref": "indicator--2d2033b0-2be1-4394-a99e-5aa6cf755c8e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898e6e95-3fee-49d0-afc2-b8499620f955", "sighting_of_ref": "indicator--2d2033b0-2be1-4394-a99e-5aa6cf755c8e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2ec898-e5e0-4034-bad9-5566bbbf7c92", "sighting_of_ref": "indicator--35277236-e749-49a6-8377-eabcb8578407", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2b87ea-5144-4349-ad09-87e3ed0ab65b", "sighting_of_ref": "indicator--35277236-e749-49a6-8377-eabcb8578407", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440c5cd6-79b2-4e21-b3d6-539beb5ed354", "sighting_of_ref": "indicator--7da3b738-9318-4c8d-8d18-c753ae5d8d79", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9977bd90-84aa-4c36-97d4-7ebf69111d6b", "sighting_of_ref": "indicator--0057dacb-9cd2-4274-8380-87fd5e6e7379", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff5eb92-56cb-419a-afc9-9a1c224b407e", "sighting_of_ref": "indicator--0057dacb-9cd2-4274-8380-87fd5e6e7379", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2033abf8-fcfb-41ae-a1bf-e4ebd5916822", "sighting_of_ref": "indicator--0057dacb-9cd2-4274-8380-87fd5e6e7379", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39caaee1-fa72-46df-a8be-6522d023779e", "sighting_of_ref": "indicator--13ca5593-479b-4a7d-8ba6-3787468e603e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff17bd4-46ac-45f8-ba59-46ab4cb2dbe9", "sighting_of_ref": "indicator--065433b8-3196-4929-9b5b-e0e3862db9aa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd079f5-aa8e-4b54-b92f-d77799680386", "sighting_of_ref": "indicator--065433b8-3196-4929-9b5b-e0e3862db9aa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4835c5-5685-4d67-bc01-0632de8ac0fe", "sighting_of_ref": "indicator--a5d67e57-3e07-40cb-a6a9-fe5f0c262e76", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f95d94-e866-478a-bdda-a3e93ce591bc", "sighting_of_ref": "indicator--6896e398-a0f7-40b0-bf81-b385324eef1e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e36bf120-fb95-4f95-ad2b-00e7f8a985cd", "sighting_of_ref": "indicator--6896e398-a0f7-40b0-bf81-b385324eef1e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80d67fa-8f1b-4d6d-bc50-0058f48c5295", "sighting_of_ref": "indicator--6896e398-a0f7-40b0-bf81-b385324eef1e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01887c70-a51a-4c72-a1ff-6d7097f94d61", "sighting_of_ref": "indicator--6e5c0961-ea6d-49b9-ae83-82d52401aa6e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16c1295-892f-4482-b914-b23b168b4f4c", "sighting_of_ref": "indicator--4da256af-d644-4713-bb40-1060b5a0e5e1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05800551-7c43-41e1-9818-5f0bbdc4d381", "sighting_of_ref": "indicator--4da256af-d644-4713-bb40-1060b5a0e5e1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--180a847e-7d97-4092-9bdc-cb49b0fbb3f3", "sighting_of_ref": "indicator--3f9bf2a8-4da3-45d6-bb8c-215a63cc7f97", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24fb614d-6d93-4261-a297-65dab01cd5ed", "sighting_of_ref": "indicator--a5bb9b36-26d8-4bde-9d75-4a1e5246d58a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dcedd7f-4017-4a37-a683-d02f30ad9146", "sighting_of_ref": "indicator--a5bb9b36-26d8-4bde-9d75-4a1e5246d58a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ddc2c0-d7de-4121-a35a-a87567f55100", "sighting_of_ref": "indicator--a5bb9b36-26d8-4bde-9d75-4a1e5246d58a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--372625ba-8bf5-4e80-a69b-33d820b1e282", "sighting_of_ref": "indicator--8db9e709-7f3f-44fb-9d78-87ae1192983c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2927cea-e82a-43f5-a9d6-a0af1b2ee73b", "sighting_of_ref": "indicator--0f0a49e7-277a-49b8-bda4-eabe54a38cb4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01df8df8-54c3-4579-8a1c-1425b8de3780", "sighting_of_ref": "indicator--0f0a49e7-277a-49b8-bda4-eabe54a38cb4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf777990-a39f-4f38-a119-fa0e1a8d3e49", "sighting_of_ref": "indicator--0f0a49e7-277a-49b8-bda4-eabe54a38cb4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ed4b52-a14b-40f2-8d38-8aa25e255907", "sighting_of_ref": "indicator--30e1652f-10d4-4114-b3fb-6397a46bc297", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4851e39c-2bbd-4a89-8a83-5952652368b0", "sighting_of_ref": "indicator--30e1652f-10d4-4114-b3fb-6397a46bc297", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9693b6da-ec12-434a-85e0-70de588d104d", "sighting_of_ref": "indicator--e9a23090-09c8-4fcf-a827-90f43e550a7b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c200fe29-358d-4894-91c4-931717576413", "sighting_of_ref": "indicator--e9a23090-09c8-4fcf-a827-90f43e550a7b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d0b45a8-ebb5-4d0f-a5a5-db9816da623a", "sighting_of_ref": "indicator--8ec5d72d-9c7b-4780-aef9-c1306b40741d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c124cf0-a828-4019-ae31-e46dc69c9fd6", "sighting_of_ref": "indicator--9aeb21db-ad6e-498b-b7cf-819ec5c5f22d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d42f5ec-2caf-47a9-b9be-f7dee19a8fc6", "sighting_of_ref": "indicator--6a85709b-e1dd-4f39-906d-f39d8066e7e3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f7732f-8dec-4519-bc45-e917525e0d48", "sighting_of_ref": "indicator--6a85709b-e1dd-4f39-906d-f39d8066e7e3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1bae1de-72e6-477d-b03f-9bd8699bae54", "sighting_of_ref": "indicator--c2af8581-be24-41b1-8318-50c433af730c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a27b99-5cbf-41ae-9a45-f43523c520d4", "sighting_of_ref": "indicator--bbbb555b-ec47-4a41-ab0a-0d95b3f19f7c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c9c5fec-33c6-48a6-8ef0-34a7ebdc3864", "sighting_of_ref": "indicator--b313fb13-2d53-4b72-9cb7-0e1c53e94be9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eef9f7a-b9a4-4a54-9d92-c6bd57222624", "sighting_of_ref": "indicator--b313fb13-2d53-4b72-9cb7-0e1c53e94be9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1767ab17-bee1-42ab-8841-492b53dfa15c", "sighting_of_ref": "indicator--2a0bc419-c34f-45b2-bad5-97fe41512852", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6436ed1e-966b-4a8a-bc71-5fa76a06c879", "sighting_of_ref": "indicator--2a0bc419-c34f-45b2-bad5-97fe41512852", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f60971a9-7440-4e12-88bb-c519f84d8e81", "sighting_of_ref": "indicator--41790478-4fa6-4a77-a6e9-db1cc362d61b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990aecd9-9e9d-4b04-ad07-ef2992c53a18", "sighting_of_ref": "indicator--41790478-4fa6-4a77-a6e9-db1cc362d61b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e3016a-58af-4bab-8e9d-8ebe9054a1b2", "sighting_of_ref": "indicator--d450ae6f-90a9-4158-af51-f786cd586188", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbaf948a-d28c-4f5e-9665-3e3f77ce63c5", "sighting_of_ref": "indicator--ac7c59d1-3033-476f-96ed-917e4cf492c6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3052f28c-e4e3-444c-8ad7-54ade627275f", "sighting_of_ref": "indicator--ab9853e0-7e16-4704-a843-acd61294cdb5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c63f6e-eb7f-4261-bb00-2c08f45d5cd0", "sighting_of_ref": "indicator--ab9853e0-7e16-4704-a843-acd61294cdb5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a4affb-c8c6-4735-b652-427a4e5ac192", "sighting_of_ref": "indicator--bd32ed0f-ee73-486e-9e9c-18432015cc8e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d04d2481-91b2-488e-81c1-82128d1361ba", "sighting_of_ref": "indicator--bd32ed0f-ee73-486e-9e9c-18432015cc8e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5418ab-0799-4dc7-9699-b106b666baf2", "sighting_of_ref": "indicator--d87f8cad-9be0-45c2-ac4a-931caf7d497e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0095749a-f1c3-4376-bae0-a2c79801e2ae", "sighting_of_ref": "indicator--fc2ae624-7234-46fc-b0bd-cd127ff7549a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef90f44-0776-4ddc-ba21-6b4b3a154c64", "sighting_of_ref": "indicator--fc2ae624-7234-46fc-b0bd-cd127ff7549a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d883ae-4857-4418-add4-67e5a34f6c01", "sighting_of_ref": "indicator--da9abdbe-a272-49d0-bea4-eb7e64a942b5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ab394d-d0dd-46c0-8580-da9d58daf474", "sighting_of_ref": "indicator--da9abdbe-a272-49d0-bea4-eb7e64a942b5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1a1f04-df3a-4887-aeae-f4e96d06612b", "sighting_of_ref": "indicator--da9abdbe-a272-49d0-bea4-eb7e64a942b5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f690f5-e693-4048-8511-d666bcfedc7d", "sighting_of_ref": "indicator--e10290f4-1e3d-48b6-811b-66d55baea6a6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5130687d-5be7-4dc8-85a8-0c5840891088", "sighting_of_ref": "indicator--08b90215-faf6-47b9-a3c0-04366135febe", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4516872c-1b12-4e25-a436-30605fdba37e", "sighting_of_ref": "indicator--08b90215-faf6-47b9-a3c0-04366135febe", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615fe69d-fcf1-4886-b3c4-1becc9a2cb35", "sighting_of_ref": "indicator--08b90215-faf6-47b9-a3c0-04366135febe", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd2e0f7-a20f-4c81-810f-91cdb87623fc", "sighting_of_ref": "indicator--d9b0a9ae-e017-4b33-a9f6-cc5b6278a57b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea0f25e9-88fe-4997-9323-c37db9f5b0f7", "sighting_of_ref": "indicator--d9b0a9ae-e017-4b33-a9f6-cc5b6278a57b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd580097-a52b-448f-b692-490a2d0983bf", "sighting_of_ref": "indicator--394b8a52-1128-42dd-9a26-c02f26ae77ac", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccdc2d49-0256-466a-abf8-2b27bc17c0b9", "sighting_of_ref": "indicator--fc80de1b-7767-4d90-8e97-b361f3a319fe", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b67848-8a72-4784-8b6f-b126aebc1655", "sighting_of_ref": "indicator--f3ea6970-b0aa-41e7-92b6-57175c1747e4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76db5643-c420-4259-9fb4-6417f6f648c0", "sighting_of_ref": "indicator--9aa2aaa8-c19f-41be-b41e-2be2a0b910c7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d0dc78-15a4-4e10-9e5b-d0b7c56a4c80", "sighting_of_ref": "indicator--3d76fca5-fd20-494f-8222-9b5d583bef28", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c59df3-a725-425f-b9c7-62f9d2d8cd19", "sighting_of_ref": "indicator--9d428c98-667c-460d-b1b7-0253eaa85486", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--124e22b6-db1c-4e49-bcbf-60234c7bc699", "sighting_of_ref": "indicator--9d428c98-667c-460d-b1b7-0253eaa85486", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2364b3f9-6131-4d80-be8c-ca5e04aeb60e", "sighting_of_ref": "indicator--9d428c98-667c-460d-b1b7-0253eaa85486", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de62b4c-a578-4c96-8eb2-b67ba894b960", "sighting_of_ref": "indicator--22af89d7-60bd-4737-aeeb-c5cf89f9045c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1886578-2f62-4226-b2c8-6e06b55077e7", "sighting_of_ref": "indicator--608d95f3-451d-42af-a00c-9b6d3eb80cde", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa6e5c7-dd55-4b14-a3de-424ef009ff98", "sighting_of_ref": "indicator--09675a89-fdc7-44e8-99a3-9b963ada8d08", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dddc9494-0e8e-432e-b154-df66fb039a9a", "sighting_of_ref": "indicator--09675a89-fdc7-44e8-99a3-9b963ada8d08", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb7cb381-cf0c-4a9f-b74f-d9972995e280", "sighting_of_ref": "indicator--09675a89-fdc7-44e8-99a3-9b963ada8d08", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f349f5f7-5f38-4715-871e-24d5fff9dacc", "sighting_of_ref": "indicator--983ff496-5156-44f4-ae1f-9260f368f643", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6ad88e-6a8f-4987-8a8a-e659dba685c8", "sighting_of_ref": "indicator--d112510a-17db-47f7-997e-9e6c9c9bbf1f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83bb6a1-9b7d-4669-b9a2-d04150afd171", "sighting_of_ref": "indicator--a5a73e85-9ccf-45ab-a23a-f1a637699efb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6a1303-4291-4e0f-9399-d44164d262c4", "sighting_of_ref": "indicator--e79b1929-4b6a-41f9-bf2c-8c18f87a3cc7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbcda1b-3570-4dcf-a362-0fece55ca3ca", "sighting_of_ref": "indicator--3846757c-1546-42ff-a383-6360a90414c5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f0388f9-51a4-4ea5-bcd7-9dc9b409b40e", "sighting_of_ref": "indicator--3846757c-1546-42ff-a383-6360a90414c5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1fef59-be8e-4c89-9373-beac12638e9a", "sighting_of_ref": "indicator--465839f6-0b5a-4e42-b2f9-7f07d16c46a0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e146e61e-7a59-47cb-8842-086f1e32ccb3", "sighting_of_ref": "indicator--8bd5fbbe-7263-4e85-a806-3dc0088766ce", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef12ab6-d939-494e-adbc-305cc7412558", "sighting_of_ref": "indicator--8bd5fbbe-7263-4e85-a806-3dc0088766ce", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3babb7-dc5b-49d6-b0b6-c0837823bbe0", "sighting_of_ref": "indicator--34a61e48-3f66-4f51-9c87-b5388fc71974", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca8977e-7f62-4e07-86bc-aa2308ccd1f1", "sighting_of_ref": "indicator--89136d26-ce18-49f5-a11c-bf9674d9d39e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5209526f-b4c8-47c7-93c0-929884516cf1", "sighting_of_ref": "indicator--5f779de4-4837-42f2-8ead-e3aa78532e0e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a29086-ed8a-4c7c-9e1a-2a19263be7f1", "sighting_of_ref": "indicator--5f779de4-4837-42f2-8ead-e3aa78532e0e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea0d628-1542-4897-904c-d1350a122f9b", "sighting_of_ref": "indicator--d546d0b9-45c6-43cc-9131-45ab67b5ebcb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584a31ee-a7b0-4b14-ac73-b457bae4ea75", "sighting_of_ref": "indicator--dc670f7f-d409-436d-8e2b-b3a771e3791b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b34f2b91-c5f3-4b7f-94f7-eea499f956ba", "sighting_of_ref": "indicator--dc670f7f-d409-436d-8e2b-b3a771e3791b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff18754c-aef4-4f6a-bc77-a0d92d3ae8bb", "sighting_of_ref": "indicator--a209b52d-d07b-4309-aea6-7dd913516ee5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec389a5-862d-40aa-ac39-a73e81639c86", "sighting_of_ref": "indicator--a209b52d-d07b-4309-aea6-7dd913516ee5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3c54c80-beec-4fd0-b3a7-5bb098dd0d0e", "sighting_of_ref": "indicator--aaac89e4-cffa-4fe8-97ad-b54e8121977b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b11197c-b53b-4141-b6e3-67a2a952be04", "sighting_of_ref": "indicator--aaac89e4-cffa-4fe8-97ad-b54e8121977b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8192f30d-9fe7-47b0-afbd-ff8301101c0c", "sighting_of_ref": "indicator--26d0f859-cea3-4268-b72c-9918fb2df3ca", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8ab8e8a-5634-41c7-85d1-73376695387b", "sighting_of_ref": "indicator--0c1c84cc-0d1c-43a4-a4ce-c36a58682eb2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9f900e-02d2-4c56-b5db-d7d0918bff0a", "sighting_of_ref": "indicator--ce3f2295-5fa5-40b5-80df-9fff9a355c44", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a24433b-49ba-468b-b881-24160cd1a974", "sighting_of_ref": "indicator--ce3f2295-5fa5-40b5-80df-9fff9a355c44", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c1ddea-eae4-4823-8fd4-d6bcd4226706", "sighting_of_ref": "indicator--1108d42d-f274-4ef2-908f-445675544885", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--188fc992-d694-4464-94cc-1eaf461d7618", "sighting_of_ref": "indicator--1108d42d-f274-4ef2-908f-445675544885", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee135d6e-2993-403c-9a01-b653f1233257", "sighting_of_ref": "indicator--ffd2bac0-0206-43c8-a14b-7f1fe28cff86", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b048e74-df9a-4e69-98d0-0901904b9aef", "sighting_of_ref": "indicator--ffd2bac0-0206-43c8-a14b-7f1fe28cff86", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cfade8e-7cea-4e4f-b175-1f6989a3fd2c", "sighting_of_ref": "indicator--ffd2bac0-0206-43c8-a14b-7f1fe28cff86", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c872e436-b20c-4afd-bd08-550b675365d0", "sighting_of_ref": "indicator--1cfa2102-30e4-4df6-a6a6-59888981dcd4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb3a802-7b6c-4600-86a9-8f278632b8ff", "sighting_of_ref": "indicator--1cfa2102-30e4-4df6-a6a6-59888981dcd4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27157d3-6ae7-4867-8c39-99a5bfba17f9", "sighting_of_ref": "indicator--d5a6ef1c-fd4c-48b6-8faf-752d61e78a19", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72767321-2301-4e53-9bd4-5035e49032d1", "sighting_of_ref": "indicator--c269cc81-3196-4ccc-87d8-0fe156d5810d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6852338b-165d-41af-8159-ba81ba42a772", "sighting_of_ref": "indicator--c269cc81-3196-4ccc-87d8-0fe156d5810d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1072a7cd-2910-416d-98a0-2e4f10943bc8", "sighting_of_ref": "indicator--af0dd9ff-8757-4038-8afd-6651145f5dfe", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a478cf9f-fc06-4d41-837b-d1f435d7a513", "sighting_of_ref": "indicator--f3734e71-2718-4ef5-9d43-84fdab8682dd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f209171b-e51f-4689-a2c5-d3933561cc5b", "sighting_of_ref": "indicator--f3734e71-2718-4ef5-9d43-84fdab8682dd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a72c01-4360-47e1-b3fd-760f6103d91a", "sighting_of_ref": "indicator--f3734e71-2718-4ef5-9d43-84fdab8682dd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93fe4c2b-73aa-4b07-a082-e8dcbfe4c902", "sighting_of_ref": "indicator--94aea6d5-0487-4437-a6a2-c0cbb3e8fa3a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d1715f-852f-47e9-a2e5-4d6e3dfbce36", "sighting_of_ref": "indicator--94aea6d5-0487-4437-a6a2-c0cbb3e8fa3a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b830b66a-bac7-465f-90e6-bfcd386ed9fe", "sighting_of_ref": "indicator--c8f4640f-e22d-4658-bd90-d5ddee209db1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf79818-8a5a-44bc-8b01-7557a7454cd8", "sighting_of_ref": "indicator--c8f4640f-e22d-4658-bd90-d5ddee209db1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0d1be0-1034-40aa-80ce-03f89ade00b3", "sighting_of_ref": "indicator--754716d8-98f5-43e5-8c50-009cba527bd6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c934a588-ec22-4d0c-820e-7ae3a6c80315", "sighting_of_ref": "indicator--754716d8-98f5-43e5-8c50-009cba527bd6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef8ec7d-f1d0-4312-8c99-f6520fba421f", "sighting_of_ref": "indicator--a41da0a4-5148-41e5-ac46-00048f4a207d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac42687-a4f2-4a5d-9fda-546996743282", "sighting_of_ref": "indicator--a41da0a4-5148-41e5-ac46-00048f4a207d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71466217-610d-414c-b36c-227ee44b87e4", "sighting_of_ref": "indicator--a41da0a4-5148-41e5-ac46-00048f4a207d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2809d4e2-4fc6-43c6-a032-ebf87da79b25", "sighting_of_ref": "indicator--54c01bae-1276-4f28-8dab-d8707f1668d3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc7d443-3995-404f-a8f3-8c381f6863c6", "sighting_of_ref": "indicator--54c01bae-1276-4f28-8dab-d8707f1668d3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62700442-f5b6-44d1-8009-f0367f53a191", "sighting_of_ref": "indicator--0f64c62f-6df4-430d-9e64-4e05c86b66b2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a65c36-a2a1-4895-b306-a0ca27d9a310", "sighting_of_ref": "indicator--145b3d12-ac87-44ea-ae75-5f249f079e22", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a21c5c-92a2-4c09-9ad3-cf60d728b395", "sighting_of_ref": "indicator--145b3d12-ac87-44ea-ae75-5f249f079e22", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c6b0a4b-d080-4d33-8c2b-a07cf95bb529", "sighting_of_ref": "indicator--7ac43dbc-e332-4889-ae96-5364a08e7fde", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9784de-2756-4e33-bdc5-bc4346c7a986", "sighting_of_ref": "indicator--8ad610c4-9315-4d1a-8183-7ac227add4c1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d50071cd-aebf-4ce4-8400-dfaac64c12ad", "sighting_of_ref": "indicator--8ad610c4-9315-4d1a-8183-7ac227add4c1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f7623d-3304-4f90-ad76-fe0c8870e65a", "sighting_of_ref": "indicator--8ad610c4-9315-4d1a-8183-7ac227add4c1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b47a60e-261a-4e09-a9a7-39c7be7ff8bd", "sighting_of_ref": "indicator--1508edbd-fba5-45df-ab70-9cc96b660892", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d20b92-b891-4ba8-86cb-726a53886a76", "sighting_of_ref": "indicator--1508edbd-fba5-45df-ab70-9cc96b660892", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9235c2f-9165-4fa7-8a94-010e59585840", "sighting_of_ref": "indicator--1508edbd-fba5-45df-ab70-9cc96b660892", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5944a46e-eeda-4079-8100-e51d2078587b", "sighting_of_ref": "indicator--f5a89f5a-ab4d-4f24-b2a8-f3a9ee57e9a7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be23c2a7-d2ca-4a20-98b5-29821de0c2a1", "sighting_of_ref": "indicator--28d17196-387a-4485-807f-0720cf90f935", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6f24dc-40f5-4494-b959-fe2b2c542f16", "sighting_of_ref": "indicator--07de01ba-53d5-42be-bd15-fe23a182a5e1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dea1fac-624a-46a1-8771-dca00db594f6", "sighting_of_ref": "indicator--8e52a61e-3043-4c15-bcda-d670ec10f876", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def40b04-237f-4c7e-8464-ae5d61045909", "sighting_of_ref": "indicator--62605567-97f9-430f-a116-ba0a76e73b4c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeae5241-70fa-4756-aa4b-35cdd3b7dc72", "sighting_of_ref": "indicator--23d6aa13-1c61-4374-89f1-051e094cf95b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--152e8089-0598-457b-9f43-4198d20b5d6f", "sighting_of_ref": "indicator--23d6aa13-1c61-4374-89f1-051e094cf95b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9229548-d779-4e25-9d22-44ea9cde3315", "sighting_of_ref": "indicator--23d6aa13-1c61-4374-89f1-051e094cf95b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--974fb99c-3bfb-48dd-be66-93a8e7956667", "sighting_of_ref": "indicator--0986ca37-56d7-4c22-acf3-43bb5df5dc4d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e213c1f-c973-4cad-bb01-a54b1f2c5305", "sighting_of_ref": "indicator--5155ae72-cb7d-4a82-8705-58176f48cc1a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d32ee0f-6187-42a3-801b-0e177d29b2ea", "sighting_of_ref": "indicator--5155ae72-cb7d-4a82-8705-58176f48cc1a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fbf473c-e672-47d0-bf83-7110462dc5ad", "sighting_of_ref": "indicator--205244ae-9966-4bc2-8f8e-93b527bb9250", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f7ac29e-ce3a-40a4-a3a5-2225ea7e798a", "sighting_of_ref": "indicator--205244ae-9966-4bc2-8f8e-93b527bb9250", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e083816-3e06-4257-a84d-1b6c8146747d", "sighting_of_ref": "indicator--238ad3f2-6b5d-4a6f-be18-265a0080a4e5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c6850a-8f7a-46e1-86a2-91e0c5d912ae", "sighting_of_ref": "indicator--238ad3f2-6b5d-4a6f-be18-265a0080a4e5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e260b109-a413-4439-868c-8dfe8f1fee8f", "sighting_of_ref": "indicator--ba1f8219-e591-4efa-ae99-5076fba38d37", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5fe594-8d12-4338-acac-4559adffc702", "sighting_of_ref": "indicator--ba1f8219-e591-4efa-ae99-5076fba38d37", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac599de-72c6-4543-8adb-3c4acdb86530", "sighting_of_ref": "indicator--81a90275-6580-4832-861a-06c6b79ab0dd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f868d72e-d32d-4376-b50e-4d0cce4393a8", "sighting_of_ref": "indicator--26736054-f913-4200-805f-33da68d44f64", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1771b252-4ad0-48ca-9ad1-d7c04e3cc013", "sighting_of_ref": "indicator--26736054-f913-4200-805f-33da68d44f64", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81fea92c-7b46-4603-b470-488813e2b852", "sighting_of_ref": "indicator--5a9550b2-9723-41dd-895d-6b87e8dbc486", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592b69c0-98db-4ad0-9d1e-06251bc39717", "sighting_of_ref": "indicator--5a9550b2-9723-41dd-895d-6b87e8dbc486", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ca2d3e-356f-41e3-98d4-49fbe8c77b54", "sighting_of_ref": "indicator--588de066-c04c-408b-bf41-a9420c72dae8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--318aad7a-9eec-4842-936e-11752d21c140", "sighting_of_ref": "indicator--398e577e-7337-48cf-8a57-3b12e683b428", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--addd59ad-f88d-47ae-8e08-0dc0d3e67577", "sighting_of_ref": "indicator--398e577e-7337-48cf-8a57-3b12e683b428", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf8c6c05-9af1-4a1d-9599-d76feb4567de", "sighting_of_ref": "indicator--d12071ca-e1b8-48da-aa2b-68632f44e2e7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294f60fb-6892-4826-b2c4-ec402cca7569", "sighting_of_ref": "indicator--9f1bd91d-e8c8-4379-b61d-063f9a07b971", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753751f1-1b5a-4e78-9475-244b4b1046d2", "sighting_of_ref": "indicator--9f1bd91d-e8c8-4379-b61d-063f9a07b971", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fbbba88-aca8-4606-b4a0-9af0a0cef4dd", "sighting_of_ref": "indicator--e2953386-065e-4dbf-97eb-0ceb8c8578b9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f00a83a9-3c49-4fdd-b676-a6e923b81638", "sighting_of_ref": "indicator--e2953386-065e-4dbf-97eb-0ceb8c8578b9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9565bf9e-a2cb-45e7-8831-b499585a03c3", "sighting_of_ref": "indicator--64f2785a-a9ff-4ec9-b216-629b385803a8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a83af5-405d-4b89-9077-c347baf2b73b", "sighting_of_ref": "indicator--64384ab0-0e5c-4b09-b476-8edd944b4570", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a759532-4329-430a-a6c0-ce94bebdee81", "sighting_of_ref": "indicator--64384ab0-0e5c-4b09-b476-8edd944b4570", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f83b2d75-e636-4c7e-bc7e-2ac6445c61f8", "sighting_of_ref": "indicator--547def22-3ce8-49dc-8ce6-99012aeceb29", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a60139-8ddb-4650-9c9d-cfe739e9dce6", "sighting_of_ref": "indicator--547def22-3ce8-49dc-8ce6-99012aeceb29", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a44090-1c4b-4731-bc23-5cb4d8fbb6f2", "sighting_of_ref": "indicator--f9b63922-5b2d-4a32-87c1-e3c51daf55f3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1117c6d-a7ab-4a20-96a1-f75ad5890da1", "sighting_of_ref": "indicator--4f0d5847-0649-46e5-b43b-d2184cf97036", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d551a39f-0617-4d9d-9715-6b9a0df524f9", "sighting_of_ref": "indicator--4f0d5847-0649-46e5-b43b-d2184cf97036", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab3eb59-c916-4ed2-acc0-958f03eb8b87", "sighting_of_ref": "indicator--63d39c07-7017-4c0b-abf8-fd5cfd29e05a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c173dbf0-c779-4ef6-a046-86e052be0a34", "sighting_of_ref": "indicator--e92b9a56-7840-4aa4-a519-b84a44fb9092", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c7d2ea-5634-4747-8888-963b46c54b1d", "sighting_of_ref": "indicator--6637f053-dd5b-42ea-9c26-581be08bbea8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa11a1b8-6160-4781-be03-2b41df7964d4", "sighting_of_ref": "indicator--6637f053-dd5b-42ea-9c26-581be08bbea8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89395ee3-913c-46c7-928b-4de22e12ae41", "sighting_of_ref": "indicator--b07460b4-1a7c-4426-82cc-79b177279e54", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f739854-b9bf-4e94-8832-32bfd5dd1a11", "sighting_of_ref": "indicator--b07460b4-1a7c-4426-82cc-79b177279e54", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d76189c1-1184-44e6-97c9-aff589b9cee4", "sighting_of_ref": "indicator--98bbb8f0-3bce-400d-a513-17e2e5ad0243", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--486c02db-9e5d-4f7e-85ec-6dd8cc3f8330", "sighting_of_ref": "indicator--98bbb8f0-3bce-400d-a513-17e2e5ad0243", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91083eda-3ef0-4832-8ade-dbedd59da244", "sighting_of_ref": "indicator--ff494ed1-dc88-45b7-a383-6be1163a18ec", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c1043a-825a-4075-8e72-1db32810386a", "sighting_of_ref": "indicator--f0dc940a-19f9-4dca-a62d-82704c49a4bf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64136e0f-3aa6-48c7-837d-5fcf1fcc4796", "sighting_of_ref": "indicator--fef3835f-818b-4e5d-a167-7bec754bb847", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf5e7b9d-f30d-4cdc-9850-d1f5d9fc8d8a", "sighting_of_ref": "indicator--fef3835f-818b-4e5d-a167-7bec754bb847", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed3d5df1-a8ab-499d-a531-1a05114a7975", "sighting_of_ref": "indicator--fef3835f-818b-4e5d-a167-7bec754bb847", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afaf9f6f-cecf-4f16-b527-a5758d5f81ca", "sighting_of_ref": "indicator--e4555d64-ee1f-411d-87ae-25d4c620d318", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00584f7d-c02e-4abe-974e-7438835f3d92", "sighting_of_ref": "indicator--e4555d64-ee1f-411d-87ae-25d4c620d318", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e12231-ed92-4af2-a6fd-be6dc178aa9d", "sighting_of_ref": "indicator--c87e64f3-377c-470a-b927-f3e06a5f3ce3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56fe86f8-20fc-49ca-a5e4-75768d3caf19", "sighting_of_ref": "indicator--31c5ef26-0ec9-4002-88de-b9f58774f82e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a3f7ca-5f51-455e-916a-728249f8d4bd", "sighting_of_ref": "indicator--31c5ef26-0ec9-4002-88de-b9f58774f82e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e119a47-2c19-47ac-88e1-fd98fb56f503", "sighting_of_ref": "indicator--47b42405-622d-484d-a165-e8f2592f4718", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e61876d6-7b47-4a32-bef6-a968cd46e54f", "sighting_of_ref": "indicator--776183ef-386a-41bd-ad58-5a5ba96ccf51", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0829b56d-7eed-4794-9e59-5adbbbd74c91", "sighting_of_ref": "indicator--776183ef-386a-41bd-ad58-5a5ba96ccf51", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f479ad-3880-4e0d-a6e7-bb5f6052dd23", "sighting_of_ref": "indicator--f2570a9b-dfed-446c-a405-ad8947ed9e21", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc149c8-5fa8-4219-b007-9625fe479973", "sighting_of_ref": "indicator--f2570a9b-dfed-446c-a405-ad8947ed9e21", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--704b3a16-ff62-402a-a256-1a62d8986033", "sighting_of_ref": "indicator--e3f0c525-ddc4-40f1-aa72-28adc587a1f0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1638c4e8-bfef-42c5-8652-e1bc970341ce", "sighting_of_ref": "indicator--e3f0c525-ddc4-40f1-aa72-28adc587a1f0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b788f46-23b9-482d-9003-64bc2bed0531", "sighting_of_ref": "indicator--a454448b-c3b2-4b62-85a8-767e2688b22d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a84ed915-42c4-4627-b980-1cf51af80715", "sighting_of_ref": "indicator--a454448b-c3b2-4b62-85a8-767e2688b22d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb90a9c-0ddf-4626-9960-e695f9b34a43", "sighting_of_ref": "indicator--c325f37e-1868-428d-a0a4-03928d096017", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a7bf3c-f2ba-4eb8-98f4-aba5a153a853", "sighting_of_ref": "indicator--c325f37e-1868-428d-a0a4-03928d096017", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b90124-27d8-4598-b644-e006abbcbe5c", "sighting_of_ref": "indicator--4adc8537-7e74-45bd-90b1-726653ed73ef", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--025134ea-e5ef-4c15-a4ae-51d2c0f41f53", "sighting_of_ref": "indicator--4adc8537-7e74-45bd-90b1-726653ed73ef", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc44631f-1d09-4a13-8c0c-3ac0ac37f791", "sighting_of_ref": "indicator--fef647cb-7f69-4a86-a2b0-a761b79db743", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ceaba1b-4d37-4d21-9b02-848107b7daf2", "sighting_of_ref": "indicator--fef647cb-7f69-4a86-a2b0-a761b79db743", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7824f92c-d99e-4e23-af5d-54f84b556dd4", "sighting_of_ref": "indicator--6851a358-c359-4be8-8c59-9531099ad0e1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d34cec-5034-4a7b-a00d-58fa2984d30a", "sighting_of_ref": "indicator--6851a358-c359-4be8-8c59-9531099ad0e1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99aa095c-8431-4429-9d42-57d868932b50", "sighting_of_ref": "indicator--fdb7235e-c7e9-4480-9eee-776d00993ea7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a761e1df-0c3d-4724-81f5-a62c3ad5a37e", "sighting_of_ref": "indicator--fdb7235e-c7e9-4480-9eee-776d00993ea7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bbda147-f673-4d66-bfba-c4712b6d7f3c", "sighting_of_ref": "indicator--1ec3399c-1ac2-497a-babb-98d9cc48c39a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854c4a0a-ce44-46db-8db7-9c9d7accd032", "sighting_of_ref": "indicator--01323e09-964f-49ed-adb6-a81dfcab11d5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2159656e-688a-4151-b53d-82aa8ef695be", "sighting_of_ref": "indicator--01323e09-964f-49ed-adb6-a81dfcab11d5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19e1e52-40a0-46ea-88ff-2ab46440a8cc", "sighting_of_ref": "indicator--143ff51f-3629-41ad-abb9-e40d5f6697d1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638d6c7f-d850-4ebc-8e96-a1429364ac43", "sighting_of_ref": "indicator--143ff51f-3629-41ad-abb9-e40d5f6697d1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f90bffe-4c14-45f3-9d55-fc21151c3e4a", "sighting_of_ref": "indicator--760ddaf5-3470-4c54-ab81-8c53c111931c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde5e67e-4731-49ee-bd51-c3df69fcfc9a", "sighting_of_ref": "indicator--760ddaf5-3470-4c54-ab81-8c53c111931c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af152206-c9a4-43ac-99bc-0e5fe0f487d7", "sighting_of_ref": "indicator--760ddaf5-3470-4c54-ab81-8c53c111931c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--532f2491-6463-4328-b2a9-27b920f456dd", "sighting_of_ref": "indicator--46a0d98c-9645-40ec-ba73-afeb9d70fb16", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2dce89-a93c-4d7c-83b4-aa35c87ecc53", "sighting_of_ref": "indicator--51a75256-75a7-4a38-ab0b-2402a3cdd34e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9730f7c6-17a0-4c77-b2eb-a74f20fe2fae", "sighting_of_ref": "indicator--fea5396a-186a-447b-b67e-db191818a703", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5635b43c-3e7c-4a04-8380-07a82111fd78", "sighting_of_ref": "indicator--fea5396a-186a-447b-b67e-db191818a703", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88da5d0e-026e-433e-ae54-d135f7bcd9e7", "sighting_of_ref": "indicator--2974cf34-4755-4d43-85c4-e57c66498751", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad3ba43-1d7f-4422-b5ab-42833cf5d6f7", "sighting_of_ref": "indicator--2974cf34-4755-4d43-85c4-e57c66498751", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55bf83ae-beb6-4164-b06b-8181b464546e", "sighting_of_ref": "indicator--afa5994a-8c54-4e2f-9fe6-92c0e1ebcc56", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53db878d-d59d-4b78-b862-9b91878bfa78", "sighting_of_ref": "indicator--afa5994a-8c54-4e2f-9fe6-92c0e1ebcc56", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9efddeeb-b7b3-40a6-9627-bce8ff7bfe67", "sighting_of_ref": "indicator--11a6c0f0-b488-412e-acf5-8104e14dc52d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63025d25-4205-4706-b129-e6e13844270b", "sighting_of_ref": "indicator--3159f431-23b1-442e-8752-06d04861993f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba28287-7bd6-48be-b2b9-0c4949d495c4", "sighting_of_ref": "indicator--3159f431-23b1-442e-8752-06d04861993f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--998fbaba-d668-441e-94bc-759373c9231b", "sighting_of_ref": "indicator--6851baa5-db09-40fb-a9f7-1d93d27076a9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be10eba7-c3cf-49e8-aac5-f4a31619eeee", "sighting_of_ref": "indicator--6851baa5-db09-40fb-a9f7-1d93d27076a9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5313c68b-af2b-49e8-8244-01fe47cd17fd", "sighting_of_ref": "indicator--6851baa5-db09-40fb-a9f7-1d93d27076a9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f841c0e6-8058-4d72-a1c8-1c8d6cee7d34", "sighting_of_ref": "indicator--563de1e4-5880-499a-875e-261dbf5b3590", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a606f3-b4e3-41b0-8adc-0017bfd4f78e", "sighting_of_ref": "indicator--563de1e4-5880-499a-875e-261dbf5b3590", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dacce1b0-fa47-4239-a97f-6f08ab069ca6", "sighting_of_ref": "indicator--224eec2b-7c66-431b-b5cf-a06cdc8cfe53", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a1de7f-a264-4fa6-b7dc-54944ff5d645", "sighting_of_ref": "indicator--224eec2b-7c66-431b-b5cf-a06cdc8cfe53", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9f87bc-349c-4a20-b282-bb92b8bf58b8", "sighting_of_ref": "indicator--224eec2b-7c66-431b-b5cf-a06cdc8cfe53", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a431060-d48d-426a-84ff-854178ba00f8", "sighting_of_ref": "indicator--61366144-18ef-4954-8e9e-de94c92a89a7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e536c3d5-ac41-42e4-af70-9c5a3c13ac08", "sighting_of_ref": "indicator--5a3d94f7-7037-451b-a3cb-89d15bd85b7b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8d92a0-b896-4ea9-b22f-12c86af4fe7b", "sighting_of_ref": "indicator--fc1a0779-b813-4217-84f7-d3db8ef1ceb2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56892d54-f7ea-4c7e-9e1e-77d0e30d8c19", "sighting_of_ref": "indicator--fc1a0779-b813-4217-84f7-d3db8ef1ceb2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dacabeb9-8626-4657-8056-000f04e438b9", "sighting_of_ref": "indicator--128b971d-a82e-49c9-b407-3373a43d805c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e556e3-bf39-470e-973b-d3d7713e9ba1", "sighting_of_ref": "indicator--128b971d-a82e-49c9-b407-3373a43d805c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd90699-6b75-42b2-8dbc-aa5d99251c83", "sighting_of_ref": "indicator--23e34b3c-3942-4833-9eef-0cc1d0b3444c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb808e84-9c2b-422b-b155-a6aeb06f918a", "sighting_of_ref": "indicator--23e34b3c-3942-4833-9eef-0cc1d0b3444c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a5da0f-fd8f-4bd3-b851-c9dbf56262f9", "sighting_of_ref": "indicator--fe62d7b7-344e-43e8-8ccc-a958c93960e0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7788b217-7869-4065-bc63-bb9c4e3f590c", "sighting_of_ref": "indicator--a280e251-43cd-4783-9240-e7411b767c49", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400d6e86-7dee-4e98-862c-0c572cd846d8", "sighting_of_ref": "indicator--19d1fcd7-5b12-4ffb-84cb-da6492af9dc1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--470ea5d8-55a7-4bfa-a80b-e3aa9edf2c2a", "sighting_of_ref": "indicator--19d1fcd7-5b12-4ffb-84cb-da6492af9dc1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa5266c2-7a03-4fa0-85ed-5f362dc38bb7", "sighting_of_ref": "indicator--b767a630-45a6-4dc8-8e02-7e6a7e465585", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6f233b-4577-4b31-acf7-836e496b1639", "sighting_of_ref": "indicator--79b4f7ee-d0b4-4d37-924a-d25d3e27bfa9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f42c58-3d46-4471-99d7-aaf2a9059a42", "sighting_of_ref": "indicator--79b4f7ee-d0b4-4d37-924a-d25d3e27bfa9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0101f9d7-f0e0-486a-8e86-01edcc1882b6", "sighting_of_ref": "indicator--79b4f7ee-d0b4-4d37-924a-d25d3e27bfa9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34307bc-6c4d-4ac5-9cb8-d3413abde881", "sighting_of_ref": "indicator--db5a3e94-0888-430b-80d6-a1bad1f61c62", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e28d7c9-7bb9-433d-acbb-c3c72ad34421", "sighting_of_ref": "indicator--47a5294d-2b07-4506-b6e9-5c2cb71f1eb4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a33065e-8940-4d58-9c0f-0933521b5f9f", "sighting_of_ref": "indicator--47a5294d-2b07-4506-b6e9-5c2cb71f1eb4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8368dcda-83fc-446c-9345-342f47c7f754", "sighting_of_ref": "indicator--7bdd539b-867c-4cf8-b3ef-ffcbaab094c8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1b6544-79a3-466b-9e07-505ee8f6e732", "sighting_of_ref": "indicator--7bdd539b-867c-4cf8-b3ef-ffcbaab094c8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e86464e-8c7c-41bf-bc9c-1bec8107ed5e", "sighting_of_ref": "indicator--519d5e0f-ada5-4c04-b4e0-fd4d2214d2f7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba1fffbc-53c3-49ef-9469-186034ed51c6", "sighting_of_ref": "indicator--519d5e0f-ada5-4c04-b4e0-fd4d2214d2f7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e27f11-1a43-4c74-8c7d-1e3730cdb0a4", "sighting_of_ref": "indicator--519d5e0f-ada5-4c04-b4e0-fd4d2214d2f7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da840641-3e69-42e7-a0a1-e3f40df75242", "sighting_of_ref": "indicator--871b9b12-5e25-4706-a9e7-80368942e3d3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f5661f4-3eb1-4fe8-8d63-ff8f531b50a9", "sighting_of_ref": "indicator--871b9b12-5e25-4706-a9e7-80368942e3d3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeeebd08-0280-42e3-8c4f-3e4491b8d80e", "sighting_of_ref": "indicator--871b9b12-5e25-4706-a9e7-80368942e3d3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a243bcf-6728-4d9c-849a-a99f20aa3020", "sighting_of_ref": "indicator--0c8973dd-9e0e-44e1-a118-7f91c3a78cae", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c076ef-6865-4f22-9541-d8875c86c70b", "sighting_of_ref": "indicator--37badd5c-d83c-46ae-bad2-77d68ce7a409", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ed9b9d-3c6c-4e9c-af5e-05f41ba5a12f", "sighting_of_ref": "indicator--37badd5c-d83c-46ae-bad2-77d68ce7a409", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058bdc02-e8a9-40d7-a827-15f02463f23f", "sighting_of_ref": "indicator--d04c94af-c2a3-40f2-8bbe-71fc709d2337", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2539e525-4675-49e4-9111-619d51ddad6b", "sighting_of_ref": "indicator--d04c94af-c2a3-40f2-8bbe-71fc709d2337", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc64f32-dcf3-4962-90e6-9fccd05fad6b", "sighting_of_ref": "indicator--d04c94af-c2a3-40f2-8bbe-71fc709d2337", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d407ff76-a0a4-4c68-bad4-ef0d5a1c7939", "sighting_of_ref": "indicator--1639fb8f-ce2b-4a84-af01-e7803b1b5d5c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e9b872-7541-4024-a654-fb90f793c51c", "sighting_of_ref": "indicator--1639fb8f-ce2b-4a84-af01-e7803b1b5d5c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be0bd00-f812-40be-af41-ef80d57433d5", "sighting_of_ref": "indicator--67245763-7cf4-474f-baa6-ec4bf809957f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5dd94a0-acfb-4004-9867-ed6a6c0b3e08", "sighting_of_ref": "indicator--67245763-7cf4-474f-baa6-ec4bf809957f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e77d42-abbb-467a-ab5f-90f6e3fdcbcc", "sighting_of_ref": "indicator--2d98cf82-61f5-4492-83f1-5b4586ac2f34", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6a0ef3-0d30-4b66-aa1e-e8827610db9d", "sighting_of_ref": "indicator--2d98cf82-61f5-4492-83f1-5b4586ac2f34", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a7317b-7adc-4475-8599-51125fa68c49", "sighting_of_ref": "indicator--8412218f-87e5-4a7f-a777-dd4c16b467cf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970a7177-18e5-4a58-b085-486768d6d229", "sighting_of_ref": "indicator--da9e9e79-353b-4a63-a53c-74f909136d52", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb15d28-6b9f-4b28-8cc9-4be0a702be2d", "sighting_of_ref": "indicator--da9e9e79-353b-4a63-a53c-74f909136d52", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd89518-b5ab-42ba-9dae-41f68634bc95", "sighting_of_ref": "indicator--66939798-0d68-491f-be31-b275ad8e76b5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--259872c5-2c51-4005-936c-58b8ded8cd0d", "sighting_of_ref": "indicator--8b873c9c-348f-4abe-9375-6de5ab840de8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ab9a61-9034-4e49-a0cb-19727264a77b", "sighting_of_ref": "indicator--602a0cf2-76ae-48cb-a478-8b7f3a163663", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3cc4a46-9144-4309-90d7-d6f451fa194f", "sighting_of_ref": "indicator--803d4481-00ef-4ce6-943d-27c2094b1954", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9716568-4773-44f6-ac10-b0de21d1eb68", "sighting_of_ref": "indicator--803d4481-00ef-4ce6-943d-27c2094b1954", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c3bc39-44ee-4486-8997-a4836477a874", "sighting_of_ref": "indicator--803d4481-00ef-4ce6-943d-27c2094b1954", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c51119df-1dd5-47c3-bba7-d9bfbf48d12c", "sighting_of_ref": "indicator--f2acdbd9-0895-4546-b4cf-1a6007d9dbdb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dda8f11-12de-464b-bca1-3a0f47a3f45a", "sighting_of_ref": "indicator--f2acdbd9-0895-4546-b4cf-1a6007d9dbdb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498b477f-5c1f-46a1-82df-045b71b8f38d", "sighting_of_ref": "indicator--40214087-0043-4634-9cb1-42c63bd5b4c1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--649cd922-c852-44b5-aa3a-efb3c2facc67", "sighting_of_ref": "indicator--40214087-0043-4634-9cb1-42c63bd5b4c1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3362db72-e683-44d0-84f0-cd9ad74b1e5c", "sighting_of_ref": "indicator--0d335309-99c4-49a0-ab39-5afbcda35d28", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9dbff0-e752-474e-a7cb-640be51fa91f", "sighting_of_ref": "indicator--0d335309-99c4-49a0-ab39-5afbcda35d28", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--140f220b-a387-427c-944d-b043bbe89ed0", "sighting_of_ref": "indicator--293f4d5e-d347-4869-9dc0-796f6141042a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe41da0e-1959-44d4-a099-15ca22f5d36d", "sighting_of_ref": "indicator--293f4d5e-d347-4869-9dc0-796f6141042a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25a1b2d-f758-436b-9e83-e6411c55ee3d", "sighting_of_ref": "indicator--0af5df65-fbb0-4701-9f4d-023d7bc1447a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ddc86e2-4baf-456a-831a-7501dde48a74", "sighting_of_ref": "indicator--92b39032-6f34-4a15-bdc2-df3b5744ed93", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c8e0c8-49e3-4f30-a7b0-8f633e57025c", "sighting_of_ref": "indicator--9a548d8c-3a46-49a4-81b0-2aa71f09dd5f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9493da9d-1cfe-468d-9034-65a39ac09551", "sighting_of_ref": "indicator--9a548d8c-3a46-49a4-81b0-2aa71f09dd5f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29127b5-7476-42b3-b440-5d64a26e68ca", "sighting_of_ref": "indicator--9a548d8c-3a46-49a4-81b0-2aa71f09dd5f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79734a3b-a796-4d2d-a40c-6948cc485dda", "sighting_of_ref": "indicator--01c5c6f8-4203-42a7-b1f0-528a58d5732b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0afdb169-c02e-4a3b-9ce6-7cafe7248105", "sighting_of_ref": "indicator--6d812ac8-8c5e-431a-84e4-326da373fcc0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c22288e3-976f-4dc1-b513-26fc848bb0e9", "sighting_of_ref": "indicator--727816a9-7700-49ea-a504-4d1a6ae65cc5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--908dd00a-ecf6-451c-9415-02a208bc9dbf", "sighting_of_ref": "indicator--b7185899-ed35-4d99-9427-be620fd47ee8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--170b17fb-f03b-452d-8700-e9007e618127", "sighting_of_ref": "indicator--a80917ed-8e9f-49bd-b856-c7c8afe1beb7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a505dd24-73ac-4747-9608-d7ac1953ac1f", "sighting_of_ref": "indicator--772158eb-a240-4c38-94ab-32348deeb21d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ebc9c20-996a-47ba-aa08-3e03cf1435b6", "sighting_of_ref": "indicator--772158eb-a240-4c38-94ab-32348deeb21d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc298c6-4504-4697-9abc-2ae055ebfef9", "sighting_of_ref": "indicator--9ac0ed53-6420-4b54-910e-d0490ba4214a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c34869-a068-4ac9-89e2-7c5ddd6223ec", "sighting_of_ref": "indicator--50a86d21-570d-4c2b-925d-6a2a9c9faed9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c45d03-dfa0-4adf-814b-1eabed0ef3f5", "sighting_of_ref": "indicator--75702d21-9daa-40d1-85c3-7ee437542580", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c053967d-6eac-4ed0-928d-87f7497aa313", "sighting_of_ref": "indicator--aa32cd0d-067a-4736-9d8c-9c7e76344247", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef67bc28-c022-47b0-a330-24f3fe6808f4", "sighting_of_ref": "indicator--0713bdb9-791d-4b6a-8aa8-09cd6082f776", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff38645-25a7-4142-8b68-8bda87653946", "sighting_of_ref": "indicator--0713bdb9-791d-4b6a-8aa8-09cd6082f776", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d746d9-d99c-4231-8cfc-1cbe8113ab8e", "sighting_of_ref": "indicator--c1bab4f3-e2ed-41f6-8573-5e6fe71a3dff", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d45c49-2194-4c32-9b50-802e17efe59b", "sighting_of_ref": "indicator--f749339f-2030-4bb5-8560-2212a49cb47a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8bb1bb-4b85-4f7d-b3cf-c97f2f56f377", "sighting_of_ref": "indicator--9f802f88-b3c9-40c2-a4ab-bf8a2e835e00", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e226a1-2599-4337-a356-d8e59ae1cb55", "sighting_of_ref": "indicator--9f802f88-b3c9-40c2-a4ab-bf8a2e835e00", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14586054-cdb7-4b4f-86eb-bbbaaf296770", "sighting_of_ref": "indicator--9f802f88-b3c9-40c2-a4ab-bf8a2e835e00", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebcf58c5-e21d-4386-a05c-07d2707127d8", "sighting_of_ref": "indicator--84b21473-794d-442b-9c1e-078ca0e01adb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a8213b-1718-4cfe-8c9c-7b0a857c8c44", "sighting_of_ref": "indicator--111076cf-1e5d-4e0c-b199-c8d3df7b9b20", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f770c52-c38b-4559-93ff-90302828bb6d", "sighting_of_ref": "indicator--1dcc0531-f02c-48e6-89b0-bfb0ef480702", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1ee1c0-cde3-45d1-83f1-21126716be9e", "sighting_of_ref": "indicator--85b8482f-fd8c-4a2f-95d1-aea0209e3c7a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1382b91e-9c51-4589-8d41-22adf649e41c", "sighting_of_ref": "indicator--d268b9d6-bf5e-4e2b-a5aa-f4096030802b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9997705-e4c8-462e-b21c-44a7b6eb4feb", "sighting_of_ref": "indicator--4f5ed8b2-29b3-4f17-9ace-292b002e1feb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23172aed-40b2-432f-8626-a46a666befd9", "sighting_of_ref": "indicator--98080499-d95d-46c8-89e7-d147259c566d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa224b2b-69cc-461f-b8fd-b8971c3316e3", "sighting_of_ref": "indicator--607933ba-1bda-4d6f-afeb-0da196ff2ef6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0dc3b79-4430-478b-a3f9-1c16c5a4fa5e", "sighting_of_ref": "indicator--56058235-99f3-4a0c-a45a-4ba82c3f562b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c74fa90-055e-4d55-965f-c7f888635b3a", "sighting_of_ref": "indicator--56058235-99f3-4a0c-a45a-4ba82c3f562b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bd9d24d-1de5-4424-a3de-f76dfc4ef939", "sighting_of_ref": "indicator--db71943b-6f5a-4bfe-885a-4426deeff7c7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26084d3a-2207-4b21-8602-55324634c177", "sighting_of_ref": "indicator--db71943b-6f5a-4bfe-885a-4426deeff7c7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d167b13-d78b-4994-a978-80d0d7e37b59", "sighting_of_ref": "indicator--db71943b-6f5a-4bfe-885a-4426deeff7c7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517bd9d1-a65b-4939-b845-2b867db33968", "sighting_of_ref": "indicator--6f82c40b-fcff-4860-81e8-ffd2bf35f67f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1a1dc9-ecf8-4f0e-8786-70a60fe5db40", "sighting_of_ref": "indicator--41c4f303-b783-43f6-8266-bfe63e9619a5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda96e49-f4d2-406e-a97b-1e19b3384e09", "sighting_of_ref": "indicator--7f6fc3bc-b05c-4a55-a832-377ca2dd3761", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94ce04d-98e4-4745-9edb-9e8f5bc1fd4c", "sighting_of_ref": "indicator--6f2a47bf-e6cd-4468-b620-84d5327d17a4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4164957-e3d5-4fd7-af0b-4d0c4ae13aff", "sighting_of_ref": "indicator--c059fa39-a9ed-4ea3-b5cf-59000f2ecc8c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e429ad-88c7-4b12-9b9b-f2c38372bd73", "sighting_of_ref": "indicator--efa0cba5-afa1-496a-b967-456c75db5c90", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e8c096-66c7-4ede-9221-226a0c356f18", "sighting_of_ref": "indicator--efa0cba5-afa1-496a-b967-456c75db5c90", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88998a8-b010-42b6-aaf0-38107485ac60", "sighting_of_ref": "indicator--c4e902f4-84c9-491a-8e3d-bf770ceba2a5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9af1a76-1f31-4702-babf-26f0e5993ff2", "sighting_of_ref": "indicator--c4e902f4-84c9-491a-8e3d-bf770ceba2a5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534a6b47-0904-43c8-bb48-44d9e677714e", "sighting_of_ref": "indicator--c4e902f4-84c9-491a-8e3d-bf770ceba2a5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e59516a3-f723-48c3-9c96-f2ef7de22f95", "sighting_of_ref": "indicator--eeb1e94c-40cc-4241-9d62-5af472c9fde3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0577825-6b89-4ed9-9669-b054fa3b759c", "sighting_of_ref": "indicator--eeb1e94c-40cc-4241-9d62-5af472c9fde3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a3e87c9-3a1e-4c3d-b2dd-02e936598bb2", "sighting_of_ref": "indicator--eeb1e94c-40cc-4241-9d62-5af472c9fde3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c409b9a-0800-4b04-ae7d-158b39e69966", "sighting_of_ref": "indicator--30eafc58-3938-4f36-a326-4b552cfca5f3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44f5ef1d-b8ce-45a7-b5cd-0bc7eb6e7c9b", "sighting_of_ref": "indicator--01d91dc9-7437-411b-93a2-ea70972d1b21", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20aaf798-b956-448b-824a-42c8da7ea35d", "sighting_of_ref": "indicator--01d91dc9-7437-411b-93a2-ea70972d1b21", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f0f8f2-dbee-47f0-846f-ad35e24590df", "sighting_of_ref": "indicator--307984a4-93d8-464d-ade2-294668cfccda", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4691dd-6fb7-4297-86ff-34bb1b7a52c4", "sighting_of_ref": "indicator--307984a4-93d8-464d-ade2-294668cfccda", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7856ca0d-383f-4e2f-85e6-c4366a03f2b0", "sighting_of_ref": "indicator--f5f3741e-dac8-4bad-8847-183167d4ae5a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f732cad4-1375-448b-8f1d-d747c0baa015", "sighting_of_ref": "indicator--af35c75e-38a7-4f63-af4d-89cf4b705f10", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1187dd94-adb6-476c-9c95-3d4479ea8256", "sighting_of_ref": "indicator--0eb088e1-8590-4c88-961f-22c0f88a5701", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385935dc-d358-4ddc-8c05-8bd3f42b8983", "sighting_of_ref": "indicator--0eb088e1-8590-4c88-961f-22c0f88a5701", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d4be0c4-50c7-43d9-a2ab-05ee34e38d82", "sighting_of_ref": "indicator--0eb088e1-8590-4c88-961f-22c0f88a5701", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa01cbb7-bd70-4536-a286-8d0e3f6613cd", "sighting_of_ref": "indicator--eebeb0c2-ae43-4df4-8e75-888fe353cb83", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b966cb-cee7-4fdc-9133-ef0b849648e4", "sighting_of_ref": "indicator--eebeb0c2-ae43-4df4-8e75-888fe353cb83", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3db8e0a-c6d6-4251-84f1-0b2f1dc10da5", "sighting_of_ref": "indicator--eebeb0c2-ae43-4df4-8e75-888fe353cb83", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20069a54-ac60-4b05-9dd7-1fae7cc75b50", "sighting_of_ref": "indicator--b5affee8-976f-405d-a256-7705d4d1acd8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4aa4784-40cf-43f7-bf9c-28f165d8f6df", "sighting_of_ref": "indicator--b5affee8-976f-405d-a256-7705d4d1acd8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27e0ed6-7096-4198-a10f-7b0b84a89eeb", "sighting_of_ref": "indicator--b5affee8-976f-405d-a256-7705d4d1acd8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d56b9f-da78-4c8f-9045-62f853e70709", "sighting_of_ref": "indicator--b5affee8-976f-405d-a256-7705d4d1acd8", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56b53b8-56ed-4e93-b388-d90c2d8f7422", "sighting_of_ref": "indicator--6c9453d6-348a-41a0-bf82-1f7245ac91a6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd1a2d43-0164-4042-aa4b-dd8d4330ab9a", "sighting_of_ref": "indicator--6c9453d6-348a-41a0-bf82-1f7245ac91a6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e4bb70a-18aa-4deb-ab9a-42d9cdc112ec", "sighting_of_ref": "indicator--6c9453d6-348a-41a0-bf82-1f7245ac91a6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39bce684-c88b-4c9c-ab1c-50c674f0adaa", "sighting_of_ref": "indicator--29ab8466-1720-42e9-941a-25e27c563931", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7351c4ff-86e1-405b-9558-6ce6d537d726", "sighting_of_ref": "indicator--54c1c66c-33af-4d7c-9d33-9cffc1f39be1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c90bef-4567-40fb-86d9-cccafdb142b5", "sighting_of_ref": "indicator--54c1c66c-33af-4d7c-9d33-9cffc1f39be1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b5ec9d-d32a-465d-a2ae-0b347cb01bf2", "sighting_of_ref": "indicator--853dd729-843f-4e78-a549-e46d96787a4a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c0884e-f3ec-4950-9271-9693f772f5cb", "sighting_of_ref": "indicator--853dd729-843f-4e78-a549-e46d96787a4a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d3fdff-6ad4-4783-85dc-d84072d9c301", "sighting_of_ref": "indicator--853dd729-843f-4e78-a549-e46d96787a4a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a59d732-9b55-4f70-8eb3-5106c2f17f07", "sighting_of_ref": "indicator--7fdae60e-cd72-4819-9fc7-0a5c700da1f4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbda67ca-2606-432a-ab39-ed6c09ce52a1", "sighting_of_ref": "indicator--98598de5-a63e-4400-bbd4-28fe322ff987", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e23829-3a79-4bd9-8939-5deea147b9f0", "sighting_of_ref": "indicator--ff04a99a-b819-447b-b39f-d11fba0275e0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee487fef-19d0-4f43-a15d-d300aa0bfe9f", "sighting_of_ref": "indicator--ff04a99a-b819-447b-b39f-d11fba0275e0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f90e8029-e956-4202-8f3d-8fd8f0874923", "sighting_of_ref": "indicator--ff04a99a-b819-447b-b39f-d11fba0275e0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909204ac-df53-44d8-a3a6-e3ad2bbd6b87", "sighting_of_ref": "indicator--2e5a1bd1-d77d-4c59-9a44-74f0ad759e42", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6ea202-1379-46a5-9e76-3232c74da971", "sighting_of_ref": "indicator--2e5a1bd1-d77d-4c59-9a44-74f0ad759e42", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f4d7be-dfb4-4250-a3c3-8b9de13adf52", "sighting_of_ref": "indicator--2e5a1bd1-d77d-4c59-9a44-74f0ad759e42", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51862b6d-fd70-4f35-88af-ad186001c7e4", "sighting_of_ref": "indicator--ae9268db-3f8e-42f2-907a-7ca159dcb2eb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ac08e8-46db-487c-85af-668628165c7c", "sighting_of_ref": "indicator--ae9268db-3f8e-42f2-907a-7ca159dcb2eb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0018730-8b9f-45be-931a-56bad4db79ce", "sighting_of_ref": "indicator--27c6c7f2-19b3-4ce3-b787-193ff72677a1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39576e73-460e-405d-a7fb-845ed3dbd874", "sighting_of_ref": "indicator--27c6c7f2-19b3-4ce3-b787-193ff72677a1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e550eb53-0738-416f-889f-2b767f39e8ce", "sighting_of_ref": "indicator--5492da96-8c8f-4783-907d-2dad315b16f0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279fa9e6-e55a-444c-8c44-0075d89afc5c", "sighting_of_ref": "indicator--5492da96-8c8f-4783-907d-2dad315b16f0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d5c371-7315-4c9e-83e1-bdd9f10b755a", "sighting_of_ref": "indicator--5492da96-8c8f-4783-907d-2dad315b16f0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae9e1f53-e647-4d7a-b805-80b2c07ac8fe", "sighting_of_ref": "indicator--1d3b14d6-b374-48cf-8690-145edbd3299e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c44236-8cf6-4f0b-b3af-2a29fb6c781d", "sighting_of_ref": "indicator--1d3b14d6-b374-48cf-8690-145edbd3299e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a064bf2e-ae59-41de-aac6-2cb0d9c0bb70", "sighting_of_ref": "indicator--5cabff62-7053-4337-a27e-f4dcb535e288", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53958fe9-7db3-4955-ae39-8c8ec2f41eee", "sighting_of_ref": "indicator--bc6d42ed-8ec6-4868-aa5c-09c385f0482b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc57eda9-75c1-4a5d-a15c-7b24f8fb67da", "sighting_of_ref": "indicator--bc6d42ed-8ec6-4868-aa5c-09c385f0482b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6117879-3da6-46be-9edf-6b663fa39caf", "sighting_of_ref": "indicator--bc6d42ed-8ec6-4868-aa5c-09c385f0482b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f250516c-9670-4e92-b024-5085d1c86c75", "sighting_of_ref": "indicator--7171616a-fe31-4e38-9a22-ed884332d807", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36659c10-8869-49bf-9a92-4bd55b7f1fcb", "sighting_of_ref": "indicator--7171616a-fe31-4e38-9a22-ed884332d807", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0912173-24db-4956-b540-9cfb8c9ee1ae", "sighting_of_ref": "indicator--7171616a-fe31-4e38-9a22-ed884332d807", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856a7a8a-aff8-46fe-88aa-de6470e4a53c", "sighting_of_ref": "indicator--e61d1cba-cf42-4a9d-a0fa-f54dadb7e8f9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25450e71-fb04-46eb-9ed1-877ef6a37517", "sighting_of_ref": "indicator--e13c00e6-4829-44b6-a18b-1e7228874c51", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c4b6ea-1ff2-4f89-bbd9-91993cce807f", "sighting_of_ref": "indicator--be11fd1b-35c0-4283-84e5-c748306c46d9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819505c0-464d-48b2-814b-faafde4f8b04", "sighting_of_ref": "indicator--be11fd1b-35c0-4283-84e5-c748306c46d9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08055ec4-058d-48c6-b84b-ec8066ee6e47", "sighting_of_ref": "indicator--be11fd1b-35c0-4283-84e5-c748306c46d9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--445aedcd-81f0-46b1-bc05-3d3f9b07ec03", "sighting_of_ref": "indicator--ab4c30f4-d9fc-49b9-b0e3-0c3a89d4ae0d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb4ae69-fd50-4655-9fed-22645474df4f", "sighting_of_ref": "indicator--d60cc984-5624-4c12-a124-ae7f161b38b2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a767a63-2113-4e8f-a7e0-fa073b08be39", "sighting_of_ref": "indicator--2c890f6d-a2d3-4ee8-bac4-3c0862bee58d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e565071-b5e1-4117-ae37-ac24dbed0912", "sighting_of_ref": "indicator--047e7528-d528-4d0d-9e3f-d135c78a7edf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf35960-22eb-4ddb-bc05-bd2a0308cd8f", "sighting_of_ref": "indicator--047e7528-d528-4d0d-9e3f-d135c78a7edf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ece79c0-d312-4dbd-adcc-2a0dd98dde9e", "sighting_of_ref": "indicator--046e5e72-9f97-4735-9789-2f26e0631779", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1dca772-509c-4ba6-b4f5-b73fd3bc23b0", "sighting_of_ref": "indicator--046e5e72-9f97-4735-9789-2f26e0631779", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f65f53cf-34f1-4a65-837a-43462ded4e01", "sighting_of_ref": "indicator--046e5e72-9f97-4735-9789-2f26e0631779", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591ef08f-1d29-4143-b418-6f1580ca08f2", "sighting_of_ref": "indicator--d30501d3-e8f1-4158-a58d-364db264f3fe", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a254b6-0fe4-493b-95a4-2442b4c7f413", "sighting_of_ref": "indicator--27740089-2b96-465e-8a9c-a4f86f795666", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51514861-3b88-44b8-82fc-ad4e31f47512", "sighting_of_ref": "indicator--64169d46-ab19-48cc-add7-190fe1d8cb59", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98718a26-9de6-43fd-a7c3-22981145c851", "sighting_of_ref": "indicator--64169d46-ab19-48cc-add7-190fe1d8cb59", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e251ad0-d9b4-445a-b016-be01ee68fc6f", "sighting_of_ref": "indicator--5cc91a89-bb6a-4a95-a52b-19693914a9e9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8fc6045-0fa5-4e74-8740-7d94422656b0", "sighting_of_ref": "indicator--5cc91a89-bb6a-4a95-a52b-19693914a9e9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--957f798f-f636-455e-9f60-b7aca903a203", "sighting_of_ref": "indicator--0988e114-33a3-47b8-81ac-d3747380f273", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b25da13-1ac4-4f23-8cc4-c5f71783f767", "sighting_of_ref": "indicator--0988e114-33a3-47b8-81ac-d3747380f273", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a79d019-1280-4154-9575-ed3ee667a947", "sighting_of_ref": "indicator--f5f1aec2-93c2-462b-a23a-fd70802e7de2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d9e3c7-f273-4ec2-ab71-a86bca20dfc3", "sighting_of_ref": "indicator--f5f1aec2-93c2-462b-a23a-fd70802e7de2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceab860e-e0f2-417b-ba42-3eda01dc87bf", "sighting_of_ref": "indicator--f5f1aec2-93c2-462b-a23a-fd70802e7de2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f26fa8-e35c-4dfb-baa9-4dadb0ffd3dc", "sighting_of_ref": "indicator--1756c089-04c5-4fcf-b676-ef04cbafd77f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b262be-dc59-4e0e-bc8b-e0c4e002bf1a", "sighting_of_ref": "indicator--1756c089-04c5-4fcf-b676-ef04cbafd77f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f396ac-8dc9-4758-bc91-3136a29d9306", "sighting_of_ref": "indicator--5029f934-d5a9-45b1-94c2-50416f4b8b31", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55928cba-8aa6-46c9-8f1b-60a04bf07390", "sighting_of_ref": "indicator--5029f934-d5a9-45b1-94c2-50416f4b8b31", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35362bc7-38d4-44e8-bb0c-4a3ed8a16ea3", "sighting_of_ref": "indicator--5029f934-d5a9-45b1-94c2-50416f4b8b31", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54fa0fd-93af-4f07-98c8-eef85aef6d2a", "sighting_of_ref": "indicator--2debe698-6c14-4149-8610-1844400c1833", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--675cbd2a-0929-40b7-bfe2-4ef78d8380b7", "sighting_of_ref": "indicator--2debe698-6c14-4149-8610-1844400c1833", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9211de-a0ff-4b77-bd6b-b5c4a8224860", "sighting_of_ref": "indicator--9ff8dd15-132c-46a7-b7cc-0a43d0d906d5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd00688-9f11-4a88-bff1-138e48e29037", "sighting_of_ref": "indicator--a1937e4e-3a0e-4916-b26e-5029264c4c4e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d80b81-1970-4af8-9127-1fae72660042", "sighting_of_ref": "indicator--a1937e4e-3a0e-4916-b26e-5029264c4c4e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c719cda4-b776-401a-ad8e-0cfefa96f2f6", "sighting_of_ref": "indicator--1b40e789-75a1-45a6-bada-ede3e7f34a06", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e54714-2691-43e9-b128-526d12e40988", "sighting_of_ref": "indicator--3afde6f3-8255-4614-972f-0b1149933423", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c538cf25-6d32-4937-9e91-4c01520d3986", "sighting_of_ref": "indicator--3afde6f3-8255-4614-972f-0b1149933423", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b72ce6-c61b-4d03-a518-70c1ef8c5f95", "sighting_of_ref": "indicator--808e55ab-c31e-4e03-aab7-9e3660448e2c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6d50cd-491b-4e1e-8879-8ab1319f1508", "sighting_of_ref": "indicator--375021ab-5f58-453b-8813-779a0c1cc29a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeae4b4e-d382-498c-9fce-dba40498aca4", "sighting_of_ref": "indicator--6a6d47ec-bfff-436a-8945-c48ed3171b97", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fedb84c8-768c-4d80-9ca0-2a6a666d4014", "sighting_of_ref": "indicator--2ca90fa8-17c0-4ed1-88db-23bd68f1f7ad", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba212300-a657-44a5-96e2-19445d92e67f", "sighting_of_ref": "indicator--cb9d4cfc-ee1c-4544-a7a5-66c3d934ad96", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceeeeb4c-dd6e-4688-95b8-455c150dd842", "sighting_of_ref": "indicator--82810e8e-0699-4da5-a68c-c1449d63c86a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f713e1-78ba-4d49-9b80-c720eb129ce7", "sighting_of_ref": "indicator--4e02df50-a454-4d27-b246-2ff82d0c9987", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb04802-d3dc-4737-9d8e-9251cb88280c", "sighting_of_ref": "indicator--0d84ffd1-31ed-431c-b3cd-916528b61ff4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4e81de-e13e-4842-94cc-4608a6b490ad", "sighting_of_ref": "indicator--0d84ffd1-31ed-431c-b3cd-916528b61ff4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b0046b7-3ba8-4a74-9417-52d08d204e03", "sighting_of_ref": "indicator--82252152-387d-4f1c-986d-b926c5a93bb1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f617fd-47bc-47d4-b8c2-459205f2bee9", "sighting_of_ref": "indicator--4fea33ae-dd24-4011-aab4-0881c4530964", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ef27bb-f527-4b5d-b150-1f4aa7ffc981", "sighting_of_ref": "indicator--e1405d8b-618a-462e-8d4a-0a3081b3938e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b9cc023-15bd-457e-b592-8c5deef7aafc", "sighting_of_ref": "indicator--e1405d8b-618a-462e-8d4a-0a3081b3938e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2fb699f-37b2-4679-a3f4-83015c95df4b", "sighting_of_ref": "indicator--39851a0f-ead4-4194-88d9-1041c98b932b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e32a13-9738-4d2d-a9e6-2a4e3c8d9067", "sighting_of_ref": "indicator--1fe7000b-4dd4-46d6-acac-b08174812620", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85631d7e-5fe4-4f3b-9e97-2d27939113f6", "sighting_of_ref": "indicator--1fe7000b-4dd4-46d6-acac-b08174812620", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fcc024a-67da-4b8e-a4b7-dd252f6d8e43", "sighting_of_ref": "indicator--4b6060cc-bd8f-40c8-9afc-725d454881c5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85f8ba1c-a4de-4e97-8905-0b59d26f98e5", "sighting_of_ref": "indicator--365a19b9-d471-4372-9582-6aeb215c7e9f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e638d329-76cc-4c84-849b-3b7669d1de36", "sighting_of_ref": "indicator--672b25b5-a79a-4aeb-8ccc-bd74aeeb00a6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba2fa3af-1e1d-4e82-947e-1d2e630959b5", "sighting_of_ref": "indicator--1559ac4a-f0de-490d-9887-5fc7948a6e8d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6382475-8504-48bd-a2cb-f8114a227130", "sighting_of_ref": "indicator--72dfe556-94f8-42fd-8e40-391eb44e9675", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03adde6-e792-4b30-8a20-6bea5574cac9", "sighting_of_ref": "indicator--3ee184cd-30e3-475f-ae56-119032c3cb11", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65140143-78ae-4d4e-a76b-59959fc63c5b", "sighting_of_ref": "indicator--3ee184cd-30e3-475f-ae56-119032c3cb11", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862f28b7-c036-41a7-8625-1f7234e033dd", "sighting_of_ref": "indicator--3ee184cd-30e3-475f-ae56-119032c3cb11", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab75cd7e-4878-40de-9ed0-f62af3118c61", "sighting_of_ref": "indicator--bfdb53ba-706b-48a8-8257-1659138f77c9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c115ca9-7d25-48c3-b065-c072f0b9e033", "sighting_of_ref": "indicator--bfdb53ba-706b-48a8-8257-1659138f77c9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38ff93e-4727-4b48-88c9-ef9e37d6b196", "sighting_of_ref": "indicator--f1d49653-b092-4cfb-bef0-906b73a8b498", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256656c3-e3dd-4396-a317-484bca958a16", "sighting_of_ref": "indicator--f1d49653-b092-4cfb-bef0-906b73a8b498", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887df69d-2c3d-4143-88a4-45f912071440", "sighting_of_ref": "indicator--c661f5f1-305c-456a-99b6-175f535a577d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6bb21b0-2792-4e4a-9efa-3391a883d850", "sighting_of_ref": "indicator--c661f5f1-305c-456a-99b6-175f535a577d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f1d955-ce76-4163-a419-d50ddf571262", "sighting_of_ref": "indicator--782fbb2c-c528-497d-b0ec-6d4636e8e3f8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab20ca7-60fc-4572-9872-2cf92917b4df", "sighting_of_ref": "indicator--bc0633b6-ed9c-46ef-ae32-2f782e11fd60", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8269a1b-d182-4203-8885-53efda7afdf5", "sighting_of_ref": "indicator--aeca8ebd-c526-4101-b4bf-2f4eb99400b7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d79b8b-d84b-440f-a665-c62ef7bf8498", "sighting_of_ref": "indicator--33c475a2-0b35-4552-b822-4a1b77ebcf23", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f5bfab3-746e-4322-bb26-95d94ddfd0f1", "sighting_of_ref": "indicator--0a075f96-0ba3-4b3c-b4bb-a1c5bc622b5b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d05cdfb-d00f-41d7-8835-4e0712e7cca4", "sighting_of_ref": "indicator--700a4b1c-8423-47ab-9002-291b6fdeb8db", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e18bdf42-ab67-4335-9d1b-2bb44fc9cbb9", "sighting_of_ref": "indicator--ce943ed9-d7b2-421a-8b05-e7f48fdea3c9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e900ed7-f4a3-467b-8c0e-04bfc60e7505", "sighting_of_ref": "indicator--ce943ed9-d7b2-421a-8b05-e7f48fdea3c9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f157d4-cca3-46be-9770-b82431f4f1c5", "sighting_of_ref": "indicator--e49357a4-b864-4eda-a2a3-3583d595f3b1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afac458d-636b-4373-a52b-4ab39e93ee65", "sighting_of_ref": "indicator--6b3cb793-de87-4cbc-a2c1-82860f0b3586", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c358dae-826e-4b25-b475-745b951c5084", "sighting_of_ref": "indicator--cd0ea61d-4e9e-4a63-bb49-c809f0f7d035", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c214124-cdf7-4e84-87d5-0be5fface5f2", "sighting_of_ref": "indicator--946cb724-4eae-4b54-bca8-5bf73f015a90", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc1f3c2-6bc1-46ba-94b9-ca90286f9726", "sighting_of_ref": "indicator--07fc0fb2-e69c-4590-b25f-c1893ad512d7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520b484d-aab8-4d00-b0dc-3216c6d13da8", "sighting_of_ref": "indicator--07fc0fb2-e69c-4590-b25f-c1893ad512d7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e9f71b-15d1-48e0-98f2-976d2984ac56", "sighting_of_ref": "indicator--2d73812e-d9bf-4524-aa3b-e70bc21a2e77", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a463bb23-d524-4db1-83b6-99a29f413355", "sighting_of_ref": "indicator--d2baa06e-99da-42f6-940c-32ecb8fdd2df", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f72353-5156-46e5-b128-eb81b94c9077", "sighting_of_ref": "indicator--d2baa06e-99da-42f6-940c-32ecb8fdd2df", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5995d88f-1b01-4601-8164-93115ff765c6", "sighting_of_ref": "indicator--d2baa06e-99da-42f6-940c-32ecb8fdd2df", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b3611dc-82fe-4d4d-b2c0-fcee05402c31", "sighting_of_ref": "indicator--18e8ce11-0e53-47dd-8269-a9e098bd6c41", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1cda78-bbf1-4397-9ec1-7d0952ee7227", "sighting_of_ref": "indicator--18e8ce11-0e53-47dd-8269-a9e098bd6c41", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16b92b1-ecfd-46eb-8626-09e331aadbe1", "sighting_of_ref": "indicator--448276a2-e796-4e9f-b004-e7cd91bdefe8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32eb6b0e-a577-4229-8e83-16d3ba7750df", "sighting_of_ref": "indicator--d193d0f9-d26a-41f9-9a57-08a5b9d8d16f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a3891f-7ff8-4832-8285-0e035c25eba3", "sighting_of_ref": "indicator--d193d0f9-d26a-41f9-9a57-08a5b9d8d16f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ae7ea0-a379-4c55-8cd2-b9b493764671", "sighting_of_ref": "indicator--d193d0f9-d26a-41f9-9a57-08a5b9d8d16f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82471795-9922-4a26-a542-e0e61188b9ca", "sighting_of_ref": "indicator--70a6ffc0-84b5-4870-a3e8-ab81eda006d8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef796b5d-fc55-4daa-9007-02aa773c41c5", "sighting_of_ref": "indicator--88378ed8-7e9d-4dd0-b165-1159bf76f7cb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b10cce-e1f9-4db1-8f86-0c5de4dbe456", "sighting_of_ref": "indicator--3e2525ad-6722-4d8b-86b1-e3548e29a365", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc50519a-de95-4b36-8701-be137cafc302", "sighting_of_ref": "indicator--3e2525ad-6722-4d8b-86b1-e3548e29a365", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9d5c47a-188d-4ba4-8591-5d9124cbcb07", "sighting_of_ref": "indicator--3e2525ad-6722-4d8b-86b1-e3548e29a365", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5dd299-1036-40f7-8f09-a0d0566bbe72", "sighting_of_ref": "indicator--ee94c4a3-3335-433a-bac9-a325d71ce2d0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e518df-348f-4c9e-90da-2d5b82f05736", "sighting_of_ref": "indicator--a1da0122-bc86-4d49-a2b0-35001a1cc242", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5923d4b6-98db-4389-a73c-59a8cb24b2f5", "sighting_of_ref": "indicator--a1da0122-bc86-4d49-a2b0-35001a1cc242", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--803545f1-58fc-4d88-8f89-359b81a12411", "sighting_of_ref": "indicator--4e5a6ac6-77b6-4727-b499-6726c538b565", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a262dfcf-6961-4ab7-a845-8be9840fedf4", "sighting_of_ref": "indicator--929833b2-6754-4e6c-9e12-dc6cbc99b0c0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caabd3ac-fd8d-441f-8145-008e942d03de", "sighting_of_ref": "indicator--929833b2-6754-4e6c-9e12-dc6cbc99b0c0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b062a1ef-bd3e-4b5d-8a4b-2f0382f577cc", "sighting_of_ref": "indicator--2809e4b3-2223-40d2-8443-93cb099100e4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb10229-1074-4a22-af68-52bb8cb6b7a3", "sighting_of_ref": "indicator--2809e4b3-2223-40d2-8443-93cb099100e4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9eabe73-8f93-4a9a-aacc-526ed2cc97c2", "sighting_of_ref": "indicator--31ae4a20-6747-4d71-bc17-f3b2334ed4f0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5daaa38a-20db-4fa4-bdc2-067f46a0347d", "sighting_of_ref": "indicator--31ae4a20-6747-4d71-bc17-f3b2334ed4f0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc3da424-a5f6-434b-823c-f4fce5130b23", "sighting_of_ref": "indicator--8ac155f5-3094-466b-b976-262301fc2528", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a140afb6-236e-4d8d-b6cd-8022a0ccc4a9", "sighting_of_ref": "indicator--4fd7567e-6a6d-45f0-bf55-a19c073dcd14", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a1f941-bf56-4428-bb59-31269ec860b2", "sighting_of_ref": "indicator--1bf16efb-85ad-47ea-b5f9-5cdf1166a189", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f19da0-0e7b-4060-bf5d-7a44b08fe923", "sighting_of_ref": "indicator--235ee68a-846d-4a09-a42e-2015fe72b1f8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc514f4e-2eec-43fa-8f32-55484cff8abe", "sighting_of_ref": "indicator--538a4ccb-ce67-4ea4-9c6c-51389da01fff", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5402b57b-9b42-4ceb-959d-bdb88070e0c5", "sighting_of_ref": "indicator--7e95e73a-8061-4448-bf74-3aed9ae8572c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b103ca68-1a69-4b4e-a0b9-66b490bbcc44", "sighting_of_ref": "indicator--7e95e73a-8061-4448-bf74-3aed9ae8572c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eed600c-3dbb-4eab-9add-2a760f44859c", "sighting_of_ref": "indicator--d3956506-cf3f-4ead-8b6b-acdc827e3a5f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2381ff-1e32-4827-b1a7-360fc499af37", "sighting_of_ref": "indicator--d3956506-cf3f-4ead-8b6b-acdc827e3a5f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23898fe7-a47e-4ae4-831e-82c2d2a9c73a", "sighting_of_ref": "indicator--d3956506-cf3f-4ead-8b6b-acdc827e3a5f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30fe9ad9-dcbe-4225-858e-4d20dafa76e1", "sighting_of_ref": "indicator--493827b2-3e13-40ef-9f31-a88f1784ad27", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9cee3cd-9149-4491-b48b-90de491ef56d", "sighting_of_ref": "indicator--493827b2-3e13-40ef-9f31-a88f1784ad27", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ec8b75-097c-4842-956b-ccf3b665b7ef", "sighting_of_ref": "indicator--493827b2-3e13-40ef-9f31-a88f1784ad27", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14d4dea-56b9-4bf9-84f4-419f869f83dd", "sighting_of_ref": "indicator--a2393ce1-3cb3-43c9-83b8-b4c7b8f20b9a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f51e2b-a1be-4529-ac11-53a1114bc522", "sighting_of_ref": "indicator--12658dec-6aca-488f-8a7a-2300c175ee52", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7186bd-3c0d-4a9b-9948-d9ca86391902", "sighting_of_ref": "indicator--c8fa3d52-c1d7-46c7-9e24-4f1b7f933262", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb43a21-d99e-4492-9ca1-27b16d14bc27", "sighting_of_ref": "indicator--515385f6-149d-4389-bc87-7f16b610eaed", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3569ba-621f-44c4-9e86-6c91efbfcbee", "sighting_of_ref": "indicator--0d58b9b9-ab13-4e3e-8b4e-2f48e658e559", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb4690c-cc0a-4028-9dba-f3b4466a06d7", "sighting_of_ref": "indicator--897d634a-211e-45c1-a00d-e7811ca8d3c4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--048aa003-b36d-44fe-b3d2-fe472be37559", "sighting_of_ref": "indicator--4d64f280-c047-41e6-adb8-a2875ad73d19", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610bdcb6-9e53-4385-bb39-3e90ca8e6568", "sighting_of_ref": "indicator--d93e1b9c-9c30-442b-952a-fc765dc1b825", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1221e0-b965-4e29-ba92-5b511c801747", "sighting_of_ref": "indicator--d93e1b9c-9c30-442b-952a-fc765dc1b825", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86fcd837-a231-4be6-9c98-b3635ad9e3aa", "sighting_of_ref": "indicator--52540a3a-66dc-4b57-98d3-025eb2bf9340", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97e520b-c326-4fe8-be49-4eb1c94ffc64", "sighting_of_ref": "indicator--52540a3a-66dc-4b57-98d3-025eb2bf9340", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f93042-b2ec-42b6-a307-ab7d83b2ff29", "sighting_of_ref": "indicator--b9f56965-5ab3-4c10-80cb-c48b75f0c880", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d35829-9660-4ba4-bc84-b9f1f37a6023", "sighting_of_ref": "indicator--5d7ec735-6f1e-4644-928c-426317cb55a3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d284d346-5300-437e-8ea5-9e2f3a48b620", "sighting_of_ref": "indicator--937470ef-b6fc-4425-b707-de07604d7882", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b3087d4-e8e2-4329-9de4-57826f94a006", "sighting_of_ref": "indicator--50017bd0-fe78-4d30-8d4e-30de85f28128", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd00683-6e0d-492c-956b-29a6a271ad2b", "sighting_of_ref": "indicator--47eb78e8-5f1c-439c-ba99-93e2e85ae1c8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d960e7b-62fd-4889-afed-79f41cbc49f9", "sighting_of_ref": "indicator--47eb78e8-5f1c-439c-ba99-93e2e85ae1c8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b317c2f0-3552-42ed-9659-87615919e845", "sighting_of_ref": "indicator--d404287a-4a01-4f04-aefa-63f45d22d526", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64fedcd9-bfe8-41f7-959c-ccff3b9d5b94", "sighting_of_ref": "indicator--2413d71d-0961-4680-be2e-486cefcc1779", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0927dc02-3204-4d8a-80d5-66e542584374", "sighting_of_ref": "indicator--2413d71d-0961-4680-be2e-486cefcc1779", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35256c8b-8d96-4025-b2c3-d549c893b9b3", "sighting_of_ref": "indicator--2413d71d-0961-4680-be2e-486cefcc1779", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11ba616-50e1-484e-944e-896fcdafb9f1", "sighting_of_ref": "indicator--c644a659-7962-4279-923a-52e208be38f2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a797702-c69a-4809-9980-5122d50da31a", "sighting_of_ref": "indicator--9eec7266-10ae-4ba6-b06b-ed873a7674f0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d149a14-981a-452d-ab22-ba589ef2273e", "sighting_of_ref": "indicator--55de2bca-42ff-43dd-a0f3-e2e48b59b4be", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d0f718-55c5-4cca-bc08-1edc20e17cbb", "sighting_of_ref": "indicator--94ccacfd-80c3-46e7-9b9b-c7c118f63d9e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a81347a-5986-48ef-bfa1-6ccb20c3f675", "sighting_of_ref": "indicator--42ee03a4-bc4a-4969-a50c-bb0f9847a35b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c09e75-a378-4f15-8b48-cc903d2aebb7", "sighting_of_ref": "indicator--a682162b-2e74-4188-95f6-aea04a842df2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29621176-a2b0-44c5-9cd3-cc08555d024f", "sighting_of_ref": "indicator--a682162b-2e74-4188-95f6-aea04a842df2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e66b508e-4e80-47d7-9e92-053c6c2c423c", "sighting_of_ref": "indicator--de97b10a-2a34-4631-af40-90388c122a35", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2471e92e-5a7b-4a72-86bd-04a493ad0510", "sighting_of_ref": "indicator--de97b10a-2a34-4631-af40-90388c122a35", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7545ed77-8988-4048-979d-b5e8ada90753", "sighting_of_ref": "indicator--de97b10a-2a34-4631-af40-90388c122a35", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f938d493-8e85-433f-b7d0-4d801d99f099", "sighting_of_ref": "indicator--908c368b-5e38-4958-88d2-86eb8dfc9b37", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb0147f-8f6d-47fb-9316-9273930baa7a", "sighting_of_ref": "indicator--908c368b-5e38-4958-88d2-86eb8dfc9b37", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85f2c5b-735e-41a8-98a8-a259df07d295", "sighting_of_ref": "indicator--8e990c62-4ee5-4f99-906b-cf2ecf2251fa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba03b4a-3ce0-432f-9da7-c7546de07e9a", "sighting_of_ref": "indicator--89e40f5c-e297-43ba-9c0c-7d17bdabe560", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a2f523a-d1cf-493f-a902-aa3d1cc209a7", "sighting_of_ref": "indicator--89e40f5c-e297-43ba-9c0c-7d17bdabe560", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c569dea3-63a8-4358-9d38-3f3978ab7b83", "sighting_of_ref": "indicator--7a3b904f-7243-4e13-9ac6-5b43bb61c361", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99884e75-4673-497e-9665-040ad09be054", "sighting_of_ref": "indicator--7a3b904f-7243-4e13-9ac6-5b43bb61c361", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd68f63a-505e-458f-92aa-9b65aa4ce3e2", "sighting_of_ref": "indicator--0f049b0d-7f55-4c01-9357-9c43ad7956e0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e963fc-fccb-46bd-ba9f-f767b9b44ce1", "sighting_of_ref": "indicator--0f049b0d-7f55-4c01-9357-9c43ad7956e0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff17fb2b-057b-4b56-b662-d36c058fa584", "sighting_of_ref": "indicator--cc0a2a80-e990-4996-8751-fab1de87a316", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01995cfd-93aa-48b7-817c-94b25a1e05eb", "sighting_of_ref": "indicator--cc0a2a80-e990-4996-8751-fab1de87a316", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b16d79b-89f6-4af9-8b0d-ac673a38be5b", "sighting_of_ref": "indicator--b9dcbf84-62de-4ad2-ba0a-000519a73304", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f91832-c53b-4569-919c-36dc393e7fa2", "sighting_of_ref": "indicator--0315669a-467e-4989-9edb-524cac61c12a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b02011e3-9552-41a4-8a32-242a139fccbd", "sighting_of_ref": "indicator--0315669a-467e-4989-9edb-524cac61c12a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--143c4913-1741-4402-a942-a8175a9004f7", "sighting_of_ref": "indicator--cc03e137-f765-4048-8e47-a934a15a15d9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f2f3595-aae9-4f78-9e54-733cc60a1e34", "sighting_of_ref": "indicator--6637dc4e-b0a4-4d0f-806b-a11c3d51ef1c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e81c5568-1663-416d-9dc7-adb46715f8f1", "sighting_of_ref": "indicator--591a0030-6722-428e-9c22-8302650bdc9d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9545edf-3e89-4704-9ff8-647f797549e3", "sighting_of_ref": "indicator--591a0030-6722-428e-9c22-8302650bdc9d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf54a72-acf6-4429-a91e-7ab9b60391c5", "sighting_of_ref": "indicator--591a0030-6722-428e-9c22-8302650bdc9d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85751e4b-a676-473c-bfcb-049cc76fe090", "sighting_of_ref": "indicator--c2da2700-16ec-4424-b29c-551774c1585c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c003bdd8-374c-4f4e-a27f-b22f88e2587a", "sighting_of_ref": "indicator--99117b9b-99c0-4c2a-ba73-fcf947e7f416", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173c027b-d4a3-4c75-8b55-8b538e385a38", "sighting_of_ref": "indicator--99117b9b-99c0-4c2a-ba73-fcf947e7f416", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a23abd95-c367-4425-9436-86f8b8dbe00f", "sighting_of_ref": "indicator--99117b9b-99c0-4c2a-ba73-fcf947e7f416", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64881626-7e70-4c14-b1aa-110dc76b80ff", "sighting_of_ref": "indicator--026ede7b-350e-4157-93c4-e6ace66b31b4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac08a5a-b7ea-4d7b-8bd9-236c16fca5b8", "sighting_of_ref": "indicator--026ede7b-350e-4157-93c4-e6ace66b31b4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a4ef89-5c73-4958-bc4c-d42298237044", "sighting_of_ref": "indicator--7e023fed-a07f-4d3d-8618-10cfef2c4dca", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b281fdae-ea4d-455f-adfe-3985ba0a2e0c", "sighting_of_ref": "indicator--7e023fed-a07f-4d3d-8618-10cfef2c4dca", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a2f7d26-dec2-4887-83b7-942072fe7f95", "sighting_of_ref": "indicator--d4e6dbe9-3617-44d7-b1d0-8dcf66240a40", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce683830-1f22-4df3-833c-6a149f5ed466", "sighting_of_ref": "indicator--6dbcf724-699a-42fd-b743-ad6671b80d67", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91374d25-0678-4fa8-aa79-0143bc4c62d6", "sighting_of_ref": "indicator--7052c902-f8d1-47f4-a600-306c7ca036ff", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6dd293d-f8b3-43d9-a422-babf9808ecd3", "sighting_of_ref": "indicator--7052c902-f8d1-47f4-a600-306c7ca036ff", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8128edb6-0f3a-442c-a898-1089779d346b", "sighting_of_ref": "indicator--7052c902-f8d1-47f4-a600-306c7ca036ff", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2afbc303-e36e-4c11-9f1a-7b6c3df07c55", "sighting_of_ref": "indicator--5377b096-6b75-49a8-9f7a-20ec5c4f3148", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--925a6738-0685-467c-be15-90b5bc7836a1", "sighting_of_ref": "indicator--5377b096-6b75-49a8-9f7a-20ec5c4f3148", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df987067-f441-4927-a27e-e49477fc4f02", "sighting_of_ref": "indicator--b3721cdd-0115-4429-b53c-0b36e58a849e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83daabc1-1cd8-4fce-8a8a-7c5a08d096fb", "sighting_of_ref": "indicator--1c68c1c6-aec5-430f-b010-f4445015dab3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f66259-f5ee-4d62-b812-6612ecbb7ade", "sighting_of_ref": "indicator--1c68c1c6-aec5-430f-b010-f4445015dab3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2dcbc83-010f-4127-ace1-6002bd05ad5e", "sighting_of_ref": "indicator--bf15f742-cd4e-46fe-a9fe-4e302ad2a8e4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--953a0b6b-b26b-4180-9f76-c7e2178d068d", "sighting_of_ref": "indicator--6544411b-e047-4d2a-a62c-625fdb6796d2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e342563d-0b40-43df-b051-16d398e1279a", "sighting_of_ref": "indicator--40576d84-3e44-4a80-8752-759d4ac2257d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b050ad9-b96d-4a8b-8b0c-d52f97a2bddb", "sighting_of_ref": "indicator--40576d84-3e44-4a80-8752-759d4ac2257d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fff58e5-1da5-4064-a355-9e49d3ccb4a0", "sighting_of_ref": "indicator--608f5a37-7c6b-49ff-aa43-342d2277c9eb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1e4516-f179-47e0-b9b4-3e3cdaf77b95", "sighting_of_ref": "indicator--608f5a37-7c6b-49ff-aa43-342d2277c9eb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b269ef8d-1c16-4d4d-b08f-bedf60d40e66", "sighting_of_ref": "indicator--608f5a37-7c6b-49ff-aa43-342d2277c9eb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02069958-4a2f-49ea-9b96-81e5f3112211", "sighting_of_ref": "indicator--3278a0d0-9e70-49d6-8d09-94cbb074406d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0ab1349-3d83-4556-8e72-fb6f0fc57371", "sighting_of_ref": "indicator--01574063-489b-41ae-a8ab-28ad0fc87542", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c3ebb0-478e-49b0-86ce-83d00e5f530d", "sighting_of_ref": "indicator--01574063-489b-41ae-a8ab-28ad0fc87542", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2587d832-52bb-4777-a6aa-20a1b566d776", "sighting_of_ref": "indicator--5ba5dd7e-95d9-4def-a8b4-e6f783a3c500", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f947ff76-5a8b-4c93-a2a3-dac3155d64e7", "sighting_of_ref": "indicator--5ba5dd7e-95d9-4def-a8b4-e6f783a3c500", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--659d2860-2262-4675-816d-06a72c01fb98", "sighting_of_ref": "indicator--a113f87d-7434-469d-9734-bbe7b2cf39f7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--518ee9e9-8faf-4856-ab84-211f17ddb305", "sighting_of_ref": "indicator--a113f87d-7434-469d-9734-bbe7b2cf39f7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683557df-450e-4f82-8e0f-51af20c1271b", "sighting_of_ref": "indicator--a113f87d-7434-469d-9734-bbe7b2cf39f7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e691754f-9473-4fc4-9617-af56687ac9f3", "sighting_of_ref": "indicator--a113f87d-7434-469d-9734-bbe7b2cf39f7", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b746b66d-7435-4ce5-bf14-98c9b9a5bf94", "sighting_of_ref": "indicator--f28371d7-bcab-49f2-ab5f-2d7e0618fd82", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db937ff3-4ec4-4c0a-b272-e1e836ff5a3a", "sighting_of_ref": "indicator--871a0bd1-34dd-4785-86a5-fc6a799010de", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cccbd65-54a0-4eb6-aaa9-af75533c9b3a", "sighting_of_ref": "indicator--871a0bd1-34dd-4785-86a5-fc6a799010de", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a89bc1-5be9-4d89-ba16-b354f6433e1d", "sighting_of_ref": "indicator--3de75ecd-9ef0-436c-9cb8-749ba4027bb4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c46e6f-9f67-45ed-8a4b-dc559ce7c890", "sighting_of_ref": "indicator--3de75ecd-9ef0-436c-9cb8-749ba4027bb4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6cba990-5714-4ae2-ad6f-74afc77428fd", "sighting_of_ref": "indicator--3de75ecd-9ef0-436c-9cb8-749ba4027bb4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a2fc94-e532-4576-8b0c-b5d22663f416", "sighting_of_ref": "indicator--661d24e2-f979-478d-83d4-56bf8e50401c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173f5121-8f71-444a-9cfb-d667c709071f", "sighting_of_ref": "indicator--6136131a-3c7f-4d7a-af59-8d93b1115661", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599b01d1-8ab4-4dca-80e2-31941d353b4b", "sighting_of_ref": "indicator--6136131a-3c7f-4d7a-af59-8d93b1115661", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd84ffd2-2240-46e3-974d-1e2feef40fe7", "sighting_of_ref": "indicator--161222b6-670a-45aa-86d4-d6a219a9d290", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ea82db-2260-4d8f-82cd-78f3313d0965", "sighting_of_ref": "indicator--161222b6-670a-45aa-86d4-d6a219a9d290", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63879bd7-9877-421d-a8dc-b509b7b5b1b5", "sighting_of_ref": "indicator--bdc3b16e-7742-4449-a8a7-c3ebaec0f061", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af00e913-4f86-4f2a-95d4-d9286c2aa8ee", "sighting_of_ref": "indicator--d5c2dbde-f677-424a-9aa6-77cc4fe25fa4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4cf54e-cffb-4f01-abcc-f946db21aaab", "sighting_of_ref": "indicator--266d1105-a349-4528-bafd-6731c700fbbe", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ec0978-db7c-47d4-b8b4-361610c57f06", "sighting_of_ref": "indicator--444bcb09-034d-42ff-87a1-fcefcffd2185", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa5e6e8d-53bb-4e55-ace1-7b4ac46a3efa", "sighting_of_ref": "indicator--444bcb09-034d-42ff-87a1-fcefcffd2185", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c545aad7-7d05-4a87-ab9b-928fb0e3c853", "sighting_of_ref": "indicator--3bde80bd-6ad9-4a33-9f3d-9ad6de6fa7ba", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534401eb-0fe2-4266-a75b-9ffa9c6f0f10", "sighting_of_ref": "indicator--3266556b-cb5f-4e9d-99ac-4631462fd591", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ba5fd5-82ab-4790-9636-50a0d0a31d07", "sighting_of_ref": "indicator--2983f986-0e01-4f5e-ae91-a2e661cf3786", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5d9505-0342-486d-b0ce-d4b92695ff8b", "sighting_of_ref": "indicator--2983f986-0e01-4f5e-ae91-a2e661cf3786", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad76f26a-9123-42fe-ab35-2ca48a24a17e", "sighting_of_ref": "indicator--f036120e-510b-40cd-9cf7-218fdb9dc104", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46bd048-c3f5-400f-8c35-7ce9ddc8e147", "sighting_of_ref": "indicator--a41628ab-afa9-4696-bdeb-2f2c1bdd5d50", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a530610-5fbd-4daa-bf84-f5066f2ce4de", "sighting_of_ref": "indicator--067978e2-1736-46a1-a6a6-f6e13e71ee9f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7875890b-5a5e-467f-92d7-f0d9360dddc6", "sighting_of_ref": "indicator--e59e45c9-afca-4aa1-9e80-12ab5a6d2aa8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54745aed-43db-4d66-a506-13ddb8ecad5e", "sighting_of_ref": "indicator--e7c72971-1fdd-4b73-8c4f-58dee35b9dc5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8fa36b-fa6e-4e4c-acb8-78096036d4a9", "sighting_of_ref": "indicator--367605ab-0593-45d6-9ccb-9fe77d70f0e4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66edc41d-4355-4c35-b859-c0d506c51800", "sighting_of_ref": "indicator--367605ab-0593-45d6-9ccb-9fe77d70f0e4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f11d24-2d6b-4674-b4d3-97ad8f0c97c1", "sighting_of_ref": "indicator--d3827664-bdf0-4b25-a690-00e628488bc7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cab180d-bd68-475c-b94f-4f4fdc808fa2", "sighting_of_ref": "indicator--6c64af5a-5f0d-4ac9-b944-2bc8c2b8edd7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4240055c-055e-414e-8357-6df625d0da0a", "sighting_of_ref": "indicator--6c64af5a-5f0d-4ac9-b944-2bc8c2b8edd7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70deef40-09ce-4e99-908e-fad7de389962", "sighting_of_ref": "indicator--80778850-630d-4692-87e9-017b9b188674", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56126dc6-aa27-465f-8331-f93c80eb6cad", "sighting_of_ref": "indicator--80778850-630d-4692-87e9-017b9b188674", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5503afc-773e-44e3-8c31-7bbea8df76d3", "sighting_of_ref": "indicator--5efa63d1-f9cc-4a27-9949-42eeefca1df8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6deacaab-713a-4287-b9ff-eaa44b16d3c9", "sighting_of_ref": "indicator--5efa63d1-f9cc-4a27-9949-42eeefca1df8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473de9c7-1d46-4609-bdf6-33e07d6be266", "sighting_of_ref": "indicator--a3956c93-aca0-4d77-b84b-064f2f192c72", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2fcc29-548f-47f7-908f-3669a69ac455", "sighting_of_ref": "indicator--a3956c93-aca0-4d77-b84b-064f2f192c72", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4285845-68a1-4392-88e9-811632011669", "sighting_of_ref": "indicator--44ed4d9c-9f2c-4bfa-b486-3d7dcf7cc3ef", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--146c8488-b94a-4ba3-b464-2b2b4c3c7393", "sighting_of_ref": "indicator--8f5c1240-28b2-47bf-a262-835e9027297a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c08cb75c-e01b-43d5-884b-100c3cc8e800", "sighting_of_ref": "indicator--d1db2a94-5cc2-4ff7-a4fb-3802916f8527", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7938355-19cc-48de-9d22-e80688d267a0", "sighting_of_ref": "indicator--c39a501f-c250-41fb-ad93-f8f9163dc929", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127078a2-0726-4be5-8dfb-c7e732859f4b", "sighting_of_ref": "indicator--a0e50605-ca22-4192-9e55-0568b55eac08", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67412159-ff52-4fa4-bd5d-c96af299acf7", "sighting_of_ref": "indicator--a0e50605-ca22-4192-9e55-0568b55eac08", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd7fea41-b28b-4ab4-b89f-835e351d355e", "sighting_of_ref": "indicator--a0e50605-ca22-4192-9e55-0568b55eac08", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fedd9930-d87f-4a03-962d-429497657445", "sighting_of_ref": "indicator--03e2165e-c968-46c7-b09b-4399436260f2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0388a7b2-17d7-4426-a6de-c93b0b04758f", "sighting_of_ref": "indicator--03e2165e-c968-46c7-b09b-4399436260f2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f5885d-64ca-4ee1-a044-93922759c70d", "sighting_of_ref": "indicator--03e2165e-c968-46c7-b09b-4399436260f2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839759fb-ec44-45ed-978a-d62f9d43260a", "sighting_of_ref": "indicator--925e7cc5-3883-44a7-aa30-397ffe2b104d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b103d1-bfae-4717-8dc4-bde08ccd97f0", "sighting_of_ref": "indicator--925e7cc5-3883-44a7-aa30-397ffe2b104d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31090e0f-ff3b-4220-9019-af349fe4eafc", "sighting_of_ref": "indicator--925e7cc5-3883-44a7-aa30-397ffe2b104d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5133930d-96af-462c-9c56-b02cd367891d", "sighting_of_ref": "indicator--925e7cc5-3883-44a7-aa30-397ffe2b104d", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f1f44b-8b3f-4981-ba22-0f8db3ffcd3c", "sighting_of_ref": "indicator--15ed7481-a4b7-4bf3-af7e-878c09c93f16", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce4d502-981f-4eef-abc9-6413910e7de4", "sighting_of_ref": "indicator--15ed7481-a4b7-4bf3-af7e-878c09c93f16", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65939154-1ef9-4221-a3ff-ba7eecb32511", "sighting_of_ref": "indicator--7ce01613-ce17-47ef-bb1b-7d4bffb2b7e1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9404992-1145-4ef3-b38e-75170a8645a1", "sighting_of_ref": "indicator--57b6882d-5e2e-4491-b2db-828a29cb680c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba794b9-3236-4982-87e1-9519ebc6b802", "sighting_of_ref": "indicator--57b6882d-5e2e-4491-b2db-828a29cb680c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a64fc1-5b0e-4dfa-803f-2937492976d5", "sighting_of_ref": "indicator--57b6882d-5e2e-4491-b2db-828a29cb680c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f7d188-a0d7-4eb4-9294-e4874fbdf092", "sighting_of_ref": "indicator--dac3da29-5741-4831-97ec-4482b3ef4166", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--054164cb-b8d1-4b00-b59a-2d75ea146128", "sighting_of_ref": "indicator--c0999eac-93ea-4393-8b31-6d0e2754e889", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806829f6-0aac-408d-91f4-8cbf1e95270f", "sighting_of_ref": "indicator--c0999eac-93ea-4393-8b31-6d0e2754e889", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--283a245f-471c-4154-bf9d-520831f9f99a", "sighting_of_ref": "indicator--5d3f15e2-1208-4512-8264-ce164a7738a5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09cd50a3-8137-49ee-b2a2-00e7e5fabe3e", "sighting_of_ref": "indicator--5d3f15e2-1208-4512-8264-ce164a7738a5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d70e12b-752f-48e6-a39c-7db733d2eb7a", "sighting_of_ref": "indicator--5d3f15e2-1208-4512-8264-ce164a7738a5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853f6e2f-e967-49db-aa48-eab7a00139f3", "sighting_of_ref": "indicator--cb7153f2-3c97-4c26-aec7-21957abf0067", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b945cdfc-80e0-4d1f-b5dd-11a62e89205c", "sighting_of_ref": "indicator--cf2311c5-9e16-4e13-b401-a3528cc1db31", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008b95e6-f91a-4052-89cc-3aaaed5a4a25", "sighting_of_ref": "indicator--ae55c4bf-5744-4d2c-a88d-d7444afb0019", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc1e9c9-4b12-4a82-90fc-2a3f44fd2fee", "sighting_of_ref": "indicator--ae55c4bf-5744-4d2c-a88d-d7444afb0019", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98991ca8-14a6-415c-a489-62a301f4208b", "sighting_of_ref": "indicator--ae55c4bf-5744-4d2c-a88d-d7444afb0019", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81858b5e-3f42-40b4-8e57-bf9a9f9f2cf5", "sighting_of_ref": "indicator--dc657ae3-2c7c-4788-bc63-55bae1e1aa54", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d26cab-f4a5-4d94-9739-968045ba1697", "sighting_of_ref": "indicator--10ac33d4-b70e-430a-ad7e-bb13cc5be200", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79be47de-cde1-4912-aedd-2956e8d8e25e", "sighting_of_ref": "indicator--aeaeb4ae-7e36-40e5-bbf4-eb253c26315d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f33e1d-b3d9-42c5-abb8-df11ee205a70", "sighting_of_ref": "indicator--aeaeb4ae-7e36-40e5-bbf4-eb253c26315d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe99531-0403-49bb-b463-9c4807e70d5c", "sighting_of_ref": "indicator--aeaeb4ae-7e36-40e5-bbf4-eb253c26315d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38adccbc-0ae7-41d4-9e75-91f1cccc4be8", "sighting_of_ref": "indicator--3a997b84-09f7-48a9-866e-358b9e9d8d0d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f74ee09b-1924-4e60-a437-2542ffcad909", "sighting_of_ref": "indicator--c7ea797c-4596-4580-bd65-e98fd94f95de", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d0f6d7-c812-42ae-9f0b-0d5f3e9cf730", "sighting_of_ref": "indicator--c7ea797c-4596-4580-bd65-e98fd94f95de", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fec8f91-202e-4bbe-9515-8f312e210d36", "sighting_of_ref": "indicator--726222d2-421a-4b00-8749-114ca65cae93", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c614614f-f827-42a6-8725-0659936cc54b", "sighting_of_ref": "indicator--a53a8bcb-47cc-4a17-bf6e-05f506955360", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516d4aaa-1b7f-4647-87ed-f587b3a1ee9c", "sighting_of_ref": "indicator--c42ad724-e18d-4856-a7cc-c8867030be06", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b57e4b60-c2c9-48a3-b2fb-94688061e8b3", "sighting_of_ref": "indicator--c42ad724-e18d-4856-a7cc-c8867030be06", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea08553f-99bd-4292-a416-8a9dd9e47178", "sighting_of_ref": "indicator--1753e7db-a49f-4891-9528-66c53ff24bbe", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--359d13c3-eb8c-4495-8619-e317fdaf4dae", "sighting_of_ref": "indicator--8c7de54d-f4d8-49eb-88e3-211f6f0481a8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966e3d6e-2dc4-447b-a425-a13bda471d53", "sighting_of_ref": "indicator--8c7de54d-f4d8-49eb-88e3-211f6f0481a8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfeb6e0b-d55c-49a5-9e13-0a3102d776ac", "sighting_of_ref": "indicator--667d451b-38e0-407a-a17e-db2aa10876e6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b59ce88-0573-4cbd-b498-2112642bcced", "sighting_of_ref": "indicator--667d451b-38e0-407a-a17e-db2aa10876e6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9a268e-0b46-434b-9980-da28456fda52", "sighting_of_ref": "indicator--667d451b-38e0-407a-a17e-db2aa10876e6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc7ae46-e566-444d-a8cd-90698bd634aa", "sighting_of_ref": "indicator--4b929ec0-abff-4dc9-84b0-5c57c9d705c3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42fd08dc-17d7-462a-9693-3909330bc6dd", "sighting_of_ref": "indicator--4b929ec0-abff-4dc9-84b0-5c57c9d705c3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c6fc2f-c9a2-40a9-8443-a49de0aeb4ad", "sighting_of_ref": "indicator--d1924090-9f89-47e4-9daa-3b31d54fabbf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29dddbe3-c797-4885-862c-55e7fb792d19", "sighting_of_ref": "indicator--bb70ae2e-cab5-40a6-9dfb-a3183998f935", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d08fd69c-750f-418e-b727-111eb1c1c273", "sighting_of_ref": "indicator--ad13b0c9-6f43-40d8-8c35-542b7cad6dde", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f5200e-1aa4-47bb-9275-3fc5e3506072", "sighting_of_ref": "indicator--ad13b0c9-6f43-40d8-8c35-542b7cad6dde", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9b09b9-dbca-4494-b5b3-1c92247cb9be", "sighting_of_ref": "indicator--7f88d621-694c-4a73-b1a4-82100e87f7c8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda7a0ca-249d-46ec-8db2-eae321ae3882", "sighting_of_ref": "indicator--b6161617-d588-4825-9f7d-1f24d0de1cc6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dce83ebe-b181-4602-ade1-14a3a17fc527", "sighting_of_ref": "indicator--b6161617-d588-4825-9f7d-1f24d0de1cc6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b79d26c-8632-4662-ade0-53afd6aff9ac", "sighting_of_ref": "indicator--742f1f7f-c14b-458b-99d8-8b77902bde12", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc416e0a-b8c8-44ab-8b97-f2ddce2c5323", "sighting_of_ref": "indicator--1e2b3c6b-71a3-4677-9159-d7a649edc2e4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d3a8f1-26c8-46af-b0fa-ec0a502f64d5", "sighting_of_ref": "indicator--1e2b3c6b-71a3-4677-9159-d7a649edc2e4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1aaeee8-8734-48c2-97b4-e6dbfc06be9c", "sighting_of_ref": "indicator--d3c18f7f-0de1-47bd-ab52-ee031b0fd5f5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3422b26-6060-4551-8984-2ef90f2741ac", "sighting_of_ref": "indicator--d3c18f7f-0de1-47bd-ab52-ee031b0fd5f5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aafe326-7aee-4aa7-b619-8d4db251698f", "sighting_of_ref": "indicator--d3c18f7f-0de1-47bd-ab52-ee031b0fd5f5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d45153-c880-4f2e-b350-b3e303d708e5", "sighting_of_ref": "indicator--de2e1af0-137a-410f-bb64-5b2476e4ff8c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a594a9f5-02e1-4d33-a122-8e1189c22e3e", "sighting_of_ref": "indicator--de2e1af0-137a-410f-bb64-5b2476e4ff8c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--949c3845-cd7b-463f-ac4a-4b04534314da", "sighting_of_ref": "indicator--de2e1af0-137a-410f-bb64-5b2476e4ff8c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5743ab9-62ae-49c6-a11d-f5e93ee57dbd", "sighting_of_ref": "indicator--bb51f6af-d2a7-49b5-a5c8-d34077d7f645", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--159ff29b-1f0a-404a-a883-e801d2a7b9df", "sighting_of_ref": "indicator--bb51f6af-d2a7-49b5-a5c8-d34077d7f645", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6222b69-5064-4982-97a9-13570194d933", "sighting_of_ref": "indicator--bb51f6af-d2a7-49b5-a5c8-d34077d7f645", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62aa0d48-2743-47a8-9583-86d217356f3f", "sighting_of_ref": "indicator--43098ac0-be63-4f2a-b273-3e35a6f5b108", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88550c38-ef43-4f61-979e-90dd4e0bacb9", "sighting_of_ref": "indicator--43098ac0-be63-4f2a-b273-3e35a6f5b108", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60da15a2-1480-4194-bc60-5591a6557069", "sighting_of_ref": "indicator--5084cddc-4771-4124-b2f8-daf7775fb75a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e15219-e10f-4450-9c57-27383596a242", "sighting_of_ref": "indicator--9dccf527-796f-4b79-84e6-4201183374a6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bcaaa1b-4a14-45b8-9c89-58d093ab77d8", "sighting_of_ref": "indicator--9dccf527-796f-4b79-84e6-4201183374a6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8686d57f-37cd-4ab6-8338-5571da8c3084", "sighting_of_ref": "indicator--3d0c68ae-9feb-4ad1-b771-88edd7adaa33", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e38bca-5346-4af9-8baf-831b31e2e512", "sighting_of_ref": "indicator--3d0c68ae-9feb-4ad1-b771-88edd7adaa33", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2efeae52-88b7-423a-9351-47e526df7d5a", "sighting_of_ref": "indicator--3d0c68ae-9feb-4ad1-b771-88edd7adaa33", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93f2e7c-c8d8-4da1-a795-01ae92e89b60", "sighting_of_ref": "indicator--db68f65b-072e-47fb-b07e-eb4a397eebcd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d69ef14c-2b48-4903-b39f-0bc82658a09f", "sighting_of_ref": "indicator--db68f65b-072e-47fb-b07e-eb4a397eebcd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39fb67fd-55fe-4350-9968-7fd307c5a2b8", "sighting_of_ref": "indicator--db68f65b-072e-47fb-b07e-eb4a397eebcd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5339b70-74ee-4ca0-ad77-408941e9e8fa", "sighting_of_ref": "indicator--c5384633-6580-4731-9e3c-620880222ac7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2edf917-d705-47fe-8c66-7cb6343609df", "sighting_of_ref": "indicator--e211d43a-ab95-4777-b6cc-545e06c40cd1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6177b1-17c1-4de8-930c-835aaa2ce6eb", "sighting_of_ref": "indicator--60f62538-7c5a-4276-851e-dd9cc8a69fa7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888d00dc-175f-4754-8bbc-b1b7d947e158", "sighting_of_ref": "indicator--1464cc29-7794-429c-bef5-f20edf0a8a11", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc956abf-4efd-423a-a7e7-e03fe68ad040", "sighting_of_ref": "indicator--5b49e9df-4436-4b05-9dd2-2aae2adc1004", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49bbeaca-4706-4228-af41-9a55bff1ad2f", "sighting_of_ref": "indicator--6e75a592-e1be-42aa-bbe7-af63b9696fcd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aca3b7b-0008-4bb7-bf4b-6b703a6b83cc", "sighting_of_ref": "indicator--0fdabe85-d1f5-4ec4-bc22-7bb1a836b740", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56428185-e5ea-4d8a-91cc-ae01e6bd3fd1", "sighting_of_ref": "indicator--ac89c32d-544d-4763-9fa3-f8090392629a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c55ac1d-09a7-4744-993b-d8215016513c", "sighting_of_ref": "indicator--afb46960-bcb1-4400-a17e-048df2865795", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8232fc4-51a8-4eb8-aeef-da0494dc8c44", "sighting_of_ref": "indicator--45f95723-02a4-491a-8ee7-7de2e57db473", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2ce463-ec7f-4d70-ac72-c92a8c20204a", "sighting_of_ref": "indicator--5c5e23b5-8810-4c3f-b991-c9afb14c4f94", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2902072b-7c3a-4a18-80d9-727cf4056e8f", "sighting_of_ref": "indicator--5a567f17-8a58-4a38-a22e-2daffaef2f1a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ca6c5c-85ed-438a-aa77-9387da5953a4", "sighting_of_ref": "indicator--d6885cd9-1df2-40cf-8219-af99ddc9405e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63484b10-0ac8-4eef-81ba-507778e3c623", "sighting_of_ref": "indicator--0361b216-fb3d-4f0a-9c69-f9fb82630cbd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dfa1a6d-109b-414d-afad-cb6cb194c2e5", "sighting_of_ref": "indicator--8414eea5-6873-45cc-9693-568a50268152", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--642823f4-e67f-4255-ad62-5f408bc97a03", "sighting_of_ref": "indicator--aa002fa0-f874-442e-8334-3e017c365050", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19925361-1a4a-464e-b84e-d829d9023ffb", "sighting_of_ref": "indicator--6a972c55-66f0-4174-95e2-c825d44990d3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511396f7-da91-4326-b2a5-c7525dc1e3a2", "sighting_of_ref": "indicator--6a972c55-66f0-4174-95e2-c825d44990d3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18c2dac-916b-4cf2-aff5-6d11bd38d3b5", "sighting_of_ref": "indicator--469561dd-a023-4e93-85a3-d532dae32a91", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95dd90ae-cdff-4a9e-9be1-e78a14e41474", "sighting_of_ref": "indicator--cc4b5b29-d313-4fd9-a722-32a23225db48", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03255195-5762-4f3f-a674-f750d80aeaa4", "sighting_of_ref": "indicator--630a7146-f423-4421-b9de-31d99a43fa19", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9676c6d4-0a28-483d-8b9b-d360d64cfa29", "sighting_of_ref": "indicator--e89d2d68-574b-4437-b3de-203c5c9001f6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd43ce1c-ae2f-49a1-a6e3-62fcaed7235f", "sighting_of_ref": "indicator--d4898aff-59ab-4785-9b10-822a3988ac4f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431d7bc8-4fa4-4760-9dfb-2a1e96f6cc67", "sighting_of_ref": "indicator--a8b0d120-82a7-49ba-80db-698d071cc832", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7182c9-0db1-48af-88ff-f667529490c6", "sighting_of_ref": "indicator--af442489-1e60-4487-b756-f9ed6efeb6dd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b6ddbf9-97ed-4588-ad98-0ec9548c44d5", "sighting_of_ref": "indicator--a7e29f92-eb8a-4e14-b3f1-d2bf68692861", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9eca399-5ccb-47cf-b512-c97a3e2e2a29", "sighting_of_ref": "indicator--db206cd5-ff5b-42d1-9de3-94e0519bccf2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1951b561-4ecb-4986-a625-df3fb88b9b9f", "sighting_of_ref": "indicator--7e1aef47-1290-4c30-abcb-d8d187420443", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941f7d74-43d3-46df-ab54-144fb5f34d49", "sighting_of_ref": "indicator--7e1aef47-1290-4c30-abcb-d8d187420443", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d6d232e-d261-461a-9e31-ddf8c8d0d767", "sighting_of_ref": "indicator--7e1aef47-1290-4c30-abcb-d8d187420443", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321a5a66-bb4f-4647-8391-7d41fb83cad9", "sighting_of_ref": "indicator--2683848c-4ce0-48e5-a233-bd53774c6fc6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5cb95c0-4805-4891-b7ec-b492fb6ca919", "sighting_of_ref": "indicator--557b267f-1d3d-4d72-8f8f-6b3fecf32bf1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1d8d45-92db-4759-8914-ea6f8a585a0c", "sighting_of_ref": "indicator--2e181fcf-3031-4406-acd6-ad375b229808", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc45f30-a3d6-4ef2-b912-21bca24fca67", "sighting_of_ref": "indicator--2e181fcf-3031-4406-acd6-ad375b229808", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1062719a-9fe3-4dd8-a129-968058b9775b", "sighting_of_ref": "indicator--0b6a437e-2d79-4b07-8cf7-8f39fd57e77b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ac33c2-a93c-4b51-b34d-47be06f9f02c", "sighting_of_ref": "indicator--ddb7c792-e999-450d-8129-5180c11788dd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb9f9a8-5ad9-48e5-8fc4-f129d40a1348", "sighting_of_ref": "indicator--699104c4-af9f-4f31-a8f4-b25f16600d02", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa2f0e2-2ae9-471d-b8e9-8ba186909a7d", "sighting_of_ref": "indicator--77d6d385-d757-4e8f-a4af-377e2300f615", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c37683-bed7-47d5-9d1e-e96c7dcd69d8", "sighting_of_ref": "indicator--47106c03-d957-4570-aab5-5b9ddd146b46", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3439e1a-a5ba-49a6-8322-921b885a0794", "sighting_of_ref": "indicator--47106c03-d957-4570-aab5-5b9ddd146b46", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbba7e07-9c75-481c-a127-45805662f191", "sighting_of_ref": "indicator--47106c03-d957-4570-aab5-5b9ddd146b46", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ada69b-f211-4f4a-8e7c-5701f07087d5", "sighting_of_ref": "indicator--f332a45f-48be-4273-a361-c28484a0c087", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095f8063-7ae7-4ac2-ae88-0e574f4e80ab", "sighting_of_ref": "indicator--70069370-a7d4-4e77-9d29-fec5b434ac8c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc84d568-1815-4bf9-b24d-297109c46e66", "sighting_of_ref": "indicator--eba9f305-186b-47f8-a37e-371a8e63b4a1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--554c8c47-d369-4614-a510-d8fba5bb9550", "sighting_of_ref": "indicator--e8469f9a-d1f5-4452-8adc-10e63eebfe21", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2623e1b-b27d-474d-b23e-29fc4e89d105", "sighting_of_ref": "indicator--422ad70f-d25a-4050-a2ac-93fb16e756db", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d0db31-bab2-4552-822c-81ae8651ff0e", "sighting_of_ref": "indicator--64d8d093-cacf-41aa-8807-e1e0a00ee63c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ecbefaf-5ef6-4faa-8b92-78e38f75c6a7", "sighting_of_ref": "indicator--aa497c50-c4b3-4df7-9069-a00d10db11f7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6cfc3f-4a67-4b29-801c-9edaf2a37b31", "sighting_of_ref": "indicator--9144217f-7ed3-48d7-84d6-c40c28745391", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1ce7ea-7407-49b5-8da7-40560e477f79", "sighting_of_ref": "indicator--037ea5c2-3fbc-4c8e-94ab-09e1622eca56", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c992e38b-1e0c-446a-94f7-cb032ad09177", "sighting_of_ref": "indicator--6f57e88f-04db-4977-b701-8f5b0a65a000", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b86a9523-f5d4-4a2e-97b4-9dad2710f163", "sighting_of_ref": "indicator--be8953a2-2c0d-4995-ad7b-5ece49d2c8df", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cb6da41-d6d8-42b2-8dee-67b1943979ed", "sighting_of_ref": "indicator--deef18f1-e1bb-42de-8ab6-a2558d984484", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcfb1fdd-da35-4b81-b11a-6289fc581e30", "sighting_of_ref": "indicator--9f5dbfa2-9ac4-427b-b513-df18052d02da", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a80faf-f2d1-4aa4-a75a-9ede98ee1233", "sighting_of_ref": "indicator--d1e6f9b6-93c2-4397-bf94-b8d1449faa53", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317be797-4a88-4649-a841-009f5cd3eb7d", "sighting_of_ref": "indicator--d1e6f9b6-93c2-4397-bf94-b8d1449faa53", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86bcce0a-77a7-4d27-aefb-8b387f923b63", "sighting_of_ref": "indicator--497ae860-5b64-46f6-97f3-e15596b3da6e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1e9c8d-c7c3-4c40-b298-c9d92e9ae071", "sighting_of_ref": "indicator--ecb3105e-71d2-4313-ae26-9b283b12e4af", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7fedb50-39fc-4ab5-a368-3e3b01156965", "sighting_of_ref": "indicator--0af4ece2-0613-4eb2-ade4-516496acc03a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aed74eb-36a4-4b54-9807-0fbfb43d42f7", "sighting_of_ref": "indicator--9abc0bd7-6346-4f4b-b33f-a61c3c82890b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886c4ba3-ea48-4c23-8cd2-8eb63bebf3fa", "sighting_of_ref": "indicator--717c6d26-33a7-4f6c-a15a-24c1e457ab46", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361c383e-2ec8-4d65-a1ed-a1e03e02cbbb", "sighting_of_ref": "indicator--ec8089a7-7412-4784-9dc0-1d98808e788d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4515c995-db36-4ed5-b76d-265b901ce826", "sighting_of_ref": "indicator--6cb4732f-88b6-47ea-ad18-2dd2f9e795da", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ff0f2ea-9f08-4783-a64f-4a9eeeb18da7", "sighting_of_ref": "indicator--303b9c8d-f5b4-4005-a56b-4c4860e58190", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac33bd76-2ed3-4d5c-b820-96cb3d3aebfa", "sighting_of_ref": "indicator--303b9c8d-f5b4-4005-a56b-4c4860e58190", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c60e3a1-6758-40b7-a9f6-197fc92a4340", "sighting_of_ref": "indicator--303b9c8d-f5b4-4005-a56b-4c4860e58190", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c531ad81-b562-4be7-b9a8-875876714097", "sighting_of_ref": "indicator--2af5e113-8c3a-4902-83b3-139acbedc8be", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2915739-dbb3-4ed1-92d2-9d956886c6b2", "sighting_of_ref": "indicator--fe1d727f-456e-4550-9057-bc36022d5137", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79863c9c-6e86-449f-9a73-ec9c6f0da736", "sighting_of_ref": "indicator--3574bd97-defa-4d82-815a-5bc15e3499b4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a97a41d-d100-4f6f-a531-295550ad5538", "sighting_of_ref": "indicator--0113e420-6f68-4134-9851-cb834ebd52cb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--916648bd-d89d-496d-8021-8f58d71439a2", "sighting_of_ref": "indicator--3ec92178-2e42-4147-a047-a6e628ca3d53", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7846393-12cd-4e16-8a91-4ffdbf8d9107", "sighting_of_ref": "indicator--c6cc3670-fbfa-4a9c-967c-f6c1485d0f2a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02e7dc5-ba7e-473c-a045-84bb9bc7e36d", "sighting_of_ref": "indicator--0ac61133-8d6c-420e-9dae-490a40645e9a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b78862-3aee-4fff-b820-dc2aba251f5d", "sighting_of_ref": "indicator--0ac61133-8d6c-420e-9dae-490a40645e9a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf909917-422d-4f6b-b162-b2ed8e13cbf8", "sighting_of_ref": "indicator--0ac61133-8d6c-420e-9dae-490a40645e9a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8085c1c-5479-4164-a580-ca520ad51296", "sighting_of_ref": "indicator--fd64c0eb-d9d2-41d5-9fea-7a5a08a626e1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f33652-00aa-4e43-864c-9a11c613f6e5", "sighting_of_ref": "indicator--fd64c0eb-d9d2-41d5-9fea-7a5a08a626e1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f669bb4-2001-4bac-a625-4a1f46cbace4", "sighting_of_ref": "indicator--fd64c0eb-d9d2-41d5-9fea-7a5a08a626e1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d819b270-3ded-49b2-8451-31bc7f27bf51", "sighting_of_ref": "indicator--7ba53467-4a16-414a-bb4f-edc08d3baf51", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34aca173-5556-47b6-bdf4-1e73e4201a3e", "sighting_of_ref": "indicator--7ba53467-4a16-414a-bb4f-edc08d3baf51", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f71085a-491f-4a4f-b78d-cdcb061ff4da", "sighting_of_ref": "indicator--7ba53467-4a16-414a-bb4f-edc08d3baf51", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b3fbee-bc94-4398-80db-2cfd036fa410", "sighting_of_ref": "indicator--733a7e25-81ce-40f8-970c-f0c0781131d2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285a71ac-efd4-4425-9e9c-ada2b9fea7a5", "sighting_of_ref": "indicator--733a7e25-81ce-40f8-970c-f0c0781131d2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5fa3aa5-5b5c-47f7-9ebc-1cdbaf23432b", "sighting_of_ref": "indicator--733a7e25-81ce-40f8-970c-f0c0781131d2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--082fab9d-3269-4d0f-8c7d-40ec498c05da", "sighting_of_ref": "indicator--9d5b23d2-44f3-44dd-8e46-408386b18771", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a6f9b6-1be6-4437-8aee-6d4e7173c1e3", "sighting_of_ref": "indicator--9d5b23d2-44f3-44dd-8e46-408386b18771", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a66f97fa-163e-4325-9245-679184eefc02", "sighting_of_ref": "indicator--9d5b23d2-44f3-44dd-8e46-408386b18771", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3681bddd-2a9c-4f66-a42d-d5a789410f8a", "sighting_of_ref": "indicator--75bba04d-9a92-4541-9b27-ba02b765a535", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5829a272-dff0-48f6-bb99-c6fa3f8a6ef0", "sighting_of_ref": "indicator--75bba04d-9a92-4541-9b27-ba02b765a535", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a90e4861-4d86-4814-b104-1e17345752a7", "sighting_of_ref": "indicator--75bba04d-9a92-4541-9b27-ba02b765a535", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d15257-d725-4eb1-9bc2-97f85ae051f0", "sighting_of_ref": "indicator--9baa85a2-beeb-4c26-93b8-e52fff012763", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71eef3f-fdc2-49d2-80b5-2b58060f9df6", "sighting_of_ref": "indicator--9baa85a2-beeb-4c26-93b8-e52fff012763", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f87044-b718-4f00-b9d4-f32c043be2bc", "sighting_of_ref": "indicator--9baa85a2-beeb-4c26-93b8-e52fff012763", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d1f471f-4916-46d4-9b00-2ad585d406f0", "sighting_of_ref": "indicator--ac08c541-64d4-4f54-9bce-605f809cc898", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd4d7171-9ae7-4f31-a9aa-1751b2261d4c", "sighting_of_ref": "indicator--ac08c541-64d4-4f54-9bce-605f809cc898", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a89e02b4-b3a6-47cf-9f26-59a9b8c8443c", "sighting_of_ref": "indicator--ac08c541-64d4-4f54-9bce-605f809cc898", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34e7f32-accd-405b-a75b-271cd8b25402", "sighting_of_ref": "indicator--dbb8d3e5-6b2e-42b1-ac28-724259f10959", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5386deff-cfc6-4d17-ab59-6882831b64f4", "sighting_of_ref": "indicator--dbb8d3e5-6b2e-42b1-ac28-724259f10959", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce91c8ae-7f16-4bf7-b362-c5c94384c275", "sighting_of_ref": "indicator--dbb8d3e5-6b2e-42b1-ac28-724259f10959", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5029005-f2ea-49ce-a28a-b0caf061dc45", "sighting_of_ref": "indicator--64864fc5-b222-4ac5-ac75-4b75dcdf9d07", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154f1593-f3eb-4bb2-a73b-68ad5fef2b9e", "sighting_of_ref": "indicator--64864fc5-b222-4ac5-ac75-4b75dcdf9d07", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e9789f-1a5a-468a-ac66-03d8d5bbfb5a", "sighting_of_ref": "indicator--64864fc5-b222-4ac5-ac75-4b75dcdf9d07", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431adbd0-f024-4713-8346-f7b842d4f45c", "sighting_of_ref": "indicator--90cdc056-3726-4a84-be16-d337c584b3a7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591d8552-8271-4423-9cda-710b0a83b7c8", "sighting_of_ref": "indicator--90cdc056-3726-4a84-be16-d337c584b3a7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ca3b8d-41ae-4102-bcfe-d91bd4a60a7d", "sighting_of_ref": "indicator--07035ba6-d4c1-4451-b4f8-c29cb5b5d16c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bafafa1-02af-47b5-b4e0-e57406990235", "sighting_of_ref": "indicator--07035ba6-d4c1-4451-b4f8-c29cb5b5d16c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb3fee0-29c1-4295-a443-e2c3ba17780a", "sighting_of_ref": "indicator--07035ba6-d4c1-4451-b4f8-c29cb5b5d16c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa2e66e-2942-474e-b6b0-385766f765fe", "sighting_of_ref": "indicator--5f1bdfb3-bc07-4811-93b1-371748d4a410", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97061ef0-86c4-4b7d-b014-ed156e15913e", "sighting_of_ref": "indicator--5f1bdfb3-bc07-4811-93b1-371748d4a410", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39d4d74-5bf5-4c2a-a50f-28a5977fe8d5", "sighting_of_ref": "indicator--5f1bdfb3-bc07-4811-93b1-371748d4a410", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c7d25b-db43-4a8f-85b4-e69c1de668e1", "sighting_of_ref": "indicator--3f5b250f-fa0f-4e49-8fd6-90105fdba81b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--997dde83-1841-4bd6-9a42-56242709d638", "sighting_of_ref": "indicator--3f5b250f-fa0f-4e49-8fd6-90105fdba81b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f81a1560-5de7-4e35-a0d1-6b05cffaede2", "sighting_of_ref": "indicator--3f5b250f-fa0f-4e49-8fd6-90105fdba81b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba46d51b-f7de-4e22-9de3-6c7daa4a712c", "sighting_of_ref": "indicator--1667801c-1dd4-49ab-89b9-c1b4d67227d7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ff2da6-ee09-4d9a-bcd4-2b5ef953dc64", "sighting_of_ref": "indicator--1667801c-1dd4-49ab-89b9-c1b4d67227d7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ffb7754-dbdd-4098-b692-0801efd2cc43", "sighting_of_ref": "indicator--1667801c-1dd4-49ab-89b9-c1b4d67227d7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b7f0bf6-d60e-4baf-ab4c-54c0aa6ba695", "sighting_of_ref": "indicator--cc3ce091-55e0-4029-8b06-67c1b9802567", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bdb3930-8b57-4a6b-bfc7-a766fb087d39", "sighting_of_ref": "indicator--cc3ce091-55e0-4029-8b06-67c1b9802567", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a24079-7594-470e-9452-c9d8301ef4b1", "sighting_of_ref": "indicator--cc3ce091-55e0-4029-8b06-67c1b9802567", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d2f2de-8e4d-40c5-9b86-fc665062bf98", "sighting_of_ref": "indicator--1c81fdd2-229d-4bcc-82e0-cc3bbe5949cc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c93db7e-f797-4a84-b4e9-b050520779e6", "sighting_of_ref": "indicator--b5227c9d-d914-4dbd-ab81-d10dfec20504", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2b556a-db12-4bda-9103-020e6f7af0d2", "sighting_of_ref": "indicator--4478e2fe-347b-453d-aaf9-2609a3e05aa9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2536f43-17f2-45fa-a764-3799927dae9f", "sighting_of_ref": "indicator--2ce7aac7-9f7a-4477-a18d-06712f2ddc8e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae29d381-e9a2-4316-8beb-37741cc83acc", "sighting_of_ref": "indicator--13c09b94-161b-4723-a054-ab8ba4270d3c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3d3c92a-6765-411c-a5bf-a0d0b94adfcf", "sighting_of_ref": "indicator--403a2542-6b56-4d13-8a78-141eecc061b0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02cf4278-f3d6-425e-9844-5bcadc1ea116", "sighting_of_ref": "indicator--3277ed8a-6048-489c-84ae-447b513bfd7a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b01afb-19af-44e2-a008-8cff80d1e954", "sighting_of_ref": "indicator--07e352f9-abf4-4074-b9d6-20183704d43d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d9d20f-d755-4e39-a206-16ad3ce68d13", "sighting_of_ref": "indicator--53c95740-ddac-483d-8768-3e7de6241b73", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e3690ad-1e11-4e57-b4d2-a2331d3789df", "sighting_of_ref": "indicator--8a519b0e-da44-4ff1-addf-51bdf96ecce1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218a853d-8bfb-4216-85a7-713f6b0308ba", "sighting_of_ref": "indicator--a41d7be5-9d3c-477c-9264-a0370d29cff9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f019c9dc-c343-4e3a-857c-30bf75eb4c87", "sighting_of_ref": "indicator--333efd3d-94fb-4fab-88e8-e2b57e86b62e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b43334-08cc-44be-89eb-c36d2a4e3a92", "sighting_of_ref": "indicator--24e7a3a3-28b3-4a7f-afcf-b214ca8208dc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e716dfa5-ac53-41f1-ae61-e3a378e9dd4c", "sighting_of_ref": "indicator--8272c964-a1e3-48fc-909c-cee4b797ce23", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d11e98-050f-4142-b7a8-fefae9f14acf", "sighting_of_ref": "indicator--954a71db-3239-426a-86bc-c6cd4f467c6a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99867bfd-015e-46cd-a414-f57eee91a63c", "sighting_of_ref": "indicator--b067c18d-0952-4c6a-86ff-cc5cd5b9c9f0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529d8a77-517f-4fcf-8949-c53e94aa678d", "sighting_of_ref": "indicator--1622a1e2-9e7c-465e-a811-6899a3aa0d11", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93502197-d89d-49bc-9ae2-865a27ae92e5", "sighting_of_ref": "indicator--fab3650f-1d18-4b98-b5cf-e059459007be", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abca3ca8-4fb9-4858-ae96-167323c414db", "sighting_of_ref": "indicator--0e7548f0-7c17-41b3-9016-6ef8bf501b28", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc826d47-0a23-4dbb-9145-3c93f3c625bf", "sighting_of_ref": "indicator--df8f7cad-b710-4b79-9cd1-103d58e96d8f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc87dba-6667-4fd6-83a9-c41ae0228d5a", "sighting_of_ref": "indicator--0b977cab-4a5f-42ce-ba40-56aa342b18a8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b42dcde-460f-47db-b0a8-5f1708547aff", "sighting_of_ref": "indicator--86d4b8c7-2a7d-4859-9684-d050fd15d186", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f488970-570f-47e2-a463-f7ba4f435c0c", "sighting_of_ref": "indicator--ed42a65e-38a2-4ca5-980a-44e731040fd8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013f5cfa-b0bd-4ef9-9f1f-db8e03699fe4", "sighting_of_ref": "indicator--29962536-0fd1-4394-9423-f268d9088eee", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69532f04-bc62-4e82-9f60-1166da8771fd", "sighting_of_ref": "indicator--04ffbde2-ba7f-40f1-bbe5-b579571a9d92", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc2d079-7cb0-4bc6-ad70-463d10da8a83", "sighting_of_ref": "indicator--54e98972-696e-485e-8a29-32b007c9f30a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e273900-1629-4451-87ee-e09729d01818", "sighting_of_ref": "indicator--bbbed504-e311-41a7-b315-791cbfa42254", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d958c0fd-30b1-4824-89e7-f15a2171b8f7", "sighting_of_ref": "indicator--bbbed504-e311-41a7-b315-791cbfa42254", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91301d5-085b-428f-9a45-794ea8ae6909", "sighting_of_ref": "indicator--bbbed504-e311-41a7-b315-791cbfa42254", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c7d165-e8f1-4171-a54d-76df784d2926", "sighting_of_ref": "indicator--3975f6bb-e282-4c3c-a7c2-973dbcc7990d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b75d67-3191-409b-92df-7376074c7960", "sighting_of_ref": "indicator--576defc6-69b3-4358-865e-b1d8c433b37a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8afcb5b9-ff1d-4f74-a7c9-7fdb4c125a69", "sighting_of_ref": "indicator--576defc6-69b3-4358-865e-b1d8c433b37a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0958da03-2ac8-4b36-a546-40f0e41716a4", "sighting_of_ref": "indicator--60942a5f-82da-4566-bd96-1f2e3432e584", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a88846a6-c0db-49cf-ac57-87663ee43834", "sighting_of_ref": "indicator--60942a5f-82da-4566-bd96-1f2e3432e584", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c24468-460b-4410-b3e9-0e37fbff45b6", "sighting_of_ref": "indicator--60942a5f-82da-4566-bd96-1f2e3432e584", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62923947-0bc1-4786-9eb1-e12914712b6d", "sighting_of_ref": "indicator--6c8de5ee-c793-4498-ae0a-ff9c85b9d7b7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71cde7cc-694c-45de-920c-c32bfd7211b5", "sighting_of_ref": "indicator--6c8de5ee-c793-4498-ae0a-ff9c85b9d7b7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d41754-5882-41d3-bf20-6580ab7f6b05", "sighting_of_ref": "indicator--09cfeaf8-17a0-4cab-8a2e-e1015d95e322", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--571c29d5-9e5c-4e1c-a635-9ed8641f79ec", "sighting_of_ref": "indicator--09cfeaf8-17a0-4cab-8a2e-e1015d95e322", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344aece3-408a-48c3-ad52-ddfcb10f34a4", "sighting_of_ref": "indicator--56fbff11-4617-4e6b-b09c-1ebe75488609", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5c1f07-3af3-4852-95b3-4676ffb9705b", "sighting_of_ref": "indicator--56fbff11-4617-4e6b-b09c-1ebe75488609", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87595991-51d7-4a13-b8b9-575916639b50", "sighting_of_ref": "indicator--6c47dcb4-256a-4d3f-9df0-cb14b6dddc35", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf42c4b-4636-4877-85e3-7daa3f3167b0", "sighting_of_ref": "indicator--6c47dcb4-256a-4d3f-9df0-cb14b6dddc35", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efde13ec-5ce2-48b8-ba91-970d4aa34434", "sighting_of_ref": "indicator--6c47dcb4-256a-4d3f-9df0-cb14b6dddc35", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f42cae0d-48fd-4267-8f23-c6d8a5c22bbb", "sighting_of_ref": "indicator--08c417d5-d953-4b2a-b63d-ac31532560a2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1775b3ee-23ad-49a7-b091-8d019a0a7a28", "sighting_of_ref": "indicator--08c417d5-d953-4b2a-b63d-ac31532560a2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5091a71f-4e27-4ae0-a641-b7cfa4a28071", "sighting_of_ref": "indicator--08c417d5-d953-4b2a-b63d-ac31532560a2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e695da8-a5c4-407e-bb33-3e179d927490", "sighting_of_ref": "indicator--c98c66c8-75ad-4e06-8bfd-478620b3795b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--021a8d80-b5a6-4794-85dc-d6ab4b321bba", "sighting_of_ref": "indicator--c98c66c8-75ad-4e06-8bfd-478620b3795b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261a9de0-d624-4a22-b847-10f713f910b6", "sighting_of_ref": "indicator--c98c66c8-75ad-4e06-8bfd-478620b3795b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--466917a0-0257-4410-a13b-289152589e52", "sighting_of_ref": "indicator--87cda4e7-e874-4917-b5b8-f4e60ccbf3f5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1414a761-4f0a-4d36-b957-ce02ff4a10c5", "sighting_of_ref": "indicator--87cda4e7-e874-4917-b5b8-f4e60ccbf3f5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4d6b57-f859-4826-bd7f-767a0e882ac2", "sighting_of_ref": "indicator--5b1fd744-6a42-43fd-8802-7314934a72fa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44cc454a-544c-4d66-a0d6-e6ec4ebad49f", "sighting_of_ref": "indicator--5b1fd744-6a42-43fd-8802-7314934a72fa", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d8ec0d-1390-4e4c-b27f-0f3c49e18a27", "sighting_of_ref": "indicator--c44c7f48-f565-4e62-8dea-15b5ab286346", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49956419-d9f5-41ec-afa5-33b5a9dbf65b", "sighting_of_ref": "indicator--e1c31eee-a5c0-4baf-bb40-1c2c2a67d07c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf4115b-2052-4768-8dcf-416ac655fe6b", "sighting_of_ref": "indicator--d2a2ed3a-61b0-4272-b528-cb52d870764e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--effdb55b-e53e-4d03-844b-d173a0055a19", "sighting_of_ref": "indicator--d2a2ed3a-61b0-4272-b528-cb52d870764e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f19c7ee2-ddef-4e63-9a2a-7689a8cbc362", "sighting_of_ref": "indicator--910baa89-1b91-439d-9417-57d9b5665263", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567fe0fb-149e-4eea-b7b1-52ba4837ce68", "sighting_of_ref": "indicator--910baa89-1b91-439d-9417-57d9b5665263", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e614068-6507-4467-9dd1-beec6f83157e", "sighting_of_ref": "indicator--b24f5956-ae91-4319-a3d0-cade194f9310", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422a01ae-63bf-42b7-992d-26d9bbff208d", "sighting_of_ref": "indicator--ed840bb4-77fc-4d4e-b222-3b859b6dc6af", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66ad877-c005-49cf-b619-8e35f50404a2", "sighting_of_ref": "indicator--5f110557-e31b-421d-a835-e1a598e2e66e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d31ca8-2c70-4538-b750-01e9e6f7f4e1", "sighting_of_ref": "indicator--4df249f6-7df8-4214-ab9a-f10be26781e1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb6270f-01cd-419b-9f1f-1b16ac12979c", "sighting_of_ref": "indicator--614513b7-892c-4e5a-947b-9f844d4bee1a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99313afb-4bbb-46b6-949e-48aead78c474", "sighting_of_ref": "indicator--d92277b4-1820-4f0b-8648-8575b86e9a32", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5f956c-157c-4bc5-9456-8b09826882a8", "sighting_of_ref": "indicator--1e52a993-9a96-4673-8218-3a7d4a1e71c0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d9576bd-0bcd-4136-9324-ac2672d24971", "sighting_of_ref": "indicator--6737f203-8aed-42b1-b8d5-887dafe2acd5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592be05d-86bf-491c-978c-c3428610a254", "sighting_of_ref": "indicator--2b446399-0fc3-4219-951a-6427e1dca3e0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e901912-ca0b-43e0-8aed-fbce51e8a388", "sighting_of_ref": "indicator--1aabdd62-5f68-405c-82eb-a974b02e810e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e9126a-a59b-41f6-998f-e5d7fe532da1", "sighting_of_ref": "indicator--1aabdd62-5f68-405c-82eb-a974b02e810e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790d401e-651a-4087-ad2e-208fee3f8e98", "sighting_of_ref": "indicator--1aabdd62-5f68-405c-82eb-a974b02e810e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4dfee7e-2e9b-4c18-9ab5-ce8b41b43dd3", "sighting_of_ref": "indicator--8d507b95-6824-46b6-abf0-87512590f0e3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de6804bd-0db3-4874-96b4-108e8e9485c6", "sighting_of_ref": "indicator--9f87dea0-d998-4d27-aab1-cb70af2c854b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e72f0c-f419-486a-ac06-b2b29a20cc36", "sighting_of_ref": "indicator--3d4d8280-64e5-444a-b199-29f8e9569c1f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--807984a5-1008-4772-8e1b-c5bd39ed8905", "sighting_of_ref": "indicator--c697d574-791b-40d6-b616-c799f06064bd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce673673-769f-4006-a8c3-8562a2f1d6d9", "sighting_of_ref": "indicator--4701fa71-d4fb-412d-8644-9a55d0e5860a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94429be7-0c50-413a-8d70-61ccbf7768b6", "sighting_of_ref": "indicator--f231c572-6e55-4adb-8c6f-7f007588bb2f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e546730-b57b-432f-a28d-70d0c410e0ee", "sighting_of_ref": "indicator--cf7004a1-7d66-4441-82f4-7c0f7f7e5d8e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d25ce16-a6b3-4801-bdba-8746fef7ba8c", "sighting_of_ref": "indicator--a1b61fa4-781a-4ef0-9b4f-70c20891fe9b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e6d296-40be-471e-9c74-454664864801", "sighting_of_ref": "indicator--f7f64140-a72b-4bbe-98df-57af6ea4d8de", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2231392e-20dc-49cb-943b-96b9bc2d5267", "sighting_of_ref": "indicator--60978f87-b3ed-474d-8f0e-0e2774e7d35e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0aef0a-090e-4f33-91ce-b0b8c2595440", "sighting_of_ref": "indicator--868971aa-2466-45d1-9354-729e17fa28ea", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39259ca9-dede-4548-a8f5-0d8251277e0e", "sighting_of_ref": "indicator--f04c02b8-c0c6-4692-aa81-5282bae27177", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91a56f4-6637-4bcd-b38d-86fac6da772e", "sighting_of_ref": "indicator--f04c02b8-c0c6-4692-aa81-5282bae27177", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c5b78cd-4a49-4a00-9ca9-19f55f6ba218", "sighting_of_ref": "indicator--60435276-9955-4930-a27f-88c906c1077f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7afe4f-a4f5-4aba-b6e5-97831e6419aa", "sighting_of_ref": "indicator--60435276-9955-4930-a27f-88c906c1077f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20cc8cd1-6c4f-493c-8de8-c544ba564f8c", "sighting_of_ref": "indicator--ceff3722-d6de-4bbf-8419-7643ecbe0bce", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62123f7f-e185-4e78-93cf-2833dfb52025", "sighting_of_ref": "indicator--874f3acb-f2bd-4dfe-b2de-9ac00b227e26", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b0dff4-43b2-4402-ba0e-333e845d2741", "sighting_of_ref": "indicator--c39e0911-972e-4bdf-a3c0-133c3f310ac1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa071716-e9cf-4dc1-b4c1-5ddf7eb73aad", "sighting_of_ref": "indicator--43bec406-d036-434c-b04b-03bc63c021c9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9edd0e59-c44c-4d2c-8a30-8bea58ab902b", "sighting_of_ref": "indicator--40e40a27-eb61-4989-929f-496a4d16316b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc761ac3-cf18-4788-a70c-a690a5280804", "sighting_of_ref": "indicator--be4bcaf6-1ada-4ece-91ae-fcb63f87909e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c545fa4-1cc8-4fc2-9a98-093bd89638fb", "sighting_of_ref": "indicator--b013bbde-fe8d-4f1e-9f44-a6fc7ab0b7b0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b345257f-ea0a-4f99-9cee-2d41be7b40b9", "sighting_of_ref": "indicator--6bd390bb-6e9b-4267-a432-65d6efbb079c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4ae239-8af2-4b2b-a012-84a831d0ddbb", "sighting_of_ref": "indicator--6bd390bb-6e9b-4267-a432-65d6efbb079c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e43733-8460-4a3f-8287-8442f5b316fb", "sighting_of_ref": "indicator--6bd390bb-6e9b-4267-a432-65d6efbb079c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5eb9f8b-ccd8-4eff-8d2a-55ce5524b9ce", "sighting_of_ref": "indicator--5c7724f5-0358-44fa-8b46-a4ce90456a1b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5c3bee-b365-45f1-bcf6-18b6aa25efe8", "sighting_of_ref": "indicator--5c7724f5-0358-44fa-8b46-a4ce90456a1b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa568ef-7bf1-4d2c-ab94-fcee8252c309", "sighting_of_ref": "indicator--5c7724f5-0358-44fa-8b46-a4ce90456a1b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10baad5e-82fa-478f-a0f7-7a4ebd23dc20", "sighting_of_ref": "indicator--21fd93e0-7ade-42e0-9eb6-d624c75a04cb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9c1d37-6936-4a99-847b-e8dffad55e55", "sighting_of_ref": "indicator--21fd93e0-7ade-42e0-9eb6-d624c75a04cb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e94a63-373c-417c-9473-2ff6e5fb823d", "sighting_of_ref": "indicator--21fd93e0-7ade-42e0-9eb6-d624c75a04cb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e37ce84-b359-47e6-8ef0-e8f425d1be0c", "sighting_of_ref": "indicator--55e51d5b-c9bb-4a91-b0af-25c003bd6c1a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0fc1d23-d6c4-4351-97f5-b6d0dad99ea6", "sighting_of_ref": "indicator--55e51d5b-c9bb-4a91-b0af-25c003bd6c1a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d3da6bb-c4ed-4e6e-89e7-90197f598cbd", "sighting_of_ref": "indicator--55e51d5b-c9bb-4a91-b0af-25c003bd6c1a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790fb17b-be41-45b0-914f-2fc6bc4dc971", "sighting_of_ref": "indicator--b72a271d-2dc1-4e92-8bcf-03125d758d7b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e110caf8-ad77-4c50-a958-70d4f83669a0", "sighting_of_ref": "indicator--b72a271d-2dc1-4e92-8bcf-03125d758d7b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb604c18-6463-4e5a-8f26-b7c53ea27909", "sighting_of_ref": "indicator--b72a271d-2dc1-4e92-8bcf-03125d758d7b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f5f1c0-fde8-4ac8-a973-11721fb5adc8", "sighting_of_ref": "indicator--99c437f7-8b64-44ff-b033-93f3f9fdf3c7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca285b4-ded5-4370-9fad-3416dfd41b5b", "sighting_of_ref": "indicator--99c437f7-8b64-44ff-b033-93f3f9fdf3c7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16be3bbd-854b-4a65-a27b-ceac5b44464f", "sighting_of_ref": "indicator--99c437f7-8b64-44ff-b033-93f3f9fdf3c7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b584ad-1a5f-47bc-aae5-c648fd348efa", "sighting_of_ref": "indicator--cd53e3fd-0ba8-4187-b9ed-94f4c563ce8a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5991cd5-c6d1-4f1f-b75a-da70dd4d8a63", "sighting_of_ref": "indicator--cd53e3fd-0ba8-4187-b9ed-94f4c563ce8a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1856199-077b-4313-bcde-0dbd7e753140", "sighting_of_ref": "indicator--cd53e3fd-0ba8-4187-b9ed-94f4c563ce8a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93bcf04-5dfb-4e3e-b855-4d3efccb2960", "sighting_of_ref": "indicator--9bcbcf4c-06d3-46ac-955d-6fb610d94f9c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ac5469-1d6a-4876-9dd0-fc836c772aa3", "sighting_of_ref": "indicator--9bcbcf4c-06d3-46ac-955d-6fb610d94f9c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f5aa425-663e-4530-a420-b5f8bcd54877", "sighting_of_ref": "indicator--9bcbcf4c-06d3-46ac-955d-6fb610d94f9c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75088b0-e683-43f5-b25f-d4927674f1b9", "sighting_of_ref": "indicator--98fcd2f6-6ea7-422a-bc76-40a2f65d02a8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d25a3a3-f80e-4c3c-ba99-84ca24ad9636", "sighting_of_ref": "indicator--89370fcc-785e-48a2-bcad-b391bc88b1ed", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03301a9a-88e9-4b2b-b735-41149231bb0a", "sighting_of_ref": "indicator--2a20e950-67a9-4394-8f56-56c776f29df2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f362125c-8ad9-4675-8a02-0c132412becc", "sighting_of_ref": "indicator--a24badb8-4a86-41c2-89d7-df67f4934719", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc358e53-02eb-433a-8a64-24d6efe50524", "sighting_of_ref": "indicator--226a17c1-3e07-4c59-b163-ad8392a7356a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c00feff-816e-4d40-bbfd-b7380f1f6f5b", "sighting_of_ref": "indicator--226a17c1-3e07-4c59-b163-ad8392a7356a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a06da5b5-184d-4e5e-92c4-48d987149636", "sighting_of_ref": "indicator--a55afbe3-698e-4c55-8f72-8798078a1716", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34895983-ed94-41bc-ae70-7942384a379f", "sighting_of_ref": "indicator--c054524c-a2bc-46c7-94d6-a41f5196d4a0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e8dde0-f382-49f5-b4bb-25c0bf10003c", "sighting_of_ref": "indicator--25bc2083-b800-49f6-bade-68fea5657e48", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ace0d3f-b70a-4ffd-8342-a192fdcbb51d", "sighting_of_ref": "indicator--c410060a-2d4e-4875-9181-2c94331b11d2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--174b257f-a9f4-4f99-82a9-29f6518f7fa9", "sighting_of_ref": "indicator--e6c8e179-905c-49f7-8dfc-78286f02818b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2338e37-ac0a-4651-a4dd-fb091bc540ab", "sighting_of_ref": "indicator--f3abd5c8-0e46-4e9d-bf20-ce0f89874075", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2423bb40-cee0-4ab3-bc1e-fad96448e45b", "sighting_of_ref": "indicator--d49edd35-92f1-4f4c-8d39-711a67683372", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9153d3-f3f0-4644-b952-18f8b9c60fd5", "sighting_of_ref": "indicator--77045e82-4b99-49c1-85f2-5610638a720c", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3824fd2-e3ab-4622-bbed-3dfc5aebba4e", "sighting_of_ref": "indicator--d6c25e00-3ab6-4466-b14e-6f555a88db87", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b088e5-b469-463c-ab57-867b21ff5e49", "sighting_of_ref": "indicator--f86fad21-cbe6-4f05-bd5b-30642417c4f0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e7c76e-b0fb-41ac-b0f8-90d2884ebbf8", "sighting_of_ref": "indicator--98c00761-c2ea-4ec7-b793-5cfcdf5ff6ae", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f42e15-af53-400b-a1ae-ab0949d25c52", "sighting_of_ref": "indicator--23131823-6a59-4519-ae73-ca21b7c95c8b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77e4d07-8c8d-4a32-9ce3-7928ef87a261", "sighting_of_ref": "indicator--31f7dd05-aa81-4a5b-8fe6-e4b8b40c7651", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc2361fd-a6b6-4d9d-bff2-64967183618a", "sighting_of_ref": "indicator--e6d7e8a1-f017-47f9-9b86-b6fc25cda535", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b0fa84c-cc8f-400a-bb24-b2958bb447c7", "sighting_of_ref": "indicator--7fa3c49e-e5bf-4a6c-a74b-92610cbb57bb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b7dd7e-1b89-4341-82c5-686e66bb3c0d", "sighting_of_ref": "indicator--68fa8585-af2a-46d0-b40a-2df2e8f4b0d0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe6bb88-a656-4e59-889a-b4591fb9a5e1", "sighting_of_ref": "indicator--7933cf85-e96a-419b-a946-5a2bbd0eb97f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a36467f5-f6fe-4443-b9ef-5bf787823add", "sighting_of_ref": "indicator--ef3f2cf5-53fb-415c-8a1b-fcda52448894", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c700c540-78ab-4cda-89f7-50dc4a0427cd", "sighting_of_ref": "indicator--ef3f2cf5-53fb-415c-8a1b-fcda52448894", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1596f68-09a3-4a8c-8eb4-b8d951d1cfef", "sighting_of_ref": "indicator--1cfebb67-247c-4af0-a384-c112fc3babb9", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778c4b11-7d72-4c72-8b18-63d359c14cef", "sighting_of_ref": "indicator--00189da9-cfb4-48f5-900d-442326e3390b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ac3623-f849-405f-b756-6b2d4f6549e1", "sighting_of_ref": "indicator--bdb3d07b-0da7-488f-a0c9-ba589664e3e9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da155c1a-5c22-4ae6-ab85-0a6f8280686b", "sighting_of_ref": "indicator--b32f139f-5817-4e5d-afa4-eacb61515120", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46824f0-86bc-4b88-aff7-6a6aa9de54fb", "sighting_of_ref": "indicator--9d71b3b0-5c85-46db-b6a3-4addb7282626", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d97632-f530-41f5-a8e6-048d268566b9", "sighting_of_ref": "indicator--1b934736-d9ea-4b19-832d-43629af8960b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7107dd5-535d-4c76-8042-60c5ea2c1b79", "sighting_of_ref": "indicator--86528673-76a2-483b-8ecf-cb6526df518a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02730dd-0105-4733-9939-fc6f96b3611f", "sighting_of_ref": "indicator--5a63f62d-a5ce-49f4-ba1d-472ff2be8de6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205899d0-44a1-4d25-a8b6-6e4c0d32857e", "sighting_of_ref": "indicator--f8497be5-0c9d-4446-98ac-c2ed76fec9fa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--106d9551-957a-4a65-b338-14f844bba056", "sighting_of_ref": "indicator--9d4da202-8ede-48e2-92f8-bf61701fc7fe", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a4b6d99-185f-41b8-a512-8abbc5281bb1", "sighting_of_ref": "indicator--ecbde677-ab1f-465c-b8ae-50076c0c42d6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8699429-0a82-4d7f-bcdc-07d275a868ed", "sighting_of_ref": "indicator--fca97f22-3601-48af-bb74-ab15cb3e34ed", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a4b1a9-62bf-4fc9-9dcd-d8f911ef74db", "sighting_of_ref": "indicator--83f663b7-3479-42c7-93e1-d1f7119ea107", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a50185-2ef6-43e1-96d6-d430a46077a1", "sighting_of_ref": "indicator--bcdd2252-a167-4fad-a95e-00534fb8d8ae", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c96e2da-0310-403f-9ee5-1cc200c441a1", "sighting_of_ref": "indicator--59829e5b-f373-443a-a95f-5bba20275a81", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615e6570-ef90-4bc2-8d61-60826865728d", "sighting_of_ref": "indicator--f253a1af-40d6-4e48-8eeb-172fa4a866f5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1da8c49-1eba-40c0-873c-1c325691e275", "sighting_of_ref": "indicator--beb545ff-a6fe-4143-888f-07f364d2dc17", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ead204-7d21-4faf-93c8-42d4087237e8", "sighting_of_ref": "indicator--beb545ff-a6fe-4143-888f-07f364d2dc17", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36afb1e4-0de3-49f5-8e5b-29ef841f7587", "sighting_of_ref": "indicator--beb545ff-a6fe-4143-888f-07f364d2dc17", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef6a740-9293-495a-8dc9-2c750284de39", "sighting_of_ref": "indicator--5ac06299-9726-46dc-b4d5-35ae9513048a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c68132-62d9-4994-a64a-979ab6889325", "sighting_of_ref": "indicator--62a94072-e63b-467b-892f-85d921ad20d4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b918dbfd-4be9-460c-9039-5e3a8958ed6b", "sighting_of_ref": "indicator--cfe6cbdf-265d-43f5-a9d8-c9298feca22f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d090f68-cabe-4726-9d9e-53c7f4d98b7f", "sighting_of_ref": "indicator--d9c9a3ce-cdae-4b41-899a-4e94cf1ac33b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb9c87b-e115-4ec7-950a-1b601149140b", "sighting_of_ref": "indicator--ce7a8397-a9af-491b-9ed0-79d4b0d381c6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a770932-fdd6-4ea7-ad53-7d7b80c49425", "sighting_of_ref": "indicator--ce7a8397-a9af-491b-9ed0-79d4b0d381c6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d174af-e946-4c48-ad50-b51940c8f10e", "sighting_of_ref": "indicator--89a56691-192d-4c98-a76c-e5802262727f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e30f240-a907-49a7-844d-03322dba3c82", "sighting_of_ref": "indicator--a8139285-383d-4d3c-9f79-b25d88da0d7b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f7d1c4-b617-4f1c-8ae6-eab43bb9a569", "sighting_of_ref": "indicator--a8139285-383d-4d3c-9f79-b25d88da0d7b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6241b2d-6c1c-4f0c-9bfd-1935e022d6b9", "sighting_of_ref": "indicator--25fbaa7b-a0a2-4c79-b643-a199d3a32522", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b34c3d1d-4a81-4044-83fb-b0425609f087", "sighting_of_ref": "indicator--25fbaa7b-a0a2-4c79-b643-a199d3a32522", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd746071-f8f4-4b8d-83b9-e405aec8f5f8", "sighting_of_ref": "indicator--0b1b0593-7abe-4767-8bb0-c9dedb1ea022", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3469918-f416-4d30-a712-e7765f1f4583", "sighting_of_ref": "indicator--0a129b41-9881-49b8-bdd9-ab6efcbb2efa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c898fe6-14a7-4ce3-9f0f-9d3d1e45976e", "sighting_of_ref": "indicator--66e0be00-4467-472c-81b2-e910ad157c34", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89267888-f691-4ffd-ad2d-8a490ac758db", "sighting_of_ref": "indicator--66e0be00-4467-472c-81b2-e910ad157c34", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a762c21a-0045-4e44-82f2-66e997d5602b", "sighting_of_ref": "indicator--d40ed5bd-f17d-485f-9c1e-1751b57dfaec", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f71c07-5ec6-49f3-9499-67f3151b54ee", "sighting_of_ref": "indicator--d40ed5bd-f17d-485f-9c1e-1751b57dfaec", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cafe93b-0c94-49ae-975b-6fc57b110572", "sighting_of_ref": "indicator--c309105d-ff9b-4512-8345-2b8fe0cd0620", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beca1a8e-db49-4947-a1b6-e144070f878d", "sighting_of_ref": "indicator--19780c89-4fe9-454c-8ca9-6654efc646c8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9189bf14-3396-46d5-af7d-7f99d7bb0508", "sighting_of_ref": "indicator--95153514-b532-498c-b03a-b13ce5c51964", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb60b849-e445-4331-8c2d-c9e18ddb8d96", "sighting_of_ref": "indicator--95153514-b532-498c-b03a-b13ce5c51964", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f983109b-4606-458a-99bc-7f6702d35f35", "sighting_of_ref": "indicator--dcff4689-54d3-44fa-a008-fe1ad3fa617b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57662ddf-8a1c-4fb8-8e4d-caa8eb4198fd", "sighting_of_ref": "indicator--dcff4689-54d3-44fa-a008-fe1ad3fa617b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab4cd2f-9a3c-41f8-a032-7807b608879f", "sighting_of_ref": "indicator--dcff4689-54d3-44fa-a008-fe1ad3fa617b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0edb33-7354-416b-a868-e23939e06f59", "sighting_of_ref": "indicator--c407dedc-aeaa-4086-b2e5-ba0ec4cb6a4b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af03440c-994e-4617-84b5-16fc2d91d968", "sighting_of_ref": "indicator--c407dedc-aeaa-4086-b2e5-ba0ec4cb6a4b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f62b57e-da48-48a0-9e1f-e20dc57a8c9d", "sighting_of_ref": "indicator--c407dedc-aeaa-4086-b2e5-ba0ec4cb6a4b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d88b010-1ca8-4912-9135-20ce3f34aae6", "sighting_of_ref": "indicator--c407dedc-aeaa-4086-b2e5-ba0ec4cb6a4b", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd46caa-9731-460e-a5f8-a9cc181e7777", "sighting_of_ref": "indicator--545b0b8c-1419-4f75-b25f-b068fe7a504c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e253ad8-34d9-4f91-924e-84cb73e02deb", "sighting_of_ref": "indicator--545b0b8c-1419-4f75-b25f-b068fe7a504c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09a56b2-254c-41c2-aed6-87de4f34e08e", "sighting_of_ref": "indicator--545b0b8c-1419-4f75-b25f-b068fe7a504c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd69f23b-97b5-4413-96d5-0c6bf88e4c38", "sighting_of_ref": "indicator--545b0b8c-1419-4f75-b25f-b068fe7a504c", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--595b76b9-61b8-4f89-900b-9616cda17a17", "sighting_of_ref": "indicator--54455008-c987-48ee-8a93-a43be2e1ebd6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c91fc0-9aba-4555-bc6f-b186012da2f6", "sighting_of_ref": "indicator--f2bc441b-dfb5-43b5-b4c1-ef52717c711e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1258af9-78a0-4cf2-9d5e-507cc1cec4f9", "sighting_of_ref": "indicator--497741ea-885b-4bdc-9e86-a1aa994812a2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd883cd-9f49-4cec-9442-c86c214f194f", "sighting_of_ref": "indicator--2cd6ad27-7f86-43ee-a17a-f9303b9ed065", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29565f8e-2389-4b24-8132-26d10557c499", "sighting_of_ref": "indicator--58bc5853-f386-4993-b926-62540e8a064f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8baf1d-bafe-4dd1-b42d-e5db8f07211d", "sighting_of_ref": "indicator--b2c3fbb4-e827-4fa8-83e1-0df87e51ed7d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f13525-59ac-4d4b-ab7a-9a2367139ba6", "sighting_of_ref": "indicator--4c05e757-e9e7-4671-ba92-9059e0f3faa7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9104f487-7eee-4742-8191-4853ed8b439f", "sighting_of_ref": "indicator--b1ec8a86-210a-4078-9808-1b1818633c94", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b2edb6-d186-484d-9f06-bd3e58653ece", "sighting_of_ref": "indicator--b1ec8a86-210a-4078-9808-1b1818633c94", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb7ce27-cfb1-443c-8769-4a0d79b65689", "sighting_of_ref": "indicator--ecb5bf72-eb50-4ac2-9f7b-58e9a78049e3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83ff3b2b-3240-4d58-ae60-2d3062708eb1", "sighting_of_ref": "indicator--ecb5bf72-eb50-4ac2-9f7b-58e9a78049e3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de7d33e-ce54-459f-a02c-6c0cd23b103d", "sighting_of_ref": "indicator--4ced25e5-22b5-43b5-8c06-ceaf14c39ab6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6416feeb-dc3f-4297-8d90-3512c2962279", "sighting_of_ref": "indicator--7e8e37a0-791b-407f-86ef-22f4bf712dde", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a64f1e86-064e-4e8c-872f-cb41773dac52", "sighting_of_ref": "indicator--4758387b-27cc-4bbe-86e7-b014e6d089d9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f50c123-5497-4da1-a878-ba9141165778", "sighting_of_ref": "indicator--41626620-21fd-4d22-ac20-3d7d4fa57584", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be94644-4291-41ef-aa53-0fcf3a31ff57", "sighting_of_ref": "indicator--a2c1674d-5d34-410e-822c-43952bad7b20", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40480a05-11d7-47e1-a65f-8c60da6fccb3", "sighting_of_ref": "indicator--4fc1aaff-ace9-4146-8ef5-0534bcb235ed", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b00b6ad9-bc9d-484e-9dd2-00ce699f121a", "sighting_of_ref": "indicator--10e40afd-c9df-4359-916b-c0e7b758f2b1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfcccd70-7353-4cbf-93ce-3e7ea8ed2646", "sighting_of_ref": "indicator--9beff63e-a60e-4fa2-8d58-fb6fcda9ae68", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95818523-1287-40ad-9ceb-bf938887434b", "sighting_of_ref": "indicator--9a3f9b1c-bdad-4668-9a7a-589dd40e5d7e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4cda6c-717a-475d-9652-e072b3184fa2", "sighting_of_ref": "indicator--6d33d0f2-365f-4044-a19b-1779d07842a5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c481e7-b200-495b-9680-79edd1a6e187", "sighting_of_ref": "indicator--6d33d0f2-365f-4044-a19b-1779d07842a5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--029e080d-a3e9-4b91-b1fa-42c934fe1ad9", "sighting_of_ref": "indicator--17c43bb9-78d3-4be6-b660-7c72a06e2a8e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e502ad0c-8378-4d2d-8667-1e720b615e3d", "sighting_of_ref": "indicator--17c43bb9-78d3-4be6-b660-7c72a06e2a8e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c596c3f-3b9f-4389-8d05-29353df2060c", "sighting_of_ref": "indicator--003e7e82-d514-4926-a1d7-48d490ad9850", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7580814-24fc-4e77-9e02-9d17c209f451", "sighting_of_ref": "indicator--adda86fe-b628-4bd0-bba4-f6ac8352a2c5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d5f375d-fee4-418f-911a-8710a4a6c9fd", "sighting_of_ref": "indicator--43a9e915-287a-4846-a2a5-bc095e12297d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38971f60-4a0d-4c07-882c-e62dc53ef152", "sighting_of_ref": "indicator--1259b808-8e1d-4ce5-82d5-edec878a9bfa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7176e695-0725-4370-bbf9-855eb677d87d", "sighting_of_ref": "indicator--e85391f5-3829-4350-92be-37b4aac92e4c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06733f1e-d5ea-4d66-a937-0ebcf9a876e2", "sighting_of_ref": "indicator--e85391f5-3829-4350-92be-37b4aac92e4c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847565f2-44d6-4388-b0a2-d70f7eee32f3", "sighting_of_ref": "indicator--03f4c6f1-a14c-4579-be5b-56c660e9997f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--968490b6-f4b7-4e1a-be24-146843c023ce", "sighting_of_ref": "indicator--87e52263-a690-4e19-807f-329e78b5b91d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ded8fb-761d-465c-973f-1ab8b7df233a", "sighting_of_ref": "indicator--67ee7e10-b2d1-4467-b314-30020a5d7d51", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03b00b7-3460-4798-86ad-ce9f0bfcaa8d", "sighting_of_ref": "indicator--7d113965-546b-4fea-a65b-9bea86fd2e82", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ffe3f81-7f8b-475c-9af6-42a89d7230de", "sighting_of_ref": "indicator--5f8a1dae-4eaf-466d-9806-4f2825218a06", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d963709-566b-4362-885a-c1e7cfab78d9", "sighting_of_ref": "indicator--41439f0d-a40a-411b-9cd0-3d382412591a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d037c14-64e7-4990-9d91-aaf665478e5c", "sighting_of_ref": "indicator--47f4c29f-5b27-4ede-a906-2ca1660c912f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a45df62b-c4d2-4c71-9ef3-cf55022b2d10", "sighting_of_ref": "indicator--73ea6de1-74e5-45ce-a1dd-0b4a1653cc94", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265d5753-ba17-484c-a2c8-bee9277316a3", "sighting_of_ref": "indicator--0416bc6e-672b-47c9-bdc2-6acc224da9d7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d352a9e-8f03-4aeb-abab-e7a89bb0ad90", "sighting_of_ref": "indicator--a286c3b9-2335-445b-9eb0-187ae0dd95d8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6022cfbd-5e6e-4bd6-9291-3ee52e4c6994", "sighting_of_ref": "indicator--59012a2d-2bce-4a43-bfc5-4027da19a0b1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838eb233-f3c2-4c05-9683-6749a3a4ef36", "sighting_of_ref": "indicator--66759dee-6d10-406c-94ef-87ce59a20fc8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b72e564-bc72-4207-a238-4de87dc2cfcc", "sighting_of_ref": "indicator--517bf1c4-59f4-45a1-8d7f-a0c91192b155", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d9eff6-7b52-4b05-8104-b57fdb3ea626", "sighting_of_ref": "indicator--96a594a4-119c-4449-bcd8-9ed9b98aaf3d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--558b0921-7692-4088-9816-0cb1356a1acb", "sighting_of_ref": "indicator--c352f6da-4d1e-4e19-924c-3bc6b79abaea", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1741553f-cb45-4676-a66d-dc330b3d9020", "sighting_of_ref": "indicator--6f18f229-e268-4f41-a8e8-0b392285331f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b4bce0-1abf-457d-8a3d-36d6dacd1d17", "sighting_of_ref": "indicator--6f18f229-e268-4f41-a8e8-0b392285331f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78f0a0ad-d7ca-4433-9974-542bfdddec64", "sighting_of_ref": "indicator--45848672-d6db-49e8-8345-67ed9383f9fe", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d42c02-301d-46f6-9c24-80c1b46ab7fb", "sighting_of_ref": "indicator--a2d42a28-70be-4431-975b-5f4ecd55a5ed", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fefbbc62-95bf-4079-a63e-f40ffad66ce6", "sighting_of_ref": "indicator--f61721f8-3002-4d32-8c3d-221dd725c44c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65bbf708-61e8-4434-bce2-1523ce711865", "sighting_of_ref": "indicator--6a20b390-06b2-43d4-b0f7-f2d704395cac", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2ef77e-e2a1-4fdc-a85a-e84414bd3242", "sighting_of_ref": "indicator--6a20b390-06b2-43d4-b0f7-f2d704395cac", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7beaddb2-f2d6-44c2-9d3d-beed604dcaf7", "sighting_of_ref": "indicator--88f16d67-bb00-4594-84da-ceb51319bf1a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abbb93c5-2cbc-4a1a-bab3-53a447f09e53", "sighting_of_ref": "indicator--dae80cde-1c25-4849-8a77-bb8de0eb1ca9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67233c3f-c83a-4892-9b86-429cb479a104", "sighting_of_ref": "indicator--0f932e80-ca62-4369-bf5a-ced4774e8cf5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb19a7a-c30b-4dfd-be05-324dc08751ef", "sighting_of_ref": "indicator--9354349a-c603-4530-a478-5d1b3f55d837", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a6d138-d316-46e3-a43d-b716bdb37ccc", "sighting_of_ref": "indicator--b00b56d2-e02f-4177-8ff3-851d18aa4142", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a1be78-9535-4db9-9d17-24044f0457b1", "sighting_of_ref": "indicator--5c1d74dd-69c8-4a9c-9c07-10cc97a9dabd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d608b4-c783-48be-9adc-7fd721e1174a", "sighting_of_ref": "indicator--72fb09b7-0d31-4339-8d14-b6046732a7a5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b24bf8b3-7bd8-489f-87d4-7e286f18974e", "sighting_of_ref": "indicator--b93140c9-2871-40c5-acb1-2629086bd409", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0420174-dd43-44d2-895e-25be5be9e43e", "sighting_of_ref": "indicator--b93140c9-2871-40c5-acb1-2629086bd409", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8da747-3efe-4d8c-be0a-666d8f2ceafb", "sighting_of_ref": "indicator--b93140c9-2871-40c5-acb1-2629086bd409", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03e18ff-8f7a-45b5-8907-33fca64f2935", "sighting_of_ref": "indicator--7569957c-ea66-4321-a597-693f625a856b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73bf45d-a3cf-4815-81df-351ae9c1ff4f", "sighting_of_ref": "indicator--7569957c-ea66-4321-a597-693f625a856b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e2a238-1c15-449c-937d-619ace148548", "sighting_of_ref": "indicator--7569957c-ea66-4321-a597-693f625a856b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c6c06c-2006-4d4f-86e7-26d4a81043bd", "sighting_of_ref": "indicator--73f0b447-3741-4e97-9e7c-2ebeb02b1806", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1af9d9-4629-4c01-a954-52fe4a689628", "sighting_of_ref": "indicator--73f0b447-3741-4e97-9e7c-2ebeb02b1806", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--858ccff5-edf2-4e56-b53b-d1d5b52f3077", "sighting_of_ref": "indicator--73f0b447-3741-4e97-9e7c-2ebeb02b1806", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be2e7d4-26cb-4cf5-8789-a01acb9ee1fe", "sighting_of_ref": "indicator--9c08ee08-e7b5-4579-b265-56594ed77ae3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf40d85d-3d69-4305-94c8-e91f4862f4a9", "sighting_of_ref": "indicator--9c08ee08-e7b5-4579-b265-56594ed77ae3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc45ee5d-7d09-4153-840f-013aad8c8c9e", "sighting_of_ref": "indicator--9c08ee08-e7b5-4579-b265-56594ed77ae3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a55fe9-0eb1-412c-8be2-a16586ad0043", "sighting_of_ref": "indicator--d1598c9a-ad8d-4a7e-8639-2015d099d31b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d2695e8-999e-4d48-be6d-a15ced7a9f74", "sighting_of_ref": "indicator--d1598c9a-ad8d-4a7e-8639-2015d099d31b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5884a3a-dcc9-4e16-9f3e-d880a62e7fb1", "sighting_of_ref": "indicator--d1598c9a-ad8d-4a7e-8639-2015d099d31b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcbbb5af-e2ce-43fc-b962-5c4e31ba2227", "sighting_of_ref": "indicator--ea2d7c1a-4252-43cc-a590-ea1c58d14100", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991c4a48-8209-418e-8be9-eb988d7c0530", "sighting_of_ref": "indicator--ea2d7c1a-4252-43cc-a590-ea1c58d14100", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb546efc-45bc-4b13-91aa-364afbd5ea70", "sighting_of_ref": "indicator--ea2d7c1a-4252-43cc-a590-ea1c58d14100", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f7ba9b-ab0e-43fc-8f27-d33d136fb61b", "sighting_of_ref": "indicator--c20b3ef9-afdb-4f39-9d1e-d0253a1c4431", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe04b529-2bee-44b9-bb96-677d9457a343", "sighting_of_ref": "indicator--c20b3ef9-afdb-4f39-9d1e-d0253a1c4431", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7404bf7d-045a-48cb-9e05-3f959c111923", "sighting_of_ref": "indicator--c20b3ef9-afdb-4f39-9d1e-d0253a1c4431", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7896b4a0-9286-449f-89ee-848f64ea5f95", "sighting_of_ref": "indicator--84eabd99-10be-4f91-a819-3b3b9e180397", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f5426c-3dae-4c85-ad8a-882cc16aa4d5", "sighting_of_ref": "indicator--84eabd99-10be-4f91-a819-3b3b9e180397", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e595dc0-f6d8-445d-a55c-7542498846a1", "sighting_of_ref": "indicator--84eabd99-10be-4f91-a819-3b3b9e180397", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2598c3-32df-473d-9661-801656895a26", "sighting_of_ref": "indicator--408ecff7-d464-433f-bbf8-5b7b2efe0e44", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06982253-1ca8-4de3-8529-8012475ec2a2", "sighting_of_ref": "indicator--408ecff7-d464-433f-bbf8-5b7b2efe0e44", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0172762a-c8a3-4ded-958f-c837fc9c3fc2", "sighting_of_ref": "indicator--408ecff7-d464-433f-bbf8-5b7b2efe0e44", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326078d6-4e85-46b6-b20a-f59ab15f2180", "sighting_of_ref": "indicator--acc180cc-6f19-40a6-bcd5-77c0e1408722", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf343bd-5520-4468-ba2a-93fa2d180a05", "sighting_of_ref": "indicator--acc180cc-6f19-40a6-bcd5-77c0e1408722", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e91db521-61e0-4a42-98b3-756d1cc6186a", "sighting_of_ref": "indicator--acc180cc-6f19-40a6-bcd5-77c0e1408722", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1920797c-7dfb-44d8-a52d-c68e5ca19a78", "sighting_of_ref": "indicator--6e77db4b-fc0b-4e6f-a403-dea372e2d9f7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f1abb9-ff7f-49fa-93fd-7a3d4075b4a4", "sighting_of_ref": "indicator--6e77db4b-fc0b-4e6f-a403-dea372e2d9f7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c12e83c-eaaa-455e-b125-cd9bf834dcb4", "sighting_of_ref": "indicator--6e77db4b-fc0b-4e6f-a403-dea372e2d9f7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde46d53-06d9-4d0c-8b65-be239ab5859b", "sighting_of_ref": "indicator--8117d07b-5d78-45e2-bb43-51ece18c294e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f61d7f-ed3c-4bd4-b872-02f2c0a7e1fb", "sighting_of_ref": "indicator--8117d07b-5d78-45e2-bb43-51ece18c294e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--131f75fc-6e14-40e8-a4a3-6b98a6741b14", "sighting_of_ref": "indicator--8117d07b-5d78-45e2-bb43-51ece18c294e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e75fef0-67ad-400c-a8ff-2141eeeab8ac", "sighting_of_ref": "indicator--0c9c5545-26ac-4a9a-86a3-c1feba28cf31", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4138fc06-2233-4bc6-87ed-078497700dbd", "sighting_of_ref": "indicator--0c9c5545-26ac-4a9a-86a3-c1feba28cf31", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60dec715-1aaf-49be-ac4b-37c9d48ca504", "sighting_of_ref": "indicator--0c9c5545-26ac-4a9a-86a3-c1feba28cf31", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08041795-da0c-4cce-a4fa-d5b40c31263b", "sighting_of_ref": "indicator--f4dce080-0d45-429c-a83e-0d3d0a90060d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40940c86-3119-4540-aed7-8fa03a05f745", "sighting_of_ref": "indicator--f4dce080-0d45-429c-a83e-0d3d0a90060d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9130ef0b-8e16-4e59-829c-be73cc8ec59f", "sighting_of_ref": "indicator--f4dce080-0d45-429c-a83e-0d3d0a90060d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e265a2b-1649-46c9-9387-42a3b499a0ad", "sighting_of_ref": "indicator--89948940-e4c7-4353-9f18-27af4110ee95", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6ba1d2-1f94-46f9-92a7-4846cef94758", "sighting_of_ref": "indicator--89948940-e4c7-4353-9f18-27af4110ee95", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9150d0f6-3664-4f20-88f4-d27be37853fe", "sighting_of_ref": "indicator--89948940-e4c7-4353-9f18-27af4110ee95", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b7ecfd-7ae6-4d3a-b3be-da95fbc99399", "sighting_of_ref": "indicator--a63a5e1d-bf8c-4146-9a4d-0bcda32346a8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8947a9e4-3e3e-48cc-9e1d-daa96fd6c603", "sighting_of_ref": "indicator--a63a5e1d-bf8c-4146-9a4d-0bcda32346a8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e16df1c7-cb6c-4437-8821-450eb8326b82", "sighting_of_ref": "indicator--a63a5e1d-bf8c-4146-9a4d-0bcda32346a8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb0c360-9c08-414f-800f-e29c133ec209", "sighting_of_ref": "indicator--5cf6b0cc-6230-4619-81f7-b330bcbdf308", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c155bf9-99cf-410e-ae82-5ccc45b02fa7", "sighting_of_ref": "indicator--5cf6b0cc-6230-4619-81f7-b330bcbdf308", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d658a5c-7f3f-4683-b5c3-5777b433c2e1", "sighting_of_ref": "indicator--5cf6b0cc-6230-4619-81f7-b330bcbdf308", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b79630-1611-44af-aae3-3de9d78a04dd", "sighting_of_ref": "indicator--1337d551-1311-42b3-b9a7-ebc05342a144", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d37d61-c059-474f-a5bc-ebc24c67b3d2", "sighting_of_ref": "indicator--1337d551-1311-42b3-b9a7-ebc05342a144", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec0df3fb-81e7-4bc5-886c-63da5b0c5ed1", "sighting_of_ref": "indicator--1337d551-1311-42b3-b9a7-ebc05342a144", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea48f1a-fa9a-4b7b-9db7-0705af172347", "sighting_of_ref": "indicator--eb600105-56e3-4e9a-abf6-976b20f9659b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8726d4d-42b8-4b8a-9145-2ed113e923ab", "sighting_of_ref": "indicator--eb600105-56e3-4e9a-abf6-976b20f9659b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e65b32-ee70-4049-9a50-3da67630a9fd", "sighting_of_ref": "indicator--eb600105-56e3-4e9a-abf6-976b20f9659b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beee091e-a0ec-4876-a256-378c7581f691", "sighting_of_ref": "indicator--d05cc7fc-b3f6-4722-8253-a4485153d1bd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d6f30c-b8f2-42d7-9012-19a865356473", "sighting_of_ref": "indicator--d05cc7fc-b3f6-4722-8253-a4485153d1bd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a01f45fd-9f02-4c91-9971-1ad9372669fb", "sighting_of_ref": "indicator--d05cc7fc-b3f6-4722-8253-a4485153d1bd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da2fe69-1653-4cad-b5ed-ec25f54512bf", "sighting_of_ref": "indicator--8a9c5532-a676-4387-86ae-5963737f6f4f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f354c4c-b81c-4341-ba5c-a42a225b441b", "sighting_of_ref": "indicator--8a9c5532-a676-4387-86ae-5963737f6f4f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d7e0a2b-b257-4a2c-8d4c-06ac3c624fac", "sighting_of_ref": "indicator--8a9c5532-a676-4387-86ae-5963737f6f4f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7019631b-f550-4a93-9a76-3c0c5a0b9936", "sighting_of_ref": "indicator--88f545c5-4c71-4f56-8ff6-e14de2844603", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73318489-b684-40b9-985d-6b5d81160a5a", "sighting_of_ref": "indicator--88f545c5-4c71-4f56-8ff6-e14de2844603", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e3e214-087d-4ac3-8872-b20ed156d389", "sighting_of_ref": "indicator--88f545c5-4c71-4f56-8ff6-e14de2844603", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b32a4f-62bd-4284-9ed7-8063f05bc32e", "sighting_of_ref": "indicator--57658946-abb7-4cbf-85aa-7f32964207b7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8909c144-1e5b-47fe-85b2-f924c31a60bf", "sighting_of_ref": "indicator--57658946-abb7-4cbf-85aa-7f32964207b7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd916645-23ab-4351-8985-ef3557aa78b6", "sighting_of_ref": "indicator--57658946-abb7-4cbf-85aa-7f32964207b7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382a10a1-a156-461d-ba50-c824eb352cac", "sighting_of_ref": "indicator--d9110298-8bb9-4185-8c66-fe98bd3c2aa9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--006e9c98-3e6c-49b8-a8f9-b4e37255d492", "sighting_of_ref": "indicator--d9110298-8bb9-4185-8c66-fe98bd3c2aa9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f576b63-4134-4860-8e59-213ffb2749b9", "sighting_of_ref": "indicator--d9110298-8bb9-4185-8c66-fe98bd3c2aa9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cd9107-0cf0-4005-ab96-fc401f3dfe0f", "sighting_of_ref": "indicator--4717de93-808a-4a3b-8aad-2118712ff1d6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3354862f-e3c3-4912-be15-e041d091bcd8", "sighting_of_ref": "indicator--ec9ef632-60de-4798-82f9-e1ff81b30be9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--468e25b3-d037-40eb-9520-4084e1bcb5f3", "sighting_of_ref": "indicator--ec9ef632-60de-4798-82f9-e1ff81b30be9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fbb3754-ab96-4d08-a9dc-a8fef2ef3881", "sighting_of_ref": "indicator--ec9ef632-60de-4798-82f9-e1ff81b30be9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ebd96cd-e5ff-4de4-b580-db0a42a7a588", "sighting_of_ref": "indicator--8367e6d3-74b9-4e01-81ba-374239b51969", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--396da2ec-c507-4db7-b8c5-5a76ecbf498e", "sighting_of_ref": "indicator--8367e6d3-74b9-4e01-81ba-374239b51969", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d556b6d-b66d-4fdb-993e-9f50c78577e8", "sighting_of_ref": "indicator--8367e6d3-74b9-4e01-81ba-374239b51969", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ad40c6d-b40c-4f91-992a-303a41dc90be", "sighting_of_ref": "indicator--497742e1-96ab-4d71-9e3d-1fa893150a10", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c6672ef-d4ee-4671-b53e-98fc59e8428c", "sighting_of_ref": "indicator--497742e1-96ab-4d71-9e3d-1fa893150a10", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f7c3dc-82f2-49b3-a78e-e34f89754d65", "sighting_of_ref": "indicator--497742e1-96ab-4d71-9e3d-1fa893150a10", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91fb838-00a6-47f8-b567-c3952f5de0b8", "sighting_of_ref": "indicator--78e89fe0-f4a5-4e2f-bc4b-7d6f5d9abbc6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52dbbae-4575-444f-8a8d-f088f9d22581", "sighting_of_ref": "indicator--78e89fe0-f4a5-4e2f-bc4b-7d6f5d9abbc6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b94d39d-0b90-4f9f-91dc-f352ef57806d", "sighting_of_ref": "indicator--78e89fe0-f4a5-4e2f-bc4b-7d6f5d9abbc6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990a34e3-b2dd-4356-8341-cd959b753094", "sighting_of_ref": "indicator--3148f5c9-8e1b-4253-b946-5fdeb35925e7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--381f4637-5909-441c-989a-f97a1cf78e85", "sighting_of_ref": "indicator--3148f5c9-8e1b-4253-b946-5fdeb35925e7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8c2370-6f28-415e-86f8-a9ee4e7922b0", "sighting_of_ref": "indicator--3148f5c9-8e1b-4253-b946-5fdeb35925e7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f9db8ba-d835-4040-9bc6-748cbe1d3a85", "sighting_of_ref": "indicator--6e9061c8-082a-4d3d-9aea-fc786c42b8ea", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--245cf8bf-29f3-403c-94ed-e5e840b95140", "sighting_of_ref": "indicator--6e9061c8-082a-4d3d-9aea-fc786c42b8ea", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba24b61-5f73-4b77-81bf-4de8057cb996", "sighting_of_ref": "indicator--6e9061c8-082a-4d3d-9aea-fc786c42b8ea", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59debafe-4d0d-47a0-a97c-9cdbd1de3613", "sighting_of_ref": "indicator--f3547b0b-82c1-44bb-a1ad-7856654a74e2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--023512c4-8f82-4c44-a258-251b00a59d12", "sighting_of_ref": "indicator--f3547b0b-82c1-44bb-a1ad-7856654a74e2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec211c31-cdac-46fd-9752-432fdee649e6", "sighting_of_ref": "indicator--f3547b0b-82c1-44bb-a1ad-7856654a74e2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f53c9e-913a-432a-abb8-1d1c097781b3", "sighting_of_ref": "indicator--67c5827b-2ab4-481c-b10e-766d069d847d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27bb588e-3130-4ad8-8807-80fa317e017e", "sighting_of_ref": "indicator--67c5827b-2ab4-481c-b10e-766d069d847d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd763e67-64e5-4ee7-9492-f3559a885d97", "sighting_of_ref": "indicator--67c5827b-2ab4-481c-b10e-766d069d847d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5377145-5d08-4d5f-8c72-70ef3f09de1c", "sighting_of_ref": "indicator--74dc61d7-ca63-4f09-af4f-0ca070de1a98", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2378a8-7668-4d40-ad36-33734133fd3b", "sighting_of_ref": "indicator--74dc61d7-ca63-4f09-af4f-0ca070de1a98", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38298106-46a8-4d57-b635-3839d9f1e870", "sighting_of_ref": "indicator--a961be9d-7778-41ba-8c12-0545da2ef826", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4cbae1-263b-4626-9372-514319ea87f5", "sighting_of_ref": "indicator--22ca5326-e359-44b4-acf0-80b4fc434bac", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a77ba641-572b-4352-bd80-b24626d436b3", "sighting_of_ref": "indicator--aa94df3c-2301-4bea-a5e5-06830ffa2e52", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--282b17e6-07d4-4339-a761-7ef1bd6ed4a6", "sighting_of_ref": "indicator--6e3e0483-d9ff-4702-8d53-7705e78e50ae", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b39898e-7f6a-487b-ac6a-324e5de8288f", "sighting_of_ref": "indicator--3753de2d-88b1-490b-aa33-2ab3be4abe4b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bdb37b0-955e-46ec-afbf-cbd2e69a3d40", "sighting_of_ref": "indicator--13f0cca7-5c8e-4f98-af1b-35cf888ce86e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca332b2d-1803-4286-8549-7c381ef14438", "sighting_of_ref": "indicator--13f0cca7-5c8e-4f98-af1b-35cf888ce86e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9884ae-3985-4d31-a4db-0a56114ae3e6", "sighting_of_ref": "indicator--36a75af2-604c-4ab7-9492-d0a973c88de2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c87eaab3-14a3-4d5a-9486-6a95d4f3dc70", "sighting_of_ref": "indicator--d77356bb-f0bc-44b3-be61-ac82418f827a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb8ee85-dd8b-4224-bb36-998b3aed0a28", "sighting_of_ref": "indicator--d77356bb-f0bc-44b3-be61-ac82418f827a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c88a752-d949-4de0-bbad-446ede1a4d44", "sighting_of_ref": "indicator--d77356bb-f0bc-44b3-be61-ac82418f827a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3c2ef7a-dcef-4c13-bcf1-c7ef90730334", "sighting_of_ref": "indicator--76e355de-14db-47f2-a10d-bb6084c59b4b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b071a799-8c4a-4102-91a9-72ec57327469", "sighting_of_ref": "indicator--76e355de-14db-47f2-a10d-bb6084c59b4b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee8858a9-7e10-4538-be55-01b165b71329", "sighting_of_ref": "indicator--76e355de-14db-47f2-a10d-bb6084c59b4b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1662f149-4b94-44cc-a6eb-692a8843fa25", "sighting_of_ref": "indicator--c8d38383-a184-460e-9a31-c70b7d4e1320", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad2b991-d16c-419f-bb46-1d2e0fd9ac4b", "sighting_of_ref": "indicator--88e6b0a8-1d74-48f7-af50-789b4968a27c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e76aa2-8c50-4e65-be48-f4fb470a7e3c", "sighting_of_ref": "indicator--9f0e1986-6375-4bff-b905-1406e32a9d3c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0824dd7f-05f9-4e61-ba4b-293fe154ac8e", "sighting_of_ref": "indicator--fac90cb3-1537-489e-b68f-4b6e67a5e9d8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4376109-690e-418f-a862-52785f8f8894", "sighting_of_ref": "indicator--565cca10-1ce6-4108-84a3-2f0e2e42117a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d2089d-99f6-4a8c-85f3-3cdb4671871d", "sighting_of_ref": "indicator--565cca10-1ce6-4108-84a3-2f0e2e42117a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90a43c5-af32-4f75-b566-7360681e7e31", "sighting_of_ref": "indicator--565cca10-1ce6-4108-84a3-2f0e2e42117a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c41801c4-8d08-4f40-b75c-904af7590ad3", "sighting_of_ref": "indicator--397c606d-46bf-4ce9-b1e8-4b997df292c9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7907572-784f-4054-a60f-e2d512e20b41", "sighting_of_ref": "indicator--397c606d-46bf-4ce9-b1e8-4b997df292c9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e1247ad-f0af-4500-b15e-b590da831d82", "sighting_of_ref": "indicator--397c606d-46bf-4ce9-b1e8-4b997df292c9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c10bf8-d9a9-4d0a-b387-3978bfa93eb3", "sighting_of_ref": "indicator--af3593b6-738c-4b29-9203-70eb5a31a9f1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb7a2bbe-41d7-4003-8f2f-cb895aad4af4", "sighting_of_ref": "indicator--af3593b6-738c-4b29-9203-70eb5a31a9f1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa971b8b-3b1e-48fe-be97-c4cd7f4dc97b", "sighting_of_ref": "indicator--af3593b6-738c-4b29-9203-70eb5a31a9f1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69bd0f5-68fa-4443-b113-357732aa4b8c", "sighting_of_ref": "indicator--47801c7f-4824-47e0-bec7-62ba362baea5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc2d1a65-aafb-4540-ab67-6013dccb5b17", "sighting_of_ref": "indicator--47801c7f-4824-47e0-bec7-62ba362baea5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68add8f4-2399-42b5-a3ed-df5fad18f36c", "sighting_of_ref": "indicator--47801c7f-4824-47e0-bec7-62ba362baea5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28002b6-fa2e-4f30-bef5-9d3b8d5fc7ab", "sighting_of_ref": "indicator--16dd1c5c-54c3-483e-8ef5-106ebe1b1aeb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d06d0d-4bfd-4484-b087-7c2826bae973", "sighting_of_ref": "indicator--16dd1c5c-54c3-483e-8ef5-106ebe1b1aeb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48abb8a-01f2-41f0-b94e-c2298b16a593", "sighting_of_ref": "indicator--16dd1c5c-54c3-483e-8ef5-106ebe1b1aeb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c22dcac6-5743-4c53-a35c-b76bde72f870", "sighting_of_ref": "indicator--29389bc8-026a-43a8-864f-9c0fb287e1cd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3327b2f9-5e01-4865-9071-abb617bbcb8e", "sighting_of_ref": "indicator--29389bc8-026a-43a8-864f-9c0fb287e1cd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55392f0d-4b0e-4fbd-9de0-85b07eaaf663", "sighting_of_ref": "indicator--29389bc8-026a-43a8-864f-9c0fb287e1cd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eabbde0f-ae07-4116-b3dc-8854f85540f2", "sighting_of_ref": "indicator--a2f0de84-306c-4263-a8f8-1b2b2a0fd9d2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8cb1b22-7806-4571-9ad7-d235d7ee66ca", "sighting_of_ref": "indicator--a2f0de84-306c-4263-a8f8-1b2b2a0fd9d2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca06ae6f-93d7-4b35-a500-204c207343ec", "sighting_of_ref": "indicator--a2f0de84-306c-4263-a8f8-1b2b2a0fd9d2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9fcf69f-8dbe-40ea-9715-844a4102bb0e", "sighting_of_ref": "indicator--dc4e267f-c4b2-41af-b391-f2e3e9ff9c32", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f0fdf5d-d926-43c8-b49c-a80270b35c10", "sighting_of_ref": "indicator--dc4e267f-c4b2-41af-b391-f2e3e9ff9c32", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00e1a9e-a020-45ed-a061-f3f7aa845c1b", "sighting_of_ref": "indicator--dc4e267f-c4b2-41af-b391-f2e3e9ff9c32", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b5f8a4-a74c-4c57-b43a-23c17fd11da0", "sighting_of_ref": "indicator--cddd1ca9-f191-4125-833e-6823202a7159", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c2d77a5-75fe-4cd6-a397-13186080883a", "sighting_of_ref": "indicator--2275e0d4-48b5-40db-be38-16b69439a49d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56636919-a8a9-44e7-b385-32cff9c234c5", "sighting_of_ref": "indicator--2275e0d4-48b5-40db-be38-16b69439a49d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf027cbb-7350-46bd-8252-49318bdf925e", "sighting_of_ref": "indicator--2275e0d4-48b5-40db-be38-16b69439a49d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b148707f-f57d-4ff1-a2b5-7d826cc104e6", "sighting_of_ref": "indicator--40627d3e-5f2f-4313-99d2-3b50517b4e1c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04bd18da-d77a-4923-93ed-83f3ef68c238", "sighting_of_ref": "indicator--40627d3e-5f2f-4313-99d2-3b50517b4e1c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9fcaa06-6e46-4e0d-822c-5ed4afb55745", "sighting_of_ref": "indicator--40627d3e-5f2f-4313-99d2-3b50517b4e1c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09fd73fb-d21a-45a1-8cfe-2544365a33ef", "sighting_of_ref": "indicator--e359aea8-8dce-43ec-9af0-f8a98ee3a74f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f06764c4-627c-47f2-bf2a-2f3679c89cc1", "sighting_of_ref": "indicator--e359aea8-8dce-43ec-9af0-f8a98ee3a74f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5400154c-9701-474f-8d5d-0d95dbae27e7", "sighting_of_ref": "indicator--e359aea8-8dce-43ec-9af0-f8a98ee3a74f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f400cbe-321d-4c20-8444-e26b7d555123", "sighting_of_ref": "indicator--573cb6a1-883e-4946-ae24-2d88e44de273", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf85466c-8fdb-44f1-b287-5c4742aa1a7b", "sighting_of_ref": "indicator--573cb6a1-883e-4946-ae24-2d88e44de273", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d837041-e3b8-4861-b02c-9f2b802f2074", "sighting_of_ref": "indicator--573cb6a1-883e-4946-ae24-2d88e44de273", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ecfa0b-9822-4312-8fa4-a4ba6c044cab", "sighting_of_ref": "indicator--e3f25a4c-06de-41fd-bde6-ec24e3ebab9e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81abf580-04c2-4763-9fb6-0ae75da08fcc", "sighting_of_ref": "indicator--e3f25a4c-06de-41fd-bde6-ec24e3ebab9e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32bf3a86-9fd2-4870-9474-8e9256e9307d", "sighting_of_ref": "indicator--e3f25a4c-06de-41fd-bde6-ec24e3ebab9e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7401048-0c7c-4435-8443-dad8d1f08442", "sighting_of_ref": "indicator--7e152e84-9191-44d0-abee-e21ce9da019e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063902bd-3158-481a-9c0f-fff28f9c625d", "sighting_of_ref": "indicator--7e152e84-9191-44d0-abee-e21ce9da019e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--483a70f3-bfa0-4eed-8916-0f758b816c92", "sighting_of_ref": "indicator--7e152e84-9191-44d0-abee-e21ce9da019e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b429bf60-0c40-4ed2-a5fe-f220feb4326a", "sighting_of_ref": "indicator--7d9a16bb-fd0b-4a7e-812f-0a31b10bedc3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100dcdd4-a0ad-4948-a52f-0bc53e705a83", "sighting_of_ref": "indicator--c5e5c774-48ec-4303-961d-290fb7e61634", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2552f424-cd98-4610-a770-13084d578da4", "sighting_of_ref": "indicator--c5e5c774-48ec-4303-961d-290fb7e61634", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902bce86-2923-470a-a0a4-0219ee39973a", "sighting_of_ref": "indicator--c5e5c774-48ec-4303-961d-290fb7e61634", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c63a5ef1-096e-43b8-8519-840e19c97237", "sighting_of_ref": "indicator--b40b53ee-f5f4-4684-a2ab-83e8700ac8b3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a738366-cff4-403a-ae00-3e2e37022e0f", "sighting_of_ref": "indicator--6495ca24-0227-41fb-a4b1-85da0c5d013f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa6e6f3a-989d-4261-a269-c19cc1adbbd7", "sighting_of_ref": "indicator--41e52e4b-028e-431a-936a-af60e699e2d3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d85c0c0c-d39a-4c98-8913-1378766c0b5f", "sighting_of_ref": "indicator--f015d39b-f4eb-4b0d-92a7-987af71495df", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd90bbe-3533-43e2-82cc-68ec4f00c99c", "sighting_of_ref": "indicator--96a64194-83eb-42b8-969a-a31037fa15df", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de26c26f-dfdb-4ccf-82f4-679783ebfe1a", "sighting_of_ref": "indicator--35a75ef9-23ba-4b93-ae64-4406c1f22fbc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda9b873-65e3-4281-afca-c606baa75c4a", "sighting_of_ref": "indicator--c04a349c-fb76-4479-bc4c-7f7ff404d95b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeae1ad0-204a-4ed4-9c29-c05e2fc8d0cd", "sighting_of_ref": "indicator--c04a349c-fb76-4479-bc4c-7f7ff404d95b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c39e76-c208-4338-888c-0cd486fbe51f", "sighting_of_ref": "indicator--e8cd222a-882e-458f-af8a-913f8839ac80", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d5d1a6-323b-4b56-872c-5e43d86fa548", "sighting_of_ref": "indicator--e8cd222a-882e-458f-af8a-913f8839ac80", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6781c8e9-1db6-4cf1-b0af-4f4ab338a0a3", "sighting_of_ref": "indicator--199db10e-377d-4dc5-a5a9-3b6437166642", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb33988-1ad2-49d2-b4bd-49d502f6807f", "sighting_of_ref": "indicator--199db10e-377d-4dc5-a5a9-3b6437166642", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3025d3d6-1bbe-46eb-9a66-c873ce5ae912", "sighting_of_ref": "indicator--199db10e-377d-4dc5-a5a9-3b6437166642", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6e03ca-596f-42f2-b184-011ff56153ee", "sighting_of_ref": "indicator--cf03c139-be59-4e1e-a23c-2a9cd32f1380", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea9b463-3bca-4f19-b962-4926fdd1b84f", "sighting_of_ref": "indicator--4194a257-1227-4a9b-bc74-8f7d1194cd3a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec5604bf-5e13-44bd-80a1-2ca1ce7ead85", "sighting_of_ref": "indicator--1928ff65-0234-4fe8-b5af-0269e07b2491", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab0a212-7d8b-4999-a6e0-4a736d773912", "sighting_of_ref": "indicator--d7f3709c-b899-47a0-bcb9-737adba727e1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed577ce5-521c-440b-b704-eb7cdd8ef5ad", "sighting_of_ref": "indicator--957bff8b-55f5-48ba-80a6-0e88ac6c5ac5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3ce516-7727-469d-8a53-adf5a249b2af", "sighting_of_ref": "indicator--2f736066-584d-44a9-8b27-9da1e5a29555", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f142283e-2e6a-4598-abc6-56f95b38c32f", "sighting_of_ref": "indicator--b72b16a5-4cd1-43bb-b117-e914a4f54779", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ac0037-e9e6-44e3-a450-071e6b481ee8", "sighting_of_ref": "indicator--03ced77c-bae3-4f88-8460-154b1219b1e2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f7ce802-02a6-4ae8-a7d0-166f892a6e68", "sighting_of_ref": "indicator--9ba410aa-927f-4b11-be94-25525cc48f75", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54185af-1fe7-42d6-b46f-0ca9adf312c9", "sighting_of_ref": "indicator--bfe05c6e-f5d2-4e26-972a-b443a300008d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2df03b-9dc5-4c94-9e4f-fc14fb5f25c1", "sighting_of_ref": "indicator--bfe05c6e-f5d2-4e26-972a-b443a300008d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa26996-17bb-4e4b-ab47-f8205634ec93", "sighting_of_ref": "indicator--bfe05c6e-f5d2-4e26-972a-b443a300008d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7077d3d-f1cc-4d1b-8421-f7dc56508670", "sighting_of_ref": "indicator--2691367e-96b3-4deb-a1cd-29e1a932e817", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cdaffd3-b1ad-4606-a8eb-c9ee8b55d3f9", "sighting_of_ref": "indicator--ebc9d9af-5157-44c3-968e-641711e5d767", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87bcd998-a731-49c8-95d4-cacdc7e55346", "sighting_of_ref": "indicator--f0efee62-6168-4562-9a6a-f33aa174bdba", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6dc4c90-e41d-49af-b6c2-eeb8ec33c8ca", "sighting_of_ref": "indicator--820376df-ba59-43b2-b070-ba2705a78cdb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d2ebc1-6be5-4ccb-b85f-e67352c41e63", "sighting_of_ref": "indicator--820376df-ba59-43b2-b070-ba2705a78cdb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44bb8795-4e86-486b-8ca9-946ee12777e5", "sighting_of_ref": "indicator--820376df-ba59-43b2-b070-ba2705a78cdb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903dd410-73ec-4f67-9208-7f3cbd889726", "sighting_of_ref": "indicator--dc1f4f8b-9cb0-46c0-a6dc-525283f567be", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6288a3b-4bc5-4c2e-a724-0017714734c8", "sighting_of_ref": "indicator--dc1f4f8b-9cb0-46c0-a6dc-525283f567be", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb87245-5e25-499f-85bc-fafd2126d562", "sighting_of_ref": "indicator--aa439850-f5df-4a68-a285-115d5795f3a8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b63a60f-4409-4382-b3b7-89fbd72945bd", "sighting_of_ref": "indicator--26542124-b22f-40ce-a30e-f91c5cc7ce94", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98c2bbaf-339a-4efb-8d35-a7561a0aafd4", "sighting_of_ref": "indicator--9a6b866b-8c97-41c6-89b0-2e01511c360e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b63df753-c42e-41ad-a35e-f98d06e46e10", "sighting_of_ref": "indicator--3351d971-135e-4cce-b521-a13043771d03", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b00f0a-0fb5-41b0-bcd4-f67e6841f583", "sighting_of_ref": "indicator--f7426acf-aa42-440a-84ad-92d6f150901e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e3cc50a-efea-4602-b16c-b4dbf3f8ed15", "sighting_of_ref": "indicator--f7426acf-aa42-440a-84ad-92d6f150901e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de253259-f670-4725-82ec-4ac17b949fb6", "sighting_of_ref": "indicator--f7426acf-aa42-440a-84ad-92d6f150901e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde815cf-cfeb-4090-b597-563a219baed5", "sighting_of_ref": "indicator--f2bea9bd-9b5c-492c-a7ce-2c858ddfd5db", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9698c0-c3d6-4df5-ad5f-67e1c70556bc", "sighting_of_ref": "indicator--f2bea9bd-9b5c-492c-a7ce-2c858ddfd5db", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4ff816-8af9-47e6-8d96-8ae189d09636", "sighting_of_ref": "indicator--f2bea9bd-9b5c-492c-a7ce-2c858ddfd5db", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--700038b9-977d-4e4e-b146-ce390cc09230", "sighting_of_ref": "indicator--69498111-40f3-452b-be1f-35c5228e1168", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6765e3dc-0612-4aa2-884e-4a39c4ab0f5f", "sighting_of_ref": "indicator--69498111-40f3-452b-be1f-35c5228e1168", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f843106-a63f-4658-93e0-c12adbd87279", "sighting_of_ref": "indicator--69498111-40f3-452b-be1f-35c5228e1168", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66051f81-02ed-493d-8111-1cfe408390e7", "sighting_of_ref": "indicator--fa7fb313-5dc5-4d94-bcd1-b50d40d14757", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e0dfe69-2e63-45a8-8c1b-fd072382e901", "sighting_of_ref": "indicator--fa7fb313-5dc5-4d94-bcd1-b50d40d14757", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f68a13-ba97-4679-87f2-a8d1daf3d64f", "sighting_of_ref": "indicator--fa7fb313-5dc5-4d94-bcd1-b50d40d14757", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cac0a2c-10e7-4912-86fb-d31d87034d22", "sighting_of_ref": "indicator--a0278166-2cd1-4544-9f2d-0955eaaf9ca4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4167299-e75f-4cde-ba9a-5ee999608269", "sighting_of_ref": "indicator--a0278166-2cd1-4544-9f2d-0955eaaf9ca4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2eee0b-81da-4de0-a199-2b9d819f6120", "sighting_of_ref": "indicator--a0278166-2cd1-4544-9f2d-0955eaaf9ca4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b6505f-580b-492d-9fc2-68c3904e2c7a", "sighting_of_ref": "indicator--a34c3aa3-2eba-48ad-817f-9ae90ec02c52", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90fc32fa-c34b-45b9-ae16-f16a1a00f331", "sighting_of_ref": "indicator--a34c3aa3-2eba-48ad-817f-9ae90ec02c52", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b694485a-7ca3-4772-8128-5945f65c1323", "sighting_of_ref": "indicator--a34c3aa3-2eba-48ad-817f-9ae90ec02c52", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2cd2a31-0de9-450b-9f07-a4907e83db25", "sighting_of_ref": "indicator--afc939ac-c069-4073-bf50-5762c63b1bae", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba91f54a-c686-4c0d-bbed-1e96c8f40853", "sighting_of_ref": "indicator--afc939ac-c069-4073-bf50-5762c63b1bae", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c7f6951-b005-4503-a19a-d99f7c5fe589", "sighting_of_ref": "indicator--afc939ac-c069-4073-bf50-5762c63b1bae", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613651eb-3f04-4a7b-8d47-e907cb711f0c", "sighting_of_ref": "indicator--401cabdc-c1da-44a7-b23e-d449590dae90", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec85ede4-8031-42e2-898b-9c57641a320f", "sighting_of_ref": "indicator--401cabdc-c1da-44a7-b23e-d449590dae90", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a446c8-b7c5-4697-b335-0a65b3bd2b28", "sighting_of_ref": "indicator--401cabdc-c1da-44a7-b23e-d449590dae90", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac4d511-eb06-4124-af40-4b5f5af088e9", "sighting_of_ref": "indicator--d2c3590a-b91c-4e9e-bbec-f847dfe1ac4a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd792e2-2ce4-493d-9377-78f28018619a", "sighting_of_ref": "indicator--d2c3590a-b91c-4e9e-bbec-f847dfe1ac4a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e14a90b-9def-4bd3-8a11-33fe22d13592", "sighting_of_ref": "indicator--d2c3590a-b91c-4e9e-bbec-f847dfe1ac4a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b25a499-34bf-4ce0-9566-a2999ec7a72e", "sighting_of_ref": "indicator--3aed61ee-3a89-4e0a-98c0-bb8653504480", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d241702f-2343-4fbd-a8b3-421c21f87217", "sighting_of_ref": "indicator--3aed61ee-3a89-4e0a-98c0-bb8653504480", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99c6d87-6673-4644-976e-b8d2c6eb2eb0", "sighting_of_ref": "indicator--3aed61ee-3a89-4e0a-98c0-bb8653504480", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c70756-6eff-4bcb-90d1-71f6ea99bb0a", "sighting_of_ref": "indicator--a558b6ba-96d1-4f13-8acc-89befa5b6639", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a08c2d-7061-4416-a043-137460fc8dcb", "sighting_of_ref": "indicator--a558b6ba-96d1-4f13-8acc-89befa5b6639", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e0db4d7-e98d-4737-8e9e-1035cafb8a23", "sighting_of_ref": "indicator--a558b6ba-96d1-4f13-8acc-89befa5b6639", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa4cc63-4781-4813-9835-68f922eb050a", "sighting_of_ref": "indicator--af9e82e6-3429-4448-8d36-0d389e745f8e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c19de12c-edbb-4958-94bd-d4955093c188", "sighting_of_ref": "indicator--af9e82e6-3429-4448-8d36-0d389e745f8e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf4da87-ffbd-46f5-a200-de910b0fb8bd", "sighting_of_ref": "indicator--af9e82e6-3429-4448-8d36-0d389e745f8e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6236e13a-f04e-402e-b32c-ca17198ff170", "sighting_of_ref": "indicator--1fad48d4-775b-4328-a847-e8cb3f955e4a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf4a1f29-c7e1-4ece-b92b-c5d9a5c77a55", "sighting_of_ref": "indicator--93093adf-6831-4f2a-a528-addc17d6f8a6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c220e390-b237-4d7b-8cd9-1e194da4b2d4", "sighting_of_ref": "indicator--1791e7fd-eb3f-49a3-9a4a-51f626790a22", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--960fcbca-4278-44d1-b7b5-1687169994bd", "sighting_of_ref": "indicator--3047d836-9653-45b1-8198-a19a39f93094", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cacbf2bf-7065-4fef-b403-8752468993da", "sighting_of_ref": "indicator--49c3c232-cc52-4a1c-a32a-113bbab34ae8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95160746-3b64-4ab4-a432-b6e2455d0ad5", "sighting_of_ref": "indicator--49c3c232-cc52-4a1c-a32a-113bbab34ae8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0989c4e-eb61-42be-b923-e80849dfa22f", "sighting_of_ref": "indicator--ae9da0f3-e8d0-48f8-a4ee-cc2b2319f62d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3198c4-dab4-4bac-b821-56f53b344586", "sighting_of_ref": "indicator--635f4bdd-aac0-4fd6-a7d2-db2de35483ed", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe0a1fa-29ea-4b92-903a-5c1e4baca134", "sighting_of_ref": "indicator--729fa043-e26a-4f4f-8468-ba879490b24e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb2b35c-7357-40b4-8ff4-e4e92e4b40de", "sighting_of_ref": "indicator--8e43f483-84cb-4146-b86d-75aaf9bb8988", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b298a19-5e3b-4ed0-9797-86021616861f", "sighting_of_ref": "indicator--5e199721-a547-4436-9026-8918f9e5170e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e95c92d5-1ffd-49e6-bad2-59513a10e28b", "sighting_of_ref": "indicator--447301fb-ef31-4694-8eae-5706a76b13eb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4241423-1d55-4ce5-baff-c50d4b0af9ee", "sighting_of_ref": "indicator--f9e691e1-4413-410d-a029-565925be97e8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fcf35c6-ddb0-491e-9666-0382946e005f", "sighting_of_ref": "indicator--f9e691e1-4413-410d-a029-565925be97e8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87203357-06d9-415a-8864-5cc11d229707", "sighting_of_ref": "indicator--b61c1169-530e-4ecf-9733-3a4710f6931e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b0d38c9-b950-47ef-b258-de705aa91040", "sighting_of_ref": "indicator--b61c1169-530e-4ecf-9733-3a4710f6931e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d609c1-6cda-414d-853e-c6262df99eb7", "sighting_of_ref": "indicator--b61c1169-530e-4ecf-9733-3a4710f6931e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c02f60-4909-4eb8-8e23-cd5cdc57a809", "sighting_of_ref": "indicator--bee3b353-3975-4c81-9b5b-ca79ee1c495d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf66a590-d25b-4a8b-8bea-abe2320b31d6", "sighting_of_ref": "indicator--bee3b353-3975-4c81-9b5b-ca79ee1c495d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531ebb70-806a-451b-8502-50963aba516f", "sighting_of_ref": "indicator--bee3b353-3975-4c81-9b5b-ca79ee1c495d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976ffadd-dd55-4075-8512-a53d4c8d16e2", "sighting_of_ref": "indicator--8e3e65be-7fff-44de-ac7a-654ee5c36a19", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8361ee88-373c-4100-9e10-53485881c451", "sighting_of_ref": "indicator--24373112-ea69-4d3a-9a82-c3f42be53b38", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efc4e52b-62ec-4e1f-94d8-743c1fad1e89", "sighting_of_ref": "indicator--e65ed528-b079-481d-9a22-ec936613e50b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9192111-860b-4da7-a4b0-d87685807fa7", "sighting_of_ref": "indicator--3ded546c-5568-40e7-89c9-7111a30bb1fc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--836eebce-0a06-42e6-9cff-7ee5de5c14b0", "sighting_of_ref": "indicator--8bed0852-3b7a-4f96-99d0-6e36dda54fd9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fc044ed-bb6b-418e-a5d0-c0ebb06e4847", "sighting_of_ref": "indicator--fa6fbf44-8981-4267-92c8-6d04c17c6d28", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77070763-6682-46ae-8de0-3a49b8199b31", "sighting_of_ref": "indicator--fa6fbf44-8981-4267-92c8-6d04c17c6d28", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--189c6c84-bf20-4750-9643-2214835df1bf", "sighting_of_ref": "indicator--fa6fbf44-8981-4267-92c8-6d04c17c6d28", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9adc1f76-8bfa-4410-b86e-1c48dfa16930", "sighting_of_ref": "indicator--dda6f328-c8c6-45e2-be32-a2eda24923bb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cded204-ebd7-4794-b3c1-b3cdb71184fe", "sighting_of_ref": "indicator--0fcecf0f-8b24-4b6a-9a1d-b3eea0f47b00", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5aeb477-626f-4660-91e2-a2e604e358c6", "sighting_of_ref": "indicator--4f35099d-cac0-42ff-990a-7b531ebb4078", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d95c14e-55a8-4e41-b698-12363e155237", "sighting_of_ref": "indicator--4f35099d-cac0-42ff-990a-7b531ebb4078", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd926c36-1f0d-4e69-a455-36db1fbd1efc", "sighting_of_ref": "indicator--4f35099d-cac0-42ff-990a-7b531ebb4078", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0287ffb-f776-423d-90c4-e860c59737ce", "sighting_of_ref": "indicator--d5785cc9-6ed0-4656-aeb0-1f5bb007bc25", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e225429-1fe7-4041-b756-5396b42b7fc6", "sighting_of_ref": "indicator--0b3ecc20-27b3-4b27-89e2-5175677c582f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80cc67bd-d866-4d68-9524-75c2f487d254", "sighting_of_ref": "indicator--b7b164f2-ad58-4b3f-94ce-5581a1ee128d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3dcdbbc-3593-485d-8b73-5aea37bb4b7e", "sighting_of_ref": "indicator--d44b7771-110e-4b75-9e4c-d6b177e903da", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f268088c-a6d6-4c21-8e04-6edcf0a4d0c2", "sighting_of_ref": "indicator--f28f77ed-6866-4f21-bbe7-2bcc9f1650a1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0accc57b-97c4-44c6-9f03-ba38e8dea480", "sighting_of_ref": "indicator--0f4cd1ad-c11b-420a-a0ca-cf2759814ced", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19300b78-7641-494f-ae20-bdd92fc8b603", "sighting_of_ref": "indicator--03478443-d859-4d7e-818c-91ff45be067f", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c34dfba1-e11b-4ee6-882d-7d6147b6ea3a", "sighting_of_ref": "indicator--e572f7d7-2264-435f-8b3b-057f9ba1d5ec", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d10de5-bc36-45e2-9001-22cf31ac1e05", "sighting_of_ref": "indicator--d0888c8e-2811-4f6b-b24b-c8eba777c149", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88d10e6-27c6-48c3-946b-07c3f3f7b82d", "sighting_of_ref": "indicator--e9b62d16-2088-4b69-92e7-62dc8d0134c8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c69ad0-f88d-40ed-b630-bfdb06d406da", "sighting_of_ref": "indicator--2d787cc7-35b4-4967-aa31-cd6137f11835", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd9e2263-026a-414d-9380-d58b2552993e", "sighting_of_ref": "indicator--df31f86e-6f05-4884-be11-9070738a764b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6674ae19-f06c-49d2-9e09-a81ba42dc700", "sighting_of_ref": "indicator--5dd58a37-ce2a-4291-8cd7-936681006e9a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af5c6fc-5982-4f3a-8107-c6c8323ae4e6", "sighting_of_ref": "indicator--6df516f9-a15c-46f7-965c-a54bbd9ef569", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b31805b-c08f-4753-98e8-a216819340a1", "sighting_of_ref": "indicator--01c26ab8-26f9-4d51-9bde-411eb3decb71", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b6f7fae-5322-4cf7-9bdf-494b05f77bde", "sighting_of_ref": "indicator--80b633d3-1e36-4b04-b980-419f404cbef1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47deba33-4a40-4212-87a8-eee46bc976b7", "sighting_of_ref": "indicator--b9fc5780-6e3e-4ee6-aa56-48df2fbb770e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f164c9b8-dbac-4e5d-9d9d-479ad3ce150c", "sighting_of_ref": "indicator--c5fcf4bd-fbfa-459c-8227-8b5decbc32c6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e2566f-f3cb-49c3-ae8c-3e3114f9f6f0", "sighting_of_ref": "indicator--2c83da5a-a309-4298-9b48-f16cdd4f3e76", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e3ec676-d7cc-4bae-be7e-1ee27451dacc", "sighting_of_ref": "indicator--2c83da5a-a309-4298-9b48-f16cdd4f3e76", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ac6128-bce1-47ed-b84a-a3e5ce8ae2d8", "sighting_of_ref": "indicator--a028c5e4-34c4-40ab-9fe4-1ba131fccbbc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74edbae2-e41e-4183-99c4-82a92da08a5f", "sighting_of_ref": "indicator--fd2d16b0-a7a1-495f-b2b1-c7ec0a7b6f98", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4a929c-f686-457b-be74-eaa32a904532", "sighting_of_ref": "indicator--fd2d16b0-a7a1-495f-b2b1-c7ec0a7b6f98", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8968cf13-6bd6-4495-b90c-78c2f93e56e3", "sighting_of_ref": "indicator--fd2d16b0-a7a1-495f-b2b1-c7ec0a7b6f98", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e79c51-d4d2-4a17-bd75-d075e288fdf0", "sighting_of_ref": "indicator--88c80db6-a4d6-4929-88bb-ac75ab96e8fb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e07456-52b3-420d-a3a0-45f7956b09e6", "sighting_of_ref": "indicator--88c80db6-a4d6-4929-88bb-ac75ab96e8fb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2e8cda-6032-46eb-8e77-d6482b1aded7", "sighting_of_ref": "indicator--88c80db6-a4d6-4929-88bb-ac75ab96e8fb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eceaebc6-59b6-4ae8-97d7-95f5892df988", "sighting_of_ref": "indicator--983588d2-e199-4f96-909a-bc00f13e2a45", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28000375-dde7-433d-8f72-7084cc07cf55", "sighting_of_ref": "indicator--4a37f09d-f3c6-4f92-b872-841577ae13e6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000df052-60e7-47e7-ab11-14cc48344874", "sighting_of_ref": "indicator--c0ab573c-236c-4a5c-80ac-a603b78b4cc2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a590ce-e708-4ce6-87a5-d2e6883492ae", "sighting_of_ref": "indicator--271ed0b9-1af8-4c2f-94c0-8b323c130a2f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d724f25-5bb8-40ca-9715-6b41089fc79b", "sighting_of_ref": "indicator--271ed0b9-1af8-4c2f-94c0-8b323c130a2f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3912c6-1880-4b12-a58d-91a0223ba369", "sighting_of_ref": "indicator--ff3fbc33-de18-412d-a369-e00cdf5c0ec5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc36190e-f463-4c63-abbe-659cbb7799b7", "sighting_of_ref": "indicator--ecb01fba-96e9-4918-a986-6cb05c518ec2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf10861-24b9-44a1-aa0c-722e15a36366", "sighting_of_ref": "indicator--c66bff4b-92fa-428d-a4e0-34201527a105", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27425f2a-4ae1-46cb-9f86-f3986885de26", "sighting_of_ref": "indicator--c66bff4b-92fa-428d-a4e0-34201527a105", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f57ce30-5600-4e16-ae33-561370beda0e", "sighting_of_ref": "indicator--fb0bd916-5206-497e-a220-b357c276b8ea", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--810458b8-2012-4ed5-8b96-eda3f69211c3", "sighting_of_ref": "indicator--fb0bd916-5206-497e-a220-b357c276b8ea", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4502233d-c5c6-4e1a-8109-9bfd6ff181ff", "sighting_of_ref": "indicator--3fa151c7-3fa4-4052-9b34-dd1ff8390b33", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d40433-2d51-4ff9-ad31-4856f57d3945", "sighting_of_ref": "indicator--ef3df9fc-2b27-4772-8bd0-5aef0220615b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d03944-5975-4ea0-91c1-c887f62264d1", "sighting_of_ref": "indicator--345ba3d0-a199-4c31-951a-1cd054d27473", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b797889-6b49-44f1-9c1c-8de05c518476", "sighting_of_ref": "indicator--a1b356b7-43e0-477a-88aa-3e39d4ab3283", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--050d7c0b-9ba4-4786-b7d9-e9f3c22a98b7", "sighting_of_ref": "indicator--b5946ac5-ac90-43ed-9337-63d1e1dc4ae6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd806222-07d4-4312-82e0-2e1710e0beca", "sighting_of_ref": "indicator--ce52fab4-651a-4351-b314-5b2180f22d22", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79251616-7c02-4b19-8498-d3e72c1c9b2a", "sighting_of_ref": "indicator--d4dedcea-1480-45bb-aa17-7a4445f2861a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ed6d07-d812-4be1-a01c-65c6e48b1fd3", "sighting_of_ref": "indicator--9e73a0e2-0b3f-4f22-afcd-57db9071b0f8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e9c1a6-aa28-4817-afb9-46c22d4cf275", "sighting_of_ref": "indicator--9e73a0e2-0b3f-4f22-afcd-57db9071b0f8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cddf7cdd-7b65-4805-a32d-7bf8be7f5bc6", "sighting_of_ref": "indicator--9e73a0e2-0b3f-4f22-afcd-57db9071b0f8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb961c6c-550a-4fa2-9b3e-298d93185519", "sighting_of_ref": "indicator--bafa2276-117a-41ec-ac6c-93628f1492e8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097aa90e-2293-42c7-8d3d-33ade84d459a", "sighting_of_ref": "indicator--bafa2276-117a-41ec-ac6c-93628f1492e8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c48af6-6be3-4aa2-bf31-fde1978fb036", "sighting_of_ref": "indicator--70bff06a-58d6-4eea-8315-5061a4994c0e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ccc7b5b-bcf2-41ab-9ad1-c2347f09500b", "sighting_of_ref": "indicator--52ee3f0c-e72a-4886-814d-0b2c86d5444b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ec16c6-bdb7-4ade-8157-5bbcc35d4979", "sighting_of_ref": "indicator--52ee3f0c-e72a-4886-814d-0b2c86d5444b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e45099-383c-4c22-86b1-313225b3783d", "sighting_of_ref": "indicator--52ee3f0c-e72a-4886-814d-0b2c86d5444b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f89fa95-5db0-4267-bf87-6a11d31400fe", "sighting_of_ref": "indicator--7219f51e-2d9e-4d65-9f15-aaa47c46e2be", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60682b3b-9716-432a-89f5-262955211028", "sighting_of_ref": "indicator--7219f51e-2d9e-4d65-9f15-aaa47c46e2be", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a692bb-56e1-461b-8a80-50e31dc02b92", "sighting_of_ref": "indicator--7219f51e-2d9e-4d65-9f15-aaa47c46e2be", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654b1e02-b413-4b24-89ae-c800f96b0b53", "sighting_of_ref": "indicator--47904cca-afd9-45f6-9f99-a6e0a1d1ed60", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c312faa2-4784-475f-b3a4-8a19f7844dc1", "sighting_of_ref": "indicator--47904cca-afd9-45f6-9f99-a6e0a1d1ed60", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--084162b4-5874-497e-875d-0d2b421e1ca7", "sighting_of_ref": "indicator--d52b8e26-98d0-4e0c-8239-54924c71b07f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8424d553-e69f-4136-a014-f207dfde708b", "sighting_of_ref": "indicator--d52b8e26-98d0-4e0c-8239-54924c71b07f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce50147-deb8-414a-8fa0-38dfc73cd0ea", "sighting_of_ref": "indicator--d52b8e26-98d0-4e0c-8239-54924c71b07f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d75779b0-5ecc-46c6-aead-f5c9a9df5d77", "sighting_of_ref": "indicator--d52b8e26-98d0-4e0c-8239-54924c71b07f", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2196c0-3d35-40ac-8ab9-4544be1e2bbc", "sighting_of_ref": "indicator--7037dae9-933c-42fd-add9-b4a23a147178", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb49ce4d-59f7-4254-a231-057383dbf5cb", "sighting_of_ref": "indicator--7037dae9-933c-42fd-add9-b4a23a147178", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--701e251b-6649-4301-b820-f426524f9643", "sighting_of_ref": "indicator--7037dae9-933c-42fd-add9-b4a23a147178", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7d4f2de-7c3d-4736-95f7-991b020d0218", "sighting_of_ref": "indicator--7037dae9-933c-42fd-add9-b4a23a147178", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--777f62c1-f855-4500-b0cf-c229a179493a", "sighting_of_ref": "indicator--724a417b-69b7-4887-bbd5-fac7a3aea532", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bba3f3c-bd4f-4191-9f6a-c918bdcdee26", "sighting_of_ref": "indicator--724a417b-69b7-4887-bbd5-fac7a3aea532", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e733cd-12aa-4734-ae71-2e73824ef05d", "sighting_of_ref": "indicator--724a417b-69b7-4887-bbd5-fac7a3aea532", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feaf5047-3302-49cb-8e6f-7a2002f567c6", "sighting_of_ref": "indicator--67720080-1e14-4c10-8ca1-66a503e8533a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf9ae81-ff90-4476-bbd5-645ed566dc4d", "sighting_of_ref": "indicator--67720080-1e14-4c10-8ca1-66a503e8533a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610f7102-353e-43f6-a369-1c81f79309a4", "sighting_of_ref": "indicator--67720080-1e14-4c10-8ca1-66a503e8533a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d84a1a-5ab9-41f3-8950-3db67d5fd870", "sighting_of_ref": "indicator--67720080-1e14-4c10-8ca1-66a503e8533a", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e18e3e1-4762-4467-a6b5-0bbb2d0fe171", "sighting_of_ref": "indicator--8f5fdc14-2c9c-468e-8d05-36dd2f3ef362", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb987f2-ebfc-49d2-97f9-2f8cb7001128", "sighting_of_ref": "indicator--4130e664-d8f1-4a8f-9051-e8f1e83cb9ed", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc40f5a0-aba7-472e-9525-d5680f453770", "sighting_of_ref": "indicator--4130e664-d8f1-4a8f-9051-e8f1e83cb9ed", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7f2416-5a52-4b5c-8f31-6d02162e42f0", "sighting_of_ref": "indicator--4130e664-d8f1-4a8f-9051-e8f1e83cb9ed", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af132c04-0dd8-47d6-aad6-e2175a8a22c0", "sighting_of_ref": "indicator--6940b611-d4d0-481f-a443-b1245e725554", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff13eb7-4367-4093-b29b-edd28ec84551", "sighting_of_ref": "indicator--6940b611-d4d0-481f-a443-b1245e725554", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd07f568-0cdf-44ab-b9af-b06f2a35fdba", "sighting_of_ref": "indicator--6940b611-d4d0-481f-a443-b1245e725554", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81377c1d-f902-4b48-84ff-c18c1ffd6e2a", "sighting_of_ref": "indicator--88d4d7ce-9f39-4ae9-9362-e2579f350d01", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4bad83-ae66-48d9-92eb-294c1efebb87", "sighting_of_ref": "indicator--b77545ae-2f85-47d9-b4d4-ff8cb9abc5b1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ec2fd2-ab71-4bf8-af01-ad2e916c4016", "sighting_of_ref": "indicator--eded6d4a-d1a9-46ab-abde-616aad9c1bcd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f353cf-7b75-49a4-af7d-e234cef5c7eb", "sighting_of_ref": "indicator--10010e93-fe36-4a17-8916-8b0c4b4a5ff6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0feff23e-398b-4da0-a3db-ff14f492751a", "sighting_of_ref": "indicator--3029862d-d975-45e3-817e-af38ac81223d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--732fac5e-a877-42aa-a627-ce8a5a248208", "sighting_of_ref": "indicator--b04cdd25-c180-41e6-8449-98f25df6cab1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca5d937-989e-48ab-a25f-7f98696a6279", "sighting_of_ref": "indicator--f6dd33e8-ae85-416c-be67-e07fca0febc6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116ec954-5ea1-4c69-b7d6-3fe62c6fe7d8", "sighting_of_ref": "indicator--b0e5cc3b-de6e-4e33-af96-dad2828df2fd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a190d6d5-4293-4249-9169-7eefb385c350", "sighting_of_ref": "indicator--b0e5cc3b-de6e-4e33-af96-dad2828df2fd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92b661f-d270-4832-b1b9-0359cbd1add3", "sighting_of_ref": "indicator--b0e5cc3b-de6e-4e33-af96-dad2828df2fd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab1517c-56aa-4760-ba84-b250ee4d82b1", "sighting_of_ref": "indicator--22e6719f-3281-4198-b95a-ca3a8ac997e4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8359ba3f-9675-4ae9-aad1-826fc40cc757", "sighting_of_ref": "indicator--22e6719f-3281-4198-b95a-ca3a8ac997e4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db8c0ab-d2c1-49fa-9dd2-c5224da65ca6", "sighting_of_ref": "indicator--22e6719f-3281-4198-b95a-ca3a8ac997e4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b264ab4-7830-45a7-8c2c-076a3b4756ab", "sighting_of_ref": "indicator--4c476516-e453-4184-bbe3-c0fe5830db51", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f6519b5-10a6-4ab0-b26d-ff3da8630529", "sighting_of_ref": "indicator--4c476516-e453-4184-bbe3-c0fe5830db51", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--939dc392-6408-4d89-9887-e94cd6245b2b", "sighting_of_ref": "indicator--4c476516-e453-4184-bbe3-c0fe5830db51", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7129b00-c27e-46ab-9ad4-9f3e8c8ba0ab", "sighting_of_ref": "indicator--35d97945-9ea2-4e55-b76f-687de5aefefa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57bec8a-0b5e-4ccf-9ec9-46c4ed26939a", "sighting_of_ref": "indicator--35d97945-9ea2-4e55-b76f-687de5aefefa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822d2ca2-b7d0-4e9b-b4a2-edee511742fe", "sighting_of_ref": "indicator--e194772b-9cd2-4559-be57-9e962bbfdbbf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f8079c-9a2f-4d98-a2dd-88704b5afc29", "sighting_of_ref": "indicator--e194772b-9cd2-4559-be57-9e962bbfdbbf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5fec10b-6fd9-4686-977b-b6340df09f5b", "sighting_of_ref": "indicator--e194772b-9cd2-4559-be57-9e962bbfdbbf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df98d5f-0aea-4477-a1e6-2efadb35425a", "sighting_of_ref": "indicator--63b680b5-9631-4915-9f97-07059fe1604f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a87a90b7-81a5-430e-87c0-6a753c723bb0", "sighting_of_ref": "indicator--63b680b5-9631-4915-9f97-07059fe1604f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88dab408-f0ae-4af9-9b5a-a9b4024f7af4", "sighting_of_ref": "indicator--63b680b5-9631-4915-9f97-07059fe1604f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f17ef89-dac6-4d2f-bb8a-0d2b031d8cdc", "sighting_of_ref": "indicator--6d83912c-221d-4241-ab1d-d537ac096eeb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--765eae00-b535-4507-b07b-cb4f6a18f99b", "sighting_of_ref": "indicator--6d83912c-221d-4241-ab1d-d537ac096eeb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--582c9adc-e0f4-4e40-87f2-4e4016fecd5d", "sighting_of_ref": "indicator--6d83912c-221d-4241-ab1d-d537ac096eeb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6db84a-96bb-409e-832b-9a9c460ec360", "sighting_of_ref": "indicator--34ac4ba3-52f8-4139-b170-ec2b4f50bca4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a55b31f3-0392-42f7-85af-d094d487be82", "sighting_of_ref": "indicator--34ac4ba3-52f8-4139-b170-ec2b4f50bca4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360b81eb-3516-4451-baa6-1473685cd464", "sighting_of_ref": "indicator--34ac4ba3-52f8-4139-b170-ec2b4f50bca4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255fc6d7-efc9-40b1-a051-f71a73caff36", "sighting_of_ref": "indicator--34ac4ba3-52f8-4139-b170-ec2b4f50bca4", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe5a65f-48fc-42a3-aa0d-f35d739e76c2", "sighting_of_ref": "indicator--0bdddfb5-f729-4a01-969b-c9cb992c6c68", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e71cbc-ea5a-43d0-a660-24bfac2f8132", "sighting_of_ref": "indicator--1c609e14-338d-4d23-a265-652a71616d9d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c3c09b-0251-4c10-a697-43d2bde0d3d4", "sighting_of_ref": "indicator--1c609e14-338d-4d23-a265-652a71616d9d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d5ac458-2c35-4100-b907-0a3b0df29e4b", "sighting_of_ref": "indicator--1c609e14-338d-4d23-a265-652a71616d9d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21b802e-b2f5-4923-840c-bb9fb09aa375", "sighting_of_ref": "indicator--02d23d54-046e-4b7d-b658-e519bb716a13", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be536ca5-7b0f-46ef-adaa-8f018a1350f5", "sighting_of_ref": "indicator--02d23d54-046e-4b7d-b658-e519bb716a13", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ecd7443-45ac-477f-b2cf-f1b902fe74e8", "sighting_of_ref": "indicator--02d23d54-046e-4b7d-b658-e519bb716a13", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84b0eec-e1bd-4bad-8468-90e7f6d18a46", "sighting_of_ref": "indicator--3484e46c-c7ac-4bff-9077-86676e046402", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6243b0-e6bc-475b-b00e-065216dc23b9", "sighting_of_ref": "indicator--3484e46c-c7ac-4bff-9077-86676e046402", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcebfe50-ae7f-4ba5-96a3-90a3474ae618", "sighting_of_ref": "indicator--3484e46c-c7ac-4bff-9077-86676e046402", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1624b317-f8b4-42d2-adb2-035d11846d53", "sighting_of_ref": "indicator--c0d24541-fc7a-4313-88e2-7be225eca04f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70eafae7-f614-42f6-b1f6-a8979e29d417", "sighting_of_ref": "indicator--c0d24541-fc7a-4313-88e2-7be225eca04f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--277e8fa0-5296-4f8d-83e3-b91b26bf3a17", "sighting_of_ref": "indicator--c0d24541-fc7a-4313-88e2-7be225eca04f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c00e04-1b41-41be-b5f1-f84d1fc5586e", "sighting_of_ref": "indicator--d70d3aee-4bdd-46e6-87b9-c9c672512c66", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b347c9ea-16b5-4009-b5d7-ad89e12fa2ac", "sighting_of_ref": "indicator--d70d3aee-4bdd-46e6-87b9-c9c672512c66", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce0c7c1-8505-4dd2-82cc-cbda02e8b1df", "sighting_of_ref": "indicator--d70d3aee-4bdd-46e6-87b9-c9c672512c66", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b593106-a7a4-4e29-8dbe-009bba475bab", "sighting_of_ref": "indicator--b4880c81-3317-4e58-a709-9166e243bd30", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0972ba98-a97e-4ccf-a048-e17b438536e2", "sighting_of_ref": "indicator--b4880c81-3317-4e58-a709-9166e243bd30", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dbfc487-5c7b-4930-8dba-24bf4dc5a1b2", "sighting_of_ref": "indicator--b4880c81-3317-4e58-a709-9166e243bd30", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb22ac8e-0193-4e73-b082-8ede7dc3501a", "sighting_of_ref": "indicator--f5b4c42e-4c53-4d9e-9d1b-d144a7c6e9a3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a967d681-dc70-4816-8cb7-6ed474a23d42", "sighting_of_ref": "indicator--f5b4c42e-4c53-4d9e-9d1b-d144a7c6e9a3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d968b2b-95e9-43eb-937e-e1d6873e7de1", "sighting_of_ref": "indicator--f5b4c42e-4c53-4d9e-9d1b-d144a7c6e9a3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac0fa5f2-45b7-4ad8-8e5e-ae592ca17cdc", "sighting_of_ref": "indicator--e60e6e94-f1c8-4e8f-83e3-70c1b1fe3ea4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527682fd-fe02-46a8-a105-24fdf78a62f2", "sighting_of_ref": "indicator--e60e6e94-f1c8-4e8f-83e3-70c1b1fe3ea4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f4fcf45-df52-46b6-8bba-8a08f20629aa", "sighting_of_ref": "indicator--e60e6e94-f1c8-4e8f-83e3-70c1b1fe3ea4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65099af6-1bb6-436a-bc25-979a3d790ad6", "sighting_of_ref": "indicator--3ebf9bad-4dea-40c7-9b2c-5e7b587918d3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b0a873-2c96-402b-ba16-f4e133ef196f", "sighting_of_ref": "indicator--3ebf9bad-4dea-40c7-9b2c-5e7b587918d3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26255dd4-bec2-479d-a31f-73ddb063046c", "sighting_of_ref": "indicator--3ebf9bad-4dea-40c7-9b2c-5e7b587918d3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a1a56c-943b-4c21-9ed5-7e194913fbf7", "sighting_of_ref": "indicator--91260854-d121-495c-852b-269737935ce6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a51d5f5-cb0b-44f9-96c3-91e7089f1651", "sighting_of_ref": "indicator--f9b1f56f-1583-4d04-a0bd-060b92348807", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf00a2b-6fc9-4123-b2d8-872144022834", "sighting_of_ref": "indicator--f9b1f56f-1583-4d04-a0bd-060b92348807", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--857b74ba-b4e0-4a7e-9775-c512451113a1", "sighting_of_ref": "indicator--f9b1f56f-1583-4d04-a0bd-060b92348807", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593d0a56-24c6-4c7d-957d-2b278284cae1", "sighting_of_ref": "indicator--84902204-3382-4460-8119-5f457e1eb122", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a50bce9-d1fc-40c0-a8b5-6ee35494840e", "sighting_of_ref": "indicator--d8fdd3b7-63e6-481f-8560-b4867ef9deba", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c4c63a-8143-48d5-862a-2f1f85cc2986", "sighting_of_ref": "indicator--19dba423-7a11-4152-a4c8-818cbe6d257d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4286edf8-3c0b-4c1c-be7e-40ef3ad74652", "sighting_of_ref": "indicator--cc0f8e30-3501-4f44-ad2a-4eeb32c6802d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c958968-3719-4287-8cdb-ea323f68454d", "sighting_of_ref": "indicator--cc0f8e30-3501-4f44-ad2a-4eeb32c6802d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b218a3-6167-48ae-b3f4-031017b69321", "sighting_of_ref": "indicator--d77e4284-81aa-4608-9005-845dce6a8dbe", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b57b06e-cc42-427e-91b0-8f21a9e653c4", "sighting_of_ref": "indicator--d77e4284-81aa-4608-9005-845dce6a8dbe", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5784b0c9-a333-4f2c-8cd7-cfaf550038ca", "sighting_of_ref": "indicator--d77e4284-81aa-4608-9005-845dce6a8dbe", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6efdd8e-df6d-43d8-b2d7-4a1dadb0a119", "sighting_of_ref": "indicator--e76b40ae-110d-44e5-b59a-8553e38ef9e0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f69ba5-4a0d-4127-b7c3-829c6cd05e75", "sighting_of_ref": "indicator--e76b40ae-110d-44e5-b59a-8553e38ef9e0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64656b42-908a-47ce-9683-69c84e7ad928", "sighting_of_ref": "indicator--e76b40ae-110d-44e5-b59a-8553e38ef9e0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93552862-03e3-4a74-93bf-0a3466bc82e4", "sighting_of_ref": "indicator--ed96cd26-3b99-4b52-98c7-70b833a87bfd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79087ac8-a19e-4f84-8d62-be39ba0019e2", "sighting_of_ref": "indicator--ed96cd26-3b99-4b52-98c7-70b833a87bfd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a22c85b-f2e0-4af8-92e3-62d6efce6231", "sighting_of_ref": "indicator--ed96cd26-3b99-4b52-98c7-70b833a87bfd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76891e25-920d-4f91-8da9-7e0f6a9cd268", "sighting_of_ref": "indicator--07d40933-b4be-4fc6-86b6-63745590ea62", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549968ad-7073-43ab-a875-57ded7c6d336", "sighting_of_ref": "indicator--07d40933-b4be-4fc6-86b6-63745590ea62", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7461d8a1-4b9a-4d75-8b7b-0904d3420ca7", "sighting_of_ref": "indicator--07d40933-b4be-4fc6-86b6-63745590ea62", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da07b6e5-10a8-4dd5-a27d-2e957d6bb841", "sighting_of_ref": "indicator--f9ed5cff-35be-4b38-a1c4-c34a45f3e3ef", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcbcc112-cc26-410f-a308-d3185fc12711", "sighting_of_ref": "indicator--f9ed5cff-35be-4b38-a1c4-c34a45f3e3ef", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--876f6b47-fd85-4169-9fd6-45a5a65acd78", "sighting_of_ref": "indicator--f9ed5cff-35be-4b38-a1c4-c34a45f3e3ef", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d71f53a-028f-42ce-8aa9-da9f2039793f", "sighting_of_ref": "indicator--6c95391c-10f0-41fd-a5f8-9dabd78ca5de", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7d0453-7ba2-4caf-b7f1-5361eebd6475", "sighting_of_ref": "indicator--6c95391c-10f0-41fd-a5f8-9dabd78ca5de", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42123756-414e-456a-9535-9c9578abc9e1", "sighting_of_ref": "indicator--6c95391c-10f0-41fd-a5f8-9dabd78ca5de", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fafedc72-9b8e-458f-99a8-db75c58323e1", "sighting_of_ref": "indicator--7bec7900-154d-406a-8ded-60d44ed8a59c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d21a53-ce01-448a-a293-86230d9af422", "sighting_of_ref": "indicator--d2871ea4-c071-4bf6-8ca5-cf2a31922b96", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e8567c-315c-408c-aab4-beda3d1494f8", "sighting_of_ref": "indicator--d2871ea4-c071-4bf6-8ca5-cf2a31922b96", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45cd123-3e5b-4754-a17e-779a63dde430", "sighting_of_ref": "indicator--f02fc850-6f5a-47bf-9029-fa1722ca940d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8393aedf-ddb0-4ca4-8aaa-8a1fadbbb8f2", "sighting_of_ref": "indicator--6b05397b-b3b4-416b-b854-111a119d54cf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a39c822-1fa0-495f-b4e0-b622ae92f61a", "sighting_of_ref": "indicator--3504e427-84b6-40bb-8e22-f15f1adc3153", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d86cfcd3-3626-40e0-ba38-c7f8590ff57d", "sighting_of_ref": "indicator--42dc98ab-a46b-4678-901b-b39c1128e480", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72d934f7-0ff9-4586-91c8-e90a8f1e729e", "sighting_of_ref": "indicator--8c837594-1b22-4298-9f74-c7a3b6ad1ebc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8daffeda-4cf8-46b3-b839-b489f27fa535", "sighting_of_ref": "indicator--0230ef8a-a658-4ceb-af5a-22473f1ab3b1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6d00d2-08a0-414b-bd69-8ed8847e74c9", "sighting_of_ref": "indicator--ed957fe5-02c8-43ee-a254-d96042ab767a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a1d1d9-b180-4138-a442-381a015cd5e4", "sighting_of_ref": "indicator--03c7dea1-49a0-4417-95b2-4ee695b2d6d2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036711f9-7e03-4831-b4fd-5191c9476b4b", "sighting_of_ref": "indicator--a97f7b7c-72ee-4974-ad4d-eb5a058ffe0c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38086298-1e00-4b81-9aec-dfb7d078ad21", "sighting_of_ref": "indicator--61123290-7cf1-461f-af71-62fd085fca52", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb14afc-71a9-46e3-922b-f042a6e7e640", "sighting_of_ref": "indicator--d4ea09cf-e724-43e7-ba47-74e112785a30", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b01f8d-2de6-40ce-ba13-e002fd038b31", "sighting_of_ref": "indicator--43ac270f-ec1c-48dc-9c66-604cd96b7965", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91fbde0d-1de1-47ce-9009-d0b8215f84fc", "sighting_of_ref": "indicator--0eb3b17c-a7bb-4290-9f8c-76dee08d9db3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275c8aa6-4a4d-47f0-97c9-1b4fd966caa7", "sighting_of_ref": "indicator--b5a3516f-d56b-458e-8336-607857ba7261", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e46d920e-f0ac-4290-81a3-74756a335322", "sighting_of_ref": "indicator--02074b75-c860-4e37-899b-7f485769ad8e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e2e556-6e48-4f46-8221-9759ec3cf86b", "sighting_of_ref": "indicator--ce8ec790-7634-4bb0-8de5-ec33bf684dc3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44847124-778e-4d21-b783-d0ac71222a54", "sighting_of_ref": "indicator--c1a45d91-44c6-4128-b103-8bb80ce971ab", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb074bc-85b3-4804-b31c-72eb5eeec4c1", "sighting_of_ref": "indicator--a4db1cf6-890e-41bb-a427-ad318b9ce62c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d59d90-1042-4371-9f3d-a5179a19764f", "sighting_of_ref": "indicator--c6566da3-abfc-43f9-b11a-c26966fefede", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ccce42-9ec9-465b-94bb-df99bb6ef6bc", "sighting_of_ref": "indicator--3888589c-98b8-400a-a713-9377132ff0e6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5e322b-86c8-46d8-a2c5-09d74b2e8b64", "sighting_of_ref": "indicator--1fa2bfdb-abd3-4fd4-a985-5dca93e19db1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2cbf35f-1fa3-42fa-90a4-b5e416616c3d", "sighting_of_ref": "indicator--95fea76d-e134-4979-82c1-23abc9adbd93", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2ca34a-f867-438e-949f-56a30f3b4828", "sighting_of_ref": "indicator--95fea76d-e134-4979-82c1-23abc9adbd93", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4b9b4b-0ff8-48b9-b9df-7247d377dabb", "sighting_of_ref": "indicator--95fea76d-e134-4979-82c1-23abc9adbd93", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3950884e-9bca-4427-afb5-52d928a38d8b", "sighting_of_ref": "indicator--f31140e0-1972-4da0-a89c-9f421e66ebcb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163028ca-ed41-4916-b5aa-983dbe5215b2", "sighting_of_ref": "indicator--f31140e0-1972-4da0-a89c-9f421e66ebcb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fdd1dfc-e93d-4aae-a63b-9f85a47a4e9a", "sighting_of_ref": "indicator--f31140e0-1972-4da0-a89c-9f421e66ebcb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1101b662-38ae-41cc-a585-c5df759ff7b1", "sighting_of_ref": "indicator--279b90f3-f93b-4f12-8e81-191d3149dbb6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a3b517-5172-408c-ae52-850d9ccf6322", "sighting_of_ref": "indicator--279b90f3-f93b-4f12-8e81-191d3149dbb6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dbe2106-5607-4975-bc94-fcff4696e9ca", "sighting_of_ref": "indicator--1864cb56-d154-4159-b2c9-3d4a1a05b6de", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebfaabb2-dd82-419a-bb84-74e9e6a3035c", "sighting_of_ref": "indicator--26531f46-140d-4c8d-a747-b5f90e51cf68", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2177b99-0db0-45ff-bdab-2fd92908c876", "sighting_of_ref": "indicator--26531f46-140d-4c8d-a747-b5f90e51cf68", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba6e612-7c2a-440a-aba8-bcc59ac453f5", "sighting_of_ref": "indicator--26531f46-140d-4c8d-a747-b5f90e51cf68", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a50bfa-3942-44d6-8b4a-0cc4032db316", "sighting_of_ref": "indicator--5b5e6d6b-4aed-410a-9cf6-650520b25b07", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3e8c9eb-a065-4431-bca0-6e40470bdf26", "sighting_of_ref": "indicator--5b5e6d6b-4aed-410a-9cf6-650520b25b07", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eecde0ed-3e44-435e-9bde-ee64b6675d8d", "sighting_of_ref": "indicator--5b5e6d6b-4aed-410a-9cf6-650520b25b07", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd39821a-fda6-4e7a-8df4-3455e3e8cd57", "sighting_of_ref": "indicator--4f598fa7-a5f7-4f24-ad70-96a7490c3c20", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a12c4c-0a6a-4031-8817-ad8e0ae5dcd9", "sighting_of_ref": "indicator--175e963e-8d59-4fba-abf7-42012c5d163d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1691dd67-4acb-460e-abb6-7486866a02db", "sighting_of_ref": "indicator--8d4f25e0-c140-4ff9-92d5-45c1a32aa2eb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e81182f-1917-47eb-a7a1-835d9635da83", "sighting_of_ref": "indicator--8d4f25e0-c140-4ff9-92d5-45c1a32aa2eb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d96631b-04b2-429d-aaaf-85dee62afb52", "sighting_of_ref": "indicator--06ef55b9-2cb6-418a-8818-6ab4555009f4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9939d90b-a2e1-40e1-a30c-0ffa8a9ed219", "sighting_of_ref": "indicator--6da5a1fe-c087-4859-b8e7-9921b9f33eec", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f04cec-2c38-43b9-9452-6cf7d12685c4", "sighting_of_ref": "indicator--def04c3e-4a02-4109-83bd-64bdc71bed81", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f19a32-9a1f-4a15-ad8c-e9807e554113", "sighting_of_ref": "indicator--23ee50ec-fdc8-4b95-b85a-ecaa7e1b642c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9cd8d0-3588-47bd-a852-4e57dd3bfeb6", "sighting_of_ref": "indicator--1595206d-a98a-4f58-a489-2078f8e3c2d9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9fb587a-11bc-4f29-8de6-2cd94e395726", "sighting_of_ref": "indicator--6e14dd45-142f-4b23-b944-8a1aafa405ff", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdbab183-e79d-4e3c-b4e8-cd875f3befff", "sighting_of_ref": "indicator--cb077d87-7bd5-4e58-928e-db2a7547c221", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad335248-af75-40ef-8ee7-7b6ffb7cd81d", "sighting_of_ref": "indicator--b1ed6fe1-6abf-4666-8550-390e9957c078", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036ec533-df7a-478e-822a-a625270e405f", "sighting_of_ref": "indicator--b571aa99-a6f6-49ab-b5a2-e9fbf2a130f2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--758f7d5d-ccfa-483b-9706-293eb5c335d0", "sighting_of_ref": "indicator--abb51773-bfda-4551-a430-ac41395517c8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9fc358-f964-46a0-a4b5-efc1ecf8f831", "sighting_of_ref": "indicator--42b612e0-96d6-4757-a34f-5c7de62f9b0a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f4da6c-5b37-48d4-9072-310190f17ba6", "sighting_of_ref": "indicator--2056475d-ff46-434e-ac0d-0dbcf8796f38", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d688ed-933d-403d-9842-4f2cba04416a", "sighting_of_ref": "indicator--bcee71db-4afd-4ab5-ba25-d24c15e5de37", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dfb8350-57c9-401a-b924-7238c4c2919d", "sighting_of_ref": "indicator--3ee0a787-a0a3-4981-b226-231e4fdcf14f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4e92a2-fe29-4698-8166-f503cc37f738", "sighting_of_ref": "indicator--6548c166-bc21-456a-ade0-5806c3c127c6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f19e18dc-82fd-4c02-a7f7-875bbec789ae", "sighting_of_ref": "indicator--3f78f0c9-7d7c-4e5e-af69-9faa022a0eb2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2829064f-79c3-45f2-a1a0-9a29d5d17e39", "sighting_of_ref": "indicator--f143a3a7-4a77-4e65-a7d1-8610a9e2e327", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a312bf70-00c8-4407-9b8a-0c9192969494", "sighting_of_ref": "indicator--b5cd519a-8619-42d4-ae03-f16d60dc0aa2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da4be2e-a464-48d9-b1b5-854ded2b5b53", "sighting_of_ref": "indicator--0e2ad4db-8cfe-4cd9-8880-24b16eea418f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b1224c6-3679-4e75-8e4d-781f3f30e1ce", "sighting_of_ref": "indicator--9e87493d-e097-4ce7-9d60-24931374f10c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8323cd-668a-4013-b77c-39c62355bcfa", "sighting_of_ref": "indicator--a809d91c-abef-4730-b59b-eb9ff30a338b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d425ba75-7f67-4180-9fa7-ae8c8f621df4", "sighting_of_ref": "indicator--135b2efb-eadf-46b4-be26-4208fb382c00", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937ac130-5751-4891-8937-d0798f66566d", "sighting_of_ref": "indicator--3557a3ef-1cb3-47b4-a45a-c157f98c24ca", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede5c4ac-c67b-482b-bc5d-0c75b22f4c80", "sighting_of_ref": "indicator--3557a3ef-1cb3-47b4-a45a-c157f98c24ca", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e17468a2-e1cc-451f-9cda-9566c5bc4f9a", "sighting_of_ref": "indicator--3557a3ef-1cb3-47b4-a45a-c157f98c24ca", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631df450-bb1b-4fbe-b17c-c1159240e799", "sighting_of_ref": "indicator--1b4f0e5d-3510-49f8-90fe-41175231dab0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ed8481-53c1-4ff3-8f6c-1b14c49c62eb", "sighting_of_ref": "indicator--9e822623-81db-4a95-9d13-3d2258195ceb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5865ed3a-d933-4d0f-8059-ea85e3abb8e0", "sighting_of_ref": "indicator--9e822623-81db-4a95-9d13-3d2258195ceb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98015085-dcdc-441f-8be2-38199a1a49c4", "sighting_of_ref": "indicator--9e822623-81db-4a95-9d13-3d2258195ceb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1b49a7-e6b7-4913-9659-5d9e4ff1f858", "sighting_of_ref": "indicator--c5782358-895e-48fc-ab67-3cdf57e86174", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fba852e-63ea-41ea-9344-7c4a1a366a30", "sighting_of_ref": "indicator--1cf84cd9-9e66-49f7-ae44-3fc47885768b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c5263d-433c-4d2f-9495-c15b9071c70d", "sighting_of_ref": "indicator--e8dbde85-2fda-4fb8-b8e7-753107c39157", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5515908a-b7dc-47e8-94ef-fd885218f5f6", "sighting_of_ref": "indicator--0aa9220d-27ca-4dee-9522-e7bf8f88108b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6324b2c7-a633-444a-a58c-1e209c2a996d", "sighting_of_ref": "indicator--de81fa4d-de3f-4b17-ba9a-e45867c0925e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0679e30e-fef2-4664-9a4a-1d4772e2e3a3", "sighting_of_ref": "indicator--de81fa4d-de3f-4b17-ba9a-e45867c0925e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bda1937-48bb-428f-81ab-2a607f97f735", "sighting_of_ref": "indicator--9dbc7df2-6536-45ad-9dd0-c430cfbeb849", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e8baaf2-3c34-4598-8132-3dc32925f75d", "sighting_of_ref": "indicator--d493817b-c7c1-4986-821e-c3f29dc6e690", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b01fc6e-a05f-421c-9230-aeb4eae43931", "sighting_of_ref": "indicator--422f016a-da7f-4f57-91b4-834dfcd3f61c", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f993089-3ad8-49ac-8f57-dc17d2ca805d", "sighting_of_ref": "indicator--ffe71b46-170d-4c67-bf29-092654edba7a", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073f9a63-e87a-4e58-b9f0-8b332a18ff98", "sighting_of_ref": "indicator--953a42f1-9d96-4bde-b7e4-40f7d17796b0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205f4307-8a4e-4357-aeb9-b9f2e1468107", "sighting_of_ref": "indicator--953a42f1-9d96-4bde-b7e4-40f7d17796b0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52dc2800-69c5-4f19-b0dc-4274b4156702", "sighting_of_ref": "indicator--e420e6f9-5125-496a-96fa-e7268e72b339", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3dff7d-5c59-444b-8c6f-679853474387", "sighting_of_ref": "indicator--e420e6f9-5125-496a-96fa-e7268e72b339", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cec428d-41d7-4f38-a0a6-1dd928bdf970", "sighting_of_ref": "indicator--fb4ec33a-099e-4528-b412-69aacae6324b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7115f85f-4789-4e66-ad1a-2a5120f24b29", "sighting_of_ref": "indicator--fb4ec33a-099e-4528-b412-69aacae6324b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--347f1c7c-2c02-4c06-8d8e-e71e1a26937c", "sighting_of_ref": "indicator--fb4ec33a-099e-4528-b412-69aacae6324b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e75cb674-ac73-47d5-acf1-5c3afe5d4cf4", "sighting_of_ref": "indicator--8f024636-212a-49e5-b4e6-4cafd7e5eed8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89162e9c-f2cd-460b-a0b7-849bd2c174aa", "sighting_of_ref": "indicator--8f024636-212a-49e5-b4e6-4cafd7e5eed8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4482cb44-7ca0-49e5-94e9-cbbbf6826a59", "sighting_of_ref": "indicator--ca227912-abab-40f3-af37-6b87c05dc976", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caed726c-135d-4f92-bf28-8b67d95730f7", "sighting_of_ref": "indicator--1c1420fe-e9f5-4dfa-8a70-9ad90746457f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64860798-c6b8-4a55-bcf6-31017df1a48b", "sighting_of_ref": "indicator--986fca86-6b03-4593-b5ac-507c8516c946", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c1b3dd-cc60-4923-a69f-99266a3c0d3a", "sighting_of_ref": "indicator--986fca86-6b03-4593-b5ac-507c8516c946", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40cee4e1-ebb8-4552-9bd5-548d58bd1ed6", "sighting_of_ref": "indicator--986fca86-6b03-4593-b5ac-507c8516c946", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a88392f-d499-4d23-b4d6-11bf83b6dce3", "sighting_of_ref": "indicator--87ab3b64-986f-4f63-85d3-8e60c4d119fb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da3a715-1e70-4059-b622-555ba32d24ef", "sighting_of_ref": "indicator--87ab3b64-986f-4f63-85d3-8e60c4d119fb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af330fbc-2dd9-40ce-a532-ce5eb80527dd", "sighting_of_ref": "indicator--87ab3b64-986f-4f63-85d3-8e60c4d119fb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eef5a6ae-8868-4e81-b5ff-ecfe4dac3534", "sighting_of_ref": "indicator--9185cabb-6a22-4d7b-a956-149a4c1eb83b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524be3c8-e6c4-44ce-8562-01b228bce29e", "sighting_of_ref": "indicator--6bc1774e-89fd-4f77-8634-cdcbb80f7a33", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2b9571-5977-4699-ad4a-c10d3953f361", "sighting_of_ref": "indicator--f0d08597-2e44-479d-9b06-0536791f20c0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5a2d3a-2f9a-46bb-b526-653ceddb0a78", "sighting_of_ref": "indicator--00bcf2fb-6cb3-4d2b-9e38-b885547cd060", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc77a6b9-9433-4746-9b15-0869435c7ee1", "sighting_of_ref": "indicator--7b0e7ec7-227a-4534-ae3e-bafe14f0d445", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2139533-3f38-4234-8efd-1a1d77292085", "sighting_of_ref": "indicator--c7801181-04b3-4e7c-bd55-587c84c7b4c4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e532b1-0d7a-4e2e-ac7d-d2ee4876172d", "sighting_of_ref": "indicator--c7801181-04b3-4e7c-bd55-587c84c7b4c4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aafc9d1-67ff-4d90-8ad5-c201cb7cd93a", "sighting_of_ref": "indicator--c7801181-04b3-4e7c-bd55-587c84c7b4c4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5bf2bd6-c25f-419a-bfd7-12445dc60a44", "sighting_of_ref": "indicator--6b0f41ea-cc2d-460e-b23c-40e9adb20453", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a717a9c-73af-49a3-a8ab-3f9f89048923", "sighting_of_ref": "indicator--d19dfef8-366f-4f99-b676-08e088aca3cc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1cfe76-713b-4203-9ce7-4dd13846474a", "sighting_of_ref": "indicator--6f104393-aa9b-445d-8458-9a6e3b599995", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58391331-4a2e-4aee-a375-8acb6ee4b4f0", "sighting_of_ref": "indicator--25914b71-0343-469a-9700-5fe4591d10b7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f921124-d6dc-4a31-bf41-b6a3ece3a987", "sighting_of_ref": "indicator--25914b71-0343-469a-9700-5fe4591d10b7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb5a6951-db3e-4929-a8d7-dbdd936cc412", "sighting_of_ref": "indicator--25914b71-0343-469a-9700-5fe4591d10b7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fabf5f6e-921c-484e-9a08-5eec022fe688", "sighting_of_ref": "indicator--acc319aa-c5d9-47ef-ad20-385716e2c08b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6938ab4d-4b34-4104-be1e-d7cfd811efbc", "sighting_of_ref": "indicator--acc319aa-c5d9-47ef-ad20-385716e2c08b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d85eda-6e19-4d5a-82bc-f52e08af5af9", "sighting_of_ref": "indicator--acc319aa-c5d9-47ef-ad20-385716e2c08b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a46b6f46-0547-4fc5-8c2a-f94e8cc0ef07", "sighting_of_ref": "indicator--947f2d12-4006-4509-8565-312817830a07", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50e32b4-6479-43c4-a3ab-625bc063d80b", "sighting_of_ref": "indicator--3f243b29-8391-4276-b9ef-eca8fd40e17e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3b9ac3-e01e-42e5-959e-6ba8a0649faf", "sighting_of_ref": "indicator--1413b66d-d0f1-464a-8801-c4e3eb772b31", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fdfbcb0-7637-4a62-9eff-813c4308af98", "sighting_of_ref": "indicator--1413b66d-d0f1-464a-8801-c4e3eb772b31", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fcb3c5c-0cd2-47a3-8efa-87455fb51096", "sighting_of_ref": "indicator--8ca32c26-f00e-4652-92b1-5d9f6de4623e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b8cc5d-0a2a-4d8c-85e2-9a5fb1fd7604", "sighting_of_ref": "indicator--8ca32c26-f00e-4652-92b1-5d9f6de4623e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007ced13-36a0-44b2-a1e1-f1ef7755d95b", "sighting_of_ref": "indicator--0f8e6cc4-00e3-4df0-b094-6d1b23aaca4b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c0bd78-11f6-4367-a79f-291a9e41dd60", "sighting_of_ref": "indicator--b47eefa9-ceb0-4dc6-b39f-1d725fcf2647", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd06c15-258a-42a3-873d-58bcfdbb9bdd", "sighting_of_ref": "indicator--f6a3dfc9-f4ed-4131-bfe8-efbc8d139b4f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee18e47d-a198-4d70-8652-3af5bc4d45ae", "sighting_of_ref": "indicator--f6a3dfc9-f4ed-4131-bfe8-efbc8d139b4f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17922db8-2bbd-4b8a-bc88-a337ade647fc", "sighting_of_ref": "indicator--f6a3dfc9-f4ed-4131-bfe8-efbc8d139b4f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c6b58c-80f6-4f7e-8c3c-f1f18b13d9d5", "sighting_of_ref": "indicator--85e7c484-7478-4ef8-8046-a21982541e41", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc7d23e-241e-406b-816b-cc8edd6b8fea", "sighting_of_ref": "indicator--85e7c484-7478-4ef8-8046-a21982541e41", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--751f9205-2a12-4c55-892a-83778d604649", "sighting_of_ref": "indicator--85e7c484-7478-4ef8-8046-a21982541e41", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ab45da-aeab-4451-8ef3-84c4dfdc8813", "sighting_of_ref": "indicator--fd2bc6e6-4a73-4a62-9704-504965103fd4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad2209b-7cdb-47a7-b5bb-ae7e4584367e", "sighting_of_ref": "indicator--2f027714-346d-412a-a4be-88c395aba464", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1efa1dd4-e2ec-45fd-8856-2cf98755be6d", "sighting_of_ref": "indicator--aee658e3-36d0-4a35-9500-c8d609303185", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56fd4ac8-a091-4fb8-9c7c-718e20121b79", "sighting_of_ref": "indicator--2c28a301-5dd5-4ea4-9a31-701f10036cf4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac3dfc47-1af8-4bc3-8a8d-1649cde80a25", "sighting_of_ref": "indicator--540cd86d-0a8c-4993-80b3-73e1d4474238", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f987938c-9f58-4d2c-843a-e3c6440c6aa9", "sighting_of_ref": "indicator--a361505a-5b68-4949-9343-768d41dd7720", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8411e94-f33c-48fe-810c-c4ac25dfb237", "sighting_of_ref": "indicator--1225a97a-0f50-49bd-902c-97b2f8ae15cb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966c007e-6581-4b49-b22f-6b4227039367", "sighting_of_ref": "indicator--c4f2b3fe-00af-413a-bb30-d10a8832f1cb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976a33bd-e006-4a40-91d5-0cbb4c4a3e86", "sighting_of_ref": "indicator--c996fe02-1d7d-49f6-97f5-9532ecab302f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c85da94-3053-4296-898a-e0e98fcf4f49", "sighting_of_ref": "indicator--0782e9f0-c867-4949-9f81-1874ce20a4f9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440768c7-e62d-4116-b8fb-85f31d25e483", "sighting_of_ref": "indicator--de6fff3a-3457-46b2-99f2-d73869ea9599", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--159966c9-e552-4f19-a571-fd8a0def1bfc", "sighting_of_ref": "indicator--f6acb94b-7261-4a5e-a9ac-96f732f96fb8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c4b0ce-1601-488d-8a0a-5028d529ab1d", "sighting_of_ref": "indicator--fcf4839d-5eea-48b0-8492-56eac90cf8df", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--890c8096-523f-4692-b875-ee100df61615", "sighting_of_ref": "indicator--fa436887-d9dd-4026-a1b3-17d1a588b50b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de2a0646-bd47-481c-a85b-34f838841882", "sighting_of_ref": "indicator--9073191b-5512-4ea2-9c32-a4e366eb2603", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc3a944-6bb0-4d88-86e4-49988041f57e", "sighting_of_ref": "indicator--72e23b45-b094-4ab6-b94f-4c83a505f685", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdfa5a03-e848-4e93-83e7-5b893cd8cfac", "sighting_of_ref": "indicator--497a58b2-e5af-43e5-aec9-0c90c1b22c2e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e561b7c-8617-4c45-8286-5f4e20cfadba", "sighting_of_ref": "indicator--2ee8baef-14b0-4b4e-a14c-fa568f29c1d2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ac235e-caf9-4094-98fa-fcd18e8635be", "sighting_of_ref": "indicator--9be06416-c8a3-4daf-9520-37b09843b2ab", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65fb5ca7-27cb-454f-8f9c-978e67c873cf", "sighting_of_ref": "indicator--07191bdc-2ce8-467a-b8aa-1989c8815d34", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--508354e3-d864-497f-8003-0bbb6fc00408", "sighting_of_ref": "indicator--0ff3babf-5f2d-441d-8e5a-4c9ecccd1ae7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f2ca8e6-7077-41bd-9d86-a6040f9b213c", "sighting_of_ref": "indicator--e27185a7-feba-474f-b2e2-143952423a43", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d804389b-f78f-481f-b993-178012be99af", "sighting_of_ref": "indicator--5d011f41-4904-4645-8ecc-0994b68133b6", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a32328-6729-45c7-b2a4-93def5ee7043", "sighting_of_ref": "indicator--3699e98f-3c69-499d-be02-f3b4ed5b9bfe", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6485df22-065d-4076-9e85-d85bc4ff6c61", "sighting_of_ref": "indicator--c52a59a2-a850-49f3-9ac2-492044899335", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d218ddb-0f86-4e20-a2d5-4d4104e0b3dd", "sighting_of_ref": "indicator--e08bc79b-1d37-4629-9c27-67bb9a79faf5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2786e5f5-83e3-4c4c-aa4c-e5a60e26434f", "sighting_of_ref": "indicator--5633b79d-db32-4d4d-b76b-1b45448a5fa2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9047cd-6801-47e2-9334-f33d309e8b64", "sighting_of_ref": "indicator--eb3128bf-eb65-4cd8-9cb6-ad3dd2a81656", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c05c21-d530-4975-9e4f-cb6af08e9177", "sighting_of_ref": "indicator--b65ece55-2122-4672-9af6-0468c138892f", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad882bb-0e58-47b8-9a61-f8f89bdecac8", "sighting_of_ref": "indicator--81ac2865-6268-4074-869f-7d505c7bec29", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613aee66-0f8c-4325-8991-adf49630404e", "sighting_of_ref": "indicator--674fa109-1e98-477a-86bb-f476079b2eab", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a862efb-efc8-405c-b7f7-29269a620bdf", "sighting_of_ref": "indicator--a3dfa19a-0ff4-49c8-a951-8771a8d5f5f7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a5d8d8-27d2-473d-834a-511863ff5591", "sighting_of_ref": "indicator--d36d6bde-37e8-47c4-8d24-36d151d21395", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71d8e56-bb37-4637-896a-573f4908bc30", "sighting_of_ref": "indicator--0d782c59-416b-475c-85cb-d21a4d903d2f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267ca455-a878-4070-8e34-8ef8e839efd5", "sighting_of_ref": "indicator--e97e3319-280a-420f-a808-c056802f3b85", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c76129-d0e4-4689-aba2-f077447ce59e", "sighting_of_ref": "indicator--14959677-1d92-4cd3-add4-320f2edb07f1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b57c66e-548b-4686-9a28-61eee56c0625", "sighting_of_ref": "indicator--69031490-ab3d-436f-88c7-a039d672203b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90342498-7064-4c83-8363-363d662caebc", "sighting_of_ref": "indicator--b528149c-9015-4cd8-846f-1110b105f5a3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1cf2906-ba31-4b6f-8d32-d8a4b382e45d", "sighting_of_ref": "indicator--87b13619-0735-453a-84b4-5fde401ec758", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b3a27e-ebb7-4c6a-b655-bd0964b9e5ae", "sighting_of_ref": "indicator--8c1a402c-a5eb-4c9d-b907-f953dc99fb49", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3caafaee-2a0a-41a7-860f-8aa38bd711f0", "sighting_of_ref": "indicator--d101f58b-102b-414e-804c-ad381a9844e4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2320388b-2f6c-4ac0-b810-2413e2200704", "sighting_of_ref": "indicator--5c4122da-32d4-47e6-93e5-b554266b2168", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a0b74b4-62a0-4572-b411-139484f63f5d", "sighting_of_ref": "indicator--e89c6878-0718-4462-89cd-46263f949d1a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2620166e-eb80-4087-ac9b-19875644226c", "sighting_of_ref": "indicator--75dafa61-c0a6-4b7a-9fe6-323d3a8212e6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f711c0c-8923-4da6-8647-4338c7c155e6", "sighting_of_ref": "indicator--9c88571c-c204-402c-9056-29410912653d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--697cc5c1-6e36-412c-862a-d0899dc29dbd", "sighting_of_ref": "indicator--ba545943-7cda-428c-b9f8-13e6fe7b7ef7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c434eb6-ce6e-45f6-8a0a-13384f5cd9d0", "sighting_of_ref": "indicator--c61f8384-5941-4531-b49c-4151fb198bcc", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1f9b24-05b7-4e71-aaed-3df3c1983e7f", "sighting_of_ref": "indicator--4b669de8-3991-4232-9311-b236113334ec", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--717d5182-e6cd-4ee9-84b9-e5a9c1e14a79", "sighting_of_ref": "indicator--65427616-e779-4f2b-a731-c9b2e1aee8ba", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e9be6e-fe43-4805-90b9-2818cf3f3159", "sighting_of_ref": "indicator--a2b58664-4f14-4a94-8b29-c3559235141e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59543e98-f041-4867-9127-2965d1ab5c86", "sighting_of_ref": "indicator--1542cc05-aa5e-4577-94fd-e52f8ecc82bd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b79773-04a6-4208-bcd7-a1a636db3f3d", "sighting_of_ref": "indicator--ab6ddfb2-61f4-4541-a52d-d87c13be0437", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197f7385-9dfe-4663-8ee6-e331dee9dcb4", "sighting_of_ref": "indicator--499361d9-4e87-4814-84c7-f05ef7d87291", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ddef8e6-0e15-430a-9539-b356d7c209d1", "sighting_of_ref": "indicator--0d6be5e9-5f87-4c21-aed9-84d40a413515", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--616b6a9d-3e10-45a6-b153-636eef5290b5", "sighting_of_ref": "indicator--d546deae-f595-45aa-8f88-f7925bb36351", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb970b2-7025-4647-9d66-71728824b020", "sighting_of_ref": "indicator--8214dc92-e7e4-49bc-8768-8e4fd30b2cf6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd3802c-eaf9-44eb-84eb-ce6f72153b9e", "sighting_of_ref": "indicator--59a276c8-9f1b-4125-9231-4ccf6f4852c7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ea198c-a002-47ae-8d18-fe4533e535e3", "sighting_of_ref": "indicator--4f1d8c9e-e67a-4228-859d-e3bb4fbafb2d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37857a60-6d7f-429a-bf50-1d3592f732ff", "sighting_of_ref": "indicator--ef0d3aa9-d3a7-4b72-8451-97ecd8280797", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2114919-f0bd-42ee-bdd9-5eab9a0aedfd", "sighting_of_ref": "indicator--bf2852dd-dc32-4745-a648-5818fd105af3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03cd6499-b14f-43ec-9cf4-08a917d35bb2", "sighting_of_ref": "indicator--cfa457d1-9a1e-4c83-af11-5ff90b19c9c6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66302ffe-4f35-414e-a477-a6931c39b0ae", "sighting_of_ref": "indicator--25291cef-6292-43b1-b496-100b66efd7d6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b42b9706-d0a7-47ad-8df0-e88cbd8e9885", "sighting_of_ref": "indicator--07c9521b-73bd-43cc-86ea-28f32b733c14", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eedba05-95bb-479d-8efb-e0d70d99ffd0", "sighting_of_ref": "indicator--4ac21f06-9209-470c-b31b-ab556baaaa35", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd8a2ed-fb07-4d3b-bdb9-c5223f3d49ef", "sighting_of_ref": "indicator--140336b3-45ec-4be1-9a97-8cdc83ae025a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe400e35-c766-4957-8bf9-be8a655ff7d9", "sighting_of_ref": "indicator--140336b3-45ec-4be1-9a97-8cdc83ae025a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98c1bcec-96a3-4f8f-98c2-14d426e8a0e8", "sighting_of_ref": "indicator--8cc9b7b9-63b5-42f5-81a8-8613c401e9de", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205fb8c0-919a-4399-b775-d5e5c92a4bce", "sighting_of_ref": "indicator--c4c34fa6-3e53-44f1-b7db-83ace5293b90", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bfd4a61-f9d1-4683-bab3-810ba218a0bc", "sighting_of_ref": "indicator--c4c34fa6-3e53-44f1-b7db-83ace5293b90", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54a7806-e3d9-466e-83bb-ebac2e8a6d53", "sighting_of_ref": "indicator--98e27c60-b942-4315-ad29-7326c1ece8f9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0686442-ee60-4283-9434-13fe17ea3a84", "sighting_of_ref": "indicator--98e27c60-b942-4315-ad29-7326c1ece8f9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b0ae95-397f-42c0-bf10-2257cf8485cd", "sighting_of_ref": "indicator--7148e06e-804f-4d9c-9088-e7dbcd25ff1d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e736da-90e0-42e2-a58d-44861b8ab486", "sighting_of_ref": "indicator--d4dac2cc-be9c-4c72-aff6-6e27922a39d6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22bf2030-3177-4a2b-83ad-b4d4fdbe549e", "sighting_of_ref": "indicator--06c15d81-52c4-4f77-9ce6-c2cbfb0907ab", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde7faba-1847-40d1-86cc-873c1b07e24f", "sighting_of_ref": "indicator--aa1d9559-67ca-41dd-b309-e088470e9d13", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795fd07e-ef64-4b42-a09d-de649bc99f75", "sighting_of_ref": "indicator--fa38b823-71c0-4191-90d5-a37eccbf86c6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a0e4e03-8341-4a8d-baf1-38ad0c1735d1", "sighting_of_ref": "indicator--a1c11552-5696-4570-957e-e168398ebb34", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce28bafe-0bcf-4539-84c1-f8cd971edb06", "sighting_of_ref": "indicator--a1c11552-5696-4570-957e-e168398ebb34", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9166d060-59c2-4480-9c99-2f3f13d11b4a", "sighting_of_ref": "indicator--76be67b0-699c-45fc-b33e-6849c8ea439c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61415cab-9513-4313-ac83-d4bdbb0940ff", "sighting_of_ref": "indicator--1f41419e-3feb-4183-b8a2-2957686126a4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--380c30a9-539d-4b4c-9708-aa0e41dd10ac", "sighting_of_ref": "indicator--4e2a7814-cc67-4233-94cc-062a05e4f64f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b931dc9-a58f-40d3-b982-b01d848c2f6a", "sighting_of_ref": "indicator--4e2a7814-cc67-4233-94cc-062a05e4f64f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b214e4ee-6996-450a-8dd0-755375497b06", "sighting_of_ref": "indicator--bc7e10bd-b1e9-441d-b9ca-09718a143d48", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a518c19-bde7-4932-b226-f1fb55f1acb8", "sighting_of_ref": "indicator--86c0897b-3759-4a37-ba93-f278cf6b379a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17cbf7c3-c1fc-4808-8279-b3200bbd44e2", "sighting_of_ref": "indicator--88bb0f30-c269-4250-8500-d6ca9c573c81", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e12842-d63d-4b80-a205-b9e48d2a4c35", "sighting_of_ref": "indicator--88bb0f30-c269-4250-8500-d6ca9c573c81", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d73286-92be-46bd-b319-5be45c998baf", "sighting_of_ref": "indicator--039d07d0-b601-43b8-9b9f-dfb3f047fa7d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0abbe8ac-5678-4cbc-aa28-640e0ee49d11", "sighting_of_ref": "indicator--ce622014-435d-496c-a341-191c461f16f3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d4d3ac-7ab4-4957-bc8a-d3d9944ce029", "sighting_of_ref": "indicator--06557e2a-ab6d-4fa2-bbd9-e05698add508", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c54e7b1b-ce77-4130-86df-63074a550faf", "sighting_of_ref": "indicator--82fc7abf-5cb6-413b-b95b-72bf0f2455b2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e0bfce-bae8-4bfc-970c-755552222717", "sighting_of_ref": "indicator--cd034668-71a4-411a-8e95-45aa45041f33", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a31bad35-f611-4465-a140-f6252d98cd7e", "sighting_of_ref": "indicator--9e11d902-7273-4cdc-a535-7a58cd48d236", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca7f154-260d-452a-8547-e8d0a609089c", "sighting_of_ref": "indicator--023a4d8b-978c-4fdd-ab16-4f19cd86e1c1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09edd398-8937-4c39-aeaf-22bb998cee89", "sighting_of_ref": "indicator--7f17c86d-a3f5-47c6-a73b-df1c2081d350", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbcca067-6302-4453-bc51-26b9f820ad45", "sighting_of_ref": "indicator--9dddd5a0-eb9d-4c14-aa4d-f87808a9ed0e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e6839e6-7e4d-4b9b-8217-6ccdc454796e", "sighting_of_ref": "indicator--9dddd5a0-eb9d-4c14-aa4d-f87808a9ed0e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84a1126-22cc-4310-b850-03b6ea6c15d6", "sighting_of_ref": "indicator--ecc63290-2aa5-4ff2-8ad5-d56e143a462c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04414917-5d07-4153-881c-99f37d8d96b7", "sighting_of_ref": "indicator--d21b967b-961c-4614-ba00-f633365383a2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206cf904-0867-4145-b780-ef92fc8bf7d1", "sighting_of_ref": "indicator--9d53ffd9-e867-4514-a764-758f13d30d27", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--601478eb-776e-4228-89b6-997269ea8812", "sighting_of_ref": "indicator--53ff4054-a814-4a9f-bf41-972f90b7c3ef", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21faa1f-ee98-4691-8cf7-61881c6bcf2c", "sighting_of_ref": "indicator--844241c1-6cff-4d65-b0ba-b447b6ab65ed", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba967972-4d9d-4909-9940-8ce2567e3848", "sighting_of_ref": "indicator--4252061c-84bd-42de-8936-4193e32349ab", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be766ed-a81d-4d81-afaf-30281ba81546", "sighting_of_ref": "indicator--ca9bca55-28fc-4cb5-b130-bc8fbc29878d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112cd395-1743-4e0f-8349-0a04f4055a43", "sighting_of_ref": "indicator--bc17b2bc-bd0a-4059-8296-a463c15d4679", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7677ed81-d549-4b5b-93b1-9d8ad64452d9", "sighting_of_ref": "indicator--bc17b2bc-bd0a-4059-8296-a463c15d4679", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0591a6e-1815-494e-9ac6-a90e6d618bec", "sighting_of_ref": "indicator--29dfd0ed-1e3e-456a-85ab-aecd15031efa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63bd88f1-64a2-490c-9893-f5ff13fa151a", "sighting_of_ref": "indicator--29dfd0ed-1e3e-456a-85ab-aecd15031efa", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07a283c7-23a2-459b-b10d-452b26a740d3", "sighting_of_ref": "indicator--d2345660-ddc9-486c-a108-863cbc41f23f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f87674-75a7-4189-926d-6c9c1bb88789", "sighting_of_ref": "indicator--0b29c59f-0dce-4a55-bc4f-4e561b6705c8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e055f6-6d60-4326-bfd8-f86f16fe35a7", "sighting_of_ref": "indicator--2f59930c-4959-4a60-8dde-5f9cff378efb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee3ff52c-bc69-4380-a11d-09f75eef2d9c", "sighting_of_ref": "indicator--347fb907-9336-44d9-a2fe-de54507c8e28", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--308425be-778b-443d-84c8-6f5dc72ea9e0", "sighting_of_ref": "indicator--a011a231-bdbc-4304-853c-33bc60e8010d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96973975-ce9a-46db-8d25-29cca9a6cdb9", "sighting_of_ref": "indicator--a99351d3-3dfd-4d20-a15e-3c8b138e55fd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76cb1980-f779-4ba0-99d3-711006c0120e", "sighting_of_ref": "indicator--d55b7057-034f-4f61-affb-959aa21957ae", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b6c00a1-5046-4e08-ab86-105fa51844fa", "sighting_of_ref": "indicator--c8a43c22-398d-4591-b33c-249eaead11bd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab0ec2d-b26d-4165-88b9-9ec79f8ab7c8", "sighting_of_ref": "indicator--c8a43c22-398d-4591-b33c-249eaead11bd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97978d6d-0d53-43a1-bd0b-9d8690350e39", "sighting_of_ref": "indicator--e54d7d87-c4e9-4a5f-85e5-42b29fc9a893", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d890a9-1315-4e33-bd99-7c374126392f", "sighting_of_ref": "indicator--7e2f8b41-cdb3-41c6-8e0a-8d219df62128", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c118ee6e-6d5b-432f-82af-ef2820abbdef", "sighting_of_ref": "indicator--77180689-35f7-4588-8357-694f6fc7ec01", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f259c1-387c-4be3-8ed6-19f017398454", "sighting_of_ref": "indicator--77180689-35f7-4588-8357-694f6fc7ec01", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3c75e6-dcf2-46b0-b453-6bd12d1b37fb", "sighting_of_ref": "indicator--05ebffb9-7e99-4f80-aa7a-0f576e23e86c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1dcf46-34e6-457d-b7f1-5c173fcb5d27", "sighting_of_ref": "indicator--09f19130-6830-499e-a3d7-7abcd471d70e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b4ca57-bd1b-46a6-86d0-8c594c5d10c3", "sighting_of_ref": "indicator--b59e93b7-a35b-447a-9da7-94db5fcac98c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84bd167-0ef5-4f8a-a97f-24dfa4a39a54", "sighting_of_ref": "indicator--df5fe55c-ee43-482e-a499-f0e3ce1be50f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0524fb54-24bc-4465-9d1a-d4f76dfe851a", "sighting_of_ref": "indicator--df5fe55c-ee43-482e-a499-f0e3ce1be50f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b5d9de-2f62-46dc-b27e-97ff19ca73db", "sighting_of_ref": "indicator--df5fe55c-ee43-482e-a499-f0e3ce1be50f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5dc331-d084-4af9-be89-f75229a0160f", "sighting_of_ref": "indicator--c74b0c6c-5995-4667-bb44-9d4344204fb7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bcbed71-586f-47fd-8f41-994afac98e82", "sighting_of_ref": "indicator--ab02e69a-a30a-43fb-ad1e-639d7f9bd9d6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40232c88-499a-43a9-85a1-7379829b6753", "sighting_of_ref": "indicator--35c0a43f-4ada-4690-9d11-c67cfba80ed5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b994346f-e005-4ddd-9e7f-97e89a64577e", "sighting_of_ref": "indicator--93a41fce-20b0-480d-829b-72bb400b39b2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca502fed-cd90-49d4-962b-a75a4db2bdc6", "sighting_of_ref": "indicator--b25f0e52-379b-4e7d-aead-dafd4edf561e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16179130-6330-4dd4-82b9-74c61e4b57fe", "sighting_of_ref": "indicator--4ddd0644-ead5-44ea-ba4e-ae0caffe8d47", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6fd24ff-93fe-40ff-b54c-bcb70b65d508", "sighting_of_ref": "indicator--23e7ef88-ad91-436d-86f4-3d36fa17461a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c43413-ddb0-4bdd-af42-c7dd090aaa62", "sighting_of_ref": "indicator--aa154faa-5b39-4fed-9eb4-b7eb5105dee2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a4a067-d3a9-4870-a83f-54ec557ae4ae", "sighting_of_ref": "indicator--aa154faa-5b39-4fed-9eb4-b7eb5105dee2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c04de603-0d1a-4a78-95d5-c146a31e72c6", "sighting_of_ref": "indicator--ef935043-30e0-47ff-b369-a7c76dc9414a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb3ad60-6e13-4e94-bf40-bdbdb23b3a47", "sighting_of_ref": "indicator--590bdbb0-1ee6-47d0-b463-ebb7b80a97aa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1549f67-d2f1-49ee-a4b0-3bee7b71c85d", "sighting_of_ref": "indicator--9b2f1371-8a80-4d4a-83b2-b8bfb2a708af", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f144b5fa-9b7e-4b02-a9ac-69dc7ad94179", "sighting_of_ref": "indicator--6c7014d1-47ca-49e2-8d5e-bda12cc8f1b1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b979bbf-0149-4ae4-aea0-1bc198b95fc9", "sighting_of_ref": "indicator--6c7014d1-47ca-49e2-8d5e-bda12cc8f1b1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc2742c-203c-4763-a2a4-a50df25e91b3", "sighting_of_ref": "indicator--6c7014d1-47ca-49e2-8d5e-bda12cc8f1b1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b684f57-9ef0-469d-8c6b-f5f32860f60c", "sighting_of_ref": "indicator--103531b3-09c3-42fe-afe4-cbc5286bafb6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf83089d-f7fc-437f-b2c6-5d63d50dae3c", "sighting_of_ref": "indicator--c0f38eb6-ab54-4314-b868-6961105326c8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99035051-306f-41a4-8129-f21eae7fbf99", "sighting_of_ref": "indicator--c0f38eb6-ab54-4314-b868-6961105326c8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b51414-ad13-4c0e-99a5-8743c6e1586d", "sighting_of_ref": "indicator--f4d14cca-4648-473d-9837-b23eaae4f781", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a19192-4c5f-461c-a1d5-f4d233a22834", "sighting_of_ref": "indicator--f4d14cca-4648-473d-9837-b23eaae4f781", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5aac737-4f6e-4056-9715-3165bd4870ae", "sighting_of_ref": "indicator--381236e8-9942-48a7-8cd8-fc6139a2a8f5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f58243-504b-49a0-9ff6-0eca69ddd36d", "sighting_of_ref": "indicator--381236e8-9942-48a7-8cd8-fc6139a2a8f5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--774981f1-df1f-423e-beb5-9ec600dbc91a", "sighting_of_ref": "indicator--381236e8-9942-48a7-8cd8-fc6139a2a8f5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79c5cc2-cc6c-486c-9cbf-9773c1b61a38", "sighting_of_ref": "indicator--bc983fee-2125-4964-9d28-6cd1e436d16a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f1a47d-d81e-4ada-9872-aeccce554612", "sighting_of_ref": "indicator--bc983fee-2125-4964-9d28-6cd1e436d16a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8384805-859f-4a34-b0e2-70edfe23d3b2", "sighting_of_ref": "indicator--870f2a5b-63d7-4c45-b44f-7d44f27a1894", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d00e6de-fc0d-4feb-be7e-b028bda0522d", "sighting_of_ref": "indicator--870f2a5b-63d7-4c45-b44f-7d44f27a1894", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bfe74ba-cc23-41cc-968f-830cccf42394", "sighting_of_ref": "indicator--44b84d40-1e86-4b72-bbfb-8131def23c5e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842d234d-a52d-410d-932d-db52476c0911", "sighting_of_ref": "indicator--44b84d40-1e86-4b72-bbfb-8131def23c5e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd771320-f6e0-4cb4-949d-97617614ebb3", "sighting_of_ref": "indicator--44b84d40-1e86-4b72-bbfb-8131def23c5e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db4db03-5067-4bf7-9593-9de3cc416a1f", "sighting_of_ref": "indicator--8c3a3c63-9498-454f-a520-1f0356c75ebc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796b2a42-08f5-4a86-8368-109d0b650e07", "sighting_of_ref": "indicator--52795826-bb90-4dc3-a62b-e5592d3ff5d7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9940608e-0506-4bfa-9618-6577979b6c03", "sighting_of_ref": "indicator--2abd0bd1-4134-46d7-b31d-008934fe02ee", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--090bdc22-457c-497c-af7e-af51ddd5c6df", "sighting_of_ref": "indicator--2abd0bd1-4134-46d7-b31d-008934fe02ee", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d84714-ad2f-45d1-ae6e-3aec9e6b2ee9", "sighting_of_ref": "indicator--f2fbb28f-c549-47cf-81ea-9bd8a5853032", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e788ed-f6c2-48c4-a6cb-023369607f18", "sighting_of_ref": "indicator--f2fbb28f-c549-47cf-81ea-9bd8a5853032", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e4a5c8-27a0-44bd-a527-d538eeeeb583", "sighting_of_ref": "indicator--738375b4-5be3-4f1b-8db2-59caf24a7679", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd9764ea-50a0-46c3-9da2-baee02af810e", "sighting_of_ref": "indicator--6893459f-77d5-496b-aeae-75629d7e22ae", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f4e00c-dae0-4b82-b518-902fd9cbf753", "sighting_of_ref": "indicator--ac1799ed-f47b-4505-b070-f41249b87eff", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a676da6-ef6c-4e6b-a00a-298fe514dbea", "sighting_of_ref": "indicator--ac1799ed-f47b-4505-b070-f41249b87eff", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--003d5b73-1512-4a85-99c5-336f9296157c", "sighting_of_ref": "indicator--ac1799ed-f47b-4505-b070-f41249b87eff", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d70498-5c05-45d9-8b18-f152ca976fdd", "sighting_of_ref": "indicator--6c8f5b04-2ffd-4252-b3cd-dcadc83b1e36", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7fd40a-5b78-4ffc-a44a-fad489136c58", "sighting_of_ref": "indicator--6eb5989e-f482-47df-8c84-6f5dae0b56fe", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86af7b10-df06-43be-acb5-55ba722d652a", "sighting_of_ref": "indicator--fe0acc3d-aca1-436d-b2b3-ecb6b7653301", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a4118a-a744-423b-a31b-a4c4be79f994", "sighting_of_ref": "indicator--8c8b86c5-7b62-4064-ab2c-119ec3998da6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--396a073c-3e64-4e92-b7f2-ead97cefe8ef", "sighting_of_ref": "indicator--460ded37-1e83-4859-80e6-2ed4a9e97b22", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e57078f-23c3-421c-98cc-d1e1f53a7671", "sighting_of_ref": "indicator--cdae4746-3ad6-4b1b-b992-8381fc7613f2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b6bfc1-7290-4afa-9752-4c07710ca56b", "sighting_of_ref": "indicator--f22fcd69-befd-4689-a10c-19de3ff02b39", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc798297-ac75-4e26-b090-2a86bc44c4d5", "sighting_of_ref": "indicator--640e40b9-a507-4afb-b9b2-c1f173bab4f3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60fea09a-2adb-4b11-8029-250a7010b4f2", "sighting_of_ref": "indicator--3d05391a-c253-40a4-9782-eb0e44576329", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a68af78c-0f40-4ce7-8d67-0a41c143265b", "sighting_of_ref": "indicator--8278110a-7db8-4631-b413-64a81b1a7998", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8035f476-e9db-40ed-bb95-7bee90af0801", "sighting_of_ref": "indicator--8278110a-7db8-4631-b413-64a81b1a7998", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--582e6fcf-186e-4208-a4c6-aec298ce26a2", "sighting_of_ref": "indicator--8278110a-7db8-4631-b413-64a81b1a7998", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e83827a3-9739-49fe-8100-d56bdd523f2a", "sighting_of_ref": "indicator--37f5f2b7-b5c6-4e5a-bab0-22a938c5bbb2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f888d26a-5ff6-45f3-ac1f-3625072249ca", "sighting_of_ref": "indicator--37f5f2b7-b5c6-4e5a-bab0-22a938c5bbb2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e64e69-ac9e-42d2-b7d1-180c0d774bdd", "sighting_of_ref": "indicator--13c6f251-98aa-420e-9697-347f01df5f7c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd5d243-25d4-4517-a6c5-c67a30bb4b86", "sighting_of_ref": "indicator--13c6f251-98aa-420e-9697-347f01df5f7c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57580e12-47a0-4751-96cc-ad4f99ca9943", "sighting_of_ref": "indicator--296fd5e8-1669-419b-8130-14c53a14e3a7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47307b33-9357-4c1f-9867-7313fafeadec", "sighting_of_ref": "indicator--34b175b0-5743-4d9f-8595-629e5c5d9911", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49af5fe-5aa0-4d58-82f2-6dc08c0a0748", "sighting_of_ref": "indicator--da226bc5-95d7-497f-b48f-6d31915bf25a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d7edbb-4c3b-4c5c-913a-cc555ce37c95", "sighting_of_ref": "indicator--4ada35f1-2b6d-430c-9b46-80e4aa81109e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5301676b-7363-4d02-9ad5-94ffd484de5d", "sighting_of_ref": "indicator--cecd0a44-f9e5-4abf-aa02-966e01132224", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0988106a-5bb1-4055-ac3b-8c9cd2f43431", "sighting_of_ref": "indicator--cecd0a44-f9e5-4abf-aa02-966e01132224", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85782b8b-b2bd-44cb-8177-bf04406d49e0", "sighting_of_ref": "indicator--cecd0a44-f9e5-4abf-aa02-966e01132224", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d178cefb-e7dc-4cb4-a1f8-e154e0a7784e", "sighting_of_ref": "indicator--6db3b490-bdc8-4cb0-aeb2-2e75dd5cea82", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f5df82-7cbd-4cf2-ace6-8b6507b40e1f", "sighting_of_ref": "indicator--6db3b490-bdc8-4cb0-aeb2-2e75dd5cea82", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b1e0fc-236a-4bec-8337-9c5435c916c1", "sighting_of_ref": "indicator--6db3b490-bdc8-4cb0-aeb2-2e75dd5cea82", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1bbc026-30b7-4330-9cc3-a654557ba945", "sighting_of_ref": "indicator--e5635c4e-3ff7-44df-86b9-c5e44fbf5e5e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13dd29b2-9de3-4db5-bbfa-ac026a7b3696", "sighting_of_ref": "indicator--e5635c4e-3ff7-44df-86b9-c5e44fbf5e5e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3bb85e3-9262-4639-85a3-cd24341a4461", "sighting_of_ref": "indicator--e5635c4e-3ff7-44df-86b9-c5e44fbf5e5e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40705321-f025-4ecd-915d-12d8470e68e4", "sighting_of_ref": "indicator--2cd2e8d6-7d45-470b-bef5-9623984883ad", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09462b27-3055-41e7-adc0-899fe63052dc", "sighting_of_ref": "indicator--2cd2e8d6-7d45-470b-bef5-9623984883ad", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cdaabe9-c810-4fd7-a6cd-b26b8d79b5a3", "sighting_of_ref": "indicator--2cd2e8d6-7d45-470b-bef5-9623984883ad", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac8fe908-b611-49ea-9d47-92965067ab4b", "sighting_of_ref": "indicator--7f36c225-5d85-4683-a402-b25f42e85b82", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7561174a-e6c8-4ad1-94b6-bef12fa7f308", "sighting_of_ref": "indicator--0e97a33b-c50b-47bd-9047-3b3eb4a1daed", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f14ded7-c2b1-40f0-9505-9a1ead64a4b6", "sighting_of_ref": "indicator--0e97a33b-c50b-47bd-9047-3b3eb4a1daed", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e31cf9-05f1-4459-a206-aab973e9ee4e", "sighting_of_ref": "indicator--0e97a33b-c50b-47bd-9047-3b3eb4a1daed", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f89ed2-61d8-4f37-83ee-4695801dce76", "sighting_of_ref": "indicator--30928350-7af7-4ec9-850f-9ea73d07861d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd075723-2cac-4f65-ae36-682cf73a9d8f", "sighting_of_ref": "indicator--067347b1-1660-443d-8c3d-55e7328c2a34", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a1ff594-b72e-478f-bfd2-f628f76ecd4a", "sighting_of_ref": "indicator--f9c0f151-af40-476d-a55f-1e4febf2682a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9527c886-3e10-45f1-a2e3-9691e6dfce2e", "sighting_of_ref": "indicator--7f6f9ca2-49bf-43c9-9ac3-edd177f98a7f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbae263-e650-4b3a-ad10-cae5864e2c09", "sighting_of_ref": "indicator--93121caf-e7df-420c-9a8d-fd3a2c5b8c6d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f6e8aa-eb7d-48af-b75a-2b86da965768", "sighting_of_ref": "indicator--e12fa539-3a44-410a-b2ee-09113c298dae", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6baf178d-4404-476f-9a0f-ed09199c0392", "sighting_of_ref": "indicator--44deecb7-fcdc-4269-a579-94c91229d4b2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cedcbaa-890b-42ec-8aee-5d8a4ec9385a", "sighting_of_ref": "indicator--44deecb7-fcdc-4269-a579-94c91229d4b2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4ba8f7-05ef-4207-939f-6f58a9cffa3a", "sighting_of_ref": "indicator--ffcf6a3b-b168-4443-879c-22b3959a6bd5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3ebf4e-ed9e-4d44-9f4f-94df6048ac2e", "sighting_of_ref": "indicator--80683ec2-c85c-44c4-a8d8-ffe1d32d1df4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e3d79a0-b43e-4dbf-a1d6-3fa5753b8e70", "sighting_of_ref": "indicator--9d617d45-0d04-43a0-8c16-55b943506c54", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f35bea45-1ffc-4300-a195-40ebaf05bee9", "sighting_of_ref": "indicator--8d06ecc8-1f84-4333-8dac-30378a657f7e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d70924d0-8978-4706-a947-255d1e378cd8", "sighting_of_ref": "indicator--8d06ecc8-1f84-4333-8dac-30378a657f7e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59df9e0c-2cf9-49dd-9ff7-dd969eb359f1", "sighting_of_ref": "indicator--8d06ecc8-1f84-4333-8dac-30378a657f7e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--673dd7fe-26f6-41d0-988b-3bfebfd606aa", "sighting_of_ref": "indicator--85904f46-3427-41c7-b048-7c8f9e949016", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c60df3b-bff1-445e-bc97-095a1257c369", "sighting_of_ref": "indicator--85904f46-3427-41c7-b048-7c8f9e949016", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7581ce6b-2046-4cf8-8040-e266ed8ffbb7", "sighting_of_ref": "indicator--85904f46-3427-41c7-b048-7c8f9e949016", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ab4f7f-748b-4286-9f71-933c01d26ffd", "sighting_of_ref": "indicator--6b6d1774-92ce-49f6-ab50-54d26db69e36", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb4a85e2-d0b2-4262-8dd3-07c95c798bdb", "sighting_of_ref": "indicator--ed440919-bd5a-4d7d-8e5e-3e933ff80877", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8d20d2-98aa-47cc-9960-8ec5ac462785", "sighting_of_ref": "indicator--ec8840bf-b4a6-497e-ac15-2b049e1030dd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709ef0c6-7574-490e-9c2d-ea1b0f5806cd", "sighting_of_ref": "indicator--908eff66-00e3-45d2-a75d-cb44534c1472", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70db6207-785e-4a5e-8c0c-7c1adec9e244", "sighting_of_ref": "indicator--da05f4ef-cc36-4217-a7ea-ca695e21c752", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe8c24cb-cffc-4c08-9697-dad4805e3bd7", "sighting_of_ref": "indicator--76ec6709-9b7a-476d-b1ae-ba418cd682ac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4e29a1-1d81-4e9e-834f-b62c72da3052", "sighting_of_ref": "indicator--113844be-be10-464e-b43a-00129f6dad4e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b854eaf0-6c72-4e11-9444-f8af8ebe90b1", "sighting_of_ref": "indicator--2e94e96a-8ec8-493b-aa80-2546525520ac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ecbacb3-f883-4942-a356-1a83e56ee764", "sighting_of_ref": "indicator--def1469c-8c38-43e2-b81a-b8de6446bb6b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac8f37e3-19aa-4f10-93c4-5ebbac9ca6d3", "sighting_of_ref": "indicator--220bd068-a39a-4057-8e4d-aa5c070dc8e9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c21a38-26cc-4a74-9a92-6bd1b7f3619d", "sighting_of_ref": "indicator--642455e2-faf0-4504-b31d-13dc624c83af", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56450fa6-409d-4301-99e0-59bad9cd6aa8", "sighting_of_ref": "indicator--83733ada-e1fb-4bf9-9f3a-121c02662a69", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a86d4b43-58ee-4b8d-8316-c9bdfc3f1d82", "sighting_of_ref": "indicator--fb8195c5-67bb-4cc4-8dab-b706558ced3d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7718b59-bd0b-45a8-989a-8db4ce2b0dad", "sighting_of_ref": "indicator--21dcef00-37bd-482f-9f38-7bd8e2979d32", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d4a1f59-c389-457f-9932-4ed11d1073c2", "sighting_of_ref": "indicator--631cadf0-f13a-40e8-8da9-830c304031f1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0b718e1-9e1d-4ebf-8f7c-857201394380", "sighting_of_ref": "indicator--11a7d95e-9eab-4fef-9da4-c4b86121c7dd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4b35e3-d9f9-4a39-a90c-a687129020e3", "sighting_of_ref": "indicator--13fa00b5-ef9d-4ba2-becb-d011c9fc2828", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfd493e2-8d87-419c-a1bf-6ce3b5ebe6b8", "sighting_of_ref": "indicator--c9aabfee-ab2f-49f9-ade6-a96838b0b994", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a80292b9-69e8-4ad5-a93d-7c62f6e85ef4", "sighting_of_ref": "indicator--c8ece520-31ef-4217-af61-294865f55847", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc47db6-bdad-4e7f-b20a-7fb73339ec74", "sighting_of_ref": "indicator--40a22141-0bbc-4461-a348-dedb25007f68", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebef475d-d439-4ae8-8385-f40b80b85f03", "sighting_of_ref": "indicator--d1fb0d24-6239-4c07-9b7c-5bc0165c0d82", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8c2643-306a-4f61-9553-30b7eedeb34e", "sighting_of_ref": "indicator--6ee86f7c-aabf-4580-a08d-58cad67fa63b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc8b4cf-350f-4788-8521-01ddde9721b7", "sighting_of_ref": "indicator--53cc769f-5310-45ff-a626-809139fc958b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--931398e6-ca45-40c2-ad33-96ba979a72dc", "sighting_of_ref": "indicator--99c07b63-a43d-412a-840f-7b0ecce6745f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03bc3b4f-d29b-4721-967b-b2bbadf59094", "sighting_of_ref": "indicator--99c07b63-a43d-412a-840f-7b0ecce6745f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a61d75-6eeb-4e88-b61b-38c03243fdd7", "sighting_of_ref": "indicator--99c07b63-a43d-412a-840f-7b0ecce6745f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301503a5-7c72-48ba-8ace-6bea1152736f", "sighting_of_ref": "indicator--fdebe81b-0005-4d56-8a47-832f17853376", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546bb024-8672-4161-9d77-e54d9b751eeb", "sighting_of_ref": "indicator--fdebe81b-0005-4d56-8a47-832f17853376", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--491ac84f-0a91-42f6-ad0a-c633b8b4e205", "sighting_of_ref": "indicator--ebf77161-a723-4dc4-bba9-d96f59171cf6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08e6d51-8f55-4c9a-b08d-b7208ed7e040", "sighting_of_ref": "indicator--ebf77161-a723-4dc4-bba9-d96f59171cf6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4cbdf78-0429-41ec-8308-b38163ac13eb", "sighting_of_ref": "indicator--ebf77161-a723-4dc4-bba9-d96f59171cf6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7f599a-e887-49bb-8788-3219e7ba2936", "sighting_of_ref": "indicator--d3f48951-4190-4d3d-a1db-ac964f61adb1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e45b3f15-9c88-420b-b7d7-10aa8c324c8b", "sighting_of_ref": "indicator--d3f48951-4190-4d3d-a1db-ac964f61adb1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976948a5-8a4c-41e9-ac1f-7b733918c9a3", "sighting_of_ref": "indicator--d3f48951-4190-4d3d-a1db-ac964f61adb1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f5b753-445b-4f59-8f69-d0fdb03d6d12", "sighting_of_ref": "indicator--455919cf-c6ba-45fc-ab18-7e5855ec1447", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df04d967-8498-4f91-97e9-a21246f0848e", "sighting_of_ref": "indicator--455919cf-c6ba-45fc-ab18-7e5855ec1447", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c700494c-b856-4667-a46e-f43b5ada5121", "sighting_of_ref": "indicator--b8e703b3-3e5f-4fb3-b59d-e33500402535", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ca4f11-c4f8-4f83-837d-2b3b86b2926d", "sighting_of_ref": "indicator--cb86a874-71e8-4d5f-bd8e-72d1694472ae", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0180c92f-caaa-4b2a-875f-fcdee2ae9eea", "sighting_of_ref": "indicator--3ba6aabc-4be0-4bc8-82ac-cc3e07bfa595", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7850772a-861b-4128-b744-7e986eadf326", "sighting_of_ref": "indicator--903b5a8a-7bcd-46b2-b4dd-7cf38d11bd3e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3868e28-8dbc-4757-951a-0e66a96442d1", "sighting_of_ref": "indicator--903b5a8a-7bcd-46b2-b4dd-7cf38d11bd3e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edadd457-8a17-4d29-b068-8b57f0bcea88", "sighting_of_ref": "indicator--903b5a8a-7bcd-46b2-b4dd-7cf38d11bd3e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2332a97-6494-496c-b11e-2f7833cea7a1", "sighting_of_ref": "indicator--52277e4e-c3e8-435d-9809-e9f04ef4586a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c369023-23b3-4173-8194-2019804cd317", "sighting_of_ref": "indicator--52277e4e-c3e8-435d-9809-e9f04ef4586a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f494a3b-2226-4b49-a2ab-5d625b1b3935", "sighting_of_ref": "indicator--52277e4e-c3e8-435d-9809-e9f04ef4586a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a393f18-0826-4415-9f37-eabff497769b", "sighting_of_ref": "indicator--222a29a4-5bb2-4bcf-8445-827611fd5e95", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e90f4e9-22ad-40e4-824e-2012b00265fe", "sighting_of_ref": "indicator--222a29a4-5bb2-4bcf-8445-827611fd5e95", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b3d35dd-3b20-4556-a064-d29964c78b58", "sighting_of_ref": "indicator--222a29a4-5bb2-4bcf-8445-827611fd5e95", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685e5860-612b-43b6-b30a-43f60409e4e6", "sighting_of_ref": "indicator--d3a24f9f-d988-4019-a7f9-53315361384b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da464ec-64f1-4c53-acf4-22d491969924", "sighting_of_ref": "indicator--d3a24f9f-d988-4019-a7f9-53315361384b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e914563d-58d3-4672-884a-ce1388eb54ae", "sighting_of_ref": "indicator--68e68e61-9c94-4d0d-8ebf-2ec5a2f8dd68", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b82e4fd-b37a-4a82-87c0-133951a1f1a6", "sighting_of_ref": "indicator--68e68e61-9c94-4d0d-8ebf-2ec5a2f8dd68", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54b199b-a6fc-445f-aa62-0f012868b539", "sighting_of_ref": "indicator--80aaf873-1f6c-4487-ad1c-df6a2636a4ee", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8775fe38-8953-407b-a4cf-0b0c8c6daeee", "sighting_of_ref": "indicator--80aaf873-1f6c-4487-ad1c-df6a2636a4ee", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c65df2-1f1e-4960-b21c-330434e40555", "sighting_of_ref": "indicator--80aaf873-1f6c-4487-ad1c-df6a2636a4ee", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1078ba7-8731-43ef-8ba6-4cfd93e945c7", "sighting_of_ref": "indicator--910444b2-694c-4a9d-b762-7d832289079c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d36a5451-a7da-420a-aa78-9b2c7874c98f", "sighting_of_ref": "indicator--910444b2-694c-4a9d-b762-7d832289079c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6611db9e-e7ae-428e-bc6e-44e11004eedc", "sighting_of_ref": "indicator--4bc89fb4-f70f-4364-92d8-649e433a277b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4119aa-0f70-4eeb-99bb-c88bdd224e53", "sighting_of_ref": "indicator--4bc89fb4-f70f-4364-92d8-649e433a277b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791ec87c-0535-4646-8296-b8b8d422ab08", "sighting_of_ref": "indicator--4bc89fb4-f70f-4364-92d8-649e433a277b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b884414-dd3c-4309-87e4-4b74405bd618", "sighting_of_ref": "indicator--336be9dd-41ee-4e24-bec7-0f7e4b4b4c00", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ceda29-3c98-4a06-abd0-59971ac4f963", "sighting_of_ref": "indicator--336be9dd-41ee-4e24-bec7-0f7e4b4b4c00", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb0971e-3736-4ec9-a414-5be2b8798954", "sighting_of_ref": "indicator--336be9dd-41ee-4e24-bec7-0f7e4b4b4c00", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34c4d39-78c7-4327-b518-db386c06a8f5", "sighting_of_ref": "indicator--d80cde59-2f0a-4ce9-b5d3-f066103e24c1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d20f228-4100-4317-800d-ef0e8cc3dc2c", "sighting_of_ref": "indicator--d80cde59-2f0a-4ce9-b5d3-f066103e24c1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b10dbd5d-3ab5-4ded-8ccc-e0ac83b9a5c7", "sighting_of_ref": "indicator--d80cde59-2f0a-4ce9-b5d3-f066103e24c1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80790bc5-f23e-46a9-b9d8-588279ed2bc8", "sighting_of_ref": "indicator--02504559-9fa9-4c9b-a719-54990a7d6da2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--231dfb3d-5f26-4c06-9176-8d20cfa51eea", "sighting_of_ref": "indicator--02504559-9fa9-4c9b-a719-54990a7d6da2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3363a59-88a7-4651-bc72-06230a574f6c", "sighting_of_ref": "indicator--02504559-9fa9-4c9b-a719-54990a7d6da2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b122c2-dd77-44c8-a93d-e357d5a3c6e9", "sighting_of_ref": "indicator--f08aa8ee-a0a8-4384-91a4-878c6802b34c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4014dd6-885a-49c9-99bf-c3743d96ccb9", "sighting_of_ref": "indicator--b3590152-6659-4f5b-bf23-80daa412a6de", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7744b65e-31c9-494b-b21b-bb6936c580ce", "sighting_of_ref": "indicator--b3590152-6659-4f5b-bf23-80daa412a6de", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f041cf15-a279-41c7-8805-384edbe6f8df", "sighting_of_ref": "indicator--b3590152-6659-4f5b-bf23-80daa412a6de", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd8034c5-a8c9-48f2-8fdb-5cdf507b4160", "sighting_of_ref": "indicator--140ff98e-714d-49b4-8a8d-d5b0ba8c6b42", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f3719e-fd9c-4dec-ae52-1411cd152996", "sighting_of_ref": "indicator--140ff98e-714d-49b4-8a8d-d5b0ba8c6b42", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96020aa9-683e-47dc-8121-0eb7eee9050f", "sighting_of_ref": "indicator--140ff98e-714d-49b4-8a8d-d5b0ba8c6b42", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09fa2cda-33f8-4e3d-a01c-0d74d49e55f9", "sighting_of_ref": "indicator--38c8a574-1216-4793-85b7-e5d85bd72cb4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef8157a1-d245-4dd4-9939-1c121471172e", "sighting_of_ref": "indicator--38c8a574-1216-4793-85b7-e5d85bd72cb4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f87d14db-3d86-41e3-88d8-7b002f7338fd", "sighting_of_ref": "indicator--8ca86fcf-473a-49a1-9b8b-91580a36ce95", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aacca139-63a2-41d7-846b-695e52fa2821", "sighting_of_ref": "indicator--8ca86fcf-473a-49a1-9b8b-91580a36ce95", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36303c3a-1768-4b3b-98ec-94a583861814", "sighting_of_ref": "indicator--8ca86fcf-473a-49a1-9b8b-91580a36ce95", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583b5b91-fb0c-4165-8bae-ac496bdf4ed0", "sighting_of_ref": "indicator--1c61ad61-ce21-49a4-81ec-1b42111447c5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abb2cd0-51c7-42ba-8b52-69ee535ff028", "sighting_of_ref": "indicator--1c61ad61-ce21-49a4-81ec-1b42111447c5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8e8f2d-5de0-4f9c-b7a6-807a85bad4c0", "sighting_of_ref": "indicator--1c61ad61-ce21-49a4-81ec-1b42111447c5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26cbd808-b0c7-41fb-a29d-e5df24f4aada", "sighting_of_ref": "indicator--49db019e-3259-4178-9309-92eed918c6d5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--943ea47c-6277-4457-aeb3-578b9acc0ae6", "sighting_of_ref": "indicator--49db019e-3259-4178-9309-92eed918c6d5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a58a30af-e766-4cda-b8ca-f4f498941006", "sighting_of_ref": "indicator--49db019e-3259-4178-9309-92eed918c6d5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ce9dd6-4af9-4aa5-b7ca-4f315ccf5a9a", "sighting_of_ref": "indicator--ca5fb9da-c83e-4356-88f5-3a18fcfaa6fa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c780ea-93ce-4783-96ec-2cacc8dfb2cc", "sighting_of_ref": "indicator--ca5fb9da-c83e-4356-88f5-3a18fcfaa6fa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f36cbde6-581e-4839-9e36-bf7acdb958b0", "sighting_of_ref": "indicator--06f5f88a-b701-4138-a222-4595c455d892", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4072a23-9932-4bd4-82ee-a0130b0d4286", "sighting_of_ref": "indicator--06f5f88a-b701-4138-a222-4595c455d892", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e76503-d34e-41fa-9fb9-e990ad1bb046", "sighting_of_ref": "indicator--06f5f88a-b701-4138-a222-4595c455d892", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ae01fe-c01e-4a83-90ee-4d58e7691fbe", "sighting_of_ref": "indicator--f863ba3d-d85d-4766-8efd-6a21b306bb3c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd61721-35cf-45db-bee4-72533d613c8f", "sighting_of_ref": "indicator--f863ba3d-d85d-4766-8efd-6a21b306bb3c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a6bd20-add6-4c66-8abe-ba3cefb682c0", "sighting_of_ref": "indicator--f863ba3d-d85d-4766-8efd-6a21b306bb3c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb16216-18ac-400e-a828-e109447c725f", "sighting_of_ref": "indicator--36c33177-2e7f-4101-bc98-6076b3789d89", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b44dcb11-f376-4d42-8f5a-e0056599d1cb", "sighting_of_ref": "indicator--36c33177-2e7f-4101-bc98-6076b3789d89", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d1ab58-a29e-40ba-8993-088ca6b4b180", "sighting_of_ref": "indicator--36c33177-2e7f-4101-bc98-6076b3789d89", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ca53e0-e94d-4019-81c5-712b26cce69e", "sighting_of_ref": "indicator--a72f6333-d0e2-4aad-9562-af5268741ce7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49233f86-df8c-46d5-8a41-1cb2eb018d6b", "sighting_of_ref": "indicator--a72f6333-d0e2-4aad-9562-af5268741ce7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db1051bc-e61c-4e05-81d3-c7d2173d258b", "sighting_of_ref": "indicator--a72f6333-d0e2-4aad-9562-af5268741ce7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90935dfe-b20a-484d-81c4-857579621703", "sighting_of_ref": "indicator--b4728b95-0091-45ca-905d-ddc9c1373efd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929fc2ef-1d82-4d57-a33e-e4e6608c70b0", "sighting_of_ref": "indicator--04d7a98e-9e43-4319-9163-741535b09a24", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693b8885-2bda-4173-84f9-233350ac49c9", "sighting_of_ref": "indicator--04d7a98e-9e43-4319-9163-741535b09a24", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0145f3ce-7297-469b-b118-f3e6906ab0be", "sighting_of_ref": "indicator--832cbaee-a225-4e11-aab4-f44ef0b64d21", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30687cd3-c131-4c64-b0c3-43124a0aa75b", "sighting_of_ref": "indicator--263a3cd7-1719-420a-acc7-e8a912a4787f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e88c74-d428-4178-a240-eb5978fd95d1", "sighting_of_ref": "indicator--1eeb565b-d20a-4738-acd5-365780b5257c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203902f8-066a-4555-81b2-e52b76c309c0", "sighting_of_ref": "indicator--1eeb565b-d20a-4738-acd5-365780b5257c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--188d6953-0867-43f4-92ac-797c406516a8", "sighting_of_ref": "indicator--1eeb565b-d20a-4738-acd5-365780b5257c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa51ac17-3cde-487f-a50b-5f8c662ad290", "sighting_of_ref": "indicator--3d5b9e83-f100-4bfd-bedb-fdf312378fe0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dca31ef-2a48-4e9f-a0b9-673319958ea1", "sighting_of_ref": "indicator--3d5b9e83-f100-4bfd-bedb-fdf312378fe0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--482cd628-6939-4872-80d8-1b94c0c5abd8", "sighting_of_ref": "indicator--3d5b9e83-f100-4bfd-bedb-fdf312378fe0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0617a7-4721-4229-ba49-7aa600e584de", "sighting_of_ref": "indicator--1bcad6e7-1b28-4a46-a266-803c3e0c7d7c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eaad153-bbc1-4519-a143-a8a02bb2cc3e", "sighting_of_ref": "indicator--1bcad6e7-1b28-4a46-a266-803c3e0c7d7c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69675069-c942-43d8-82bf-84a8991698c7", "sighting_of_ref": "indicator--1bcad6e7-1b28-4a46-a266-803c3e0c7d7c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0627cdfa-cebb-4d3a-ba14-70fb767202fb", "sighting_of_ref": "indicator--8548e9a7-00dd-4873-b73f-63b32c76180e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d08a763-8c47-4fed-8456-c26f5a49aa96", "sighting_of_ref": "indicator--8548e9a7-00dd-4873-b73f-63b32c76180e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e6daec-b223-4b6c-8fd6-b609e319e86a", "sighting_of_ref": "indicator--8548e9a7-00dd-4873-b73f-63b32c76180e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d370b9-4cab-423c-b7ed-75d0db7ec326", "sighting_of_ref": "indicator--66335d5c-1b3c-4577-89f1-73194dad4df0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26d250d-9345-4b3f-b7c7-02b203f0d665", "sighting_of_ref": "indicator--66335d5c-1b3c-4577-89f1-73194dad4df0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00dd0e8-127a-4de2-828b-29e98c6a27df", "sighting_of_ref": "indicator--66335d5c-1b3c-4577-89f1-73194dad4df0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4502c431-102b-40fc-b770-982518ff3d22", "sighting_of_ref": "indicator--c823b91b-7e8d-433a-a89c-f6cec107be36", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad887a7-dbc4-4889-bd3d-a5f101385b73", "sighting_of_ref": "indicator--c823b91b-7e8d-433a-a89c-f6cec107be36", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6025ff6d-061b-460a-839f-3bdf93025050", "sighting_of_ref": "indicator--c823b91b-7e8d-433a-a89c-f6cec107be36", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd46f57-7d39-48a1-950a-42f53789399f", "sighting_of_ref": "indicator--7750a327-c78f-474d-8743-a499ae8f9dda", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3335ffb3-a6c6-4303-b0fa-66c8f43cc823", "sighting_of_ref": "indicator--7750a327-c78f-474d-8743-a499ae8f9dda", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e9d56a3-d397-4bd0-9c43-006bb877e57a", "sighting_of_ref": "indicator--7750a327-c78f-474d-8743-a499ae8f9dda", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1924f1d-ce6c-4f44-911b-3d93c2b01939", "sighting_of_ref": "indicator--9ea9f945-6960-416e-b6e0-3cea2b928456", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8727588-7bfd-42b9-9b8e-3f3137b18c1f", "sighting_of_ref": "indicator--9ea9f945-6960-416e-b6e0-3cea2b928456", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc94ff8-b84b-488b-83b0-c93a84f6cd07", "sighting_of_ref": "indicator--be7fb587-ef84-4565-8877-b02f0d697a9c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf948725-d33e-4fcf-a541-3510cc0450f4", "sighting_of_ref": "indicator--be7fb587-ef84-4565-8877-b02f0d697a9c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9d962c-0af3-468d-ba89-661b4eac2a20", "sighting_of_ref": "indicator--81147236-289c-4673-9057-711a1fa4bf03", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11182568-e153-4f79-b049-7407571850ca", "sighting_of_ref": "indicator--81147236-289c-4673-9057-711a1fa4bf03", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9327914d-dce3-4f62-be55-acdb0742a4d2", "sighting_of_ref": "indicator--53f85516-bd6f-4425-b378-ab68f2485d2c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9f88f6-d640-4b48-b544-3e9c3bbe44ae", "sighting_of_ref": "indicator--53f85516-bd6f-4425-b378-ab68f2485d2c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487acdbb-1430-4b8d-9d86-08a003bc8b9b", "sighting_of_ref": "indicator--53f85516-bd6f-4425-b378-ab68f2485d2c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d599350c-0d30-44f7-b25b-2194c7847675", "sighting_of_ref": "indicator--0c860fa9-5d98-4933-880e-319c6149b210", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--871d82b5-86ba-4ea1-bc48-bddf38c5aed3", "sighting_of_ref": "indicator--0c860fa9-5d98-4933-880e-319c6149b210", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9eebd6c-ce2f-4702-95f9-38c944cd4425", "sighting_of_ref": "indicator--0c860fa9-5d98-4933-880e-319c6149b210", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a2d505-4a10-49bc-b66e-2956f2d63223", "sighting_of_ref": "indicator--e7c85f04-0df7-4a96-ba47-7fe0a0706f51", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7c98da-66f2-4b35-86ba-cc3133e61da8", "sighting_of_ref": "indicator--e7c85f04-0df7-4a96-ba47-7fe0a0706f51", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eecfa7c5-47a3-469d-8ca5-75f8cd29c355", "sighting_of_ref": "indicator--609e1382-9c86-4758-ae97-1caacc18e4ef", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ab13bc-719c-4882-bff3-02d6bb1c8d87", "sighting_of_ref": "indicator--609e1382-9c86-4758-ae97-1caacc18e4ef", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ee001e-00ed-4ee1-8e1b-2c67e0cab494", "sighting_of_ref": "indicator--609e1382-9c86-4758-ae97-1caacc18e4ef", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5ce1d2-dc1b-45a2-b5aa-ecedb14d0470", "sighting_of_ref": "indicator--78126e09-3d1f-4523-80fe-6efbf5267493", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca4ec0e-57ef-46ba-a5c4-6fd755f5336c", "sighting_of_ref": "indicator--78126e09-3d1f-4523-80fe-6efbf5267493", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a51d40-7160-4a42-a518-9d6a66a28b5e", "sighting_of_ref": "indicator--78126e09-3d1f-4523-80fe-6efbf5267493", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb66144d-80a3-47dd-8c75-af759485e711", "sighting_of_ref": "indicator--04ced2c6-5466-4dab-86ca-771a8eea0f03", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34da50b-3c00-407a-a67d-f4561de8e123", "sighting_of_ref": "indicator--070da997-f505-4b86-8978-8ffd886d9be3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c229569-4c63-4bdd-8895-6e8099d6e1d0", "sighting_of_ref": "indicator--e32821c3-44bf-4b12-86f2-683e2076011a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68aeea5f-cebf-4731-b139-c07add3b3de1", "sighting_of_ref": "indicator--ea90cd6c-9161-4594-a9c6-8ce835930665", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83cdf794-2b8e-456c-b313-eb4a45ff5930", "sighting_of_ref": "indicator--f6ba18df-8116-41d4-a979-b5ca4e5b1b81", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd7869d-e4ce-4868-9cf9-16bacb957f12", "sighting_of_ref": "indicator--c09cfce2-9b13-4af4-a630-62fd32da815b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef4c356-1492-445f-a1bc-28a258504261", "sighting_of_ref": "indicator--f5312878-2caa-4f8f-a19f-70114e1a4868", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a5d0e0-b522-4dd6-81ca-07fc1ec49f38", "sighting_of_ref": "indicator--fea47643-f662-4f49-913c-403af43ad89d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b62e9b-3f66-4a8a-baa3-a332bbd5531c", "sighting_of_ref": "indicator--3edc7673-a740-48ae-b66f-8f874b35e8d6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c50625-33db-4f06-8999-881a47c91587", "sighting_of_ref": "indicator--965d778e-8173-4512-8bce-f5c61472172b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112be8dc-5e58-4412-b880-1dc7dee8476c", "sighting_of_ref": "indicator--5cf9d58a-feb1-471d-9396-146f9ac3d778", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881008f4-8457-482d-aeda-664c7600ed51", "sighting_of_ref": "indicator--5cf9d58a-feb1-471d-9396-146f9ac3d778", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f79511-720c-4a97-8897-38c4b33718f2", "sighting_of_ref": "indicator--5cf9d58a-feb1-471d-9396-146f9ac3d778", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f123272-7709-4fa8-818c-8ca535f0e3be", "sighting_of_ref": "indicator--3c4303f1-315c-49ca-8031-00f040a0f36b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5af446-8300-4bf9-a041-40b932d52de5", "sighting_of_ref": "indicator--3c4303f1-315c-49ca-8031-00f040a0f36b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc58b3f-5033-47a0-ac73-496364e4509f", "sighting_of_ref": "indicator--35daf7dc-2db7-4897-bb6e-3b2910f653f5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7c360c-e80a-4d66-88f9-dacb1506eabe", "sighting_of_ref": "indicator--2f87a009-6ecd-4fa9-a179-6e347ef97dae", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a71270-4f4a-4150-9e37-65d6d74f703d", "sighting_of_ref": "indicator--2f87a009-6ecd-4fa9-a179-6e347ef97dae", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4651e4b-68b6-45b3-a8d3-9ef12c5a4c5e", "sighting_of_ref": "indicator--c1581ec9-84e2-4c28-bff2-0b7ee89a9b57", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7986ab01-ff3a-4afb-a700-bf13b451527f", "sighting_of_ref": "indicator--19f8e691-45d4-4437-995f-4d9f0348f8eb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9559640-e566-4a3d-9011-aba42f63f564", "sighting_of_ref": "indicator--19f8e691-45d4-4437-995f-4d9f0348f8eb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50bc9127-e7a1-4a2d-b7f4-713d88b01c33", "sighting_of_ref": "indicator--19f8e691-45d4-4437-995f-4d9f0348f8eb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc5541ee-0948-465d-87a7-8c7cde4281fa", "sighting_of_ref": "indicator--d7cc1d2c-c6fd-45c5-944f-d10df6d684f4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cabe053-4eb9-465f-b90c-099780efd3ff", "sighting_of_ref": "indicator--d7cc1d2c-c6fd-45c5-944f-d10df6d684f4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4bf4b5b-fdb4-4ab2-8c8a-ef932e6d4399", "sighting_of_ref": "indicator--d7cc1d2c-c6fd-45c5-944f-d10df6d684f4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d20a43-c6fc-4190-b437-59fbd8e51197", "sighting_of_ref": "indicator--0aca1af8-a80c-44bd-9e58-1e06628f8b8c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef54675-caf0-4659-96fd-f88bbb8fbf6a", "sighting_of_ref": "indicator--0aca1af8-a80c-44bd-9e58-1e06628f8b8c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--435390db-885a-45dd-afaa-322d48f9a11f", "sighting_of_ref": "indicator--93e64fce-071e-4714-bca9-f7a6a8b3dccd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--550cf013-b9e5-48fc-bcbf-ea1cc16730b7", "sighting_of_ref": "indicator--ca6f8ce7-2aa1-4776-8fa8-0e90c917a164", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62dcfb8f-8bef-4773-88b6-11d6face43fd", "sighting_of_ref": "indicator--cb0ba997-c932-4a0a-b6c0-4a7b4e1a213e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61132376-3a3e-402a-829d-55636beabe7f", "sighting_of_ref": "indicator--cb0ba997-c932-4a0a-b6c0-4a7b4e1a213e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e59b8a1-efce-4352-a4ed-0a1eaa88a5c1", "sighting_of_ref": "indicator--cb0ba997-c932-4a0a-b6c0-4a7b4e1a213e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe08f90-a5e9-42a4-86d9-2b0db1ee7034", "sighting_of_ref": "indicator--9f5205b7-babf-4f08-ab98-e21a8f2a3f84", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a64cf8-5655-4b01-8a35-c8c449810f6a", "sighting_of_ref": "indicator--9f5205b7-babf-4f08-ab98-e21a8f2a3f84", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3f25ae-0e1b-4bdb-878b-e0c878ffdc61", "sighting_of_ref": "indicator--9f5205b7-babf-4f08-ab98-e21a8f2a3f84", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f41a68-c750-4fd2-a310-347f434ba83d", "sighting_of_ref": "indicator--72611d75-938b-474a-8167-6142e1266d61", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f28ca5-22cb-4b1a-a6b3-128a7da661ac", "sighting_of_ref": "indicator--72611d75-938b-474a-8167-6142e1266d61", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80aa8a60-5a20-488e-88fe-b21a1ae7a04f", "sighting_of_ref": "indicator--72611d75-938b-474a-8167-6142e1266d61", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40baf3cc-cd2b-4c90-a529-5865696069c2", "sighting_of_ref": "indicator--6530eae5-6cdb-44eb-94d0-1656fad7b4f5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212befa6-82f6-4f4c-becd-79fd727bbc6b", "sighting_of_ref": "indicator--6530eae5-6cdb-44eb-94d0-1656fad7b4f5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b21af3-582b-41ea-83ba-78133154f683", "sighting_of_ref": "indicator--c947a8c9-88be-4208-8a3b-ad24af527e4f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f16b159-9bd9-4a24-b2ee-e093336dcb2e", "sighting_of_ref": "indicator--9df36c97-f2c6-4e40-81b9-1ce7e4575bb8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20cf79b2-7682-4602-a9b4-41e1c80528f6", "sighting_of_ref": "indicator--9df36c97-f2c6-4e40-81b9-1ce7e4575bb8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee3939c-81a3-4271-85ff-d4272046cd1e", "sighting_of_ref": "indicator--d49c11d0-dd3d-4f83-b97f-83021eab856b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e657155-0e57-4627-8798-cddbfa332d15", "sighting_of_ref": "indicator--bd4e04ff-91d3-47f3-a883-33dfe7cd314a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--653f113d-e032-4f4e-809f-0c7aaafde749", "sighting_of_ref": "indicator--bd4e04ff-91d3-47f3-a883-33dfe7cd314a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739d496c-a4a4-408d-af00-5b736aa44cce", "sighting_of_ref": "indicator--bd4e04ff-91d3-47f3-a883-33dfe7cd314a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8fa9b92-73cc-469f-abc2-02979d708bd3", "sighting_of_ref": "indicator--f06da7b4-01ec-47ed-9e24-26f7c1a2dd6b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--588a2945-b123-44b8-a72e-c3dbd4e57667", "sighting_of_ref": "indicator--f06da7b4-01ec-47ed-9e24-26f7c1a2dd6b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d053a41f-775d-441d-afa9-76c646b8b032", "sighting_of_ref": "indicator--f06da7b4-01ec-47ed-9e24-26f7c1a2dd6b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080db521-f2e1-4d6b-a37a-b16dd7e09064", "sighting_of_ref": "indicator--72e96642-24dc-4c4b-9bac-304a3d9e3071", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8245043a-72ff-4dfa-a436-9941ab9c7ae6", "sighting_of_ref": "indicator--72e96642-24dc-4c4b-9bac-304a3d9e3071", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b21269-a7c2-420a-9396-db017506fecc", "sighting_of_ref": "indicator--b4410ca7-bc43-4ebd-9266-24e7ffcc8523", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8a9c42-aa6b-4a65-9624-a6c317ed3a32", "sighting_of_ref": "indicator--b4410ca7-bc43-4ebd-9266-24e7ffcc8523", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8895534-b6d8-4014-822f-ec72f87c6d05", "sighting_of_ref": "indicator--34303e12-19c7-4063-977b-94424c8c8d33", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd8ce40-7bb4-4fe9-b1d4-71189edd69ed", "sighting_of_ref": "indicator--bb8c9d9c-3788-4db8-a644-2950b5a5c866", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3dc2c5-dd33-4e1e-b5ee-ca310d1faee0", "sighting_of_ref": "indicator--4a860e2e-a710-4f44-9e2a-e69674358287", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1add3303-8b8c-477d-a434-d82af738df1b", "sighting_of_ref": "indicator--cb5feaa6-56ba-4113-96c9-8fdd42c75c3f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3a20a4-58f4-4d97-ac76-6e383b8086f6", "sighting_of_ref": "indicator--e3a48d09-b949-4947-9c7d-4ff0fcb183b2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e3b76e-014b-4dcc-b2b6-ddc4d3034dd2", "sighting_of_ref": "indicator--3413a3cd-3a16-4ff4-9a62-be8d91e21a73", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b0ec1d-4d2a-4be3-a404-97bb8590cebc", "sighting_of_ref": "indicator--3413a3cd-3a16-4ff4-9a62-be8d91e21a73", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239348da-8695-43cf-944a-5162de96fcb4", "sighting_of_ref": "indicator--3413a3cd-3a16-4ff4-9a62-be8d91e21a73", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4562cdb-fea7-49f7-b595-62b9ea39eb85", "sighting_of_ref": "indicator--dd1e9c12-4cf7-473a-8a13-ef19e1df89ad", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d18a6224-e361-41af-89a7-ee24548ae4c8", "sighting_of_ref": "indicator--67211ad5-f5d7-4ad7-8a73-7a88cc20a41c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3c8d09-f6e4-4d76-b74b-b7a441f904d1", "sighting_of_ref": "indicator--67211ad5-f5d7-4ad7-8a73-7a88cc20a41c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--200abf05-161e-4d66-a1f6-b96df8115b93", "sighting_of_ref": "indicator--67211ad5-f5d7-4ad7-8a73-7a88cc20a41c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ede82b5-bcf4-4815-adf0-f1140c8f224d", "sighting_of_ref": "indicator--eed04b79-2bdf-4799-a715-11f2e17ca27b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08f93d4-c1d3-4068-b453-75b898210a19", "sighting_of_ref": "indicator--eed04b79-2bdf-4799-a715-11f2e17ca27b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a946bd-e540-47de-8498-9a5f3394a377", "sighting_of_ref": "indicator--eed04b79-2bdf-4799-a715-11f2e17ca27b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fea8d03-6e43-4a41-bc3a-49a43e02acdf", "sighting_of_ref": "indicator--3fe84d53-5f16-48f6-ad06-e6f71de84b5a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0b22f5-c94c-4419-abea-ad4d6a3a7013", "sighting_of_ref": "indicator--3fe84d53-5f16-48f6-ad06-e6f71de84b5a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8569bebc-91fd-40d0-90f5-5f4f5c785744", "sighting_of_ref": "indicator--3fe84d53-5f16-48f6-ad06-e6f71de84b5a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84aadb18-a302-4dbb-af22-96651819150c", "sighting_of_ref": "indicator--a61782a1-b7a6-43a7-a5c1-544c53bfcc7f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d3c919-5ac1-465b-ad67-858ec572a088", "sighting_of_ref": "indicator--9622fcdd-71ae-4c0a-9141-67a90383c002", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9741b26-3734-40a6-ac87-86e9a70e44e7", "sighting_of_ref": "indicator--9622fcdd-71ae-4c0a-9141-67a90383c002", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53775c60-bc4a-4700-868d-226b80291617", "sighting_of_ref": "indicator--1c8b3f0c-f432-4aaa-9651-6d1a773a55e6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e4b5249-a120-4db0-bbec-8ed59b2f50ec", "sighting_of_ref": "indicator--33c3d6f9-5ae2-48be-8053-536be09a8df6", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1215477-637c-40a1-9459-d6f606f6930c", "sighting_of_ref": "indicator--4870b93f-d7a0-4bdf-a10d-01e331cb7ee4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e0ea135-b0a6-4d78-b8e4-58ba1ef8ec99", "sighting_of_ref": "indicator--5743e30b-5a5b-4cff-af3f-5274f514dca4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a864d954-d6ed-44c2-8564-76c4f6a0cc29", "sighting_of_ref": "indicator--5743e30b-5a5b-4cff-af3f-5274f514dca4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d7d707-911c-407b-a774-381d0099cb62", "sighting_of_ref": "indicator--25d19080-7573-4ac1-ae16-9d885cd181bd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a8f6dd8-a308-4936-8c2f-03ae08ce4015", "sighting_of_ref": "indicator--25d19080-7573-4ac1-ae16-9d885cd181bd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6519d578-a6c2-4962-b2be-b0c29f2b4edc", "sighting_of_ref": "indicator--e069709f-3aab-4574-baf6-5404d88f337f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bfb73eb-2980-4f51-bc88-115196adb4cb", "sighting_of_ref": "indicator--e069709f-3aab-4574-baf6-5404d88f337f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea93fff2-2019-4eff-b020-fa571dd2b16f", "sighting_of_ref": "indicator--1bbdf109-1b49-4e2e-9371-7b42f35251ea", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ba9274-20a0-4469-a75d-c78280e94b8c", "sighting_of_ref": "indicator--47375d26-faef-472b-a259-45c8ae9a2a2f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02877052-c85d-4f42-a14d-94565530bae8", "sighting_of_ref": "indicator--d4e20be3-8592-47fa-aedc-e02531fa7f93", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f74e6209-66e0-4e01-8309-597e629eb824", "sighting_of_ref": "indicator--9a966c7f-4c73-4013-8656-f26ec3106af0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d48a8f-5120-411b-a480-469467bc1d02", "sighting_of_ref": "indicator--9c52ef40-a322-47a7-9815-e39360adac81", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec9f9183-32d5-4de4-8cb3-5566cf587d1d", "sighting_of_ref": "indicator--54458f86-2a7f-427f-9a2f-4ea3cc1ec753", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb4f17a3-61e2-494b-af30-87cb148a4de2", "sighting_of_ref": "indicator--ffa6dd30-9acb-4a76-95f3-3315c4e46206", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898a2b9d-8576-46e3-a13b-4beddc638749", "sighting_of_ref": "indicator--ffa6dd30-9acb-4a76-95f3-3315c4e46206", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7ed280-2f93-4c39-a445-669b6d501d1b", "sighting_of_ref": "indicator--ffa6dd30-9acb-4a76-95f3-3315c4e46206", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e2e759-ab96-4968-9d9a-b1a72c1819f1", "sighting_of_ref": "indicator--ffa6dd30-9acb-4a76-95f3-3315c4e46206", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1551a3c3-8da0-4fc6-ad5d-d14cec9ceabf", "sighting_of_ref": "indicator--7ca74280-4469-42d5-8476-ce0c7cfb79a6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84f90c4-abae-4ddd-a77c-d28223783ece", "sighting_of_ref": "indicator--62722682-01a2-4c84-84ac-bf82601566ba", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e80eef2-2ba3-47fa-a0b1-ffc5b61e14b0", "sighting_of_ref": "indicator--62722682-01a2-4c84-84ac-bf82601566ba", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b973108-04d9-43f3-8c58-dc27fea6b7c7", "sighting_of_ref": "indicator--65c57689-fbaa-4c7a-9dd3-f3b4ac2dbfff", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc9e2b0-114a-4c8c-85ca-61660bef5c3f", "sighting_of_ref": "indicator--0970810c-6fee-4f21-91a8-db6188884f0b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a2d53f-e524-4631-b9bd-7e3fb85a176a", "sighting_of_ref": "indicator--c50866f6-d3bf-4a3a-a83a-fbe165f96389", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9a80e2-9a84-4d71-a8f8-9455c2d812cc", "sighting_of_ref": "indicator--c50866f6-d3bf-4a3a-a83a-fbe165f96389", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--babaec78-51b8-4e2b-94de-c5fab08f3fa3", "sighting_of_ref": "indicator--c50866f6-d3bf-4a3a-a83a-fbe165f96389", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5cfc24e-0fc5-44ab-b97f-8d308bd22339", "sighting_of_ref": "indicator--093a61f5-c750-44fe-928a-8eaf55915390", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66dee28c-e218-4e5f-931b-68a2eb580241", "sighting_of_ref": "indicator--093a61f5-c750-44fe-928a-8eaf55915390", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8145f08-ef1d-4170-9ab1-bff5754d6366", "sighting_of_ref": "indicator--093a61f5-c750-44fe-928a-8eaf55915390", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90cd075f-9517-41e0-9832-66f55fdd1a90", "sighting_of_ref": "indicator--700a86d6-746b-4890-8d6a-9a9876813784", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c041bed8-cddf-4b39-a0f0-0f72d5ca4f37", "sighting_of_ref": "indicator--8e5f45dd-e3b8-4e95-a104-b1d27aa90b65", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4597997-eba6-487b-a3b9-4910315c9150", "sighting_of_ref": "indicator--4caea199-77d2-40e5-bbfb-a5f6cde8006c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--754402fc-fca8-4580-8d86-a842ffa2966c", "sighting_of_ref": "indicator--4caea199-77d2-40e5-bbfb-a5f6cde8006c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb80645-183a-478a-b891-77a8b1cdfc7c", "sighting_of_ref": "indicator--4caea199-77d2-40e5-bbfb-a5f6cde8006c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f12087-81c0-41f2-a68a-d2c6f50993bf", "sighting_of_ref": "indicator--043040ee-6f09-4f51-a515-e170dc53d4bb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab45466-3bd1-4252-a997-dbb57ada62c9", "sighting_of_ref": "indicator--a2d6b455-8cd0-4e7c-92f8-1d7c7cf4a03d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f27290-bf4e-4f2e-a5e4-c23fdaa50a72", "sighting_of_ref": "indicator--70be7796-60ad-4ce7-bb34-b0a87eeda74c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1f1c02-d61a-49b1-b304-2d2f5a226e9f", "sighting_of_ref": "indicator--7e338011-0746-4fe5-b503-e83f556d727e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1723bb-e618-4191-8db6-be6c30448139", "sighting_of_ref": "indicator--bc203941-2cd1-4e39-84be-896abb4f4301", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b7b4e6-f0dc-4241-a46e-34eec432f3a4", "sighting_of_ref": "indicator--c191de48-7985-4e3e-802c-da0aaedfd578", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f0c5bd4-c926-41bb-a8a0-3870e717c456", "sighting_of_ref": "indicator--a2953c47-7286-4abe-a64e-d49102e8165a", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df233e72-34c0-4687-b23f-0fa085ac02aa", "sighting_of_ref": "indicator--e9fdf4ec-8d2f-4ef2-80c8-28bb9982b578", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522c7d23-275e-4cc7-8158-226d0bdf32db", "sighting_of_ref": "indicator--e9fdf4ec-8d2f-4ef2-80c8-28bb9982b578", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2d85b3-e576-4ace-bcc3-74c5c71f725a", "sighting_of_ref": "indicator--ed61f680-6a4c-4cd1-a30e-9c2509e61793", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3962ffc0-4ddc-4a8f-bee1-b35910e01281", "sighting_of_ref": "indicator--2ba3da3e-c3ef-44a2-89fa-c333c64d7f57", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee4acf7-5772-417b-bfec-70c07bcfa054", "sighting_of_ref": "indicator--2ba3da3e-c3ef-44a2-89fa-c333c64d7f57", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d75731-f730-42d2-a5a3-7e2fd169d109", "sighting_of_ref": "indicator--158fe94e-cab3-474f-961d-7e4bb9286c94", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d89487-10b0-4980-8d7d-2b6501b9bd88", "sighting_of_ref": "indicator--158fe94e-cab3-474f-961d-7e4bb9286c94", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccfdb904-3af3-487a-a906-dc977978e556", "sighting_of_ref": "indicator--158fe94e-cab3-474f-961d-7e4bb9286c94", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85cbd061-2d19-4fbf-81ab-e5f7db1c4d9f", "sighting_of_ref": "indicator--edc97bb9-336a-4540-8d1c-a4227afc9449", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7342290b-81ef-4ae1-b5f6-d5c473255a38", "sighting_of_ref": "indicator--810d3870-61b0-4891-9965-85d8803bb197", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57589805-088c-44a3-b986-5e6a189bc2f4", "sighting_of_ref": "indicator--810d3870-61b0-4891-9965-85d8803bb197", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e62147-70b3-42fb-a6c8-17a54bdfa08c", "sighting_of_ref": "indicator--23db0874-67ff-41ce-861a-38bdac57e558", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64dd1587-230e-4467-bd1d-26b01b85242c", "sighting_of_ref": "indicator--bf49fae0-90a9-4a4e-a29e-82c8b74bfdab", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90352543-1f79-4bd6-afb3-19765cd06cb9", "sighting_of_ref": "indicator--54218037-014e-4376-874d-450ab6cb7a5c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc77b32-c4f5-4362-91d5-a1ffa4c9c10f", "sighting_of_ref": "indicator--27292609-7afa-443d-9e97-05e10ee0f1e4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed3b154-911f-4f33-beea-ce9ba2d909fc", "sighting_of_ref": "indicator--c4673efb-49b5-435a-923e-199dc59577e1", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1469e184-1e47-4405-9488-637f5bcb73d8", "sighting_of_ref": "indicator--b789b416-4b50-4f72-b845-17b5704eda6c", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ce9dab-2268-4cdd-8b35-44372d7703b1", "sighting_of_ref": "indicator--8212e173-b250-469b-a0f8-310e0ca8e92e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f596ee71-b463-40e7-8e29-8ffac6eac5d2", "sighting_of_ref": "indicator--6ea0b153-ec42-499a-9b19-07fa8b38f189", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc355c0-8c5d-479c-97aa-efd500b62dea", "sighting_of_ref": "indicator--10b67767-04e8-4582-8938-bb62859cb07e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e89dbe-7ca7-4fda-895e-66b013b0ba69", "sighting_of_ref": "indicator--2e5ab9cc-5574-4feb-87e9-5684d359627a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0733cfb5-6b79-45c0-b571-012231e438df", "sighting_of_ref": "indicator--eafb70ee-55ae-4c13-943b-272bc6642903", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0fc070a-a750-4046-82b3-100b4ea1e1ed", "sighting_of_ref": "indicator--9d457a24-9710-41c7-bda3-7388759503d9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--109983f0-b29b-4d0e-b9b1-8800046e8da2", "sighting_of_ref": "indicator--c330f30a-91c6-4a72-be3d-4db08cdf7bd1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--454aa322-c64a-4e10-9a09-0b755418b222", "sighting_of_ref": "indicator--c330f30a-91c6-4a72-be3d-4db08cdf7bd1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a974ac2-bf25-4e54-865c-1cf451495680", "sighting_of_ref": "indicator--c330f30a-91c6-4a72-be3d-4db08cdf7bd1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1c1e70-c459-48f7-87fc-e8ccf7686d60", "sighting_of_ref": "indicator--59002348-a49a-447b-9243-f9597c3e4f7b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9d8cfec-1cba-41c1-a655-029811f792cd", "sighting_of_ref": "indicator--c3bcac11-c253-47d4-852d-23ddf502e369", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b9b757-0169-4e0f-9552-e012aebc798a", "sighting_of_ref": "indicator--8bddce00-9861-47f9-8e31-91c19f8e9a18", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2704584-5793-4be5-bc0c-faa1676d2c41", "sighting_of_ref": "indicator--058cd50c-0349-4497-94fb-af438cd6a442", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3557cbb-7c0a-41bb-be66-17abcdd9e845", "sighting_of_ref": "indicator--601f528f-6716-4a29-80e7-cc463ffbbcfa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90af1a0c-8712-42ca-962b-7ba57ad3932b", "sighting_of_ref": "indicator--601f528f-6716-4a29-80e7-cc463ffbbcfa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c611cb-0fbc-470c-b750-6c190f47bf5e", "sighting_of_ref": "indicator--d8b7d52e-51a8-4639-b90e-1a01a7654bb7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--277812b0-a6b2-45c7-a89b-372d8c89570c", "sighting_of_ref": "indicator--53fc70cd-b28c-459f-8e24-88da2f98da4e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a2b86f-4756-400e-b00a-6876c024bfa1", "sighting_of_ref": "indicator--cc4b7810-d23a-4523-a58e-ac32ce44c332", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049f0c1b-ed27-43dd-81c3-a40261db9028", "sighting_of_ref": "indicator--5f3c1c99-7401-424a-9f5f-875ee3bc0133", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535688b9-ac39-414e-9175-8b8336a0f05a", "sighting_of_ref": "indicator--19a0d863-936f-43f4-a373-ebda3c043e35", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e50fbc4b-9e3d-475c-82d7-b691361d3c41", "sighting_of_ref": "indicator--de9e8077-3876-4b4e-872b-6e6974bc34d0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9663f594-fe5d-4d14-97b8-f9b9d302ae06", "sighting_of_ref": "indicator--8454cd2a-8978-4484-a378-ce327eb2ca9b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3012fa04-f615-4ece-8502-41c9443d2928", "sighting_of_ref": "indicator--8454cd2a-8978-4484-a378-ce327eb2ca9b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153d233b-6a3f-47b8-9508-3caccb8889dc", "sighting_of_ref": "indicator--8454cd2a-8978-4484-a378-ce327eb2ca9b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0854314a-be53-4a4b-a935-03aafc298bf8", "sighting_of_ref": "indicator--792fa1ca-8e6b-4a5d-9075-9be1dd39e213", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d98e15-9a4d-4a20-bac6-25a0400fb915", "sighting_of_ref": "indicator--820fbc43-dd9d-493d-9d64-506657563411", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46be35e8-2cc8-4ff4-a450-5eeed06a80d0", "sighting_of_ref": "indicator--ca6f0bbf-c9ed-4304-9b50-b48230a3bd39", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2220f7b9-abed-47c1-b925-6b991f60899d", "sighting_of_ref": "indicator--087462d8-b3f2-41fa-89dd-78f653bda089", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e42e1150-d4ff-4c65-9cf2-71e9a5f864e8", "sighting_of_ref": "indicator--eb44604d-3eed-4e64-8e57-5ce9e1ffb0bf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c4ef4f-ee7a-4f0f-ac7d-d02bd81f0218", "sighting_of_ref": "indicator--481bf287-3941-4664-b089-81c895c32379", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9afc28f9-e0c8-4083-a44c-5cda42b8fd99", "sighting_of_ref": "indicator--86e9c189-d85d-4bec-a523-b24d833a5761", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5536713-d540-414b-b618-7bb23eadf9d5", "sighting_of_ref": "indicator--2c92a256-7fb0-4eee-97dc-274714f848f8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3dfe33f-16db-4a53-849a-730d98a98362", "sighting_of_ref": "indicator--1269b666-e048-4a10-90a6-9fde58177a46", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f0fdbca-2d43-4499-956b-30c2cb6579a7", "sighting_of_ref": "indicator--0249dd26-6c6b-4206-a8e5-87e92953701b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21751a76-8f0f-44e0-82ba-9e7916bcdb73", "sighting_of_ref": "indicator--4fa7434e-c24a-4ef9-9867-ff8a045e4f0b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fcf8edd-9320-417b-9163-31f863dfa0a0", "sighting_of_ref": "indicator--0ff76ee7-e71f-41a2-8df8-b93c62d70eba", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebccb1dc-e7f9-4546-a213-ea4702a84620", "sighting_of_ref": "indicator--ed03454d-7769-4f62-821e-f7b1ec058511", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e2fd8f-e362-4e1e-b2a2-7bdaf5914e00", "sighting_of_ref": "indicator--d187dbfa-fe42-4e45-9e87-82b9375de094", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df574efd-a55c-4abb-955f-2632e442280d", "sighting_of_ref": "indicator--fedd674a-5a15-45e0-8b8d-945d4f949b4c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec5feaa-d61e-45b5-a838-70c0e5e68d0e", "sighting_of_ref": "indicator--f001fcbc-44e9-442e-a91b-437a0e2023b2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4502abd-53ed-410d-b8ac-4a73c001a7dd", "sighting_of_ref": "indicator--f001fcbc-44e9-442e-a91b-437a0e2023b2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f4272e-dc7d-4c05-85ae-ec2cb67ed76c", "sighting_of_ref": "indicator--edca65ba-3719-408c-9325-b4a16ae4a160", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db49c25-fbc7-47db-9504-8e5a96dda4f0", "sighting_of_ref": "indicator--8c9b70d5-b33c-4e40-b734-30a08ef657e6", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6410dce-5810-494f-8d19-2810ac268169", "sighting_of_ref": "indicator--3c70e226-df8b-4cb6-8c14-1c75bfe90004", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ff0569-6102-4929-b638-0d9c6fd1db88", "sighting_of_ref": "indicator--8f32c27f-ae56-4744-b0a3-8158ab0f414f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a35049-cd22-4bff-b86d-93c1681edc9d", "sighting_of_ref": "indicator--b15f1132-bfdc-4c2c-9a49-846727d88249", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bea2fe4b-05f4-4022-825e-f63407676f11", "sighting_of_ref": "indicator--99e2a4fb-25bb-4a76-8496-7bdb2847f05f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6c3ec7-9929-4e5a-bab4-e940abd64e3c", "sighting_of_ref": "indicator--b1a28829-44e2-4d27-a006-be7f74e616e6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6362d9ba-b02f-4043-a604-7e181e9b1ddf", "sighting_of_ref": "indicator--daa7dc04-8f3d-4011-a88f-4c2b43c6d13a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc3646ee-3b84-4b1b-900e-8b0b6dfce43a", "sighting_of_ref": "indicator--265dcd26-4fcc-487c-b93e-520145843317", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f07acc21-83da-469f-ade9-df881f8ee2f6", "sighting_of_ref": "indicator--97cbc6e3-4084-4344-8ff8-afb032e45b21", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56688cb1-4379-4436-8cc7-e17f247b9b2a", "sighting_of_ref": "indicator--114a68d1-2313-4ddc-86c2-1eeffc6ab09e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b104ad-4184-4f62-a2fd-de26908c788b", "sighting_of_ref": "indicator--232530d6-da36-4b6e-84e7-9f258e961143", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da28222-ebc9-4a7d-99d4-e7ce499feb3a", "sighting_of_ref": "indicator--77cef7ce-0410-452f-894c-4faca25387d0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363117d1-6ff7-4d80-8223-4bb0b8c45f83", "sighting_of_ref": "indicator--c575fc14-128a-4504-9815-4d1e1bd7d09e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--028fa2a1-9699-4659-a8e6-9426fca0d608", "sighting_of_ref": "indicator--cf77839f-e9c8-4f18-83d5-8586120393a2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436b2d93-9f39-426f-a34c-3281634fd35c", "sighting_of_ref": "indicator--6147b90c-4d45-471c-ab29-9b28b658ca0d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a01121-480e-4125-9a9e-75f141a40964", "sighting_of_ref": "indicator--ba6e0bf5-7750-4f93-8035-24f6e1f829bf", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a97a93-6f22-42cb-9663-cb630477b112", "sighting_of_ref": "indicator--a60f5b70-6d35-4ede-a9f5-7212099a18cd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a80e1ebf-4885-4414-9825-5bbb0a6abe68", "sighting_of_ref": "indicator--80f4b518-ba0c-45a4-9356-431c3c732f65", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0707e75b-c44a-491a-8992-ea021e1e2ac2", "sighting_of_ref": "indicator--36ee3abb-8d17-4041-8a1c-7e38f7692199", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3740a954-42e5-497d-88ec-fd4601c611a2", "sighting_of_ref": "indicator--657c319f-6494-4460-abfd-07d2569d3559", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc3d5778-a419-4e4e-bb22-07427e131b55", "sighting_of_ref": "indicator--f7100dca-7000-4c2e-944e-f0678a643d2c", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eace8673-1d4d-40ae-bab2-bf2d7e812e12", "sighting_of_ref": "indicator--eb98ac11-8702-4720-a691-355389ef44f8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf276292-c4c9-48c9-98a1-39c3a18993a1", "sighting_of_ref": "indicator--f112dfc1-17be-4ad9-a91e-93ee599bb392", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eec9e38-f8c5-4f4b-b94a-1f2e05d57ce5", "sighting_of_ref": "indicator--c9838130-308b-4382-8b8b-68601c071e73", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce73af7-b750-4946-b589-fd7ad7cc1839", "sighting_of_ref": "indicator--db3dfd46-93a6-46ea-8fd0-239c522ede58", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ace7f3-b3ca-402a-b308-6c8498003c18", "sighting_of_ref": "indicator--8aa94c82-4ad7-4e12-8047-a46e17bd1a44", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4c73c3-aac9-446b-956c-ec30e2ddcac4", "sighting_of_ref": "indicator--7875899f-9e53-4360-8bc9-36a72a5327dc", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b333372-a194-499a-8128-d03d40d1831e", "sighting_of_ref": "indicator--b8c586b6-31ef-44ea-9e7e-1296e6ac8212", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc77c0a-ad80-46ff-a611-c15d8982fd4c", "sighting_of_ref": "indicator--005454a9-c0e8-4c7f-9cc8-9a1172ebc2bd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba09c98-2951-4889-943d-4021bec2df85", "sighting_of_ref": "indicator--005454a9-c0e8-4c7f-9cc8-9a1172ebc2bd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5ccd9a-a55b-482c-a6da-e64a8a5dba6b", "sighting_of_ref": "indicator--88ac5c2e-08a4-4c14-b594-dc7b26dfbc9e", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3ef4dc-9762-4246-95e8-015be2633b04", "sighting_of_ref": "indicator--6ad0082a-afdb-4868-89e8-f410790acb66", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429016f4-e6fa-4765-ab25-9ce1a3c14d6b", "sighting_of_ref": "indicator--59187a30-e79b-45ef-8b3a-979d598e4936", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd8ece8-3659-48a7-9ccf-4792838c2c7f", "sighting_of_ref": "indicator--68e1a97c-7f34-470d-a19e-46d1178ee661", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419ca161-5140-4528-adae-e1a53453aecf", "sighting_of_ref": "indicator--99fc6ee5-af6d-4795-8786-e568c8d62b83", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2560d9-313b-4089-acbf-55c50858158a", "sighting_of_ref": "indicator--99fc6ee5-af6d-4795-8786-e568c8d62b83", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d752f5c6-f45c-4f84-8389-6c71eb6178c6", "sighting_of_ref": "indicator--4bb45adf-de44-40f0-b841-00d8c112e937", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72eb7de7-321b-45f5-bc89-533b504f916f", "sighting_of_ref": "indicator--aa717750-2ca7-42c5-8a46-417b5941e0b2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09719132-1a21-427c-a9c9-a169b6f14637", "sighting_of_ref": "indicator--aa717750-2ca7-42c5-8a46-417b5941e0b2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f861998-00a6-433d-ad24-2ae8e55023b1", "sighting_of_ref": "indicator--aa717750-2ca7-42c5-8a46-417b5941e0b2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c93bc82-5abd-45bd-b545-3fb5eb71be4c", "sighting_of_ref": "indicator--c119cc5e-2812-4306-a31b-5e6d65d8def6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de748ae-4e07-44ac-b3da-2b74aea41003", "sighting_of_ref": "indicator--c119cc5e-2812-4306-a31b-5e6d65d8def6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ef14ff-0b25-4ba8-9724-a45e4819d2ec", "sighting_of_ref": "indicator--c119cc5e-2812-4306-a31b-5e6d65d8def6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f87c39d6-529e-43a3-8b88-9fb81e63a537", "sighting_of_ref": "indicator--dad69531-9bb6-4ea2-b788-268f6cc40992", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aad0c57-66a6-4bd0-92e6-9ea83204e078", "sighting_of_ref": "indicator--dad69531-9bb6-4ea2-b788-268f6cc40992", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b913c228-c379-4650-bf3b-fedbf9afc4a5", "sighting_of_ref": "indicator--dad69531-9bb6-4ea2-b788-268f6cc40992", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06308b90-8e01-49d7-9970-5f3f831a3886", "sighting_of_ref": "indicator--e002d4b6-6de2-4904-a4f7-a0ef0b342f94", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b0f77d-2010-4f59-9c0d-a94d855dc079", "sighting_of_ref": "indicator--e002d4b6-6de2-4904-a4f7-a0ef0b342f94", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65fe1221-7aff-4073-b7f5-95ef1ada11ac", "sighting_of_ref": "indicator--e002d4b6-6de2-4904-a4f7-a0ef0b342f94", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905fa3d4-eb1c-45d0-a9d8-b68cd520e56f", "sighting_of_ref": "indicator--e90bdef6-2c85-4528-bdf6-fb63a679b8e7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc617e7-362c-4037-845e-ef48ab656f6b", "sighting_of_ref": "indicator--e90bdef6-2c85-4528-bdf6-fb63a679b8e7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e502c1f-b5d5-46c5-8ac1-9a5864637762", "sighting_of_ref": "indicator--e90bdef6-2c85-4528-bdf6-fb63a679b8e7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e6c090-3dd0-49c7-a8fe-6378f5b2345d", "sighting_of_ref": "indicator--88b82a37-e18d-436f-855e-bfef47af9c94", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19ceef9-3101-4158-80c6-eadbc32ddbd0", "sighting_of_ref": "indicator--88b82a37-e18d-436f-855e-bfef47af9c94", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9e3ab61-2e50-4649-9c9d-638eb4386591", "sighting_of_ref": "indicator--88b82a37-e18d-436f-855e-bfef47af9c94", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4fcc5d6-ce2e-4753-8022-c14ea3bf4190", "sighting_of_ref": "indicator--cde0c5cf-0649-44c6-938e-3e57b8afe6eb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09277d14-26e4-4f82-8316-c97696af1299", "sighting_of_ref": "indicator--5a1cf684-0b67-4172-a468-b67c2a5a66b3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ff7803-9828-4656-8f13-cf386cc92239", "sighting_of_ref": "indicator--3e1a4700-edd6-4ebf-8df4-2d247ad5dda6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c73f71-6b46-4290-932e-185e5c38aeab", "sighting_of_ref": "indicator--10a0e80f-068e-4b92-a184-996d021eed62", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517e290c-4f5b-4314-bd0a-89fcd1b817b4", "sighting_of_ref": "indicator--a64c0eb5-f6e9-48d6-a015-5d34e164a5d1", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f106c945-eeeb-4121-8894-3d304ebf9350", "sighting_of_ref": "indicator--431a6f53-0228-443e-980f-16812a5326a6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583e66ae-0b12-47a1-b803-522b8cdc9364", "sighting_of_ref": "indicator--1f170ed3-2125-4830-8d0f-18a883fc56f6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b14d7e-1a38-45d5-bf97-121a11747ff5", "sighting_of_ref": "indicator--77b461dd-237d-4371-af67-0d831671502e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21aef5ba-10aa-419b-bb52-b10347993689", "sighting_of_ref": "indicator--77b461dd-237d-4371-af67-0d831671502e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa3254a-5692-4ac7-b36b-52cd39fa947d", "sighting_of_ref": "indicator--6afbb5ca-358a-44df-879f-570b1dec8dc6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d62b89e-b577-4e3b-bd9a-fb8b249b45e0", "sighting_of_ref": "indicator--6afbb5ca-358a-44df-879f-570b1dec8dc6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--579a795d-57fc-480d-8030-325b1acb9644", "sighting_of_ref": "indicator--6afbb5ca-358a-44df-879f-570b1dec8dc6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce2c3c1-d4bb-494c-a6c9-aa520cb4c29b", "sighting_of_ref": "indicator--15f3f7b5-5fe7-423f-8e81-9d21d65be799", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304ff60e-07d6-4409-8c8d-957f77565e4a", "sighting_of_ref": "indicator--84d8d582-6c7f-40ee-b924-f8693f35941f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0a1b74-1b13-442e-b0cf-0b89b234e0a0", "sighting_of_ref": "indicator--9e1cd4f3-d36a-482c-9d67-7c9c5d25704d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3acb99e1-fddd-463d-ae50-dd90e182ad0b", "sighting_of_ref": "indicator--b9fc3c3b-7241-463a-b7b9-3dd28f754076", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--895c785b-cec5-4e3c-8dbc-9da4b98b4041", "sighting_of_ref": "indicator--f9beb597-4b95-4c8f-91ef-6d40cc84d645", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ff1dcf-c353-455f-9280-647e20279e00", "sighting_of_ref": "indicator--edbd82fd-adfc-4b2e-a151-53b9f4d24134", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ce7c9e-ab14-45ec-bd5a-4d15e27004cb", "sighting_of_ref": "indicator--0258c847-8ef6-4e60-8223-2d21e2e851ac", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f06db07-9181-4fd0-9056-0dd1c641c90c", "sighting_of_ref": "indicator--0435c3b3-29be-4906-82ec-6129094f7a68", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8224d145-40ef-4c75-b973-b43386afaa88", "sighting_of_ref": "indicator--b7ef40af-8021-4c52-96b0-e2a1ad7a5047", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e26680b-95c6-47f9-bd00-76383dcb807d", "sighting_of_ref": "indicator--d5debf5f-9edc-4f09-b1aa-eda29c1a3a4b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f42596-a919-4b36-bedd-01bd88e55492", "sighting_of_ref": "indicator--87aecf0c-89a3-4764-a242-8c7232a05fcd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d398abd-4635-4ea2-bb2c-572e40b4e2e2", "sighting_of_ref": "indicator--d62b8fbb-05e3-4b25-a60e-5f039868cc84", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4e1281-aab2-43d2-adcf-bfff0b52645e", "sighting_of_ref": "indicator--d98d4c84-30fa-4465-86df-b03d256b6e55", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd4f0c2-5792-4e7b-860f-b389eab6bb65", "sighting_of_ref": "indicator--1f2f2e7c-dbc4-4405-9eff-54bde598508f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51dd191a-f947-4238-a82f-1a013bdd71ea", "sighting_of_ref": "indicator--e55fdf2f-ae0f-4c26-a73c-e150deb614b1", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--680c9295-2989-468a-8566-17b0a1216507", "sighting_of_ref": "indicator--26d35a1f-18a6-40d5-9d8d-2e4d1479ceaa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3fe9720-11e9-4222-b621-a595cc163f01", "sighting_of_ref": "indicator--c8464741-d765-4dfd-ab9b-6635a6929b15", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2304c058-9962-4ad5-a5e6-1d5a8618ec42", "sighting_of_ref": "indicator--3ecb84eb-c6b1-4106-ba45-7f0dea82b069", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62a2f19-a0d3-4748-b2d8-f9e23fef2ea5", "sighting_of_ref": "indicator--3ecb84eb-c6b1-4106-ba45-7f0dea82b069", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d2a30f-0168-4a75-9cc7-25ecd9c79ce3", "sighting_of_ref": "indicator--3ecb84eb-c6b1-4106-ba45-7f0dea82b069", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e0f01a-4530-4f23-85e8-0cebce33d9df", "sighting_of_ref": "indicator--ea320f3b-3d43-41f5-8a03-46660714f32f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2472871-febd-4f3b-bab4-395e0d8e7470", "sighting_of_ref": "indicator--ea320f3b-3d43-41f5-8a03-46660714f32f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0689ce2d-dcc4-48ab-a0d3-cfe27fda85ae", "sighting_of_ref": "indicator--595e9217-e396-42a1-9964-a62de47cdcbe", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25fadadb-843d-4bdf-8453-29d928bd5a44", "sighting_of_ref": "indicator--595e9217-e396-42a1-9964-a62de47cdcbe", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a88bd579-474d-4506-a19e-ba15ddab268d", "sighting_of_ref": "indicator--595e9217-e396-42a1-9964-a62de47cdcbe", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eba0172-38f4-411a-8d16-dc54670b5bb9", "sighting_of_ref": "indicator--8e568daa-b620-4007-a550-52c46ae6e4d1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--601c7e76-2b90-49cb-8a89-193fb489b3da", "sighting_of_ref": "indicator--8e568daa-b620-4007-a550-52c46ae6e4d1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e734d1d-c7c9-447d-9c28-f8a66de24224", "sighting_of_ref": "indicator--8e568daa-b620-4007-a550-52c46ae6e4d1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4741bec-8e8b-457a-a510-9f265c8760e8", "sighting_of_ref": "indicator--37623175-a7f0-414c-a7b9-e65ab46bf312", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f006fea6-b6e4-4068-850e-d4dd48bc5100", "sighting_of_ref": "indicator--37623175-a7f0-414c-a7b9-e65ab46bf312", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a699261d-501d-4461-8e2e-93d214a806b9", "sighting_of_ref": "indicator--37623175-a7f0-414c-a7b9-e65ab46bf312", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc02751-c565-4e20-9bfd-48f315c6c849", "sighting_of_ref": "indicator--e369c9c7-528d-4f6b-aa5e-40fbba2a275d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c50931-c17d-4d1e-8063-f850d27a90bc", "sighting_of_ref": "indicator--e369c9c7-528d-4f6b-aa5e-40fbba2a275d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b529ff81-2fdf-4479-a148-e87a990f6bc5", "sighting_of_ref": "indicator--e369c9c7-528d-4f6b-aa5e-40fbba2a275d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--867fb6a7-3b5c-4921-b0b2-8481b4891cbf", "sighting_of_ref": "indicator--db2c01fb-b007-47a5-af72-3df700ad2be3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--716194b9-986a-4566-9d22-7843f04ecc0d", "sighting_of_ref": "indicator--db2c01fb-b007-47a5-af72-3df700ad2be3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40297f1f-7121-4864-a9c2-789c4babc691", "sighting_of_ref": "indicator--96a3d8af-fd41-4da1-8270-a0bfa258c8dd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11adf09d-506c-4c09-8925-f6e7c4e88e6e", "sighting_of_ref": "indicator--9fe00a7c-8fdf-4566-b920-1f67f0273a85", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40ae222a-2631-4c81-9ac6-93fe5205bc39", "sighting_of_ref": "indicator--9fe00a7c-8fdf-4566-b920-1f67f0273a85", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--951a3009-a35b-4dfc-8ba9-7c7c7419ce71", "sighting_of_ref": "indicator--6e4de464-6b77-47fb-80ce-8a2c9b6c51a7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aebcf22-e3dd-4d02-a285-6c3fa84a44c0", "sighting_of_ref": "indicator--6e4de464-6b77-47fb-80ce-8a2c9b6c51a7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a3aeae3-5bf5-4d3e-9fdc-0547e02a222f", "sighting_of_ref": "indicator--a094e2c8-bb5f-4a9e-adbd-60d60d5342c6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e46e709f-8b32-44aa-ae50-7843156485ab", "sighting_of_ref": "indicator--a094e2c8-bb5f-4a9e-adbd-60d60d5342c6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--457d1099-1a0b-4ef9-a585-17dd87843387", "sighting_of_ref": "indicator--2142abbd-9cef-4529-bb74-16a4cb6f8864", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcef9ac0-88db-4923-9666-942e97fca63c", "sighting_of_ref": "indicator--2142abbd-9cef-4529-bb74-16a4cb6f8864", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9633e9-bbda-4e46-9ba5-e3be5df358e1", "sighting_of_ref": "indicator--e9d3cfe9-86fd-4585-bd1d-36e2f987412d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b0d58d-076e-4868-bc4a-015f2043dca7", "sighting_of_ref": "indicator--e9d3cfe9-86fd-4585-bd1d-36e2f987412d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbdd3f5f-acfa-4562-80a5-85c9891cb857", "sighting_of_ref": "indicator--4f1432ad-658f-4527-b333-3808f1ca57cf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bbc774b-75e1-43a1-845a-cf1f9f732b95", "sighting_of_ref": "indicator--4f1432ad-658f-4527-b333-3808f1ca57cf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf052dc5-0c81-4954-903b-84a106382632", "sighting_of_ref": "indicator--127d1b79-ad33-4115-bb8a-56835b4650b5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695a128a-109b-4a8f-b496-ffd313dc1023", "sighting_of_ref": "indicator--127d1b79-ad33-4115-bb8a-56835b4650b5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ed529e-3255-4330-8fe1-b2ce7801055d", "sighting_of_ref": "indicator--5a5fb5bd-fd98-4fc0-94c5-fbf0c73b7101", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9ca0df-1567-4b8b-a3d4-2e9723b217f5", "sighting_of_ref": "indicator--5a5fb5bd-fd98-4fc0-94c5-fbf0c73b7101", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d8dfc10-60a7-41a2-9475-b9f1cd9e63e6", "sighting_of_ref": "indicator--36239c61-5052-4b25-84e7-edd7887a02d2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095b06f1-230d-402b-a8d9-40508522e987", "sighting_of_ref": "indicator--5f421cb9-fe5b-4a4b-aa2a-2eedfcdee068", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a29d295a-1b21-4ee5-ad66-04d0027926b6", "sighting_of_ref": "indicator--5f421cb9-fe5b-4a4b-aa2a-2eedfcdee068", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c68ea172-d84a-464e-a239-7b4b96378fb7", "sighting_of_ref": "indicator--f0585a36-d1c9-41e7-86c3-b58837374f29", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57727fcd-d265-4a35-80d9-70caa1f8539e", "sighting_of_ref": "indicator--f0585a36-d1c9-41e7-86c3-b58837374f29", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b50e8f48-d86c-41b7-b7da-dd310cde3020", "sighting_of_ref": "indicator--3f11e623-1ba0-4b44-b317-2ceca28a95cd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd98204-2145-4e5d-91db-acbfd46abd3f", "sighting_of_ref": "indicator--8cdf68b5-3750-43a8-9ef1-ad7eb9a92d76", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ce3878-801f-448c-b274-892a8d6f999b", "sighting_of_ref": "indicator--d492af01-46fa-4903-8c19-988f3bebf809", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4da175-5420-4ca1-a796-a6db7adb7a90", "sighting_of_ref": "indicator--69608ef6-de49-4017-ac72-934b42baf22a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34308cce-98b3-4c6c-8818-101bcc0ea0ed", "sighting_of_ref": "indicator--69608ef6-de49-4017-ac72-934b42baf22a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99dafcc-d5f7-4f7c-a4bc-1bd98cf3b8ba", "sighting_of_ref": "indicator--4b889c67-97e7-4f4c-a162-e5d763f80ba7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2920db33-9e5a-4084-a543-d901005d4da1", "sighting_of_ref": "indicator--4695eeeb-7359-4ccb-ab93-37cbd56fb68f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f3863aa-faff-4246-95e7-ecaceb6943cd", "sighting_of_ref": "indicator--d2ecb047-02f6-401c-bbd2-9693755ce6ff", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04b8151-61eb-4493-9e0c-fe013db6970a", "sighting_of_ref": "indicator--3233f7a1-872d-4331-8cc2-4e63f4275a8d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc8c72fa-a81f-4a3d-989f-81ed5614bb05", "sighting_of_ref": "indicator--419b3ea8-086f-4fe8-be96-357e78c1e13a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a411ccd4-27bb-45a5-a20c-de7f7abadc53", "sighting_of_ref": "indicator--9ea337e8-fcaf-4b5e-8605-a5d02f2cd45e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b989cc59-0f4e-4cac-b2c0-66a70ce38207", "sighting_of_ref": "indicator--fe0e77bf-d7b3-49ea-bde5-18d252eb4ea5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5afca78-ca88-4f7a-af18-3fbdab03b7a8", "sighting_of_ref": "indicator--e06cbdc9-aad1-4176-86df-15ad2295aba8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d8acffb-497d-4fc1-b7f5-16b9401691f2", "sighting_of_ref": "indicator--b647aed8-5e14-4c03-a008-bc612d9862ad", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73b6915-91c6-472a-998d-824d842e2b89", "sighting_of_ref": "indicator--9e902398-5bd7-4796-abd2-77faaef42349", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac8169b-6807-4fc8-b76d-11b22ce5761e", "sighting_of_ref": "indicator--9dab0b69-dab5-46fd-942a-e5cc926440dc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75afbba0-db04-420e-a966-09a4540663ca", "sighting_of_ref": "indicator--993cfccd-f23c-4863-bbbb-2e42e59c2596", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad34800-a90a-430a-9377-229c7b8199e3", "sighting_of_ref": "indicator--d80e93e0-3957-468a-b780-ad4cc8f56fdb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc38cab8-4daf-4775-b589-7777323f2031", "sighting_of_ref": "indicator--a7020b57-20f3-498f-8355-c9427dd36fa0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11afa62b-aea0-491c-9d9a-d9cce3c8612b", "sighting_of_ref": "indicator--c731f302-2261-4771-99c6-8b1c66bf95d8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ec3294-c780-432e-a48a-120a4671d5ff", "sighting_of_ref": "indicator--afff3765-bf42-4ca6-9b9d-9fe9a0555217", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1debe20-625c-4f31-9c11-ffea5eb67eef", "sighting_of_ref": "indicator--15b43cfa-c5e8-48fc-978c-d3afd237f77c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc3d4f4-b6f8-4cd6-901c-0116a1710f9d", "sighting_of_ref": "indicator--dcab03c9-2067-40b4-a924-916711b46026", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049813c5-dc43-4be0-a884-9a6c6eac4de3", "sighting_of_ref": "indicator--098a7016-9a9e-4a4d-83d4-1d15999f3cd8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2488c071-f2ae-4f82-83b0-789d0ea08206", "sighting_of_ref": "indicator--fc3248a1-6d8c-46a8-aba1-39c4169b77fd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c44acfc-698f-4b2b-a7c2-e2518c52b7d2", "sighting_of_ref": "indicator--bbf272bf-f3e3-4edf-9520-bbebf1c7c833", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89698ffe-51d2-4bb9-8b65-ae6a1c09fe50", "sighting_of_ref": "indicator--3213673a-8195-40b8-9d13-1a2e81ddbe02", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee8b6ce-1bb9-4002-a373-c9b6fb8d1960", "sighting_of_ref": "indicator--e558d6c7-996e-43ee-9303-c4e8b8d0e4db", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eafbc8d9-caf4-476e-bca5-65a6ed477e3d", "sighting_of_ref": "indicator--e558d6c7-996e-43ee-9303-c4e8b8d0e4db", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffed5d0b-1276-4f22-bb95-311f226ab0ee", "sighting_of_ref": "indicator--0aac156a-4993-4d79-80d5-5633447615db", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d79554ab-57df-4e32-873c-2b91f084b53d", "sighting_of_ref": "indicator--fe735223-59c6-4a2e-a89b-9682efad156a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62cba432-e329-46a6-b2dd-6b18856302f4", "sighting_of_ref": "indicator--ba3512ee-78a6-4acc-880e-9db53fc4e44f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ff0164-f474-41db-9fa2-dc4c9045e40d", "sighting_of_ref": "indicator--820d8d56-c81e-4b00-9882-f151f8ecdf40", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a265ed4-0806-4bc2-818f-8151b18e364d", "sighting_of_ref": "indicator--abdb0eb7-8cc4-45fc-bf13-9f1270b2f840", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9eefa24-1463-4ff7-a1ce-3cfffca34945", "sighting_of_ref": "indicator--5702687f-3418-4741-9b56-83356d6f03d2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31c4003-c948-4d37-9ba4-1ef9b190a90b", "sighting_of_ref": "indicator--33430580-2f51-47ce-afe1-0369720559a4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a5d022-9bed-425e-863d-f5e52003d655", "sighting_of_ref": "indicator--0e1e1807-67c9-4de6-95fd-a01e98ebd616", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79fd5a04-3bf9-4117-800b-7c8eda3b0b06", "sighting_of_ref": "indicator--68477e64-fc6b-47ca-a604-7b8ad866cfbc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa903e3-6516-4b22-b566-70bf9b6b35f4", "sighting_of_ref": "indicator--f847b81a-712c-429d-9dc8-d75008201958", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--302a7cac-b3f5-44fc-b62a-8eb19f4e003d", "sighting_of_ref": "indicator--def68c8a-f663-4e76-80c2-e600f7332956", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42cb4eec-05de-4ebe-8b24-5c65fc2fcca6", "sighting_of_ref": "indicator--4bef64cc-e7a6-491f-a938-c27b7a1f3b36", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e285cdb1-89c7-40bb-907c-84101253f830", "sighting_of_ref": "indicator--46788652-e0ab-4919-bc02-91f7773c29cf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055a4c1f-fb06-434e-ba3b-b1e6414a4edb", "sighting_of_ref": "indicator--4fe47bfa-e28f-4c06-bb0a-606258359a36", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe00798-bdab-4820-bac4-1ff98c4fa82f", "sighting_of_ref": "indicator--21363892-f438-4467-be0a-ec97f20f2bae", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ab4b46-00e8-4fbc-b005-16b1ede023fb", "sighting_of_ref": "indicator--39da482d-d5ed-40bc-afe3-16000561c9ef", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9024fbfd-4160-46f1-891e-2f5b66643aee", "sighting_of_ref": "indicator--a87cc9a6-0a9a-4da0-a6cb-4a7f0094a9a0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ce4905-3083-4b4a-98b5-f6065b72e0b0", "sighting_of_ref": "indicator--ba97a8a6-6312-4031-be70-58d0825a62a9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1dc4b27-8e1e-48ea-96fd-73cf7d293fe6", "sighting_of_ref": "indicator--b8d558d7-fe04-48f8-84a7-d0bbc032a92c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d2f897-ab19-4e11-b695-787a50d402fe", "sighting_of_ref": "indicator--b8d558d7-fe04-48f8-84a7-d0bbc032a92c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14ce49d-022e-40a8-aa9e-ffa678c71de7", "sighting_of_ref": "indicator--e15e6f4f-33f2-446c-9b7d-071cb79a72f3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d081190-708f-4ecd-898e-829a9399f0d6", "sighting_of_ref": "indicator--e15e6f4f-33f2-446c-9b7d-071cb79a72f3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d37f04c-ad4f-44b0-834a-61aee96bbab6", "sighting_of_ref": "indicator--ba2f6a70-8b74-4e88-bbf6-40786b3c4afd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--164b38a4-ad1b-4a8c-98ee-223d8fe65523", "sighting_of_ref": "indicator--ba2f6a70-8b74-4e88-bbf6-40786b3c4afd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e911ca0-791c-412a-8dbf-b14e5e7e0e3f", "sighting_of_ref": "indicator--ba2f6a70-8b74-4e88-bbf6-40786b3c4afd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d60f4214-c39c-46d7-bbab-4366314a64af", "sighting_of_ref": "indicator--4699af5d-6656-4eee-a25e-d01d09ce9d89", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--219923c5-0b2d-40ee-811f-899c81f5bc82", "sighting_of_ref": "indicator--4699af5d-6656-4eee-a25e-d01d09ce9d89", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f323db2e-b1b6-49fe-9c0d-7503a91e69e0", "sighting_of_ref": "indicator--bc2ffe23-a0ec-40c0-8e43-61c0f79bcfbf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--315021e9-a68b-4ecc-9361-295dc563e798", "sighting_of_ref": "indicator--8c69c84f-a2cd-4fd6-a957-8a9236aab77b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cde31f8-a237-496c-9549-6ef1af467434", "sighting_of_ref": "indicator--716e4cf6-89e0-413f-a1cf-4d04cee5c9c9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a5b6507-64fd-4710-965a-b5d115381ae6", "sighting_of_ref": "indicator--1835670b-c033-4afa-8829-9b3f93ad94f6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b18b5e5-5ab1-4930-baf8-2cb27ff72931", "sighting_of_ref": "indicator--1835670b-c033-4afa-8829-9b3f93ad94f6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac9909f-224b-4d11-be0a-819675fb997f", "sighting_of_ref": "indicator--cc64ec96-792a-423d-b491-7876b721bc5f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d81ce8-3204-4801-924f-60f644852430", "sighting_of_ref": "indicator--39886693-8962-4e7d-8746-773c54900e6e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41c5a70-842f-4046-ba6f-2c148a2e5b85", "sighting_of_ref": "indicator--39886693-8962-4e7d-8746-773c54900e6e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb91eeb-ecbd-4e25-a39a-070b1252e769", "sighting_of_ref": "indicator--d915ff67-5ae1-4dbf-8fa3-697c056fa0ef", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c017e1c0-7929-4f77-a882-876a914fd871", "sighting_of_ref": "indicator--f6f4d219-4ba5-4a44-a1e2-195a94d50207", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f6d22bc-2317-4eae-968c-bab7aab33183", "sighting_of_ref": "indicator--f6f4d219-4ba5-4a44-a1e2-195a94d50207", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7bccc5-1481-45d9-b55d-496bf3a817ec", "sighting_of_ref": "indicator--1f71e895-c8f1-493c-8117-4ff5737de16f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7799d0-502f-4d62-9bdc-2edfcacd3757", "sighting_of_ref": "indicator--1f71e895-c8f1-493c-8117-4ff5737de16f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4339589-04c4-47b4-b661-0dd892e6db11", "sighting_of_ref": "indicator--1f5ead6b-2d41-4139-b98f-99284004c09b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31bb4224-d165-4be7-b39a-60ced46b2830", "sighting_of_ref": "indicator--71d65d63-91ab-4da4-8f06-725c424bd1d6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7eb9c5-82bd-49df-a807-ab1f560e1d9c", "sighting_of_ref": "indicator--b7f9636a-cdc2-4faf-9736-2832505a37c2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff37c7a-6357-419d-b527-98e27c029aa3", "sighting_of_ref": "indicator--aae82a9d-706a-430e-bf06-16928f83977f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--281c4145-7672-491c-93d0-52141dfc5f73", "sighting_of_ref": "indicator--302b46e2-8d6d-44e3-91a6-3006421d4111", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b17f19f-ea92-4e8f-824a-07e15e50fa13", "sighting_of_ref": "indicator--302b46e2-8d6d-44e3-91a6-3006421d4111", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f636a82-8786-4062-b75a-a0ca6a62bf10", "sighting_of_ref": "indicator--3df862a2-586b-453a-a17d-3b61a7b7a6d2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1201ee5-7893-4c0d-a01a-73a495dfd01d", "sighting_of_ref": "indicator--37fca769-e2ca-4810-baa5-1b9d8398cd8e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6cff0d6-6512-4ea2-bf4c-4a1365c824dd", "sighting_of_ref": "indicator--3273e848-f277-40fb-997f-9c3e65d2a8e1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daea4c54-34d9-443f-9e28-a675d25fbeec", "sighting_of_ref": "indicator--246d7b4c-fd19-40cf-b163-6af3cb9ae1ba", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6d2e70-8b0a-42b7-80db-f518a3ab11a8", "sighting_of_ref": "indicator--032f41d4-3d8f-4d10-a41a-e164cea2a402", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf4cd4b-9282-4f41-b4bf-e3a139b73614", "sighting_of_ref": "indicator--fbc2b21a-faf2-4402-9be5-c3459ae98377", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8714216-c5d0-47b1-a335-cb4aca12bb34", "sighting_of_ref": "indicator--521f96b1-e764-4fe8-ade8-d69c7409bba4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ad2900-af3a-41cf-861d-943a201bb319", "sighting_of_ref": "indicator--4d12e4e1-7fa5-46dd-aaa1-6c6120b8213c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53575e12-0451-421a-aac0-2bcc3ffa363d", "sighting_of_ref": "indicator--4d12e4e1-7fa5-46dd-aaa1-6c6120b8213c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1edcd484-4c9d-452e-a54f-bfec6840bdc6", "sighting_of_ref": "indicator--cda5f2ae-4081-4d7d-bd80-4144bfb644f6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a69d884-3209-4d7a-b769-624d05d20288", "sighting_of_ref": "indicator--9a90312e-0c12-4198-b8db-4a0cae7137d5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38965fbf-d06a-4da5-8bed-5d1bfa83b123", "sighting_of_ref": "indicator--47c8c932-3fc7-48f3-9105-7d69a709d9f5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a794de9c-e473-48ee-9b26-bc1f89f83bd7", "sighting_of_ref": "indicator--805b05d9-99d2-4a72-82a8-04a559cc703d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f303c039-761d-42e5-b6d9-2bd056437035", "sighting_of_ref": "indicator--dc31d150-b28b-40ae-ba7f-0ce3b07991f7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf34e31-c143-4038-b98e-dc5cad6b3e23", "sighting_of_ref": "indicator--d7fc5ee9-5980-41ad-8fee-c5aa4be27b31", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7acede-8628-4ef7-9383-dc19932542d7", "sighting_of_ref": "indicator--13b36ebc-59a3-4e52-9bf0-5eac46f32e6d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--932aadc1-4b72-4cb9-8d10-dea02955e49e", "sighting_of_ref": "indicator--be5ecdd4-34e2-4562-95f3-804aecd6751f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e420fb-8873-4d5e-80d3-e4e98a598505", "sighting_of_ref": "indicator--f874631c-ecd3-4e8c-99d1-cdfde017aff1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b3e6e7-30c2-4158-92a7-1d12e884d37d", "sighting_of_ref": "indicator--f85d9175-3642-4344-9508-f2b55c18c728", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e894aa-66e7-41a1-8f8e-25969b78407f", "sighting_of_ref": "indicator--fe4a5d1d-0f5b-4ea9-9455-8a564367291b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccca742c-d8dc-4299-9721-630cd959249b", "sighting_of_ref": "indicator--fe4a5d1d-0f5b-4ea9-9455-8a564367291b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e031ec-cec6-4c92-81cd-b16b69638fea", "sighting_of_ref": "indicator--516884ea-8d1f-4d02-aa04-ca010bdbfe44", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5639a599-5eaf-44e6-87c4-d09b1cdaa388", "sighting_of_ref": "indicator--516884ea-8d1f-4d02-aa04-ca010bdbfe44", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbcb3116-189b-4246-9673-ed363a56884a", "sighting_of_ref": "indicator--fb0d95fc-aebc-433c-8448-7e59b04e79f2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28909d16-c048-4751-b8e8-8a8d2b28cdce", "sighting_of_ref": "indicator--fb0d95fc-aebc-433c-8448-7e59b04e79f2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6bbb9d-0781-4655-8351-d8c92d240a3a", "sighting_of_ref": "indicator--5bad782d-a1ad-4719-804e-d59db2e884ba", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--092abea1-88d1-4cd4-85ea-8f5870fc7a90", "sighting_of_ref": "indicator--5bad782d-a1ad-4719-804e-d59db2e884ba", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a6bcdd-4469-4d0d-93f4-7dbd1f629e2b", "sighting_of_ref": "indicator--da4bffb9-38e6-4f0c-90d7-48c3d656ce13", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c671b13-8fe4-4d03-8b4f-ad64d37473ca", "sighting_of_ref": "indicator--2666999c-bbec-4835-9965-825d151961e7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14cac4b3-213e-4731-ac5e-a0db864012a2", "sighting_of_ref": "indicator--2666999c-bbec-4835-9965-825d151961e7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ac4ba4-14a2-4a3e-9774-25a68eb5e694", "sighting_of_ref": "indicator--4bebcd60-3a06-4f16-a14f-c074f562ebbd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41215ea-b0c3-4c8f-8282-c421f009a2f5", "sighting_of_ref": "indicator--4bebcd60-3a06-4f16-a14f-c074f562ebbd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29bd69a2-56eb-46b7-b51d-ef91a1c8d229", "sighting_of_ref": "indicator--244f4b17-1310-458a-a4c7-d59683b7fb8a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222182e7-f643-405e-8a5f-d0ba29193ba6", "sighting_of_ref": "indicator--42d836ca-2a4e-4eb8-a208-c4b62c47bc14", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e844749e-ad67-42cf-b1cd-7cc38d5e91b9", "sighting_of_ref": "indicator--42d836ca-2a4e-4eb8-a208-c4b62c47bc14", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e50627f-9c33-4e67-9caf-67e4b7aa4dfe", "sighting_of_ref": "indicator--90db9454-ea18-47d8-957c-6802f51e5a6a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664ab8d8-9bda-4db2-984e-2f7ebf696d1d", "sighting_of_ref": "indicator--90db9454-ea18-47d8-957c-6802f51e5a6a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b73454b9-a959-404c-aca8-4080ceeca6c4", "sighting_of_ref": "indicator--b6bd3858-9e4b-428e-9a7b-c9df2da62548", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815cd722-6bf4-4527-8095-ee0c97642e70", "sighting_of_ref": "indicator--b6bd3858-9e4b-428e-9a7b-c9df2da62548", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57bbbfe1-cf3a-442c-96c4-dd9fe9e2ac26", "sighting_of_ref": "indicator--8cf65db2-ecad-40fe-9ed4-fe12090010d6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8815d1-2a3a-4003-921e-78f14cbf7db0", "sighting_of_ref": "indicator--6e1be0b1-9fb5-4941-a9ea-3b60a92facb3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7baf4ec9-c857-4b2a-ae39-672e3cd7539d", "sighting_of_ref": "indicator--6e1be0b1-9fb5-4941-a9ea-3b60a92facb3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3319ab32-4f63-4719-8e40-31287ae3bddc", "sighting_of_ref": "indicator--c864a7ed-822f-4282-8c34-364b5072252c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8641c27a-9aa1-4678-8406-46fdafdb9e40", "sighting_of_ref": "indicator--c864a7ed-822f-4282-8c34-364b5072252c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b75ebe41-3f89-4a6d-88c3-40fa8c50a511", "sighting_of_ref": "indicator--866c028d-57e1-4db4-b441-f6ef1166df24", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add41bbd-40fa-4c21-86df-d854d1090fd0", "sighting_of_ref": "indicator--866c028d-57e1-4db4-b441-f6ef1166df24", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b527c8-1983-4e56-ab0b-21c762ac1774", "sighting_of_ref": "indicator--61d10ff0-e87b-4fce-a6e0-05efd4c74235", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386d7183-1291-48b7-9651-834c891ebf30", "sighting_of_ref": "indicator--61d10ff0-e87b-4fce-a6e0-05efd4c74235", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1262eac-8901-4f22-8d98-9a038ebb076e", "sighting_of_ref": "indicator--bde40e42-1f56-412c-8779-3c4186252ed8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--178ae16a-a6b3-46df-9f81-be34410cb0b3", "sighting_of_ref": "indicator--bde40e42-1f56-412c-8779-3c4186252ed8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9680cbd7-d6cf-483f-b924-447e366481f7", "sighting_of_ref": "indicator--457a29c2-613f-4a53-9ad8-5b3aa34cdacb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a396edb7-c701-4ccc-9e2b-be189c8f5485", "sighting_of_ref": "indicator--e32b6d10-2e98-4069-a973-7c7403d200f5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf3aca5-3363-4017-9e36-c96efe64133a", "sighting_of_ref": "indicator--03e7be89-4b82-442d-bf40-285d69a65590", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cabd27cf-39ce-4b40-9c02-db33f070424a", "sighting_of_ref": "indicator--6a23e6cc-71da-4517-8f63-bc9099ccc807", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49702ec3-a74d-4c1d-a454-46e22108f651", "sighting_of_ref": "indicator--6a23e6cc-71da-4517-8f63-bc9099ccc807", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--908e1f2d-be1d-4ac6-a02a-31545a014db4", "sighting_of_ref": "indicator--0100a0ad-de0f-4a62-8f34-d60946934df6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdfe894f-82b7-4283-af66-069e87dc3def", "sighting_of_ref": "indicator--0100a0ad-de0f-4a62-8f34-d60946934df6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b66f4eaf-460a-4cd6-bf1c-aea1f6f7bc72", "sighting_of_ref": "indicator--f0b46562-55f9-48a6-a1c3-a2d833fa7bba", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7750d259-7d21-470f-bcac-a11706463aac", "sighting_of_ref": "indicator--f0b46562-55f9-48a6-a1c3-a2d833fa7bba", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3dc6f95-ff23-4020-b0c7-75ea2ecd50c9", "sighting_of_ref": "indicator--2f461f33-3c1a-4c89-a089-12188320100a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5baad711-ea7e-40d8-a4e6-3afc0d29f6b3", "sighting_of_ref": "indicator--2f461f33-3c1a-4c89-a089-12188320100a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eddd109-0c4e-46ca-b3c2-2a22c70ef76d", "sighting_of_ref": "indicator--7d5f1431-bd38-4686-be52-b69dd80a394a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02ea16a-dd91-4e95-b7f1-3e6f654e94e2", "sighting_of_ref": "indicator--7d5f1431-bd38-4686-be52-b69dd80a394a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54173868-5ae6-49d7-8028-b774ea81ffa5", "sighting_of_ref": "indicator--babb6954-7935-4889-9d40-538960a0060d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c2f069-331f-4d92-adfc-bb87b776304e", "sighting_of_ref": "indicator--babb6954-7935-4889-9d40-538960a0060d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dddc3f44-186e-4f48-9321-20045d566ab6", "sighting_of_ref": "indicator--4d46aaae-a3e5-466e-adc5-55388d498cce", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c32bbb-3e70-4a16-b8d5-595d0565e5cb", "sighting_of_ref": "indicator--1daeb9e1-159b-4830-ae48-8dab473fcabe", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c85627d-5feb-4b42-91cd-698f9711d882", "sighting_of_ref": "indicator--1daeb9e1-159b-4830-ae48-8dab473fcabe", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b305ad-53ca-4f02-b52b-c638f2552690", "sighting_of_ref": "indicator--1030724c-0cb7-4d94-8501-24277f5219eb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf07f4f-b6c5-467c-a0c9-091e2fcfbf48", "sighting_of_ref": "indicator--1030724c-0cb7-4d94-8501-24277f5219eb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e68b6e37-6ebf-42a3-87d5-3684e8db9e83", "sighting_of_ref": "indicator--1030724c-0cb7-4d94-8501-24277f5219eb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a5f093f-e122-4cc1-82fb-a8b9a12ebcc7", "sighting_of_ref": "indicator--f8d95493-f0bb-4aac-84bf-43768388b601", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7913849-5842-46bf-93b5-d5d66bd100e2", "sighting_of_ref": "indicator--f4bb0d3e-d73c-4ca6-bab7-3eb41da2dd74", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1dd7f39-7b8c-43e6-9e9b-0e3c988bc655", "sighting_of_ref": "indicator--4351f121-eaac-4098-ab86-64b5af8acd5d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f182507-2ab0-4b2a-bdae-460ee4ef8995", "sighting_of_ref": "indicator--b4a539e7-a414-472f-8d81-0368a5da6045", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc7205e-8a16-4de8-a332-945c330f916b", "sighting_of_ref": "indicator--b4a539e7-a414-472f-8d81-0368a5da6045", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4346631-f707-49fb-a8b3-df43d1c49dbf", "sighting_of_ref": "indicator--7495e260-9923-458d-86d3-274c172ceeff", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a9cd81-67b9-4fad-8ed5-71e9733220d9", "sighting_of_ref": "indicator--7495e260-9923-458d-86d3-274c172ceeff", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c44a4a81-aca6-4c2b-a424-d16622da7fa6", "sighting_of_ref": "indicator--7495e260-9923-458d-86d3-274c172ceeff", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e1baa6-d9fd-4a8b-ab3d-4be91664de34", "sighting_of_ref": "indicator--467e98fc-8ab3-479f-bb65-c51a0b178411", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b89e81-6dee-40e3-b1c7-8aae7a7021ba", "sighting_of_ref": "indicator--467e98fc-8ab3-479f-bb65-c51a0b178411", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f480e4f-4679-459a-93e9-596cb7a88f2a", "sighting_of_ref": "indicator--467e98fc-8ab3-479f-bb65-c51a0b178411", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d339d8ec-0ced-4a67-baac-fed230f438fa", "sighting_of_ref": "indicator--ed00d71f-b01a-40e7-93d9-38cdc4eaef02", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba179e0-008d-4b59-be70-35c5378eabfe", "sighting_of_ref": "indicator--5dd34a87-caf2-4ee2-9488-6d8e8004ef50", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406fe1d8-233b-4539-b807-97425adffc16", "sighting_of_ref": "indicator--5dd34a87-caf2-4ee2-9488-6d8e8004ef50", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3095b7a2-d15e-4416-98c4-a026bd0159b7", "sighting_of_ref": "indicator--5dd34a87-caf2-4ee2-9488-6d8e8004ef50", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7bf1927-9927-4434-b155-c8ec5342d4dd", "sighting_of_ref": "indicator--6663f48b-2999-40d8-9855-2cd9f67782e0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0781f57c-0e76-43b7-a594-3b2bcc25c223", "sighting_of_ref": "indicator--b31d3c23-5a05-48b1-a1d1-2c4abce7ce4f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a88418-8785-4f6f-970e-687071d73446", "sighting_of_ref": "indicator--b31d3c23-5a05-48b1-a1d1-2c4abce7ce4f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f63eb4-7142-470b-8e41-fec7428ced21", "sighting_of_ref": "indicator--b31d3c23-5a05-48b1-a1d1-2c4abce7ce4f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a42b73d-d421-4a46-9e19-62522ecf846e", "sighting_of_ref": "indicator--05bd2d2c-d4ad-4c7c-a8a5-18b1e3fcd01a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af05f89-b3a4-4f2a-a8ac-0629a08493d6", "sighting_of_ref": "indicator--05bd2d2c-d4ad-4c7c-a8a5-18b1e3fcd01a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f80b2f-4ff4-411c-a1cc-fa7b22e59572", "sighting_of_ref": "indicator--6ecdeb1f-53fc-4b60-835b-8ebbbba08851", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42283264-acde-46f4-9698-55c3c12d6513", "sighting_of_ref": "indicator--6ecdeb1f-53fc-4b60-835b-8ebbbba08851", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45954437-9bb1-4ce4-a0e7-790ef0db7acc", "sighting_of_ref": "indicator--6ecdeb1f-53fc-4b60-835b-8ebbbba08851", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d763b1-fff6-4a25-bb06-a02560fa4904", "sighting_of_ref": "indicator--f65d8b0e-badc-467b-b777-3fbf3f82dbe9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca73119-41ed-4498-b338-bc8bc5ecba0a", "sighting_of_ref": "indicator--f65d8b0e-badc-467b-b777-3fbf3f82dbe9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ffde723-c5d8-4de0-93b8-bb0653828dfb", "sighting_of_ref": "indicator--f65d8b0e-badc-467b-b777-3fbf3f82dbe9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920bc745-c827-42f7-8d4f-dbf9f7626c0c", "sighting_of_ref": "indicator--06fdd2f4-4112-40da-abc0-6ec2f4e90497", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e92d64c3-a306-41c0-8cdf-de364c6b2401", "sighting_of_ref": "indicator--06fdd2f4-4112-40da-abc0-6ec2f4e90497", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ac85b7-f5f0-41de-8ba7-ee1950825810", "sighting_of_ref": "indicator--06fdd2f4-4112-40da-abc0-6ec2f4e90497", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7e4fe0-1b7f-4b88-8667-48a9b1e684d7", "sighting_of_ref": "indicator--7dd8004a-54b4-4ce2-b1f2-3fbd9b3c0255", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c685a6e-f5fb-4c11-988e-934a00e4793b", "sighting_of_ref": "indicator--7dd8004a-54b4-4ce2-b1f2-3fbd9b3c0255", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32dae232-accb-4a04-84d8-9e3f226b1524", "sighting_of_ref": "indicator--7dd8004a-54b4-4ce2-b1f2-3fbd9b3c0255", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a25de4cc-21d8-4607-81c5-ade6aa2fc81c", "sighting_of_ref": "indicator--e228fb57-9114-4d05-a9b9-417e09eb4ac8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83544f19-0292-4040-b92f-7df86999b55b", "sighting_of_ref": "indicator--e228fb57-9114-4d05-a9b9-417e09eb4ac8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca21d586-a7ef-493a-91d1-204f06765e2f", "sighting_of_ref": "indicator--e228fb57-9114-4d05-a9b9-417e09eb4ac8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd75835f-3ba0-4808-af5c-938f705e6063", "sighting_of_ref": "indicator--6c9be4ea-1398-40d7-b6d1-9f25d07152b1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7b29fb-b194-4d17-af42-2f38d29be7c6", "sighting_of_ref": "indicator--6c9be4ea-1398-40d7-b6d1-9f25d07152b1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50353e0d-d52c-4013-8efe-44604a72bc9e", "sighting_of_ref": "indicator--25258afe-5c57-4796-879e-d73f79781dfc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360e2128-1466-43b5-931d-c4c1692c42cc", "sighting_of_ref": "indicator--25258afe-5c57-4796-879e-d73f79781dfc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ca149c-1e75-4d72-a7b9-25ea6fbb4276", "sighting_of_ref": "indicator--77266aa9-bb76-4210-a041-c3b873add33b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a70cdf-1172-4473-91d2-04af2c89d884", "sighting_of_ref": "indicator--77266aa9-bb76-4210-a041-c3b873add33b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d74af1-8f6d-4d70-bb58-064b098a804f", "sighting_of_ref": "indicator--77266aa9-bb76-4210-a041-c3b873add33b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886666d9-eb52-40e4-8429-f0fb05c048b6", "sighting_of_ref": "indicator--b3f2c3bf-4025-4612-89b8-8b4a66bbe3a2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d515144-2286-48ed-a801-9e2ef108438b", "sighting_of_ref": "indicator--b3f2c3bf-4025-4612-89b8-8b4a66bbe3a2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27211b51-266b-4e23-a18e-049220cb118a", "sighting_of_ref": "indicator--b3f2c3bf-4025-4612-89b8-8b4a66bbe3a2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef74bb6-ca35-4752-8ece-613418219f99", "sighting_of_ref": "indicator--66411679-6110-4de2-b5b2-d33f761d2950", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7881c869-4df5-42be-9253-f487c90ba096", "sighting_of_ref": "indicator--66411679-6110-4de2-b5b2-d33f761d2950", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7348d7be-2646-40ad-8ab3-8e746d3d36b4", "sighting_of_ref": "indicator--66411679-6110-4de2-b5b2-d33f761d2950", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07643b9-1cae-4fdd-a7f3-cb7d98caca4e", "sighting_of_ref": "indicator--2fe5a9f4-6bc4-4381-8671-4b54302920fe", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ace144b-ec93-4b05-b955-8746a009d06d", "sighting_of_ref": "indicator--2fe5a9f4-6bc4-4381-8671-4b54302920fe", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c072ba-d025-4d69-9308-7763c1992a31", "sighting_of_ref": "indicator--2fe5a9f4-6bc4-4381-8671-4b54302920fe", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa45769-f531-4c95-a213-83bbe0d358ec", "sighting_of_ref": "indicator--315e5236-1eb2-436e-881a-f2edee40c284", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57527863-8da2-47d3-bf37-1e590956dcf8", "sighting_of_ref": "indicator--315e5236-1eb2-436e-881a-f2edee40c284", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f390df3a-8dd5-4734-b330-369231e36837", "sighting_of_ref": "indicator--315e5236-1eb2-436e-881a-f2edee40c284", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c34c344b-3985-467c-ab56-51af339f08ec", "sighting_of_ref": "indicator--315e5236-1eb2-436e-881a-f2edee40c284", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba22aa6e-e2f9-4866-a941-de5829142e2d", "sighting_of_ref": "indicator--c64b234b-5e96-4612-9b52-beeee8df79e6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa1b158-6ef6-42f5-8889-1924c3faa834", "sighting_of_ref": "indicator--c64b234b-5e96-4612-9b52-beeee8df79e6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d456d345-fa58-4d42-ad03-bb43ef98f386", "sighting_of_ref": "indicator--c64b234b-5e96-4612-9b52-beeee8df79e6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e082b62-ddfc-452a-a0c3-95445e32f05d", "sighting_of_ref": "indicator--155cd754-1ee8-4117-95e0-a3287d6173c5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f3a157-2be8-4d11-8f1e-88b485cfbcf6", "sighting_of_ref": "indicator--155cd754-1ee8-4117-95e0-a3287d6173c5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef7b265-91c7-4c9c-961d-2ca31b7439c8", "sighting_of_ref": "indicator--155cd754-1ee8-4117-95e0-a3287d6173c5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--483646d7-c8fb-4f99-b728-71ae19375716", "sighting_of_ref": "indicator--afe0a7be-c8ff-431a-86ce-b6fed6b8c084", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9744db4c-728d-432a-946b-d77aefb61cc6", "sighting_of_ref": "indicator--c9005753-42b9-428c-8f17-913093a6a2a7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eba9d0d-95ac-42c3-8307-6cf92ffce9c2", "sighting_of_ref": "indicator--c9005753-42b9-428c-8f17-913093a6a2a7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--350dfcd1-3678-427a-a085-3fb45fc7f234", "sighting_of_ref": "indicator--c9005753-42b9-428c-8f17-913093a6a2a7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662588ee-50ff-435b-818b-21c50942bdac", "sighting_of_ref": "indicator--b08e4b33-472f-4532-b95d-8abeebca73ab", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a52d25e0-1150-4d04-89f3-5a9cccc67ec2", "sighting_of_ref": "indicator--b08e4b33-472f-4532-b95d-8abeebca73ab", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e29b223-58dc-44ef-8061-fb24cd100afc", "sighting_of_ref": "indicator--b08e4b33-472f-4532-b95d-8abeebca73ab", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0ed629-af4a-4f5b-9422-629c56a26913", "sighting_of_ref": "indicator--7bc7a242-590f-4721-ad27-21dfe01820fe", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec067f9-75e5-414a-a901-024ab21ca0ef", "sighting_of_ref": "indicator--7bc7a242-590f-4721-ad27-21dfe01820fe", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9c041a-9f43-48c8-b421-398680a274aa", "sighting_of_ref": "indicator--7bc7a242-590f-4721-ad27-21dfe01820fe", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02e159d-3b1c-44b1-bdee-033d2c1f02c5", "sighting_of_ref": "indicator--d696fa0a-47f0-47ef-a8be-ae9c9785b3ce", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a8bc1a-2397-41fa-ac35-e625cfa14177", "sighting_of_ref": "indicator--56b4548c-5ab6-4a8e-9f59-c8b7b0511183", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2933e0a2-0eaf-48ba-8717-05f6e334235f", "sighting_of_ref": "indicator--56b4548c-5ab6-4a8e-9f59-c8b7b0511183", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dab30d56-c4fc-44ac-a5ac-c6cbb26c0502", "sighting_of_ref": "indicator--56b4548c-5ab6-4a8e-9f59-c8b7b0511183", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a33095-a3d9-44c0-99fa-366569d95714", "sighting_of_ref": "indicator--588d0080-402f-4bb9-a217-3e789027f086", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaddaac3-3182-4e6f-9118-3debc1efeb11", "sighting_of_ref": "indicator--588d0080-402f-4bb9-a217-3e789027f086", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6028d684-5d3f-474e-8b34-2ddfed6452f1", "sighting_of_ref": "indicator--588d0080-402f-4bb9-a217-3e789027f086", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431d6056-0c89-4dbb-89a9-fa0519f82ad2", "sighting_of_ref": "indicator--dfddb7a7-8566-4f2c-9d26-fcada07d3db3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0dee7ad-1992-46c7-adf8-354d768a6b08", "sighting_of_ref": "indicator--dfddb7a7-8566-4f2c-9d26-fcada07d3db3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f7db084-e181-4647-b30e-f0a404f0fca0", "sighting_of_ref": "indicator--6e2428fc-9174-411b-992e-71413be8a027", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c491af7-ff5d-4610-ab3b-4779c2affe9a", "sighting_of_ref": "indicator--6e2428fc-9174-411b-992e-71413be8a027", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f99d0d-5683-4a84-8a40-6e43a023ab74", "sighting_of_ref": "indicator--6e2428fc-9174-411b-992e-71413be8a027", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f9f2ed-d661-46b4-861d-120654afca4e", "sighting_of_ref": "indicator--298eec55-7c0b-4ce8-85e0-7561bb81863d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae491e0-83a5-447c-8486-d2ca529d6982", "sighting_of_ref": "indicator--298eec55-7c0b-4ce8-85e0-7561bb81863d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e91ea8-5f17-4283-afca-eb4bceeec1c2", "sighting_of_ref": "indicator--e222422a-40ed-4959-a06f-4b427e204c55", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f4edf5c-1207-4252-8361-2cb4d2f97e6d", "sighting_of_ref": "indicator--e222422a-40ed-4959-a06f-4b427e204c55", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a460cace-1de2-4d0a-a09f-095d88070459", "sighting_of_ref": "indicator--e222422a-40ed-4959-a06f-4b427e204c55", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a72d795e-fc06-4853-af14-76aab70dcd76", "sighting_of_ref": "indicator--25da74a6-ae10-4220-ba4d-c961a28e836f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d85c5353-984d-41bf-bbda-09f43f4da92d", "sighting_of_ref": "indicator--25da74a6-ae10-4220-ba4d-c961a28e836f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f512fa-96e7-4652-a8fc-83db51bb28b8", "sighting_of_ref": "indicator--25da74a6-ae10-4220-ba4d-c961a28e836f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c36ad11-7450-426c-adf2-479854623cd5", "sighting_of_ref": "indicator--7dd3a138-c65e-4ff5-98b7-1efc83ebb7a8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b784ddb0-cc5f-4fdc-95b8-549750bb0c53", "sighting_of_ref": "indicator--ae7e4e12-9e24-4e8c-b416-a73a98f7d6f7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2d8925-99bc-4ee2-8aad-c02a2edc3ada", "sighting_of_ref": "indicator--ae7e4e12-9e24-4e8c-b416-a73a98f7d6f7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb4046a3-f68d-4d8f-944e-f17873eb078e", "sighting_of_ref": "indicator--ae7e4e12-9e24-4e8c-b416-a73a98f7d6f7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ee4160-534b-49c8-8459-e97c96344c22", "sighting_of_ref": "indicator--29b1ed74-e6e1-4692-8ce2-cb9c7afcc222", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--692cf1f9-fc8e-41a7-8d42-e3cc7f90420a", "sighting_of_ref": "indicator--29b1ed74-e6e1-4692-8ce2-cb9c7afcc222", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef536e7-b350-4a41-baf0-dcf260f2e8a8", "sighting_of_ref": "indicator--29b1ed74-e6e1-4692-8ce2-cb9c7afcc222", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a855a2de-4b65-4246-a970-5f71f277a328", "sighting_of_ref": "indicator--928b3ec7-3228-4be5-9474-474b7c955988", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7063ad-09f3-43e6-895d-250161312758", "sighting_of_ref": "indicator--5c263a03-c213-4277-9af0-0c84a5f7b81e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d782887d-66ed-433f-837d-4efdc0278d78", "sighting_of_ref": "indicator--5fdd42f0-17fc-4a29-b760-84b3e97b798b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3dca2a5-7d78-40a2-9240-4f3eee48c954", "sighting_of_ref": "indicator--5fdd42f0-17fc-4a29-b760-84b3e97b798b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--644fa669-c47a-4eeb-b8a9-0ba454e2efc9", "sighting_of_ref": "indicator--63bad692-49d8-4f18-8f4d-6ca55b6f11cd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98447330-f20e-4d0b-bb32-17633f09b62c", "sighting_of_ref": "indicator--63bad692-49d8-4f18-8f4d-6ca55b6f11cd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a545f8-7181-427e-8bdf-80ca77ccd093", "sighting_of_ref": "indicator--c5f1e613-6bff-4688-8d7c-3a766b1d6f49", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--345d0931-603c-4199-895d-09098bc25bc2", "sighting_of_ref": "indicator--f51e99ed-e656-48f5-b8d4-019fa034cf19", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b9621f6-413b-4142-bf08-6ea06c92434e", "sighting_of_ref": "indicator--f51e99ed-e656-48f5-b8d4-019fa034cf19", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82436f8-e78c-462f-b56c-d8189cd1e604", "sighting_of_ref": "indicator--82b63e2f-0fb4-4497-9f77-537d4803db9a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a0cf5d9-3e84-4eb8-901f-ab245a636352", "sighting_of_ref": "indicator--d191ea23-9dbf-4ae2-b61e-50249680ea7f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8168eab7-b652-4a59-9f5d-05a3a15031ec", "sighting_of_ref": "indicator--d191ea23-9dbf-4ae2-b61e-50249680ea7f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b870bbd-716c-45eb-b56e-79829debbfc0", "sighting_of_ref": "indicator--d191ea23-9dbf-4ae2-b61e-50249680ea7f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d5d690-4452-44be-b4a7-40046cbd6ab7", "sighting_of_ref": "indicator--ffb08a30-6a8d-45bc-81ef-e88d1f773f02", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e4d574c-7602-4c77-85f7-4865682f65c7", "sighting_of_ref": "indicator--ffb08a30-6a8d-45bc-81ef-e88d1f773f02", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4658f4c6-fb15-4f23-8eab-333fd0475119", "sighting_of_ref": "indicator--c1276bf9-c8a7-4b17-82b5-92490f9111d2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9eb985-09e5-4a75-8caa-e969f37d418a", "sighting_of_ref": "indicator--c1276bf9-c8a7-4b17-82b5-92490f9111d2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc7d60c-be7f-4f63-a594-8fb909ec6762", "sighting_of_ref": "indicator--90debe77-f9a4-4c46-9382-cc3d294a78c7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82aa946c-4469-4050-9bea-9d240a3f84ce", "sighting_of_ref": "indicator--fc598021-32b8-4af2-b413-a5819f0ec22a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e758fe4-5536-4a1b-a7e9-04f6c4b972a3", "sighting_of_ref": "indicator--fc598021-32b8-4af2-b413-a5819f0ec22a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d849e2ad-047a-4b6b-a83c-47553e72eaa3", "sighting_of_ref": "indicator--dd527244-f411-4d9c-b9cb-0e157382aa52", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff183deb-abb1-437d-b423-d8610b13605d", "sighting_of_ref": "indicator--a4d6d229-c9f0-4a1e-a966-545ede018564", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee3ccc9e-1598-474e-80d9-90020d23ac7f", "sighting_of_ref": "indicator--08dcdf78-5440-418e-b849-8323a4fe80b4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1d98dd-2670-4218-8674-e2733d8d4aa8", "sighting_of_ref": "indicator--72d16f37-12f1-4e4b-9ce0-9769f47d16e0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b95c21e-9529-4c8a-8960-a0669c72d67e", "sighting_of_ref": "indicator--72d16f37-12f1-4e4b-9ce0-9769f47d16e0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb24262a-5b52-4e6d-9a58-0db50a200b15", "sighting_of_ref": "indicator--dd18f286-c7fd-4dde-a913-99d87fa7062d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23332511-d783-4331-be6b-3ad676652508", "sighting_of_ref": "indicator--17e3e953-7a26-4e08-9630-0d567fb68849", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d545e329-e86e-4b53-81a5-d1f5f5a85713", "sighting_of_ref": "indicator--78c8d938-071b-4063-9e0d-a28cfd34c881", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f7b2a7-a4be-49ff-9e8e-03d457a0844e", "sighting_of_ref": "indicator--7cb464d5-ca0b-4e5c-a36e-094b05a9fe56", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf6b8cf1-8f66-4a31-b260-d481c5852ead", "sighting_of_ref": "indicator--8972c28b-fdfd-4e77-a5f5-d4c055fe4c4f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978d5220-d0b5-411b-8ef4-9ffc5649dd8a", "sighting_of_ref": "indicator--60b9ff30-2bc6-4ca2-a4d5-8eae08e17ee7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfdd1b69-6e88-45a0-8713-e2de024b6ff4", "sighting_of_ref": "indicator--60b9ff30-2bc6-4ca2-a4d5-8eae08e17ee7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc3f520-b170-40b1-a6fc-0529c1392b83", "sighting_of_ref": "indicator--60b9ff30-2bc6-4ca2-a4d5-8eae08e17ee7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0925a1-4aad-45a4-b2d4-00fb5c7d753f", "sighting_of_ref": "indicator--4368b2bc-ee44-4126-ae27-1e1e4fbff099", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7031370-e21e-4935-98dd-ca8d2cf6d66c", "sighting_of_ref": "indicator--4368b2bc-ee44-4126-ae27-1e1e4fbff099", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e3902c-58dc-4087-90d3-46a369d81601", "sighting_of_ref": "indicator--b9fb669c-1faf-4fe0-a239-1865c18ec0e3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e62d56-76f7-4639-832f-c20ed8a39281", "sighting_of_ref": "indicator--a258ed97-8bdd-447f-b81e-fb6c780119e8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5364e3b7-19a2-4f2c-9e45-4d01bfbc6465", "sighting_of_ref": "indicator--a5e92cdd-6dd5-4098-b9e6-9b829cef0b72", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b45e45-d186-4e53-b0ba-6cf88f3f0ca1", "sighting_of_ref": "indicator--a5e92cdd-6dd5-4098-b9e6-9b829cef0b72", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8629762-676d-4309-b832-eda8ad2b43bb", "sighting_of_ref": "indicator--62e1ea55-f595-46bc-a510-f6402bdbd240", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f67f7bc-e6ea-4b33-99cb-15bf4aea28e7", "sighting_of_ref": "indicator--62e1ea55-f595-46bc-a510-f6402bdbd240", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437cac51-14b1-4f28-9427-f490ffd64a11", "sighting_of_ref": "indicator--9071e4bc-11f4-407a-a264-79bf453793e0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ac6451-e3ec-473f-843a-ec3dcdd36584", "sighting_of_ref": "indicator--9071e4bc-11f4-407a-a264-79bf453793e0", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd2b833-816f-4d08-b2af-b8267ae64a34", "sighting_of_ref": "indicator--297d2bbc-3f6b-4e22-8e60-21e3727021a3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09348097-3eb4-49f4-b77d-f49e83661ada", "sighting_of_ref": "indicator--297d2bbc-3f6b-4e22-8e60-21e3727021a3", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15166f1f-7177-42d3-b103-c50465298672", "sighting_of_ref": "indicator--e96e45a5-2742-4255-8390-4ad523cda38e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31df5fa-fcfb-49f1-962e-cb8a87e94424", "sighting_of_ref": "indicator--e96e45a5-2742-4255-8390-4ad523cda38e", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea68cd68-a431-41be-bc25-3b3b71d52ea6", "sighting_of_ref": "indicator--061e2886-2362-49c3-ad7d-b12570c96c86", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d98d38-624a-4fd0-be0f-ecb6ec7110af", "sighting_of_ref": "indicator--061e2886-2362-49c3-ad7d-b12570c96c86", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a0c67a-61d2-40e4-8133-eec740d0fc42", "sighting_of_ref": "indicator--c17dd27f-0e7c-4a0b-bfcc-86a36a1f54f7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3bb69e6-af42-415a-86aa-f9183b80fa10", "sighting_of_ref": "indicator--c17dd27f-0e7c-4a0b-bfcc-86a36a1f54f7", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82ac028-24f4-4425-aa84-85af44191031", "sighting_of_ref": "indicator--6afd05c2-f275-484b-aa30-1bf864b92bef", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb73063-8cf5-489d-8a1f-3d67a225251b", "sighting_of_ref": "indicator--6afd05c2-f275-484b-aa30-1bf864b92bef", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c23be17c-becc-45a5-b23c-f17ca442b299", "sighting_of_ref": "indicator--e9d7e5a7-2bb7-4273-942e-923d1527e444", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a279825-bf8b-4545-a0e7-44adb29b38d9", "sighting_of_ref": "indicator--e9d7e5a7-2bb7-4273-942e-923d1527e444", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b91927-b283-4859-8024-fece5b67a3f2", "sighting_of_ref": "indicator--ae603d0c-8817-4565-acc3-98e0c8ab7fb3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1c2cba-f9c9-47d3-8736-02731560f9ef", "sighting_of_ref": "indicator--ae603d0c-8817-4565-acc3-98e0c8ab7fb3", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a90be69-88e6-4449-82db-7261c19caed4", "sighting_of_ref": "indicator--62014071-0751-4ce3-9b32-5298e75ef958", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e84cb80-0f8d-4389-8ec7-8a8adfbba11e", "sighting_of_ref": "indicator--62014071-0751-4ce3-9b32-5298e75ef958", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50de23a-409f-466a-8cad-91d961513c75", "sighting_of_ref": "indicator--6a929b47-a038-461f-a063-a0444c014b00", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd07c4b-c882-42be-beae-da4969d0ba1b", "sighting_of_ref": "indicator--664023cd-f875-488f-a60a-586ed7604761", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--372acedc-876b-4f6c-b6c7-201cd765362a", "sighting_of_ref": "indicator--664023cd-f875-488f-a60a-586ed7604761", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6883a74-2727-4b36-91c8-21596159bf14", "sighting_of_ref": "indicator--8943a410-02b7-4e58-8738-d723af14a9e6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c7ddbe8-a197-4132-8509-70cebbc5d542", "sighting_of_ref": "indicator--8943a410-02b7-4e58-8738-d723af14a9e6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a44dff-c503-40f3-b7e1-dc505f77cd23", "sighting_of_ref": "indicator--8943a410-02b7-4e58-8738-d723af14a9e6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd39c941-6e6c-4012-bd79-23c72528eb1d", "sighting_of_ref": "indicator--87314cf0-d096-4e04-9da2-e5025b7c4361", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead4ca72-f108-4435-90a8-81eab20ceef8", "sighting_of_ref": "indicator--149a1d38-b617-4332-bb64-4790cdcc1638", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be265c14-9010-4dd9-a223-6d7bbac0de84", "sighting_of_ref": "indicator--790179ae-6fae-4148-a8c0-97cdf11f0f18", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fac9226-9450-4d54-ac08-d511b4e707f7", "sighting_of_ref": "indicator--3cffb865-ee8f-4e7a-85d8-e1a707f3455c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad5e7a9c-9715-4098-a617-5662974c71e2", "sighting_of_ref": "indicator--9ec2c771-f356-4377-83bd-9168a7f7010a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--046f9b31-0c2d-4a9c-accd-bbe23361a284", "sighting_of_ref": "indicator--9ec2c771-f356-4377-83bd-9168a7f7010a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a68d97e-a519-4f0e-a14f-25876f2cc938", "sighting_of_ref": "indicator--602602c7-5691-4152-986a-73ec36fa63b3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6362b12-8161-42e4-9186-6f383be6cb36", "sighting_of_ref": "indicator--602602c7-5691-4152-986a-73ec36fa63b3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac924b03-7221-4fd8-adca-eaedd2e39945", "sighting_of_ref": "indicator--602602c7-5691-4152-986a-73ec36fa63b3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd6b845-77af-4d95-a458-f6670fda569b", "sighting_of_ref": "indicator--2124b546-d00b-4cec-8b6c-8634d53debf2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b494a8b9-b4a4-47cd-ba8c-3228241c22ca", "sighting_of_ref": "indicator--2124b546-d00b-4cec-8b6c-8634d53debf2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d78a41ba-8b74-447b-b896-67907b8683a8", "sighting_of_ref": "indicator--22ffe772-7fe6-4828-9363-af501b3cbd84", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f71fbe-e612-41e2-9aec-32fcfb251606", "sighting_of_ref": "indicator--da94726e-5cd9-42ed-a458-566180f26536", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e865e03e-7bbe-48a8-90aa-107e2d718c9c", "sighting_of_ref": "indicator--6ff18179-379f-4698-9c4a-8c10750b5e49", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da314a8-cbe0-439e-8197-f14a2dbddc31", "sighting_of_ref": "indicator--0eedb086-f92d-48eb-a5ba-3e847d88f215", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a006e49-39cb-4f54-8511-e2fc3836eaf3", "sighting_of_ref": "indicator--0eedb086-f92d-48eb-a5ba-3e847d88f215", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c842ef1-7261-4509-a15f-7c3e81293e55", "sighting_of_ref": "indicator--0eedb086-f92d-48eb-a5ba-3e847d88f215", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ceca89-6a53-4426-8fc6-274cfeaf8d07", "sighting_of_ref": "indicator--c24dceff-8c24-47d5-9537-bedad2eebe12", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18af6858-dd47-40a9-b0e4-c8173bf4fe67", "sighting_of_ref": "indicator--c24dceff-8c24-47d5-9537-bedad2eebe12", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3547ce7-9edb-4eb5-922f-f56c5a0fe7a4", "sighting_of_ref": "indicator--c24dceff-8c24-47d5-9537-bedad2eebe12", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a6ffe8-d0cc-4a7b-8a42-389bf1297df3", "sighting_of_ref": "indicator--e17ae613-699b-41ad-87f7-2e7a362b6a2d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59e2549-dffc-4144-b182-a9c9944dd762", "sighting_of_ref": "indicator--7edee255-2203-46e2-875d-84a1eb677475", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742a86b6-c0f4-450c-9524-6c22688fb2f3", "sighting_of_ref": "indicator--deeaab7d-eef2-4e7e-87cf-d5c5bff67ec6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--934e311c-c4f8-4b4d-be85-14160c182639", "sighting_of_ref": "indicator--8d80b782-a80f-415a-8faa-5f3009d0ba49", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88f782b-3a58-44cd-ae66-f4b2511128e5", "sighting_of_ref": "indicator--efee0d56-00f8-4010-837b-13c12b41ab0d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91a63e8-121a-4ccc-aaff-46652489f5bb", "sighting_of_ref": "indicator--0426868b-79a2-4ec0-bebf-21f811de3338", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a745123-9839-4806-a08a-fa47d011fa94", "sighting_of_ref": "indicator--808a8480-1553-401f-8118-9460c79b027a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdaaf711-9188-460b-b0b7-6ba5e4e66ca0", "sighting_of_ref": "indicator--ef5af69c-3f21-44a6-adec-f95691713a5c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebed02a3-0f1b-401e-9b59-bcc53282867e", "sighting_of_ref": "indicator--d8da2b82-5bfe-49c6-94dd-201e3f0d59eb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c89cce7f-093d-4b0f-aa50-8b8d94e85a58", "sighting_of_ref": "indicator--fa6cce0f-fc0b-46f4-b1da-2b51f06309d2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb70584-9495-448e-938d-7652ef48eb7c", "sighting_of_ref": "indicator--b4ffae96-0fb7-4250-9956-d981905e9de2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01787cff-2fe0-4756-8b54-76e7d0a39fba", "sighting_of_ref": "indicator--b4ffae96-0fb7-4250-9956-d981905e9de2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac3b3dd-35cc-452c-ad51-0bc6f0caede0", "sighting_of_ref": "indicator--f7f43052-3daf-4302-a0a7-2433ea28907f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0facc08f-87d1-4851-9557-58a04662ce26", "sighting_of_ref": "indicator--f7f43052-3daf-4302-a0a7-2433ea28907f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5373bb58-e060-42c8-8dd7-e36477b3330b", "sighting_of_ref": "indicator--4f3da311-df50-43b0-bd41-f9eb3dff6d55", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21adbf0a-4e9f-4691-95d5-4cec5edad38d", "sighting_of_ref": "indicator--fe8de0a4-fc35-4089-9380-1dbb3e05416f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f0d5f58-cfa8-4fe7-9b85-fcc15a532c56", "sighting_of_ref": "indicator--fe8de0a4-fc35-4089-9380-1dbb3e05416f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94740b6f-9e15-4919-9039-ce4d994830b2", "sighting_of_ref": "indicator--15ab06a6-d451-4095-801c-11e485f5be18", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f81ffc-145e-44fd-8498-98fa2a419873", "sighting_of_ref": "indicator--60126f11-65e3-40a1-ac20-10969d0be85a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f8997a1-cf13-44e3-9608-8b7a9d0d1e95", "sighting_of_ref": "indicator--60126f11-65e3-40a1-ac20-10969d0be85a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbaf4efe-8851-4746-b306-4ba2b060d4e5", "sighting_of_ref": "indicator--60126f11-65e3-40a1-ac20-10969d0be85a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02b952e-dc58-4546-85bf-589b7fcbce41", "sighting_of_ref": "indicator--0ca6301a-d00f-4782-808b-031afa66d9c1", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f00437a-c3b4-4856-8aea-d95aa594ca7c", "sighting_of_ref": "indicator--d2074130-3637-46b4-b36f-d41d1f9c93fd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7adc3bb4-afd5-4bcb-859d-ac57426519e2", "sighting_of_ref": "indicator--d2074130-3637-46b4-b36f-d41d1f9c93fd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2e1b0f-621a-46ca-82f3-ddceb3ffce1c", "sighting_of_ref": "indicator--b02f834b-d02f-4950-bfaf-4b59b36ccb59", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0327e18a-d2a1-4010-a048-1c42caf14f3f", "sighting_of_ref": "indicator--b02f834b-d02f-4950-bfaf-4b59b36ccb59", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3df680f-2406-423f-84c5-4091d8fc9a1a", "sighting_of_ref": "indicator--b02f834b-d02f-4950-bfaf-4b59b36ccb59", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d05f29-0e0a-45de-afdc-5bfadd643e12", "sighting_of_ref": "indicator--56c12e64-25eb-4ee4-844e-f29217b36eff", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587e9d17-14f5-475f-a1b4-cc4994104b03", "sighting_of_ref": "indicator--56c12e64-25eb-4ee4-844e-f29217b36eff", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--692ab629-9c54-46ee-a1ba-83bb22e88f9b", "sighting_of_ref": "indicator--56c12e64-25eb-4ee4-844e-f29217b36eff", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c87e998-8ae7-4e37-8965-bbfba4c7f5a3", "sighting_of_ref": "indicator--bcaa7072-a254-4331-8f84-7239d201ffab", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bfdbc2e-e05c-476e-b81c-d6e608df0345", "sighting_of_ref": "indicator--bcaa7072-a254-4331-8f84-7239d201ffab", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904d3cef-cd70-4b30-963a-c7be7b4845fd", "sighting_of_ref": "indicator--c6d9a562-a9c5-4878-8d47-f125c6f7d343", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84439bb-dd72-4cc1-ade7-c7206fb168fd", "sighting_of_ref": "indicator--c6d9a562-a9c5-4878-8d47-f125c6f7d343", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5af734-cf12-441c-8ab7-e92aa3cf3a0f", "sighting_of_ref": "indicator--c6d9a562-a9c5-4878-8d47-f125c6f7d343", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df9acd5-2814-46b7-868e-8727b455487f", "sighting_of_ref": "indicator--1a37f797-5c0b-44c8-bac9-0f4275819885", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e0b85e-0031-435e-8288-663cd2d081d7", "sighting_of_ref": "indicator--1a37f797-5c0b-44c8-bac9-0f4275819885", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3bcb53a-092e-4f3a-a74f-d87e4f9910e4", "sighting_of_ref": "indicator--1a37f797-5c0b-44c8-bac9-0f4275819885", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68610787-f3e2-4ce7-9cb7-993d0cab4246", "sighting_of_ref": "indicator--4fdae1c6-a478-4c79-b441-fcc3a879a0cc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99755662-9463-4ed8-841e-daf1a86bed10", "sighting_of_ref": "indicator--4fdae1c6-a478-4c79-b441-fcc3a879a0cc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b50f66-b5fd-4f8f-a603-1564a7a81e05", "sighting_of_ref": "indicator--4fdae1c6-a478-4c79-b441-fcc3a879a0cc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f85f28-9858-4b82-a1eb-d06fbe491f27", "sighting_of_ref": "indicator--5f0f96a4-144d-40c2-a95c-86a705fa2e2f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0440a460-1ea3-4d18-b241-693238156303", "sighting_of_ref": "indicator--5f0f96a4-144d-40c2-a95c-86a705fa2e2f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6403d3f4-ed57-45bf-9050-d77a2fc62674", "sighting_of_ref": "indicator--5f0f96a4-144d-40c2-a95c-86a705fa2e2f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089d65f1-55f8-400a-96b5-b3a49d8d4d0f", "sighting_of_ref": "indicator--2f657d5b-25f7-435e-89fe-edf25b4b1aa2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9993d671-7388-4928-b85a-0ec64c3a03bf", "sighting_of_ref": "indicator--2f657d5b-25f7-435e-89fe-edf25b4b1aa2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0f79c5-f4d6-423f-b8bf-6672653db915", "sighting_of_ref": "indicator--d20cd623-8b98-4a7c-a960-f562962decab", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89660d93-dfb7-4070-97ee-783f986b03f4", "sighting_of_ref": "indicator--d20cd623-8b98-4a7c-a960-f562962decab", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3572914a-8b4d-4f36-8cea-3a36215f0e7e", "sighting_of_ref": "indicator--d20cd623-8b98-4a7c-a960-f562962decab", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--209ed030-5b97-4c21-bc7f-5854b0be9fcd", "sighting_of_ref": "indicator--e711cf14-ef97-4c85-85bb-848c621ef5a7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e392e106-ff33-481a-99b5-34b09699f238", "sighting_of_ref": "indicator--e711cf14-ef97-4c85-85bb-848c621ef5a7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af2e7842-fc67-467f-8754-4c8522228302", "sighting_of_ref": "indicator--e711cf14-ef97-4c85-85bb-848c621ef5a7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8750e9-3bc5-4c1b-8712-19c4a34df08d", "sighting_of_ref": "indicator--28d98cc7-d4af-49c1-a8f3-7bcfe6eef653", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f014c34-fada-483a-976f-7b25114d6a78", "sighting_of_ref": "indicator--28d98cc7-d4af-49c1-a8f3-7bcfe6eef653", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9949b8f-dbab-437b-9b2d-fbd05f5df227", "sighting_of_ref": "indicator--28d98cc7-d4af-49c1-a8f3-7bcfe6eef653", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d08de63-61f9-46c5-bbb2-6728bbe77cdb", "sighting_of_ref": "indicator--ebdf3cec-2be3-4e2e-92d8-5ff3c1a4bf40", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90679ae8-083b-48e2-a5a2-16bae6c9c49b", "sighting_of_ref": "indicator--ebdf3cec-2be3-4e2e-92d8-5ff3c1a4bf40", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8bd837-adef-4e08-ba52-e29e6f1d4b7f", "sighting_of_ref": "indicator--ebdf3cec-2be3-4e2e-92d8-5ff3c1a4bf40", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3924ddda-13bc-4230-a384-e7e7e61e8186", "sighting_of_ref": "indicator--4538fafc-a693-4abe-956c-66b106ee3b87", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1407049-839d-49b4-a3db-3e8a2c97709a", "sighting_of_ref": "indicator--4538fafc-a693-4abe-956c-66b106ee3b87", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089dcd2b-eb83-4bd8-8932-065427214b63", "sighting_of_ref": "indicator--4538fafc-a693-4abe-956c-66b106ee3b87", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f5aa7e-ca76-4235-8976-84e0b0c43435", "sighting_of_ref": "indicator--5ccd3c76-218e-476d-a64c-50fa8466075b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8652c10d-9e5d-4089-b1ec-85f953372f89", "sighting_of_ref": "indicator--5ccd3c76-218e-476d-a64c-50fa8466075b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914bf266-e9c4-421d-906c-c6db777b353d", "sighting_of_ref": "indicator--5ccd3c76-218e-476d-a64c-50fa8466075b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b9eff9-8ec0-42ab-b7b9-b721af5c196a", "sighting_of_ref": "indicator--6d447d17-8724-4d5c-b435-7d8b8b43e88c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--518119c1-c4ea-43af-a3f2-962c5942402a", "sighting_of_ref": "indicator--6d447d17-8724-4d5c-b435-7d8b8b43e88c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602f6443-c91d-4915-92a8-c1d87aef287c", "sighting_of_ref": "indicator--6d447d17-8724-4d5c-b435-7d8b8b43e88c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb70afb3-337b-4fc6-9d2c-57b63bd359fb", "sighting_of_ref": "indicator--c957e26a-da9f-4f52-a159-5e0c4199287b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc4bded-be0c-4cef-a45a-2547d1430b04", "sighting_of_ref": "indicator--c957e26a-da9f-4f52-a159-5e0c4199287b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0583994-bc00-4adb-872c-43a00723e0cb", "sighting_of_ref": "indicator--c957e26a-da9f-4f52-a159-5e0c4199287b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd533cea-ae9e-4ea7-b3a2-ecf00c112f01", "sighting_of_ref": "indicator--2eb7bc5f-3d9e-49e2-b97d-af583e5d547c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f78a5b4-1f2c-4db1-bcae-1a94c2a4e2e8", "sighting_of_ref": "indicator--2eb7bc5f-3d9e-49e2-b97d-af583e5d547c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a0b612-4680-4bc3-be44-292e12f87b16", "sighting_of_ref": "indicator--2eb7bc5f-3d9e-49e2-b97d-af583e5d547c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4a26b1-bd6f-44af-b0f5-934634d2f11f", "sighting_of_ref": "indicator--e006cca7-3028-48db-bfe1-659a1001a33c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66da8a45-cbe4-4062-b5c1-5723130e5a0e", "sighting_of_ref": "indicator--e006cca7-3028-48db-bfe1-659a1001a33c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a171c2c-bddb-4d8a-a0f3-0d3b13bc36f5", "sighting_of_ref": "indicator--e006cca7-3028-48db-bfe1-659a1001a33c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f873d6f-7e16-428e-9638-139d63ea26af", "sighting_of_ref": "indicator--31599e28-f73c-4fca-89f8-23a11dadca4b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2074e7ff-74f3-4869-9999-13a4624a98e3", "sighting_of_ref": "indicator--31599e28-f73c-4fca-89f8-23a11dadca4b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c15f1731-eff5-45b4-a834-bcbf28eda531", "sighting_of_ref": "indicator--31599e28-f73c-4fca-89f8-23a11dadca4b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8388cca-d3b3-4b2e-a9a1-c2beb3267ba0", "sighting_of_ref": "indicator--46efb294-63cf-45cb-a496-5220217329f9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f900b51-fd81-45ca-9f19-acc3a34c948d", "sighting_of_ref": "indicator--46efb294-63cf-45cb-a496-5220217329f9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ac05e7-b66a-43c4-99ce-6ca0735e1c82", "sighting_of_ref": "indicator--46efb294-63cf-45cb-a496-5220217329f9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1603db-3472-4b90-ab2e-8107891e77ae", "sighting_of_ref": "indicator--1ea03043-3d4c-480f-8c1f-3192c0c02e30", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f06e9be7-de33-4449-bdc6-18391827bf29", "sighting_of_ref": "indicator--1ea03043-3d4c-480f-8c1f-3192c0c02e30", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27fa61b3-5bcc-4d32-b48c-d27c719519cf", "sighting_of_ref": "indicator--1ea03043-3d4c-480f-8c1f-3192c0c02e30", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b15699-f671-4ead-ab39-53d4456ce9e3", "sighting_of_ref": "indicator--c2c5087a-366f-4b43-8713-251a9609ec70", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b214ac8c-14f4-4903-847d-0a37b9f71bb9", "sighting_of_ref": "indicator--c2c5087a-366f-4b43-8713-251a9609ec70", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085afb90-2f75-4ca2-99db-1bba808f5ed9", "sighting_of_ref": "indicator--c2c5087a-366f-4b43-8713-251a9609ec70", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0dd4568-14fe-48e6-bc62-fdb17fa26aad", "sighting_of_ref": "indicator--7a4d04dd-e238-46b5-9d07-a3627ec4b961", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8efb98f-da65-4529-9cc7-5dc71aa683dd", "sighting_of_ref": "indicator--7a4d04dd-e238-46b5-9d07-a3627ec4b961", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6370f1e3-cdf1-4f99-83e4-a9217589f2b1", "sighting_of_ref": "indicator--7a4d04dd-e238-46b5-9d07-a3627ec4b961", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d54c72b-a976-40e9-9ad2-5a62272d17cc", "sighting_of_ref": "indicator--292e8467-595d-42c6-96e3-e4613cac537b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6907fd-d951-4692-8767-b220204bd419", "sighting_of_ref": "indicator--292e8467-595d-42c6-96e3-e4613cac537b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50525f37-5825-4e99-94d8-a611c6418e2b", "sighting_of_ref": "indicator--292e8467-595d-42c6-96e3-e4613cac537b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3630d1-43b9-4922-a36f-7b1bfb9ea7d1", "sighting_of_ref": "indicator--f93b8578-4256-46f3-b43c-e281234163e8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5660a0-47b9-4cf8-9ca2-31000c9fa983", "sighting_of_ref": "indicator--c3caf229-bb18-4dee-b48c-2e2678c911b0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d597cd0-5f60-4208-b0a7-73dcc259f00f", "sighting_of_ref": "indicator--ddfa547e-a16a-4535-a66c-e3ced8ee5f03", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b22cceb1-cd0b-41d9-908c-2ce7b1951cba", "sighting_of_ref": "indicator--ddfa547e-a16a-4535-a66c-e3ced8ee5f03", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db9f91ed-61b0-4154-bad6-738984c57470", "sighting_of_ref": "indicator--ddfa547e-a16a-4535-a66c-e3ced8ee5f03", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc587ef1-b9c5-4858-8a79-277a07c8b309", "sighting_of_ref": "indicator--0be8e78c-1d47-4786-92b2-c2882bea19f5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a74da71f-5ea9-4ea7-a1f4-6d7454980c79", "sighting_of_ref": "indicator--0be8e78c-1d47-4786-92b2-c2882bea19f5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d80476-df30-432d-bd75-93cba2030d1a", "sighting_of_ref": "indicator--0be8e78c-1d47-4786-92b2-c2882bea19f5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b850f6c-a36d-4535-9f40-00c7ad025c5b", "sighting_of_ref": "indicator--5c1265cf-f45b-4f4a-bafe-f865f49aef61", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d9b583-4d59-4b8a-bd1a-6590c011f02c", "sighting_of_ref": "indicator--1c44bc58-15a8-4877-a593-8191a5c2146a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7095fefc-7680-4e1e-9b2e-2ba8da3b6060", "sighting_of_ref": "indicator--1c44bc58-15a8-4877-a593-8191a5c2146a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2b68a2-3b8d-462a-8051-7ecec80eec7d", "sighting_of_ref": "indicator--1c44bc58-15a8-4877-a593-8191a5c2146a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5215168a-db67-4b45-ae72-4e2a7010eaba", "sighting_of_ref": "indicator--79ccd6b4-5bbe-4c7b-b252-5f65e356cbf0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e182bfa8-c5f4-46ed-8257-98093499b4e0", "sighting_of_ref": "indicator--47188129-c981-4b12-89be-018f9df4e5f7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7253037-8662-4120-8ecb-9a657500fa77", "sighting_of_ref": "indicator--92af1833-b829-43f0-8ba6-cacb2b9d742d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--accc6bf5-9ade-434c-bad3-c100ef12f962", "sighting_of_ref": "indicator--aff799c3-95fe-4c4d-a711-16609f041f81", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03928301-5a53-4aab-9669-ce7f8f99fd70", "sighting_of_ref": "indicator--d6e4dbfe-7338-4807-82e0-380ebaa33358", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3ed1a5-705c-40d5-b115-cfceaa79f1c2", "sighting_of_ref": "indicator--a0f61610-d0fb-4e78-b922-0266d4c3f7a2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa3ed8b-cbaa-43b3-8c5d-431a6d88f573", "sighting_of_ref": "indicator--a0f61610-d0fb-4e78-b922-0266d4c3f7a2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe770f5-ddab-45d5-ac7b-2acb5d424338", "sighting_of_ref": "indicator--c40abc86-1abe-43e7-811b-92abab89b553", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837d7976-b0f8-450c-bbca-701ef431ed38", "sighting_of_ref": "indicator--c40abc86-1abe-43e7-811b-92abab89b553", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9fb65d-d714-4285-9f68-db1f692a19d3", "sighting_of_ref": "indicator--754d993a-bd9d-4c69-b56f-54387e2e23a0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e0ad54-29d9-463d-9369-82c1782c48c0", "sighting_of_ref": "indicator--754d993a-bd9d-4c69-b56f-54387e2e23a0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90acf4b-2630-4dcc-b154-b6fc35a67e07", "sighting_of_ref": "indicator--e82981a7-8c37-4991-89bc-fba07e8c8651", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d75186c-21d5-4a87-8555-f1d64852ea33", "sighting_of_ref": "indicator--e82981a7-8c37-4991-89bc-fba07e8c8651", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf05e97b-3a34-490f-90ee-ccb21eb28eed", "sighting_of_ref": "indicator--6794b418-5096-4dba-83e6-0f1164fb5b2c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d507bf-382c-4572-a097-1fb6c1d03cde", "sighting_of_ref": "indicator--e480d157-29e0-466c-b381-7c8f7b26e015", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d16208d0-ecbe-4e90-b705-339a5a6756c6", "sighting_of_ref": "indicator--62fa39e6-916b-4853-8e19-8aaf40da3266", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6d81b6-a844-43ae-a26f-5eac5f1c56de", "sighting_of_ref": "indicator--62fa39e6-916b-4853-8e19-8aaf40da3266", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f7ccbe-4419-4847-8e19-c2b48feb11a7", "sighting_of_ref": "indicator--dd6fa52c-ccfc-40ee-bbea-01f92870f225", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f8f972-bde9-41e6-8fae-060e740d6160", "sighting_of_ref": "indicator--dd6fa52c-ccfc-40ee-bbea-01f92870f225", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1be6cb0-b1d4-405d-9307-15dfb5339328", "sighting_of_ref": "indicator--5c0b8bf2-6d4c-4eef-ac86-e28dd7bd88a2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da16298b-30a2-41aa-a96c-6d57cc150375", "sighting_of_ref": "indicator--5c0b8bf2-6d4c-4eef-ac86-e28dd7bd88a2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4b8da2-63e8-41d6-8f06-97720b1fce65", "sighting_of_ref": "indicator--5c0b8bf2-6d4c-4eef-ac86-e28dd7bd88a2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af70264-ef7c-4b26-b0f0-24eabed5249e", "sighting_of_ref": "indicator--4c3c91f0-62b2-47fd-bb47-610cfe6c42ee", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90e7c0d-88ae-43f7-aa81-d906bb8ec398", "sighting_of_ref": "indicator--16928320-d1c6-488c-adea-efdb22ba0ab5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5ccecf-c9eb-4bff-9dc8-524b9c685aba", "sighting_of_ref": "indicator--16928320-d1c6-488c-adea-efdb22ba0ab5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7cd51d6-bb8c-4c70-b8d2-e2fb356358df", "sighting_of_ref": "indicator--16928320-d1c6-488c-adea-efdb22ba0ab5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6f9c10-5e2b-407e-a295-f7b2ae7adc0a", "sighting_of_ref": "indicator--b7f6a982-3f8c-4c48-bde4-802b579a8180", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a8ba16-0033-40da-99e4-b73856a4ca00", "sighting_of_ref": "indicator--b7f6a982-3f8c-4c48-bde4-802b579a8180", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c6edaeb-10cd-44d2-bc2f-b44c496be0cf", "sighting_of_ref": "indicator--3b64ea5a-fc57-4ef8-b02a-04a342459ed4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--540a8af8-aec4-42cf-aca8-7aeda12dddab", "sighting_of_ref": "indicator--3b64ea5a-fc57-4ef8-b02a-04a342459ed4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57fcd016-ce99-4dac-8549-298d4cbce01e", "sighting_of_ref": "indicator--fdb1b143-9399-462b-b33f-09f293a9ec61", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--424d5e85-5060-4dca-8a14-7260f5bb20b4", "sighting_of_ref": "indicator--fdb1b143-9399-462b-b33f-09f293a9ec61", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a5710b-47f0-49c8-9425-15ef47c4a105", "sighting_of_ref": "indicator--36c5f112-5221-41bf-a3e3-e7643e5c8ed3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f11d63-3178-436b-b704-5df0368d74dc", "sighting_of_ref": "indicator--605658c6-74dd-49c1-bb03-82cbe389404a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c0876d-584c-405c-ae7e-fc7cc5d153a6", "sighting_of_ref": "indicator--605658c6-74dd-49c1-bb03-82cbe389404a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f0d1ab-61dd-475a-a02a-f487a212442b", "sighting_of_ref": "indicator--2ab2aded-086a-4449-835c-9f0752871648", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--002386f2-6729-42ec-a209-6ff9843c36d3", "sighting_of_ref": "indicator--d9cd047d-a242-43f5-bbf2-ef2250d419b3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d50fbc4-3d83-46e5-819f-c39a19a281e3", "sighting_of_ref": "indicator--54d1a804-fe5b-41ba-bdab-85fe633a13c9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89328794-5ebf-48e0-93af-4a2ccb93dfbf", "sighting_of_ref": "indicator--54d1a804-fe5b-41ba-bdab-85fe633a13c9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a8a460-7351-4b45-8dd3-3805a7cdd106", "sighting_of_ref": "indicator--c54299e1-d6e9-4b22-bd2d-e79969466d05", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5efbb9c-1c0d-4d0d-a9db-04de54613fb8", "sighting_of_ref": "indicator--c54299e1-d6e9-4b22-bd2d-e79969466d05", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af383957-29aa-4fd7-bef9-045f9fad7f8f", "sighting_of_ref": "indicator--e6990b04-4ae8-430e-9312-bb546ec09ccd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b83e215-b53c-45d3-9a5d-cd350e6c9df5", "sighting_of_ref": "indicator--e6990b04-4ae8-430e-9312-bb546ec09ccd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9921b863-8f88-4b3f-9e25-cecd9110da18", "sighting_of_ref": "indicator--34d9db45-7383-46a3-a308-73909d84a791", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b62fd0-d037-44f1-8507-f4b178d4d275", "sighting_of_ref": "indicator--34d9db45-7383-46a3-a308-73909d84a791", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2882f53e-5e7e-44ba-9f5a-002044143bd4", "sighting_of_ref": "indicator--1580af70-4b92-406b-88e1-53e106486f4f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc4754b6-20a9-47d8-9ba6-496667614191", "sighting_of_ref": "indicator--1580af70-4b92-406b-88e1-53e106486f4f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c10548-d5f1-4f72-9f63-acde3b65bb13", "sighting_of_ref": "indicator--1a4ae355-39e6-4bcc-afd7-aa72032582a9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ab6be1-4ecb-4f04-b3b4-0f0eaad1a391", "sighting_of_ref": "indicator--1a4ae355-39e6-4bcc-afd7-aa72032582a9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc0735a-02e3-4840-8335-af0a287eb363", "sighting_of_ref": "indicator--42a57678-8bcc-41f5-ad03-12b613555fff", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee0ba68-e1e9-4bd9-9b91-1ba406aa018f", "sighting_of_ref": "indicator--42a57678-8bcc-41f5-ad03-12b613555fff", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23fbd307-17e9-47f8-9e13-fe3abbd6a566", "sighting_of_ref": "indicator--470098b0-ecd2-4e09-a770-7f6601d57fcb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d54f831-116c-4a19-87a0-955bb989a3d4", "sighting_of_ref": "indicator--470098b0-ecd2-4e09-a770-7f6601d57fcb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709fb280-79db-45f1-ad56-0fd8a86702e0", "sighting_of_ref": "indicator--916d1b7c-a716-40b5-a412-03ada48be896", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d81eb1f-00a4-48c8-a3be-8deb01eb77a4", "sighting_of_ref": "indicator--916d1b7c-a716-40b5-a412-03ada48be896", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--083404a5-0652-45bf-8c5a-3378200418e4", "sighting_of_ref": "indicator--d74dce88-f357-4bb9-8485-d0e0bb75022d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d6c15c4-ed6c-4693-947d-a52d396c6834", "sighting_of_ref": "indicator--d74dce88-f357-4bb9-8485-d0e0bb75022d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f446e5-27b2-4283-b830-5d5bcf5c8b65", "sighting_of_ref": "indicator--a3e0895c-a760-40b8-8ec2-2125764ea6a9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ecb63e6-50a2-400d-8606-91ca2b299fa2", "sighting_of_ref": "indicator--a3e0895c-a760-40b8-8ec2-2125764ea6a9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1855901a-05ee-4324-87e5-5fcaaa27d318", "sighting_of_ref": "indicator--f0acd15b-4085-44b8-829b-51cf106d9d32", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--625db32a-4b16-433f-9153-1ba7dbccda35", "sighting_of_ref": "indicator--f0acd15b-4085-44b8-829b-51cf106d9d32", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64adbcd4-7798-4e0f-b871-b1df3c3d4893", "sighting_of_ref": "indicator--bd8a63b5-4a22-4f85-b2ec-06f5f331e73e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7576c96a-3bd7-483e-8795-e1f80763f785", "sighting_of_ref": "indicator--bd8a63b5-4a22-4f85-b2ec-06f5f331e73e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--262c1ed9-1371-471b-9dab-3a9a80fbb608", "sighting_of_ref": "indicator--ce51ef6d-a91f-4fbb-8877-8a66ab872413", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f87ea37-9648-4665-8531-a4c57e254d44", "sighting_of_ref": "indicator--ce51ef6d-a91f-4fbb-8877-8a66ab872413", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8412d9e3-8d7e-4335-9ad1-218a5ac4c402", "sighting_of_ref": "indicator--39e06f3b-e729-4646-b88b-2771a135f696", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--755fa295-bb45-4714-bce1-6f1374385c95", "sighting_of_ref": "indicator--39e06f3b-e729-4646-b88b-2771a135f696", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8198a0a5-32f5-4644-94f2-f7d9fb938acc", "sighting_of_ref": "indicator--50a95118-f7c0-4e83-aeb3-53f0e29e1f7f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e01a2dd-a819-4504-81c6-0c807a263aef", "sighting_of_ref": "indicator--50a95118-f7c0-4e83-aeb3-53f0e29e1f7f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c8e9f3-f60f-429a-bce1-cac2fdcd0345", "sighting_of_ref": "indicator--f97d4781-45ca-46c3-b72d-1004060fabf4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e03aab-56dc-4e51-983a-450610fc971f", "sighting_of_ref": "indicator--f97d4781-45ca-46c3-b72d-1004060fabf4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff58da95-1dc1-4bd7-9f35-9e98dacae9e0", "sighting_of_ref": "indicator--9f1e5232-a07f-4146-b3f2-4e20dc86b365", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d4438f-54fb-4fc1-a7cc-a36db3a16608", "sighting_of_ref": "indicator--9f1e5232-a07f-4146-b3f2-4e20dc86b365", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8eab943-1180-45bd-ba9f-76207e589c77", "sighting_of_ref": "indicator--98da21d3-1970-4700-902a-1cad73830397", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a260d676-8252-495f-91fb-82098ba4e3b2", "sighting_of_ref": "indicator--b36bf473-7ba6-4e15-8767-ea0ab4c830b7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0edcf5c9-8815-41fc-886a-39739471c76f", "sighting_of_ref": "indicator--b36bf473-7ba6-4e15-8767-ea0ab4c830b7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685d4133-abe9-4841-8474-5c7d0a0e94f6", "sighting_of_ref": "indicator--f7b40961-fbbc-4be6-8bad-6a762b53bebd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4dbb74b-8499-445c-8010-642383eed52f", "sighting_of_ref": "indicator--f7b40961-fbbc-4be6-8bad-6a762b53bebd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a804501-750f-4961-8ec6-54f2549c5b30", "sighting_of_ref": "indicator--85c54aa6-f021-45b5-b2a2-894fa4d88980", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45caa7d-f91f-4630-b343-29a444d68b3c", "sighting_of_ref": "indicator--85c54aa6-f021-45b5-b2a2-894fa4d88980", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--146acbf6-eaaa-41a3-ab3c-a076b80fcd29", "sighting_of_ref": "indicator--36f0b605-c7b9-415d-8b61-a9c33f8d954c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe07d532-ee97-4a0f-9ebb-365f2dcfe669", "sighting_of_ref": "indicator--36f0b605-c7b9-415d-8b61-a9c33f8d954c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba670b8-35c5-4918-8f4b-47915baacab7", "sighting_of_ref": "indicator--a21dfa77-decd-43f2-9ece-588949bb4970", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--690300e3-4720-4254-9504-28985ff40d78", "sighting_of_ref": "indicator--a21dfa77-decd-43f2-9ece-588949bb4970", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--257f6270-4fda-46de-a41b-a60d49cc4b5d", "sighting_of_ref": "indicator--4fa7e64b-c94e-4a67-858e-e0cfafef45ba", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--639c6725-47e1-4126-8c8b-436f3da11a40", "sighting_of_ref": "indicator--4fa7e64b-c94e-4a67-858e-e0cfafef45ba", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--211f6852-f837-4bf4-a045-715a3df77d81", "sighting_of_ref": "indicator--2df583f6-eb52-40c1-9af1-af933595ceab", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ef469c-638f-4318-a569-786ce5884d18", "sighting_of_ref": "indicator--2df583f6-eb52-40c1-9af1-af933595ceab", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d6f2568-8f96-441a-9ebf-eefa3e0175da", "sighting_of_ref": "indicator--080d67a2-f2d5-4bec-a7cc-6c9eb8e9d5d1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fddd4df-4c82-4eab-9243-5047a58480e1", "sighting_of_ref": "indicator--080d67a2-f2d5-4bec-a7cc-6c9eb8e9d5d1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9657b7-03d7-4eb5-8c8c-f73ec4527b95", "sighting_of_ref": "indicator--ca577547-3eea-4119-af8a-c3135d67f336", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8784c64-d06c-4652-a58a-1a11ead89b50", "sighting_of_ref": "indicator--ca577547-3eea-4119-af8a-c3135d67f336", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e66f5926-ef5b-4906-8968-d51dc02d3585", "sighting_of_ref": "indicator--824b92e6-616c-403e-9555-10c2e8196ef9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71680fb9-429e-48f3-ba5b-943c8ca66b87", "sighting_of_ref": "indicator--71351461-bab2-4872-8a97-4733d12345b7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1683d38-bef2-433c-afff-602ce755e47e", "sighting_of_ref": "indicator--6922114c-5abb-437c-b7ad-0e760436cd53", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a170275f-525b-4635-a23c-a9cc658ac2af", "sighting_of_ref": "indicator--6922114c-5abb-437c-b7ad-0e760436cd53", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--395de474-7de3-4bfb-adb0-b9c99b3d7a4b", "sighting_of_ref": "indicator--60dc5625-c0a0-42aa-b085-165b05005e85", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ec9b58-19ca-4dad-bd7b-54e3e10dcad7", "sighting_of_ref": "indicator--7f2607a4-c265-40c8-887f-9aa03f301a69", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f92807f-5fd4-45ab-b032-72d745f55baa", "sighting_of_ref": "indicator--a7ceb0fc-b0a0-420c-82e2-7a2ceaff8651", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9332b7-8d00-4a3c-a962-98fb8e2d6c91", "sighting_of_ref": "indicator--a7ceb0fc-b0a0-420c-82e2-7a2ceaff8651", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c4ffd06-84e6-4484-9cc7-e2334b7efc05", "sighting_of_ref": "indicator--dc6da9cb-c82b-40cd-9f3f-e22a0ff1c38f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5097075f-d448-473d-abf9-955774f7639b", "sighting_of_ref": "indicator--dc6da9cb-c82b-40cd-9f3f-e22a0ff1c38f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66fcb131-a7bc-444e-9867-1c3a10f60c7e", "sighting_of_ref": "indicator--8f67ad27-a282-4c0f-84e6-34798f2b968e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf7af2e-a924-4ca0-a085-3e7263206eca", "sighting_of_ref": "indicator--65ae998e-42c9-4df6-873c-c56bea8c859e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a02805-9118-44c6-addc-206c87419d76", "sighting_of_ref": "indicator--65ae998e-42c9-4df6-873c-c56bea8c859e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3051f4c5-d765-4f90-8323-198e4fee7979", "sighting_of_ref": "indicator--e96e89fa-ead2-480f-ac3c-34b9c2b4faad", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2012b5b-9961-4832-ac21-fc6c545a27e5", "sighting_of_ref": "indicator--e96e89fa-ead2-480f-ac3c-34b9c2b4faad", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e51d6dba-6a0d-478c-a6a7-c0ae212c3436", "sighting_of_ref": "indicator--f13f6d3d-edf4-4d7a-b703-6ee24bebfcda", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b8c37af-1358-4cad-953d-1b1410f3cc82", "sighting_of_ref": "indicator--10f4d138-ff72-446e-90c1-861cf46dd262", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8a3576-ee29-4df4-8680-2f84a61b9633", "sighting_of_ref": "indicator--0cd8a8fa-ff17-4978-8a9b-5c08c925015c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b952911c-2ab7-4f47-b5e4-f786f907d23c", "sighting_of_ref": "indicator--0cd8a8fa-ff17-4978-8a9b-5c08c925015c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5504ed9b-90f4-408f-a6aa-3587527a231d", "sighting_of_ref": "indicator--7e8676ff-34bb-4aaa-90e4-7afa63cb9364", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f739bf4f-368d-4e2e-ae75-719e22494d2e", "sighting_of_ref": "indicator--7e8676ff-34bb-4aaa-90e4-7afa63cb9364", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e79ae3-2489-48b0-a406-c860863c30c6", "sighting_of_ref": "indicator--9c4138a8-19d2-4b44-a3a6-4e5b1ddb24c8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb8590f-3a16-4887-b1dd-9bd793ada212", "sighting_of_ref": "indicator--9c4138a8-19d2-4b44-a3a6-4e5b1ddb24c8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e026e40-3029-456b-ba05-0f1ec6d7bbd9", "sighting_of_ref": "indicator--f4cfa0c7-7704-4d13-b016-32f9878ec0b7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d30c41aa-2f4b-43dd-9a88-786713212a75", "sighting_of_ref": "indicator--f4cfa0c7-7704-4d13-b016-32f9878ec0b7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52eb0c7e-cbe6-4d82-8377-43c5e975f94d", "sighting_of_ref": "indicator--f334b292-53a8-4548-a934-61802afb63b3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b3fcd3-aa8d-44b5-a92c-94645b100e8b", "sighting_of_ref": "indicator--f334b292-53a8-4548-a934-61802afb63b3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab85fa04-e9e7-45f6-b8fa-559a949a980b", "sighting_of_ref": "indicator--e73477ce-c063-491d-a881-ae8f0153e258", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a1e29e0-b75f-4b20-a432-2de047a3caa3", "sighting_of_ref": "indicator--e73477ce-c063-491d-a881-ae8f0153e258", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d86a221e-af1c-469a-a4b1-f2d8cb8493c1", "sighting_of_ref": "indicator--8dd9d905-e4d1-42f5-b903-3dff2b2852a4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e528ea29-3e2c-4a01-b643-9f9849eac8bc", "sighting_of_ref": "indicator--8dd9d905-e4d1-42f5-b903-3dff2b2852a4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1326804c-990b-4be1-ad71-81fa6de0c21b", "sighting_of_ref": "indicator--2a26d528-814c-454c-adb9-b154d787db45", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f481d8-c1a1-44cd-bb91-b32bd6e5bcb6", "sighting_of_ref": "indicator--2a26d528-814c-454c-adb9-b154d787db45", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b465b4-854b-4599-8d78-1ffb32058464", "sighting_of_ref": "indicator--309859e6-bd4b-4e1d-b289-d6c2aae01954", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc6d7440-3bdb-4c6d-91a3-e97f8a736d08", "sighting_of_ref": "indicator--14837dbc-c7df-4e71-8ccc-8405e730b47c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c4d47f-f45d-4ee7-b81a-ea1213e58744", "sighting_of_ref": "indicator--cd62ccef-2b2b-41ee-a9fd-edc02685528d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc5bda0-c694-4b6d-b51f-4e46028b3023", "sighting_of_ref": "indicator--743ac8f5-9c4e-4442-8b87-6f40edc1a5d7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba808c8-6f06-4cb5-94c2-4bf2246544ad", "sighting_of_ref": "indicator--4c0ed200-2198-4433-a444-79fe2ca87226", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04cebd9-5bcf-4225-8d51-5d552e4ea8d3", "sighting_of_ref": "indicator--4c0ed200-2198-4433-a444-79fe2ca87226", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6065c262-b5e0-4657-a6f1-65d2bd6e0aa6", "sighting_of_ref": "indicator--466e7696-7dbb-4280-b09b-1c67d6f3b946", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c557388b-9196-4aff-bf60-cf10097d3b74", "sighting_of_ref": "indicator--466e7696-7dbb-4280-b09b-1c67d6f3b946", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7201eee-c452-4106-837d-1c0cd819f463", "sighting_of_ref": "indicator--0a4a7110-6a1a-4d03-b429-0f938bcbfff2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be57a3f2-eb7d-4a1b-b687-d2d5504a12d8", "sighting_of_ref": "indicator--0a4a7110-6a1a-4d03-b429-0f938bcbfff2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c10d59-29ae-4ae8-b4d6-ef174c3cbe5a", "sighting_of_ref": "indicator--d6662b28-f840-428d-bd8a-d148b27163f7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8d8502-895d-48a3-9977-0867e010fd48", "sighting_of_ref": "indicator--d6662b28-f840-428d-bd8a-d148b27163f7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5006eedc-562c-4aae-b958-ede99acffbc1", "sighting_of_ref": "indicator--d6662b28-f840-428d-bd8a-d148b27163f7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e118b19f-486d-49a2-81c3-dd32a408f318", "sighting_of_ref": "indicator--fdde9417-4c93-47c1-ae9e-9f5719b94830", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e98f680-0ed7-4bbd-955e-877ecc023dd4", "sighting_of_ref": "indicator--1471d5b9-1093-4798-9960-0cd3bafab029", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ded7eb-8f43-4dac-bed5-951975ed479a", "sighting_of_ref": "indicator--8cd7dcdd-ae4a-43ff-8663-82552cd58203", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419813ba-de46-4e1f-8e19-fec807a9277d", "sighting_of_ref": "indicator--8cd7dcdd-ae4a-43ff-8663-82552cd58203", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ddb031-1d80-417a-ad66-4a5aef84a8fa", "sighting_of_ref": "indicator--8cd7dcdd-ae4a-43ff-8663-82552cd58203", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d3e5391-88f1-4e58-b33a-5ac711905134", "sighting_of_ref": "indicator--42a3047e-8675-4dd7-b601-b2524ae09c19", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6f090b-f0ad-47e0-a0cd-cfec3161f835", "sighting_of_ref": "indicator--42a3047e-8675-4dd7-b601-b2524ae09c19", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173c72d9-d9aa-4c56-ab64-fbb039ebf83d", "sighting_of_ref": "indicator--ecd7bac5-46f7-4e54-b3a9-e2cc68c17b82", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1f9c2b-d126-4571-8ac3-eba6e74bba45", "sighting_of_ref": "indicator--ecd7bac5-46f7-4e54-b3a9-e2cc68c17b82", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac614499-a51f-4824-91ce-eaa67a4f7f24", "sighting_of_ref": "indicator--7a32627d-baeb-4218-b6a7-6b51d0d0a875", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e6c5bb-111e-47d9-9084-c717f389d8b2", "sighting_of_ref": "indicator--67af3cbc-f697-4b48-9b95-447b7a5c58da", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5227d82e-0f77-4dc2-880c-11c6ec885b5a", "sighting_of_ref": "indicator--e800d110-d1de-4908-8064-43fc5660af18", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07152da-b186-4640-8a5e-675b3e3cf7fd", "sighting_of_ref": "indicator--e800d110-d1de-4908-8064-43fc5660af18", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c45f9e-be21-4862-9642-5ac90e6137fa", "sighting_of_ref": "indicator--d5618e2e-71c1-4ddf-9ba1-23979a6c4b86", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d2fd71-0a2b-4dfa-a334-dafd5c444873", "sighting_of_ref": "indicator--d5618e2e-71c1-4ddf-9ba1-23979a6c4b86", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd3266a9-d9a5-40f4-97ae-794cad6b0047", "sighting_of_ref": "indicator--aec62e42-eb2b-493d-85c3-1f8fb6f16eb4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d7d591-6b49-4294-968a-c519aba3b55d", "sighting_of_ref": "indicator--aec62e42-eb2b-493d-85c3-1f8fb6f16eb4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20db4ebc-7b5c-469b-bef7-fa8c259edee6", "sighting_of_ref": "indicator--182107c7-036a-4adf-9781-73f9de3fac5c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8111b0-ebd4-41b6-9649-20efae4d2a40", "sighting_of_ref": "indicator--182107c7-036a-4adf-9781-73f9de3fac5c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fafd3c1-1413-4fe4-b0c8-79cec7d89704", "sighting_of_ref": "indicator--182107c7-036a-4adf-9781-73f9de3fac5c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2369b216-f48f-4723-982a-085900e37643", "sighting_of_ref": "indicator--2cde5292-919a-4b0c-8252-17a9d619dfb3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77fff27a-53c5-4bc3-a055-cad8b10a08da", "sighting_of_ref": "indicator--d4003001-378a-4475-915f-ba8d920a2ac4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd33335a-cccc-403f-962b-8220c62295dd", "sighting_of_ref": "indicator--ca904861-d6b3-49d9-827a-b85ef1a78f42", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efbcaf2d-d10d-4945-8ca3-786c116e38b7", "sighting_of_ref": "indicator--ca904861-d6b3-49d9-827a-b85ef1a78f42", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47de184-971d-4272-acdb-ae6d5a7ca59c", "sighting_of_ref": "indicator--48414965-1477-4321-8b37-f34d293d9d43", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76e2c79-64ca-4816-afda-19d97ee65342", "sighting_of_ref": "indicator--4235f2dc-0a22-47ab-8395-63b90fb01f9e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--140e49fc-6dca-4807-8b6a-9b95de0e861c", "sighting_of_ref": "indicator--beff750d-8a8a-4b10-a36a-20dd48b725a4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ea5187-1c86-455a-8855-e97a5be46468", "sighting_of_ref": "indicator--61a9c967-1154-47a8-8670-4f8fcc69c257", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990c65bb-cb4e-4745-a55e-faea49887ebc", "sighting_of_ref": "indicator--190cdfae-ed8f-44b9-aee3-c73f620c712d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3265281a-cc57-44d4-ad54-137c1b9dc3f1", "sighting_of_ref": "indicator--feeb5f70-15c3-48ad-a1f7-1a23921b151f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fea9b9f-b9e6-4c67-a78e-0f4f7ac4d519", "sighting_of_ref": "indicator--3e2f6608-c927-499e-b3fb-dd23676155ff", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634fb8af-98d8-4a72-9f79-d1f61a499b0d", "sighting_of_ref": "indicator--ed63e844-392b-42c9-8806-4435d9b5dd90", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9283c5ec-2fc9-439e-96d4-1f7964da466f", "sighting_of_ref": "indicator--04eab904-a9b9-471a-94f4-3a4b95517ba5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9eb5cb3-09bb-4c2c-8c25-bbed4ccfc500", "sighting_of_ref": "indicator--72501c6e-ac28-401c-8d74-4118d7b00163", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea8e7d1-66ce-48e6-93c4-157a780ab320", "sighting_of_ref": "indicator--07af04a0-cf24-46bd-b954-5d9c37c92b60", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0121591-9dc3-44bf-a1d3-cc1e47230caf", "sighting_of_ref": "indicator--07af04a0-cf24-46bd-b954-5d9c37c92b60", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25da2045-b120-4ec0-b48d-697e611ea633", "sighting_of_ref": "indicator--e2545399-74ab-4d6f-8acd-855acfa697e3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129c9967-92dc-4fe1-95d3-d548a0f3ed6d", "sighting_of_ref": "indicator--e2545399-74ab-4d6f-8acd-855acfa697e3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f9ca1fd-2ac8-44d4-a81c-8135694a3d9b", "sighting_of_ref": "indicator--7515a472-1330-43e1-b9d8-a1aa94152877", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85161ebf-53e2-437f-ae1d-d39d8eb953cb", "sighting_of_ref": "indicator--0161b5d3-adb7-4cd7-827a-9a71b0acbc5e", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46cccc6-a9b4-4e69-af44-0ac786f743d7", "sighting_of_ref": "indicator--04ab6781-ef40-4fc0-b73e-b804b33ef486", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8172d760-c320-4867-a185-d7ed50e6397e", "sighting_of_ref": "indicator--9863e310-3301-4194-b8ad-0bcde762d8eb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3f99b6-e073-4e6d-83d8-6a8c21698b86", "sighting_of_ref": "indicator--9f0dd152-0c37-4a9f-bfa6-8fc955eeb3b5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5888ad28-015e-45db-ab2b-94ba5023299c", "sighting_of_ref": "indicator--f4f904c9-1059-4323-8b5f-6a6c509bb48e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc052a68-b8a2-4eda-a0aa-d870483b3e22", "sighting_of_ref": "indicator--d62ac916-d821-4b2e-8e31-4fa829076044", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43369540-52ef-4e83-a7e4-911a5b13d5fb", "sighting_of_ref": "indicator--c326961a-6766-467a-9859-ae83d17aa8e9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8942134-86a3-416c-8e09-2a88f82ef0d4", "sighting_of_ref": "indicator--7056b8fa-4f9e-4bd8-80d5-84f1e97120e5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dceb22fb-1dc8-403e-9476-f56ab575a9d5", "sighting_of_ref": "indicator--869678ac-ffc7-4ebf-817b-066da02bec15", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1351ac-d898-4eac-abe7-7664be06f89b", "sighting_of_ref": "indicator--0825ba1f-13ac-490b-aa38-f215a447a6cf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73e335e-6666-49be-a3b2-33299a5ac5dc", "sighting_of_ref": "indicator--c920b1f6-f52f-4c7c-9351-d87b7e57aaf1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9a22b7-fd32-4c7e-a44a-ae061818613a", "sighting_of_ref": "indicator--9d2a5259-4886-457c-a9eb-f963a15d6d78", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b3ef71f-7e73-4642-9bee-5bd41516bacd", "sighting_of_ref": "indicator--4e720afd-d1b4-42e6-87cb-7d63e562c49f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--579e5be5-752a-4d90-be06-765094f9616e", "sighting_of_ref": "indicator--5116df47-5c62-43d7-9b2c-13780e115602", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a436b2d0-c3f5-46b9-ae51-e2b086907910", "sighting_of_ref": "indicator--737733b7-96bf-40a9-bf4e-b39cecf961bd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e13eb5b2-353b-47a7-b270-2e55ae042699", "sighting_of_ref": "indicator--737733b7-96bf-40a9-bf4e-b39cecf961bd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b04b2d1-e82a-4637-bd46-f7b0dc288f43", "sighting_of_ref": "indicator--79e3121c-6106-44bf-ba2b-d64cdc05f26f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27b5f82-651b-4d06-b0f5-b4c448d885e0", "sighting_of_ref": "indicator--36d8c235-f43c-47da-acfc-1f0e88ac9f84", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a123625-5934-48c6-97ce-86d38a153546", "sighting_of_ref": "indicator--36d8c235-f43c-47da-acfc-1f0e88ac9f84", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35de5066-bc6a-4b07-8e14-4f16e99fae24", "sighting_of_ref": "indicator--349bc052-bc75-43f7-9606-6a85fde571f0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0391936-2322-4523-a628-45c190a56794", "sighting_of_ref": "indicator--349bc052-bc75-43f7-9606-6a85fde571f0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fec09b6-5678-413f-9956-4b3ee8f25422", "sighting_of_ref": "indicator--5119bdac-f1b3-4b26-8f68-12c8f40c3ca2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e16729c4-1d0a-4d67-a513-edd2fb39ba33", "sighting_of_ref": "indicator--8cbdf53c-60a9-4300-8685-aabea990c1b4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d05eb47-4fbb-48ea-94e4-c8bbe367dd9a", "sighting_of_ref": "indicator--8cbdf53c-60a9-4300-8685-aabea990c1b4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9935dc-2f99-4b7a-8310-939d3f270b38", "sighting_of_ref": "indicator--260b598d-b1c6-478d-bf3a-5ecc4998076c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f8c11e-43cc-4d6f-8686-5d71a2e0a35c", "sighting_of_ref": "indicator--3d9d7bf0-b65e-4206-b039-26e19c051cec", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7308b6a4-572d-48eb-a999-984061426b64", "sighting_of_ref": "indicator--da58c5e1-1488-45b3-8938-b6ee779f4d8d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4535cd-ad4a-4322-b276-75704b46baf9", "sighting_of_ref": "indicator--da58c5e1-1488-45b3-8938-b6ee779f4d8d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e50185-9345-4551-aec0-0aa6ff6dfe5e", "sighting_of_ref": "indicator--f82149c3-d1c6-4f48-8192-736461305626", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c92b142-448f-4fdb-ac03-72afe5eb563c", "sighting_of_ref": "indicator--5f07497a-0e66-4431-8721-c4d33b9ed26a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77fd187-b2f3-494b-83e1-e500fd8e6bf5", "sighting_of_ref": "indicator--5f07497a-0e66-4431-8721-c4d33b9ed26a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059f2a1c-9902-4be8-83b7-690a2af43b92", "sighting_of_ref": "indicator--5f07497a-0e66-4431-8721-c4d33b9ed26a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e983af-68f4-4348-bfd5-6c88ddab6ecf", "sighting_of_ref": "indicator--1945855c-4caa-4e8b-aaad-7314c279fd39", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3baf0b2-3033-4983-9c3e-c0c3b0f21f82", "sighting_of_ref": "indicator--1945855c-4caa-4e8b-aaad-7314c279fd39", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30369d7d-ad63-4c2f-b8ac-790c319dc035", "sighting_of_ref": "indicator--6fb8359f-48d0-4ba3-bf61-c247ad0215f5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57cde143-458d-41fa-acab-f7abb2e59377", "sighting_of_ref": "indicator--0726e022-069c-4ed4-8378-7a0d2db8f0c2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cbff97c-32e0-44b4-8e9e-691d4387854a", "sighting_of_ref": "indicator--0726e022-069c-4ed4-8378-7a0d2db8f0c2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492d208c-cd87-4cc2-98b0-0706ff7b8a4c", "sighting_of_ref": "indicator--d4df111d-b705-4b33-a2f5-50e506745100", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28dcacfe-4a79-4f61-a6af-119ad827d3b0", "sighting_of_ref": "indicator--d3c048ba-6fc3-4824-9e6c-94a695d77318", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b2e49c-976f-4bfc-8626-0072404ea19d", "sighting_of_ref": "indicator--aaf217fc-982e-44aa-be7b-68bb3c7a216f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec6497a7-c302-495f-943a-dc9909e8a989", "sighting_of_ref": "indicator--ae480e75-3634-4eeb-bac4-c7a6a8ea2bc7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c091caf-e7e3-42de-8335-cae5df4aae9a", "sighting_of_ref": "indicator--ae480e75-3634-4eeb-bac4-c7a6a8ea2bc7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f012e499-64e0-48b3-a286-6b45c040d078", "sighting_of_ref": "indicator--b5e23cc6-9022-4557-b60f-42a1e624b507", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dcfc3c6-c3dd-41f2-bd63-1fc60da1047a", "sighting_of_ref": "indicator--b5e23cc6-9022-4557-b60f-42a1e624b507", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92251a46-b467-473a-a8e2-967532dfc1d8", "sighting_of_ref": "indicator--7482ae78-a2a4-4096-aac7-a26eb771439f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--607d17c0-349b-4daa-9aae-6b3272e06608", "sighting_of_ref": "indicator--ebf38344-7030-4455-9238-e4976e573ca9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e1ca6f8-210d-40a0-bc33-ce34cc85d497", "sighting_of_ref": "indicator--1ed6ff63-6b60-456f-8264-805741bf320a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e1a314-a1cc-4093-bebe-587d4ae12c7f", "sighting_of_ref": "indicator--2eb71aa5-5394-4d0f-94a6-6004fb714924", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd78f000-fb8d-41d8-a2d4-dfa4b1b7177d", "sighting_of_ref": "indicator--0d3c6ab5-b232-48b4-9b8e-322ddd3ad73e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44475b43-2950-43b7-92b2-e3c460fe8c6d", "sighting_of_ref": "indicator--0128a73a-588a-46da-b265-85f892a04b17", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea5cbfb-c2e8-46b4-8499-7b7c605a0cc1", "sighting_of_ref": "indicator--abf8ab81-a81e-468e-891c-eaeb4bf1aba6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62490a2f-1439-45a8-9956-1e257e976c08", "sighting_of_ref": "indicator--9f1bbd0b-3f47-4a68-a786-2ab90ab6ea77", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27aa1010-388e-4dc8-945d-14ce1db909b4", "sighting_of_ref": "indicator--ebfd30c9-7563-403f-b8b4-3e3b1115c4c4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b40215-1537-48da-a0fc-7ed0115f987d", "sighting_of_ref": "indicator--cecbf9c5-ae09-4cd6-bfb7-066426d299fd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb87caac-7ab2-4b3f-b2e3-7f928a8469f5", "sighting_of_ref": "indicator--a6110c50-6bc7-4a81-9061-1c749e7f9378", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2a0cd0-2dc3-46ab-a3ef-9f83b6ca8bc4", "sighting_of_ref": "indicator--8153db15-eb9c-4256-9d72-15f1b48d0fd0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a35895-bb52-4456-9f43-764ab240fae3", "sighting_of_ref": "indicator--c034e16d-d314-487e-9764-db8f30d2b8eb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f8decf6-973e-4ec5-b0d3-a7175bf4189a", "sighting_of_ref": "indicator--bab5fefb-f3da-4ad9-b213-52271d675ae9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8beabec7-2f71-4696-8863-e100d1785dec", "sighting_of_ref": "indicator--8255ae78-9f21-45d3-bb93-151981a8ecdc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25928323-9a3d-4019-b7e2-27e99f6a90df", "sighting_of_ref": "indicator--b1c0d4ab-c701-469d-8786-0dcd742d8da0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a11fa5c-214d-4246-9816-a5970a65640b", "sighting_of_ref": "indicator--aca084b3-f9dd-4533-9085-5ddbe21e3d44", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b390f44e-cb9e-47e2-97ac-0f9e171f7f40", "sighting_of_ref": "indicator--c107472e-f53d-46fd-9b86-0be888c8118f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a447e4-3c5c-4db2-8651-51fcc44e94da", "sighting_of_ref": "indicator--4d1f2ea2-c11a-4239-809a-d52230df9335", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa71628-2d91-42f9-aeb2-c628db91ed62", "sighting_of_ref": "indicator--0e9034b9-0f5e-4f96-b375-92096b29b73e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c42fbc3-bbef-41db-9267-5ff80602ba46", "sighting_of_ref": "indicator--0e9034b9-0f5e-4f96-b375-92096b29b73e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d551228-edb0-4f61-a7ef-4974db44d44e", "sighting_of_ref": "indicator--a81854b7-e94d-41fe-96fd-69ca0a7d985b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee55a1f-1766-401b-b504-809640a71b09", "sighting_of_ref": "indicator--a81854b7-e94d-41fe-96fd-69ca0a7d985b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d62bf2-3500-4490-9e62-aa5f294903b7", "sighting_of_ref": "indicator--71d53c57-4589-4821-8861-e7746259dc64", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19b45e9-3564-4a1a-b4b0-692d5f5e17ce", "sighting_of_ref": "indicator--71d53c57-4589-4821-8861-e7746259dc64", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbbe5217-c759-4fd7-bb81-cc4c25700316", "sighting_of_ref": "indicator--71d53c57-4589-4821-8861-e7746259dc64", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3583fec7-7f6c-47d0-8c0e-d983538e5881", "sighting_of_ref": "indicator--358b0447-2ccd-4ef4-92b4-46dd669278a6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2f96e0-83b0-4c8e-b2ec-ac2d4df17777", "sighting_of_ref": "indicator--358b0447-2ccd-4ef4-92b4-46dd669278a6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156a90c3-c13b-4322-9830-62f68ffc7bbf", "sighting_of_ref": "indicator--6651000f-c922-4644-90e0-d9e8400a9bc0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eda86b7-254d-4036-a4e8-cbd053ba973b", "sighting_of_ref": "indicator--144d3450-2314-4c2b-90ef-95a516c3ef85", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ad8c0e-4bf0-4859-81f3-20407e77b6f9", "sighting_of_ref": "indicator--050a42a3-3d82-4a3e-890e-2edfc9d381b3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6024c8c1-5572-4c49-8378-1ea0243be872", "sighting_of_ref": "indicator--08771c91-e845-48d5-9c42-dd4e228b60b9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0411d1-b8a7-4c22-ac41-b9a941c08112", "sighting_of_ref": "indicator--a1c29be8-90b7-4c78-b288-91bd9781813c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f85028-4192-485a-a838-12b1d169c1dd", "sighting_of_ref": "indicator--62f653e2-e5f2-4cdb-9622-2f3ef13f619f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d96c3ed-17f5-4cef-ab79-ee148afdcc21", "sighting_of_ref": "indicator--62f653e2-e5f2-4cdb-9622-2f3ef13f619f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829b14fc-99d4-462e-b789-46e7a3a73e73", "sighting_of_ref": "indicator--1e3064f4-a9e8-4d5b-aa75-e9acca673761", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d6edf7-fdcd-410c-a10d-b5b364f30e29", "sighting_of_ref": "indicator--3f0afc24-2b56-4a1b-abf8-9545954714eb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5419f0ca-6293-4a95-b2f2-cb12306985b4", "sighting_of_ref": "indicator--7e8845a5-6fce-4786-aa26-62ff4df65e1b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27690f7-54a5-4faa-8a76-b384e46a5024", "sighting_of_ref": "indicator--dca1b16a-7f53-4136-b014-77aa62530a3c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d953ff5-f583-455d-8a2a-4010fd28241b", "sighting_of_ref": "indicator--dca1b16a-7f53-4136-b014-77aa62530a3c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1895d37-2c25-4541-a668-747e272d9f09", "sighting_of_ref": "indicator--e1ef3537-08db-4ad6-8775-da4d36d9ba11", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c840ac-c797-4f76-8bad-ed246dbab371", "sighting_of_ref": "indicator--3fbf7bd3-1555-453c-9c6a-fdd7c71807a7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea16f24f-a74d-4da5-9357-207d46e2c29c", "sighting_of_ref": "indicator--bb4de3fb-64d8-4774-85ca-0f67c7498966", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7c5c39-3a7e-4863-ba91-b13f61ad3aff", "sighting_of_ref": "indicator--7ed77446-64cb-4e5e-bed2-691a56da63cd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a71a0e-370a-4b73-82d5-3d5e0100097f", "sighting_of_ref": "indicator--945dbf26-905b-4cc1-aaa6-b8e256a42a63", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51b5fa9b-adfc-4452-9224-94327d10ffbb", "sighting_of_ref": "indicator--79a15668-b807-422b-bb3b-42d31eabf29d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abbc469e-b580-4cd3-a0b3-741f1fa8b764", "sighting_of_ref": "indicator--d09d0983-a614-4eae-b3fc-a7c0d8e64029", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f1c1d0-a19e-40af-a0da-c24adc27ac6b", "sighting_of_ref": "indicator--d09d0983-a614-4eae-b3fc-a7c0d8e64029", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307b0a45-da3a-4c87-8741-e346caa81f4c", "sighting_of_ref": "indicator--dcaa5e33-a4ec-4e2d-b4fd-fce1f77c8ca1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f2baf4-37a9-4481-be92-ba4c6419a40e", "sighting_of_ref": "indicator--89fe910c-358e-495b-a126-3b1eaa56edfa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97aeb28-c2a1-4b74-a973-84e15415822f", "sighting_of_ref": "indicator--735c42bc-e38b-45b2-adb9-689e26f7fc82", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e3ceda9-a63b-43ca-abc6-6651c9e19deb", "sighting_of_ref": "indicator--7d29972f-1a08-44a6-8918-0c5bedc41570", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e2b982-99b4-472e-afbc-d36ade605cfb", "sighting_of_ref": "indicator--3ad7de79-2e35-48cc-9974-ab81832e2ca7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d932f1aa-7bca-4d86-8d00-31d22bf92480", "sighting_of_ref": "indicator--3a652a79-39fc-4d6a-99ad-652c849b66c6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b776eea-dad9-4c63-b806-4dfbd96dabc9", "sighting_of_ref": "indicator--3a652a79-39fc-4d6a-99ad-652c849b66c6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9d33ae-1a50-440b-bdfb-2cb343043bab", "sighting_of_ref": "indicator--d729f752-2b8a-4742-9191-47ab0eac6b79", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489e6a86-b3d5-4f8a-a465-7dc4153fce6d", "sighting_of_ref": "indicator--6d11c9c1-6072-42ee-a681-e34749f80f09", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede9ac93-d3af-4ae8-802a-4688a365d058", "sighting_of_ref": "indicator--6d11c9c1-6072-42ee-a681-e34749f80f09", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58164702-6eec-4730-afbf-d9280ef20416", "sighting_of_ref": "indicator--d1733f2c-7936-430d-9605-b27f4cc476a0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4f1cf0-12eb-4c15-aa67-f3d54e352508", "sighting_of_ref": "indicator--0f7bf75c-9e41-476e-8b97-77116030585e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4b795c-3c51-472b-8718-5c3edd1a1e7b", "sighting_of_ref": "indicator--e72edd55-9276-4a99-a7bd-960d3829b882", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e87c7e3-1e90-4e94-a2a4-85c095c9af69", "sighting_of_ref": "indicator--e72edd55-9276-4a99-a7bd-960d3829b882", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204e8db8-71fe-48ad-b130-74617c191434", "sighting_of_ref": "indicator--371a2a15-2bea-4442-a1c2-db33ccd853da", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--035b56be-7c29-4bb1-8373-c906ccfd1e02", "sighting_of_ref": "indicator--2989fdcf-2347-4401-989c-e924371bb956", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7eee54-936b-4551-905c-620dea6c48fb", "sighting_of_ref": "indicator--2989fdcf-2347-4401-989c-e924371bb956", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4279ebc0-7e63-4cf9-adc6-6b8ebcb84be3", "sighting_of_ref": "indicator--2989fdcf-2347-4401-989c-e924371bb956", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecac0ef8-327f-4c97-93e0-c913ad61fc9d", "sighting_of_ref": "indicator--29549dc4-a5eb-4109-8680-709202c4fa23", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef683fe-d6bb-45bd-9215-eb0327344357", "sighting_of_ref": "indicator--29549dc4-a5eb-4109-8680-709202c4fa23", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a0601d-2d71-4d17-ab0b-6727dc5f14c5", "sighting_of_ref": "indicator--29549dc4-a5eb-4109-8680-709202c4fa23", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847c99df-74ca-43e4-940c-48e80cac9be8", "sighting_of_ref": "indicator--d9b6500a-4600-49d9-adab-0215780bea68", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb845c5-0c9c-41af-b2a5-e78670462d00", "sighting_of_ref": "indicator--d9b6500a-4600-49d9-adab-0215780bea68", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3666ef30-3b4d-427e-bdcf-de6516520b7f", "sighting_of_ref": "indicator--0c2cefbc-1d9c-40c7-bdad-aae1f85ce629", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a281b75a-da03-44fe-91cb-fedd220a5489", "sighting_of_ref": "indicator--0c2cefbc-1d9c-40c7-bdad-aae1f85ce629", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1de1b1-1fc9-416b-98f0-c8c1dc50daca", "sighting_of_ref": "indicator--24a4e5f7-623b-45a7-b84e-336321b9029a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47ccee3-484e-4c2d-9a28-b189c6c5dace", "sighting_of_ref": "indicator--24a4e5f7-623b-45a7-b84e-336321b9029a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad627ee5-2902-4ead-99a6-447768ff1c43", "sighting_of_ref": "indicator--9d023144-b2b2-43fa-8cb2-1da296c3ad35", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b61556-a0c8-4fb0-ab22-bce2c18a64af", "sighting_of_ref": "indicator--4c79f453-dd67-4b65-9e09-b2c644fc3802", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b24de95-a993-43c3-a70d-32dc40ce1256", "sighting_of_ref": "indicator--01be3912-cbc7-4e6f-bb2f-affa0ac9986b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a59c1c38-e4b8-4d0b-b66b-a3890b1f7cfb", "sighting_of_ref": "indicator--c42a5afb-2cb3-49fe-8eec-de8622bfcb8d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888d859f-ba3c-4ec4-9487-d25b6de507e7", "sighting_of_ref": "indicator--c42a5afb-2cb3-49fe-8eec-de8622bfcb8d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c27c5f0-ee3d-41a4-95f7-5d068ea11c2c", "sighting_of_ref": "indicator--c42a5afb-2cb3-49fe-8eec-de8622bfcb8d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8490ee64-fab1-4bce-99be-001c4dc1ae63", "sighting_of_ref": "indicator--12295c9d-37d7-47b8-9eb5-a9ff03f2ad89", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2833c3a-01ab-4696-a789-c8bcf1608fa9", "sighting_of_ref": "indicator--12295c9d-37d7-47b8-9eb5-a9ff03f2ad89", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--388a696f-fd78-4de4-bc05-aae57ef1f875", "sighting_of_ref": "indicator--ade7baa3-fb56-47d1-b9b6-4ef07bc9695e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4c16d3-0aea-4a0f-8701-e09a7306bcc9", "sighting_of_ref": "indicator--ffcc9bac-aee1-4d27-baa3-e37a6344ee23", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea7179cd-8036-4de2-ad9e-69735fc9ad7f", "sighting_of_ref": "indicator--eb042117-34af-4fc5-87c9-df67d698d3d0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1792e19-92e9-4b5a-b894-d33517207047", "sighting_of_ref": "indicator--eb042117-34af-4fc5-87c9-df67d698d3d0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d64ca5f5-569f-452f-9967-54a42c3402bc", "sighting_of_ref": "indicator--eb042117-34af-4fc5-87c9-df67d698d3d0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efed66e7-e5c3-4072-804a-386530464633", "sighting_of_ref": "indicator--0d446e42-8ff0-42d2-85c0-f7fe027bb6ce", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3146a134-6104-49cd-901d-d08f4d7cef41", "sighting_of_ref": "indicator--0d446e42-8ff0-42d2-85c0-f7fe027bb6ce", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3c5d0f-c36d-4eb5-9410-4a0f189a4849", "sighting_of_ref": "indicator--0d446e42-8ff0-42d2-85c0-f7fe027bb6ce", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bef4093-c56e-416b-a14a-49fd5ca65992", "sighting_of_ref": "indicator--ea3dde42-2882-4819-ae6e-24bc5e481883", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4911a53-da6f-4c95-9970-89170b87638e", "sighting_of_ref": "indicator--b7979abe-35b8-4f34-a558-eb1c2571b150", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--899eba46-8bcb-468d-8407-1c2d258eea21", "sighting_of_ref": "indicator--98dcdc13-f999-4f59-b07f-3cbc93b6b31c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceae46c2-4690-407e-80bb-ec83b2a68a6e", "sighting_of_ref": "indicator--98dcdc13-f999-4f59-b07f-3cbc93b6b31c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--300c1a94-e3ff-4191-9156-783fa694786c", "sighting_of_ref": "indicator--e998971b-5b79-4aa4-9593-c010ae3cee12", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21058033-0177-44c8-af79-3d5e9600d78e", "sighting_of_ref": "indicator--22ebd4aa-25e5-4481-8a24-409b21acbd26", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d80842e2-62f4-4ee4-9f1c-8e0cd2c24cda", "sighting_of_ref": "indicator--22ebd4aa-25e5-4481-8a24-409b21acbd26", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b74dce9-9986-43aa-b6bc-579f412fe2eb", "sighting_of_ref": "indicator--11ba748a-1e32-45b4-a92b-271ce23c3b10", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4d7454-f750-4db4-aef7-7bb11e2b4b43", "sighting_of_ref": "indicator--11ba748a-1e32-45b4-a92b-271ce23c3b10", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a46fa81-5724-43ca-9650-5305341c93c4", "sighting_of_ref": "indicator--a9615a75-90d3-4ee5-9d04-936a1aa6c7e5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--135c66e4-8f91-477b-b4a2-ca491c0ba8af", "sighting_of_ref": "indicator--8dae3f48-3b8b-4f49-8975-ce1993e0e0f1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdfcf9bb-6f3b-4e37-b35c-4373ace85e68", "sighting_of_ref": "indicator--8dae3f48-3b8b-4f49-8975-ce1993e0e0f1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61cf775d-026c-43cd-8892-8ab07307a46c", "sighting_of_ref": "indicator--3908f065-1fc3-49d8-8a80-e4a9fefa4e84", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b62fada-5035-41fe-a336-6231ff76e237", "sighting_of_ref": "indicator--3908f065-1fc3-49d8-8a80-e4a9fefa4e84", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb2cc80-e416-4e6a-b516-a9e9868f4ade", "sighting_of_ref": "indicator--d7a1c6ed-ca1b-4207-8ead-ca57c280a118", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f4f3513-dc72-466e-8a54-15042c973af9", "sighting_of_ref": "indicator--d7a1c6ed-ca1b-4207-8ead-ca57c280a118", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a4e9d6-791b-45d5-af9a-b95a763529c9", "sighting_of_ref": "indicator--d7a1c6ed-ca1b-4207-8ead-ca57c280a118", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d00ebb-e51a-45b9-84eb-40576bb1a361", "sighting_of_ref": "indicator--a1a26c28-0aa0-4b0a-80de-0f5e73bec191", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377e590e-cc07-4a65-a42a-59b7b53c157e", "sighting_of_ref": "indicator--a1a26c28-0aa0-4b0a-80de-0f5e73bec191", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76469ac4-ec5a-479c-827d-f2e394b59627", "sighting_of_ref": "indicator--8c7df83b-4bfc-4d16-a17e-8951530d4a5f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c09b6f3-dd71-4f92-aebb-2f8361ef6e64", "sighting_of_ref": "indicator--8c7df83b-4bfc-4d16-a17e-8951530d4a5f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f8dba6c-5390-4f4a-9673-9b39d61f9bf3", "sighting_of_ref": "indicator--2ec761de-8b38-408a-9875-2e840b71f415", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695c815f-0a7f-4011-a8b3-85f8a05b20fb", "sighting_of_ref": "indicator--2ec761de-8b38-408a-9875-2e840b71f415", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5c8f33-dafa-406f-af28-6ee6f8bc9c09", "sighting_of_ref": "indicator--7710915d-2894-4a48-888d-d955b18d572e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d7cf48-a877-4bcf-98e8-84b2b4532e8d", "sighting_of_ref": "indicator--7710915d-2894-4a48-888d-d955b18d572e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c82547-538c-467d-ac54-977e341e5251", "sighting_of_ref": "indicator--14b77748-4d60-4485-afff-225f53f3b796", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5c48c5-54a6-40c2-91c6-718bc6ce37f7", "sighting_of_ref": "indicator--14b77748-4d60-4485-afff-225f53f3b796", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d624b9a-a9e5-47ca-a8a2-33f31945da26", "sighting_of_ref": "indicator--5ab85b92-ca31-4a26-9bfa-1a7aa23bf121", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f4e463-639e-4741-8123-d9607917316e", "sighting_of_ref": "indicator--6cfd90d2-ec28-4ace-9672-a12c62daf482", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9687e271-8672-4bb0-8c22-9d287701338f", "sighting_of_ref": "indicator--6cfd90d2-ec28-4ace-9672-a12c62daf482", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c98beab-5645-4ded-a1dd-7050ed7b8ce3", "sighting_of_ref": "indicator--c62f434a-2c3b-4273-af0b-4e2307b4aa80", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d59256-7c9c-4aa1-a058-fad62faf0f17", "sighting_of_ref": "indicator--c62f434a-2c3b-4273-af0b-4e2307b4aa80", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2ae15d-737f-4d7d-8c5c-932356ca4bd1", "sighting_of_ref": "indicator--6d1511d1-42c2-45f0-8c81-1ff144e64613", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662d0918-9714-47de-bbc6-7f76c606d896", "sighting_of_ref": "indicator--6d1511d1-42c2-45f0-8c81-1ff144e64613", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecafcf84-d1ca-4ee7-9dd4-b677f2f78eb5", "sighting_of_ref": "indicator--6ec186ff-1767-421f-b9f4-ecbe6387d87c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a8240a-4717-4765-b7a4-eb48ac53096d", "sighting_of_ref": "indicator--6ec186ff-1767-421f-b9f4-ecbe6387d87c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41481a0-d628-436b-9b01-ad4bae6fab9b", "sighting_of_ref": "indicator--05fc1641-1382-43c1-a0af-6314aac1a5c6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9290c4-9034-445a-830b-dbee382a4478", "sighting_of_ref": "indicator--05fc1641-1382-43c1-a0af-6314aac1a5c6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be511b37-3f13-42c2-b0da-7a943adb35af", "sighting_of_ref": "indicator--d765b570-58e3-4259-aa4a-2ae286bddff8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952962cd-cae3-484c-b1ed-ea9e0c08b613", "sighting_of_ref": "indicator--d765b570-58e3-4259-aa4a-2ae286bddff8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dde1e47-53ac-4562-8129-a8f67f0cd49b", "sighting_of_ref": "indicator--d765b570-58e3-4259-aa4a-2ae286bddff8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f8510e-f87f-4d30-91f3-3f80257e7c01", "sighting_of_ref": "indicator--8febf4b0-e0ab-4139-b7cc-1fda53b929d2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1c741f-efb0-4a5b-83c6-2a14f4463adf", "sighting_of_ref": "indicator--fac20288-5e51-447b-9c66-3c48ff65b919", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a69f163e-8a30-462a-b222-ae8b8b9d422d", "sighting_of_ref": "indicator--b13add1a-c546-4c30-ad3b-14a434af7dee", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ddcf91-bfa4-4f6f-97fd-e41dbdea19ef", "sighting_of_ref": "indicator--abe60350-aac3-4d87-bc23-85232fa069a7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91b9e87-4930-4907-bf20-320c1ffe47ba", "sighting_of_ref": "indicator--31f8bcc2-93aa-40fb-973d-a6ed9b0f4a1e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d62e237-4e6b-4ef2-9a5d-c2e723c93bda", "sighting_of_ref": "indicator--31f8bcc2-93aa-40fb-973d-a6ed9b0f4a1e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60767a5c-3edf-4cca-81eb-030044da679f", "sighting_of_ref": "indicator--5ec3d4d6-4f10-4172-92d0-986da78129e4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a8f97cb-df85-4ff5-a9f8-b041907d95bc", "sighting_of_ref": "indicator--5ec3d4d6-4f10-4172-92d0-986da78129e4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e69d761-2297-4066-bc3d-053bcb077ea6", "sighting_of_ref": "indicator--aa730ecb-72d6-40dc-a4a2-8081f87f9639", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c17b8f8-88ec-4463-bd10-95e99dcfce0d", "sighting_of_ref": "indicator--b66c55af-1ebb-4e48-8da8-5e88687f2dab", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e670b0b-0521-432c-b571-2c25dd81b5fb", "sighting_of_ref": "indicator--b66c55af-1ebb-4e48-8da8-5e88687f2dab", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426b3318-7936-476c-8936-41be73481bdf", "sighting_of_ref": "indicator--7583f2cb-fede-4078-b166-cb926a83aa6e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eea3165-08c8-4002-b464-0bb4c3b36d47", "sighting_of_ref": "indicator--7583f2cb-fede-4078-b166-cb926a83aa6e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb72f27-8915-48c7-a6f7-5d713827c1c2", "sighting_of_ref": "indicator--f3d7b621-fdb2-4cf6-a85b-1858229d0b58", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79f50f1-be29-4a2f-9e29-be2ec5b450bd", "sighting_of_ref": "indicator--f3d7b621-fdb2-4cf6-a85b-1858229d0b58", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112552da-caf8-42b6-8f2d-2e112d0cd46b", "sighting_of_ref": "indicator--aff72092-a715-462a-80b7-85f0713fa6f0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144a9730-1011-424f-a18e-8f55856c00a8", "sighting_of_ref": "indicator--39a090a5-028b-45eb-8519-d0247045def5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9bbb97-9ff0-42e5-a4a6-d4d420cdb6c0", "sighting_of_ref": "indicator--39a090a5-028b-45eb-8519-d0247045def5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9e6698-ed75-4166-b978-ad171a4cbc30", "sighting_of_ref": "indicator--aa9a553a-c0b3-497a-b712-4b6545a10900", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19c3d91-46b4-4e00-bba7-59bb8477612c", "sighting_of_ref": "indicator--aa9a553a-c0b3-497a-b712-4b6545a10900", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7d5347-94f7-4f6f-916c-5054506cf43a", "sighting_of_ref": "indicator--2f9c55fb-645b-4826-8c75-ff4ee86e3d6b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c77b4bdf-98a6-4669-8237-07b2244f2c90", "sighting_of_ref": "indicator--2f9c55fb-645b-4826-8c75-ff4ee86e3d6b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511bcb2e-1ed8-4cef-97be-1d823a8b4a07", "sighting_of_ref": "indicator--c0f3a212-69bc-4a2f-8ed2-2b4a7993a0d7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be53d238-d699-4940-896e-2b9cf0cbca27", "sighting_of_ref": "indicator--c0f3a212-69bc-4a2f-8ed2-2b4a7993a0d7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1dbebf4-bb36-43b0-9ecd-1460e9dc6620", "sighting_of_ref": "indicator--c0f3a212-69bc-4a2f-8ed2-2b4a7993a0d7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053202ee-66a9-40d6-a6f2-c717bb953616", "sighting_of_ref": "indicator--4f92a7c7-cd9f-4540-8a8e-dac2c878d29b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2566e0e6-d3e4-4228-adbf-1b76be09ccfd", "sighting_of_ref": "indicator--4f92a7c7-cd9f-4540-8a8e-dac2c878d29b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df8e713-8804-4e69-8f62-69257124567b", "sighting_of_ref": "indicator--bd3e2ab9-4981-4a06-87a5-5e7cd661323b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea14e904-7a54-452e-a3db-459f9e4008b4", "sighting_of_ref": "indicator--d14a9743-3ec1-4e34-bc82-457528534d9a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6247c386-ea0b-4061-8bb0-24ce85258ac0", "sighting_of_ref": "indicator--d14a9743-3ec1-4e34-bc82-457528534d9a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46017cd2-bcf5-47b3-9e8d-c1cc59b52e85", "sighting_of_ref": "indicator--47f91610-8562-4ae8-9639-36fb5785e608", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a115ee67-cfbe-4b38-a692-8a514a1e3ef0", "sighting_of_ref": "indicator--47f91610-8562-4ae8-9639-36fb5785e608", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e8f7a85-d6a9-4a8d-b18f-6a1172b405c3", "sighting_of_ref": "indicator--ac3acc42-8e97-4f8f-9e07-3b24029be626", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a25ef768-39b9-4f15-a251-e639cb7d53f6", "sighting_of_ref": "indicator--d396f322-55ed-415a-9d34-61c94a228842", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9421325-a0b6-4077-a1a7-28f0235a7602", "sighting_of_ref": "indicator--d396f322-55ed-415a-9d34-61c94a228842", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fff17d7-9229-4cfa-96a9-591284f8fda6", "sighting_of_ref": "indicator--d396f322-55ed-415a-9d34-61c94a228842", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c0fd9f-b1c2-4e00-a8f9-101ce47155fb", "sighting_of_ref": "indicator--92622462-542a-48f5-85c9-9c89a1eb6f14", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b39bcda-7f1c-4ce2-b9b9-65473f463ab7", "sighting_of_ref": "indicator--cefcd1d4-ba30-4cda-824d-e461fd4b5ff5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b802f0f0-76b0-4a06-9afe-1670527577d9", "sighting_of_ref": "indicator--b1867044-c4c6-458a-9af3-bdab580c57c9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf5ae7c9-3545-4c1c-b5c1-05820f1aef2f", "sighting_of_ref": "indicator--b1867044-c4c6-458a-9af3-bdab580c57c9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc0e9f9-b82f-4b7c-aa7e-8274d86ed14e", "sighting_of_ref": "indicator--66a5b847-7599-4556-a98b-ec53a797942e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--152b648b-3d44-43b6-9157-ab43e86aac15", "sighting_of_ref": "indicator--66a5b847-7599-4556-a98b-ec53a797942e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea47f79-6631-4324-b77c-4adde9024671", "sighting_of_ref": "indicator--2e4c5740-1fd3-4651-9089-86358959021d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5460f4a9-c4ff-418c-b9d4-fd2a623f4df9", "sighting_of_ref": "indicator--2e4c5740-1fd3-4651-9089-86358959021d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2adf3048-ee58-41cd-bfcc-3ff5d2f596dd", "sighting_of_ref": "indicator--c1bc57fe-9993-4989-b69a-2bf2c1e11525", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac72c13-222e-4bf8-a729-87c0258401bc", "sighting_of_ref": "indicator--c1bc57fe-9993-4989-b69a-2bf2c1e11525", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eecd164f-0e27-473e-876a-c43746afab79", "sighting_of_ref": "indicator--15b9eb89-e8d3-4c05-86c2-80aa3266f797", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c854d5a4-0f36-4df0-bf79-881e640580bf", "sighting_of_ref": "indicator--15b9eb89-e8d3-4c05-86c2-80aa3266f797", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa01875-9739-4c7c-bfea-f5fcf1691acb", "sighting_of_ref": "indicator--69a03678-aaae-4ae1-bfc4-a67cad579765", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923c3903-bbe6-4345-8345-8927403b726e", "sighting_of_ref": "indicator--69a03678-aaae-4ae1-bfc4-a67cad579765", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c699a7-41fa-4ad9-92a9-a32eea8c3a50", "sighting_of_ref": "indicator--3d6c8edc-340b-4705-9cf3-5b11352ba952", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6103308-6c07-4c20-86f7-095b83eb4e2e", "sighting_of_ref": "indicator--3d6c8edc-340b-4705-9cf3-5b11352ba952", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b241e0f1-5a40-4379-af33-a1cd47f6c871", "sighting_of_ref": "indicator--fc778f07-2071-4b5f-b651-643390a456d0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc5842a7-1ff4-4659-91a9-b1b3942e8e1f", "sighting_of_ref": "indicator--fc778f07-2071-4b5f-b651-643390a456d0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4865584-ebe9-487c-9877-89d2b6928aaa", "sighting_of_ref": "indicator--4e6e6853-9f8f-412b-a45d-3e5c70994e22", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f23141-00c3-44ed-a4f5-4876e820e787", "sighting_of_ref": "indicator--7607716b-fa9c-4fe5-ab79-0d43dae06d66", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b01a66-db5f-4eec-b4d8-0578dc37348a", "sighting_of_ref": "indicator--d43b7e00-77d3-4b21-bda9-4a745dcb23ef", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b0406c-8061-45b0-9b3e-cb9f18f4f33c", "sighting_of_ref": "indicator--d43b7e00-77d3-4b21-bda9-4a745dcb23ef", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d601873d-4cb5-4f05-8d21-8628832e98e7", "sighting_of_ref": "indicator--b53de4da-d421-471c-af64-30f15bb4dd13", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9712d09-6a3e-4707-9eb1-abee56e341d7", "sighting_of_ref": "indicator--f9265978-30a0-476a-b3e0-0e5ea17d21e3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a853aba5-036f-45ad-ac86-0fe1659af8ee", "sighting_of_ref": "indicator--37e4b15f-797c-4d1a-9183-41416ad7a700", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88747404-56ee-4e28-9806-94cbddaf82bc", "sighting_of_ref": "indicator--37e4b15f-797c-4d1a-9183-41416ad7a700", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a3e0fb-0d7e-4f3d-9893-514c0a2cb45a", "sighting_of_ref": "indicator--ee458209-bd3c-4264-8a52-b3d605d97ce2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89fa0fb0-4828-49a9-8491-f58795a26454", "sighting_of_ref": "indicator--793104a2-01c5-4eb8-bd13-ef8e75260902", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e3b74e-b1ab-4f0d-bdd2-4036d74035c8", "sighting_of_ref": "indicator--793104a2-01c5-4eb8-bd13-ef8e75260902", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc807ece-2d76-4379-b6f7-3873418b5de3", "sighting_of_ref": "indicator--793104a2-01c5-4eb8-bd13-ef8e75260902", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba93588f-659b-45f0-b55d-3557c161b901", "sighting_of_ref": "indicator--f2425cf1-2fd2-4ec9-aecf-f013eec950c6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc0ce56-f6df-4acf-b4b8-730bf1490997", "sighting_of_ref": "indicator--249ef2da-5d6d-4dc8-9059-0c5e4d1016ec", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6d361a-f286-481d-97a1-8282b2d380fd", "sighting_of_ref": "indicator--249ef2da-5d6d-4dc8-9059-0c5e4d1016ec", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ba07a7-2ea4-4f50-b08f-c8dbe67eb4c7", "sighting_of_ref": "indicator--8733d1a2-c53d-4c00-9f98-991351dcf169", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2ac76f-15c8-46b2-bf9c-8e6604f99007", "sighting_of_ref": "indicator--8733d1a2-c53d-4c00-9f98-991351dcf169", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd8052d-9f08-4c12-a3ba-e36cb199467e", "sighting_of_ref": "indicator--8733d1a2-c53d-4c00-9f98-991351dcf169", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae0d7623-78fa-45c9-8b05-84b81cedaec0", "sighting_of_ref": "indicator--ec06d52a-bc51-4845-8989-9c5d7f61cc2e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1269fa-815e-45b5-ac15-414e22ef9a07", "sighting_of_ref": "indicator--ec06d52a-bc51-4845-8989-9c5d7f61cc2e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f33e4480-df71-4748-8a28-1f51168638a3", "sighting_of_ref": "indicator--a03b739e-bff3-4f64-a323-ad7a80ac951f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0ef836-e453-466d-8d9b-0f19d8fc9892", "sighting_of_ref": "indicator--33cd0dd5-4588-4307-b34c-332bd46d2d75", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35679f03-d5ed-42f8-bbf8-f033e712352b", "sighting_of_ref": "indicator--736fcf92-7746-4b0b-b2a8-cae99b51138e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633ef452-7268-4f11-9e3b-219517539a6c", "sighting_of_ref": "indicator--736fcf92-7746-4b0b-b2a8-cae99b51138e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0743d89-cfc3-46d4-a885-4d694bf76dab", "sighting_of_ref": "indicator--9b5acbaf-5c2d-45a8-9c76-35057403f9ed", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1172d0a7-833c-48b4-89ef-a0904d2bf5c5", "sighting_of_ref": "indicator--9b5acbaf-5c2d-45a8-9c76-35057403f9ed", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cfb8c76-3a75-4c41-92fe-6470f5117bcc", "sighting_of_ref": "indicator--99911489-c0a9-42d7-b2e3-ada4390a36d6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91a2665-31ca-4dbc-ad24-adc8640fbad2", "sighting_of_ref": "indicator--7f484370-1b24-4e11-9d96-dbc979cc33fb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b9c404-9658-42c3-8058-a1a249f860d3", "sighting_of_ref": "indicator--383aca78-a045-4574-9d15-9517e533ebfe", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0b4be8-519b-44ed-abe6-11282ca49c45", "sighting_of_ref": "indicator--383aca78-a045-4574-9d15-9517e533ebfe", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4efb1b7-2ded-4278-9596-befd8a872ca3", "sighting_of_ref": "indicator--28960268-eec8-4a3f-a874-7b9f24e72ea7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0605d4-d6c8-466e-a2f9-79ee0be8d034", "sighting_of_ref": "indicator--66ecd1eb-332c-4a51-87cc-fa82a18c24ad", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58021f98-9de3-4d90-ace0-36053a317647", "sighting_of_ref": "indicator--b660be67-c23b-4bcf-8b36-5ad4bd4788d6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1838eea-8bc0-44f9-b1b1-54cb0ad56868", "sighting_of_ref": "indicator--5687e6a8-42f5-46e2-ab55-ffc40859ffd7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0381c20b-eb12-4ff6-a1c3-0b2767dffe95", "sighting_of_ref": "indicator--5687e6a8-42f5-46e2-ab55-ffc40859ffd7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76f7c2f-e6fc-42d4-b153-0c8f7d7d212e", "sighting_of_ref": "indicator--975112fa-8c03-47db-b34b-3a999bcfd19d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68632914-9e61-4f22-b7ab-db9e2fe8b6f2", "sighting_of_ref": "indicator--975112fa-8c03-47db-b34b-3a999bcfd19d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02baf37-257d-4fe5-885c-c8f8e2194eae", "sighting_of_ref": "indicator--3f82b539-490c-4bd8-888d-423100f8ac2c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8472393-da33-4fe2-b95a-096cf97b4096", "sighting_of_ref": "indicator--d5630e87-401b-4c8d-a8af-b6806a382dab", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a4c86d-d1ac-4a1e-9401-9fb59151e0ea", "sighting_of_ref": "indicator--d5630e87-401b-4c8d-a8af-b6806a382dab", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65dc271c-d065-4506-b7db-2e033e9845f4", "sighting_of_ref": "indicator--8701759d-40e7-43fd-9b75-c0d1653e3784", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52412214-da85-48a0-b897-d6c99b3881ac", "sighting_of_ref": "indicator--8701759d-40e7-43fd-9b75-c0d1653e3784", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d262cdeb-f083-48c4-9c75-5203c9c4b4b9", "sighting_of_ref": "indicator--1b109e0f-4256-435e-b870-a73356a44d7f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb60472-918c-42bb-b4b0-67dbd4188425", "sighting_of_ref": "indicator--1b109e0f-4256-435e-b870-a73356a44d7f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9bcad32-79a7-4c74-a6a0-ff4164336e06", "sighting_of_ref": "indicator--88d530c3-06d3-442c-b59e-d57f18c776ad", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe674db-e3bd-4fa2-91e5-01b8f822e7fd", "sighting_of_ref": "indicator--88d530c3-06d3-442c-b59e-d57f18c776ad", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073cda60-97d1-49cc-8390-0bdc202de5e9", "sighting_of_ref": "indicator--18662e10-bb50-42e2-b149-98ed035c7b9e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b43afaa-2b86-4df7-9be7-6b91bc756873", "sighting_of_ref": "indicator--18662e10-bb50-42e2-b149-98ed035c7b9e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2965c4-531f-4cc5-a004-9fa2d0d99f09", "sighting_of_ref": "indicator--1a7df22f-afd8-465d-ae1b-6bb59ffe8845", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97998df6-34e0-41aa-bd99-443a11955662", "sighting_of_ref": "indicator--1a7df22f-afd8-465d-ae1b-6bb59ffe8845", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a759b3-7aea-4ae3-8b99-428d40e4890f", "sighting_of_ref": "indicator--1a7df22f-afd8-465d-ae1b-6bb59ffe8845", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f599eb-8591-4aab-a751-94e3b905818c", "sighting_of_ref": "indicator--ca22c091-b507-401b-8c68-de00db0afeaa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60e8f73-769e-4389-af58-4a9f73c7d1fe", "sighting_of_ref": "indicator--672ca9e7-8f8e-4de5-98e2-98ca401bd58b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d541367-f0b1-49db-819f-a203912e35d2", "sighting_of_ref": "indicator--c4c0d371-9ba7-4f73-a503-13f3489debd2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34128a91-3d51-455e-8e89-0275e1c9b6b5", "sighting_of_ref": "indicator--4621b4a9-1a6c-4f36-ad43-a22e1d6a2f37", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf652e8-0832-4b9f-94ee-fd08dd69fb7c", "sighting_of_ref": "indicator--166b1261-080a-4544-85b3-e71e09752784", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f3b6fc-a951-463e-9b51-32cd9908f155", "sighting_of_ref": "indicator--166b1261-080a-4544-85b3-e71e09752784", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae3edd2-6856-41a7-97d0-ea9c6a51b9cb", "sighting_of_ref": "indicator--e22bd0fa-f74a-4bd8-b032-8cedbe1cbea8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc506234-6ca8-4bf7-9564-7d6b81faa923", "sighting_of_ref": "indicator--294a9f06-14a5-4a0b-8e62-14dae54854ac", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8346d6-4817-48b9-82a0-c46474fe3286", "sighting_of_ref": "indicator--294a9f06-14a5-4a0b-8e62-14dae54854ac", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b414183f-4aff-47ca-8d6a-9691865404e6", "sighting_of_ref": "indicator--69c9a028-e211-43fd-abc7-505e32a2948c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a43f9b6-7b2c-4dc2-996c-420198bbe0ee", "sighting_of_ref": "indicator--69c9a028-e211-43fd-abc7-505e32a2948c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5964ce0-aecd-4072-9519-815a7543ac5f", "sighting_of_ref": "indicator--37199393-c7d6-4186-942e-1dcf4a2ec3c9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a2b0f6c-b7cb-4667-94d2-608aa3f6afc5", "sighting_of_ref": "indicator--adf615dc-8137-400b-95d9-8ec897bca761", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e6147b-cd96-4acf-a389-eacd9ea440f7", "sighting_of_ref": "indicator--a30f1e8a-f1e7-4887-99c4-7ddcbad0242e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0690329c-2366-42e5-98dd-575485ed3468", "sighting_of_ref": "indicator--f1ef8e19-72f8-4a20-b7b1-c5df46d4bc55", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f94867-16ab-4534-8045-24961c2c1ec6", "sighting_of_ref": "indicator--f1ef8e19-72f8-4a20-b7b1-c5df46d4bc55", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7916836-9e2d-4171-99b8-b59f9106e351", "sighting_of_ref": "indicator--f1ef8e19-72f8-4a20-b7b1-c5df46d4bc55", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9ea665-ef8f-48b4-b442-a72dfea1d7e9", "sighting_of_ref": "indicator--899382c2-7c90-4bef-aed6-3d16b853cc07", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--895872b4-2f7f-46be-8121-fab0d077cf05", "sighting_of_ref": "indicator--699a91e8-1efa-481e-98c4-7b33ed8b5427", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8afd3f7-afa2-42ed-8bd3-8111204d132d", "sighting_of_ref": "indicator--699a91e8-1efa-481e-98c4-7b33ed8b5427", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a17111-7f50-4687-8716-7186bfed8e11", "sighting_of_ref": "indicator--699a91e8-1efa-481e-98c4-7b33ed8b5427", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0046d43c-1cbb-417d-b395-7bf7a1f7cf46", "sighting_of_ref": "indicator--dace14ef-845e-400f-9033-76c4a344fb1e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4b6f13-685d-42dd-9914-e1336827a5b5", "sighting_of_ref": "indicator--68cef43a-fac4-43b3-9ab4-76c5e26f82e1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--480d972f-57e5-4f57-a7af-a8392dfa89d4", "sighting_of_ref": "indicator--68cef43a-fac4-43b3-9ab4-76c5e26f82e1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--347c3a5d-85c6-4621-99cb-0e342b21bdd1", "sighting_of_ref": "indicator--68cef43a-fac4-43b3-9ab4-76c5e26f82e1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f255ae3-ca2a-487c-848f-bdc2f5524930", "sighting_of_ref": "indicator--907b109d-8d56-4794-9053-ad7ecdd0efbf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2394ca0f-ab5a-4716-89ac-c3b7b4111dbb", "sighting_of_ref": "indicator--312c08ae-bb8d-4aee-bcdf-143d63ef8f6b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a600cad6-4eb5-4c82-9fb2-ff20ac7af66c", "sighting_of_ref": "indicator--c292b843-e949-4ee6-a51c-65d426e25187", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f132e4f1-80d2-4c7b-9b94-1c999eb608cf", "sighting_of_ref": "indicator--c292b843-e949-4ee6-a51c-65d426e25187", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77598a3e-f845-4326-8750-34e25d613d37", "sighting_of_ref": "indicator--c292b843-e949-4ee6-a51c-65d426e25187", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--278f9f9a-db45-400a-8328-f5cefa75c351", "sighting_of_ref": "indicator--9fc307f8-9d5d-4d27-ade5-a5bdbd3cb635", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc68284-4474-487e-9ac4-c311cc178aab", "sighting_of_ref": "indicator--9fc307f8-9d5d-4d27-ade5-a5bdbd3cb635", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b781e979-6ab1-420c-b0c2-21239459ac23", "sighting_of_ref": "indicator--9fc307f8-9d5d-4d27-ade5-a5bdbd3cb635", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10ac9ca-cdbd-4739-9804-a15fa90b7ce9", "sighting_of_ref": "indicator--48f246d0-5a12-4e34-8bdb-4f2de6a2c220", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--607b2cc0-6ccd-461b-8a48-0abc1dc00228", "sighting_of_ref": "indicator--48f246d0-5a12-4e34-8bdb-4f2de6a2c220", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08def03e-c52a-438c-b110-9fc30ade95b7", "sighting_of_ref": "indicator--48f246d0-5a12-4e34-8bdb-4f2de6a2c220", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a8892d-1859-4ed9-b142-43f376fa7e0c", "sighting_of_ref": "indicator--071713ea-5541-47b3-9f4b-c46f845ed136", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64adbb36-5075-4738-926d-645edc117b49", "sighting_of_ref": "indicator--4d0e599b-a089-4d09-9d05-e18d65d60e5b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc162487-5146-47c9-8e78-1261b83c036c", "sighting_of_ref": "indicator--b1f70e59-fbfe-4991-953f-3ff8a0173b37", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8844641d-9c63-471b-879b-6eb7a53d0cc6", "sighting_of_ref": "indicator--4cccdd9b-c159-49e2-9bd0-ef8abe03ce79", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1071edca-14b3-4836-ab47-5454d18434b3", "sighting_of_ref": "indicator--faf6b515-7801-487a-b159-728c0e2134ea", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc2ab446-ee07-4349-8e88-2a74e76ad652", "sighting_of_ref": "indicator--faf6b515-7801-487a-b159-728c0e2134ea", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c8551f-6f45-40b7-ba24-939a06feb639", "sighting_of_ref": "indicator--faf6b515-7801-487a-b159-728c0e2134ea", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b138b2-3ddc-4c11-bb58-3555bee5b257", "sighting_of_ref": "indicator--ae6f600e-b2bd-4625-a232-a40389470e8f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee65808-2293-492a-a274-3176e5d89ce5", "sighting_of_ref": "indicator--3c77b45b-57d1-4078-bc68-ca6a2cb46a2a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972b18d0-2707-4904-81eb-d79384dd6e39", "sighting_of_ref": "indicator--3c77b45b-57d1-4078-bc68-ca6a2cb46a2a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842f1aa0-0f5e-446e-a6fa-1c9794e65471", "sighting_of_ref": "indicator--339ac44b-2f03-4c82-be0d-cecdb5ef180d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba40b845-a047-40ae-be75-38479c5c7583", "sighting_of_ref": "indicator--339ac44b-2f03-4c82-be0d-cecdb5ef180d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f224ebcb-64f5-445d-8e4c-b1e971e1a43a", "sighting_of_ref": "indicator--872705da-498f-4b88-b32f-f02ab8f081fb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e27bd353-8de7-4dc2-93ba-d4e155c50bd1", "sighting_of_ref": "indicator--dd59b8b6-f638-4417-8905-fa9e9156db97", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d782e019-06a4-416c-a211-787914d5a279", "sighting_of_ref": "indicator--912cff23-421b-4c5f-b0d9-f7da95553ca2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dcbe4ad-9aee-4615-9975-542d566deb43", "sighting_of_ref": "indicator--9a814652-4ca1-411d-974d-15aa20a52976", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3422da0-d5bb-48e8-9900-5bbaf9f8df6e", "sighting_of_ref": "indicator--9c735fd9-ea73-4235-a415-0a0acff0d104", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e2d9fa-0089-4593-8b2a-007fd69cb89e", "sighting_of_ref": "indicator--a5e40648-b3af-44b0-9a5b-017a44d0a8af", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3097545d-be3d-4d23-8b52-b59a07304994", "sighting_of_ref": "indicator--a5e40648-b3af-44b0-9a5b-017a44d0a8af", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e9bf7b-fd63-4d6a-a432-a6c64f2105d8", "sighting_of_ref": "indicator--a5e40648-b3af-44b0-9a5b-017a44d0a8af", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d5e1a5-ea0b-476a-8ea5-176609530c84", "sighting_of_ref": "indicator--9f7f00a8-9d52-4b22-89aa-1bebc910bb8a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62487eab-69e9-41d0-b3cd-78b4b3dbc1ec", "sighting_of_ref": "indicator--9f7f00a8-9d52-4b22-89aa-1bebc910bb8a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5004e10-f874-405f-988c-a58136f0c6f8", "sighting_of_ref": "indicator--9f7f00a8-9d52-4b22-89aa-1bebc910bb8a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8df3ac6-c7ef-4e8e-b5c4-258c81c0ef65", "sighting_of_ref": "indicator--12ff4495-95c3-4a62-9b8f-4a0f48768e90", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--637b1dc9-71f8-4ab2-86e9-a146c82d8762", "sighting_of_ref": "indicator--12ff4495-95c3-4a62-9b8f-4a0f48768e90", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14ec7e6-db88-4041-9b32-6f17efc47b3a", "sighting_of_ref": "indicator--12ff4495-95c3-4a62-9b8f-4a0f48768e90", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d1a654-b617-4f33-ba68-2fa6dce7e44c", "sighting_of_ref": "indicator--d1d2738e-5856-44fc-b392-c1f5bd07eacf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41026d5c-a519-4bce-ab08-f9376bc37901", "sighting_of_ref": "indicator--d1d2738e-5856-44fc-b392-c1f5bd07eacf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef8c9de-675c-471f-ab22-60b99ce8d89e", "sighting_of_ref": "indicator--d1d2738e-5856-44fc-b392-c1f5bd07eacf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b21b37c-fd77-4d31-8363-61a1eab5674c", "sighting_of_ref": "indicator--c8ae5bd1-4184-446b-8731-20ea1dbc0dea", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--352ca554-b8e9-4649-b67b-87c2c55ce08d", "sighting_of_ref": "indicator--c8ae5bd1-4184-446b-8731-20ea1dbc0dea", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d1d07a-9d17-4764-ba25-a708bd937e8f", "sighting_of_ref": "indicator--c8ae5bd1-4184-446b-8731-20ea1dbc0dea", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e47eff-da80-40c4-a08a-6e9c21a870a9", "sighting_of_ref": "indicator--89373530-e65c-4d18-857e-bab5a9204234", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574ec8fe-7b76-4fcc-8237-d5f3e3998e8b", "sighting_of_ref": "indicator--89373530-e65c-4d18-857e-bab5a9204234", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643a78f5-4e50-419d-becc-3bd58f8095e4", "sighting_of_ref": "indicator--89373530-e65c-4d18-857e-bab5a9204234", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019f180b-1abf-49d1-a578-d3f5ad10b6f2", "sighting_of_ref": "indicator--b2e095d6-6651-4d1e-8e3f-70fa979934e4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e296b8e-62f3-4e90-ae39-05684224e792", "sighting_of_ref": "indicator--b2e095d6-6651-4d1e-8e3f-70fa979934e4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3673b87-ae4d-4910-8472-c60d7a583fbb", "sighting_of_ref": "indicator--b2e095d6-6651-4d1e-8e3f-70fa979934e4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f33a25f4-a419-40e8-8f4d-6f07353f05dc", "sighting_of_ref": "indicator--12f24ec9-11ea-453a-af0a-a2729b21caef", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e372d98b-dc5b-4cfd-8696-876f2f0e02bf", "sighting_of_ref": "indicator--12f24ec9-11ea-453a-af0a-a2729b21caef", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff766e9b-b884-466f-8971-1c211c816296", "sighting_of_ref": "indicator--12f24ec9-11ea-453a-af0a-a2729b21caef", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad97190b-7c6a-4828-bb8e-f7514fe8fc62", "sighting_of_ref": "indicator--ed0a40db-92f7-4e7d-9106-d23c6c3acfbe", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67adb595-e29c-42f4-8d6c-70409f42e630", "sighting_of_ref": "indicator--ed0a40db-92f7-4e7d-9106-d23c6c3acfbe", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b875a86c-72d6-4d24-b236-716f071a7a02", "sighting_of_ref": "indicator--ed0a40db-92f7-4e7d-9106-d23c6c3acfbe", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5737fa35-8876-4e37-ae50-e4724908caf9", "sighting_of_ref": "indicator--499f4b2b-c6c1-44be-b2b8-b41662131d65", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--892e1213-7f87-4cc2-9581-031b02c7e563", "sighting_of_ref": "indicator--499f4b2b-c6c1-44be-b2b8-b41662131d65", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af5b8f1a-3953-423c-93d0-8669267be94a", "sighting_of_ref": "indicator--499f4b2b-c6c1-44be-b2b8-b41662131d65", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55315a3-9202-4ccc-a602-35080b912e31", "sighting_of_ref": "indicator--1690cf12-8787-4c4a-9604-24da548e42d7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db5bc1b4-9542-4331-88ab-5a2ed9202b63", "sighting_of_ref": "indicator--1690cf12-8787-4c4a-9604-24da548e42d7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6075fccb-beda-4794-9f1e-3b20430810c0", "sighting_of_ref": "indicator--1690cf12-8787-4c4a-9604-24da548e42d7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f96b79f-c2c9-4c42-803e-956501fab836", "sighting_of_ref": "indicator--69e472dc-ab94-44c7-a6fb-d3088466e177", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--121a77e3-1e7e-4f40-8c52-3214639da039", "sighting_of_ref": "indicator--69e472dc-ab94-44c7-a6fb-d3088466e177", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e118e211-020d-44cd-8b7d-40ff68751a88", "sighting_of_ref": "indicator--f97788f7-5189-449e-bb5a-4002d9a71582", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904624fd-e2d2-4614-afd6-9740226ded0a", "sighting_of_ref": "indicator--f97788f7-5189-449e-bb5a-4002d9a71582", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a1b5d1-735d-48ca-886e-4738c33fc24c", "sighting_of_ref": "indicator--f97788f7-5189-449e-bb5a-4002d9a71582", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fefa370c-f068-482f-81d5-4b4324969bc9", "sighting_of_ref": "indicator--ec6b2f6f-c77a-41d8-96b2-62c78dea4b54", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e8c3179-033f-4cb9-b5b8-676c5ad98fc7", "sighting_of_ref": "indicator--ec6b2f6f-c77a-41d8-96b2-62c78dea4b54", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b068c7d-6756-4c7a-8a3a-560408cfc0f0", "sighting_of_ref": "indicator--ec6b2f6f-c77a-41d8-96b2-62c78dea4b54", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487b8a68-789a-4a91-9494-fc91ea919182", "sighting_of_ref": "indicator--f6ead20d-5d03-4c5f-8ecc-dbb6167fa60f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f169bb1c-4e46-435e-9dd3-c27029672a69", "sighting_of_ref": "indicator--f6ead20d-5d03-4c5f-8ecc-dbb6167fa60f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd0d01e8-badc-4f5f-8fb0-c46b3d3bd8b2", "sighting_of_ref": "indicator--b81e1564-d8bc-428f-9c15-4dc88db87585", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d976f0c0-6234-4b70-bb3c-7e1510ca3faf", "sighting_of_ref": "indicator--b81e1564-d8bc-428f-9c15-4dc88db87585", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26fa9f36-fc30-40b5-9863-3e64d89c1064", "sighting_of_ref": "indicator--b81e1564-d8bc-428f-9c15-4dc88db87585", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb0e66e-ea7d-401d-837e-e2500e423406", "sighting_of_ref": "indicator--27f319ce-9d87-4cac-8278-d6dc9b1ff84d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ebdc13-f54f-4efc-bd34-25cd685815e0", "sighting_of_ref": "indicator--27f319ce-9d87-4cac-8278-d6dc9b1ff84d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745f9fb1-0543-4866-b231-dbdffed7c9ea", "sighting_of_ref": "indicator--64745908-dd9a-4218-b2a9-bfc5ac922a8c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a372d0c2-7fad-41ab-afe7-0a196051eb5b", "sighting_of_ref": "indicator--f8e6b3c4-e60b-4da4-834b-d6531474381b", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df079ca4-ce65-493a-8f2f-c7e1cda1e559", "sighting_of_ref": "indicator--0691341d-ac05-4054-8588-ca697c993cea", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e0d2df-a3a2-4085-ab7c-a593c4a84a78", "sighting_of_ref": "indicator--b7633c4b-a6ca-4219-9fa0-5f74c2c1a751", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf57cad0-7698-4707-90ce-94de5752300f", "sighting_of_ref": "indicator--611c8501-7dd8-43e6-9b95-2e9a74be866e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5a643a-9fbb-415a-9560-4ade993a13e3", "sighting_of_ref": "indicator--8e7231cd-d14d-4def-a07c-edf3acec85db", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f56583e-5a0c-43c5-b2cb-1a99f7221496", "sighting_of_ref": "indicator--8e7231cd-d14d-4def-a07c-edf3acec85db", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e6d6f4-56f3-4a9f-b672-279264258605", "sighting_of_ref": "indicator--7ca9f918-22a4-4838-a9ad-0c81e4204476", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d8f8463-29b8-48ba-af63-a8ecb1ca2961", "sighting_of_ref": "indicator--7ca9f918-22a4-4838-a9ad-0c81e4204476", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902cbc3a-55c5-42bf-9197-c99b087daead", "sighting_of_ref": "indicator--7ca9f918-22a4-4838-a9ad-0c81e4204476", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c72499-e5ac-40a3-968d-d98a62fcd3c9", "sighting_of_ref": "indicator--7ca9f918-22a4-4838-a9ad-0c81e4204476", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e39067-f730-4637-a2fb-0b2ecc4d7f60", "sighting_of_ref": "indicator--fe1b5e7b-12c8-40f4-bcd0-54194c93edf2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e50db68-f311-443d-b3a5-201921818072", "sighting_of_ref": "indicator--fe1b5e7b-12c8-40f4-bcd0-54194c93edf2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1e6674-86d7-438c-a548-44e463ffb2d4", "sighting_of_ref": "indicator--fe1b5e7b-12c8-40f4-bcd0-54194c93edf2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6457ff44-126f-4eba-9ea8-281c8a710366", "sighting_of_ref": "indicator--fe1b5e7b-12c8-40f4-bcd0-54194c93edf2", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fecc3854-f5e8-4b37-8507-edbe4c6bb6d5", "sighting_of_ref": "indicator--199cb6fa-ccf0-45a4-bbe7-4d6eec6cf04f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c167646d-e4fc-491d-b01e-fe30c47f6991", "sighting_of_ref": "indicator--1156b96e-501f-4eba-b370-a4508b1f48df", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dfef8a3-ab3c-43b8-9048-0a2447f2ff22", "sighting_of_ref": "indicator--1156b96e-501f-4eba-b370-a4508b1f48df", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c783c365-17c9-4222-bde1-1b2838e9f99f", "sighting_of_ref": "indicator--1156b96e-501f-4eba-b370-a4508b1f48df", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf865a21-e5e7-4b06-93d9-8d46beefd7e8", "sighting_of_ref": "indicator--1156b96e-501f-4eba-b370-a4508b1f48df", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d2e5543-a4bd-4cd7-9292-692d5893d6ef", "sighting_of_ref": "indicator--3f8d87e3-3960-4f40-8f82-c1009558c639", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6827af67-799c-4ee6-a78e-0642a1021515", "sighting_of_ref": "indicator--7dde3d77-c9de-4e64-baff-11f092a3eb97", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a555a94-505d-42d2-842d-b0149cf41465", "sighting_of_ref": "indicator--6001c07d-ccec-4eab-9a8f-d0a7531f26c6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566a5fb5-74c1-438a-bb50-4545dd862125", "sighting_of_ref": "indicator--08323a5e-0adb-4145-903a-41c61f06008b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e8d542-a437-41b2-9341-81e16d43e18a", "sighting_of_ref": "indicator--f2f61eef-6e8b-44ed-ba68-7c6bca80bf39", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58827ae5-4cb5-4fee-b48e-9c6382efb38a", "sighting_of_ref": "indicator--f9119ee2-e69e-4621-b0c8-9bdb63bdc6aa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b13a8fe-9037-4f76-ba8d-536b3d6101a1", "sighting_of_ref": "indicator--53de5b84-838c-497c-9c08-85fe13a222b9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8a41c71-7742-435f-b212-79c426678195", "sighting_of_ref": "indicator--7ef4ae1b-af06-4b8f-b3ae-d7b8549cb2c7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc2b564-3612-4a34-963d-ddebde46ab81", "sighting_of_ref": "indicator--f7c614f1-9793-4570-a3c3-97f0a25318da", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9bf6db-d276-439f-991c-2d2ffe4112cc", "sighting_of_ref": "indicator--5c9a0f58-0a7b-4d24-b378-369661b32400", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd096db-4955-4a58-a580-69eab7fda542", "sighting_of_ref": "indicator--995e5a8a-843c-4e13-8717-ad8a1ea48573", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d60c6c85-f0aa-4e94-beb6-d01df52f3015", "sighting_of_ref": "indicator--32aa5975-6ac4-4dec-8586-bebf66498b04", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4050c258-8696-458f-b008-fc25adcd329a", "sighting_of_ref": "indicator--0f43e641-bcec-4ffd-bfcd-b73490baa4e3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6afe02d-57cd-4b8f-86da-cf83879c7349", "sighting_of_ref": "indicator--c4048427-c447-4687-8a10-b5d311d15006", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddfbb412-9879-4d44-aab2-1fe55ebe5d5b", "sighting_of_ref": "indicator--8530aa69-ad3c-46e3-8ab5-2cde32bff6af", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9479e527-1a6e-421d-a9a0-ef6cc7a6d011", "sighting_of_ref": "indicator--e9a90aa4-9ac8-44d8-b26d-92bc17cb5e5d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f2ce43-061c-4f75-9627-fc8fa69bc76b", "sighting_of_ref": "indicator--ff5d8162-81a9-4818-8b0a-f2bf167725ba", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d93d55c-9829-459c-b1c7-8fe223b9f4db", "sighting_of_ref": "indicator--b7810792-f17e-45ae-af79-ee4fbcf3ea95", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9459ccf-6b71-45ca-baf4-6dbc380763f0", "sighting_of_ref": "indicator--e3609b9b-8907-4b90-a79b-daf74f39cb78", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba1071d-cd8c-4900-ab6e-ef3cc513721d", "sighting_of_ref": "indicator--fe3cccd8-40f7-45fa-b4dd-cd2afc271f62", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f056b6-8595-48c4-970e-80008642653c", "sighting_of_ref": "indicator--0ede7111-29fc-43a5-92bd-7d503ee6900e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42e3cef-751a-4034-9c90-055b00d695bb", "sighting_of_ref": "indicator--5c3c7e21-7be9-4c67-a9ab-d4ac6d1eb39f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed2f064-0565-48ad-b0b7-d16b47cb4261", "sighting_of_ref": "indicator--756dd8d9-d3a2-49eb-a3f3-bb8d14765392", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8cb0a79-d3e8-4fee-bb3b-5f953ea6c6ea", "sighting_of_ref": "indicator--6684a22a-6bda-414a-ac9d-6b1fc43cb173", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4ca586-b8ce-4ec5-869e-6d66413ebdf0", "sighting_of_ref": "indicator--b28beaa3-5fdc-4fd7-ac5a-762081358b53", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d2185ad-6f86-4ae3-bd86-fe29628ebd5c", "sighting_of_ref": "indicator--b28beaa3-5fdc-4fd7-ac5a-762081358b53", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe63e9e-f1c2-4c53-930c-f69098fcc644", "sighting_of_ref": "indicator--84ff90dc-6a14-45c9-b25a-e77b15b55496", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162584f5-1427-46ad-bfc9-d7a0410be0f8", "sighting_of_ref": "indicator--ae8d8384-3464-4438-8bd3-6230e799753e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f06994b-0ce1-4341-a1bf-14c25993776b", "sighting_of_ref": "indicator--b9943a50-ce55-4387-bbe9-5ef7e6a8c7a9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5effb71-5aff-4932-8b37-8fbfd3b25701", "sighting_of_ref": "indicator--fac0a65a-03c6-4b55-bc63-eab66e104091", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b105d9-327e-4284-bb6a-7c477236f588", "sighting_of_ref": "indicator--aa40ed3c-6aaf-4886-bd11-2f8f26b95424", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f1b39a-27fa-4b7a-8d9b-79a5aa552bcc", "sighting_of_ref": "indicator--20248396-becf-438f-85db-c6989bb9a817", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bab7136-60b8-4bd6-b1f4-5d63c8df27b2", "sighting_of_ref": "indicator--3ee6837a-4e95-4590-a846-dde83d1da216", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--912d53fb-2a28-4cc1-a23f-8fb14a175a2b", "sighting_of_ref": "indicator--ea697d01-17af-4068-a9ee-63703bfbee4e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4661274d-8587-402d-b888-9555d910fbbc", "sighting_of_ref": "indicator--dd9e9534-5581-4e9b-b7dc-a55f5b8ad69f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9babfe18-dddf-40d4-812c-512d1ac2c39b", "sighting_of_ref": "indicator--3dfcd4e1-047b-4ecc-a316-0283d2916946", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b226d5-0b19-45b0-8c0e-f399ce8e925e", "sighting_of_ref": "indicator--b4e503ae-e1aa-47b2-92f0-c674af1e51b8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac0880c-99c7-4b65-97d9-c34a0b1e0b45", "sighting_of_ref": "indicator--ca27343b-556e-4c8c-b054-7ede9e4cf7f1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5ce6fb-534f-4a81-96e8-1dcd3a781da9", "sighting_of_ref": "indicator--4d47eb52-7367-464e-b366-063ff8cc111a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525d15f2-5387-44b0-b2c3-bd54c9cda060", "sighting_of_ref": "indicator--9644ad12-06e3-4a73-800f-71fa099cf528", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b27323-439c-496e-8409-8286fbe90ae8", "sighting_of_ref": "indicator--3febc8de-1597-4342-9ac4-4189e2e17a5b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add65e4f-b095-483f-842e-94a9159c5c7f", "sighting_of_ref": "indicator--f1f59c11-e59a-491f-963c-30e8f1324249", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0490574-d771-417b-b491-9e1a57d90914", "sighting_of_ref": "indicator--86fd754d-3475-4dee-a27f-dcf6e3009f70", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbcda75-a005-4a6a-98f0-216446c2c191", "sighting_of_ref": "indicator--86fd754d-3475-4dee-a27f-dcf6e3009f70", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e3f114-2ed0-43df-b279-dafc51a284d4", "sighting_of_ref": "indicator--525c198b-31ba-41d9-adcf-3ef33f31fd1f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec4ecab-f2b7-4106-8d97-7c12c3ed4d4a", "sighting_of_ref": "indicator--d7523412-c6af-4c08-982d-134351198c8c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--482901ca-80ef-4dcc-88aa-e18d9d4c8054", "sighting_of_ref": "indicator--d7523412-c6af-4c08-982d-134351198c8c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ec7f8f-40ed-4dcc-bcf6-7728b36cf106", "sighting_of_ref": "indicator--37847b52-8e6a-4653-84e6-ad93172bdd70", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a94e4e0e-55ca-4197-8b69-9e4429c8e7bc", "sighting_of_ref": "indicator--9f019608-1a92-4f98-a81c-f9e3277eaad8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d21f78-41b5-453d-a5b2-66c87754f49a", "sighting_of_ref": "indicator--b40d5318-96a4-4ab1-b9e8-3056f64a9d68", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88cab4c4-f4c5-4e3c-b15f-fc41d1a25503", "sighting_of_ref": "indicator--fbc8c851-353b-43cf-82e1-37dcab411e5d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--027bebeb-7e81-4f98-bff8-7b2336e5dfaa", "sighting_of_ref": "indicator--2b8b5b8b-b4fb-4743-9a1c-d44a0197b7e9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097e30b1-b585-4982-a96e-1e02bfb34324", "sighting_of_ref": "indicator--ebcdf147-9825-4265-b647-33224e126082", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b3ab91-a7bd-4be9-b281-a7ce5e7b05a5", "sighting_of_ref": "indicator--29265594-82e1-4791-8bf6-fc585e715284", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f4d06a-cd5a-4a04-b0bf-2ae123bece29", "sighting_of_ref": "indicator--29265594-82e1-4791-8bf6-fc585e715284", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f953a7c-9302-4c8d-a8f2-9859e2ed88b1", "sighting_of_ref": "indicator--4dc09b48-1ba2-449d-b662-ec4813ce7972", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66452746-01b1-427a-b451-7ce1d3ebc4ab", "sighting_of_ref": "indicator--f5545696-18d1-4492-b35e-8374e8f751d5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be22324-11c1-4e0b-81ed-18c03f35fa93", "sighting_of_ref": "indicator--637e6df8-cab8-4643-b577-97750fa7d09e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bccb28ba-7733-4890-8411-c5ec97b1c1ef", "sighting_of_ref": "indicator--b8d2c22a-fc16-4c66-b823-26b4565c864a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f000dc99-ec72-4fc4-a095-ffe873a353a6", "sighting_of_ref": "indicator--9d49b39e-d805-4153-8640-a2aa929c44eb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a1cb01-e974-4bf6-9a9b-033d0431053a", "sighting_of_ref": "indicator--9d49b39e-d805-4153-8640-a2aa929c44eb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b685a5c0-32d3-48a9-a394-67d6db8573e3", "sighting_of_ref": "indicator--64139875-d728-402e-a6d7-4bf973288277", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69420bd5-7f1f-4fa4-9910-bec30f3225b3", "sighting_of_ref": "indicator--8f2aed4d-018f-44f2-b778-16fe55d86792", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc602c6-36d3-46d2-bada-8955188e13cf", "sighting_of_ref": "indicator--6dfb8d22-85c7-4647-abce-c9197727cd42", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9d8abf7-5b28-4cae-b42b-9fe1f253f7bd", "sighting_of_ref": "indicator--3e156069-2601-4f49-8faa-40ebdd44fd65", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ef295f-aece-4bcf-aeb5-ace32e84fcdd", "sighting_of_ref": "indicator--ea6fbbc6-9487-4d21-b300-3fdf42946d67", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d99c35-cf9a-49d8-8d09-799ad4b8a8b6", "sighting_of_ref": "indicator--ea6fbbc6-9487-4d21-b300-3fdf42946d67", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4abd0e52-f0dd-4e57-864d-5ed7679d29c9", "sighting_of_ref": "indicator--302064a3-3407-4c4d-9459-aa827eb05d5c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5be1c94-23d3-416e-8157-87aced1052ae", "sighting_of_ref": "indicator--4c065c9c-9324-4965-84d8-c2418c7062e1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfbb20f9-31d3-4dc7-bf3c-e9d354976f3c", "sighting_of_ref": "indicator--c508a706-3a27-49b4-a901-286d2178143a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a702334c-f46c-4da3-ae4c-cb7d6252adf6", "sighting_of_ref": "indicator--3477bf3d-4ee1-4db8-a3e1-fb0e8545129a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526193fa-1e02-4080-abb3-fd5f6a7fe35b", "sighting_of_ref": "indicator--ecea6e67-b895-49e5-aa02-de78236424b3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23952672-6094-4bbb-8a62-a0034ec7b19f", "sighting_of_ref": "indicator--6864c088-c2c7-45d0-a890-b49fe42a2068", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7fdd35f-938b-4fca-8348-7a253ff88c47", "sighting_of_ref": "indicator--6864c088-c2c7-45d0-a890-b49fe42a2068", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3515ffd-4a45-48d4-80c1-54fc130f44ce", "sighting_of_ref": "indicator--5a7badec-1701-4b45-b14f-8b6acc68b305", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd165d3-a3c2-4178-a7d8-0d53fbdc99e7", "sighting_of_ref": "indicator--ac79c91e-2ad9-46ef-88e6-9242f5e26c2a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6916b76-406d-4a0c-87d5-6f93d4ddfc53", "sighting_of_ref": "indicator--52a42a68-c787-4f77-bd5d-04be5dda03a9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f9a99b-9044-4305-ae7e-50e9d8051598", "sighting_of_ref": "indicator--5a446c93-c931-45e2-a425-36c2a67aca00", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f223bcbe-08f0-4284-afb6-9a91bc9c101a", "sighting_of_ref": "indicator--85f3184a-0bad-4033-b11e-590aad9901ed", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb86b7b-f23b-4672-bc73-edde6459fae3", "sighting_of_ref": "indicator--a4019571-c624-4cb3-a79a-4e9fadc12880", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6911d9db-cf33-41bf-97e5-3a5fa2051779", "sighting_of_ref": "indicator--e5af41c9-6acf-43e3-8a8f-bc6474545326", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3cfa87f-8b64-47cc-97ca-97ca6b9374fc", "sighting_of_ref": "indicator--2fc152fc-c287-459b-aa47-0ddcc574a5b1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e25ec3c-488f-4ded-912e-6c3de6c4e298", "sighting_of_ref": "indicator--c8d424f6-ca34-4ff3-ad69-bd101d5d268a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5495bdf5-3f40-4fee-b643-543e15283857", "sighting_of_ref": "indicator--c8d424f6-ca34-4ff3-ad69-bd101d5d268a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47054820-212c-4dac-9ba1-9dda57914893", "sighting_of_ref": "indicator--f1962d2b-819a-465a-b95b-676b2698f3b2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba451897-9eb0-4446-b72a-82fb5ad8c916", "sighting_of_ref": "indicator--e9b99165-5358-4fd1-8a41-dc50174f0b6c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f51647-c4ab-4049-a5d9-3551020a7458", "sighting_of_ref": "indicator--bfc99ae1-6e7c-4bc8-af1e-6a0b7ce6eb85", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baef62c7-b15a-47a5-9878-7d98c90e8f1e", "sighting_of_ref": "indicator--f9e184f5-8eee-403e-b1a9-e33b89de72b4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4b4c3e-d01e-4ff1-96af-a957d76d8717", "sighting_of_ref": "indicator--f9e184f5-8eee-403e-b1a9-e33b89de72b4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b017a627-4090-4970-b397-fba748a582a7", "sighting_of_ref": "indicator--a2e6cf60-ef2a-41d0-af98-f02247137b40", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791e9d09-c9ee-41f3-8368-0fbb41faf87f", "sighting_of_ref": "indicator--a2e6cf60-ef2a-41d0-af98-f02247137b40", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e549e64b-ee48-4bca-b8e6-affa327844f8", "sighting_of_ref": "indicator--78f61b31-9ad9-489f-a097-0a975e0b7fb9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4404c0a-85aa-4f7e-a753-aa2363510893", "sighting_of_ref": "indicator--00ffea56-c8b8-4255-a8b6-dc45e95079d5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a13df06c-f5cb-4158-8a6f-ed169f55c4b1", "sighting_of_ref": "indicator--00ffea56-c8b8-4255-a8b6-dc45e95079d5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73246cbd-339e-4f0e-8026-b34c1d8fa061", "sighting_of_ref": "indicator--bfa21b86-e3b9-434d-8c29-501bb4c1d66d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb10a7d6-b193-4e45-b3c8-7a4078800447", "sighting_of_ref": "indicator--e2b1a970-5855-4390-8202-763b74e0acc9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8049f59-5321-4446-94d7-a501891be53e", "sighting_of_ref": "indicator--71f02550-4622-4d79-94b7-61e460b915d2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dab8ffbd-fc2b-4334-b148-9e628c85c12f", "sighting_of_ref": "indicator--7186c74a-87c0-442c-884c-fe854613e222", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4ef7ca-40bf-43c2-94fc-4356044daa18", "sighting_of_ref": "indicator--7186c74a-87c0-442c-884c-fe854613e222", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59ca575-608b-441e-a099-f26a83b9880e", "sighting_of_ref": "indicator--7186c74a-87c0-442c-884c-fe854613e222", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c259f5ac-eae4-4390-9fa8-2b31bc443ae6", "sighting_of_ref": "indicator--c0cebf48-56d1-4fc9-b9fd-c602133b3ce1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee76936-61fb-4759-adac-64137374d3cc", "sighting_of_ref": "indicator--95294cdb-cc07-4b2d-a018-6a9df8445ddc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa51fe1-24a8-4388-a665-6d0b558c2f67", "sighting_of_ref": "indicator--8fbf5082-86cc-4a83-b5e8-1e33cc166d9b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04015483-d773-4607-b222-8819d8ef38c8", "sighting_of_ref": "indicator--8fbf5082-86cc-4a83-b5e8-1e33cc166d9b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a51a1c-e983-4c34-99ea-5fcfcdf32d7d", "sighting_of_ref": "indicator--1b7cb38b-eb50-41bd-b7e6-b0118a622078", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b6bf27-7dcd-47d2-b644-958f50ccd154", "sighting_of_ref": "indicator--cec55452-795d-453b-9fdb-48363ab65e5a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8909780c-0457-4798-9d20-2012ccaae3d5", "sighting_of_ref": "indicator--9f2c4c2b-e9e7-489c-88d2-259a26f3ff02", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6fa9147-e402-454b-b260-efa022b73795", "sighting_of_ref": "indicator--761b24ff-10d8-41d5-bf0f-642eb4f303a9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b8f881-b62b-4e27-ad95-d3551fc273d4", "sighting_of_ref": "indicator--ae9764fa-daa9-48e6-9268-005973122c2e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16e2e5f-081e-4850-981a-b1386ab0cba0", "sighting_of_ref": "indicator--c228bd21-2ab9-4113-bece-81f5c9445e0a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32918460-339b-422e-9d7f-9ae5f0a351bb", "sighting_of_ref": "indicator--f82f0135-8bae-47e1-abdc-084880ef2939", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abde2013-d0fc-48de-adae-a54475e580c2", "sighting_of_ref": "indicator--c31d2258-b277-437d-9852-c5c143ed7854", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1f7487-bcf1-4025-b9a6-32295a0e061d", "sighting_of_ref": "indicator--c31d2258-b277-437d-9852-c5c143ed7854", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca03b79-98e0-4452-b6bb-90771a04baf0", "sighting_of_ref": "indicator--d120c48d-6fd0-4075-8c27-ec05e5e2f273", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--872ec4e8-8475-4eae-977b-889ea8985aea", "sighting_of_ref": "indicator--d043367f-7458-4d63-8cbc-b96924d9d214", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9570938-29f9-4e09-a566-faa6421e06fa", "sighting_of_ref": "indicator--e1275938-408a-4d07-8172-dbb79d23ea54", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e25a71a5-fdfc-416d-ab2e-1f7fba4e9e31", "sighting_of_ref": "indicator--e1275938-408a-4d07-8172-dbb79d23ea54", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2846efcf-6877-4f5a-bba0-897d5dae7450", "sighting_of_ref": "indicator--40cfb9bb-6bd2-42d4-a1a0-d10be934b34f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d75fef15-7c5a-4217-ae82-63217126da60", "sighting_of_ref": "indicator--c96f7fa6-bc35-4168-aed8-3d9ee2642ef6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66253e2e-4875-4788-8f53-8427794c7c28", "sighting_of_ref": "indicator--740b64ea-4b8e-428d-b6d1-886416701d47", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa309603-62e3-4ac5-a474-5157ceddd5fb", "sighting_of_ref": "indicator--d78a6508-9ba8-4e38-85c0-d6cf1d506108", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45576307-9d2a-4037-a25a-3839186c39d8", "sighting_of_ref": "indicator--9a337d5e-dc1f-4e63-8bf4-00536f021207", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d0bbc6-ae8a-49f5-9ec5-d65fa01e3a27", "sighting_of_ref": "indicator--5b435712-022d-4ce6-b74c-4b048802d110", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b9dfd5-3f1c-4fda-a8ab-6ed8b3a6a8de", "sighting_of_ref": "indicator--d14dcd3c-9edc-4f3d-b55d-14ab789b6a28", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28bfc19-a32e-4e0b-8e7c-653d4e7f5c74", "sighting_of_ref": "indicator--3bb82d73-b103-44b1-aa66-06156147da85", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d32d5b7-bc7d-4d7c-8faf-97c929a31d01", "sighting_of_ref": "indicator--37d0acb4-96ce-40c0-87c2-e7612ea7a00f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a5e11a-6399-4c33-baaf-425ca347bef8", "sighting_of_ref": "indicator--ae88bb0f-8934-4b04-8e66-797dcb872667", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2860de4-d62e-4d6b-b2db-1c252730015d", "sighting_of_ref": "indicator--0bbb31ed-f6bb-4e23-ab5c-a69d18c30bb4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77c1a1b-f7b9-499c-a4cc-11630adca6be", "sighting_of_ref": "indicator--beed60e6-34ff-482e-ad87-776f0e574626", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40705a8a-7d0b-4602-943e-12b8e69d9e76", "sighting_of_ref": "indicator--f0e131cd-73d3-4004-b24b-65ba48539ad2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a78027-00bd-4782-a12f-c14c367fbb70", "sighting_of_ref": "indicator--6d45c773-00bd-4493-b267-e3db673b1c1a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73954cd9-b7f8-4f9b-ae67-dd2239296bd2", "sighting_of_ref": "indicator--2a2feda1-c875-412c-94d5-d197e42464d3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43821eae-ca9c-43f2-a018-835ce4ccb5b0", "sighting_of_ref": "indicator--d54f6597-8949-47ba-a087-ab73bebff851", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--082f3dc2-285d-4ae8-8bfb-362c173e75f6", "sighting_of_ref": "indicator--77b72478-25ec-41a8-ac1f-6bdf0449eefc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e88163c7-e735-49b5-88bd-94eb56922617", "sighting_of_ref": "indicator--77b72478-25ec-41a8-ac1f-6bdf0449eefc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2942b414-56a3-4aef-bd36-4cb9c2dd00f0", "sighting_of_ref": "indicator--77b72478-25ec-41a8-ac1f-6bdf0449eefc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af03cb20-d5bb-4861-adb5-e6f556bb5256", "sighting_of_ref": "indicator--27b4d5a7-c493-4f34-a200-e15626cea69d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ee4280-9753-4e42-8e58-ecc7b91e8adb", "sighting_of_ref": "indicator--8d88f8ec-c5b9-4078-862a-0253071a8559", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b902740c-e3ff-4d1b-a545-1b639aab2cb9", "sighting_of_ref": "indicator--c94633df-5f92-40b9-80ec-537d0f993fc1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83339474-cf14-46c9-98bf-55d79498d417", "sighting_of_ref": "indicator--6e321f66-6756-415d-bd60-3059bc8df988", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52440bc-3ef1-4601-85de-469ec54c6486", "sighting_of_ref": "indicator--c7abaa9b-6b7f-4534-8c32-1dc85033c2cc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e0e8d6-0a59-47bf-8543-6d04a08da8e9", "sighting_of_ref": "indicator--8d439fd5-5b32-49a2-8575-797b34008d49", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b3e238-18de-41e6-8d2b-7b56e4f220fb", "sighting_of_ref": "indicator--8d439fd5-5b32-49a2-8575-797b34008d49", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bd7da10-0d30-413d-8e23-f6d429ec079c", "sighting_of_ref": "indicator--ddcf28e1-3f3b-43b7-9291-9ec403cd3777", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cafaac08-811e-45b1-8f18-5aa904786b02", "sighting_of_ref": "indicator--a8cfcaee-b7bf-44c9-9dab-abb113efb6e3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--726d672d-ea44-40c8-84ae-7068ea66f0a5", "sighting_of_ref": "indicator--950227c5-a470-4297-a1d4-75a17bea6929", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49fe0af9-7fc8-457e-be49-08a2ba6af950", "sighting_of_ref": "indicator--33c9f76b-0ff5-4a2b-a603-58758245b01a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95cdfaad-fdfe-4514-8c29-7da945e26102", "sighting_of_ref": "indicator--a8247e2a-73d6-4fc8-8159-3b227f691c0d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c1472a-27eb-4f80-9af5-c9c41cddf185", "sighting_of_ref": "indicator--4b3116b6-e608-4fa0-82ab-47f4577fd684", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e50c0a59-d778-4ab6-aec0-b5b570fb87f7", "sighting_of_ref": "indicator--c5aa2ff2-a775-40e3-86b8-d27df8d599eb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6edc2af5-c7f7-4f5c-a8d1-c5f185a1a054", "sighting_of_ref": "indicator--0301b4ef-d080-4ca5-8f8d-e8532adcffcc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b70b4150-9522-4eb9-88e1-77b1b12d7b5c", "sighting_of_ref": "indicator--d54f9a18-fada-4e40-b972-ca20cd167d9c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16f56d2-d471-45e9-8929-9e3091fc53ea", "sighting_of_ref": "indicator--a3c4fe2d-9069-49a8-9a90-21bede33d561", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1961169a-0bb7-4cfa-8e68-1be6a108743e", "sighting_of_ref": "indicator--c54efb46-881c-4771-b3d3-b15aadb3ddad", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec762d1-6f08-4052-baf8-fa8214a8f11b", "sighting_of_ref": "indicator--c54efb46-881c-4771-b3d3-b15aadb3ddad", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b1035d-209c-456c-8e2c-a09ff86a044e", "sighting_of_ref": "indicator--4be2354f-fffc-4753-9e51-d22d6a7d897a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00eaa82f-ec16-4da7-971f-33677f624d71", "sighting_of_ref": "indicator--6bac225f-50c9-4889-9b91-f4c3736b40f1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6483f624-dfae-4069-b876-acc44c5b3213", "sighting_of_ref": "indicator--ff0e3c5d-8699-4e16-880e-e280e72d2242", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d60dbd-210a-4ad2-afc8-6fa5051b2dde", "sighting_of_ref": "indicator--436ff204-2327-48f2-9b39-4dd7193d5804", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98be3018-5ff2-49b8-bfdc-c1033e066811", "sighting_of_ref": "indicator--ca826fed-cc42-4cbc-8183-a3658c33daf0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--871ee51a-5cfc-49ea-9a1e-72a6bbb6a387", "sighting_of_ref": "indicator--9f86e73d-5c3d-4454-8045-36b1b67bbc13", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b579292e-4040-478f-af74-5e50bf0b97b5", "sighting_of_ref": "indicator--9e575a83-6561-41e1-b1c3-a95a4ace0b96", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd529b3b-3b2d-422a-bcba-b6b36ca4c641", "sighting_of_ref": "indicator--eaeab466-88d5-4af7-81f1-51f9b0fa1879", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e7f0e8-d0fb-4775-8300-90d34911b672", "sighting_of_ref": "indicator--440eb3fc-70b6-4b0b-a88d-2c5016c776bf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--908d390d-9cab-4b95-a0f0-706b3d9e51b4", "sighting_of_ref": "indicator--c024e514-6595-42bf-aaff-37ddf371c1f0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad07bd86-4d67-4670-aeec-d46c85716f0a", "sighting_of_ref": "indicator--33332398-a9bc-4d5e-b060-00ab2d970345", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32effbe6-11c2-4e52-b054-df299138137f", "sighting_of_ref": "indicator--c4738918-5ea4-44f6-99a6-3d54c403c1f3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41bc418e-8e66-4e70-ad7a-3142e23f6b1f", "sighting_of_ref": "indicator--23964b30-4124-45d5-b343-24bb855854be", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76984079-7939-401c-a61a-96bb238b6694", "sighting_of_ref": "indicator--4c579765-3e94-49e3-b481-287cd014a531", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c08274-ec37-4d66-8751-445f8203c081", "sighting_of_ref": "indicator--c7abaa11-d2f7-4a81-a373-466891ca468b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b6dd205-8f23-4ab7-99b9-7807e3fe9658", "sighting_of_ref": "indicator--f18e0ebf-8ace-4eef-9adc-240e52ba2c3f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df802f5d-80ff-4ab2-98ca-9eae652caa6e", "sighting_of_ref": "indicator--4f770602-d7ca-41e8-bdfd-8ea32569bd97", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83826985-9cb4-4813-a557-9d5c1775dabf", "sighting_of_ref": "indicator--22d7c31c-10a5-4787-ad32-3b5992c1d702", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--509f7f84-ac5e-409f-97c7-1399f54052e6", "sighting_of_ref": "indicator--5f3e291a-0b43-4cb6-834a-fe355478fd64", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27aeecd3-e769-4f0e-8ca9-7e2e338429c2", "sighting_of_ref": "indicator--8d13bac8-dafe-421a-a20c-f0b91b131110", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b9f405-f35f-4477-9106-173dd8675605", "sighting_of_ref": "indicator--4973123e-be32-4f1f-a17b-72139deadc81", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce74a916-488f-43fb-8966-98c6adb216e2", "sighting_of_ref": "indicator--4bb52d56-5ee0-420b-9ec8-9c9928f67b2f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9892544b-7c33-4dea-a5b4-addbdd1c9af8", "sighting_of_ref": "indicator--4bb52d56-5ee0-420b-9ec8-9c9928f67b2f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d727ae-ea47-407a-97a4-17939d0f70ff", "sighting_of_ref": "indicator--e0bc63ba-6167-4615-a272-bde21275a309", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6f39af6-6b7b-4f61-b82f-2c2b15fba401", "sighting_of_ref": "indicator--5480c57a-f496-4423-8805-414c4a35d7da", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a1fdc0-1612-4362-97a7-4fd1def2d38c", "sighting_of_ref": "indicator--504e81ef-3aa3-4f9b-92e6-9414c4f65ea2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bec7098-6cac-4e5a-a9c1-4c1e11337330", "sighting_of_ref": "indicator--195b9fcf-f71b-4d5d-ad38-aa43ee94d71b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5285ff4-1192-48ee-aad4-ce7bb34ceb99", "sighting_of_ref": "indicator--b59cb440-1eda-4a0a-9143-cfd019a06198", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--771a4b59-612d-4f9a-9a38-efd1ebc96626", "sighting_of_ref": "indicator--a6402089-6abe-4296-b334-edeabde4d4f6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5781362e-48b8-44e8-97e0-c397f39d90a5", "sighting_of_ref": "indicator--0804e688-510c-4cac-8958-feb7b326f192", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31b6756a-5a23-4210-9ee4-2ad6a3793dea", "sighting_of_ref": "indicator--f92e5357-ece9-4028-9d13-0653fb9f8568", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd11bfc1-7178-4725-95aa-caf5fe9c932f", "sighting_of_ref": "indicator--3e187520-a480-4d0a-a674-a44171850dab", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cffc48fb-d13d-48fa-87f3-d08e774e29f7", "sighting_of_ref": "indicator--5aa254d6-a2be-417b-9e26-3427bbebf259", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1935c11-e35e-442c-9539-5ee92d865ced", "sighting_of_ref": "indicator--e96b20bc-5a84-4a13-b61c-6ed06282436b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d408331d-dc10-46e4-b7ce-b13b8de4ce3f", "sighting_of_ref": "indicator--f7fc44c9-b413-4e24-84f5-8484962e7c09", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1dd713a-4c7f-45a1-897b-84e891e447fd", "sighting_of_ref": "indicator--ccef9f79-0876-4eeb-b54f-4eb901681b31", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a4e701-2f95-4628-adde-dab0f13ce7e5", "sighting_of_ref": "indicator--7a4027de-49fb-4a22-896c-6dc1d8899e59", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851e0fa0-e5f1-4437-a9d5-87e2f2efcf48", "sighting_of_ref": "indicator--fbcc0230-8cb3-4937-90fd-db6f27fbdae1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60108f0b-dc02-4d59-b761-74e0917813b2", "sighting_of_ref": "indicator--523f14c5-511d-4f72-bfae-d09435b171f3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce30b57-0652-4185-847e-5df5c6f6346a", "sighting_of_ref": "indicator--6e19f5ef-e43d-4bf3-afbd-755133f438e7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1332aaba-afc5-48f2-9bf8-ba29939562ce", "sighting_of_ref": "indicator--69f3231e-b0ae-43c9-ae1e-a22b67230abc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f094cb4-bb41-4cc4-ae91-fb26f4e340e7", "sighting_of_ref": "indicator--53096d0f-c3a8-4db3-ac18-a4a920de45ba", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1feebfad-ff09-418c-96d8-b6ca174b43a8", "sighting_of_ref": "indicator--fc087317-d44e-4df8-b748-66fef987c270", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c0aff3-7763-4c8a-b571-a60703e1a8dc", "sighting_of_ref": "indicator--43af21f6-003b-4f32-ad95-1fb68f5a49b6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad3c115d-0b08-4184-a513-8bbb1d436afd", "sighting_of_ref": "indicator--6a358c9f-f656-41ef-8882-f7d7ab3deb5f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a9f544-4904-43cf-b0ee-5a01e07322bb", "sighting_of_ref": "indicator--1c1fd245-4422-4526-986c-e597938f79b5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0ba1af-3b5e-4768-bb85-a8146576e4d2", "sighting_of_ref": "indicator--06e054c2-58c9-4366-a7f4-a1e01b0ba2ef", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faeb3fec-ec7f-4652-bd1c-55451e531910", "sighting_of_ref": "indicator--1ca60b51-23a7-427a-bd57-8846f4c30687", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f1e6b1-4427-49eb-a528-634a19aef546", "sighting_of_ref": "indicator--fc4f61df-40c6-460d-bb98-4c3fc9a96d6d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2487365-2e6a-44ec-b1ca-89c0cecbe0e7", "sighting_of_ref": "indicator--fc4f61df-40c6-460d-bb98-4c3fc9a96d6d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5414037-b733-488b-b2c9-ca331e5082df", "sighting_of_ref": "indicator--e73ec0eb-d3ad-4a1e-a6dd-a95b907b2adc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99465185-e406-4094-a227-5ddcf7bc42a8", "sighting_of_ref": "indicator--6c3fce1a-74dd-4c87-9d45-e7cf70873167", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cbc8551-da3e-4916-8802-a2cb3f6338a3", "sighting_of_ref": "indicator--d4667cfa-4f05-4bac-95e7-a4e7526475a5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79451c7f-b99c-40f9-a174-5ff0afc7c494", "sighting_of_ref": "indicator--3233f5d9-de35-4d88-9571-7a7d73a12a29", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe23386-8eb2-4110-8906-554f29e13ca0", "sighting_of_ref": "indicator--3233f5d9-de35-4d88-9571-7a7d73a12a29", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4758e8fd-3dab-4359-a756-ae93caaeeb84", "sighting_of_ref": "indicator--45a67e90-6cc1-493a-b7c6-04bc3f2d3ce6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83ea7bb7-387e-4910-bb72-873314e48a75", "sighting_of_ref": "indicator--af5cbd38-99b3-479d-b007-d3f083b31e68", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c84507f-129c-46ca-bc06-8a87a7ded297", "sighting_of_ref": "indicator--766d37f1-0153-4db9-981f-2f48e44d1311", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92628ba3-5c31-4a7f-90fd-daa66de6e156", "sighting_of_ref": "indicator--7136d182-b2b7-4522-a620-aee216799a28", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2c20c6-d517-434b-9181-bf9fb5f57329", "sighting_of_ref": "indicator--eb5ccf67-1e41-43af-ba06-f3c07558b25b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89fb962d-f1b5-4ab6-a981-99e12e64d6f0", "sighting_of_ref": "indicator--b2cdc70a-e592-4b44-a44f-34850f921c86", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ee4153-555f-4527-bf2d-d9ef14a50811", "sighting_of_ref": "indicator--ceb8418c-ea75-4a74-a16f-c5e5b7223bfd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de0ba71-2ea0-401e-ac4d-4330d85e14aa", "sighting_of_ref": "indicator--247770ab-313c-40b1-8a95-62faa757292c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f492eafb-5eca-428b-aaa3-e2314b83123b", "sighting_of_ref": "indicator--dcdd99a1-8935-432f-b9b3-ae9b746925c2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f0e81f2-e195-4f2a-a7a8-f480c59d6520", "sighting_of_ref": "indicator--2f026c31-f302-4773-be96-f942ba2e69f7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf2a2900-4696-4a23-9573-a70df55bac86", "sighting_of_ref": "indicator--2f026c31-f302-4773-be96-f942ba2e69f7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a637805-bbbc-413f-9780-cb3d9a15c23d", "sighting_of_ref": "indicator--a74a7497-d12f-4e9f-bd43-dda55582c246", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec5ea0d-3b31-47ce-a6d7-ffaa42c13f77", "sighting_of_ref": "indicator--f700cbad-8bef-4b3e-8558-a024b40930cc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83cc5ff0-6718-404b-9e5e-de0f0d6cb2eb", "sighting_of_ref": "indicator--3089d5b1-aeb9-4c98-b7ec-a1adb2081e77", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc9bfa0-9600-4c85-ae7a-65fca924cf58", "sighting_of_ref": "indicator--1e4ed350-ba7f-46db-86e8-f4701d88317d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ffdee4f-d7ce-453d-b8cc-6cee97428f34", "sighting_of_ref": "indicator--b3262afa-d300-4279-8fbd-89f9272b28dd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2efc4d28-f1d0-422a-99b6-1194ae563c0f", "sighting_of_ref": "indicator--6732ee39-5d09-4fe7-be7a-9635781d4659", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1fb2509-af2e-4924-9437-e5e2397f0219", "sighting_of_ref": "indicator--6732ee39-5d09-4fe7-be7a-9635781d4659", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587a6153-c9fb-4b02-a814-131689294d30", "sighting_of_ref": "indicator--ee229b3c-54ff-4245-9c59-f517da1db364", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a14a6a-cefe-43a6-be28-e2d940cdc519", "sighting_of_ref": "indicator--a04b1703-f1f8-406f-bc58-b3224dc68909", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edba183f-e5f5-46ea-b324-4d56338afbee", "sighting_of_ref": "indicator--2c19734a-ca64-44b2-bb03-a86c421c9399", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e17ece-2a2c-4f80-b423-9fb6b8bcec15", "sighting_of_ref": "indicator--7d7381df-ec1c-4fdf-9877-3444cdbd1939", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b1c0e0-7cce-4ba0-8c55-1c5c7974f877", "sighting_of_ref": "indicator--9b680a96-7646-4790-935d-cb5173a6fcbb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c99924-2349-4ceb-a809-defca8509a6e", "sighting_of_ref": "indicator--0e62632f-957c-474b-a81e-dd0397087ee6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03ae9f73-859a-410d-983b-6217ed64eee7", "sighting_of_ref": "indicator--0e62632f-957c-474b-a81e-dd0397087ee6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a962d63-f7f8-44e1-9b66-ef6c9a33f83b", "sighting_of_ref": "indicator--d14169be-d5e0-4868-8a80-4d1f6ca8a865", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e66293-6dc4-4a7b-bc7f-cf1711c81bc7", "sighting_of_ref": "indicator--8f01bf21-cfe3-4b52-b2ce-2bdc14fa522f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7673e688-ca8d-4e64-b45f-704c975a9b7c", "sighting_of_ref": "indicator--dc454b09-accf-4db5-a169-d2882f37112a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b247a7-4eef-44a6-917a-dd78ac4c98b0", "sighting_of_ref": "indicator--4b018ef7-5ca2-46de-a796-347ee194416f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--312d3349-d39a-45f0-9cbf-17b398eb50bf", "sighting_of_ref": "indicator--777bf39e-cffc-4f43-86e8-3f8851fa438f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8fe8dc2-43db-4636-89f4-f371fe703b78", "sighting_of_ref": "indicator--5bcb6ddb-a885-4a42-9503-ce1263fda6d2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f2d54a-073e-4684-9e9c-9c96cac53dd0", "sighting_of_ref": "indicator--854de94e-bddf-402e-a236-2f8cbf3d9857", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--858915cd-2a18-455d-af7a-7579e8ea4bae", "sighting_of_ref": "indicator--83169fa3-9bad-43d1-9b1b-566d81685ef7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b9b77f-fd58-4c1b-850f-6031e2f61575", "sighting_of_ref": "indicator--fac686af-c589-46ff-9a6a-ed062f04a94a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef94bd2-f1ad-4462-bb97-86094e7e4083", "sighting_of_ref": "indicator--8e0e67ab-01b6-41c8-bff7-4c87fd883c92", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b3aa15-fc2e-446d-b501-d3c2bf83a714", "sighting_of_ref": "indicator--882083c2-f788-48e8-8c12-5f31a9c78be1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddcfb2cb-82db-47ca-b711-6a1650503a83", "sighting_of_ref": "indicator--882083c2-f788-48e8-8c12-5f31a9c78be1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--287b0314-6f9f-4bec-bfd7-ea5c64636927", "sighting_of_ref": "indicator--7d8686ef-06f2-41a7-a003-9081407a0d2e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada1c671-d08a-4821-8c35-14fc1069998f", "sighting_of_ref": "indicator--7d8686ef-06f2-41a7-a003-9081407a0d2e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c976498-5e0b-4049-8732-65779c02c50d", "sighting_of_ref": "indicator--f99e0a36-8ed7-4974-8976-8c8b75e5dd33", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586f750a-c5a7-408c-a9c3-8e6eb32fccc3", "sighting_of_ref": "indicator--75691ac1-6157-4656-98bf-ec2497b3c09b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b1c12b-8f76-4036-bf5e-3bcaad0a6b9d", "sighting_of_ref": "indicator--21426e39-20df-4219-b3f9-afa4eaedab43", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610e7142-cc2e-4717-9e91-03cec909d09e", "sighting_of_ref": "indicator--7222ec71-a79c-4804-8733-f25af3e6a3b5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--005038c2-9a20-48d2-a576-132ad72de861", "sighting_of_ref": "indicator--fd6f00c4-3348-415f-b693-090ce7012766", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f5178b3-0be4-4301-b960-0ebfb6a60d91", "sighting_of_ref": "indicator--fd101e39-4e8b-460e-9dfd-70c5d5f1dabe", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962dfdc7-9dfc-47a2-8270-a60c15d38c9e", "sighting_of_ref": "indicator--b930003b-9446-4009-8ac0-402015e232bc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f432ec5b-654c-4920-873a-5102f700b7ee", "sighting_of_ref": "indicator--b930003b-9446-4009-8ac0-402015e232bc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29fd3860-9f09-4db5-ab13-3f65b4ac8f52", "sighting_of_ref": "indicator--7e5fe916-33cb-49dc-819c-950929c6b703", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad5f82b-3627-45b8-84ff-5de2b7f4813c", "sighting_of_ref": "indicator--7e5fe916-33cb-49dc-819c-950929c6b703", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20207682-f7ee-4a62-a53e-d57b4841f815", "sighting_of_ref": "indicator--e1005558-ece9-4113-8616-d4e0a9f0e4a5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3458a0-3e33-4dc4-8656-5e389c8819ef", "sighting_of_ref": "indicator--f553eeec-dc78-4e55-bc4e-22e1eee9ac23", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5648f451-7fa1-47a3-9c5e-bf08cb2f4885", "sighting_of_ref": "indicator--6febbc1c-ebbd-4be1-8bc9-77c3df216a88", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67657e11-8f10-480f-8dd3-c43da1f1eea3", "sighting_of_ref": "indicator--218dffbf-b5d2-4853-87fe-2eb3c6b6df70", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe65519-ecf1-4c19-83d7-f693013e4cb4", "sighting_of_ref": "indicator--1c742c36-688a-4ebf-8631-3a6a99ba3dc2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f68744-b023-4a15-8d7c-8a7218459657", "sighting_of_ref": "indicator--0df2907e-62c8-47e0-a4aa-b5e9ec0bfbdd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2268f12-86de-4e1f-bb9f-cc5df78e3149", "sighting_of_ref": "indicator--d85462f1-a2af-4d4d-9779-75265303b54b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a81fea-a09f-4ca1-903f-09581be82061", "sighting_of_ref": "indicator--dc38f977-02b3-4381-a194-52a6a325bd38", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c3e3e9-dfdd-4180-807e-c09ffe6ef539", "sighting_of_ref": "indicator--5579a374-e293-48e0-904d-450106ab4f91", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e13973e-87bf-404b-bb0f-9bd025dd3f0b", "sighting_of_ref": "indicator--2b5fb802-3c6f-4ba8-ae03-45078150108d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dbd7a13-3d87-43cb-b71c-2f0d2e5da168", "sighting_of_ref": "indicator--1bea5a89-55d7-421f-983a-05960076187c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd75d71-9888-4626-80dd-e990f96b62ef", "sighting_of_ref": "indicator--1bea5a89-55d7-421f-983a-05960076187c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee41bae-653b-4ce5-ba71-89d633c6533f", "sighting_of_ref": "indicator--d01134a3-c65a-4889-a550-f68425f79e16", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e109f822-83de-4062-b300-c0afc038c0a2", "sighting_of_ref": "indicator--27a49cb8-b837-4358-a748-beac2696068f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54267ec6-4376-4d0a-ba72-c67d57ba4891", "sighting_of_ref": "indicator--e99bb263-66ed-4937-8bd1-df2d3c503ef8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a3c8f8-e5ba-4604-8f6b-fedd1c219c31", "sighting_of_ref": "indicator--452af418-fe45-4a39-8b31-1864a5bcea74", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5702cb76-f4dc-449e-9d36-a8d32ebae5bb", "sighting_of_ref": "indicator--74b59e58-11a1-4f3c-a2ca-220764b0d664", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67df7a8a-7784-46fe-856a-2b35e4179c45", "sighting_of_ref": "indicator--74b59e58-11a1-4f3c-a2ca-220764b0d664", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fef3bfa-524a-46d7-ab74-64b0537b4c42", "sighting_of_ref": "indicator--1f3b6046-f6fc-457f-8eec-766d1d0bddbc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--871143cf-aff0-41a9-a7d7-f0be84d2cab0", "sighting_of_ref": "indicator--a1d3092d-7f1d-4aa8-a735-0bbc382c3fd8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910acfb3-b034-4a41-974f-dd7755ca57e8", "sighting_of_ref": "indicator--d87bc6d5-f996-4ef0-90b6-eb121975abe8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c718e1d-13ae-4e9d-8d48-775612cebf59", "sighting_of_ref": "indicator--d87bc6d5-f996-4ef0-90b6-eb121975abe8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1611e85b-a952-41a4-9136-257a72728045", "sighting_of_ref": "indicator--b4e1eba5-212c-4551-b222-ea1f449bbc0f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7887a7b-4fef-4b86-92dd-fca0f78a4444", "sighting_of_ref": "indicator--b4e1eba5-212c-4551-b222-ea1f449bbc0f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5fa7571-962f-4633-ae6f-757993bceb60", "sighting_of_ref": "indicator--5e28a608-06c5-4584-a36a-954d769a6bce", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c813161e-daaa-4e45-b3d3-3e5c6d7b9758", "sighting_of_ref": "indicator--e1b20828-326a-4219-bee9-0c87ed8ef6fc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d40c3290-27c1-4389-8923-186a613b7fba", "sighting_of_ref": "indicator--e1b20828-326a-4219-bee9-0c87ed8ef6fc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5051e9b1-9022-44c8-a364-a50032d43e90", "sighting_of_ref": "indicator--d8bb4def-2c14-4cbd-b656-0e4542f35d29", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49ef9ee-03bb-4d70-a24a-c1821472e087", "sighting_of_ref": "indicator--ae4ac78e-e7d9-4736-b1c1-fb6df0caa4fe", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6546a51-9cb6-44d9-9a3d-f107267d7691", "sighting_of_ref": "indicator--bc81a60f-7522-486b-af5d-83b1b4491174", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0182bd6-d75f-461f-b421-aae3a6ef200f", "sighting_of_ref": "indicator--1096e754-5fc4-4fbb-b3b5-64daacadc112", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ecf8493-522b-46d1-a595-1cf3024d0013", "sighting_of_ref": "indicator--da077dd4-b570-41ee-94db-ce1abfad2b5f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3fbc613-ce4c-49ec-8244-0da43b028407", "sighting_of_ref": "indicator--da077dd4-b570-41ee-94db-ce1abfad2b5f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368bab47-8e15-47e1-8034-a3a729bf3a80", "sighting_of_ref": "indicator--861db50f-25a0-4bd7-a5be-26a8da0ee8bf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a47173-92d0-4420-b74b-b881df1fbded", "sighting_of_ref": "indicator--2260e60f-17b8-41e5-a301-60582c39bfeb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb44cc45-8b6d-46ce-a04f-354ab13ddbe5", "sighting_of_ref": "indicator--2260e60f-17b8-41e5-a301-60582c39bfeb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf69465-7f18-4dc9-a531-41f09853441c", "sighting_of_ref": "indicator--b8f14c9d-30e5-4b36-b2f2-44070e2f57eb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc44d6e5-69b0-45cc-965f-7591ea4b69eb", "sighting_of_ref": "indicator--4aac744b-5a9c-4e1a-af70-da12d0f46a14", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3599752-8c29-45d7-8a79-e13c2f902b41", "sighting_of_ref": "indicator--f01a53df-16fc-42eb-a42a-66a4e3af0163", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34dc2add-e1b4-4020-ad53-4061891ef5e8", "sighting_of_ref": "indicator--8daab9b2-2d94-4ff9-984f-32acd83692d0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a84cb9-fccf-4041-9a9a-a45235dadf9b", "sighting_of_ref": "indicator--76a7a92c-e4bc-4274-ba37-1ff19618d8cb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdcd83b8-6d2f-40c1-b0bd-8c05bd3dee3b", "sighting_of_ref": "indicator--1348d22d-e591-4a8d-899e-1fee81121320", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--467c0265-5d06-4462-950c-800c6944ccc0", "sighting_of_ref": "indicator--1348d22d-e591-4a8d-899e-1fee81121320", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b38a52d5-c349-421f-b71e-adec0195554c", "sighting_of_ref": "indicator--1348d22d-e591-4a8d-899e-1fee81121320", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de66c4d-42c7-4156-a65a-fe33e77c7b39", "sighting_of_ref": "indicator--aeabf6f3-ae9c-4bbc-8a86-e0cd95300688", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d71ae6e-40b6-4bc0-8bfd-defed607d3fa", "sighting_of_ref": "indicator--9bbe9047-3ece-4c83-85b6-20c27284f32a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ae4236-9bde-4322-84b3-00ba1ff33b08", "sighting_of_ref": "indicator--6a7f5d10-8099-46ec-900b-1c5b2f10514d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485f34de-bf04-4273-b121-b915409cf1f3", "sighting_of_ref": "indicator--6a7f5d10-8099-46ec-900b-1c5b2f10514d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a9dd659-bdce-47c4-b439-6fcba9a64e40", "sighting_of_ref": "indicator--a93d789e-9579-44e0-87a2-ae3df72e49bb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a6e05f-fd8b-402d-bbfa-66e882cd8385", "sighting_of_ref": "indicator--91a5acd3-a035-42fa-af73-020eaf068498", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc062ecf-bd91-45f7-983f-5bd313ca5778", "sighting_of_ref": "indicator--a6fb89e4-48df-4a6d-b005-d7393b311ebc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c14e921-0e81-4ab4-9241-b4ca86feebdb", "sighting_of_ref": "indicator--5a67f305-f142-463f-b841-c0b3b5ae0466", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e1283e-41dc-4d46-b83c-9c529bec2795", "sighting_of_ref": "indicator--5a67f305-f142-463f-b841-c0b3b5ae0466", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf6f4480-7b3d-4e33-909f-79ae3430677c", "sighting_of_ref": "indicator--70e32b6e-fd32-4c11-9bf4-83233ba08bf6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f461c1f-eb4a-41bd-9ab2-501e4160d66e", "sighting_of_ref": "indicator--70e32b6e-fd32-4c11-9bf4-83233ba08bf6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eafc4f38-0356-4fbd-9f27-d99be517d565", "sighting_of_ref": "indicator--30f6aee4-9f7a-43dc-adb2-9d82f68ba8b2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a4945f-b3ff-489e-87c2-8c60fe162a4c", "sighting_of_ref": "indicator--29493221-fcf7-4c8f-b8b9-733dd055392b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09c7c55-2341-4f56-8f36-56595cb5dbc5", "sighting_of_ref": "indicator--faf1f24c-2854-4685-be9e-729931387adf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff4fc16-10f2-4cd8-8a7d-fc4f7b29f9cd", "sighting_of_ref": "indicator--904eac5a-f5e5-4143-b039-fc2a4ad421e7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e3e60d-863a-4a38-8d70-3b017188ea91", "sighting_of_ref": "indicator--904eac5a-f5e5-4143-b039-fc2a4ad421e7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f07cd9-dc0f-4b1a-b69a-6db56f246217", "sighting_of_ref": "indicator--8d0945de-9544-4486-8742-e51a19c54595", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171e95cd-4d84-469e-b3c9-e733240d7b20", "sighting_of_ref": "indicator--5e8e7a68-7586-4582-897a-93aff7fc436d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b80ff8e8-7880-48a4-822f-d44465b48c7a", "sighting_of_ref": "indicator--3733d5f4-a17f-415c-bf61-7c3cded2ff3c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac4dead5-fa10-46c9-91a1-4e30cf1420c0", "sighting_of_ref": "indicator--3733d5f4-a17f-415c-bf61-7c3cded2ff3c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff34ac57-d68f-440d-8d9b-3d13691eb942", "sighting_of_ref": "indicator--ccf25431-da56-4459-8501-e7f90973d255", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6f74077-f5f8-4351-be08-386a6aeb5caf", "sighting_of_ref": "indicator--43a34e12-0ac7-4225-a378-b7c4ea810dc1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e7deee-22ac-4e09-b1f6-18206934ae63", "sighting_of_ref": "indicator--a5e5ed19-1c5a-43a8-ba14-3b8329b945c2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4cb5ceb-314b-4dce-8d73-2c5eb2a27ac4", "sighting_of_ref": "indicator--51a5391a-627f-4710-b5c9-d48dfc3b48d1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55ba797-12e0-413c-b2d7-0eab761a664e", "sighting_of_ref": "indicator--7423d2de-6052-477f-bd58-a4d554c0b24a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bebe9b8d-0663-44d3-8918-d1acaec9af4f", "sighting_of_ref": "indicator--c140321b-0449-497e-83f9-e14b54af75e5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b52432-8400-498e-8e46-86cdeb9321a2", "sighting_of_ref": "indicator--fc6a4aaf-077d-47ab-a1c9-545dc09b8ec7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412467a3-da54-46ee-98c7-26aac6496c1e", "sighting_of_ref": "indicator--09a78e15-9743-43e2-a746-37b18ea5c07f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b626685-e424-471b-a84d-0df5576f4b9d", "sighting_of_ref": "indicator--bcebd57e-9e2f-4d0e-8474-27486ab78f02", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba392a88-e0f0-4a4f-9316-d25a62d77846", "sighting_of_ref": "indicator--bcebd57e-9e2f-4d0e-8474-27486ab78f02", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22635031-eafd-4138-aa06-0aa7a74ae4bd", "sighting_of_ref": "indicator--f184d576-4d0f-432e-b171-c1822a3f03d2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3230d206-2767-4a39-9556-49fae1c59e12", "sighting_of_ref": "indicator--adf0aa43-2a05-49cf-bbab-19f1431b28fd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--628e6672-ee31-47c9-a1ad-665fe72a58fe", "sighting_of_ref": "indicator--6ea6a7e5-0676-4b3a-9a22-62d425c50e66", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b162ec-09ea-470a-9f05-054768c7ef2a", "sighting_of_ref": "indicator--6ea6a7e5-0676-4b3a-9a22-62d425c50e66", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0587c478-b1d5-4bf7-8cc1-43c7fbc049f8", "sighting_of_ref": "indicator--3d4ff46d-24f6-4f97-af9d-5d94a254f048", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4664e8-29bc-4338-b3c5-02d597d531c7", "sighting_of_ref": "indicator--3d4ff46d-24f6-4f97-af9d-5d94a254f048", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebcd0706-27c3-4910-b9b6-7c72fd8651fe", "sighting_of_ref": "indicator--a2cc5787-f4aa-46f8-b6a2-3a64cf6a3fae", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b5b372-b8d2-4852-9d13-823d6e32ec71", "sighting_of_ref": "indicator--a4ea639d-fb29-47bb-889e-4c54a6570c1b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9fda12-eccc-4545-acb9-9b9324e8af03", "sighting_of_ref": "indicator--cdfccec9-482a-4c64-9c22-f46696124d51", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf874ff9-d209-40dc-aab6-bd7bdc5556ec", "sighting_of_ref": "indicator--ea85a914-9b7c-4ff6-844c-a9061acd620a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2160eb32-d5b8-4a7f-a300-8a0205cdda56", "sighting_of_ref": "indicator--bb340073-3132-40b2-8be3-c32aceaa5263", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93749201-2c51-4eb8-a86a-90ab07cc8a47", "sighting_of_ref": "indicator--0c5de092-636c-4ce7-8275-f834de2f0086", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e1fbf8-5f8d-45f3-a13c-1a62b5575607", "sighting_of_ref": "indicator--1239ae00-1780-4099-a9f3-87ef1102ad91", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b984c509-e5da-4c92-8238-88e6ff95cd0c", "sighting_of_ref": "indicator--a4fd3ab2-6ac4-4349-9c51-61423c530f8a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f9f28b-c57a-4d00-9370-f776575d6a28", "sighting_of_ref": "indicator--3571c123-f349-45b5-b8e4-23b6698b25c6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09dd189-bdd4-4007-9222-c23f10ec5968", "sighting_of_ref": "indicator--03e7896f-11c1-4413-a645-34807e7c0a70", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd656cfd-b3c4-411d-930b-85dd28189df5", "sighting_of_ref": "indicator--1a0f0a8f-f304-4d80-a273-dc5d7524e6eb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6692a1e-478d-46d9-9e56-53f1b51f8e51", "sighting_of_ref": "indicator--6de632ed-581d-4bd1-8309-291088b8d96e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd43e4a9-c5f5-47b0-860b-d76d2ab814d7", "sighting_of_ref": "indicator--2699029b-b9bf-463a-99bc-85a51299a743", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55502294-517d-4814-8a24-d5aa2ce142ff", "sighting_of_ref": "indicator--2699029b-b9bf-463a-99bc-85a51299a743", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa6c60d-f533-4bd2-b417-b5e98c7e3e07", "sighting_of_ref": "indicator--dda607a4-d7fc-4c72-94ce-3e8b44bd9078", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd718cc-a0dc-455a-aa41-13db1f90c06c", "sighting_of_ref": "indicator--d9fcc0f4-e869-48d4-ab80-72fd507c7b18", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--277be675-30e4-436e-a4d4-b3d6d68c698b", "sighting_of_ref": "indicator--a17213d4-f94c-4147-b568-acfbc0cb1979", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529ce6d9-c5a1-4178-b06b-7ec1fe7c55ee", "sighting_of_ref": "indicator--5905cec1-b766-4e54-834d-7ce48df35959", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c99de7f-59dc-4af1-b647-fd08f08caf7c", "sighting_of_ref": "indicator--12ed0a4d-039f-441f-840a-d80ddaacbe31", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd74614-8d92-4d82-bd50-fda902510066", "sighting_of_ref": "indicator--12ed0a4d-039f-441f-840a-d80ddaacbe31", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69195bfc-ac60-4fe3-bc29-609020083bba", "sighting_of_ref": "indicator--86195f49-035c-403a-ba57-2a72b682c6ab", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab29b33b-9303-4687-b8be-99d90560f0f6", "sighting_of_ref": "indicator--eeef37b8-c8de-4bcc-8714-0dc85f4fd517", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--300cda2f-20ec-4cf8-8764-04e051b41811", "sighting_of_ref": "indicator--7be1fdf8-702e-45d4-bab1-0e0100ebbb87", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed178268-e7ba-45eb-af52-de6c4d1e0ee6", "sighting_of_ref": "indicator--92178868-d77c-441f-a8f3-42bd264c8179", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97348e77-c00e-410f-93b3-44c2b0dd1bdd", "sighting_of_ref": "indicator--27b99f73-a085-445f-b01f-b7e7ac26c507", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28a0ab7-bd5e-4ef3-8400-bdb95213c3cd", "sighting_of_ref": "indicator--b152c69f-ec92-4370-bd15-e37be0eba5a1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a148f88-2520-4eac-a751-cb9e9ed04127", "sighting_of_ref": "indicator--ae117e44-8089-4cf7-ad51-e93dfd3b2e9f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d44288-9d6c-4ea8-b4f1-c3d6d961e7d9", "sighting_of_ref": "indicator--9103d87c-02b8-4424-856a-3e50a28b4c95", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bfd2a3b-24ed-4e2c-8a74-a6272276fc58", "sighting_of_ref": "indicator--b0d5946c-3994-439e-85e9-5ca59b57f144", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5aae0e-bb66-4fdf-980e-292b9e5bb43a", "sighting_of_ref": "indicator--73233000-e36a-4500-90b0-db2457afe177", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c203cac-3215-41be-91b5-aeeed4c4a650", "sighting_of_ref": "indicator--7a37d87b-3fb1-4f6b-bc9d-5ec1b03db39f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b418f88b-efe0-4f43-8c5e-c9f208416e49", "sighting_of_ref": "indicator--6b85926a-df1e-4561-b983-5a1234624c80", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d886ae94-5fb4-42c3-b3aa-459258af5a2d", "sighting_of_ref": "indicator--657ab1d6-a09f-4f44-ba7f-c6f6a68b7ba5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a51e94-1d20-4cc4-b9c1-b4e42f8e4d65", "sighting_of_ref": "indicator--2a0ec000-9995-4565-9cac-95003eb3288a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dbb2ec7-87b4-44ba-a223-86638a48dc4c", "sighting_of_ref": "indicator--c4c82251-bcac-444b-9b29-8cc62ada4a6c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c89458-74e7-4404-9673-a466c8a09785", "sighting_of_ref": "indicator--f79bcab4-c90d-4e3d-b11b-79e2b7f1f66b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55686eb7-fd1b-44de-8f8b-d1929f0c2f3e", "sighting_of_ref": "indicator--68621169-a06c-4609-b0f0-0be41e14c6b9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1db2201-1f02-4878-b2ba-306ae4052c4b", "sighting_of_ref": "indicator--f732df60-5388-407a-b079-e3c28da88f8c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9241f8f-e022-4633-bc74-9f79f4f8651e", "sighting_of_ref": "indicator--932dc9b1-0688-471d-a18e-697e7eeadd14", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46600dd2-835f-4152-a2b0-8a4bf3e5bbd7", "sighting_of_ref": "indicator--0446ab35-3f1e-4ed0-ab06-68c6635b1620", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff454785-7e87-48f9-8e7c-fbffb902a140", "sighting_of_ref": "indicator--6a20ff7a-9ad8-4ce2-a270-5c74991746bd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a8052e7-7486-4ff6-8654-6b758c13f473", "sighting_of_ref": "indicator--bcefa481-8f74-4881-b893-4296cd826cac", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6fbc0b1-11c5-44f0-844c-0d9aaeb716ed", "sighting_of_ref": "indicator--a2b6455e-14fb-416e-a62d-07a7e757a2a5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4152a58-af2c-4e57-bccf-67ff781d185a", "sighting_of_ref": "indicator--20008b30-3041-492a-b8a8-de95955fddd5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa639273-b789-48ca-ad28-1c8783b9061a", "sighting_of_ref": "indicator--b6608655-bba6-451d-9b59-7bd610cca6ab", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c0f7d9-2fd9-4f05-be18-f1f5a7006859", "sighting_of_ref": "indicator--1d540e5e-7358-44f4-926e-697e50c1b486", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff75e42-a412-453e-91bf-84876853b063", "sighting_of_ref": "indicator--cc2ef86a-e08b-4f0a-946b-47a22fbd6719", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead9d248-b3ef-4bdf-8100-ea5e1d799d2f", "sighting_of_ref": "indicator--392b051e-3c5f-42d5-aa68-049efbc2f9ff", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab4577bf-f4a4-4b0e-9a76-749a0805666c", "sighting_of_ref": "indicator--8eb66c01-4efb-415f-b8a6-1fa61567c327", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108805ff-62b0-4762-b568-1a69df60ce5a", "sighting_of_ref": "indicator--55cf99f6-b892-42d9-aba4-9dcbe5c92de7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3caecb1-d7f9-4c88-a2fa-f4823a266885", "sighting_of_ref": "indicator--c1432cbc-fb0c-4f15-9513-98a27264f129", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3265f55c-f0f1-4d1a-9760-bf33c690c485", "sighting_of_ref": "indicator--c671cf4c-4868-428a-9812-136c3b4b5dec", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--552da8fd-cafa-4f96-b0a4-530fd29559cb", "sighting_of_ref": "indicator--e79c4607-96ae-4008-b152-b83d7908c912", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c4a1d0-ee47-4583-90e8-9fb269558871", "sighting_of_ref": "indicator--b0fbdbfc-42cb-4642-9cbc-84774847eaf5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a4a91b-8a09-4d88-82ce-57bea9690ba5", "sighting_of_ref": "indicator--5fe51331-617a-4ca8-bbab-3805c2c60189", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac8f8e5-e358-4452-875b-d0f687b99f4a", "sighting_of_ref": "indicator--ea89cdf5-9439-4a46-ad8f-d70c11a8d1e0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a09b6f-075f-4d8c-a5bc-7640f3acea85", "sighting_of_ref": "indicator--f662eefd-6e2b-4527-b773-14bdabdc72ca", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d2ab03-0ed1-469d-bf18-376b12ce40fb", "sighting_of_ref": "indicator--3a037777-5360-4968-bb1d-b00cf0d4c3c4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23571d20-b744-4d43-af13-9586095c7ba4", "sighting_of_ref": "indicator--90d2c2f1-b8e1-4fd0-93da-a1ead612e37e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a53d7a6b-89ac-4831-bec4-218af5a77cbf", "sighting_of_ref": "indicator--474236f8-0764-49e3-a3fd-819a398f9b9d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--375a7c03-71c6-467d-ba83-480370c8c6bc", "sighting_of_ref": "indicator--474236f8-0764-49e3-a3fd-819a398f9b9d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee5ccc1-1d65-475b-8fc9-bc844ee3cb3f", "sighting_of_ref": "indicator--9c822490-15c3-4496-8982-386646d437e6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1dc2cff-d0cb-48e6-9107-f93af92defa0", "sighting_of_ref": "indicator--c07c4176-00e3-492f-825a-e73ca6ecf8a4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf43868-5aa9-4c88-84c6-605a5eea3c0b", "sighting_of_ref": "indicator--0a564910-3f52-4f57-8b76-472bf0a36a1e", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24115913-daf9-47ec-a438-d781734b9eb9", "sighting_of_ref": "indicator--cc077a85-0bef-4be6-9f2b-055590ae7489", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc2a0caa-3a1f-4eaa-94cc-8e816627df63", "sighting_of_ref": "indicator--cc077a85-0bef-4be6-9f2b-055590ae7489", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--effaf628-2875-4bea-8592-ba3b902c1309", "sighting_of_ref": "indicator--2d7c5fa1-1631-4edc-a341-02443f7d518e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51619b3f-7f8a-4551-b917-32f6994dc349", "sighting_of_ref": "indicator--2d7c5fa1-1631-4edc-a341-02443f7d518e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b12abeec-e5eb-4fe8-b4ee-dddca2351da0", "sighting_of_ref": "indicator--be65c5fe-f5e5-487a-bab0-e159d89d594b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--104d3679-643e-45db-a137-cf6c1363b0dc", "sighting_of_ref": "indicator--3aafd619-fa07-4c41-b14c-2cf45e4c0431", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6541699c-1769-4d62-9f8d-1b7f10795cb0", "sighting_of_ref": "indicator--3aafd619-fa07-4c41-b14c-2cf45e4c0431", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf24bfe-38ab-4334-9331-f93d0ff90893", "sighting_of_ref": "indicator--dace5bb3-b3ba-4541-b94f-9ef587cf4aa5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dff63fc1-d28a-401d-873a-92101514f61d", "sighting_of_ref": "indicator--654d4837-aa35-4c37-a1c6-459b0ab5164f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7303b977-434f-4d04-8a80-daf9ee4c9daf", "sighting_of_ref": "indicator--260a059a-cc2c-49b8-ac76-13a2265b3140", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71606b2-e2a2-4195-8cd4-9b5c606f8e92", "sighting_of_ref": "indicator--9df07e16-0998-4bd6-b345-123fc1ad0074", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce26c16-1d11-4b79-a986-717b4982dbbb", "sighting_of_ref": "indicator--67948d5b-3997-43ed-b9b3-2e93b7281297", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f696403-5e17-482f-82cf-5e06d3e670ad", "sighting_of_ref": "indicator--adf55ec0-b310-4024-addf-66357f9431b6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6092a0a8-f543-4ef2-ae00-3c6f85d27e9c", "sighting_of_ref": "indicator--8c25c512-c0eb-45e9-85bc-2aa5fd321410", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11dbd647-84b6-41c3-a1b1-683c6d73c275", "sighting_of_ref": "indicator--3a3b4de0-b88a-4639-a148-47f12d0e8a91", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca10cb5-6fd0-4936-9bac-226581d7d8f2", "sighting_of_ref": "indicator--85bbc677-2d56-4659-83c3-c422550beb70", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da521806-f948-4501-ac47-bd618577ec01", "sighting_of_ref": "indicator--0f72d205-908d-4af7-aaf1-9062d2def7a4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3365adf4-2fe1-48f7-884d-3aafbb0acc8e", "sighting_of_ref": "indicator--c5592973-4cc3-460f-ad1a-22a458fe75e9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd17230-f008-4afc-9060-0f6b156e4553", "sighting_of_ref": "indicator--58b4f6f7-4b8b-4d7d-9d72-767c3d591fea", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5232bc3c-c0c9-4cbb-a446-da61bb331e4e", "sighting_of_ref": "indicator--46d54854-b073-4044-8b1e-afdd9d9d9a72", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f6df42-3ae1-4f62-9876-226a549af4da", "sighting_of_ref": "indicator--57e2e19f-4d39-4684-a493-98bb3720f202", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d39d10-6704-45a5-b1cb-28ff2cd5c6a6", "sighting_of_ref": "indicator--7aa8e4ed-451e-49da-b695-f467fd1dd34f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409720fb-f158-4a7e-9122-701bf73ed34b", "sighting_of_ref": "indicator--7aa8e4ed-451e-49da-b695-f467fd1dd34f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8f8b5c-28c5-47cd-b4cc-4cf3e179ca1e", "sighting_of_ref": "indicator--ec89cb9b-9503-4efe-b1b3-f9636f3ca5fc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b497a536-de6f-4d97-a4d0-d380d44e1157", "sighting_of_ref": "indicator--ace7703c-f440-48e7-8b2c-9a1a4bd951ca", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd604949-621c-4f3b-aa12-af15e4f29a1c", "sighting_of_ref": "indicator--f38e4800-25e3-40d9-8bb8-31d09d6bdb0e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cfbf1e1-5355-45b5-9251-f4a7d1f33e40", "sighting_of_ref": "indicator--9aaf13c9-4298-4ea8-9ca9-532ec9f5df35", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e02be0c-3315-40a6-b77e-5dcd2ce6edc1", "sighting_of_ref": "indicator--806bfd97-fad5-4a93-9a95-48fdd38ac93c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16e0916-60fd-4db5-a099-ac641484bc8d", "sighting_of_ref": "indicator--57c2e3d0-3dc1-47cd-89eb-1bd7c37cc176", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce5b370b-60b9-4310-9c76-8a855db2fc17", "sighting_of_ref": "indicator--a408b160-3506-4176-828d-e360eb44e77f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6c3155-555e-431e-8a72-6adae3d5c393", "sighting_of_ref": "indicator--4e8a6896-9b67-474e-a01b-19e5139580c0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df4ee929-c89a-4099-a71c-93cbb11ccb93", "sighting_of_ref": "indicator--129ce49a-a63f-4111-ba82-e7a2346edc21", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a605a8cc-6516-4949-926d-b0fec0bcba2c", "sighting_of_ref": "indicator--5a1d5a95-85e3-4199-bc44-14cc8910b9a0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd89045-4ec2-4dd3-b56d-06c12fc5fd2f", "sighting_of_ref": "indicator--8de7bd3e-b6b1-4bab-afc0-5087f91b5ee9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4da973-6663-4802-89f5-2810e98c587e", "sighting_of_ref": "indicator--5507d900-444f-4157-a9a5-7532b0697db9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066e290a-4e6a-490d-b044-771a584265d8", "sighting_of_ref": "indicator--2bdc8f5f-e976-4e46-81e6-a2025cdf2e3d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c47d9ff-43b8-4c6e-b515-a564f25983ad", "sighting_of_ref": "indicator--bf2fc92a-f484-4a53-b0f8-1e3d04ed25dc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73723374-08af-43d0-97eb-f28b23ca61d0", "sighting_of_ref": "indicator--3689aa26-ea50-4b98-afc8-e029b5d6c88b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ec1400-8be9-4df4-9fca-9d5789798727", "sighting_of_ref": "indicator--c48bf909-26a5-4a3b-9fe7-a05592fabfd1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6d55b0-51ea-4719-8fbb-6911fade8469", "sighting_of_ref": "indicator--b6578ca5-4228-4bfb-bc2d-d35bbeda2d0e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b660fc8-dff0-4e08-9d0f-62e16cf077be", "sighting_of_ref": "indicator--d0978148-3105-4a32-a80c-02ef928b386d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d304181-fb7f-4f24-935b-62fad0a9acdc", "sighting_of_ref": "indicator--8d1448c8-75e2-4b48-a8bb-d120103e6b3d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac50d4b-ffb7-4b5a-9a07-9b3a76466f5d", "sighting_of_ref": "indicator--22a26365-178b-49bf-8f90-cb94ffa6daee", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d08cf1-805f-4ada-9fc9-c87b2efe0ac8", "sighting_of_ref": "indicator--a6c7c90d-1b36-4d42-a5ad-6d05843ce3b7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e96dd21a-b090-40c3-89f7-e3ef8cfb7eb9", "sighting_of_ref": "indicator--5a783f55-167d-4202-93df-49094ade9273", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f1351e4-e6a5-4d80-95f0-9e3e54024d2a", "sighting_of_ref": "indicator--378e665f-2bb9-4dd6-99e1-5f6bd5ee60fa", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38429cf3-03af-4651-9891-cf28742bc3a4", "sighting_of_ref": "indicator--1ca291f4-e080-4ca9-b427-731e18b31e82", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef5e7497-414b-49ae-b504-2f2f6beb519a", "sighting_of_ref": "indicator--7acc0347-e0e2-4c1b-9b80-96ad08f2e5ff", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb18109-09f2-4fc4-8de1-b364888af640", "sighting_of_ref": "indicator--989f7f23-fcfb-4383-afde-3c5f6385f22d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf12068-d2ee-4672-90f9-ec1d9c767a81", "sighting_of_ref": "indicator--7a6ee092-7313-4f44-8493-2ef0d3439e74", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7c99d7-982b-4a31-8016-7174e2e47f3f", "sighting_of_ref": "indicator--1ff1a165-8e76-4c95-83eb-c09b3070f6fe", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ea5d94-3fb8-4ed3-ab3a-e7442f8f9877", "sighting_of_ref": "indicator--6753eb5f-a042-4536-9273-946b03a3eca6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7542d62-56f4-47e0-a868-e0c76d4703dd", "sighting_of_ref": "indicator--c7bee40b-f220-4ef1-8194-7728bedb3b7f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49b8d00-92ad-461d-9c00-cce7d9467670", "sighting_of_ref": "indicator--0766d6fb-4da5-4a5d-bd9d-73b27b3dbb42", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--925551fb-966f-49ba-aae9-e49b19bc7cb8", "sighting_of_ref": "indicator--006da60c-5e25-4334-9b45-acd3d677d2ad", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306a91c6-a896-4ddd-a359-919f138a1637", "sighting_of_ref": "indicator--006da60c-5e25-4334-9b45-acd3d677d2ad", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f41c40-cfdb-43da-8f33-f10a178ba210", "sighting_of_ref": "indicator--1ef79a6c-f473-45cb-bcdf-d899391b9af8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b186a67-fbb6-4646-a925-1e1bc2dbfcf8", "sighting_of_ref": "indicator--1ef79a6c-f473-45cb-bcdf-d899391b9af8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--675f9f61-8e00-458b-a48b-10e8b5b855f7", "sighting_of_ref": "indicator--725674f6-8323-4633-9e97-d461b6c17427", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6371c33-6a56-44d5-8807-68650499d0a8", "sighting_of_ref": "indicator--874f0bed-c492-45c2-b5e9-1257c668302c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4be8f7-e40f-48a8-90d0-910ba22cfd45", "sighting_of_ref": "indicator--6def19a1-8311-4376-be46-de744b1ba4f1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fdf53bf-ab36-43c1-83a5-dfb0cf94c807", "sighting_of_ref": "indicator--d2c5dc6f-219c-45e9-bdd0-18a9416c3d52", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11192eb7-c815-4f11-97d6-8f3c49d9ede7", "sighting_of_ref": "indicator--5963123a-33f9-4bd2-a114-aec514d64574", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2540bec-daaa-47bf-a42c-d5407e91b302", "sighting_of_ref": "indicator--e9136266-d3b3-4ccd-9fe0-2cea5eacf52b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b99d8a-4725-4025-b784-57b790ca6013", "sighting_of_ref": "indicator--101e85a4-c1c8-42f3-b77c-7f73b4c934d5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0033906-2826-478f-9a8c-152252d85be1", "sighting_of_ref": "indicator--17a2c6b9-d797-4122-a24e-b3e4ec3da096", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b616e9-e373-4b51-8519-37c5a069ff77", "sighting_of_ref": "indicator--ac9b9c34-fda0-442f-873a-838a95c0241a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f1717a1-d527-4129-a43e-727d684ec15f", "sighting_of_ref": "indicator--1062f957-4f49-43f5-91b1-5feeae2f531b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5165d6b-c8d8-4eee-9812-a6fbb9c9c211", "sighting_of_ref": "indicator--f8a2e009-cfed-4f01-8391-945a54fba3fa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3ddfe3-ef64-442a-82b7-50f1f3666820", "sighting_of_ref": "indicator--87a698e0-040a-4362-8805-8bbc521ca7d0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83bb5d9f-4caa-4c5e-8d67-1d69f34e2c0b", "sighting_of_ref": "indicator--ec0a774e-f088-4889-a48e-be3f5b3ebdec", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--481c7889-fd77-4d7d-bc4d-860c31671ac8", "sighting_of_ref": "indicator--ec0a774e-f088-4889-a48e-be3f5b3ebdec", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf60da3-0d54-4b45-bc4a-a418a1ca36bf", "sighting_of_ref": "indicator--15d8253b-8515-4fd1-9b5e-e4daaafeda16", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc8275a-4080-44a4-a01b-e94ef91a7008", "sighting_of_ref": "indicator--a8d08889-6011-496e-9d0a-d88555839d26", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49725fcf-902a-4db5-8eb4-e9ad0375bade", "sighting_of_ref": "indicator--a8d08889-6011-496e-9d0a-d88555839d26", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c7a8878-bd9e-4506-975b-3ad0336c89ba", "sighting_of_ref": "indicator--e4471e08-4ecd-4f56-a4c0-ce7ac51fee5b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef3fe98a-8113-4204-acdb-947f97d94868", "sighting_of_ref": "indicator--e209b87d-98ad-4453-bd78-a878e05262d5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf5976b-ba47-47a2-abd4-06dc84a52080", "sighting_of_ref": "indicator--51b16760-68a6-4775-b947-05dba9ba4034", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc433dd9-e384-45d6-b145-e3b677ae04f3", "sighting_of_ref": "indicator--51b16760-68a6-4775-b947-05dba9ba4034", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57868517-08c6-4569-bda5-a71c0b652c76", "sighting_of_ref": "indicator--c0d83a8b-d08c-444c-9ac5-56555c44603f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b14dcb2-4f98-49d4-9fe0-41382f0fb131", "sighting_of_ref": "indicator--693cbe31-b574-474e-b997-cd38f6d7ecaf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae8ac8e-7c51-4aaa-ac9c-310f520d37bf", "sighting_of_ref": "indicator--6817ea1d-58b8-4236-a590-5c0f8da5618b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2d0769-6da0-4848-bce9-cb901d6649c7", "sighting_of_ref": "indicator--86c51e96-dac0-4d79-a4a4-1736a666a2e1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6236fc-0e92-4bde-9c6b-da84e7809cd1", "sighting_of_ref": "indicator--59a0899e-eed5-4ef0-86c9-1cc4be03c49f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aecea39-dc04-40b1-8850-834bd348aec1", "sighting_of_ref": "indicator--394333b4-fb80-465c-b06c-7379b6ec75c5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82faada4-aec4-4504-aa57-0a7f16cec819", "sighting_of_ref": "indicator--d6dbb6d9-5ead-4111-a23c-0b9535b8f2a5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6e4a66-2e6c-4e02-a159-4883e5eadafc", "sighting_of_ref": "indicator--0d9de8c1-5b56-49b0-bcc9-193d9dcd2c7b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6213139e-5611-40cb-94be-036cdfe05cea", "sighting_of_ref": "indicator--549e8024-cda7-49ac-b3bb-10ba9cdea5e4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f5fe7f-fa91-4c3f-bafb-d39ab4d979c6", "sighting_of_ref": "indicator--dd31c8ea-1160-4cee-aa95-a6032854fa24", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17132dfc-db40-43e1-8dac-28d130b15318", "sighting_of_ref": "indicator--dd31c8ea-1160-4cee-aa95-a6032854fa24", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c527809-4736-48db-8c78-d861ca73758f", "sighting_of_ref": "indicator--b9c40bc3-80ef-4085-a4a3-f28a097dcbaf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5867438e-acef-4f2a-b76a-a3a4cffa642a", "sighting_of_ref": "indicator--b9c40bc3-80ef-4085-a4a3-f28a097dcbaf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc18360c-0542-4c4d-81dd-3a68c260b6d3", "sighting_of_ref": "indicator--11e49610-2c64-4df9-b48b-0869b3bc2203", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f407d505-c561-4849-99a5-f7c4b6eff1f6", "sighting_of_ref": "indicator--f2a42e2d-1fc0-41fb-b671-90958d610015", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed902fb-7fd6-42dc-a679-279a9bb0756a", "sighting_of_ref": "indicator--f2a42e2d-1fc0-41fb-b671-90958d610015", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53036857-3213-4411-bf7e-920c96a786e1", "sighting_of_ref": "indicator--909e8190-df3b-4c2b-bfc7-45e0f3490f6a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063347d2-6718-4031-a0c8-745528c09373", "sighting_of_ref": "indicator--04de2ace-a82c-4d14-9ad2-2bd6e05fd953", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--889d84c7-a888-4d0a-bc76-7a764ca3e5dc", "sighting_of_ref": "indicator--5fd93635-aaf9-483d-a764-5d8756e9c792", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94403ce0-1711-4be4-933f-25384b7b3392", "sighting_of_ref": "indicator--0cf29d8e-5e71-4ab4-9e62-770341624298", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d45e6f8b-b527-4e25-920c-574b693178c7", "sighting_of_ref": "indicator--70809dbe-d815-4b8d-8e7f-711d8ddbb500", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ca291f-2737-46f0-b63d-e5e266c96b88", "sighting_of_ref": "indicator--05635276-28bf-4f5a-b6d5-23198e437839", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab2b15a-0836-46e8-9cf2-b06260b35088", "sighting_of_ref": "indicator--7fbf188d-ddac-4e46-a3e5-9f132987190a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4409b01e-e2a0-421f-9dd7-2462649af26b", "sighting_of_ref": "indicator--e1703d23-2f11-48c4-8ff9-ac396c93229c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e6db82-3467-4ff7-87fe-fafdd801ad05", "sighting_of_ref": "indicator--89531006-b793-4ebc-92dd-27bdb65b12b0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b8015c-94fc-4d5e-a160-5b1249970ce7", "sighting_of_ref": "indicator--6034ad2b-d133-4cbd-9069-a1baab030aaf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc894cd-c936-4315-9a83-8ee4d3f67bdc", "sighting_of_ref": "indicator--6034ad2b-d133-4cbd-9069-a1baab030aaf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da491a6-3269-4aa8-ae58-e7f36b8a5041", "sighting_of_ref": "indicator--24739737-553f-48e4-8e10-861dc2b40aaa", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44324671-fa7d-4f46-a05e-15c1785a7e66", "sighting_of_ref": "indicator--4735affd-9dc2-40ff-a530-1213f580e708", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a80e87e-b486-4e4b-90bc-9075f560ce53", "sighting_of_ref": "indicator--270da02b-9cc8-418c-957a-42dd54fc94fc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c40f57-5c89-412c-907b-077623fb323b", "sighting_of_ref": "indicator--4e94a3d2-e767-44aa-9709-dfdddc34feac", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee4f094-7b0b-4859-bb93-e4f674b323f1", "sighting_of_ref": "indicator--724f5a1d-1133-46f1-ba09-9449d4901938", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bab21fe-f4eb-4a02-8933-ff9c28e6fc2c", "sighting_of_ref": "indicator--23aa3e8f-537a-445c-ad23-166752cc96c7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679eb13b-e1a9-4f96-9af3-434610ec0c5c", "sighting_of_ref": "indicator--bf10721a-6e77-497f-8ef6-60805b8dc45e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd98298-f68e-478e-bfec-bf2c7d4e34fb", "sighting_of_ref": "indicator--b1b45aab-09b0-4240-a63d-671cb9448068", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d13abbc1-ee73-4a92-9cc9-39e216e4cfa5", "sighting_of_ref": "indicator--9cd8bc5b-b84e-4756-a498-96287c2f0b7c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f4d8c9-dd47-47d4-b56a-ee85c91f847c", "sighting_of_ref": "indicator--9cd8bc5b-b84e-4756-a498-96287c2f0b7c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195a326a-3747-4fa6-9a7c-51a9763e9dc2", "sighting_of_ref": "indicator--9cd8bc5b-b84e-4756-a498-96287c2f0b7c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c17d4f7-2fa3-4d7c-9acd-50fd41e5503b", "sighting_of_ref": "indicator--b19a6b20-c8bf-443d-90ff-a16cf23c3d0a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b58eabe-09ad-43ac-b7e4-dd017036a148", "sighting_of_ref": "indicator--b70a48f7-04fd-4993-8c95-6687d309068e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ceb710-025e-4e61-b736-66bb012ce71b", "sighting_of_ref": "indicator--cac22717-2563-41f7-8824-a49562938a3a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10e9d36-eb31-4420-ada9-0ff0b0fd419d", "sighting_of_ref": "indicator--81428f56-6b9b-4519-a06f-41b46b127ad8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d94d233c-1e2a-48f9-a9ce-4071fc7d5fa8", "sighting_of_ref": "indicator--aeef56e2-6ce7-45d7-9511-b3b15647f52c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4505af-1ba5-4ef8-a05d-b0bfc0f086b4", "sighting_of_ref": "indicator--2e57a33a-4f38-454c-ab05-982c36512a1e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--320ebceb-94ae-4945-99e3-62ecf64e902b", "sighting_of_ref": "indicator--93b0fdff-bc11-4441-a35e-f8a754097141", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea677212-fa17-4b9d-9fc7-dd592aea57d0", "sighting_of_ref": "indicator--abbb83dd-5ee3-49ea-b711-66967a367ffe", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0251c55d-1bd7-4fb2-88d3-8b2279d8b897", "sighting_of_ref": "indicator--19335e83-36e0-4c6d-ac0f-6735ae084e86", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643697e6-d5a8-4193-b45d-e23d8fabc3c4", "sighting_of_ref": "indicator--523b98cd-c7e9-4644-8fdc-885749bf8575", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6892d3d7-1a3e-465b-a787-545a5f8b3206", "sighting_of_ref": "indicator--20296dd5-d42b-4223-b31d-7d62bb1590a3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99160d0c-0dbd-4205-8756-f623ea4d258b", "sighting_of_ref": "indicator--6fafc55e-15f7-49fa-8050-44143dc2823c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de6e134-6199-4553-a1a7-5fc72378f92b", "sighting_of_ref": "indicator--ed0450a6-d3b7-4d6b-84c9-61d05c58700c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab1aa09-2bbb-43c3-a4bc-2ae095ffe5ce", "sighting_of_ref": "indicator--ed0450a6-d3b7-4d6b-84c9-61d05c58700c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68bed968-1aff-4e88-88c6-12ff94e34dee", "sighting_of_ref": "indicator--9ae08348-8066-4604-b1c1-baf85971a61f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2285feb-abb5-4ff3-9cff-63347bedb44d", "sighting_of_ref": "indicator--2d9b10d6-fa12-4a8c-9ac0-5995deb6b31f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd5ad4ff-f2f0-484e-9f92-cfed014c047f", "sighting_of_ref": "indicator--28ad2a92-658d-45ed-9a52-e0dbeaa2dbca", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c04e6c-a207-4878-855c-dbce59210b17", "sighting_of_ref": "indicator--e3bec956-378a-414a-a9e9-72cf26501491", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d442c4-051a-4bab-87c1-c3961cd51ee3", "sighting_of_ref": "indicator--925676d6-e6bf-440c-8296-b2b3fec1f042", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d87376a-f507-4edf-af2e-13cc0c7650dc", "sighting_of_ref": "indicator--8c58da63-248d-4529-b0c3-4a709b71b15b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b6f564-8beb-4609-b364-edc484d2efe9", "sighting_of_ref": "indicator--0372dd23-3bd6-4856-9606-2b89ee9d6de4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cbbde4c-af0f-43ac-a6d9-f7ea80113981", "sighting_of_ref": "indicator--ac90063b-6154-4dea-a5ae-dbef83ec898b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01cd027b-676f-4379-bd53-b26385fc2cf7", "sighting_of_ref": "indicator--df696312-b979-49ec-a47c-c74b94abe735", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74dad811-71e2-424f-a1af-720aed81f915", "sighting_of_ref": "indicator--3332bc06-9641-427a-b652-fd1fc53bdc1d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a47883ec-ad4f-4786-9627-219b74b05c28", "sighting_of_ref": "indicator--3332bc06-9641-427a-b652-fd1fc53bdc1d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b7ad46-513f-4fa4-90e4-fd8b414da587", "sighting_of_ref": "indicator--3332bc06-9641-427a-b652-fd1fc53bdc1d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a5d417-a5cd-464e-98d9-30b814b2f2f8", "sighting_of_ref": "indicator--175cc151-2524-41c5-891f-39f61407b131", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--128cacbf-2a2d-464c-ab15-b2740856c44a", "sighting_of_ref": "indicator--175cc151-2524-41c5-891f-39f61407b131", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32acb95f-b98d-4620-ab83-e97984b82fbf", "sighting_of_ref": "indicator--175cc151-2524-41c5-891f-39f61407b131", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9fef2b-1071-4387-9762-ace0a282b06d", "sighting_of_ref": "indicator--bdee07a8-6b66-4f7c-9905-7a4bfcd424e1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f917e1e0-5fc7-45ff-af95-fbfecb4586af", "sighting_of_ref": "indicator--bdee07a8-6b66-4f7c-9905-7a4bfcd424e1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b383b28-3072-491a-a56a-2ac8581c213c", "sighting_of_ref": "indicator--ac608e6f-eb86-40db-bf4d-8540b9ac7a1f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a7aa68-4f6c-430c-bf96-7d185728f514", "sighting_of_ref": "indicator--852ca7c8-802c-4f9a-bb28-21fde46072cb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6932ca04-db4a-4cd9-99b1-01670e7cfc1f", "sighting_of_ref": "indicator--7670cc8a-e57a-45f9-9c52-6adad82ddcda", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26326404-7414-4b6e-8cc5-883b3d1f859b", "sighting_of_ref": "indicator--d4985b68-d256-47d3-a66b-7d5d3efc18ec", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2efd88cd-9db1-4ac6-b37f-fc85d11f5dd1", "sighting_of_ref": "indicator--0a5e6a90-818a-4931-a9cf-e6b5933bafab", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a99391-1996-4b48-a99c-b0feb74acfee", "sighting_of_ref": "indicator--163ebc57-65e2-4624-aca9-d85cf74cbcb8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--657391ea-ea9f-4c1b-8320-a8de38c8ac98", "sighting_of_ref": "indicator--3db45d42-b672-4ad9-968c-7bb54480f963", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb44366-0af1-470d-b3a8-13a06a9239b1", "sighting_of_ref": "indicator--1cbb939a-9b2c-4734-a595-adcf149a9d35", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a9ae22-85ab-4fd6-923f-b10e31911e7b", "sighting_of_ref": "indicator--238a457b-a5ae-4cb3-bf99-e21c4ba89dfb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe9a92c-4bba-4d6c-a376-376825bbc72b", "sighting_of_ref": "indicator--238a457b-a5ae-4cb3-bf99-e21c4ba89dfb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--198ca269-0197-4cfc-a9ab-3aacd47aea61", "sighting_of_ref": "indicator--238a457b-a5ae-4cb3-bf99-e21c4ba89dfb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd49e66c-3534-42d4-a8d6-69935a8ac210", "sighting_of_ref": "indicator--a389d24d-5c8c-4447-a039-2c52bd4b39cf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f0683d2-8bf7-4e34-b467-a8c2b1e8f2bb", "sighting_of_ref": "indicator--bf86a471-ef67-4209-940c-4a6a000e6044", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41cf49e0-d37f-480a-9962-e0b54dba3dc6", "sighting_of_ref": "indicator--bf86a471-ef67-4209-940c-4a6a000e6044", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909c21d4-9ed6-4760-bd9e-93dc48119724", "sighting_of_ref": "indicator--bf86a471-ef67-4209-940c-4a6a000e6044", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--671b7e7d-e751-44c1-9330-086bd4704845", "sighting_of_ref": "indicator--3adec3a4-5fa9-4cb8-b2ae-59ed3f92a280", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0cd78e3-dddb-43c9-9868-71f9c7b1df44", "sighting_of_ref": "indicator--3adec3a4-5fa9-4cb8-b2ae-59ed3f92a280", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0d9b0c-b258-4b44-b920-30a3cc4665cd", "sighting_of_ref": "indicator--2f266c05-d2eb-40f3-b8a5-88fe0e237cbf", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031a8616-4652-4949-9e20-70581802ccbe", "sighting_of_ref": "indicator--87ff504f-72cd-4d6a-ade8-d90ef926179c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eec5886-9b79-4ac5-acf3-6288e6719f9d", "sighting_of_ref": "indicator--1998ce71-239d-4011-96ff-04d549e6b59e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01426d9d-d4fa-49de-a13b-042b787e0afe", "sighting_of_ref": "indicator--713be812-094f-4218-81b6-016838181972", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c5adfa-e9fd-4fa8-990f-ba7ca9c1d3fc", "sighting_of_ref": "indicator--46bf7162-6e80-459f-aa72-26ae07f24750", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9feef3-c03a-4630-84bd-3d362bc3b11d", "sighting_of_ref": "indicator--aaf9af37-cdd7-4154-9a27-4496e41e5c90", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa4b952-271b-4cf4-b140-8854287e0ad9", "sighting_of_ref": "indicator--aaf9af37-cdd7-4154-9a27-4496e41e5c90", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce4036d4-a834-4a83-865b-db2ab378093d", "sighting_of_ref": "indicator--e668420e-0325-4d5f-9275-63db17321988", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27dbbe32-b16b-4c72-add0-5e8d56234396", "sighting_of_ref": "indicator--e668420e-0325-4d5f-9275-63db17321988", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7907347a-cf57-4399-ba87-a5de7e71bae3", "sighting_of_ref": "indicator--e668420e-0325-4d5f-9275-63db17321988", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd2409b-a941-4f70-821c-721737f1e736", "sighting_of_ref": "indicator--3a8875eb-7586-4a5f-90ea-0f511eba9547", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d650c26d-4e3a-4f5c-96cd-123d475fec8d", "sighting_of_ref": "indicator--4a13e997-476d-4a0e-adcf-4f1a8ff5dd99", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a75381-91b6-43de-83e7-2f06f5b3a9e9", "sighting_of_ref": "indicator--4a13e997-476d-4a0e-adcf-4f1a8ff5dd99", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7dced4-f7ae-49c2-9ba6-c524c453635b", "sighting_of_ref": "indicator--bff4b125-ef5b-4021-b69f-ffa31f1badec", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee8d3e38-fab6-4d75-af01-36dbf37f5a5a", "sighting_of_ref": "indicator--bff4b125-ef5b-4021-b69f-ffa31f1badec", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01677a41-9e47-43ff-a59f-357a1c0e03dc", "sighting_of_ref": "indicator--d8c97602-462e-4aa5-859d-54d0ab6626d0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfada136-e5b4-4d0b-8328-7644fe43449b", "sighting_of_ref": "indicator--8ff2cc84-7012-4a23-af07-2d59bf1d4bb4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a647020b-f9ad-4212-a3a1-42f09ebd6662", "sighting_of_ref": "indicator--1ec83207-46ca-4721-9f53-731dd167ad5b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9343b6c-82b5-4ccd-8e20-1ac5092afe5f", "sighting_of_ref": "indicator--1ec83207-46ca-4721-9f53-731dd167ad5b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25dee634-a51e-425d-83a5-af2f387b0f45", "sighting_of_ref": "indicator--8791356a-5b79-4111-a8ab-2928b4c606c5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f14c6cae-ef82-4752-9068-f25b13c047b7", "sighting_of_ref": "indicator--6d682e9c-ea0e-4577-9709-943d0edc43c6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e02184-6f62-4510-8d42-6b60a616af59", "sighting_of_ref": "indicator--6d682e9c-ea0e-4577-9709-943d0edc43c6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f401779c-315f-49e3-bce6-a3f40d3e0a2d", "sighting_of_ref": "indicator--7cfa2a3b-570a-4a46-805e-ccbf2bea7b64", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac083a62-2c22-473d-95e8-2013f037e12a", "sighting_of_ref": "indicator--513634f5-dc7a-4088-8795-fbb8f76b8c04", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85260f1f-0308-49f4-8ad1-269e19685f43", "sighting_of_ref": "indicator--0ee13615-e4a7-4561-b507-32bbac3abf54", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b8a5cd-61ea-4f99-b474-f6a2fa23b9ca", "sighting_of_ref": "indicator--75a07627-1a77-469b-baba-b4af8abdfbfa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15f63f8-4234-4937-89c3-6df6469b1795", "sighting_of_ref": "indicator--e487791a-da3d-4f15-a6f2-afd23663b1cf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f363fbb5-4492-408e-8c45-814c65832b9d", "sighting_of_ref": "indicator--eb8ca4a0-3bef-44e6-b024-89f3350feb61", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5723737b-c2e4-4c4c-a612-44dffee854e4", "sighting_of_ref": "indicator--abf4b8b2-1bb5-442d-a982-fd1b9cfeb382", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778383e7-5672-4eca-bf9c-1206a50fb3ef", "sighting_of_ref": "indicator--612b5fed-9914-45c6-98a3-4a46d37302bc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b35283d-6407-450f-8331-b91c27b62619", "sighting_of_ref": "indicator--612b5fed-9914-45c6-98a3-4a46d37302bc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ff74ce-7ca7-4236-a978-9eb78e244df9", "sighting_of_ref": "indicator--b0682aa6-bbc9-40dc-94ec-61ac22049fa2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6992f9d4-4a37-4965-83e4-e36fbc13ecdf", "sighting_of_ref": "indicator--cb9b21a5-5296-4496-8889-3512e3691330", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcacd78c-bbad-4c42-a937-9b7d6aae4d03", "sighting_of_ref": "indicator--03b7d42c-bbd2-4573-a3bd-1da5f89bc26b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9db9d81-5865-4146-b7ff-b8f6bcb56026", "sighting_of_ref": "indicator--5a8c41cb-5e76-4858-99b5-934b6b28cb6f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42eafa98-5aa0-4f2c-9003-2f35bd83a83a", "sighting_of_ref": "indicator--d2c909e9-af8e-4569-ae3c-0996e18c4492", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62decd2a-1120-49bd-a1d3-8791738ca394", "sighting_of_ref": "indicator--c9f42649-1b68-45d3-ae27-cff27f0d725b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f58a48-4df3-44c7-a783-bd55558f31d0", "sighting_of_ref": "indicator--942fd9a8-0375-40c9-8e73-e1dddaadad8e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cacee155-0701-4ddb-a7b4-450684af1d65", "sighting_of_ref": "indicator--1e45c036-bb4a-406a-92b2-89e6b6df55fc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dff169fe-f7d9-4454-932b-ddb38ac64000", "sighting_of_ref": "indicator--1e45c036-bb4a-406a-92b2-89e6b6df55fc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9605eb4b-0b83-4b65-aedc-59a2007f9dc7", "sighting_of_ref": "indicator--3b66b205-b1c6-4789-ad02-ce08ade099ea", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--223cd9e6-f495-44be-af70-0c9fbb823240", "sighting_of_ref": "indicator--e8060b1c-c7e2-4e61-bafc-12aaa030b482", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb4b61d3-d45e-4069-ac19-cb6cf9d0c45f", "sighting_of_ref": "indicator--e8060b1c-c7e2-4e61-bafc-12aaa030b482", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c7e488-ab29-435b-ba05-2882fe4912c9", "sighting_of_ref": "indicator--070a556a-45ee-46d0-b8d4-050ee2bea6b8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e771fd-8c8c-48c6-b5cb-56c855ec511a", "sighting_of_ref": "indicator--070a556a-45ee-46d0-b8d4-050ee2bea6b8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815b07e4-c9aa-48c8-b656-198aa8a9be7b", "sighting_of_ref": "indicator--070a556a-45ee-46d0-b8d4-050ee2bea6b8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3577ae6f-276b-4e98-a97d-e08708702bce", "sighting_of_ref": "indicator--400b0c1e-5cb1-4989-9a10-21dacaf101e2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255dfbc7-4a8e-484c-8a2c-35188e953357", "sighting_of_ref": "indicator--400b0c1e-5cb1-4989-9a10-21dacaf101e2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67137e30-faf1-414d-a8ab-db9a1716fa1e", "sighting_of_ref": "indicator--400b0c1e-5cb1-4989-9a10-21dacaf101e2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81d18ec-affa-4c5d-9d53-6e5a37a243bd", "sighting_of_ref": "indicator--d2c8275b-580e-4fab-b060-750aa2378c0e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a8629d-e77d-47f9-a1de-b721e31ec7da", "sighting_of_ref": "indicator--afd642b7-adaa-4879-8282-252969cf3134", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9c4776-eba4-4240-ad42-edd663aa1e3d", "sighting_of_ref": "indicator--fa688578-2c5c-4d71-b6ab-ccf59526023c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4b958c-155b-437e-bf59-9e74688b4665", "sighting_of_ref": "indicator--9cb540c1-69d9-4bf2-9e56-40f807948daf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c7f7e4-aa2e-4375-b7a8-c16e3b06dbbe", "sighting_of_ref": "indicator--9cb540c1-69d9-4bf2-9e56-40f807948daf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e2806d-5d9a-4fe5-9da5-7d2868f34a1c", "sighting_of_ref": "indicator--20cb5f82-a61a-4b7e-abbc-eec629f5b432", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a5e269-3124-4d94-99d4-c184b78feaf3", "sighting_of_ref": "indicator--20cb5f82-a61a-4b7e-abbc-eec629f5b432", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed35eabe-e1d2-47ed-84c2-fb547cf165f5", "sighting_of_ref": "indicator--e58e6acd-5a2a-4204-b21a-8737dd5800ff", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2962d784-7df4-4a78-b8c0-c1b646165a67", "sighting_of_ref": "indicator--e58e6acd-5a2a-4204-b21a-8737dd5800ff", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c0f3a3-4211-4c7e-b0e5-f97a452d8b2d", "sighting_of_ref": "indicator--e960c905-c67d-4bb6-89be-0ff81e14d1d7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a878369-2c67-48fd-82ef-8fb4a3d4da4f", "sighting_of_ref": "indicator--35b08357-bab0-49c6-9af1-a5a2a3970957", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d166ed9f-e801-466d-b9d2-2e8e4ea79d7f", "sighting_of_ref": "indicator--1133829c-96b6-474c-85c0-b3c4fc206e11", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cca6d40-f6c4-447d-87bd-63651779a528", "sighting_of_ref": "indicator--eed92744-e8a3-43c4-8a5e-f34976246879", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98470bec-b364-4574-b0d1-6589554dd61c", "sighting_of_ref": "indicator--9158bc46-0259-4aa0-bbfe-ea0caaef1bd8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c86d0098-81c4-4eb0-b4bc-5ab8f09c7153", "sighting_of_ref": "indicator--9158bc46-0259-4aa0-bbfe-ea0caaef1bd8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317aa32b-49d6-4b9c-9f1a-cb38ceed9f0c", "sighting_of_ref": "indicator--58aefacc-7ddd-474c-a3be-d5424b80c314", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c0af41-b370-4988-ad59-177b50ba0b7a", "sighting_of_ref": "indicator--a03f2efa-0452-461a-a827-6717e5533501", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d4850d-933e-4355-8403-2b5823cadea4", "sighting_of_ref": "indicator--a03f2efa-0452-461a-a827-6717e5533501", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2651020c-3ec8-46a7-9b56-ea94f92bfadc", "sighting_of_ref": "indicator--873b1724-60c3-4cad-9e73-fe2a4a97096a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49cd3a4e-bf5d-4dcf-a649-2b08012663f9", "sighting_of_ref": "indicator--873b1724-60c3-4cad-9e73-fe2a4a97096a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e714588-d605-4e85-aad0-c60f6431e75d", "sighting_of_ref": "indicator--873b1724-60c3-4cad-9e73-fe2a4a97096a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c231cf-89dd-4394-a87d-f15ded610f66", "sighting_of_ref": "indicator--627c89fb-3f53-4fe9-af7e-29034c367dcd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d14956-02a9-453e-aaaa-b46d8c5d7440", "sighting_of_ref": "indicator--627c89fb-3f53-4fe9-af7e-29034c367dcd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7bce7d-96d1-4f71-b85e-03ae1398e4c4", "sighting_of_ref": "indicator--8eb4103e-07cc-4b86-8d6b-632303a8e199", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdfa7e37-febf-4f4c-b389-7d6250c3fc1c", "sighting_of_ref": "indicator--9aff6c7d-9b3a-4015-a127-2eb63f95cda1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0eebbb2-64bc-4568-8369-b0dc63925519", "sighting_of_ref": "indicator--35635617-2354-4efb-8b22-9fc3d46706e1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc218896-48a2-4616-bc92-6355e14339d1", "sighting_of_ref": "indicator--34edb5e8-0dac-485d-9c58-f104a1b08255", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7c96f1-5e49-46a2-9cfa-8c8e47a2e01f", "sighting_of_ref": "indicator--a5c8ffe5-9650-49bc-ad67-beff5460e223", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27352410-f7be-4dff-a1d5-d4e200459eff", "sighting_of_ref": "indicator--a5c8ffe5-9650-49bc-ad67-beff5460e223", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ddb338a-2e8a-4712-9db9-1e8478b44f04", "sighting_of_ref": "indicator--a5c8ffe5-9650-49bc-ad67-beff5460e223", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4057f28c-c696-47f4-8767-db20d43e5419", "sighting_of_ref": "indicator--c3b097ae-383a-4259-a8c6-c3c199de5fd4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31bad2cc-b3a4-4a0e-9f6d-bf3302641e0e", "sighting_of_ref": "indicator--1cdb2f80-24a2-4042-9481-335d5d98ddbb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ebf4ef-986c-4955-a528-79b1defc2a58", "sighting_of_ref": "indicator--1cdb2f80-24a2-4042-9481-335d5d98ddbb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a675b72-f012-4916-a80e-3dc7f69782a7", "sighting_of_ref": "indicator--523e9aa4-f3a5-4c39-b32f-e7dbf5d35093", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--496b63b0-10d8-43ed-ad95-dc8f3be50241", "sighting_of_ref": "indicator--523e9aa4-f3a5-4c39-b32f-e7dbf5d35093", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b9e506-7564-407b-b7b6-4f8afdcb0588", "sighting_of_ref": "indicator--824efefa-ec9e-409d-8f3f-d7fedf15e0da", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fbdab86-fab7-4e30-8144-180d483a2b33", "sighting_of_ref": "indicator--824efefa-ec9e-409d-8f3f-d7fedf15e0da", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef69e4d-fdc4-48cc-b8c9-e55af5dd0eb4", "sighting_of_ref": "indicator--67a65cf9-e72a-41b0-812c-ba2d42a2ef08", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c21642-2905-4644-bfbf-34fb55b3c464", "sighting_of_ref": "indicator--67a65cf9-e72a-41b0-812c-ba2d42a2ef08", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01e677c-a10d-4301-940a-fcdf8fff7ed7", "sighting_of_ref": "indicator--b1a51c18-5d25-4442-a71a-325e522e0018", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da188ca-022b-41cd-94e4-419635d81ca5", "sighting_of_ref": "indicator--9e10478a-10ea-4671-8ef1-fdc1670defa5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--286792d0-abf8-47e1-ac90-b105642a5cfb", "sighting_of_ref": "indicator--7d8ae154-9fca-4b20-877c-ee928dee2657", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b70d76c3-52e3-447c-b72a-c1ee8fd2a868", "sighting_of_ref": "indicator--42e862e8-aa43-4d73-b087-3dba5c3d0ed4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e633c768-ee1d-41c5-af65-4c8d8e899267", "sighting_of_ref": "indicator--42e862e8-aa43-4d73-b087-3dba5c3d0ed4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b3f371-4a92-44bd-9cbe-2d938f86158b", "sighting_of_ref": "indicator--3c722450-6261-4ecc-a083-3727fdc001f9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea66d5dd-3acc-4de5-a251-8dc957e13712", "sighting_of_ref": "indicator--6a5a7c15-2f9a-40a0-99e2-2ef2f4f3b72e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522c08a0-d9b9-46b4-8377-eb2dc734af1d", "sighting_of_ref": "indicator--6a5a7c15-2f9a-40a0-99e2-2ef2f4f3b72e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea72d6f4-dca1-4ea1-b2a7-968d5d92a196", "sighting_of_ref": "indicator--ceb93e51-6ed3-4880-88ae-f3d204944f3b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa3c010-1bd2-489f-ace3-07b93589ff8f", "sighting_of_ref": "indicator--ceb93e51-6ed3-4880-88ae-f3d204944f3b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40cbda63-826b-49bb-9424-d4f363c5991e", "sighting_of_ref": "indicator--2e426bcf-bd77-4d09-961b-fc377d837cb5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a41c2f-32c4-44ee-900c-2f99c187e9bd", "sighting_of_ref": "indicator--ac334f6c-d051-4ca2-8d3b-eedb442057fc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9fb2d9a-1bac-4a68-ad89-ac59638e631f", "sighting_of_ref": "indicator--ef914853-5e72-4793-91b5-ac25d8b34665", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a189306-02c6-460b-977b-4453a8e15814", "sighting_of_ref": "indicator--f91ebe3d-bdbe-4a1e-a559-983395582f82", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a74db8b-ee24-4ac0-b6e3-2500d610e0ef", "sighting_of_ref": "indicator--a4368cb5-1d76-43a3-9dc5-a3e019ff1119", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09f2ed0-8700-44ba-9be1-cadbf45acd83", "sighting_of_ref": "indicator--4df15b8b-9535-4d0b-9aa4-de926414cd6a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42089bb6-53a5-4a42-85b5-7fa7ba5adaf8", "sighting_of_ref": "indicator--3dfcb564-4477-44b9-bd00-74b8cdf391c3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7efc4734-3be8-471a-bc76-555669ad8faf", "sighting_of_ref": "indicator--3dfcb564-4477-44b9-bd00-74b8cdf391c3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d84b69-3456-4c02-b54a-76e84adc1bc0", "sighting_of_ref": "indicator--3cf0c3b4-c7e1-4029-9305-68b17962e0df", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec27cb4-6c43-4e88-b7fc-fb604c42f174", "sighting_of_ref": "indicator--3cf0c3b4-c7e1-4029-9305-68b17962e0df", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46ca0be5-da2c-4c85-990f-0c8db5a9a5a3", "sighting_of_ref": "indicator--02568947-33e6-4892-966f-2241654fe699", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fffff12b-5535-42d7-af39-a8e46e87b2bc", "sighting_of_ref": "indicator--02568947-33e6-4892-966f-2241654fe699", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f56426-7763-49bc-a453-f5dd7520bcb5", "sighting_of_ref": "indicator--77c389b1-ab0c-4e4d-9cec-5b17301ca50c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e77ddf-70ad-4cc5-98be-32b098a85cca", "sighting_of_ref": "indicator--77c389b1-ab0c-4e4d-9cec-5b17301ca50c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e298d27-87d1-482b-9b06-6244c185a77f", "sighting_of_ref": "indicator--77c389b1-ab0c-4e4d-9cec-5b17301ca50c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3edc78ac-64a1-4a5d-a914-6faeac03d2fa", "sighting_of_ref": "indicator--5c1dbff1-a99d-41e5-8102-813617a99bdf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee2ad5cb-a5a9-4d7a-bbd6-b281f7a47ba0", "sighting_of_ref": "indicator--5c1dbff1-a99d-41e5-8102-813617a99bdf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7dd2360-9e23-44f2-80be-aaf760a8e91c", "sighting_of_ref": "indicator--5c1dbff1-a99d-41e5-8102-813617a99bdf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71bd7ff1-4587-4cdc-82c5-dc2be698fcb1", "sighting_of_ref": "indicator--256f0e94-614b-47b8-8de8-6d131c034420", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0563b12c-29e6-4864-9eb7-10ae57304227", "sighting_of_ref": "indicator--fbf86dd4-0319-4343-afb7-45c1f02e4981", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--463db75c-f7d0-4d46-804f-7be3621fd550", "sighting_of_ref": "indicator--fbf86dd4-0319-4343-afb7-45c1f02e4981", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15afb0f-0cc8-46ec-a1df-0fc4997a7ff7", "sighting_of_ref": "indicator--79e0310d-876d-479c-9c97-e85b0f94b7df", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5371fd0-37f2-47d2-a589-44315138ebb8", "sighting_of_ref": "indicator--d7e6b3d2-3d68-45dc-86f5-0be69c5380f0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--792ac85b-5e1c-4a15-b292-0c886e516d64", "sighting_of_ref": "indicator--d7e6b3d2-3d68-45dc-86f5-0be69c5380f0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25a5928-3bd6-4d61-9cbd-94f84d5170cf", "sighting_of_ref": "indicator--d7e6b3d2-3d68-45dc-86f5-0be69c5380f0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb28cee0-202e-4d7e-af43-d90743bcb499", "sighting_of_ref": "indicator--96ff0748-24e8-4b1d-a710-af2375715da0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f63fa4d-9ca9-471a-b93e-6b34a6e24ed1", "sighting_of_ref": "indicator--96ff0748-24e8-4b1d-a710-af2375715da0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff78afdd-e7e8-4831-8bb4-248e6e79ae07", "sighting_of_ref": "indicator--7566fbcd-149a-48e3-bd87-a2587b8d2124", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f791dc75-edc6-4fef-9699-e8d2478466e7", "sighting_of_ref": "indicator--8389562e-9cda-480e-8b80-ab697c05601a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1f4830-90ad-488f-99a0-6d8398529b06", "sighting_of_ref": "indicator--8389562e-9cda-480e-8b80-ab697c05601a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049e4701-5db5-4873-baa3-7bcaf4ec3b2e", "sighting_of_ref": "indicator--aa3fd458-5dd6-4de6-aaf4-f568be6a2348", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f072c57-46e7-44c2-8a76-9d2934f56874", "sighting_of_ref": "indicator--28494a86-a605-4c10-b0c5-44339ea04e31", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7096524c-7ce1-4080-bea2-baaaa428ec77", "sighting_of_ref": "indicator--28494a86-a605-4c10-b0c5-44339ea04e31", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe5ebbc-8248-4a4e-9752-ea0405888a26", "sighting_of_ref": "indicator--28883bcf-5f2c-4943-a3f6-d7cdd1000b2d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a807ac-8b56-424f-8287-716d5fbda3ec", "sighting_of_ref": "indicator--6a9069c8-dee9-4045-82ad-4b14075704e0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4f23bd-fa51-4536-b1e4-89f7fadf7f68", "sighting_of_ref": "indicator--2344f89c-e452-4d5c-95b3-b58083722c52", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a0c5c3-19e0-4c1c-a14e-522309e14c85", "sighting_of_ref": "indicator--2344f89c-e452-4d5c-95b3-b58083722c52", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d64c1bb-91c6-4141-b6ac-ea8c55ef6a1d", "sighting_of_ref": "indicator--a13276a7-8f01-4391-aa72-8b01835c5fce", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d12b12d-5326-4c77-bfd9-a5b75fed525e", "sighting_of_ref": "indicator--47d17ec2-0de3-4eaf-a8db-65367ad9ddd1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b749a08a-4cf7-4406-9e4f-e5b0b39fa9d5", "sighting_of_ref": "indicator--7fafbc7f-2157-40e8-919a-68d3ac1848f9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50894470-4c90-42cd-8944-c31e6abb2d6f", "sighting_of_ref": "indicator--499c8c69-7597-403f-898a-bbfdf5e8438d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c78d89-5e66-43e0-9720-00f00160d0fa", "sighting_of_ref": "indicator--fef0ee8c-03e1-4c0d-b047-b4329aba1f02", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33f5641-fc19-41c0-8385-e9738da0d211", "sighting_of_ref": "indicator--6b2b704d-8246-4640-a10e-1f854fc31615", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e34699-4aa9-448c-9e55-65d5d994183d", "sighting_of_ref": "indicator--e5dee451-5f0f-4a61-bed7-ffd96aab60c1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e36b76b-92b3-4312-b60f-7b9f534498d2", "sighting_of_ref": "indicator--e5dee451-5f0f-4a61-bed7-ffd96aab60c1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8236f13e-4ab3-4465-9bfe-03178282b433", "sighting_of_ref": "indicator--e5dee451-5f0f-4a61-bed7-ffd96aab60c1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab24b79-6f73-4c01-ac8e-da71ff64ed28", "sighting_of_ref": "indicator--44c2e213-9e1e-48cb-b3aa-9d5e1763325d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbfbeb8d-7443-470f-8cc1-b1891464a2ba", "sighting_of_ref": "indicator--44c2e213-9e1e-48cb-b3aa-9d5e1763325d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e7c305-af45-4bb1-a7c4-2e3b7871ced1", "sighting_of_ref": "indicator--795394bb-99e4-4a33-a2b5-3b7b6538ff8e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--833fa078-4bac-4c18-b10d-14e59db3dc42", "sighting_of_ref": "indicator--fbf60d07-085d-473f-abf2-865abe2eb708", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527787d2-165a-445c-a03e-5de4e5043e3e", "sighting_of_ref": "indicator--fbf60d07-085d-473f-abf2-865abe2eb708", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f784e4-e816-4328-9d07-750408c21731", "sighting_of_ref": "indicator--fbf60d07-085d-473f-abf2-865abe2eb708", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e03306c-6efc-4c84-9138-abd6039c1091", "sighting_of_ref": "indicator--ded08777-fe16-436f-9d5f-e3ba2b787c2c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c7f02c-45a0-4a6d-b859-c9cf66253bea", "sighting_of_ref": "indicator--ded08777-fe16-436f-9d5f-e3ba2b787c2c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--043593c5-3e06-45cf-9fb1-d727c6d0b82e", "sighting_of_ref": "indicator--1a36bbeb-dd13-40d6-a732-b2dfd6e5ada5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4b997e-a04d-43f0-a8bf-e37e815aa0b8", "sighting_of_ref": "indicator--d079b72c-b901-4f49-8b69-eac6b450bba5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f731b00-7bad-43e6-be59-b03c0c7fc09f", "sighting_of_ref": "indicator--1d230211-8a8c-42bc-82eb-8839ee76ce68", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e2075d-c067-46fc-8034-116bb460e28f", "sighting_of_ref": "indicator--48ca9003-c896-4cbb-bb2d-9c5dbf2a4566", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1f3027-1a41-47b1-bbfc-56f2964218d8", "sighting_of_ref": "indicator--5dc12760-b9c2-458a-bed6-72ff7fb2aa03", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e878fd08-6c5d-481f-bacb-63cebac4dbad", "sighting_of_ref": "indicator--5dc12760-b9c2-458a-bed6-72ff7fb2aa03", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4b35de-7947-46fe-9050-c9a4411e8ac9", "sighting_of_ref": "indicator--8d9151ea-ee81-4523-8b6f-ff0ef3520fcb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d08e40-e37b-424e-b39e-5102faa40b95", "sighting_of_ref": "indicator--172b8eeb-0dce-4b5e-8bdd-4bfe28f5a244", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa60c077-ba3e-42cd-9a8d-c9d57b426cc6", "sighting_of_ref": "indicator--172b8eeb-0dce-4b5e-8bdd-4bfe28f5a244", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf5a8ee-d657-40cb-a9e7-f0744a4c91fc", "sighting_of_ref": "indicator--e0bfe9d0-c4ec-429a-a3c7-e931d7c54d98", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2c9d68-3be8-4e6b-b935-f40662c68e5a", "sighting_of_ref": "indicator--996f68e3-7367-450f-9278-5abc487bf10c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97e86285-0623-4fd4-a55e-ec41f38f4cff", "sighting_of_ref": "indicator--996f68e3-7367-450f-9278-5abc487bf10c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561549d6-0ef4-4fd0-bc66-6cdca089b9e5", "sighting_of_ref": "indicator--175533f7-51b6-447e-bee5-76384f57bb27", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b2dcd6f-2a28-4210-a755-b44b1c3a56f1", "sighting_of_ref": "indicator--e38bdc2c-c799-424d-9043-d62ffe2ccc43", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc4ac909-8021-4b54-8715-f4298eaa7fa6", "sighting_of_ref": "indicator--661395ef-6fe8-4127-8bdf-90a844e87db0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c32e1636-9afd-430d-aa3a-efab116c8c44", "sighting_of_ref": "indicator--661395ef-6fe8-4127-8bdf-90a844e87db0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--048f564f-1f21-44a9-8743-ff7f87eaf004", "sighting_of_ref": "indicator--5629036c-9e19-45ce-b1d7-ccd1810c768c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5166d50a-59bd-446f-8f51-ee2f408b3f80", "sighting_of_ref": "indicator--5629036c-9e19-45ce-b1d7-ccd1810c768c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82c82c6-076f-4a3c-af68-9318df7a5ee9", "sighting_of_ref": "indicator--4a5a4f69-1f92-4199-8252-6d6acee07108", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a0cc37e-5b6b-4c9c-abb2-06248cbd0544", "sighting_of_ref": "indicator--4a5a4f69-1f92-4199-8252-6d6acee07108", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b549960-a193-49d1-a6bf-b6ee32536d83", "sighting_of_ref": "indicator--4a5a4f69-1f92-4199-8252-6d6acee07108", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d5de539-3920-4a36-8cdb-11aa56ecd1ad", "sighting_of_ref": "indicator--0d7c032d-e0e5-45a0-8d9c-79dc993d927b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52fd2dd5-e52a-452d-a96a-ad35c7e425a2", "sighting_of_ref": "indicator--d982a5de-4b6f-4bca-b78e-4ee2285ad66f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec30a55-d5db-43dd-84b7-f1ce2a93e6df", "sighting_of_ref": "indicator--441e8821-aa12-4e4e-a8ba-50b574a6b4b2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac300a6-ddcf-4bda-b55d-50af5b65abf8", "sighting_of_ref": "indicator--441e8821-aa12-4e4e-a8ba-50b574a6b4b2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a95767a5-b10a-4e79-b2ce-a4680d88b497", "sighting_of_ref": "indicator--441e8821-aa12-4e4e-a8ba-50b574a6b4b2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5440b57-93f2-40c6-b66d-e169bab12e7c", "sighting_of_ref": "indicator--ebb4f5ae-65d4-4eca-9ac4-2cfe71825851", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11713d6e-cc45-42b9-83b7-a23c033aba7c", "sighting_of_ref": "indicator--ebb4f5ae-65d4-4eca-9ac4-2cfe71825851", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--158fd1c1-df0d-43f0-b5c5-6f3da111a950", "sighting_of_ref": "indicator--55c431f4-ff36-4735-87fd-9c58f182348e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76199a3-026e-4081-acef-440df0ec1064", "sighting_of_ref": "indicator--1e685b17-5103-4258-bce6-6938323df58a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c955f741-4254-45f4-b652-2ca1bbc54f00", "sighting_of_ref": "indicator--1e685b17-5103-4258-bce6-6938323df58a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c808cf35-129f-429b-b134-b9bdab7a2960", "sighting_of_ref": "indicator--1e685b17-5103-4258-bce6-6938323df58a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a999863e-aa7a-485d-a85c-785febdd9d53", "sighting_of_ref": "indicator--0e2ddca8-d804-43f2-97e6-bb1ca17892d2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882f740c-5c69-4735-89ec-d001f82a034a", "sighting_of_ref": "indicator--0e2ddca8-d804-43f2-97e6-bb1ca17892d2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92fa522-a987-48b9-9f26-9844440bac98", "sighting_of_ref": "indicator--25d185b6-0600-4270-82f3-36cc29bff613", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33642385-6400-4b45-b963-4af707962c16", "sighting_of_ref": "indicator--8f57ff3d-ff99-403c-8445-ff74de8f618d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d98738-a207-4b48-85d4-aecf39d37cf3", "sighting_of_ref": "indicator--9507740e-d8f8-445c-8122-4da360b34291", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4769743f-acc2-45c5-bb16-677ffa6284bd", "sighting_of_ref": "indicator--9507740e-d8f8-445c-8122-4da360b34291", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93246a6a-ec26-4245-bd5c-f145b08d74c8", "sighting_of_ref": "indicator--4e5ecb70-2eac-430b-ae24-fff181e6d3a0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfbe3d5a-b65d-4122-945a-5afd665f92c2", "sighting_of_ref": "indicator--4e5ecb70-2eac-430b-ae24-fff181e6d3a0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d487a182-cfce-4029-b6c0-1968a8ffe77a", "sighting_of_ref": "indicator--4e5ecb70-2eac-430b-ae24-fff181e6d3a0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae82074b-8f68-4429-9ea6-9fa00aae2e8c", "sighting_of_ref": "indicator--55368885-8417-471d-b85d-efe7a84fd218", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee3c9ebe-4360-40c9-aa23-8e47e926ac56", "sighting_of_ref": "indicator--a64c15ec-48d5-4e8a-b7fe-42d00471c857", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83abf62c-a4d4-4421-8b66-96ea7fac69b0", "sighting_of_ref": "indicator--6ed1ae2c-04f2-463a-b3d7-3a22af8746aa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dbc3bd4-03f7-479d-b175-c6a0af8b7f2b", "sighting_of_ref": "indicator--6ed1ae2c-04f2-463a-b3d7-3a22af8746aa", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6abe55c7-9bf6-4f0a-8ea0-a3f9658c6359", "sighting_of_ref": "indicator--6ed1ae2c-04f2-463a-b3d7-3a22af8746aa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503224ca-3a47-4816-a8cb-3d55ba28e280", "sighting_of_ref": "indicator--e92837a1-33ce-4e05-9798-b05adff00b2d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed400aa-c5e1-4b43-9bce-7fef0b0968e2", "sighting_of_ref": "indicator--e92837a1-33ce-4e05-9798-b05adff00b2d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbda1ad1-230c-4be2-bd4f-865140501a30", "sighting_of_ref": "indicator--aca5aad7-9350-48ce-bbdc-e0b269c8e7e0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc636172-c0ee-42f6-bc12-170941e7f76c", "sighting_of_ref": "indicator--aca5aad7-9350-48ce-bbdc-e0b269c8e7e0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe117889-6cd4-4856-99e7-1926f5aa6e93", "sighting_of_ref": "indicator--682efbec-6bf6-42e3-bd8a-8f33132ed95a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b02c3c-c0a3-4e3b-bd2c-b86e9074fa62", "sighting_of_ref": "indicator--dae6b1c3-ca99-4427-a575-35b0fa12761b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad41c52-053e-48a7-ab0e-f1a815719e67", "sighting_of_ref": "indicator--8acabc9d-243a-4f1e-9bb9-792dee8007da", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a06c55-54b1-4c38-bfed-e403d368cd31", "sighting_of_ref": "indicator--8acabc9d-243a-4f1e-9bb9-792dee8007da", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac63b8c-a1aa-4168-afb6-18b8104633fb", "sighting_of_ref": "indicator--988df15e-8e4b-450a-9e9d-402044f0abc8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8de50d-e4b5-4fa4-84e0-6ec5f5b33f08", "sighting_of_ref": "indicator--988df15e-8e4b-450a-9e9d-402044f0abc8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df586150-678a-4986-83b5-10d3a5efe41e", "sighting_of_ref": "indicator--988df15e-8e4b-450a-9e9d-402044f0abc8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfd4df38-10c7-4ca1-87d2-36d9f1d98bb4", "sighting_of_ref": "indicator--aa6216c5-b46b-4a20-96d8-19599a237561", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b98f1fb2-2eca-4482-833f-36c3f856fdab", "sighting_of_ref": "indicator--f1bc1833-8d36-48bb-8ea8-70d3e269c596", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e289577a-dd48-4a47-87e3-e98bab08e61f", "sighting_of_ref": "indicator--057d0991-664f-412b-afbd-fd6e5c454cff", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa24516-4860-435b-95c3-79de16e48ede", "sighting_of_ref": "indicator--057d0991-664f-412b-afbd-fd6e5c454cff", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7394018f-f53f-4f34-b2e6-c8aa335a9725", "sighting_of_ref": "indicator--057d0991-664f-412b-afbd-fd6e5c454cff", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b5361b-8074-4c4c-ba39-05b10b62c9b7", "sighting_of_ref": "indicator--5c1cf854-367f-4981-a079-2bfe428f723d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb562ca-e602-4b9d-90f9-1c5ba22e3f13", "sighting_of_ref": "indicator--5c1cf854-367f-4981-a079-2bfe428f723d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d2f545-0004-479b-a7dc-382caebfab89", "sighting_of_ref": "indicator--ad7dd1ec-da04-4f1c-95ba-23640c4da208", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3997a4-2374-4bdd-80ce-02ad0eae2c05", "sighting_of_ref": "indicator--ad7dd1ec-da04-4f1c-95ba-23640c4da208", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f028501e-0616-4b2a-8d61-b08716584eee", "sighting_of_ref": "indicator--97f677bb-885a-41df-b6ac-0533368fd917", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a715d5a-f005-4df5-8788-3c8b4f0bb6ff", "sighting_of_ref": "indicator--97f677bb-885a-41df-b6ac-0533368fd917", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--821beb33-f08d-4c1d-9ca7-dd25eb91a0ec", "sighting_of_ref": "indicator--655f620b-a86d-48dd-ba89-d79a2dd0dd1a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f95c9c1-ad29-438f-b9df-12108501adcd", "sighting_of_ref": "indicator--655f620b-a86d-48dd-ba89-d79a2dd0dd1a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--606f5f48-4eac-43b6-9f76-a25c9941ac6b", "sighting_of_ref": "indicator--9e226049-512d-480d-86b2-4f538ff7bac5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2733156-20df-430c-911b-105764886e93", "sighting_of_ref": "indicator--9e226049-512d-480d-86b2-4f538ff7bac5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a79ccc-ad84-414d-8d73-a814033f18bf", "sighting_of_ref": "indicator--9e226049-512d-480d-86b2-4f538ff7bac5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--649bb097-f708-4352-b567-0d31d5cd8f67", "sighting_of_ref": "indicator--6ae0308d-2ad6-407a-a6fd-189b71335555", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531a417d-7cbe-4041-9cb8-ca2dd02f152b", "sighting_of_ref": "indicator--e1c5d950-c572-4db6-8c0e-196062303556", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3386a7b-733a-49dd-8878-61e1a4add53c", "sighting_of_ref": "indicator--e1c5d950-c572-4db6-8c0e-196062303556", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295078c2-6bb7-4af4-b490-5919b3519152", "sighting_of_ref": "indicator--4c3f1c5c-06bd-41d7-b35d-7ef53aa2ce01", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f6844e-0cbc-46f5-b1bf-98710702e385", "sighting_of_ref": "indicator--8742d569-7957-4fea-9067-16ffd1a75705", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9223a15d-0005-44df-a8d3-15461dbb5e49", "sighting_of_ref": "indicator--8742d569-7957-4fea-9067-16ffd1a75705", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7bb5be8-ca61-45a1-8182-4e07adb30b54", "sighting_of_ref": "indicator--79c356fb-7e7c-41b7-8ed8-65567ed70708", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c924d3-f9fc-480a-94b0-e7eeeb792a4a", "sighting_of_ref": "indicator--79c356fb-7e7c-41b7-8ed8-65567ed70708", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69be70bd-90f1-4126-b60b-0e11da4e6a96", "sighting_of_ref": "indicator--79c356fb-7e7c-41b7-8ed8-65567ed70708", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35694a18-2c81-4859-b715-265bd786c7d7", "sighting_of_ref": "indicator--070c83ae-e223-43e6-a2a4-dac63617fb40", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b456b97-cbb1-456d-b4f8-c21169e5766e", "sighting_of_ref": "indicator--070c83ae-e223-43e6-a2a4-dac63617fb40", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ec21f5-31f0-4bab-b5ff-8ce6f89c1a9a", "sighting_of_ref": "indicator--8b3a6530-d70d-40a4-aa92-810266e233ec", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b4a78f-61e9-4ca9-b5fc-1b9798aaa775", "sighting_of_ref": "indicator--8b3a6530-d70d-40a4-aa92-810266e233ec", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24cea33a-b6f9-4b20-ad76-129139c32342", "sighting_of_ref": "indicator--8b3a6530-d70d-40a4-aa92-810266e233ec", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62d6fe7-0200-49d5-8d61-131d3998e388", "sighting_of_ref": "indicator--853f610f-cfba-4ec0-8109-1904aded97d6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1d5060-6992-48ba-b57a-010c12884905", "sighting_of_ref": "indicator--853f610f-cfba-4ec0-8109-1904aded97d6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4844ddd3-c1cd-46e5-8cfa-e5f72c906d93", "sighting_of_ref": "indicator--106afa4a-2c4d-48d1-a501-905404a6adcc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d31724a-48ed-4065-b63b-6e09b2f5a807", "sighting_of_ref": "indicator--421f2d02-c2c2-4bf7-bf8e-72f3416fb513", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5fbde9f-a040-430c-9b46-4cb9d423e356", "sighting_of_ref": "indicator--421f2d02-c2c2-4bf7-bf8e-72f3416fb513", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df52385-4227-4923-a1ea-91c490acf59f", "sighting_of_ref": "indicator--421f2d02-c2c2-4bf7-bf8e-72f3416fb513", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e401e7c-2fdd-46fc-8af8-08a4f287cbe9", "sighting_of_ref": "indicator--9d86375c-2c38-4ffc-84ec-784a084c5bd7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5110c0-b1ce-458d-87ac-00ca06ba08f8", "sighting_of_ref": "indicator--9d86375c-2c38-4ffc-84ec-784a084c5bd7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ec2979-d132-48b6-8437-c53fff0ff072", "sighting_of_ref": "indicator--453bf747-2542-4ab8-ad6f-267015a7305d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ba82f7-f19f-45d6-ba22-fb41b72c473f", "sighting_of_ref": "indicator--453bf747-2542-4ab8-ad6f-267015a7305d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b22b61b-9cad-43b4-9fa6-632549a2b442", "sighting_of_ref": "indicator--0e390b7d-1c2e-4a8c-87b1-022084f653cc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80333f8b-e926-4ece-920d-c1d18bd7a437", "sighting_of_ref": "indicator--77151e11-930b-4e89-b7fc-1dd90292dd20", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c0a960-2045-45d1-9917-cd4acc0eb528", "sighting_of_ref": "indicator--6e144390-bec8-4e23-86d9-dd90ea456c05", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e203b4bb-27ad-4e34-a18a-aa1a67f0c43e", "sighting_of_ref": "indicator--7bce0c9f-0994-4be8-aafa-a163877ca031", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af863741-ad1b-4dba-b49a-99772e2afafd", "sighting_of_ref": "indicator--041d32c5-cca2-4474-991c-9a8fc49fb1be", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738407dc-a989-46cd-9f3c-5a087d17eeb6", "sighting_of_ref": "indicator--77603455-ba35-4db0-8c25-5ae812c1cd49", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62024cdf-3050-40a8-be8d-f53a705b1ec2", "sighting_of_ref": "indicator--a0272daa-32d6-4512-bd1e-0dc92f32f1d0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c61e17e-a458-41cc-b9a6-d00c24685550", "sighting_of_ref": "indicator--a0272daa-32d6-4512-bd1e-0dc92f32f1d0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e393c4-5396-4aa4-b8d0-3efdf4c11008", "sighting_of_ref": "indicator--b866c79b-a3b8-4303-9df5-9a05b8ffe066", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e8b62e-3ddb-4e89-967e-bc46ce2630d5", "sighting_of_ref": "indicator--b4dca15e-819d-4510-a9c7-9e2fd61e0e33", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7ad9ab-0e23-412c-a9c5-e06510675914", "sighting_of_ref": "indicator--f351d18a-598a-4414-acc6-5dd03a8adc28", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d9f411-6318-4566-ae56-86c533240fa6", "sighting_of_ref": "indicator--d387c4f8-8334-47d1-9c3a-4f123fab5aad", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a4ebceb-3c2e-4efc-873b-8491652409f4", "sighting_of_ref": "indicator--d387c4f8-8334-47d1-9c3a-4f123fab5aad", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0394c3-0ded-4830-baac-eb7474d2855d", "sighting_of_ref": "indicator--d387c4f8-8334-47d1-9c3a-4f123fab5aad", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438e5354-1de7-4710-b506-e24e118e0d0b", "sighting_of_ref": "indicator--83b9a5e8-f970-4987-9c5d-b4764468797c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--686a1ef7-c0fe-4c10-8208-0fd765d713a4", "sighting_of_ref": "indicator--59f92afe-0348-423b-a449-f7ff03b8bd89", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11142081-421f-489d-8a03-720dc7e2dd26", "sighting_of_ref": "indicator--1174a302-5e59-4a31-9aeb-612caf4df8ae", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--985505c1-191f-4985-8e56-63d584e95a7c", "sighting_of_ref": "indicator--10f51b5a-2834-4c1f-b3d7-c0f270759eae", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b66ec9-cf22-49ae-9359-af740c65ffcd", "sighting_of_ref": "indicator--8b4553dd-dfdf-4fcd-bb12-f691214c8236", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0cd6e7-8ad2-4eb2-b601-6ee6eb9567fb", "sighting_of_ref": "indicator--8b4553dd-dfdf-4fcd-bb12-f691214c8236", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db40f7af-90cf-4ae4-9478-f919f304465f", "sighting_of_ref": "indicator--8b4553dd-dfdf-4fcd-bb12-f691214c8236", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f83cea5-6439-4a98-a4f7-2867a32af3ef", "sighting_of_ref": "indicator--968b7762-29b9-4a51-8c4e-d795979d5e02", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b3181a-062d-41d0-ab46-8dec21331046", "sighting_of_ref": "indicator--968b7762-29b9-4a51-8c4e-d795979d5e02", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f0a713-39bc-407b-81a0-8fd3bff8f40d", "sighting_of_ref": "indicator--4411a3e9-d54e-407d-bd22-e7e804eb752b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e391aa-0be5-457e-aa57-7dbb26c350e3", "sighting_of_ref": "indicator--0e85a7a6-3816-4db2-b943-a50a5c914b00", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c813a99-98a6-4797-b92f-ec7e5b926c6a", "sighting_of_ref": "indicator--b323a126-d1b4-44b9-8974-e6b33d33775f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d09c20e-b18f-459a-93fa-f379b3df45fb", "sighting_of_ref": "indicator--02085d59-d36e-4f22-a61f-26f1a81d3e20", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df06865c-8ab0-4e0d-ad58-93c1d81bf3a0", "sighting_of_ref": "indicator--7c8ee5d5-3186-49ab-bd43-2168ce986f12", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff612621-3747-45fb-b2b1-4c9a6c1e5f1a", "sighting_of_ref": "indicator--b6f1eb53-7623-4b42-ab40-3a3c1f964dbd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb329d2-bda9-4ce8-bd30-8cd737c6c922", "sighting_of_ref": "indicator--b99c43a8-0af7-484c-9066-ecaa59fa7028", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31296ad4-9e4a-4440-bfd1-b5ca5badc5d2", "sighting_of_ref": "indicator--c8c30e51-14cd-4d6c-a0f9-367306a48e48", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329b13b7-dd01-49f3-b39c-21e925fc9d9b", "sighting_of_ref": "indicator--84759fa8-6fa8-4917-99ca-32b07d220259", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b18e2f2-f68a-4655-b697-c773665dd84f", "sighting_of_ref": "indicator--de22bbe0-fceb-4ad2-9e41-7d704b6bd3fb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7abf01af-6704-4850-ac89-f65b275e995c", "sighting_of_ref": "indicator--d0774165-0c9c-4b1d-baf6-53d7a728d62b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d532ef0a-0558-40a2-a22b-d126d516c93b", "sighting_of_ref": "indicator--d0774165-0c9c-4b1d-baf6-53d7a728d62b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--899569c2-de61-46c3-a155-38a306fee15d", "sighting_of_ref": "indicator--d0774165-0c9c-4b1d-baf6-53d7a728d62b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b909f482-188c-4bce-85d5-2dc4fe6b5e03", "sighting_of_ref": "indicator--9157de78-830a-4c3f-a02b-de4d6119235d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668693e1-83d3-4bc5-b77f-0720aab2e619", "sighting_of_ref": "indicator--9157de78-830a-4c3f-a02b-de4d6119235d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce094f7-7381-4932-a9ef-712a2faaedcc", "sighting_of_ref": "indicator--9157de78-830a-4c3f-a02b-de4d6119235d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8531a02-38d6-44f2-9d5f-c3539685aaa1", "sighting_of_ref": "indicator--991fabad-2c55-4ec2-b1b5-abb8d2230297", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29c9ddf-a12e-47bb-864d-8fba06aa1f94", "sighting_of_ref": "indicator--991fabad-2c55-4ec2-b1b5-abb8d2230297", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5efd9f5e-998c-4639-8840-cd26b6329c62", "sighting_of_ref": "indicator--991fabad-2c55-4ec2-b1b5-abb8d2230297", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7629c87-6cac-4a68-a845-ca7e4b07e430", "sighting_of_ref": "indicator--14504291-1e4a-4111-a086-a1813e5d8dc7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b2ff84-dfc9-457e-b58a-f9096f6911cf", "sighting_of_ref": "indicator--14504291-1e4a-4111-a086-a1813e5d8dc7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc6afc07-6cfc-4f3a-8448-f29f0df7fc1e", "sighting_of_ref": "indicator--14504291-1e4a-4111-a086-a1813e5d8dc7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3e4fbca-3d2a-4abb-8097-46f694f7d4a1", "sighting_of_ref": "indicator--14504291-1e4a-4111-a086-a1813e5d8dc7", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ee91af-3ec0-489b-a58e-0f396e9fddb6", "sighting_of_ref": "indicator--d405dd48-6c45-46c0-8ae0-5b8fb6bff68b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa6b9b5-125a-4927-be13-eaceccdee40d", "sighting_of_ref": "indicator--d405dd48-6c45-46c0-8ae0-5b8fb6bff68b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33431adc-69c7-4da2-8bc3-fbc6c2dac71d", "sighting_of_ref": "indicator--d405dd48-6c45-46c0-8ae0-5b8fb6bff68b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291b931a-3f39-4e43-843d-5319e48132ef", "sighting_of_ref": "indicator--553d2583-e33e-4b5a-8209-f4b46bac3fc0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a4e907-2ff2-4938-9054-a427fcb67cca", "sighting_of_ref": "indicator--e1a39983-d4b7-487f-adb1-f2ac3e3e6d81", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27007f8b-cd2d-4096-96a5-e7593a154395", "sighting_of_ref": "indicator--e1a39983-d4b7-487f-adb1-f2ac3e3e6d81", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37a822a-fcfd-4ae3-bf01-8a4396cbfe22", "sighting_of_ref": "indicator--e1a39983-d4b7-487f-adb1-f2ac3e3e6d81", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84832be-b128-40d2-ac78-517f7cfc7823", "sighting_of_ref": "indicator--3e6c019d-9080-48d3-be69-f38ad6a6049f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6781e52-bfdc-42da-92d7-bc5b9a867b61", "sighting_of_ref": "indicator--3e6c019d-9080-48d3-be69-f38ad6a6049f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab752d5-24d3-4509-949d-20ecb9032490", "sighting_of_ref": "indicator--3e6c019d-9080-48d3-be69-f38ad6a6049f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46658f4-d64d-407b-b9f9-d71560b70f96", "sighting_of_ref": "indicator--b7719cc5-dc21-41d6-9da0-90a39aff43b1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bad6bbf-5a1b-4746-963f-7c035a54894f", "sighting_of_ref": "indicator--b7719cc5-dc21-41d6-9da0-90a39aff43b1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a6f02c-a810-4a0a-9099-71bcf3eaf869", "sighting_of_ref": "indicator--6c6cd84e-6677-4717-9b8c-113152852922", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b366796f-12e3-4599-b196-0a924e815904", "sighting_of_ref": "indicator--1f410f19-7ecc-4c56-8978-c0f4a21c3f9e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e69b05a-dde7-4112-967a-62a956f966cd", "sighting_of_ref": "indicator--1f410f19-7ecc-4c56-8978-c0f4a21c3f9e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a966b2-6e64-47f0-a708-34d37a72cc84", "sighting_of_ref": "indicator--2791562d-48c6-4c30-95c7-7834658a922b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408ca26a-456c-4e36-b0a8-e2d8c5721366", "sighting_of_ref": "indicator--4dde8b00-b14f-4f0a-886b-e3e60e7a3f43", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef73f834-dbce-4448-9c2e-b936bfa3a288", "sighting_of_ref": "indicator--4dde8b00-b14f-4f0a-886b-e3e60e7a3f43", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b489a0e-bfc5-436d-b50d-b43363cb5b33", "sighting_of_ref": "indicator--551276e2-eec1-4710-b844-cd2b309ea901", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--849b956a-0d70-42c3-9e95-ed0ed5a14183", "sighting_of_ref": "indicator--28a34816-ff9c-4b1e-b483-c98c8c8bd33b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbfffa7f-0284-4660-a403-ff4872e5efbe", "sighting_of_ref": "indicator--bd0536ca-873d-4bd5-a994-c31951dfa167", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c455a9f-1b8f-4319-b573-23dde6af75c1", "sighting_of_ref": "indicator--bd0536ca-873d-4bd5-a994-c31951dfa167", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3bb068-549c-4e38-8d56-9ce60a96c37c", "sighting_of_ref": "indicator--d96ccbda-2455-440a-b3b8-660049b05449", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31dceeb3-cf49-4ad3-b027-9737b552c40b", "sighting_of_ref": "indicator--a71462ed-c10a-4006-bc3a-85d9f7ef472d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f417d1-9cf3-42ee-9e2f-273b22c2fd07", "sighting_of_ref": "indicator--cbf18da0-a8fa-4e52-a93a-5bddf3d79ea3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de1b4c2-3bba-4935-bc27-9d01c61c7ad1", "sighting_of_ref": "indicator--a9b5de4f-43b0-41d6-9ce3-665674e56dbb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6caa7be-45e2-4a9f-b140-7a27dbff5880", "sighting_of_ref": "indicator--a9b5de4f-43b0-41d6-9ce3-665674e56dbb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa4b50b7-7855-4324-b660-930f1cc5ee55", "sighting_of_ref": "indicator--a9b5de4f-43b0-41d6-9ce3-665674e56dbb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d3d169-31d3-4551-938e-7fa8f3b04c28", "sighting_of_ref": "indicator--44d06b89-a225-4f75-aece-d10374125a9f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d63604-f517-427e-9f52-7ca608b370d2", "sighting_of_ref": "indicator--44d06b89-a225-4f75-aece-d10374125a9f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0097c36-7c0a-44a7-a5ab-6f5e98c18065", "sighting_of_ref": "indicator--cd5c8ca7-756a-4c72-b18f-0cc8c83d7813", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e9daef-1c0d-4387-941f-81e40ffd092f", "sighting_of_ref": "indicator--cd5c8ca7-756a-4c72-b18f-0cc8c83d7813", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87966c26-1459-4fde-8b6d-6aab8e6f6323", "sighting_of_ref": "indicator--b6ca1dad-47f2-45d2-8501-50c62566a570", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0827194d-affc-4ed9-96cc-12747c3206ea", "sighting_of_ref": "indicator--649675a6-e7ee-45a6-a68a-6121f2e91e01", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17915879-9d89-4c95-9113-644a96a9aef8", "sighting_of_ref": "indicator--649675a6-e7ee-45a6-a68a-6121f2e91e01", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef4204eb-1873-45c4-b136-2ef9d2ef3605", "sighting_of_ref": "indicator--649675a6-e7ee-45a6-a68a-6121f2e91e01", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aceeab5-7b05-4daf-b7e5-3db2b62788d2", "sighting_of_ref": "indicator--6b84a4f0-5e9b-4a6f-a3c5-f7cfee0095c7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56131573-676a-4a54-b92e-5a3f9eb083c9", "sighting_of_ref": "indicator--c979bced-354b-4bbf-be77-2a244df946f7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f7fd0e-5a0d-49c0-b659-af284eafd30a", "sighting_of_ref": "indicator--1e3f2cfc-f98c-4dde-9468-f491927b868e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b800530-2286-4918-a634-ee6f70309c83", "sighting_of_ref": "indicator--1e3f2cfc-f98c-4dde-9468-f491927b868e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4196f36e-06fe-4b9e-a8f6-aa2b506a1c5b", "sighting_of_ref": "indicator--1e3f2cfc-f98c-4dde-9468-f491927b868e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e9da17-b8fa-4e7a-9a1a-51ae57b55708", "sighting_of_ref": "indicator--2bae096d-2a71-47b3-bd14-dc8e173ba6df", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1295ae10-554a-4ccd-a9c0-65d4bc0671d0", "sighting_of_ref": "indicator--e0408ab6-3ed2-492a-9e8b-a720fc5fe5d2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6980d54-c8f7-44c5-865a-5f46cc906cf8", "sighting_of_ref": "indicator--e8d027d6-76be-4672-90ae-71e9373336e0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7b914c-0936-4097-80e1-60e9c582d6b1", "sighting_of_ref": "indicator--d9575b2e-516e-4d3e-852f-87175e45564b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b6b902-9b50-42ff-9b49-21399f2aa2fe", "sighting_of_ref": "indicator--27fbd4f6-6dd5-46f8-88ae-6e9be4924930", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e9c770-24b1-4cf5-89c6-b3c9c7637f3d", "sighting_of_ref": "indicator--89e4bb71-8201-42ba-8f17-496768f2dd60", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c845e42-6cc4-4ae5-bea1-85a1cf0d3308", "sighting_of_ref": "indicator--80abe351-9209-4c82-a9b1-e951cf1c8157", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f87ca0b-b5f8-4d7e-924e-2ddec550e495", "sighting_of_ref": "indicator--d1032c22-682c-42a7-8bfa-d05499a29234", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ba9570-4014-465c-b44d-fb1e59db103e", "sighting_of_ref": "indicator--1b15faad-48e2-4992-9f4c-8f7ed6383807", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f506d218-6ba5-4d41-9db6-1a5c08e21010", "sighting_of_ref": "indicator--a4bc23d9-fe11-4311-98ed-63903155ecb1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feedac49-9986-48e9-83cb-16c1de5508ac", "sighting_of_ref": "indicator--7d3a707e-2e97-4a25-9d49-55a2d7ede17f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff76763-022e-4925-a66b-7970079f5c61", "sighting_of_ref": "indicator--7d3a707e-2e97-4a25-9d49-55a2d7ede17f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e80433-ba98-4267-abef-9355c76a2c7e", "sighting_of_ref": "indicator--7d3a707e-2e97-4a25-9d49-55a2d7ede17f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3678a1-b954-4985-bd58-5f1f873dbb7f", "sighting_of_ref": "indicator--6b2db0a9-2f9f-4988-ae2e-c89a9ea45ced", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53490cd4-eac3-4d6e-9587-23f02c0aa685", "sighting_of_ref": "indicator--8975c1b6-a8ad-4ebd-a03a-8d6622ca8f43", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec1271f9-db5c-429f-afc1-9b5d68717918", "sighting_of_ref": "indicator--fba00a76-e485-45ef-92db-f8d37754ca4d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832dc374-197d-4e49-b2e5-0ab881d8102e", "sighting_of_ref": "indicator--51d24b42-11af-4c21-a1a1-66dae2d97b6a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ada1897-e19e-4f10-bc50-f814cbaf2bde", "sighting_of_ref": "indicator--51d24b42-11af-4c21-a1a1-66dae2d97b6a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b245089-0bf7-40e6-89c0-9bcf927ab582", "sighting_of_ref": "indicator--51d24b42-11af-4c21-a1a1-66dae2d97b6a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840fee7a-09b8-4228-b10e-db854ad6d989", "sighting_of_ref": "indicator--93fcc9cf-c939-485b-9591-0865a118bce5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e91595-001c-4782-951a-707265cb5d1b", "sighting_of_ref": "indicator--993318c9-d3d3-4f7f-93ee-43898fb1ee82", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3449f2-868d-4630-905d-bc653757dabc", "sighting_of_ref": "indicator--7929827b-5afc-4f72-ab80-63a3eec8edc5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4454cc2d-e7c8-4f6f-aeed-95543c1e4ad8", "sighting_of_ref": "indicator--e152f3be-ac40-4417-8a94-f54c0b3d79db", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44272990-65e6-46b3-8f22-9dae005bc805", "sighting_of_ref": "indicator--756bd051-0bc7-41fb-8004-da60700c066b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e06f4f-fcd4-48eb-986a-511bf41ce449", "sighting_of_ref": "indicator--16ca25b4-c0c2-4c46-9ad4-a088e225444e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f514ebb0-7e17-4a6b-aa7d-fc90f44d75cc", "sighting_of_ref": "indicator--65606c64-a78a-4970-9e9e-f11711d45a1a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4cf6470-64ba-4dbc-9544-94a8fdce3e52", "sighting_of_ref": "indicator--65606c64-a78a-4970-9e9e-f11711d45a1a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf641c9-e22d-4787-a59a-6173858af05e", "sighting_of_ref": "indicator--65606c64-a78a-4970-9e9e-f11711d45a1a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a08f111e-f5b8-4c5e-925f-934e5c98ae09", "sighting_of_ref": "indicator--de1494dd-b3bd-40b3-be6f-d84ff5978881", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888e4db0-8a88-43c4-870c-8e8d3f3eaa69", "sighting_of_ref": "indicator--cbdc934d-39d7-4748-92e1-da0b5c17d373", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941e61d2-117e-41dc-87f7-4122caf85e14", "sighting_of_ref": "indicator--cbdc934d-39d7-4748-92e1-da0b5c17d373", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662b0ef9-0df2-4273-bf6d-821732e9c5c6", "sighting_of_ref": "indicator--cbdc934d-39d7-4748-92e1-da0b5c17d373", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da48411-c55f-4c8b-90d7-8d8fb4d2cb24", "sighting_of_ref": "indicator--e080fd6f-a46c-46b1-99ca-f15b238e872c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b7bf820-22f9-442d-9a70-b3174890e031", "sighting_of_ref": "indicator--e080fd6f-a46c-46b1-99ca-f15b238e872c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f24a41-e181-4016-b925-634efd588f6b", "sighting_of_ref": "indicator--ac29d6d4-6d12-4db1-ac98-d2f18ca42038", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c30d95-c943-4d82-a32b-db9726c19651", "sighting_of_ref": "indicator--13997a7d-ff27-4520-84cd-4ace52ab43b0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b07e936-35c7-4277-b08d-c1107b0ba776", "sighting_of_ref": "indicator--13997a7d-ff27-4520-84cd-4ace52ab43b0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e09ac5-660c-435d-80ec-97cb41ea617d", "sighting_of_ref": "indicator--fac2c00b-f9c2-4430-82d7-c2f1852d7013", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a313e7e-802e-4ffe-9403-e661bdda939d", "sighting_of_ref": "indicator--da91210f-5c57-4be4-b09d-33b5ac534a34", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9613f565-02d4-4b47-b3ef-7d5f704ced77", "sighting_of_ref": "indicator--da91210f-5c57-4be4-b09d-33b5ac534a34", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--718c4fef-9caf-400e-a9ba-8e123b35168b", "sighting_of_ref": "indicator--2c87c71e-7d55-46f8-bfa5-4759ecc2d468", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d781c5c8-d758-4f47-a394-f09c7dd992ed", "sighting_of_ref": "indicator--ed94d125-ff92-4565-831b-8feee1c6260f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b2c8cf0-8326-45bf-901d-b7b9df410a50", "sighting_of_ref": "indicator--c1745b34-54af-48fd-97ea-60318cb43fb9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90492e0d-23a3-415e-8884-c2675b2922ad", "sighting_of_ref": "indicator--9a21d81a-ec18-497c-8d8c-3b435f457e46", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bef9505-e9f5-4877-b820-16d3ef26b54c", "sighting_of_ref": "indicator--7f72ab58-025e-4229-a0b6-4c75984d0564", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927027eb-4257-423b-9b47-ec2d94b17bc2", "sighting_of_ref": "indicator--456f7cbc-10ac-4686-9c9f-2e5063c8bf48", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab4caf6-2169-48db-9ab3-23863215e1c6", "sighting_of_ref": "indicator--fe3b6d0f-0353-46be-8335-c5a973f03626", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7daeecbd-7278-4cb6-8708-7a32b1793f06", "sighting_of_ref": "indicator--e43e2a6d-f4cc-4dd4-926a-a538f5fd96bb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9974cc3-aa02-47e8-a053-4e4de2872899", "sighting_of_ref": "indicator--dda8fa5c-ffd0-45d8-ba74-d0e7a4f1e2e9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f8e1ee-3d62-4f5e-8f28-9ab6459c48b3", "sighting_of_ref": "indicator--b6a6515b-ecdf-4e67-91d4-a14a51576777", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3685df-5b0c-4a97-bb04-f0433ee4e2e8", "sighting_of_ref": "indicator--b6a6515b-ecdf-4e67-91d4-a14a51576777", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583d6017-c2c2-45df-93ae-865765b12ce6", "sighting_of_ref": "indicator--b6a6515b-ecdf-4e67-91d4-a14a51576777", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a519e2f-e6a8-445f-a84e-fce6c6c8e2ec", "sighting_of_ref": "indicator--5caf3343-d91c-4f9c-a814-89bd9cfcf6bf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2f29e8-4421-4dd9-a6e1-9960c62c9620", "sighting_of_ref": "indicator--2f3aa846-45f5-4059-b7c1-31bea451753a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b23b5e1d-7160-46a7-b249-4aaedd5ec1ac", "sighting_of_ref": "indicator--306fcd06-35df-48aa-ba2a-a3f58363114a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7060837-475f-4b3d-8c77-9c2935d41f73", "sighting_of_ref": "indicator--f45882da-c8d5-4fd0-8ec9-a96cb258a743", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2282d7cf-5ab8-4837-95de-f8586571fd34", "sighting_of_ref": "indicator--7a52a953-d113-4091-883e-13b2e2de4805", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970209ec-0baa-46f1-b6f3-5c54de0ef30f", "sighting_of_ref": "indicator--76a9991b-a6ad-476a-bf54-73f38da0da1f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b533853f-76f1-4cff-91ee-7a0dd635d8eb", "sighting_of_ref": "indicator--18b8e81b-6473-419a-af25-ec78bc9ab17c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f54103-c0c5-4d74-b8ed-f66feb5ec731", "sighting_of_ref": "indicator--18b8e81b-6473-419a-af25-ec78bc9ab17c", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e652c537-1899-4fa8-81d8-e8b85db817a0", "sighting_of_ref": "indicator--9cc87834-dd50-4e04-99b9-0c1be285b3c6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e19570-b62c-4a13-982d-dc9815476ec6", "sighting_of_ref": "indicator--9cc87834-dd50-4e04-99b9-0c1be285b3c6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1cd6684-ebab-4f8b-8590-fbd25fe8b35a", "sighting_of_ref": "indicator--9cc87834-dd50-4e04-99b9-0c1be285b3c6", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a365c6d-6421-4f37-b3b2-6a1884ece362", "sighting_of_ref": "indicator--37d8a384-61d1-4036-ace9-02b6c9c070a2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591cc79e-d94c-4f89-b494-4533afa5e925", "sighting_of_ref": "indicator--6d88a1de-aae7-4862-8643-0eb83373c4b9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d58864-02ad-4993-a288-dd26ba0f5f32", "sighting_of_ref": "indicator--6d88a1de-aae7-4862-8643-0eb83373c4b9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316e3c28-d808-46a1-893f-957a906dd479", "sighting_of_ref": "indicator--6d88a1de-aae7-4862-8643-0eb83373c4b9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea66c5ff-d9c8-4be8-84e7-b62693a29c77", "sighting_of_ref": "indicator--6d88a1de-aae7-4862-8643-0eb83373c4b9", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903c62d0-2682-4b7d-9f41-f8099aa50a23", "sighting_of_ref": "indicator--d7355d4c-b971-4375-99e2-9b6a672b7151", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31faa84-246a-43bf-94af-de0a736b9179", "sighting_of_ref": "indicator--d7355d4c-b971-4375-99e2-9b6a672b7151", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9761ae73-e5bd-4f42-997c-c4edeae9c7ac", "sighting_of_ref": "indicator--d7355d4c-b971-4375-99e2-9b6a672b7151", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420fee94-7a53-46f1-86d4-075edce6b499", "sighting_of_ref": "indicator--de838f6f-f16d-448c-a55e-c9b7f6e33d92", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd829059-3eeb-402e-ad42-b2a74b025a3d", "sighting_of_ref": "indicator--9c781d58-2812-4dd9-a6b4-17831043eeb1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c5df30-4caf-4250-bf33-17d242dbc165", "sighting_of_ref": "indicator--b6266ddb-9014-46ca-9487-394aaec5b48a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7409818a-530f-4789-97fd-69ba85b66a65", "sighting_of_ref": "indicator--e715895c-bb20-4143-9e71-de280c5fc2e1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff5db8b-6150-43b0-a680-c23482fac503", "sighting_of_ref": "indicator--a1d182b7-2ac0-4895-ba81-6bf9140ef883", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b849e25-7253-4c3a-99e4-05106345c691", "sighting_of_ref": "indicator--ad6cbcf0-3b8d-46ce-901d-552c72213535", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0846abdc-6a21-4d12-aeab-a5082962fedc", "sighting_of_ref": "indicator--5791d8cd-710d-412c-bfec-0d55fb4e3d53", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0335d33-308c-44d7-8491-9b506596f0ca", "sighting_of_ref": "indicator--597a370a-6e6f-43d4-ad0a-7e7cfa55937c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca2f4f07-4f54-4c5a-a6e5-79c407c7f6e6", "sighting_of_ref": "indicator--597a370a-6e6f-43d4-ad0a-7e7cfa55937c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a9d465-3d29-46bc-bc52-a53404bce506", "sighting_of_ref": "indicator--c32e526c-0cd9-4cae-830e-520e48dd240e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aab4fb3-fa2a-46d5-8c56-c71a3a713db7", "sighting_of_ref": "indicator--42ba8ec0-bbe6-4e2c-83a5-47279250494e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa5070e-7c16-45c4-a177-7f4a13d8ebd3", "sighting_of_ref": "indicator--0a9be0c5-3b33-4eb2-90b7-00d4a749e689", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84e2ee4-fa0c-4e98-8e8e-6a1ebb59d14b", "sighting_of_ref": "indicator--cfa21b6b-1bba-4fb6-8c2a-273c5c2decc6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d263f3-b798-4ae2-9019-3b9f31b11dfd", "sighting_of_ref": "indicator--a8b66359-b0a4-4b86-bfe1-8502384c12d0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72cba60c-ddb1-45d3-9972-9cab841d9f6d", "sighting_of_ref": "indicator--34ac427e-43b4-4c62-8c87-936b2b8ce044", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd66120f-96c2-471d-9858-cd9f18877d37", "sighting_of_ref": "indicator--732f7083-edbb-4107-866f-3dd89624f051", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d86a7a1-c87a-43e0-a87b-67f3ed84afa7", "sighting_of_ref": "indicator--5f717ebc-4317-462c-bd85-23f6eb2c322f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031c1396-6735-4338-a339-010e7c380351", "sighting_of_ref": "indicator--89fbe79e-0c69-4ec3-b387-14bfa4f85b21", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c86f7ca-5539-4da0-879c-424929d7095e", "sighting_of_ref": "indicator--b295c77b-edba-4012-bb53-cd1e04886d8d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a3c38c-949d-4836-b2c4-bba41097812a", "sighting_of_ref": "indicator--8b55418f-1aa4-42cd-8091-b93533c9e2d9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893fea0d-df7f-49fe-9f1a-e87d1d0af6d0", "sighting_of_ref": "indicator--3dfe38fa-0501-4d2e-9cf7-53656307f10f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a51589f9-131f-4476-b3f0-cb928be66fec", "sighting_of_ref": "indicator--79fe1804-bd71-460b-8d32-3422e2d55d53", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71810ea3-5305-42e6-b054-da15cbf09f0d", "sighting_of_ref": "indicator--dbef3050-2f2b-4532-8caa-98f823a87585", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7811c43-b9e6-4597-98b6-0f596f840548", "sighting_of_ref": "indicator--1ff26524-fddc-4a9e-a9c4-befbe42c46c4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3e0559-fac0-4f6b-b320-2fbf411aa13b", "sighting_of_ref": "indicator--0c544b8e-3963-41fb-9342-6c6fa6ead8b0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426823c9-ce91-49df-ae85-4820c21d69d4", "sighting_of_ref": "indicator--0c544b8e-3963-41fb-9342-6c6fa6ead8b0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a6708f-ab42-4f4f-93c8-301b6b00c2c2", "sighting_of_ref": "indicator--9dc0d47b-719c-475b-88ee-b9aa058bff24", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94fd8536-e5ca-4f5c-a3c5-b45667e485e4", "sighting_of_ref": "indicator--183c0d16-15b7-4ec1-b032-7ffdddb8302e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0392a6e4-771f-4bc2-a40e-14a54da3d5ed", "sighting_of_ref": "indicator--183c0d16-15b7-4ec1-b032-7ffdddb8302e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0114a19-33f1-4067-b4e5-ace2ab379429", "sighting_of_ref": "indicator--5ebcd65d-1c3d-4f98-9dfa-51c8cacd7b16", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f083c788-6f44-4587-ab55-732b1c99f07a", "sighting_of_ref": "indicator--d9b11a37-c3ea-462b-b098-623b073a0fc3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1931b67e-1534-48a3-969f-6ef4f59fe467", "sighting_of_ref": "indicator--fe643761-8dfa-47f3-bacd-ec178b446256", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df721a60-f10e-49c1-8e5d-d072cce36159", "sighting_of_ref": "indicator--9198ad82-8cd1-483e-a930-12fc9353ff84", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ec102f-b9c5-41fb-a28d-76c43df2cf29", "sighting_of_ref": "indicator--cc20fa0a-2c3e-42a5-be90-5fdf0a186527", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36514ae1-60ec-4f42-90eb-a7791d843f1c", "sighting_of_ref": "indicator--b7f4b808-bb0c-4149-acc9-64818259eaa9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8117cc8b-5755-4982-bfab-f36af23dc162", "sighting_of_ref": "indicator--e68f82ce-9a39-4515-b4da-61dbfbb963aa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deda800c-8a66-4d3a-baa0-5544b5d0c75a", "sighting_of_ref": "indicator--9f9051f9-3a5c-4394-9b5e-e36c1ac692d3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f987ebec-67e5-4c54-aef7-6455815e5e9b", "sighting_of_ref": "indicator--97fef12e-18e6-47c9-9a02-33520e653b06", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0ec60a-ee11-429e-9ebc-0ef974ee8ddd", "sighting_of_ref": "indicator--971f25c9-dc22-458c-bfdb-ddd66bc564ac", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9a3187-e5e7-476f-aee6-9ab4ac6d8a74", "sighting_of_ref": "indicator--01f4045d-7a49-4a12-ad00-f26849b8f26d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e652408-b0d1-4c7d-bb34-15588c81f21b", "sighting_of_ref": "indicator--63144407-9f89-4286-b43d-b48ca407105e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d80e1e55-92df-4e93-9b9e-1554758672c9", "sighting_of_ref": "indicator--e59e7a69-33de-4ab3-966c-197beed1dfcb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c49934da-f38a-4aaf-86da-3a66518d6c27", "sighting_of_ref": "indicator--dc9c5776-7516-49af-ae95-8d4f3931654e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dfb28c8-837b-42ef-85e3-b125d5a175f6", "sighting_of_ref": "indicator--dc9c5776-7516-49af-ae95-8d4f3931654e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f25b107c-c295-404c-aa54-a134474b4712", "sighting_of_ref": "indicator--7c6e5eb4-7939-4061-9055-fe8ba804f27b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaeafbad-e687-4976-a578-c9a730326f8f", "sighting_of_ref": "indicator--7c6e5eb4-7939-4061-9055-fe8ba804f27b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8525f682-58ec-4e0b-a801-07aae5b90013", "sighting_of_ref": "indicator--1dfc3676-ec17-4b29-b44b-3392146d461c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df398d34-e5f3-4e56-ba2f-212891fac3eb", "sighting_of_ref": "indicator--6857f63d-d7a4-4610-b729-697464dd713e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39fc09a9-3ce0-4a5b-bb66-3db6732d917b", "sighting_of_ref": "indicator--1200a563-a26f-4118-8014-b50ccf7f4b29", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--951b35ff-0c01-4b63-806a-1faea82486a1", "sighting_of_ref": "indicator--b9ff9bab-b6d7-45cc-82f8-6345d104c7b2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ecba5a-a486-4b23-ba69-babca2f19daf", "sighting_of_ref": "indicator--0f9723a0-3112-4ddf-9ce9-f29856bf23b8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3266498-3459-40fd-918b-ef4e29a1d3f8", "sighting_of_ref": "indicator--0f9723a0-3112-4ddf-9ce9-f29856bf23b8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b1f3d5-7c83-4d3c-ad25-ee242b0a8980", "sighting_of_ref": "indicator--12da1f61-8837-4afd-89fb-c7e829a67b00", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83894980-fc60-49e4-9164-7725bef82e78", "sighting_of_ref": "indicator--12da1f61-8837-4afd-89fb-c7e829a67b00", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca874df9-1eb8-4528-9bd5-64da201ab618", "sighting_of_ref": "indicator--4a9c734b-41f7-4615-96b5-42bff4c3a62f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e866c2-a770-4675-b0a6-eb6afcde8554", "sighting_of_ref": "indicator--6659e308-9795-4897-af6f-0f7497bf8289", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1caef7de-0b97-4843-9062-e052e7276a9a", "sighting_of_ref": "indicator--f425968f-6f99-49a8-a40e-ad85400b14c8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f2ebf8-10da-49e8-9cc2-d0bf8caf9b8f", "sighting_of_ref": "indicator--f425968f-6f99-49a8-a40e-ad85400b14c8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59fff7c9-099e-45c0-b4e0-cba263a3622a", "sighting_of_ref": "indicator--f425968f-6f99-49a8-a40e-ad85400b14c8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f319462b-3d3c-45d9-8b44-2ad886922688", "sighting_of_ref": "indicator--2c214d58-eda3-49c4-8d11-a7b02a48feb0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--226bcada-2424-40b9-bfe1-02dbcc5d3267", "sighting_of_ref": "indicator--2c214d58-eda3-49c4-8d11-a7b02a48feb0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f753bb4e-0f47-41fd-b971-a3d882a48d81", "sighting_of_ref": "indicator--2c214d58-eda3-49c4-8d11-a7b02a48feb0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae07fb13-5935-4884-98b9-2d936e6d585c", "sighting_of_ref": "indicator--b37c823f-4735-43ca-b69a-01b92887a9cd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb36120e-7d7a-4f53-af71-340e7cc4637b", "sighting_of_ref": "indicator--b37c823f-4735-43ca-b69a-01b92887a9cd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059651b5-5afe-4499-b6b5-ffcd6c7846f5", "sighting_of_ref": "indicator--e7dd2510-8997-4446-a852-881cb2bfc0f7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5d3ea7-24b2-4d2d-a1db-e9ef9e1a502d", "sighting_of_ref": "indicator--e7dd2510-8997-4446-a852-881cb2bfc0f7", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad168af-5b1f-49c5-9451-642401384288", "sighting_of_ref": "indicator--99cf0880-e892-4add-b037-e13b1cd31b6f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91348a34-cbdb-4bfd-8371-167e4cedd951", "sighting_of_ref": "indicator--99cf0880-e892-4add-b037-e13b1cd31b6f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8444485d-f97a-4355-8d95-378e84df945c", "sighting_of_ref": "indicator--cbd58190-66da-4945-992e-709b55406d18", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a3a86a-c0ca-4395-a45d-082636f70967", "sighting_of_ref": "indicator--cbd58190-66da-4945-992e-709b55406d18", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6edbc45e-b0a9-4c09-8a9d-2f3fd676ca83", "sighting_of_ref": "indicator--cbd58190-66da-4945-992e-709b55406d18", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b912c5f9-3d41-47c1-a1c3-922bb7d8b2dd", "sighting_of_ref": "indicator--fc9dd5d9-daa3-4769-9b8b-a69ac7fa40fc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f5f5ee-0d33-4875-8bd6-76de09271a07", "sighting_of_ref": "indicator--03dd29a1-f762-4af1-8c23-36f87fb02a4b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9158b8-b510-44fd-824f-cf273dfb6ad6", "sighting_of_ref": "indicator--03dd29a1-f762-4af1-8c23-36f87fb02a4b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55baad99-23ba-4167-bea3-35955c015adc", "sighting_of_ref": "indicator--3f92c58b-f52a-4122-972b-59b656862e13", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a9e5923-3c22-43c3-816d-25f735926683", "sighting_of_ref": "indicator--aa7f5aa8-2534-4686-8c4e-0532715955bd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad1e2867-5819-44de-b397-70cf374bea82", "sighting_of_ref": "indicator--aa7f5aa8-2534-4686-8c4e-0532715955bd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8043cb58-c33a-481b-9a09-b3a1a3eb4b85", "sighting_of_ref": "indicator--db45d7a7-0582-4368-abcb-d13568313c72", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7998121-164c-4ee9-87ed-569bbc6e9be1", "sighting_of_ref": "indicator--db45d7a7-0582-4368-abcb-d13568313c72", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df5d4952-106c-4a9b-93ec-85e0f959fc5a", "sighting_of_ref": "indicator--635294a9-5750-45db-bb5c-6937baaa8088", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d414f1f-c83b-488c-bffd-6daa33dfa753", "sighting_of_ref": "indicator--834cf8f4-e2c0-4a7a-9367-fcf46662af50", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd5f90cd-d988-47c3-b838-c879b46112ad", "sighting_of_ref": "indicator--834cf8f4-e2c0-4a7a-9367-fcf46662af50", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7fee4d2-398c-4a65-b257-e07487b90bc6", "sighting_of_ref": "indicator--834cf8f4-e2c0-4a7a-9367-fcf46662af50", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a41a512-0fac-4c41-a5c5-67ae071f00d3", "sighting_of_ref": "indicator--b8e51045-d357-4d0b-ac63-f2937a290e18", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72efd7ee-8e67-4f9d-850f-1151a975097e", "sighting_of_ref": "indicator--b8e51045-d357-4d0b-ac63-f2937a290e18", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2593ff-9526-4501-a1a9-2d6f6b86bfba", "sighting_of_ref": "indicator--8d748989-7bcc-4e54-9d0c-88c2407920d2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fd90de-0762-46e1-96a9-7fb9e569cb10", "sighting_of_ref": "indicator--6cd6fe17-3db0-47f4-92f4-396777dce732", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f821d6d-72f1-4de5-b76b-fdfaa956edf9", "sighting_of_ref": "indicator--6cd6fe17-3db0-47f4-92f4-396777dce732", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b32951-4a4f-4b63-b76d-8a8f0b8a0323", "sighting_of_ref": "indicator--088d2cb7-2352-40cc-8868-b947d8a9225b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd10599c-8c9b-404f-8a77-e254e37f6132", "sighting_of_ref": "indicator--088d2cb7-2352-40cc-8868-b947d8a9225b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7d026a-f5ac-4620-808f-93caefa65e0d", "sighting_of_ref": "indicator--088d2cb7-2352-40cc-8868-b947d8a9225b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f2fc737-56cc-49c2-8a7e-94ac4a465386", "sighting_of_ref": "indicator--f7e0d3d2-d16d-478f-bd4d-e0923baab7e4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513994f6-18f7-408a-9329-785ebdbc853c", "sighting_of_ref": "indicator--f7e0d3d2-d16d-478f-bd4d-e0923baab7e4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d33c7f1-1b98-49a0-a3c9-f21388468b30", "sighting_of_ref": "indicator--c63c2720-a36f-44f3-8350-f656a88471fc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d0a2fd8-dc92-4308-b44d-97aeff8f18b1", "sighting_of_ref": "indicator--c63c2720-a36f-44f3-8350-f656a88471fc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded42b79-0a49-43cd-8078-e199a52d1157", "sighting_of_ref": "indicator--5253cb6d-1460-4b4d-a509-1cf1a18bccab", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349aff09-017b-4b74-85e4-45dcf81ca8ad", "sighting_of_ref": "indicator--63a5676e-09d8-40f1-8904-b69c139159ed", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86803c1d-e997-49e6-bac6-8d37d5d2f2d8", "sighting_of_ref": "indicator--63a5676e-09d8-40f1-8904-b69c139159ed", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab20ce15-0eb6-4e78-9f76-2d3fe742884e", "sighting_of_ref": "indicator--63a5676e-09d8-40f1-8904-b69c139159ed", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94edb0ff-1ee1-47c3-882d-1cd729d4be79", "sighting_of_ref": "indicator--d525956d-1388-4255-bbfa-bc601bdbfe8b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c57c138-0879-4048-b956-b47d802ca0ef", "sighting_of_ref": "indicator--d525956d-1388-4255-bbfa-bc601bdbfe8b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e51acb4d-a9cb-48f8-8917-1918f8e85814", "sighting_of_ref": "indicator--d525956d-1388-4255-bbfa-bc601bdbfe8b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5060b9d8-4324-4766-96de-aa5f6ee2fe7c", "sighting_of_ref": "indicator--b72086b4-da1a-406f-939a-903a4952020e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1889676-44b9-49a4-b9d7-934beb92f508", "sighting_of_ref": "indicator--0dec9af7-9bc3-4b38-aee0-91ba2976735f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53817729-a3ae-420c-befc-4735f1816a7e", "sighting_of_ref": "indicator--825d8f01-ff81-461f-858f-6a5e12636655", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92192b34-05fd-4bfd-8956-2fe21409996b", "sighting_of_ref": "indicator--825d8f01-ff81-461f-858f-6a5e12636655", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d81c66-6d56-42f0-b9b9-3514a22660bb", "sighting_of_ref": "indicator--a855a6ba-9f2c-4a13-812e-8a9a89f30158", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6d8f64-cecc-471b-904a-ba6192e13f5d", "sighting_of_ref": "indicator--1d0e32ba-b987-4176-a599-f14e6851a836", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e6120a-a8c6-4ce0-9e6f-20852ede4c4e", "sighting_of_ref": "indicator--1d0e32ba-b987-4176-a599-f14e6851a836", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63603c71-6345-44d9-996d-eb2ca0cd5b1d", "sighting_of_ref": "indicator--1d0e32ba-b987-4176-a599-f14e6851a836", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f60d5253-6f27-4c33-a538-f3329efa6b62", "sighting_of_ref": "indicator--d171b08a-1dbb-407f-bb76-9f7d99d3ebbd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e09f289-86b5-4e2a-ac6e-648e90ec09e2", "sighting_of_ref": "indicator--d171b08a-1dbb-407f-bb76-9f7d99d3ebbd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992002a4-1dc5-4d11-865a-a64fc9e63bbd", "sighting_of_ref": "indicator--aa33e19a-49e2-4db5-b7dd-bf92bf9d5095", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--728d517e-3688-49dd-93a9-194567c39cc1", "sighting_of_ref": "indicator--aa33e19a-49e2-4db5-b7dd-bf92bf9d5095", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2918a41-377b-4879-b96b-a2ae34e391e7", "sighting_of_ref": "indicator--9bed4be4-16fa-42ca-9b8d-4cec9269ebee", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b3636a8-a4f4-4ef7-a72a-7b0dd9dd1198", "sighting_of_ref": "indicator--9cc3f0f8-7890-4722-9d73-8d96345749bc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10fcb90d-f5d1-4723-84a3-7222fd44dc9c", "sighting_of_ref": "indicator--f9227fa4-09d1-415d-b6d5-2ef67539e90a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f5b5b56-faa8-45e8-a150-6869f53c9b29", "sighting_of_ref": "indicator--f9227fa4-09d1-415d-b6d5-2ef67539e90a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a11ded3-e60b-4a41-bdd9-65740faac50b", "sighting_of_ref": "indicator--594a02f3-5402-4d3b-83b7-873c7679b545", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a06ea2-e69d-4d12-8272-6623eb4b5beb", "sighting_of_ref": "indicator--594a02f3-5402-4d3b-83b7-873c7679b545", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4997d02-7f41-4a27-9f50-d614c6c9fda0", "sighting_of_ref": "indicator--90ac1d4f-3aa1-4568-aa46-5125cb0627f8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee8d019-438c-4025-8a1d-2857ac4c0cd0", "sighting_of_ref": "indicator--90ac1d4f-3aa1-4568-aa46-5125cb0627f8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--576cdaf3-7ed1-4fa9-8cf4-6386021acd2a", "sighting_of_ref": "indicator--72a587e6-acef-42a2-bad2-fe1d8c64c058", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb8f1a4-4980-42ec-8a2d-1a7b1bcfceed", "sighting_of_ref": "indicator--ff14e7dc-20da-4ea0-a95b-5f5f4e0b2fb7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b7b662-4430-4640-9805-83027db16833", "sighting_of_ref": "indicator--6622ac38-d90d-4672-b7da-20c7d04ad2db", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498690c6-6ca5-4638-afb8-b4fc63fc07f8", "sighting_of_ref": "indicator--6622ac38-d90d-4672-b7da-20c7d04ad2db", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a5b3be-018c-420e-a961-328eb67f7389", "sighting_of_ref": "indicator--09af7049-cdac-42e8-b884-2d1fabfd502f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a1d4e7-7792-4bdf-8fa9-e1886f406e92", "sighting_of_ref": "indicator--09af7049-cdac-42e8-b884-2d1fabfd502f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ffb018-1780-4128-89ba-3c88c1b084be", "sighting_of_ref": "indicator--09af7049-cdac-42e8-b884-2d1fabfd502f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daecbfde-39e7-4a03-baaa-64feeb695553", "sighting_of_ref": "indicator--b72176c0-2d4c-4f6a-894b-dcf273d9213b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf199e1d-2ab9-4f17-a96d-ff95fe649647", "sighting_of_ref": "indicator--c39d7d10-9c71-45a0-ba80-26a7bb62f78e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9371ca-b5ee-48b9-aa6e-314189e64c15", "sighting_of_ref": "indicator--c39d7d10-9c71-45a0-ba80-26a7bb62f78e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--536a4f5a-28d9-49e9-a12f-02050392395a", "sighting_of_ref": "indicator--9939f2e4-a542-46d5-aa51-5a65ddcef604", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87963821-53ec-4084-b261-d4b0df902e66", "sighting_of_ref": "indicator--9939f2e4-a542-46d5-aa51-5a65ddcef604", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6bbb421-ad53-4393-a67c-7e84705baa33", "sighting_of_ref": "indicator--84f94eaa-c9c7-4714-8aca-beb1884e6b1d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b6da7f-8723-489f-b57e-7ac08162d8a0", "sighting_of_ref": "indicator--84f94eaa-c9c7-4714-8aca-beb1884e6b1d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2489c0c-24b1-415c-908f-fa33cce91c88", "sighting_of_ref": "indicator--84f94eaa-c9c7-4714-8aca-beb1884e6b1d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c27fc88-758c-40ef-8450-e972e416f50f", "sighting_of_ref": "indicator--9b614d44-3231-48cc-94a1-88afa84c7c66", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc6f0c50-394f-4ece-a9ce-1cf131c07079", "sighting_of_ref": "indicator--9b614d44-3231-48cc-94a1-88afa84c7c66", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d43a76-1cc6-45b0-be43-92521c3f5b65", "sighting_of_ref": "indicator--f2f602d0-c320-44ce-9b6c-1b70df47f456", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc10c0a-d16d-4802-abfe-7b39d5f89009", "sighting_of_ref": "indicator--4aadc236-01bf-4814-8336-28904b606b34", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db51f11-f49c-49dd-957e-41268a1ddac9", "sighting_of_ref": "indicator--4aadc236-01bf-4814-8336-28904b606b34", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77aeb4b4-8940-4c39-a5a1-64e9a1017530", "sighting_of_ref": "indicator--7ee8748c-5ad7-4cd9-8a66-af7e70f91bd4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a746dea7-2a09-4a92-9e25-0ba65a51aa6a", "sighting_of_ref": "indicator--7ee8748c-5ad7-4cd9-8a66-af7e70f91bd4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d103ee1d-6192-4dab-8108-5e3d324e57e8", "sighting_of_ref": "indicator--7ee8748c-5ad7-4cd9-8a66-af7e70f91bd4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e8be133-d4d6-4676-bcba-15b97ae7bcf7", "sighting_of_ref": "indicator--3b6921fa-7c15-4fb6-9f58-e7174ca49842", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85f88b1a-3a1b-4a61-9a11-0aaa6fe5e03f", "sighting_of_ref": "indicator--8c6335ce-fdf0-4cd1-b3a5-4281a5cf36cb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b068423-9282-4f5a-a933-af4f78761313", "sighting_of_ref": "indicator--d6f6276d-13fa-4c06-8565-340232c16a05", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--644e4d0f-2ca9-4a3d-b62a-2e502f6414e0", "sighting_of_ref": "indicator--d6f6276d-13fa-4c06-8565-340232c16a05", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70cbd950-97f1-448a-8cb5-dabfbdb63677", "sighting_of_ref": "indicator--a4919178-bac5-4659-b872-b31c5695dbd0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b34c19-ab61-40c3-9942-3734b3fd6c0a", "sighting_of_ref": "indicator--280817ee-7bbd-4eb4-8ee6-dab70aea0c51", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef93c3fa-dc7c-4fa4-80d2-c845cd11b876", "sighting_of_ref": "indicator--f1786659-4ba7-4952-a529-8fa65fbf7ee3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893791e0-3cb1-4a63-a1ab-5efc026108b0", "sighting_of_ref": "indicator--f1786659-4ba7-4952-a529-8fa65fbf7ee3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--415e0cf0-9ee2-4f64-996e-3f69e77bb383", "sighting_of_ref": "indicator--8576a659-38c6-4fd7-9cff-902a12fecb0a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6206a44-fa46-4aa1-b6c3-6c6d95c8fead", "sighting_of_ref": "indicator--8576a659-38c6-4fd7-9cff-902a12fecb0a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37dae515-aad2-4495-8eb0-5bf80f67898a", "sighting_of_ref": "indicator--8576a659-38c6-4fd7-9cff-902a12fecb0a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf2da54-4781-4b88-aa2f-1ec9d8545edc", "sighting_of_ref": "indicator--dfa84797-e111-4de3-90e9-8e50c3eaa8ca", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e61c3666-bab8-4efa-96d1-5d67d82f4028", "sighting_of_ref": "indicator--dfa84797-e111-4de3-90e9-8e50c3eaa8ca", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54c0eac-c22f-4705-ac76-3729522bb508", "sighting_of_ref": "indicator--5a1e3b74-d373-4a91-977e-b72f846c3334", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f0442dd-52c4-4141-8464-6bc6cb9a58cc", "sighting_of_ref": "indicator--5a1e3b74-d373-4a91-977e-b72f846c3334", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba1ed457-9184-4426-a681-821197abe405", "sighting_of_ref": "indicator--f7ecf753-9199-4939-b901-593ce91d80a6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abfcf99-4942-4fea-b593-78eff5dac879", "sighting_of_ref": "indicator--d62f1b24-54e0-4c4c-994d-962694843d16", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1904335-8615-42a8-90c8-11e0c04237ec", "sighting_of_ref": "indicator--f5978f11-1cac-4110-b67b-8d817a906d23", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8284b4ca-eb77-4791-a179-c3365e71cebe", "sighting_of_ref": "indicator--f5978f11-1cac-4110-b67b-8d817a906d23", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f984f9a3-2e01-49d4-a6d7-39d1c45114f0", "sighting_of_ref": "indicator--f5978f11-1cac-4110-b67b-8d817a906d23", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f5ffa8-c667-4173-b8ba-f5908e41e5de", "sighting_of_ref": "indicator--d658e959-45f0-4ccd-b4cd-e7704358602d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3703f5cb-545f-4281-b653-4fa94fdc008e", "sighting_of_ref": "indicator--d658e959-45f0-4ccd-b4cd-e7704358602d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--758c791a-6407-41e5-bf8a-6da097c9f1cd", "sighting_of_ref": "indicator--d658e959-45f0-4ccd-b4cd-e7704358602d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6fc4530-6442-4344-b70c-f78e457cbbd7", "sighting_of_ref": "indicator--32bf612d-ffd8-4b6b-b85f-07f636962101", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f8035e-3eed-422f-bfdc-df46a8380ee6", "sighting_of_ref": "indicator--404f4ef5-e098-4ae5-ad3b-00de55f8a8e9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6badd186-8afd-4516-a6c0-db45da0580b1", "sighting_of_ref": "indicator--404f4ef5-e098-4ae5-ad3b-00de55f8a8e9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc047b79-cac5-4be3-9abc-09f68c1be48c", "sighting_of_ref": "indicator--92e4a2b0-60be-4ba9-9847-8d46a899ce3f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2031621f-64b0-4c2a-ad97-6faf21279ea0", "sighting_of_ref": "indicator--a2de4044-908d-44be-9c18-215f9b0e83c3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b7437bf-4b58-4cb7-9886-e1f62b6eb070", "sighting_of_ref": "indicator--a2de4044-908d-44be-9c18-215f9b0e83c3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c681853-06f3-411a-a6c2-fa9275ac998a", "sighting_of_ref": "indicator--65b9dfc3-4e89-48cc-8a08-d8c0172cf80c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614d351a-6833-4b41-a6eb-98565dd05186", "sighting_of_ref": "indicator--b598cd8a-2a1f-4fa3-b56c-1c85f60d08a5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e8975d-a506-49f9-8864-4732a4570a49", "sighting_of_ref": "indicator--b598cd8a-2a1f-4fa3-b56c-1c85f60d08a5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d91a912-cedc-4bfa-afd8-4430cfa5a359", "sighting_of_ref": "indicator--c76b92fe-90b5-432f-aff5-ff7ab76e2d4e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--827e6faf-d122-43c9-b6be-4be74f16e7c5", "sighting_of_ref": "indicator--e3af9243-ed93-4f28-a389-eab782ca07b3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266de96b-d70c-461a-af14-36fcafb9d530", "sighting_of_ref": "indicator--e3af9243-ed93-4f28-a389-eab782ca07b3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5229d6-84b4-4539-aebf-ab31d589cca6", "sighting_of_ref": "indicator--56571a2d-e37f-4085-b0c2-2cc25f97fca0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac30316-f647-4080-8c8c-8f4b6b7fd264", "sighting_of_ref": "indicator--56571a2d-e37f-4085-b0c2-2cc25f97fca0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54fb4fa9-40f6-4584-ba25-b1f297ca7f8f", "sighting_of_ref": "indicator--d31c30bc-7fc4-4a53-a771-c55be17ea345", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2de65a87-8bd3-40d0-8ef6-359260c10d6b", "sighting_of_ref": "indicator--d31c30bc-7fc4-4a53-a771-c55be17ea345", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ff0fe0-82e3-49aa-b33f-314444eb9642", "sighting_of_ref": "indicator--659a243f-f95e-493a-9c1d-6884ff3afd19", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d695bc-c37e-473c-9b6e-ceb98bde371a", "sighting_of_ref": "indicator--659a243f-f95e-493a-9c1d-6884ff3afd19", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acba885d-49d7-4f6e-96a9-048d1ac2e7ed", "sighting_of_ref": "indicator--2ae4f1db-6954-4174-a1f5-7caea708f00d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4768ec63-1f8f-44ad-98e3-121c34ca4f06", "sighting_of_ref": "indicator--52da7d5b-ea96-42e7-97fc-0e306c54074f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1b0cfc-d11e-4b0b-a8ce-bb4ca88456ec", "sighting_of_ref": "indicator--52da7d5b-ea96-42e7-97fc-0e306c54074f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebfbc71d-b26b-4b42-8373-c8e1423ed279", "sighting_of_ref": "indicator--928f5152-43c1-45c4-a336-f5dd087967e2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2084926f-0630-47e0-b096-1bd59a0b177a", "sighting_of_ref": "indicator--928f5152-43c1-45c4-a336-f5dd087967e2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97288698-f8b2-44f9-8f8e-6d2b2eed3a16", "sighting_of_ref": "indicator--41dca21b-35b5-4598-b570-029397665247", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf901b2-3fb3-4373-8a70-f9425c2e5c6d", "sighting_of_ref": "indicator--41dca21b-35b5-4598-b570-029397665247", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a827d522-0068-4973-a4f8-e1e2b2520cba", "sighting_of_ref": "indicator--7b399d72-7cf1-433d-a55e-4b459ae63244", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed21da4b-1e77-4daa-9686-c66d8928e75a", "sighting_of_ref": "indicator--55b68890-d142-4eef-af69-07d44a636409", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d861d2-b890-45a2-99df-2716649c4737", "sighting_of_ref": "indicator--55b68890-d142-4eef-af69-07d44a636409", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1d8ce6-b76f-418b-8cbf-7a2f7e7bdb49", "sighting_of_ref": "indicator--2b9c3bbd-4455-4e4f-8edf-08cf9bb85999", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9309168-8f87-4e5b-9091-3473260d3566", "sighting_of_ref": "indicator--2b9c3bbd-4455-4e4f-8edf-08cf9bb85999", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8136034a-7131-4d42-854c-a4d793f91e9d", "sighting_of_ref": "indicator--04e12c91-6df1-4810-990f-2f8e36338313", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44410eaa-bf25-4e0d-ae73-6e9d381355a2", "sighting_of_ref": "indicator--04e12c91-6df1-4810-990f-2f8e36338313", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9683c9cd-493d-41af-8b44-7b1b43ea5b28", "sighting_of_ref": "indicator--d14eedb8-786b-4115-8616-ccf9a12cdc92", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e807cc8-eb32-44fc-b517-5a83f8ab6edf", "sighting_of_ref": "indicator--d14eedb8-786b-4115-8616-ccf9a12cdc92", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1a0cfd-c45b-42e9-928b-373519bc1bd0", "sighting_of_ref": "indicator--5b378a38-f5cf-4337-aeff-2a24bb20db05", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d76c269d-715c-4ac7-9a00-88d354668a6d", "sighting_of_ref": "indicator--5b378a38-f5cf-4337-aeff-2a24bb20db05", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb3cb8b-b35e-4015-b729-6eb08c1ed608", "sighting_of_ref": "indicator--5b378a38-f5cf-4337-aeff-2a24bb20db05", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3be87a7-da42-47ad-957f-ff2a4f7a339b", "sighting_of_ref": "indicator--7b7d9472-fe9f-400e-88f2-f6c5c830ca92", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac7d5d7-96b6-49f9-8bb1-63ce9c43ec2d", "sighting_of_ref": "indicator--7b7d9472-fe9f-400e-88f2-f6c5c830ca92", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d044087-7294-4184-93ec-71a71c44ff2d", "sighting_of_ref": "indicator--a4f26bf0-97c7-4916-9480-1f4f992784e3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f78a12-9c0d-4261-9075-e2b429ee19cb", "sighting_of_ref": "indicator--a3dafca6-5136-4059-947a-8a293af484e1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08e0071-3055-458d-8257-d33fa6c95eb1", "sighting_of_ref": "indicator--dd528d38-ae5e-4c57-aa26-d1409f04612d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e88d009-4add-40db-9f7a-13963cec8530", "sighting_of_ref": "indicator--dd528d38-ae5e-4c57-aa26-d1409f04612d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f612b93-eff7-4324-a08d-aecd7fbe2715", "sighting_of_ref": "indicator--3dbc7efe-4f6b-4c70-9d34-5517a49db15d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265744b9-1ff1-4549-8660-1fa0c50929c9", "sighting_of_ref": "indicator--3dbc7efe-4f6b-4c70-9d34-5517a49db15d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e20cf7d-fe1d-41f6-bb02-f26ff4cee330", "sighting_of_ref": "indicator--3dbc7efe-4f6b-4c70-9d34-5517a49db15d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cfa483f-e1e2-48b1-9acb-bb5a0d90cb70", "sighting_of_ref": "indicator--f77eaf91-05be-4843-b2ae-e770c779bd15", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4adf2207-0f02-4379-bbfd-239bcbd2c226", "sighting_of_ref": "indicator--f77eaf91-05be-4843-b2ae-e770c779bd15", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b307852-088b-4d97-8df8-e35037a6b076", "sighting_of_ref": "indicator--10609045-9843-42e7-849f-101594331f75", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e6e19d-ccf1-4e5d-b65c-69089942e612", "sighting_of_ref": "indicator--10609045-9843-42e7-849f-101594331f75", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1395ef39-19e0-4188-b7b2-d4d2216e0422", "sighting_of_ref": "indicator--10609045-9843-42e7-849f-101594331f75", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76981194-79b9-47c6-8b52-7babdf715935", "sighting_of_ref": "indicator--a29285e0-190b-4245-b9f0-d81f0d4fd3bd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--188d7ff6-14d1-49b2-84f8-99ca3166c161", "sighting_of_ref": "indicator--a29285e0-190b-4245-b9f0-d81f0d4fd3bd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43840b99-3a75-4bf2-8242-8f20dd3b55fa", "sighting_of_ref": "indicator--100140f0-8955-4904-87f7-fba031bf508d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed272cd6-3007-4d91-9340-647dbf25589a", "sighting_of_ref": "indicator--2e1b76ed-9767-4223-b4fe-c54958838a79", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b5d0a5-f468-485e-a2a2-6a3a47e76e76", "sighting_of_ref": "indicator--5b2403ae-db84-48ca-9086-15ce31fbb6d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f0a4db8-932d-496b-8eac-e74bcec5e107", "sighting_of_ref": "indicator--6c68f36b-c73b-4ef5-b332-103f98089e4a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a205f83-8381-458c-8ac0-a5b738314772", "sighting_of_ref": "indicator--c49fd245-55cd-4aba-b48d-b32d1b3559af", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a5a4c6-5d82-4c06-abec-1d0dbff6b058", "sighting_of_ref": "indicator--b9522bda-f0b7-4667-b4fe-3c8443b38cd5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3099f65e-82a2-46c2-9373-8963339dc71b", "sighting_of_ref": "indicator--d2f8610f-f22f-4718-848c-c81159785572", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92e43ed-ff4d-42ad-b954-cb4b1532a26d", "sighting_of_ref": "indicator--eb1f60d4-f37f-4a62-883f-a21212ebd0a5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86cfdd5c-1021-4fb2-8722-3357af1ec41c", "sighting_of_ref": "indicator--e994ff1c-4c48-48ff-b56f-e3568c73d470", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ea7072-e0b4-47d0-97ca-ff1bdc37ddf6", "sighting_of_ref": "indicator--eb864ee9-2151-4d2a-9708-89c0d6f32b04", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd9f8d5-0125-4dba-a0e8-a7a64fb60af4", "sighting_of_ref": "indicator--adbb5ef9-250b-46b5-9ca8-092b90db3d37", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316561e1-ce96-439b-9c9c-cc916afe89ea", "sighting_of_ref": "indicator--adbb5ef9-250b-46b5-9ca8-092b90db3d37", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aefe11c-8a07-41f3-8d63-ec66cbaf2730", "sighting_of_ref": "indicator--0077cc90-7784-4587-bdfa-81ec29b20691", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81da4fd4-62fc-4841-81f4-610d25ae093e", "sighting_of_ref": "indicator--80111074-c760-4936-8793-ee010ff55694", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f85b79-084c-4598-a7a9-d410c93bf1d6", "sighting_of_ref": "indicator--9bf527d9-e7fe-41ed-8850-81d89a2753fa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f55a01e-63e0-4ed0-af03-63e0df5e6524", "sighting_of_ref": "indicator--9bf527d9-e7fe-41ed-8850-81d89a2753fa", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c6d9274-1d16-49c1-9d39-b1d384976c6e", "sighting_of_ref": "indicator--1abe53e5-0b34-4ec5-aefe-de4e6b0bbc4c", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd007b23-aa7c-4814-b790-56f58ecc60fb", "sighting_of_ref": "indicator--7a68b6ff-643a-4b2f-b513-dbb4fccdc428", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c071e8d7-9e63-4790-86a4-707f2c7ea866", "sighting_of_ref": "indicator--7a68b6ff-643a-4b2f-b513-dbb4fccdc428", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b73423bb-a98a-468a-9d4d-9e578f5587e4", "sighting_of_ref": "indicator--648961d2-fb5b-4525-a235-2057c45bc525", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfcd0bf1-5b6f-48b9-ae45-f9bfc6dabb51", "sighting_of_ref": "indicator--648961d2-fb5b-4525-a235-2057c45bc525", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3f89a0-fc8d-4848-bb17-671edeff7ead", "sighting_of_ref": "indicator--648961d2-fb5b-4525-a235-2057c45bc525", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc671a87-5e5a-43ff-a256-0f686aad8e29", "sighting_of_ref": "indicator--f4ab9346-acf4-42e7-ab81-7b9ca0511712", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae371f1-0021-4316-a2b9-b79575490c75", "sighting_of_ref": "indicator--7029ea6d-b766-4cb9-a2d6-b22c59eaf2da", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8cfff3-4f07-4507-89d3-3ee2bff2a56a", "sighting_of_ref": "indicator--2098270a-5379-4e27-8b76-de80e3b7a9ba", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--293bde51-8c2c-4a09-8b6b-2bfb585d488c", "sighting_of_ref": "indicator--2098270a-5379-4e27-8b76-de80e3b7a9ba", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c66a0e-d648-4772-aa7a-150aca3cdccc", "sighting_of_ref": "indicator--d49aab07-c14e-4bd1-9eb0-3ff9e8301055", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7f3729-bd18-4853-b8fc-62e697815f5b", "sighting_of_ref": "indicator--10c57d0f-6d45-4eff-a524-a2079bc33f3c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f71b34a-5acc-4e9b-a669-57ec24c9b8ee", "sighting_of_ref": "indicator--e5308e57-3d0b-4e61-a53d-90bce35ef82d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2018082-7f63-4fe4-930f-8800bcbd2226", "sighting_of_ref": "indicator--08480835-abb6-42c5-ac85-64ea5f9b017b", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7853d9b6-8aba-4680-9154-c5264a9abaf9", "sighting_of_ref": "indicator--54d7e604-8c21-4abb-83b5-3622abb2dad2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d3597eb-3ba7-47ce-baa7-dc1eb59f1f46", "sighting_of_ref": "indicator--7a3e6b9c-045f-4c68-a4fa-9efa4b45df51", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3c9e3b-9c73-4504-8381-855ca042c031", "sighting_of_ref": "indicator--7a3e6b9c-045f-4c68-a4fa-9efa4b45df51", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3637462-7878-45fa-ab9b-4b1c70955a5b", "sighting_of_ref": "indicator--7a3e6b9c-045f-4c68-a4fa-9efa4b45df51", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--390505d6-c801-45bd-b6f4-8dfc6d0cca54", "sighting_of_ref": "indicator--86287d94-e96a-46e4-84c4-647515c4e2ce", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037f0a07-3270-46d5-ba4d-a832ebd27875", "sighting_of_ref": "indicator--b5444d89-84b5-402b-8c45-eb981db5cff0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c7f39cb-a0a9-4adf-af27-adbdc71e1553", "sighting_of_ref": "indicator--e5a5026e-fcd2-48c6-b09b-bb1a340159f2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c04137ef-9230-479f-a1e3-45bd6fb9ca67", "sighting_of_ref": "indicator--1941201d-0218-4d03-a796-df49e3160e07", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cbaae2a-5ee0-4ca4-a7a7-44fa92c73d0d", "sighting_of_ref": "indicator--cda343bd-8ac7-4f6d-82bf-3c4190c90a29", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20dc4354-3ec1-4d9e-ba9c-9b9e24ece07a", "sighting_of_ref": "indicator--cd461fda-0666-4265-9ae9-fc036c4f4a72", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742a55a4-a45e-4689-9ce3-b8bcc64f0f5a", "sighting_of_ref": "indicator--cd461fda-0666-4265-9ae9-fc036c4f4a72", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ac448f-d7a6-48d6-b101-452faa90f86f", "sighting_of_ref": "indicator--bbdd474d-2c91-448a-9f9f-0a76ae1a3fbd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16823882-4184-489b-9967-530b989fcee1", "sighting_of_ref": "indicator--ef1d3307-8fa8-492d-88b3-3dc8d84f68db", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc5fe0b-3508-43cd-b100-0805d218221a", "sighting_of_ref": "indicator--f69d2448-b664-485f-acc5-9b908dcad878", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be954e62-6f5d-40b4-ba80-eb0888a7a828", "sighting_of_ref": "indicator--2f3963e0-d3f9-408e-abd0-b75df8201ed4", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee09bdf-a592-4252-a5f9-6c34c6e3b5ef", "sighting_of_ref": "indicator--39b5a317-457e-4d8f-a0b9-a12b4b57c7c0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2212b8-a05f-4079-a168-6a72f91701c8", "sighting_of_ref": "indicator--f0e0a5b0-1db4-4beb-8e21-6af9f0feb7b8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0005eab-d70e-4690-861c-f6a1f7e53681", "sighting_of_ref": "indicator--4c24068e-8c43-426b-a3a4-75f46e52ce87", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b219a111-f45f-4232-8a13-56b86c2f59da", "sighting_of_ref": "indicator--646e0081-b4fd-4b44-a365-013fa3966fc3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a49b3e4-4e07-4d82-b92a-1594401b99d2", "sighting_of_ref": "indicator--8f0c4d31-4712-4a45-8bdf-0d862ed1a0bd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10092739-98bb-4ca2-b647-915957a4fc16", "sighting_of_ref": "indicator--97566421-a8eb-438c-8677-8ec9622d5460", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f95a742-293f-450b-af9a-4e99381be783", "sighting_of_ref": "indicator--22bbab97-20a7-4fe8-840d-e9b8c86380bc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22cb931-4b18-4a4c-a477-af90a14f82cd", "sighting_of_ref": "indicator--22bbab97-20a7-4fe8-840d-e9b8c86380bc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643cf037-a0d2-4274-a439-d3a165ff5b72", "sighting_of_ref": "indicator--81d6a3b7-44b1-4e9a-aca7-a048226e9a0b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--314bef03-7097-4867-928b-2b6e7fc7372a", "sighting_of_ref": "indicator--cae4c0cf-bf6b-46a6-8a47-e7551cb617ff", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad3f91c-6fb2-41bc-b9a2-6ea495909d7a", "sighting_of_ref": "indicator--fcc4c9ee-c71e-45ea-9be6-c17ea84cf1f5", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6106ac2-4ed5-4408-bad3-c73a38eb1e1b", "sighting_of_ref": "indicator--9aebd57f-d914-43f4-9272-cd0019aa54da", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e888ad2-4b6b-4383-8c8a-dd9490638d26", "sighting_of_ref": "indicator--9aebd57f-d914-43f4-9272-cd0019aa54da", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27df9bea-c4f0-4dee-915e-479dfeffc683", "sighting_of_ref": "indicator--feadaae1-71fe-4758-b3b6-e9f8b392a96a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3cea378-8ab2-4084-bb7f-b955fd4c4d86", "sighting_of_ref": "indicator--feadaae1-71fe-4758-b3b6-e9f8b392a96a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855c6f36-3dbc-4bf1-83ca-aff890849e66", "sighting_of_ref": "indicator--cfd0d638-d25c-4c95-b65b-691fb04c2cf3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36907ec2-e48b-452d-9dff-b17e65ca4b9a", "sighting_of_ref": "indicator--5fb67a31-2329-4acf-895a-8b97d2b1826a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b418d79-93bf-4b19-8bde-acd48bb20281", "sighting_of_ref": "indicator--dd93b6a5-0254-4a71-8244-9e50ad4efa9a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46cb1450-24d5-4df7-b121-f7650fc21ac3", "sighting_of_ref": "indicator--f7b4072c-c1bb-4515-9a38-a32d6d553b29", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f01ab4-7f53-44aa-a4d8-a14224af1750", "sighting_of_ref": "indicator--f3dc69f6-c241-4816-99fc-74911d7e615b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b14ff8c-7b19-4c15-9873-81d076845ae6", "sighting_of_ref": "indicator--b0b5d6ef-3e9a-4581-879b-3b299d40cac3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a83f80-23a4-4c00-96b1-fb8cae06e4fd", "sighting_of_ref": "indicator--a2dc4b0d-e145-4a3f-aeb5-e771bd1bccaf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d649ae8-b370-492e-a7d1-3b453ee8f4c3", "sighting_of_ref": "indicator--532edc3a-6f0f-40a9-8ef6-aefb6bd2b6a4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8184896-7e49-424f-b8fb-205ea43d24c7", "sighting_of_ref": "indicator--ac1426d2-2ee9-4222-b2fe-e32eb7b2af02", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2d893c-dd43-4b49-b394-ebdfbc4bdeb6", "sighting_of_ref": "indicator--ee9f449f-ef05-430b-8c20-9645186db603", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5db3c76-56f6-4677-bf8b-9fbc7ae94bc2", "sighting_of_ref": "indicator--d93e74ef-79ef-4f3c-9cf6-e7dd43b4bdf9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9367dae8-c595-4d4c-bbc6-88aefbc8780c", "sighting_of_ref": "indicator--bcd34a08-0bfb-424c-87b9-d5238347e47f", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c2fb6d-3fae-44d7-9834-e145ed62179e", "sighting_of_ref": "indicator--0b0445bb-1f51-4900-9caa-723e8e5c371f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c17797-733e-4f6f-be20-96fe3d085aaf", "sighting_of_ref": "indicator--0b0445bb-1f51-4900-9caa-723e8e5c371f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6436863-a385-43ac-948c-c7d766482930", "sighting_of_ref": "indicator--0b0445bb-1f51-4900-9caa-723e8e5c371f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f34e718-348b-4964-a31a-1b6c315368ef", "sighting_of_ref": "indicator--5b6ab221-c84d-4fc3-8e88-38b8abe09fdd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a4994e1-cbc9-467c-b297-a78d4b7f997a", "sighting_of_ref": "indicator--9134f673-dcec-4668-b051-8d0e9ff0fdc8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f81fde0c-29f3-4721-933b-c24dbf2fae30", "sighting_of_ref": "indicator--dfc2888a-b69b-4dd4-a323-c81bac58665f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef25163d-90cf-48fb-b519-e74a8a762176", "sighting_of_ref": "indicator--c7db71a6-c9ae-45c6-b4c9-04230c7600a5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157cec94-0aca-42db-b179-c948c79a63f7", "sighting_of_ref": "indicator--fd340ecf-e09a-4cf5-8545-0a0a0bead24b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e193200d-bee5-439e-9665-d2ec211f5b77", "sighting_of_ref": "indicator--377da00c-bda9-4268-b18a-640d139ba3a4", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c0acae-d449-4f62-be6c-246456ad6a8c", "sighting_of_ref": "indicator--2d1b831b-c1b4-444a-bed6-a833da2e7869", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe5794a5-577b-4126-8540-b90f66aecff2", "sighting_of_ref": "indicator--2d1b831b-c1b4-444a-bed6-a833da2e7869", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59421a93-e7f4-4138-a540-7685c89b411f", "sighting_of_ref": "indicator--4ca5ebb5-9e13-4eb6-8635-233562591a31", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8bc7e1-14db-45d9-92d7-c29a256b0567", "sighting_of_ref": "indicator--f5abfc09-423f-4b72-a0c0-edfc0405456a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb02414c-89bc-4f35-8b77-8be4b0c3bacf", "sighting_of_ref": "indicator--eb36dcf2-1770-4d4c-b267-08bf12333b23", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a290233-a0ce-4b8b-8137-1705695daace", "sighting_of_ref": "indicator--08f401e3-2424-48e4-96eb-8dbd28dfdce8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df1dcdfc-a1ef-4c45-af11-ce1f68c6f7e5", "sighting_of_ref": "indicator--694c6900-c8c7-4265-9e14-456620849502", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7336aba-74be-4745-929c-1b52f08b672e", "sighting_of_ref": "indicator--5b0a2aeb-bf24-4a34-bd9b-4afd224552c9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677f8463-e366-476c-9504-1f392731bfc9", "sighting_of_ref": "indicator--f20c33b8-e6d9-4d74-b9f4-f27ff8565169", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5ac710-f69c-4706-92a3-dc9f92cde4e6", "sighting_of_ref": "indicator--c7298a47-0baa-4b81-8404-d485eedd8f3c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90870a07-d422-4aee-8534-2cfaddf73ad6", "sighting_of_ref": "indicator--c7298a47-0baa-4b81-8404-d485eedd8f3c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4c3b9f-089d-4b63-8f55-9e57b3d7ade8", "sighting_of_ref": "indicator--c7298a47-0baa-4b81-8404-d485eedd8f3c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3206277c-c3d5-48cd-b7d7-d73c1bb320cb", "sighting_of_ref": "indicator--5d2287d6-c2fa-4d88-88e1-a380855253e6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef39aa5-fae1-40ad-8550-9c851048646a", "sighting_of_ref": "indicator--16101129-42dc-4823-a069-6836158c7d76", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2714aeb-db57-42c4-97cd-80471d3786ba", "sighting_of_ref": "indicator--db6de9bc-f92f-4ea3-82fc-d96d01d550ab", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5faee38-ca97-48b8-8c3f-cf836bf0fba9", "sighting_of_ref": "indicator--c53810b3-2186-47a0-89f1-14cd034d0db5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24616f59-b85e-432e-95d3-396a99606d3c", "sighting_of_ref": "indicator--b428c787-12d9-4e92-9e30-44229910b55e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265b3df5-9496-42cd-831f-94df42b281a2", "sighting_of_ref": "indicator--34a214ee-e3f5-4edf-bae2-c7e9f69fe757", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365628c3-9764-4554-be9b-09f66ba800bb", "sighting_of_ref": "indicator--9bd5c86e-a52d-4f81-b7dd-821a00ada4a2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72e978e-bc78-4352-a89f-698dda3a671a", "sighting_of_ref": "indicator--1a006ec2-3ac0-431c-97c4-d77a7cce00b3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba18f79-affe-4903-8916-0231e6f85c0f", "sighting_of_ref": "indicator--a8b14086-2dca-4104-b862-44fd9b16519b", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec3aae1-eec4-426e-ae9d-89294fe60501", "sighting_of_ref": "indicator--582e9aa5-76e9-4dab-a7e0-f8575d2cdba5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0323ad31-bcdb-464a-881c-52c7aabaa758", "sighting_of_ref": "indicator--9904125c-78e9-41df-bb48-1d40f266f007", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d497553-7828-46bd-8f80-c1ebdd7f83f3", "sighting_of_ref": "indicator--395b8fc5-efab-4899-a2c9-d31f4765285f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2574267-a959-43e0-a1c8-bab19f4cb310", "sighting_of_ref": "indicator--0a172ba6-5e89-437e-b7cb-8bcd4666f6fa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b3e74d-665f-44cc-af12-ba224d362919", "sighting_of_ref": "indicator--7314a215-1193-4a41-95fb-02cdd740fbb4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed7bbc2-d097-4c41-9521-900d0ba27f35", "sighting_of_ref": "indicator--c4045556-1356-4a83-b4c9-f0210a0f2276", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e637db-98aa-49b2-a0ec-c436f42c1c12", "sighting_of_ref": "indicator--bc395070-5000-406a-9791-20a43e740ea7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81205757-c9b6-426c-8169-9ece6b0212d9", "sighting_of_ref": "indicator--f51dd282-b9ce-4e00-b04e-0fb199b74384", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b53c2cc6-6ea9-49d1-85cc-ebd563d62313", "sighting_of_ref": "indicator--a8375a7c-15b4-4870-84b0-d9125cfac3b9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d83a96d-c8f3-4045-a648-75df7dc70db4", "sighting_of_ref": "indicator--7069d490-04d8-4da9-a239-45202401a81d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca966d6-c507-41c4-be24-ffecef26a063", "sighting_of_ref": "indicator--ae66328c-90ba-49f5-bf9f-e4a0860fcc73", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfdd615a-f24d-426c-ba4f-0a8f22455ef4", "sighting_of_ref": "indicator--45cff2cf-d118-4592-8066-7c5cb8494a3c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c7d7ebb-13c2-4f7c-aad7-14f35028c650", "sighting_of_ref": "indicator--5aa4c052-e070-4c09-af40-bebd5fd3d356", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f43107-7ea8-4122-b297-7773ee27062c", "sighting_of_ref": "indicator--5aa4c052-e070-4c09-af40-bebd5fd3d356", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc407f1a-345a-4f02-85c8-a211de40b16b", "sighting_of_ref": "indicator--45a4030a-9e21-45e4-ab52-1b15d5cd8579", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf9f599d-9f50-4845-b57d-b556ff9f20bd", "sighting_of_ref": "indicator--8383c3cd-b148-4898-aba9-a6f072520ae4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dead1b59-8dff-411c-be0d-e56866a03613", "sighting_of_ref": "indicator--7cd1b0df-2e1b-475c-9a24-ceae480b526d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584a7c16-90e3-4e7f-84ba-9cee45fc2633", "sighting_of_ref": "indicator--baf2392e-3116-426f-8c72-ec7c437de789", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dbd86bc-7d05-42dd-898b-e2f27e052b2f", "sighting_of_ref": "indicator--7dacbee5-aa87-4864-b6b0-efaf0658f94e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2e7dbc-b509-4100-8396-02215671f571", "sighting_of_ref": "indicator--a064f243-faf2-48ff-bf97-595b83bf3ca5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec873dd-dea5-4c0f-8d3d-c44656d41b12", "sighting_of_ref": "indicator--a79d7c8c-b804-42b5-9cb0-540a463799ee", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b497a629-7372-4da8-b284-a065b43261d9", "sighting_of_ref": "indicator--574630a2-05a4-4227-9ed7-937708fd9024", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d20b13-1e8d-444a-8887-7b2bc077c668", "sighting_of_ref": "indicator--ed3ec8c7-044f-46b7-9fcc-02687209e1b6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--318d227a-38e7-4c68-bdd5-d23e3309f441", "sighting_of_ref": "indicator--ed3ec8c7-044f-46b7-9fcc-02687209e1b6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5327354d-2ec4-4a83-8b0c-980cd7ff0f50", "sighting_of_ref": "indicator--be8ec232-0b97-41c4-8879-5b1bb5161170", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23466141-e1ce-4a2d-9f10-c51f7a35ca6b", "sighting_of_ref": "indicator--be8ec232-0b97-41c4-8879-5b1bb5161170", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c1138a-41ef-43a2-a1c1-51a7f87e75bf", "sighting_of_ref": "indicator--be8ec232-0b97-41c4-8879-5b1bb5161170", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a26af0-e69e-470f-b6ed-9bbb6933cf39", "sighting_of_ref": "indicator--ed6f96a5-fe47-4726-8c38-a9c2d9d96c32", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02a83d5-afea-4c95-9cf9-39f3296b12e9", "sighting_of_ref": "indicator--a7ad6432-b060-46af-82f5-47ee6dfe33de", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--701c14d6-4c6d-463f-b39b-829d5c64c4c5", "sighting_of_ref": "indicator--a7ad6432-b060-46af-82f5-47ee6dfe33de", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c260c8e8-85bb-4b41-9999-3872a2a81de5", "sighting_of_ref": "indicator--9de1fe5d-ed2c-4ecd-b070-92278207a6ab", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90538482-9577-47c6-b7c1-ccffa6ed44a5", "sighting_of_ref": "indicator--2620fc13-7f30-4e11-a419-8f776767146f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7aa89c-6e9f-43ac-bade-eddf373b65b4", "sighting_of_ref": "indicator--7747acc0-00d4-4ba3-b492-fef58b37bcff", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ff3b2e-d63d-4549-b1ca-2c06c924d9a8", "sighting_of_ref": "indicator--58689b70-ce73-4ba5-ad97-fa3ef552b24a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c09b21c-eb49-4bd1-9b5c-d37cb6aef851", "sighting_of_ref": "indicator--58689b70-ce73-4ba5-ad97-fa3ef552b24a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e58d67e-0a6e-4598-96e1-6d797af93f5a", "sighting_of_ref": "indicator--6b7bd337-873b-4b2d-a088-84ff412991f9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d75c1c6d-d945-416f-b817-015934f261bc", "sighting_of_ref": "indicator--2f5c4027-4888-4c2b-ab78-81d50dea203a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95765bc8-f963-4a80-97b3-f995e3d03c7d", "sighting_of_ref": "indicator--95e2ff5d-443d-4959-94f7-80fbaf0b1732", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbdc7ee3-70b9-4b23-956f-bc54cba1d741", "sighting_of_ref": "indicator--d97d70ea-0733-4074-92ab-ad7cca198102", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35396389-c07e-46aa-b354-a227efea00db", "sighting_of_ref": "indicator--d97d70ea-0733-4074-92ab-ad7cca198102", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7da833-1b09-43ea-b42d-334d827c97eb", "sighting_of_ref": "indicator--d97d70ea-0733-4074-92ab-ad7cca198102", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d33625-97ae-453e-9523-61f1438889a5", "sighting_of_ref": "indicator--694b4d37-d9f2-4dc3-b456-088d09247046", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b5b3d7-4ff1-4009-8867-586bd03e722d", "sighting_of_ref": "indicator--694b4d37-d9f2-4dc3-b456-088d09247046", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4942d1d-60e7-4142-81e1-c4fccb01cc3c", "sighting_of_ref": "indicator--8d7f9de4-108c-4d22-9c60-f2b35a35b0ee", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7d37e5f-e941-49b8-acf1-78d215fd1684", "sighting_of_ref": "indicator--16b24a4d-dc50-4058-abab-e0e24a9680f6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e2ff6bf-004c-435e-816c-7ab3167a7807", "sighting_of_ref": "indicator--16b24a4d-dc50-4058-abab-e0e24a9680f6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba36149-f1c3-4093-bf03-b4542f8c3dd6", "sighting_of_ref": "indicator--d967953d-5578-423d-adce-4c5257eeb425", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b92883-9ae6-43d5-900f-ab1cdf5f88d6", "sighting_of_ref": "indicator--f5278fb8-ae87-48ea-a4fd-cb8cbfcab04f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f55bba7b-1f8f-4c89-b45f-ddcae77a0605", "sighting_of_ref": "indicator--2c9086df-e182-4e3a-b60f-e34c42ddc488", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f60b3297-cdec-464e-89de-4deef4e88eda", "sighting_of_ref": "indicator--002f5bef-b3f3-43b0-b442-3d2753c10c41", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e06d7a50-3619-4eec-adbb-9795af865115", "sighting_of_ref": "indicator--002f5bef-b3f3-43b0-b442-3d2753c10c41", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e06775a1-8b6a-438c-b6e8-679a2e667d7b", "sighting_of_ref": "indicator--002f5bef-b3f3-43b0-b442-3d2753c10c41", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee398318-14c7-4568-b7ce-1c0f5a58c7e0", "sighting_of_ref": "indicator--e58acbe6-4641-4d48-8728-3f6cabc0803f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304d9224-ed14-41ba-bdf6-a90c24e26f2c", "sighting_of_ref": "indicator--1981291a-c724-4d95-8c1a-03e69c99972b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c0e950-97c3-4e50-afd3-9255b4a9f18b", "sighting_of_ref": "indicator--cf057cbf-68e3-417a-b437-6a15d1cd0b21", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f16778-45cf-4ada-bec0-38a39939540b", "sighting_of_ref": "indicator--cf057cbf-68e3-417a-b437-6a15d1cd0b21", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195a7730-d5c5-445a-9569-4f5377176463", "sighting_of_ref": "indicator--cf057cbf-68e3-417a-b437-6a15d1cd0b21", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c041c5-b56c-4dcf-986d-c9d7d23e41d4", "sighting_of_ref": "indicator--0cf6fb06-9838-42b5-bd16-5a203bed2e79", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6083f9c0-c460-406a-8bfa-428bf235ce1b", "sighting_of_ref": "indicator--94b1b559-8436-4422-b375-08736e6821fd", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf07bb3-27d9-4723-8285-fd0bd70aa984", "sighting_of_ref": "indicator--eea71e55-27cf-4383-be56-814d40610637", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b82900-ed97-4bc7-8317-b8fc6d66791c", "sighting_of_ref": "indicator--bd612343-3304-4683-8168-1c1ed794426c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f2d5c0-c279-4f5c-872e-0b02a7bac638", "sighting_of_ref": "indicator--4c7e37ca-2c30-40c8-aeaf-ffa2e0f40443", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df885a35-e983-4f42-bf50-8a85e6dbe766", "sighting_of_ref": "indicator--9895f61f-666a-475c-b12f-e4924d006d7e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5fb53dd-9dfd-431e-afcd-ccc654b9251f", "sighting_of_ref": "indicator--5864f71d-f2db-4900-a4c0-d2dd991bf057", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62713506-58e2-4ee1-a0a4-001d89176153", "sighting_of_ref": "indicator--baa4c179-29ae-482b-b74b-70cad0d7f0be", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac972cad-9342-40b4-b4b7-4bf09a179d6b", "sighting_of_ref": "indicator--e3949864-10d3-42df-a4df-283e3efc04cd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428f4798-7d4d-4d98-9b3d-6d010bfa6cf1", "sighting_of_ref": "indicator--541e296f-1b04-4e53-8859-0989ce57ad92", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aff3423-f1c8-4edc-8891-c5e6806195d2", "sighting_of_ref": "indicator--541e296f-1b04-4e53-8859-0989ce57ad92", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3ec2d6-e164-4157-b2bf-2c8c5a1a78c7", "sighting_of_ref": "indicator--541e296f-1b04-4e53-8859-0989ce57ad92", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0a7f41-de1c-48e1-bb41-9112e048d511", "sighting_of_ref": "indicator--3ba58813-56a9-4871-bd95-fd4d90e718c9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f3edc1d-1e5c-4ca1-bb51-b12ce230c841", "sighting_of_ref": "indicator--45dc2600-bdbc-4344-bc26-029737441c3b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5d06eb-68fc-4492-bf4b-1a2cb808abfb", "sighting_of_ref": "indicator--cf9d7788-95f5-4c36-bcb5-0fade41dda74", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30047137-0d12-4648-8d09-6c7c90b52c76", "sighting_of_ref": "indicator--5ee81544-b087-48fe-9ca3-5a00b95000b5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6741b5e7-2b31-4888-9103-c3e716852d99", "sighting_of_ref": "indicator--5ee81544-b087-48fe-9ca3-5a00b95000b5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef06e665-63f4-4640-9e9c-1c1bdafed4b5", "sighting_of_ref": "indicator--16a12a3d-7064-4ea1-ba49-7e36acbd36d1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fcb0fe7-f4df-4385-b94e-12df143ac72e", "sighting_of_ref": "indicator--bc8d94ab-eeb9-467a-ac6f-7b19977e5404", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec0da64-f947-46fb-b181-3b987e9633bb", "sighting_of_ref": "indicator--929e70d9-cf06-4fec-8eac-c2dfb188344e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8efb923d-ad37-405b-80f1-d40c2e60abd8", "sighting_of_ref": "indicator--929e70d9-cf06-4fec-8eac-c2dfb188344e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e53a6993-8600-48b2-8d5b-34e38a57fdd3", "sighting_of_ref": "indicator--929e70d9-cf06-4fec-8eac-c2dfb188344e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080a4185-8f63-4515-8109-4b91d19a8d80", "sighting_of_ref": "indicator--d2d80262-20c1-4ca2-b0cb-5cd859d8a4c7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07048e69-b46d-40c9-ad19-1ec8a5e26698", "sighting_of_ref": "indicator--3ea96b4b-a9b9-458f-b2fd-bf64e3fecff5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98b5d4c-128d-431f-a529-5e3f0d633c32", "sighting_of_ref": "indicator--01ebf6b9-8fe2-4324-9e95-5c2bbf13716f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68b0236-aa8f-44b6-ba52-550da6dd661c", "sighting_of_ref": "indicator--01ebf6b9-8fe2-4324-9e95-5c2bbf13716f", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f81f3d-df97-4844-9aa6-936ac14c8ab4", "sighting_of_ref": "indicator--6068b3c4-a9b8-4d6e-9d4a-29d3cebb451f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7442c49-3f3e-4fb4-9bdb-a776cce0ebb3", "sighting_of_ref": "indicator--300ef2db-50c9-4ada-844f-d3870eefbae9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e487e81-0fc3-463b-b18e-57c89084e016", "sighting_of_ref": "indicator--5179c77b-5497-4a39-8e6c-4567c44c8f4c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b194bf2b-1810-4efc-b15b-4483bd15ac48", "sighting_of_ref": "indicator--f7169b15-281f-4bfd-ab4f-85ff58c93c34", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9795244c-61f1-4ae7-8148-7d11385f7011", "sighting_of_ref": "indicator--e40c3bbb-9e3d-4d28-a3ce-01e708945a5e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5011d7-a8be-4f6f-b7c4-5126a3d9c672", "sighting_of_ref": "indicator--2d810576-7f05-4fe7-ad75-e66949add4d8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36244e5a-e5db-4659-a2e4-761871c60b2a", "sighting_of_ref": "indicator--2d810576-7f05-4fe7-ad75-e66949add4d8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba62914b-faaa-4249-be0a-737d469369cf", "sighting_of_ref": "indicator--08084016-e7d1-4b4c-8a56-e1580ce7a147", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731d989d-2638-4741-afac-c11aaced7ac2", "sighting_of_ref": "indicator--adde6c6e-a32b-438e-b68f-c90913b562c7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8295ba2c-708b-4a1a-a554-dc2901761206", "sighting_of_ref": "indicator--f53a761e-aa0c-4de9-9a5e-4fe4cf4ea429", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6342c815-51a5-46ac-8903-6f9b9887f1c3", "sighting_of_ref": "indicator--f53a761e-aa0c-4de9-9a5e-4fe4cf4ea429", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58aa756-7881-4435-9922-5f5eff918f6d", "sighting_of_ref": "indicator--9725f04d-a1e9-451a-939d-d68f33578409", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a20c7df-0009-46b7-a10e-d1d0695c0f0a", "sighting_of_ref": "indicator--ce77d9ab-79bf-4fe5-a356-43f673b445cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf345f86-811d-49ac-b9c4-1ca970788ba3", "sighting_of_ref": "indicator--96720798-2fa5-4dd2-a04b-7a0eecb61a88", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a25a97-296e-44fa-80df-0fb36bdc6034", "sighting_of_ref": "indicator--c6424311-4007-4661-a730-84f48fac2149", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73287c6-6dda-45db-8655-33457cc8ce46", "sighting_of_ref": "indicator--c6424311-4007-4661-a730-84f48fac2149", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8fbd5b1-99f7-48ed-a012-5849535fd77b", "sighting_of_ref": "indicator--143db8b2-cde1-4dbc-a568-96ea4a7d03ab", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06aa7552-460a-4f28-9425-bf9ac6e39878", "sighting_of_ref": "indicator--143db8b2-cde1-4dbc-a568-96ea4a7d03ab", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d584f30-46c0-48e0-af7b-92e31cf06a48", "sighting_of_ref": "indicator--fb1fe4ea-1390-4e64-800f-6fe9b3e6334b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33be8a63-f8d3-4137-a3b3-619683adcf14", "sighting_of_ref": "indicator--081b78d9-9b5e-4043-8794-15e634478c51", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1324a94-e287-43e2-896d-65c1c6ad03e6", "sighting_of_ref": "indicator--440a5589-45ca-434e-b8ea-42d3890eaab0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c0a6e10-f05f-416d-b208-6380e95ae332", "sighting_of_ref": "indicator--79f48d27-2f59-4d24-bc97-a86b590d3313", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c22741-425d-42d6-b0e3-e492928e5812", "sighting_of_ref": "indicator--79f48d27-2f59-4d24-bc97-a86b590d3313", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29abcbfe-7b61-4ebe-ac62-9f99fe31fc23", "sighting_of_ref": "indicator--79f48d27-2f59-4d24-bc97-a86b590d3313", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce32484e-fe82-4ae6-8646-3af0c9ad3f43", "sighting_of_ref": "indicator--2d3e8497-5ae6-4a83-86a6-acd7d0fb6ec8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f064eb-6442-49ef-aa6e-82edc1075bb2", "sighting_of_ref": "indicator--2d3e8497-5ae6-4a83-86a6-acd7d0fb6ec8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9c207c-c8da-4ef8-8e0e-bae9d7a1c5a8", "sighting_of_ref": "indicator--2d3e8497-5ae6-4a83-86a6-acd7d0fb6ec8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b52f4a58-5e03-451e-a117-6673a2607f84", "sighting_of_ref": "indicator--28d0c501-001a-47ff-94eb-1dc741521941", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aefef03-cf91-464e-be41-27fddd5957f9", "sighting_of_ref": "indicator--488ffbfe-f796-4b59-9a55-0d15d44e0b23", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d442f551-9b6b-41e8-9401-7ccabe000b15", "sighting_of_ref": "indicator--4f675c4f-3a61-4947-b3be-e1ee672c5caa", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a167b327-8038-47fc-ad47-deaa630faa39", "sighting_of_ref": "indicator--4f675c4f-3a61-4947-b3be-e1ee672c5caa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef4edee5-8329-4100-be4c-d7eacc49cd90", "sighting_of_ref": "indicator--344085c3-6e7d-4994-b104-dc95f3a229ae", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59916a9a-173e-4969-83e2-8733e4c61a55", "sighting_of_ref": "indicator--78f524c1-ce6f-45c4-aaa3-b161f3122114", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a636af-2623-42d5-987d-128b51f3f54d", "sighting_of_ref": "indicator--165dea4a-5c17-4716-9984-2c82e924f883", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afaec5fa-662b-47be-af48-6cc46836ae39", "sighting_of_ref": "indicator--664512fd-a953-456d-9642-a1c61eca8ce8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d675ecc-8df9-4b6d-aa09-c8fafc2a1f53", "sighting_of_ref": "indicator--434a9789-2943-4332-b539-2d0fc3db3c43", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f534ca8c-f214-49f7-a9ee-188b5705cf59", "sighting_of_ref": "indicator--12954ae6-31a7-48c1-940b-e922083daed8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d35b5093-4bcd-47f0-9860-86ee1dfe197d", "sighting_of_ref": "indicator--6fba4186-2458-4254-8431-487e1937d82c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da502ff8-4fbd-42e2-a1c5-222db11a617f", "sighting_of_ref": "indicator--e5e64653-8b10-42a2-b7d2-fc5498c362f6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44bc645d-6825-42ca-8368-0f1ada62aa6a", "sighting_of_ref": "indicator--30f203f5-6b4a-4f9d-8233-0c9cd95c849e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d788227-23f0-48c8-9f30-054f4cdd87d0", "sighting_of_ref": "indicator--afb3dd2b-40ba-4bdd-9c44-90651ea89930", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ede93da-ec09-4135-89e9-e73322a2bcfb", "sighting_of_ref": "indicator--afb3dd2b-40ba-4bdd-9c44-90651ea89930", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b8ee6f8-b63e-4f7d-abbd-6b9b48fe53ed", "sighting_of_ref": "indicator--eb0c07ef-0310-45ba-b0a3-0daf7d8a6904", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a906bab0-c90b-4afc-bb2a-45d5fed81b40", "sighting_of_ref": "indicator--5caaa55c-e7ff-4971-92eb-b97a6bf797db", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8280482-bc79-4f55-9033-3b64a65e615e", "sighting_of_ref": "indicator--34a6ee7d-f9e6-4916-af77-699bf534769b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d77821-e7fa-42b6-89f9-faae5412d5f0", "sighting_of_ref": "indicator--cd7bda57-c011-4e23-b11a-361120f3932d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de7c0e7f-e7bb-4479-a1ec-8684beeb3fd7", "sighting_of_ref": "indicator--b04f6c42-ba70-461f-ae5d-d6e52851b4b2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eda6d38-93b3-4a57-807c-4411160a3157", "sighting_of_ref": "indicator--a258b6c0-3ced-4504-b757-8a9f839718a7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bfe4473-e139-47ae-9762-9c5eebd94133", "sighting_of_ref": "indicator--75d46559-4c0a-4661-8354-8e5c7ace06b6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a41bd3f-3ead-4f05-9515-37952d9f4c84", "sighting_of_ref": "indicator--75d46559-4c0a-4661-8354-8e5c7ace06b6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec79d29-8c02-49d3-881f-f939d5b33ff7", "sighting_of_ref": "indicator--75d46559-4c0a-4661-8354-8e5c7ace06b6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f58047f-3486-44cf-9580-7dc35bde554e", "sighting_of_ref": "indicator--64e822de-b293-454d-8fae-a352c04f1fbd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec83aab-4eb3-4107-8eb0-69dbc7d5657b", "sighting_of_ref": "indicator--0be5a7f4-b09f-4e6a-a9ab-0c9f8e9f82ec", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b53b29-f23a-4f77-8ef7-8d36200426bc", "sighting_of_ref": "indicator--9f44c7d5-a930-42c6-9bff-7b29dac81e18", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a80442-b0fd-4573-bc14-b65938c72b57", "sighting_of_ref": "indicator--9f44c7d5-a930-42c6-9bff-7b29dac81e18", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--852eeb59-0c50-4e96-9245-bf0553742a73", "sighting_of_ref": "indicator--6eb250da-1a3c-4a0c-b4e8-a2632362effe", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7485dd-8027-4e2b-87da-d975e1bd303a", "sighting_of_ref": "indicator--131f0eb3-05e7-4dec-8072-65615bab2f9f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab13ed4-d9bb-4e4c-991a-83b572a91477", "sighting_of_ref": "indicator--ac7b366e-86dc-4d22-aa40-bfe3e9fbbfc6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a4a13d-30ba-4c52-9272-41c07718d4e8", "sighting_of_ref": "indicator--ac7b366e-86dc-4d22-aa40-bfe3e9fbbfc6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbee7328-75ea-4fb1-915b-7219f84c7fd9", "sighting_of_ref": "indicator--71b5bc69-9730-4df5-afcf-1a4238f219a0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce3303d-81c8-4a4c-a7fd-fbcb07c09f56", "sighting_of_ref": "indicator--4b4f73be-6ec1-4f58-a7a8-05f5b23c34ac", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69583e8b-698d-48f1-b1de-bf4cfe8d7b92", "sighting_of_ref": "indicator--4b4f73be-6ec1-4f58-a7a8-05f5b23c34ac", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f29d4c-7f7b-490e-8e72-323ebe8823a2", "sighting_of_ref": "indicator--a2c0f1cb-833a-4711-9eef-663215aed33b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661ab0b5-d3b5-4ee8-8b50-be8e31af9edb", "sighting_of_ref": "indicator--8b0d6881-9d2a-4813-a356-67589d50beb6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ded981f-9767-4a66-a3f3-324cfc0bf6bb", "sighting_of_ref": "indicator--8b0d6881-9d2a-4813-a356-67589d50beb6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694b2cf5-7a66-40fe-a8ec-c39d28dca83e", "sighting_of_ref": "indicator--42ac385b-42ac-4adb-860a-789df07f136b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--953544c2-4edb-4378-800b-67fb6eaaeabb", "sighting_of_ref": "indicator--42ac385b-42ac-4adb-860a-789df07f136b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a183f2-f06e-4c04-95b0-84cb67057025", "sighting_of_ref": "indicator--42ac385b-42ac-4adb-860a-789df07f136b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f58f11-4aad-4752-ad7e-96ba67ae609a", "sighting_of_ref": "indicator--4078ae2f-97a4-4a15-bffd-e7ab99eaade2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f05899f-f2b4-42ec-9346-784bc0b45964", "sighting_of_ref": "indicator--8e03ec53-1f2b-4437-82c3-86b4713d2e9c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f3c198-73bd-4880-98c2-83ce1a48619b", "sighting_of_ref": "indicator--03131122-662d-4282-8742-a2d85e4daffb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e774e65-0618-43d4-aab6-100c4b6bf7c5", "sighting_of_ref": "indicator--9f8e63c2-a412-4ae3-8b63-a78f60eedbdf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301ad371-8a1d-4fe8-85c5-f9df2089867c", "sighting_of_ref": "indicator--9f8e63c2-a412-4ae3-8b63-a78f60eedbdf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4f4101-37c4-4c7b-924e-bb30a3afdeaa", "sighting_of_ref": "indicator--c8f853a9-c488-450c-ab82-7187827ba507", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822dfc62-aa61-44dc-ac6c-bb06184dc524", "sighting_of_ref": "indicator--c8f853a9-c488-450c-ab82-7187827ba507", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f530062-1540-41c9-abaa-cf64321f19a9", "sighting_of_ref": "indicator--8a9d84e6-b1b1-4a15-a86e-17cb417eb506", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9656989f-ffa0-4387-bac3-b2f32c5c987a", "sighting_of_ref": "indicator--b947bb57-315c-4bc1-a5c7-03383af2839f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d0909ad-39c8-4242-8597-7bbbbba0c8f5", "sighting_of_ref": "indicator--b947bb57-315c-4bc1-a5c7-03383af2839f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86911d49-9826-4fa1-8fdf-6f150b45f3d5", "sighting_of_ref": "indicator--deeb6a4b-d5c2-4114-8fbe-96585de34db8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c5a970-a948-41a0-a945-59cb2d3ca532", "sighting_of_ref": "indicator--c287df2d-e7c5-4da3-b79e-a63862cb6df4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ffda17b-f643-4181-ad01-ef25ac27bbae", "sighting_of_ref": "indicator--f5f25caa-0481-404c-ba40-912c0d145779", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d43001-11d9-443d-8389-eb5b3322c896", "sighting_of_ref": "indicator--291a2375-e860-4a8e-8509-8ac10dbabb90", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4483de2d-c8fe-4751-90c7-b975bcd3dc2e", "sighting_of_ref": "indicator--9ed2e57a-08ad-4828-b526-c7a24d532345", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d0361bc-8e27-4f68-93d0-e678954d5dcb", "sighting_of_ref": "indicator--db8638b5-914d-4df1-b52d-787acf376490", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94e1ee09-9894-4b55-946a-52e6649272f5", "sighting_of_ref": "indicator--23caf80f-c65a-42a7-a79d-65cdf2a0eb44", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a19b586-c048-4fb2-9e1a-db9767209f54", "sighting_of_ref": "indicator--23caf80f-c65a-42a7-a79d-65cdf2a0eb44", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c84fd275-9fd9-44d1-9118-7a9f9d40f054", "sighting_of_ref": "indicator--bd282269-06bb-46cd-8598-76040e2890a8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9000d0-885d-469f-ad2d-0016fb690f34", "sighting_of_ref": "indicator--633e1bdb-8a5e-4179-a952-3f2328798b11", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae33e61-8f18-4066-b202-f4ec7ed9ab04", "sighting_of_ref": "indicator--54c18194-9db0-4b5b-ac2c-7ddfe7c9a656", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8772827-52f1-4867-b027-0b1da777783d", "sighting_of_ref": "indicator--e2795851-1177-4428-ac5c-66f585f52ef8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e164afa0-2bb2-498d-a7e9-ecc92c86659c", "sighting_of_ref": "indicator--e2795851-1177-4428-ac5c-66f585f52ef8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca77255-6060-4e98-9b11-cb05faf9bef3", "sighting_of_ref": "indicator--c373eeed-76ba-4c49-99a7-0c7cd372a94e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4753e0b6-3d01-4cae-8c12-7da378eda1c7", "sighting_of_ref": "indicator--c373eeed-76ba-4c49-99a7-0c7cd372a94e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0d0ed6-921f-4f0b-ae79-9d1430af8a52", "sighting_of_ref": "indicator--c373eeed-76ba-4c49-99a7-0c7cd372a94e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--783a0a80-2cdc-435f-8cae-a2a0d0a0b729", "sighting_of_ref": "indicator--bb61c5f5-822c-47d3-b63a-6b5dfe5bbbea", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be050d22-f3ae-4d71-9125-8f57887c9da1", "sighting_of_ref": "indicator--bb61c5f5-822c-47d3-b63a-6b5dfe5bbbea", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae38cd37-dd77-4ce1-95e3-5b7f7f4b2245", "sighting_of_ref": "indicator--a8be783f-1891-45d0-8bbf-3554b5e87e48", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd8533f-eff0-42e2-93dc-ec67d898bb2a", "sighting_of_ref": "indicator--a8be783f-1891-45d0-8bbf-3554b5e87e48", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb026aaf-eb8d-44a0-af76-6070cf2a624f", "sighting_of_ref": "indicator--c02966e7-5605-4d84-b105-f5882c293ab6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c51959a7-91dd-4c03-8e1e-c0eac0e73e06", "sighting_of_ref": "indicator--f4e42a5c-6504-49d7-aa6c-1e77ab9724b4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d39633-13c3-449c-aaf4-b1105e1ffd88", "sighting_of_ref": "indicator--f4e42a5c-6504-49d7-aa6c-1e77ab9724b4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f98c0e-6208-4c7a-b2a6-d926ef79124e", "sighting_of_ref": "indicator--23e24a36-865c-43b1-afa0-bf5735cfe903", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351299b7-3408-455f-92dc-ee8d81ac4729", "sighting_of_ref": "indicator--c2da476d-aa70-4c18-bc34-792a4e036f39", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5919f2-1168-46b7-bf42-648e28c8842e", "sighting_of_ref": "indicator--c2da476d-aa70-4c18-bc34-792a4e036f39", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ec070d-b239-4eac-bde2-5a95a205d3e0", "sighting_of_ref": "indicator--c2da476d-aa70-4c18-bc34-792a4e036f39", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64200543-48b5-4ca7-a011-1b61534506dd", "sighting_of_ref": "indicator--b7f35b46-75df-4b59-b15d-bfa9509170dd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521056bc-5fb2-428b-a7f0-58ce3d389be5", "sighting_of_ref": "indicator--3b1300d4-9d5a-491f-a41b-b834193b17d7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3dc282a-264b-4b3d-99dc-b69d7cf9498d", "sighting_of_ref": "indicator--a6aab4ba-18ff-4647-8b6b-8486c9310827", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96972c9-9679-4e96-8e63-b488dc0d6034", "sighting_of_ref": "indicator--c2e0b39e-0919-4bdb-bd3f-495a6308455d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fdab100-0230-4adb-b001-0ea44c4fa1b4", "sighting_of_ref": "indicator--c2e0b39e-0919-4bdb-bd3f-495a6308455d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2415cd6b-251e-4a97-9298-0aaabcb04e72", "sighting_of_ref": "indicator--c2e0b39e-0919-4bdb-bd3f-495a6308455d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24296c8b-a2bb-488f-93b4-48154a6e6534", "sighting_of_ref": "indicator--286050db-8f81-4e40-87bf-9f3bb336f0ae", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6d0c10-a772-4647-a3e1-9d414bba3f48", "sighting_of_ref": "indicator--2364ade5-457e-4252-95cf-b8d5208b28e1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a94c54-e64b-481e-92b6-e4a6b5384137", "sighting_of_ref": "indicator--2364ade5-457e-4252-95cf-b8d5208b28e1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b21c392-0cdc-43e5-9ade-54deb6229894", "sighting_of_ref": "indicator--2364ade5-457e-4252-95cf-b8d5208b28e1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b63956-c425-4375-be4a-9a39295d7a55", "sighting_of_ref": "indicator--fc4ce610-3f3d-42ef-89c4-ce5b73cb085a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b689b0-0420-466b-b4a0-51759b694273", "sighting_of_ref": "indicator--fc4ce610-3f3d-42ef-89c4-ce5b73cb085a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3668e19-2723-4fac-b55e-d7c9dbcbf0fa", "sighting_of_ref": "indicator--fc4ce610-3f3d-42ef-89c4-ce5b73cb085a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af7e0a23-c063-4166-9200-e477f5eede0c", "sighting_of_ref": "indicator--e5df8ff3-5926-42f0-a5c2-ec65d53c49a2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd337f83-a736-4061-b351-cccf5bc97f7d", "sighting_of_ref": "indicator--e5df8ff3-5926-42f0-a5c2-ec65d53c49a2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1da913d-535c-4286-81c3-6377f3968230", "sighting_of_ref": "indicator--59f52c72-19b7-480b-8f74-cbbe2d873ca3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fab36df-5c05-4cf7-9551-a33228606b72", "sighting_of_ref": "indicator--59f52c72-19b7-480b-8f74-cbbe2d873ca3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6043ccfa-e0e3-4b64-96ad-9e7dc8d5c896", "sighting_of_ref": "indicator--3ef7767b-e587-47c9-aca2-bcc45fb639e5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fcfdec6-2793-47c4-8682-40b1b7d3fb6a", "sighting_of_ref": "indicator--3ef7767b-e587-47c9-aca2-bcc45fb639e5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63cb382-dd7c-45ff-882e-6ae8db05ec30", "sighting_of_ref": "indicator--01db5e39-8c6c-4cdd-9445-9bed4c9f64e4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf49d78-87d6-4877-a577-e70a32c54def", "sighting_of_ref": "indicator--43db5462-797b-474a-a4c2-430758c66eea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51d70665-2a61-4694-aa7b-7dd548097caa", "sighting_of_ref": "indicator--a37e018a-904e-4515-a68d-5d90f708989c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f46d1b-5fe0-434e-976e-bce8e726c35a", "sighting_of_ref": "indicator--a37e018a-904e-4515-a68d-5d90f708989c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e023a37d-1582-4f82-978e-4ac671c0fd6c", "sighting_of_ref": "indicator--a37e018a-904e-4515-a68d-5d90f708989c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c57140-7a6e-4627-bf41-d2c14adca2dd", "sighting_of_ref": "indicator--783e691d-07fb-4aa2-a810-3437785d346e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4afe7d-5866-4c8a-abe4-3e29701458e1", "sighting_of_ref": "indicator--783e691d-07fb-4aa2-a810-3437785d346e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9456e6a-dddf-4f89-ad7c-7aa6ad91dc08", "sighting_of_ref": "indicator--50c871c3-113f-4e23-952f-ffbcdb55f8ce", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947cc04c-d2d8-4822-b199-8c049a97d5b8", "sighting_of_ref": "indicator--3b9ed5e7-9c2f-4ee4-81cb-dfff89e09636", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a4edc1-4cbf-4fb6-95fa-2000eb65a01a", "sighting_of_ref": "indicator--3b9ed5e7-9c2f-4ee4-81cb-dfff89e09636", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b78087-339f-4306-8a21-a7ed8a1bc761", "sighting_of_ref": "indicator--3b9ed5e7-9c2f-4ee4-81cb-dfff89e09636", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47029c92-ea46-424d-a805-9fc175de451a", "sighting_of_ref": "indicator--48d0c332-1282-4c3a-bc85-8a656b35654e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a32bcb7-eaa7-4648-934f-937654af186b", "sighting_of_ref": "indicator--4db02161-263a-48ba-9b35-2f302ef7c0be", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec145ac-8d91-4029-8978-2d54e4e6325d", "sighting_of_ref": "indicator--d501f8f9-0c95-495d-b5dd-800a4c6e0b82", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1adcf4e-11a1-48e5-8177-6e21c48b7754", "sighting_of_ref": "indicator--d501f8f9-0c95-495d-b5dd-800a4c6e0b82", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c840845-d813-4cec-8426-0a8b07ab982a", "sighting_of_ref": "indicator--4cc425cb-5ffd-449a-966c-a0c7f478cb0b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a5dc09-09cf-4dac-a140-b61f6b8f1319", "sighting_of_ref": "indicator--55811809-470c-4f4c-b95f-e1ce40d39c1d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca67573-e92d-4a48-9ecf-d3370ec3e2a4", "sighting_of_ref": "indicator--44432c07-05ed-4b5e-a8df-c2082fddf3b3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05af9ccd-957f-44c9-a372-2e1024b40131", "sighting_of_ref": "indicator--8843141a-0ec3-4e29-b58e-2518e6d4b145", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ac8dba-91f2-45db-8e79-e2fb615c8f11", "sighting_of_ref": "indicator--8843141a-0ec3-4e29-b58e-2518e6d4b145", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2305a5a8-fd3c-4093-a83f-f2d1f5918068", "sighting_of_ref": "indicator--8843141a-0ec3-4e29-b58e-2518e6d4b145", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef4d043-6844-48eb-98a2-70538e8f6ccc", "sighting_of_ref": "indicator--821fcd99-5121-4710-824f-f2eae3600b5f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84291fca-88bd-4419-870a-d882f6f2b580", "sighting_of_ref": "indicator--8b81cde4-d013-4799-85d3-ec6ac699e9b2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15754cc9-1567-4210-b536-4ddfb7eceeec", "sighting_of_ref": "indicator--8b81cde4-d013-4799-85d3-ec6ac699e9b2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b710138-3c05-4e8c-b9f7-7b5247cd314c", "sighting_of_ref": "indicator--adee30ba-bfcc-4cc9-9ff3-c7c7184f8f1b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85bc1039-5410-417a-935e-8763d9ef83ab", "sighting_of_ref": "indicator--b1781add-160f-447d-b25e-6252d0d7ad1d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e46d0b83-acc7-405f-8873-265a4b6035f0", "sighting_of_ref": "indicator--b0cb14e0-f4ca-4322-b5ec-2bdf88aed53e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f930f763-4291-425a-8b12-746804ed3154", "sighting_of_ref": "indicator--36a30390-4449-4102-a995-00f7f0ac9dff", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4fd978f-fc07-47d7-a0ed-d18b33cd7fc2", "sighting_of_ref": "indicator--53f1e39f-69db-44ad-abb7-5021810527d3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c6c3a43-8b7a-46ff-975f-594bd02b6e97", "sighting_of_ref": "indicator--acbd2d1f-84f3-4fcf-9ea8-5bdd5e585a2d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df082f11-0d5a-4c18-9a0d-3c73fa075916", "sighting_of_ref": "indicator--c73777d7-364e-46a4-8bd8-47982b8906e6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d1839f9-c73b-47d3-959f-e51fa95d8e2a", "sighting_of_ref": "indicator--c73777d7-364e-46a4-8bd8-47982b8906e6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03624fc0-decc-477e-939f-6d4fc5674c2b", "sighting_of_ref": "indicator--9b8dac47-a664-456c-a346-28230609415c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--096da5ef-df22-49cd-8430-f03e8ea7a5a4", "sighting_of_ref": "indicator--3d733645-6751-4200-8b79-e27ae6cee469", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36472ed9-9679-48b8-929d-f20f1c2b0516", "sighting_of_ref": "indicator--ce93555a-18e5-4610-a340-2543f66e9e11", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee94be4-1408-4074-b830-0f36b937b48e", "sighting_of_ref": "indicator--ce93555a-18e5-4610-a340-2543f66e9e11", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e7cb7b-e2c7-40b0-91f1-af03930b93a9", "sighting_of_ref": "indicator--ce93555a-18e5-4610-a340-2543f66e9e11", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc9eed9-56fb-4e09-b30a-b9bb01762441", "sighting_of_ref": "indicator--f94954b9-973c-435a-abd4-44333340b68f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537829a8-4302-4f09-b6b9-d80d8bdf21ee", "sighting_of_ref": "indicator--126f6ba0-9f1d-4ea3-89dc-377f5e5ff9aa", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa82b033-5ca3-4061-ac28-f565b66e399a", "sighting_of_ref": "indicator--c0790ed4-f785-4259-9904-ff410648d460", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524b56e7-1537-4ba0-b5cc-cdb03f97abea", "sighting_of_ref": "indicator--3c68aa26-e483-4068-b8f1-788e28948c74", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de230f7-9150-4e85-bdb1-e1044a6c4279", "sighting_of_ref": "indicator--3c68aa26-e483-4068-b8f1-788e28948c74", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172293bc-f863-430a-b254-573e64a313d1", "sighting_of_ref": "indicator--65e9c2b6-9d5e-45c8-8ddc-48dfb0320b36", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8764d246-9259-4a93-94be-ecc5ed78ae04", "sighting_of_ref": "indicator--65e9c2b6-9d5e-45c8-8ddc-48dfb0320b36", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f27e71-e84b-4c75-92e0-1b173ef84dbd", "sighting_of_ref": "indicator--7ff83c20-1902-4e16-8119-145da37ea96d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1d28de-33b1-4769-8649-0b73c9284d83", "sighting_of_ref": "indicator--4a80b42f-4a57-460d-a7df-20206dc83687", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa14d30-8691-473b-8e79-a0420a741056", "sighting_of_ref": "indicator--22fea4f5-ed79-4cc9-badf-42e055f3c164", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37511f5-0569-4489-b1f0-5c361bba4b29", "sighting_of_ref": "indicator--22fea4f5-ed79-4cc9-badf-42e055f3c164", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55f7db8-deca-44a7-8e6b-d9c44c79e16d", "sighting_of_ref": "indicator--22fea4f5-ed79-4cc9-badf-42e055f3c164", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--109239fb-06d2-421a-b53a-24dc07dd2e29", "sighting_of_ref": "indicator--69497de4-a745-4fa8-ba9e-83248c6e9d12", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc2b6a3-caaf-4ff0-9695-6d8da319ac8b", "sighting_of_ref": "indicator--69497de4-a745-4fa8-ba9e-83248c6e9d12", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4f97c6-eee4-45ca-b6aa-dcfa0ceb922b", "sighting_of_ref": "indicator--69497de4-a745-4fa8-ba9e-83248c6e9d12", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda1c99b-7222-421d-8757-7bfdafb636f7", "sighting_of_ref": "indicator--f72c06f8-9e08-474c-b015-066dc445e2aa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c1f202-a74c-4451-ba00-b1b35523ceb7", "sighting_of_ref": "indicator--94fd12f1-6e24-4702-ad10-e89d9ac8d6d2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc7cc4b-708a-44ba-8958-4a1c83d63cc6", "sighting_of_ref": "indicator--94fd12f1-6e24-4702-ad10-e89d9ac8d6d2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b289f84-232c-4366-850a-35cfceae4bb5", "sighting_of_ref": "indicator--7d2affe4-df7d-4779-ab3b-3ea44137307f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8aed1f1-b630-4c03-8deb-3e95cb819243", "sighting_of_ref": "indicator--aac94d72-6537-47d4-9466-8ed2b7a2536c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a57b7b15-407f-4f9e-87cc-e1a4cd455ccc", "sighting_of_ref": "indicator--b00d381d-665f-44ab-a56f-f158104574c1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df755264-071b-4bc7-808d-053ad7d5d039", "sighting_of_ref": "indicator--c81dc555-321f-412a-8a7e-e670d075ca96", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a438136-8382-48de-a29d-017ad9bfabe5", "sighting_of_ref": "indicator--c81dc555-321f-412a-8a7e-e670d075ca96", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bcf9fd3-e616-4e85-9c16-3d62ef310447", "sighting_of_ref": "indicator--c81dc555-321f-412a-8a7e-e670d075ca96", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d490c0e-27bc-43a6-abfd-3ae94a2abe1a", "sighting_of_ref": "indicator--73bcc7be-008e-4c5c-8a46-14213c77d7f9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b27b8e-a2ad-4952-8b0f-86fd77504899", "sighting_of_ref": "indicator--3367096a-72a7-4664-82c4-d37a0ea8fca5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182d3e71-d579-402e-bb94-e099944f3526", "sighting_of_ref": "indicator--b7409692-397e-4b05-8b50-030f63a3a1ae", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8af04c6-3b00-4c6d-af3f-eeffd8e6432e", "sighting_of_ref": "indicator--3fcfa0d6-60b2-4268-ba36-190019865114", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff18da54-b680-44db-a5d6-01f02002af8f", "sighting_of_ref": "indicator--3fcfa0d6-60b2-4268-ba36-190019865114", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab64beb-9710-4851-8160-2f433922cbff", "sighting_of_ref": "indicator--3fcfa0d6-60b2-4268-ba36-190019865114", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f506fa2-214e-4eaf-8ee3-dcdf0e2d61de", "sighting_of_ref": "indicator--9157a742-7c50-48db-9ff3-549c1c2d01c7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06cc375d-deae-459b-85c7-5bc226668ff1", "sighting_of_ref": "indicator--b79e814e-55d5-46b7-a848-3729a8c07452", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec919e05-6a07-4676-a6b1-5a8306389bd3", "sighting_of_ref": "indicator--beded559-322c-4624-b633-22ac731fdd7b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079a45b8-095a-4039-89ff-36a7ea2cb26a", "sighting_of_ref": "indicator--bf58f7f7-f0a2-4882-822c-bd53f3c503d7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--136df9cf-541e-4672-9812-1f9fdb0fdcba", "sighting_of_ref": "indicator--c57954f9-db43-4acc-8bed-8ceb17b85944", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12621bd3-ac5d-4228-984e-d32765192bba", "sighting_of_ref": "indicator--09ea1fa2-bd89-4423-aa14-30b659dda8d8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d20f0b-6625-4b08-9931-0b159a16539c", "sighting_of_ref": "indicator--09ea1fa2-bd89-4423-aa14-30b659dda8d8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c438eefe-8d7f-4ed3-8690-8bd6b61977a3", "sighting_of_ref": "indicator--09ea1fa2-bd89-4423-aa14-30b659dda8d8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15756990-61ec-4ab8-abb5-a5f06d92ff8a", "sighting_of_ref": "indicator--d34900fe-51a5-475b-8a63-df16ae3b9451", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff6a389-62b4-44c9-9ddb-4bfe5e1cc1ea", "sighting_of_ref": "indicator--d34900fe-51a5-475b-8a63-df16ae3b9451", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda7de43-0b31-4eca-ab42-492d332e8432", "sighting_of_ref": "indicator--f57866ff-4020-4d2a-89fd-f442b4c6e655", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2fd61af-bcc5-42a9-b339-0f39dd2770fc", "sighting_of_ref": "indicator--f57866ff-4020-4d2a-89fd-f442b4c6e655", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6cacb9-289b-4532-b251-45430031689c", "sighting_of_ref": "indicator--1402b0b8-c7c6-4e1d-94d3-5e33c9b2e814", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed15655-ce68-43fd-9a04-71c7b169d5a1", "sighting_of_ref": "indicator--fd6497a4-e211-4e10-8734-68b06e245870", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa71cb3-7983-42d0-8d93-20109a3f0ae8", "sighting_of_ref": "indicator--a9bbef1f-4757-4c97-a724-8cbc40350617", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f4ee57-2282-4bef-b783-10f3e4056c6f", "sighting_of_ref": "indicator--a9bbef1f-4757-4c97-a724-8cbc40350617", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a6529a-7c11-4ee2-af7e-32c5e6a6bf92", "sighting_of_ref": "indicator--b5721958-1f00-438a-ae39-50cf35af9326", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f048d9-ce38-433b-8952-dd2b58d2fb02", "sighting_of_ref": "indicator--cc32dbde-5c0d-4ccb-83b6-8c116086fb24", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab488cb-88dc-4077-9bca-e992ec0dbfdd", "sighting_of_ref": "indicator--d26a8105-e93f-4d87-9da8-9599fb389249", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19149dce-f5e4-4e7a-86a7-39a9dc8cb881", "sighting_of_ref": "indicator--c9938366-ddf7-4c1c-a4aa-795a34b0c4c4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c509a06-fb66-41e3-979d-c4051834819c", "sighting_of_ref": "indicator--c9938366-ddf7-4c1c-a4aa-795a34b0c4c4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1168886a-6da7-4a3b-a4b0-d9e1d2bc913c", "sighting_of_ref": "indicator--cf14ac71-62ed-4881-8079-74d8064411e0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cbab5f6-14a3-4280-ac39-e06aa9535dfa", "sighting_of_ref": "indicator--cf14ac71-62ed-4881-8079-74d8064411e0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d2a688-0af9-4580-95bd-9bb1b1b7c7d0", "sighting_of_ref": "indicator--0b2f6f0a-629e-4b1d-9ef9-9d689ded1d0d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f00282ad-8380-425f-b7de-088b197138db", "sighting_of_ref": "indicator--0b2f6f0a-629e-4b1d-9ef9-9d689ded1d0d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25efe1d2-a1ee-4b36-933f-c6ef9e2d661c", "sighting_of_ref": "indicator--a8d9c777-258a-402c-9b18-dd066b0468e1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8188d25e-ab9d-475e-b751-070cddaf961c", "sighting_of_ref": "indicator--a8d9c777-258a-402c-9b18-dd066b0468e1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad67fefa-467e-410b-873d-a85571c5a483", "sighting_of_ref": "indicator--e565cce8-ac57-4460-bd89-f49470a82655", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47728ea-beed-4ff2-a4bb-dfc4027322c7", "sighting_of_ref": "indicator--e565cce8-ac57-4460-bd89-f49470a82655", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e472c9-c85d-4fa5-b344-45c2b1cb99d9", "sighting_of_ref": "indicator--e565cce8-ac57-4460-bd89-f49470a82655", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d41fc71-16b6-45f9-b7d5-a9e8574b83c8", "sighting_of_ref": "indicator--aab4fbf9-b56b-45ee-962e-870056634250", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e0df9d6-bbb3-4d98-a3e9-a969ad53b0b6", "sighting_of_ref": "indicator--1f6adb05-80ed-416a-ac03-44ed872ceff9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c40814-bbd3-48b3-9eca-5f6c849f1490", "sighting_of_ref": "indicator--1bfe01ca-8879-467a-80ef-6f4053445d60", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1603d5-a536-4f06-a132-aab63869f2e3", "sighting_of_ref": "indicator--a45609bc-c865-4bd0-8744-33987a2c47cb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431f0917-3ec7-446a-8d47-d59e08fc54eb", "sighting_of_ref": "indicator--e873865e-ace7-46f1-8ce7-c01800901e1e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b24333d3-ff9b-4eab-b96b-37412ef54ea7", "sighting_of_ref": "indicator--86b9b7a4-3e11-478c-9666-00aea79af8d6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd978c6c-c898-4d34-a2e3-1e10d43feed1", "sighting_of_ref": "indicator--86b9b7a4-3e11-478c-9666-00aea79af8d6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f592e66-8ece-4502-ba29-b978f628973a", "sighting_of_ref": "indicator--b2d9c06d-ebdc-4a0a-ab42-91d08f77b4ce", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6db2396-415e-4231-a876-9ae0d602c7e1", "sighting_of_ref": "indicator--b2d9c06d-ebdc-4a0a-ab42-91d08f77b4ce", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f332012-ea3a-4480-8e90-ddc1f813a71d", "sighting_of_ref": "indicator--151e8de3-b778-41b3-aa7b-7d40d1703dcd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e5e517-2f09-413a-b4d4-9775ae56390d", "sighting_of_ref": "indicator--7930970c-a2c4-4e15-9b8c-8efd3e7fbc1b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5509d260-803c-428e-a66c-8ec330963cad", "sighting_of_ref": "indicator--7930970c-a2c4-4e15-9b8c-8efd3e7fbc1b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de6b250f-7159-4b30-a0b4-5429e6933dfd", "sighting_of_ref": "indicator--7930970c-a2c4-4e15-9b8c-8efd3e7fbc1b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac9f837-9c2d-41de-b3b2-3b8ddd3e167f", "sighting_of_ref": "indicator--78b82ec0-2a54-44ff-a816-e16c43d8e6b2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae3dec7c-e2ae-477b-b85f-eda5a1d911d0", "sighting_of_ref": "indicator--e56c4571-f180-4b4d-9380-d4c124e6490a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97e5ada5-1c0b-41a9-91f1-9f4c2f8d646e", "sighting_of_ref": "indicator--e56c4571-f180-4b4d-9380-d4c124e6490a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b98ca5-d0e5-4303-acbe-c51687779c27", "sighting_of_ref": "indicator--f3a069be-c8a6-4a8e-952d-55014f9ec773", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20ba14e-5d9a-4fe9-9b50-af5b378b0983", "sighting_of_ref": "indicator--f3a069be-c8a6-4a8e-952d-55014f9ec773", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3208500e-3e58-4708-bbdd-3802bcd92f06", "sighting_of_ref": "indicator--0083b005-ae33-4739-ac1f-b152eb9358ef", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7c6e3b-dffa-4531-b3b3-db56f89f3f41", "sighting_of_ref": "indicator--0083b005-ae33-4739-ac1f-b152eb9358ef", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77789913-257f-4abc-8a74-20af2991a53c", "sighting_of_ref": "indicator--6ab30850-dc96-4765-8f4a-5d64e2a724e6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8d386d-cbf5-4638-8da2-4b8702b54ef2", "sighting_of_ref": "indicator--e152f593-8fa8-45bb-98e7-774eb2f6253d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f204426-c5be-406f-9ee8-64898af72957", "sighting_of_ref": "indicator--e152f593-8fa8-45bb-98e7-774eb2f6253d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ccc71f1-4b79-4d01-a221-287667b3accf", "sighting_of_ref": "indicator--98e47647-d9bc-482a-b8fa-dd39e48f4589", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c6c0b6-d288-4e12-8c9a-4b6b292d0d29", "sighting_of_ref": "indicator--186dc30d-f20f-49af-9fc6-45416fb90c54", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a58fa90-4f60-46ac-ad28-c9c0b55cb2e1", "sighting_of_ref": "indicator--186dc30d-f20f-49af-9fc6-45416fb90c54", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa1dc46-3ce2-46dd-a81a-8feeb1c6eb84", "sighting_of_ref": "indicator--186dc30d-f20f-49af-9fc6-45416fb90c54", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7eed232-9368-4e65-b8b0-0553b624718c", "sighting_of_ref": "indicator--04bcbfad-2700-48a3-83fc-6e897590fcfa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df5c41d4-56c2-4747-a26f-2b64878882bb", "sighting_of_ref": "indicator--0d48b4f9-9aa5-4dc3-bb92-da61add59e1b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0500a8d-ddd1-4e1d-b00d-96a2b4ef40c2", "sighting_of_ref": "indicator--0d48b4f9-9aa5-4dc3-bb92-da61add59e1b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661076e8-7b81-49ce-83c5-4eb75189ca50", "sighting_of_ref": "indicator--19900fe3-303f-4419-86a8-acf101af03fc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cce12e4-77ac-4346-a576-4a5af29401ab", "sighting_of_ref": "indicator--19900fe3-303f-4419-86a8-acf101af03fc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6410bdbf-3062-41fe-a913-ae075bbcae80", "sighting_of_ref": "indicator--c25bc89a-066a-484b-96fd-d8d90e7db78d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe9aa8c-4279-4a5d-a0ac-f0b16e45842e", "sighting_of_ref": "indicator--78cf79dc-2aea-4b8b-9584-c93bdf9c2e22", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c1bc17-b1ed-4ba9-90a9-ddf55c8f171c", "sighting_of_ref": "indicator--cb025e69-eb2d-4b1e-abf4-157e6ae186c5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef696e9-e034-46b7-9595-0703c9c71893", "sighting_of_ref": "indicator--cb025e69-eb2d-4b1e-abf4-157e6ae186c5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c72574d7-3f67-4d0b-a4cc-9745996f6472", "sighting_of_ref": "indicator--cb025e69-eb2d-4b1e-abf4-157e6ae186c5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d761c6-3b30-4bdd-9a0a-49970c9849b7", "sighting_of_ref": "indicator--99ec2e94-c95b-48dc-8608-c317a88f11ef", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3908ca09-8a39-4582-91f2-0ba119250e1a", "sighting_of_ref": "indicator--5e5087f0-1854-4626-906b-8490afb53e3e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2586d813-6ee5-43c5-a69c-7e8ff70fb1d2", "sighting_of_ref": "indicator--5e5087f0-1854-4626-906b-8490afb53e3e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b38f332d-fbd3-4be6-9155-591f95c1f033", "sighting_of_ref": "indicator--5e5087f0-1854-4626-906b-8490afb53e3e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43de41ca-03f1-4e5e-9f46-7989b35babf6", "sighting_of_ref": "indicator--01d3b9f3-25fe-4034-9dc5-8c7c4e6dc18f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb22f53-83a3-4f3a-a877-bc5b71eb059f", "sighting_of_ref": "indicator--efc03d8a-2091-4589-beeb-f699de6d5d77", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a614f9e3-a36e-4224-98d1-6bea04977646", "sighting_of_ref": "indicator--a38744fb-6e69-4768-90c0-61e473c92a7c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef14889e-b2d8-42c4-b03c-37b4c789e24c", "sighting_of_ref": "indicator--2e14c7f7-add7-4668-bf13-1869c4367128", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34d1ce1-00ff-459b-8877-93f3bd7f47a2", "sighting_of_ref": "indicator--2e14c7f7-add7-4668-bf13-1869c4367128", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d86139b-f023-4b0f-b550-09d073c3f376", "sighting_of_ref": "indicator--2e14c7f7-add7-4668-bf13-1869c4367128", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a134a3-c237-40f7-941b-43e547d8e8da", "sighting_of_ref": "indicator--54b83967-8947-4371-9624-b95a7b29c0c6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e346571-6ce5-49b6-9999-ce845eb7259e", "sighting_of_ref": "indicator--54b83967-8947-4371-9624-b95a7b29c0c6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887d0f44-0298-4d05-bf8e-13caf7d23dda", "sighting_of_ref": "indicator--0e9806cb-206f-4591-8775-f4ef14022c11", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f630a7-8faf-4fc4-a806-fe82b8f3ff64", "sighting_of_ref": "indicator--71dbb45c-1c51-4174-9b06-bac648fdcf24", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a87ae111-27d4-46f7-b8c9-9501e15df199", "sighting_of_ref": "indicator--71dbb45c-1c51-4174-9b06-bac648fdcf24", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--987f7419-3354-4a48-ae6a-b03eb50957d1", "sighting_of_ref": "indicator--076d7fe9-a47e-4761-a2eb-be6fad88acf5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07eb55f9-a847-42d5-865b-43a855a9f75a", "sighting_of_ref": "indicator--076d7fe9-a47e-4761-a2eb-be6fad88acf5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b008bfbe-b6b8-46c6-9856-640ab5d96f5e", "sighting_of_ref": "indicator--371c4b85-3a0e-419f-9227-23c2c3d59794", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e75c7f-8328-40ac-95a1-8f4e34ad9075", "sighting_of_ref": "indicator--7003ab28-cfaa-4fee-a9ea-3a3c088487ba", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec9c8a8-7c9b-4488-96fb-4bf183af4451", "sighting_of_ref": "indicator--10423a18-f971-4961-980e-3aae73a446e1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490d3b52-78fa-400a-9b8a-3d01bd5b2ea5", "sighting_of_ref": "indicator--16e4db48-abf9-40a8-b4a4-e9d49a0076a0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d70cd429-9918-4a11-b094-242fbd03f8cf", "sighting_of_ref": "indicator--16e4db48-abf9-40a8-b4a4-e9d49a0076a0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a2cfbd0-666c-4c7e-a136-c1b01a2c53ab", "sighting_of_ref": "indicator--16e4db48-abf9-40a8-b4a4-e9d49a0076a0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3e4cb7-f4cd-4ef6-a205-da12bbb6b848", "sighting_of_ref": "indicator--115cfbad-4d15-4a37-b778-8dd8aeb81604", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61cfd71c-eaee-4d13-9543-2dfcbc35f9e6", "sighting_of_ref": "indicator--2589203f-b9d6-4138-bbbe-48869cdc28fb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--588a96af-daa9-4cc3-9a35-5805d2cf131a", "sighting_of_ref": "indicator--460767d9-2447-4c12-aa42-a2f08216ec72", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d90786-de55-48b0-91d1-ba5dfeb31d63", "sighting_of_ref": "indicator--460767d9-2447-4c12-aa42-a2f08216ec72", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7f74f5-37ee-4df5-922d-47e676de09cd", "sighting_of_ref": "indicator--8527a3cb-a09f-4024-8075-d6559f45e18d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9598afd3-62cf-4182-a0cb-e4f6704900a2", "sighting_of_ref": "indicator--8527a3cb-a09f-4024-8075-d6559f45e18d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f7ffa6-1adf-49ed-9b2c-1343c802a966", "sighting_of_ref": "indicator--c22e7133-b040-44e7-9c81-cfc4dba3b074", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4440711a-395a-448e-b948-1e6c95f9c30f", "sighting_of_ref": "indicator--de5c4190-f1a5-4677-b0f7-fa351f0c7cc6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0e8bbf-b05e-414d-825e-fb09a06c4633", "sighting_of_ref": "indicator--de5c4190-f1a5-4677-b0f7-fa351f0c7cc6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10eed79a-5d7f-47f2-839b-a01df712e081", "sighting_of_ref": "indicator--8b2ee971-21db-4710-88e6-4b373bc24b24", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4550de-5782-4b2d-b766-2733022df2a2", "sighting_of_ref": "indicator--33502b0f-1dc3-4515-982e-3afb68505bac", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935548d8-9a68-4ea0-91e0-6dd0048dd68b", "sighting_of_ref": "indicator--f76aa741-afe8-4c85-b5d6-db0e5fbadc98", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e126b84-bec6-416d-898f-221dd65422a3", "sighting_of_ref": "indicator--a8728a53-915a-4a99-a8a5-af36bb31999a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19e120e-93a2-4461-9cc5-1b69efb2c74b", "sighting_of_ref": "indicator--a8728a53-915a-4a99-a8a5-af36bb31999a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e199a7cf-533b-497a-b70a-ed117cba40f7", "sighting_of_ref": "indicator--b92c8337-446d-4f44-b704-4bef4ea500fd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec8a89bf-0601-4aec-90fc-9c4a3d75b2a8", "sighting_of_ref": "indicator--5f8f69b7-487d-46cb-9eba-c32f42f37bd6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--345e36b4-6633-4e0b-913d-ae0d9fcb3ff2", "sighting_of_ref": "indicator--6733bf10-aaa7-4e26-ae48-70f6d6914398", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130c4cfb-b7f5-45bd-b9cf-cdd0d27d3829", "sighting_of_ref": "indicator--d74c9ac6-486b-4098-ba54-c86db23cd645", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2d1343-675c-4c33-aabb-afa445bae18d", "sighting_of_ref": "indicator--d74c9ac6-486b-4098-ba54-c86db23cd645", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d4c910-d17c-47a1-b5f0-2acb789076de", "sighting_of_ref": "indicator--d74c9ac6-486b-4098-ba54-c86db23cd645", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535e3b92-208d-45bc-8942-9d512110a93a", "sighting_of_ref": "indicator--20cef956-e1b8-40ac-86b3-92b43e75ee26", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b188d182-b56e-4e8e-bc5e-744f76d04810", "sighting_of_ref": "indicator--451438e6-93de-49e5-bbe5-53147ee5dde7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c78fc2-c460-48fc-a6a7-0031341330a5", "sighting_of_ref": "indicator--451438e6-93de-49e5-bbe5-53147ee5dde7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5657629a-2f95-4251-98b0-2bf2a299dd09", "sighting_of_ref": "indicator--1c3410b1-75f5-4139-8f3e-bbb90173f32d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7059fb12-0ff8-4b1d-8af9-785b8cc4e189", "sighting_of_ref": "indicator--1c3410b1-75f5-4139-8f3e-bbb90173f32d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea1e12cb-d841-4673-b8c3-b75b8c8a78b9", "sighting_of_ref": "indicator--95e64261-a0e1-4135-9edf-7ffa2e5fbee8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4a26ef-1866-4243-b200-aadce16c79d9", "sighting_of_ref": "indicator--95e64261-a0e1-4135-9edf-7ffa2e5fbee8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aad065b-3221-48ba-8897-f887dca66407", "sighting_of_ref": "indicator--9e096c75-19c3-4051-95b5-2aab12267e04", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b290419e-8f0f-4d3e-8f6b-111449bc7d8d", "sighting_of_ref": "indicator--99b5ca52-e9e7-487c-829e-265de3e5b7c9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3affa67d-e034-4f98-82e2-0b823a27354e", "sighting_of_ref": "indicator--a83dae05-2aee-4be7-9edc-41b569a125eb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d238b7-34f7-43a9-95d7-64f5bf315ba8", "sighting_of_ref": "indicator--01cb4b19-7bef-4d6f-8944-9302c75431b3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca771cc7-ff3b-44c2-ad7c-30ce0048ef03", "sighting_of_ref": "indicator--01cb4b19-7bef-4d6f-8944-9302c75431b3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc65d0e-a733-4329-9447-c9bd51d01a56", "sighting_of_ref": "indicator--4c1044ae-4610-4a68-8cc9-25c8f9081af0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c81bd3-a8e6-48e0-9036-45c95d3b2eff", "sighting_of_ref": "indicator--e58f4276-8aed-4dbd-8337-747379586453", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3acc9a18-013f-4365-b341-0b001966fa89", "sighting_of_ref": "indicator--e58f4276-8aed-4dbd-8337-747379586453", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e9c407-cf01-4792-b6f0-109c033c982f", "sighting_of_ref": "indicator--7b974829-9ff2-411f-b707-29f585455c95", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1ec805-ff3c-4a9c-8f17-68d8f9fe4b03", "sighting_of_ref": "indicator--940c18c5-2dff-477e-9d71-b97b544c59b8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a879329b-8b8e-4f14-b691-9ba2b61bd5ff", "sighting_of_ref": "indicator--940c18c5-2dff-477e-9d71-b97b544c59b8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb12f1f5-d0c8-4b42-b944-8caff5beeefa", "sighting_of_ref": "indicator--9a4a9375-3aca-4e39-9c34-bf784a0f939e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78e45c9-50fa-4a53-8a2e-0119aabab342", "sighting_of_ref": "indicator--9a4a9375-3aca-4e39-9c34-bf784a0f939e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26fd5e08-eb35-427d-a4ed-9d5448334792", "sighting_of_ref": "indicator--2fc2552e-849a-43ab-8904-03046a6e8877", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee03c3d5-aa63-4f4b-9b3d-0401065ad0d7", "sighting_of_ref": "indicator--2fc2552e-849a-43ab-8904-03046a6e8877", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad5c3192-8719-4b57-a310-cf838e83e87e", "sighting_of_ref": "indicator--2fc2552e-849a-43ab-8904-03046a6e8877", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb2ed9f-a113-4df6-a87d-17ca43ef1835", "sighting_of_ref": "indicator--f5b8e6d3-b855-4720-9a16-b5ac5ea798fb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74abead5-01a3-4b7a-b8d9-ea240745cf90", "sighting_of_ref": "indicator--f5b8e6d3-b855-4720-9a16-b5ac5ea798fb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5280099f-4ae7-4512-ab4e-43487ebd3a49", "sighting_of_ref": "indicator--8af20b20-8b4b-4fd3-83be-8b0e50ed4bc2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43953ae1-bb27-42c3-be49-ad29fa59ac79", "sighting_of_ref": "indicator--17629c1d-a0a3-424c-8fb3-d50d82741d84", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9bda6a6-47eb-492a-bf41-dbcf47ee84c7", "sighting_of_ref": "indicator--1b0ff145-b8a5-4921-bdb7-992547a03f91", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa129de-bf22-4fb9-8025-abb628451a7c", "sighting_of_ref": "indicator--1b0ff145-b8a5-4921-bdb7-992547a03f91", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff3df882-71e8-4ae8-903a-7dbab898d15c", "sighting_of_ref": "indicator--c9590744-fabf-4a38-9e04-59729fc43f6f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09cc6a7e-c708-42b6-a7fc-b19257e7da21", "sighting_of_ref": "indicator--c9590744-fabf-4a38-9e04-59729fc43f6f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c137aef2-e263-47c7-83f0-41445c4f45a7", "sighting_of_ref": "indicator--6d4acdaf-4f7f-4387-a770-df099b102e02", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e227534-3b92-4de7-914f-a73086caa34a", "sighting_of_ref": "indicator--d4e6bfe4-828e-46ef-bbd9-f287ab3f5628", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c6ab20-04b7-4f6b-a05f-ee75fd2eae40", "sighting_of_ref": "indicator--4da66643-b6f3-496d-b26a-79b94109b5d7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a4e30e6-c23c-44e7-8248-88b665699a3b", "sighting_of_ref": "indicator--0c9aad92-9c04-4c00-9ccc-f0203b13fae4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c4926d-1466-4ab2-a805-15104e637649", "sighting_of_ref": "indicator--885c8704-566a-4b33-a4c1-cdcdf63a8f86", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe45ed38-4b9c-4c5e-a9ac-747677a540c1", "sighting_of_ref": "indicator--885c8704-566a-4b33-a4c1-cdcdf63a8f86", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3357420c-045c-4efe-944a-298fb20480a4", "sighting_of_ref": "indicator--d28cc7bf-2eb3-4a2f-b81a-6aa1cf6bbeab", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efce12ad-cd64-4cd9-a2be-6e09f8487e7f", "sighting_of_ref": "indicator--7e1e65a5-d014-4bc8-9873-34d22418e52c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a4920c-33e1-4388-b9d2-57cb204285c7", "sighting_of_ref": "indicator--7e1e65a5-d014-4bc8-9873-34d22418e52c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069545ad-e018-44c5-8e3d-4cd67633b468", "sighting_of_ref": "indicator--89512341-2b87-4d16-b2c7-6c161c104392", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be008506-f6c2-4c40-b3e8-53bc6d62d802", "sighting_of_ref": "indicator--1699976e-9a01-41e9-bb1a-ae380fd8726f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0bb266-d864-4830-ba6a-67c10f7d17c8", "sighting_of_ref": "indicator--bebfb2b6-8043-45ac-bdce-7e13d696f40d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef17d66-105f-47bf-9a77-690f0bdcc0b7", "sighting_of_ref": "indicator--bebfb2b6-8043-45ac-bdce-7e13d696f40d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d37f42-17ca-4e05-9b39-7c96cc327a96", "sighting_of_ref": "indicator--b9f65220-66ef-431c-abd9-8960ecca6c22", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09436fc6-b871-4bdd-aa18-983a7edc89b7", "sighting_of_ref": "indicator--924e9656-5e15-433a-8794-839a73b2e15f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9466ca9e-c38c-4d91-9485-26352837e782", "sighting_of_ref": "indicator--924e9656-5e15-433a-8794-839a73b2e15f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11893623-18ee-4f33-a6a3-736f1a51ce68", "sighting_of_ref": "indicator--e2816f6e-c6f4-41ec-b61c-a69166b6cc87", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c06e7041-27f1-4788-a79c-b15e521554cc", "sighting_of_ref": "indicator--18ab6bec-f349-4347-88d3-8b6efae50248", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46d0950-a28b-426f-a7ea-ea02bf3676ca", "sighting_of_ref": "indicator--18ab6bec-f349-4347-88d3-8b6efae50248", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f8897a2-0ce9-454a-b502-75cb42955926", "sighting_of_ref": "indicator--18ab6bec-f349-4347-88d3-8b6efae50248", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66767ebc-cc2d-41ff-aced-a743e3a4ad51", "sighting_of_ref": "indicator--b50c2c91-5bd4-4b83-b149-3bb9dc81ad2f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e441661-a8f3-41ea-a256-a27c7d7b1aed", "sighting_of_ref": "indicator--c03c2627-a54d-475a-9b59-d91e7f78470b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f1cb2d3-5115-4874-92f0-9518a3b943d1", "sighting_of_ref": "indicator--c03c2627-a54d-475a-9b59-d91e7f78470b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f8ab30b-8219-4207-97fe-597dacb934af", "sighting_of_ref": "indicator--09617486-1932-4c07-ba68-7ebd0e40892a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6043e577-7d86-49d3-b5aa-c1ade65afd7b", "sighting_of_ref": "indicator--09617486-1932-4c07-ba68-7ebd0e40892a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34fce136-eff4-41d9-88da-3394c2223316", "sighting_of_ref": "indicator--41b701e2-9075-4969-9e2c-92b58dbae51d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139baca7-10e2-4c1f-aa97-3974efa04cf4", "sighting_of_ref": "indicator--41b701e2-9075-4969-9e2c-92b58dbae51d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6ddbee-7f42-4953-9697-ad6147826efc", "sighting_of_ref": "indicator--1e761ade-71e1-4316-b549-fe9edfea2a2d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d345e1f-4f62-419a-842d-b6f3b544de09", "sighting_of_ref": "indicator--1e761ade-71e1-4316-b549-fe9edfea2a2d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3c1026-75a2-43d7-b4d2-335c841a474d", "sighting_of_ref": "indicator--4a09653d-b3ef-4647-9dbc-81020a34bd30", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0682856a-4dcd-41d1-a56a-e12ff733d992", "sighting_of_ref": "indicator--294ed43c-91f9-4fcb-bc51-617c478e5f64", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7284adab-92b9-4d06-a4bf-79ceb711e639", "sighting_of_ref": "indicator--294ed43c-91f9-4fcb-bc51-617c478e5f64", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c34136f0-525f-4e1b-aaad-709fe8e5ec34", "sighting_of_ref": "indicator--d6345b79-3495-4e2a-9830-2e7409535799", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dcb066f-26e2-4f57-a114-8fcde497e5d9", "sighting_of_ref": "indicator--61ef0455-f96e-436a-83e5-5a431dcd0883", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7c4baa-6252-42e0-9998-03b4713f3c8e", "sighting_of_ref": "indicator--61ef0455-f96e-436a-83e5-5a431dcd0883", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe5a93f-dd01-4de0-8a6e-10773aa53ddb", "sighting_of_ref": "indicator--cdee9f89-a060-472c-b28d-2b317af9c805", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d7de40-e971-41a2-bc8a-954eccc25b30", "sighting_of_ref": "indicator--cdee9f89-a060-472c-b28d-2b317af9c805", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad0c5403-91c6-40a0-9ad1-82164d2ad289", "sighting_of_ref": "indicator--83d86700-ef83-488f-a5a1-7405f3b6b6d7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ee3e3e-5fb9-4eac-8a89-5d7091bbe41c", "sighting_of_ref": "indicator--83d86700-ef83-488f-a5a1-7405f3b6b6d7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb746fd2-6358-4e7b-88c8-3a2e71433b99", "sighting_of_ref": "indicator--fc28627e-8e95-4535-8fe3-b8be2f36409e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff5a162-abdf-4e3d-a100-b1e277043879", "sighting_of_ref": "indicator--9871093e-4761-4c9f-9039-d3fd6d71099e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42236fe4-1a2e-49ca-981d-311d15d052e3", "sighting_of_ref": "indicator--9871093e-4761-4c9f-9039-d3fd6d71099e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f284c2b-6a46-41a4-be47-b6ce1bd828b2", "sighting_of_ref": "indicator--163a7266-625c-4536-9963-17f4c0a78d84", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1dc0106-2de7-4168-8212-3b0532aec875", "sighting_of_ref": "indicator--163a7266-625c-4536-9963-17f4c0a78d84", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9fec37-6d71-404f-a3c3-3d7e146fa153", "sighting_of_ref": "indicator--6e6454eb-0875-43bf-b8f4-5a56d3e5b63a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e84435a-3475-4dd7-8e7d-1ba2122f2c59", "sighting_of_ref": "indicator--05da8fd9-99ff-440a-9f31-9918ea6c12c2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e217f2-7028-41c4-a7e2-5497cf93b791", "sighting_of_ref": "indicator--a0af8da3-6764-4cb9-9f1a-688421950e3a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aafd199f-510e-4932-808a-5690e29dfd89", "sighting_of_ref": "indicator--a0af8da3-6764-4cb9-9f1a-688421950e3a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8867cd-c1cd-477c-835b-9ded7616e792", "sighting_of_ref": "indicator--93da73bd-1b4f-46ea-81c0-29603dec073f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440a578a-c08d-4554-8f30-b24c40874a5f", "sighting_of_ref": "indicator--93da73bd-1b4f-46ea-81c0-29603dec073f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded0e685-d6c4-4a5e-a807-8c4be947158c", "sighting_of_ref": "indicator--9124ecf0-ed46-473f-a351-a9cd9f300091", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d88b0277-5761-413c-8351-36efc7eefe41", "sighting_of_ref": "indicator--9124ecf0-ed46-473f-a351-a9cd9f300091", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62787c66-7fa8-4dba-8f6d-f686f61ed137", "sighting_of_ref": "indicator--d8f3f438-9b98-4c7a-b97c-eef00dc8e8b5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec7ed67f-437d-4b37-83cd-47c59b872350", "sighting_of_ref": "indicator--16d3e06b-66b2-4803-b5b3-8491acf08252", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f63d0bd-cb98-4cb8-8e3b-e233b9c7335f", "sighting_of_ref": "indicator--16d3e06b-66b2-4803-b5b3-8491acf08252", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c927cb3-c6f6-4192-bb41-ae6b6d352543", "sighting_of_ref": "indicator--16d3e06b-66b2-4803-b5b3-8491acf08252", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc4c430-8cf7-4932-998e-d6b74e3a35a5", "sighting_of_ref": "indicator--d695667f-8efa-4742-b2c0-b804f7d1172b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb63ce8-f0d0-40ff-abc3-34df91efa335", "sighting_of_ref": "indicator--eb1b0677-8009-4137-9d75-987e59e5d57f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1102cafc-2718-48ac-94d3-8999e83e5652", "sighting_of_ref": "indicator--eb1b0677-8009-4137-9d75-987e59e5d57f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f8e148-3fe3-4065-9154-930ca26587c7", "sighting_of_ref": "indicator--4f185ed6-e89a-4d6d-908a-ebf98717aa0c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aaeb874-d5ab-4379-a52a-a0538227d1a2", "sighting_of_ref": "indicator--72502d0e-1187-4e67-a628-f2e20a7540e5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b14ee6-0b85-497b-bf2d-569e3a8e332a", "sighting_of_ref": "indicator--72502d0e-1187-4e67-a628-f2e20a7540e5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e07a671d-6ca7-4e17-865f-345ef85a6251", "sighting_of_ref": "indicator--25f5510f-a0f5-42c7-96be-2c2dd79444be", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431aea0d-786d-4e4c-a9da-10be6f334d48", "sighting_of_ref": "indicator--69a65bab-0245-40bb-b9bb-850d7f4b4b7b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22b75ab-e73f-4c7a-8ec5-61a27da06b54", "sighting_of_ref": "indicator--69a65bab-0245-40bb-b9bb-850d7f4b4b7b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5723f74f-bcba-450c-9b41-8e17642d752a", "sighting_of_ref": "indicator--02d4b256-4723-4962-81f3-23bd84a63213", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8afd33a7-2367-4227-95ba-676d69dbff22", "sighting_of_ref": "indicator--02d4b256-4723-4962-81f3-23bd84a63213", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--355b882c-233f-49a0-8591-69537c3056ae", "sighting_of_ref": "indicator--02d4b256-4723-4962-81f3-23bd84a63213", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a30edd4-e59b-4a3f-8759-7862c6fedf24", "sighting_of_ref": "indicator--d1a5005a-7b61-4509-a321-e4f192cd2d2c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--092eb57a-4975-45d9-b3e3-70acb394e81e", "sighting_of_ref": "indicator--d1a5005a-7b61-4509-a321-e4f192cd2d2c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d117a6-e653-4ff1-baa5-fcd684474488", "sighting_of_ref": "indicator--25b3a730-5061-40fb-b9e8-ffd7f6fda55a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99dd6a5-0686-4e70-892d-59bcf3fe34c0", "sighting_of_ref": "indicator--c2292c0b-af1a-4cda-bc74-0bf6818af3fa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd59bc7-e8c3-4082-9954-b3cd73dd4769", "sighting_of_ref": "indicator--78279d44-87f0-4056-9190-4e6eaa85062b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6908c6c3-af23-46e0-ac6f-155a048378b5", "sighting_of_ref": "indicator--78279d44-87f0-4056-9190-4e6eaa85062b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47cf384-07e7-47e5-914a-74e9a5b5f3e8", "sighting_of_ref": "indicator--1ab3208c-cc5d-430c-b813-aced3af434ee", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984c33bc-4787-470a-8632-19e185df9c8b", "sighting_of_ref": "indicator--1ab3208c-cc5d-430c-b813-aced3af434ee", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af8578f-5b9d-4451-a9a8-2a28dfc1f439", "sighting_of_ref": "indicator--8978e4f0-949a-4e5a-8441-aa7a61489302", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0477141e-9209-47d2-923a-bf6716cc3893", "sighting_of_ref": "indicator--9f259c33-8829-4d91-b9da-247880c22e0b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a1bf23-f8f5-4d7f-989c-70de9eee35c0", "sighting_of_ref": "indicator--9f259c33-8829-4d91-b9da-247880c22e0b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063d6d4e-6b27-471e-b745-0c0c2ff3b0d2", "sighting_of_ref": "indicator--a76fa491-e817-4ba8-a53a-3e451a620f42", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f1579e-62b0-4539-80ff-0aa6e1379f8a", "sighting_of_ref": "indicator--6f01d851-0c53-4d92-8db2-5538f8f7f193", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d063e9c5-371c-43f0-9c1e-dfdadd007eaf", "sighting_of_ref": "indicator--6f01d851-0c53-4d92-8db2-5538f8f7f193", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b9c0c1-f608-4494-a2d7-f7fdcb120442", "sighting_of_ref": "indicator--6f01d851-0c53-4d92-8db2-5538f8f7f193", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266b4f0f-02e5-4d52-852a-e8b3d7348580", "sighting_of_ref": "indicator--4d97d2af-276e-46f4-8ef6-fc762ccf1e22", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80daeb1b-a342-4c53-b849-d5d9442f6aa4", "sighting_of_ref": "indicator--2063283b-82ac-45fb-ad2b-6d836319d16d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc251bb-41e5-44dd-a44b-4c19c54ad2b4", "sighting_of_ref": "indicator--ac18f4ec-fb1f-42e5-8c31-07a1ea14fd79", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef1d21e-c3e2-4e3f-acde-cd0d96fe8ba4", "sighting_of_ref": "indicator--ac18f4ec-fb1f-42e5-8c31-07a1ea14fd79", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1bcc651-fdc4-4a83-969c-bb3412e61146", "sighting_of_ref": "indicator--f1ae7220-3b6f-4b3e-be04-d70649a14859", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dadd151-fa1d-47e1-985b-d60fc9c63cd7", "sighting_of_ref": "indicator--92929865-7685-4734-86ad-742cf0cfdff2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993c67be-75e9-4278-af39-54f693b306df", "sighting_of_ref": "indicator--0e0ad87f-6203-4eb1-9439-7542c3df9994", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f486bc59-d511-483e-9c64-14b1d2a92dee", "sighting_of_ref": "indicator--ca5014b9-4084-49cd-b2db-fc3e0e2876ed", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cad4b6b-8dc9-4c9f-80cb-a0f5d3c6cef9", "sighting_of_ref": "indicator--ca5014b9-4084-49cd-b2db-fc3e0e2876ed", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3790d5-97ac-4868-a899-4111c830c826", "sighting_of_ref": "indicator--d1d41d04-3421-4af5-bf7c-7be77e6ec26f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a4691e-ade6-4195-83ce-f350f5f0533f", "sighting_of_ref": "indicator--d1d41d04-3421-4af5-bf7c-7be77e6ec26f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df79468b-f138-47e3-88c4-36328d23234e", "sighting_of_ref": "indicator--d1d41d04-3421-4af5-bf7c-7be77e6ec26f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8cac80-4ff4-4f20-8d23-0a6962d6dad9", "sighting_of_ref": "indicator--0649fa07-32c6-474f-a064-df2f4a84eb60", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b26c45-6ddc-4b5f-a813-a6c3b644d901", "sighting_of_ref": "indicator--0649fa07-32c6-474f-a064-df2f4a84eb60", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2876860f-445b-442d-92ed-13365c9164cb", "sighting_of_ref": "indicator--cfd5111f-da76-4e2b-8cbb-58ebddfe4043", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b924b01a-2a53-442d-94eb-7665e8ff58a9", "sighting_of_ref": "indicator--aca8741a-45f4-415f-a43f-fad641e21e31", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90132350-4233-4f87-9d4f-71e507d59556", "sighting_of_ref": "indicator--aca8741a-45f4-415f-a43f-fad641e21e31", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fbd9fc4-7ecd-40df-b8f5-f4598748a009", "sighting_of_ref": "indicator--98f6586e-9af2-44f7-9ff0-9b8a178ed586", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df98f694-b127-45f6-b625-6da88ba1d45f", "sighting_of_ref": "indicator--98f6586e-9af2-44f7-9ff0-9b8a178ed586", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23696b2d-81dd-475d-a5dd-155df7db3584", "sighting_of_ref": "indicator--6a436067-670c-443c-89cf-d459117e281e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8621230-6672-4438-80ed-3c79057fa02b", "sighting_of_ref": "indicator--6a436067-670c-443c-89cf-d459117e281e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0893b907-8fac-46c0-9e5a-9e72f381977e", "sighting_of_ref": "indicator--79462a88-60cb-4478-8bb1-0e264ae866f9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8983ef3-c896-431d-94a6-48af2651e574", "sighting_of_ref": "indicator--fbeeda8b-5c8f-430f-8cd3-8fdbeb280e08", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f33f14f-feba-4105-a32e-58dd87cd3923", "sighting_of_ref": "indicator--fbeeda8b-5c8f-430f-8cd3-8fdbeb280e08", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--955799b1-93ea-4a3f-8ec6-c7b3ea1db5bb", "sighting_of_ref": "indicator--963b18eb-679d-43ff-ad44-5c1c788cd226", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ba0538-b59c-4e6d-852f-a46480fc9847", "sighting_of_ref": "indicator--5bdaf8ed-597d-43f4-b09f-524d00cff91f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72d0a856-8e95-4fec-a7f6-c63adebfe872", "sighting_of_ref": "indicator--33aa69df-9185-4d2d-9490-4b78d8d0ee65", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb34a7d-c5a9-4791-a7b0-e66b369d3284", "sighting_of_ref": "indicator--d7a15f2f-73ab-434e-9779-291820118292", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99442e34-c7a9-4e2f-8b01-fbbc24d90317", "sighting_of_ref": "indicator--4d3a8d39-b8fb-4576-a812-db63af70bf26", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae6ebcc-9c6f-48b4-8853-8df911ac46b8", "sighting_of_ref": "indicator--4d3a8d39-b8fb-4576-a812-db63af70bf26", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4b147f-85d5-4725-b65e-b4c22113aaf6", "sighting_of_ref": "indicator--9bf33f71-386a-4fb4-a6a6-9b38dbff60a9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--519f650a-e249-4304-a7f3-d1e80d1e9655", "sighting_of_ref": "indicator--9bf33f71-386a-4fb4-a6a6-9b38dbff60a9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad79b610-6b17-4611-9537-ce40805f4f5d", "sighting_of_ref": "indicator--9bf33f71-386a-4fb4-a6a6-9b38dbff60a9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9d307c-eeb5-461f-937b-e8b2da154db6", "sighting_of_ref": "indicator--335fbd8d-9be9-4b49-9102-a6646de0fa1a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b5e7d8b-43e9-409b-a4e2-80f9af3dfa59", "sighting_of_ref": "indicator--335fbd8d-9be9-4b49-9102-a6646de0fa1a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603be566-8b3f-4ec7-a504-02a6cfad4d3f", "sighting_of_ref": "indicator--88d8aa98-e0e8-457b-82b3-0c21e9354ebb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca5985f-9531-4d68-aa03-ad81f86351b2", "sighting_of_ref": "indicator--88d8aa98-e0e8-457b-82b3-0c21e9354ebb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b118b73e-2652-41ef-aeaa-df112fddcccb", "sighting_of_ref": "indicator--d99dc122-f7a0-4475-bcf9-291f8b958013", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2278f1e-3ca6-4d10-bc4b-e7eebbf0879b", "sighting_of_ref": "indicator--ba91c0bc-b6d7-4b7a-a594-04f890aacd83", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ac4472-db4a-4362-a1b0-3e84918b566c", "sighting_of_ref": "indicator--2941240d-acd9-49d6-933a-b0cec3774596", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff65284b-e9e3-4be3-8bcb-da34b56627cf", "sighting_of_ref": "indicator--84497851-1506-445f-939d-f9599bc80474", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d11e1061-55d1-46a6-b1d6-d08bfa0c4a4b", "sighting_of_ref": "indicator--af48a528-b07e-413e-be59-86cdd7242432", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe1532a-51cd-490b-9264-8aa29e7c97d5", "sighting_of_ref": "indicator--159cc11a-ea54-4616-9c33-f53f8503ad45", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--260e8311-b0d3-45f3-9b71-40e73419deb5", "sighting_of_ref": "indicator--159cc11a-ea54-4616-9c33-f53f8503ad45", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b393345-2085-4cb3-8950-0d0b6ce0c6a8", "sighting_of_ref": "indicator--159cc11a-ea54-4616-9c33-f53f8503ad45", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1989e73-bdff-4751-968d-dea6f068c236", "sighting_of_ref": "indicator--a044b823-89b4-4553-b298-246a9e72aee2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8803b0bc-bc7f-4fd2-bb4b-c61e3a175dec", "sighting_of_ref": "indicator--a044b823-89b4-4553-b298-246a9e72aee2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--787947c9-e588-429f-8bfc-05eac9b17c74", "sighting_of_ref": "indicator--a6e5af11-ad19-4eff-a8fa-deb15938342e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5baf5b17-d742-4e5a-ae76-10c8fc829b06", "sighting_of_ref": "indicator--a6e5af11-ad19-4eff-a8fa-deb15938342e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74da1e53-317c-45f3-82b0-9dcbedb0bd39", "sighting_of_ref": "indicator--1d102270-8a05-493e-b495-216f43eb9e29", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5148d03-92bb-40d2-a8c4-cd2c6e94a2e0", "sighting_of_ref": "indicator--1d102270-8a05-493e-b495-216f43eb9e29", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--230aa8e0-f5ff-4744-aef7-bd9ff90b1617", "sighting_of_ref": "indicator--5fe2fe18-93a1-4a6b-b10c-76ee6bea6969", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7931bdc-8d02-49cc-870f-f5a409008205", "sighting_of_ref": "indicator--5fe2fe18-93a1-4a6b-b10c-76ee6bea6969", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea59b4c-578a-4f12-90bc-aa2bda1dc094", "sighting_of_ref": "indicator--a888418a-bc54-4c1b-9ff2-2c4cd0e1a17a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9541c6b-4810-484c-ac41-11202c5cd835", "sighting_of_ref": "indicator--6a3e7a9a-2e91-4deb-a609-ece7929a8fb2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59377a92-7e94-455a-9911-d7b855d4cca4", "sighting_of_ref": "indicator--6a3e7a9a-2e91-4deb-a609-ece7929a8fb2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d731d123-b008-4b6b-80cd-8da34af3079f", "sighting_of_ref": "indicator--557ea6a2-507d-440c-bf72-cae7d66ce28d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d10ebf65-5542-48d6-aae5-8e118ef4bb8b", "sighting_of_ref": "indicator--557ea6a2-507d-440c-bf72-cae7d66ce28d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e6ebfed-9026-4009-a058-45e763ced2d7", "sighting_of_ref": "indicator--bd644e10-e8d0-45ea-9bb7-9edab13b29be", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1002482e-2d54-49e0-9ea1-c11c9e14286c", "sighting_of_ref": "indicator--bd644e10-e8d0-45ea-9bb7-9edab13b29be", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--441c71ca-a62b-48fe-9c63-40200a6bebb1", "sighting_of_ref": "indicator--1009fac2-bd82-4891-82ff-8f690bdcdf6d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5963b27a-af66-4184-9683-0b178d61910a", "sighting_of_ref": "indicator--1009fac2-bd82-4891-82ff-8f690bdcdf6d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96160ddf-e7e5-4905-9682-6b4b16515802", "sighting_of_ref": "indicator--1009fac2-bd82-4891-82ff-8f690bdcdf6d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490f1ccb-2f3b-45b5-9df0-9b5f5a389c4f", "sighting_of_ref": "indicator--13ec1a8e-09e7-4bf1-a551-278fa2182eb8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--722fe2a7-858f-4472-83d3-d93aa86400d7", "sighting_of_ref": "indicator--d41cf9e6-5557-4d60-9522-c9b9e3b61d3c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eddcb35a-56ad-464b-840d-599cac432da5", "sighting_of_ref": "indicator--d41cf9e6-5557-4d60-9522-c9b9e3b61d3c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e2e1a5-d8bf-4e4f-b2b1-95975a0b9712", "sighting_of_ref": "indicator--d41cf9e6-5557-4d60-9522-c9b9e3b61d3c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153b5030-6714-43da-a104-1d1898cf4378", "sighting_of_ref": "indicator--7ae8e654-fa41-41fa-952c-fd80cd21911b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919f3a89-5a9c-4477-a1c1-64adc08d21df", "sighting_of_ref": "indicator--7ae8e654-fa41-41fa-952c-fd80cd21911b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb5f87a6-d458-45fa-9c9d-c1db1a240373", "sighting_of_ref": "indicator--7ae8e654-fa41-41fa-952c-fd80cd21911b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2197a28-e6bf-40a2-b197-aa21105bdd9d", "sighting_of_ref": "indicator--b64b75c3-ae73-4ee5-bd5a-10b821b2ba16", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fda0e52-c18c-4d3f-b77f-c308c6b4b5ab", "sighting_of_ref": "indicator--b64b75c3-ae73-4ee5-bd5a-10b821b2ba16", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eca6dbe-1bab-4666-98bc-8c32395463b0", "sighting_of_ref": "indicator--a779e9a2-c1aa-4761-9c0e-be10f33bb45d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead6a870-4a0f-485d-a1ce-f1097a8e0a84", "sighting_of_ref": "indicator--a779e9a2-c1aa-4761-9c0e-be10f33bb45d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd8e04d-0a6a-4308-a818-5f4a6aea3cd8", "sighting_of_ref": "indicator--07e94522-b20d-4db0-9054-a7673319b4b0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f94cfcb-c42a-46c2-9639-baba3078fe9d", "sighting_of_ref": "indicator--07e94522-b20d-4db0-9054-a7673319b4b0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5dd2d1a-43d9-4a47-af0a-813e7e19c194", "sighting_of_ref": "indicator--a1b52c7b-7685-425c-9aef-a0ae5fd51265", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db1d031-e974-47e8-a720-3b4cf23a3b39", "sighting_of_ref": "indicator--16a92da6-cf7b-47ff-9ec8-fe77e570cd82", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83dff472-a9ba-4457-8a29-5600c038a617", "sighting_of_ref": "indicator--16a92da6-cf7b-47ff-9ec8-fe77e570cd82", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d488a1-7818-41b9-b22d-b3ac9dd64ee6", "sighting_of_ref": "indicator--87ba5f8a-6739-43a2-9ab6-97b842ad8067", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--010512c0-f57a-41f5-ad2c-060b73513785", "sighting_of_ref": "indicator--87ba5f8a-6739-43a2-9ab6-97b842ad8067", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6502c0-e93f-464c-9008-e129d8defa0a", "sighting_of_ref": "indicator--81a0b0cd-47ef-40d1-8e75-b43ccb8cd96c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94525c9a-8a23-4617-aa76-1ca63ca6923f", "sighting_of_ref": "indicator--81a0b0cd-47ef-40d1-8e75-b43ccb8cd96c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e984b4-3488-42ad-8844-3996a7b7e355", "sighting_of_ref": "indicator--ca27093c-179a-492b-af79-3c2b7da7007e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c626d2cf-6bbc-4b4b-bbbe-7e9e0699330c", "sighting_of_ref": "indicator--18d17617-b04e-4297-82a5-d89184451463", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da268ea-a533-4806-8013-5f2592fc811e", "sighting_of_ref": "indicator--18d17617-b04e-4297-82a5-d89184451463", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4998d50-c193-4546-a4c3-0f023a0285c8", "sighting_of_ref": "indicator--9f101143-7905-47f4-b503-e9cee28707f7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de656971-455f-41ec-9239-950bf8b61fd6", "sighting_of_ref": "indicator--6c025d33-87ab-4da9-990f-e89c6d3d0928", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb5252c-39e3-4369-b899-1c7c7a666da0", "sighting_of_ref": "indicator--dd7798f7-fcc7-4875-ade6-9edbc7341daa", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb95870-495d-4eda-b50a-a542c759efc0", "sighting_of_ref": "indicator--dd7798f7-fcc7-4875-ade6-9edbc7341daa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef7d1f49-4b30-40b9-9b23-dcf8bd1808dd", "sighting_of_ref": "indicator--f0e8c90a-e475-4b44-8a51-53029a8f9cb8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca1a796-cf76-4210-aa66-ed2dcea2f69a", "sighting_of_ref": "indicator--f0e8c90a-e475-4b44-8a51-53029a8f9cb8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa08119-07c9-4186-8bcd-f4cb513712b5", "sighting_of_ref": "indicator--2730948a-3b59-4af0-91c0-d877dd564b58", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873b85ce-7605-44c6-9e17-b58cb9c28e9a", "sighting_of_ref": "indicator--2730948a-3b59-4af0-91c0-d877dd564b58", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd3a22c-8628-4c97-aa7e-8b3efa63ecee", "sighting_of_ref": "indicator--9bbfd394-1889-4d2c-a40b-4d64a9b9d00b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98a24c6-c2f1-49eb-8de8-ff4b39956d88", "sighting_of_ref": "indicator--18e4b756-3a53-4127-a29c-b83b27707336", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e705c9b-fabd-4773-ab60-253cced839d7", "sighting_of_ref": "indicator--e2a3515a-2ae6-4c75-8af8-cb36dc6b462b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5fcc56-37e0-4f87-aa7c-4ca307c346e7", "sighting_of_ref": "indicator--e2a3515a-2ae6-4c75-8af8-cb36dc6b462b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66d86c3-a14e-479e-828f-b2e0ad2402cf", "sighting_of_ref": "indicator--9c2fa6d0-8885-4fab-85ef-5c6a94a4430a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f022f7c2-414a-4449-beb6-0b6dc5b2ca36", "sighting_of_ref": "indicator--b0c0df8b-dea7-42b0-be09-e04cd6fb2465", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c312a00f-79b8-4dde-87cc-aad3ccf4d037", "sighting_of_ref": "indicator--b0c0df8b-dea7-42b0-be09-e04cd6fb2465", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d9dd29-d76b-433d-bb8b-82750a22abcf", "sighting_of_ref": "indicator--b0c0df8b-dea7-42b0-be09-e04cd6fb2465", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a14863a-081a-443e-a577-9382fcaf4c72", "sighting_of_ref": "indicator--ae972c17-2d6c-4fd9-a786-fb536afff2bb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd90dc4c-18bf-4452-95c3-30258ed6d144", "sighting_of_ref": "indicator--19b44160-dd7c-4cfb-a72c-0db23cdb17cd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139a82b9-36ee-42ef-8900-a9bd3c51ee55", "sighting_of_ref": "indicator--f3eefdff-9cb8-4671-91b0-47cd9faeacbd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da850a9f-0a58-4b8d-9d70-5856c633848c", "sighting_of_ref": "indicator--6d3e0af7-6c3f-4990-aa52-1f590a2c88b1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93cc12a-3cc2-4fb7-8113-aa7273a9e52e", "sighting_of_ref": "indicator--6d3e0af7-6c3f-4990-aa52-1f590a2c88b1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd0e7f3-b00d-47bf-9515-ca0401bc64e5", "sighting_of_ref": "indicator--8506a7a3-67df-472b-a223-2f6302394edc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a323bc17-8e66-441c-97a9-c24015f04f03", "sighting_of_ref": "indicator--a795cb5d-0d08-4659-9774-5a14f41bc6ae", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d665894-395e-4bc5-990a-7c3f83754e06", "sighting_of_ref": "indicator--a795cb5d-0d08-4659-9774-5a14f41bc6ae", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec817ad-bc6a-488f-a503-fc7f6e9b821b", "sighting_of_ref": "indicator--185baf43-8c7f-478b-a6cd-69621ab85ac3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab25ee72-bd24-4a90-8cef-dd3e8e4447c1", "sighting_of_ref": "indicator--e5aa2f6b-b88a-4161-8776-bbcb3affef82", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b540da3-103f-412b-9241-5ee79e42c2b1", "sighting_of_ref": "indicator--7809e0cb-33c0-414c-beb8-fc44aa5d4fbb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a164f850-e250-46a6-bc4b-046c363df7aa", "sighting_of_ref": "indicator--c25e639b-4284-4e9c-be99-562dfd7d93af", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d17d716-9d35-4cb1-859d-55547aca8236", "sighting_of_ref": "indicator--c25e639b-4284-4e9c-be99-562dfd7d93af", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39250f99-2f3d-49dc-bc31-8da261e106f2", "sighting_of_ref": "indicator--dd62ab09-e740-4b2c-a138-fc7b29fbce10", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3878da50-85b3-4816-acd0-023907049e30", "sighting_of_ref": "indicator--dd62ab09-e740-4b2c-a138-fc7b29fbce10", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7481adb6-ee08-4328-80ef-944eb0486e99", "sighting_of_ref": "indicator--76ca9018-e9d1-4c11-8528-fb6662bc9ba2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a0bfd5-f93a-4f06-b086-28b2ad7394a8", "sighting_of_ref": "indicator--76ca9018-e9d1-4c11-8528-fb6662bc9ba2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d98c93d-0669-4d3c-abad-45307a02e89c", "sighting_of_ref": "indicator--76ca9018-e9d1-4c11-8528-fb6662bc9ba2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a272ee10-5f6a-4e38-a7ca-995d8d0e0474", "sighting_of_ref": "indicator--32733c11-f5c8-497f-bc80-40839853ac5c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--430d4df6-f80f-417d-a8b3-52cfb69db798", "sighting_of_ref": "indicator--183e7569-7a9e-4287-91c1-9b3f1ace5f8b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca75eb7-7cfb-4600-aea3-3faad504cee6", "sighting_of_ref": "indicator--183e7569-7a9e-4287-91c1-9b3f1ace5f8b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1764acc-dc3f-4dc2-9190-caa8b63f8d6c", "sighting_of_ref": "indicator--0a3b60c7-077f-4a09-b707-cbd6f52ae0ca", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5a0217-187c-4c57-bd94-0c66f10ed1a2", "sighting_of_ref": "indicator--0a3b60c7-077f-4a09-b707-cbd6f52ae0ca", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30694860-d346-4ef8-91d8-d6f6e979b53e", "sighting_of_ref": "indicator--0a3b60c7-077f-4a09-b707-cbd6f52ae0ca", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada1a49b-5e47-462d-9ec9-184e7eb5cd9b", "sighting_of_ref": "indicator--b8fdc8c4-87ea-4803-9ae7-5aadda9ef394", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa62a4bf-1236-4ac2-b798-9aec209f27ab", "sighting_of_ref": "indicator--b8fdc8c4-87ea-4803-9ae7-5aadda9ef394", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad6a6386-9341-4186-b86e-2b984612cfb7", "sighting_of_ref": "indicator--b1507c6f-5043-4faf-951b-b5568f3765d5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8953568f-0910-45e6-96e9-8ad07fc2d2a4", "sighting_of_ref": "indicator--8a36bef6-8be5-4d7b-b429-c45fe2a9f048", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff0f533-ff7a-48ed-aedf-1a7b83dead0f", "sighting_of_ref": "indicator--6cb40e20-d09d-4194-b605-8755856e32f2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085f9d7f-aa15-4eee-ace2-ef1afeca8a30", "sighting_of_ref": "indicator--3b1663d5-ce89-4f38-879b-218f633d2dc9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a8b899-b5a0-44b4-ba64-272f8edb7dc8", "sighting_of_ref": "indicator--4658166e-b775-4fc8-a61a-f6db528c2152", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--208a77fa-cb16-4f3c-9769-290afe29ac5e", "sighting_of_ref": "indicator--4658166e-b775-4fc8-a61a-f6db528c2152", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32b5712-1b8e-4ce4-9564-2a7a33f7ff91", "sighting_of_ref": "indicator--6f5d99c1-5ef9-4320-8927-affc4045ce21", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c029b1f-3e85-421f-add6-d8dd31d3f918", "sighting_of_ref": "indicator--d151fd98-2490-40b0-9019-65017d25d2f5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d6e293-fd01-4d2e-9530-29566e5bfbb0", "sighting_of_ref": "indicator--efeecaf2-ab89-49fb-a9ab-ec152b81fe02", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7415fc73-ea5b-48e2-97c9-aa4609d0a108", "sighting_of_ref": "indicator--bd499531-3e88-43a1-b7b7-e7f3d074185f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ec8122-9879-4782-8dc1-c6930b0c5c5f", "sighting_of_ref": "indicator--dd71bd3e-03a2-4a06-863d-b657d30bbf56", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dd2ca0e-d534-4e6e-ae70-71cf867f7312", "sighting_of_ref": "indicator--dd71bd3e-03a2-4a06-863d-b657d30bbf56", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a233c6cf-a36e-40b7-a44c-75f2604e8122", "sighting_of_ref": "indicator--c3f87bda-36ca-4b44-9f5d-3730fc5513ea", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854cf533-5fab-4f6b-b05e-f19818fb7374", "sighting_of_ref": "indicator--c3f87bda-36ca-4b44-9f5d-3730fc5513ea", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b7be40-fd10-4f7e-a4c5-af66c321b586", "sighting_of_ref": "indicator--0e740878-f837-46a3-9976-e764d5342212", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9499d348-9a35-4e33-83e6-b36548500282", "sighting_of_ref": "indicator--0e740878-f837-46a3-9976-e764d5342212", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e99e426-d780-4e7f-859e-53f8e1f43a17", "sighting_of_ref": "indicator--0e740878-f837-46a3-9976-e764d5342212", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0569cde-25a8-417e-b321-4a8e1c96e489", "sighting_of_ref": "indicator--28adc29b-322a-4d68-8ce1-4abe219cfeb5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73bdc85c-88dd-4318-8fa7-682d34165395", "sighting_of_ref": "indicator--bf35f60a-8477-43dd-950e-71a084e380fc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--560cd1a9-1126-480b-a961-2a7e6b371102", "sighting_of_ref": "indicator--294c4899-2763-4e8f-a686-043d9cead325", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53e5588-9122-42cb-bc57-11a9be8adc51", "sighting_of_ref": "indicator--294c4899-2763-4e8f-a686-043d9cead325", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a88fac3-4c09-472b-8199-b0656ea9f811", "sighting_of_ref": "indicator--f81c947a-79ba-4b21-b41f-2871a4b9af95", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9900563-1f27-4a16-b29b-6fa4f7941054", "sighting_of_ref": "indicator--f81c947a-79ba-4b21-b41f-2871a4b9af95", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1cd2f1-b90c-4707-b5fb-1a7100cdffbd", "sighting_of_ref": "indicator--4e062626-1372-49d9-8c51-4a5e1342b57a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a92551a-d416-41c5-8c42-540bdd26d856", "sighting_of_ref": "indicator--dd4b5781-502c-453f-93a1-6e8eed05ff83", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67353b91-552d-47e6-9246-f0b2a1bf24ae", "sighting_of_ref": "indicator--dd4b5781-502c-453f-93a1-6e8eed05ff83", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a3be19-2aca-4b7a-80ef-4047504745f4", "sighting_of_ref": "indicator--734f74bd-4336-42df-8403-2b3b7942e7fa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16ee7a4f-4171-4e33-ada8-758bc68fa15e", "sighting_of_ref": "indicator--734f74bd-4336-42df-8403-2b3b7942e7fa", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8335e92e-6ba5-4ee8-841c-f99b802a4520", "sighting_of_ref": "indicator--734f74bd-4336-42df-8403-2b3b7942e7fa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f48aeba6-2c5b-45ec-a95a-b1c1d344ba7e", "sighting_of_ref": "indicator--e8780f15-c2c9-4489-88a7-7aaf78cc9e34", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e525c89-db6d-4d18-a19d-0818ca333008", "sighting_of_ref": "indicator--4ad6488d-a61e-4e11-a384-1b3fc5fcfc12", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee7be80c-666a-4f3f-9a9c-8065e7302531", "sighting_of_ref": "indicator--4ad6488d-a61e-4e11-a384-1b3fc5fcfc12", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6869a1db-619f-444c-87d5-b6eab1f98f8e", "sighting_of_ref": "indicator--91024566-ce9e-4206-8450-7ef93965d903", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a497537d-823f-42be-af66-4902a096b191", "sighting_of_ref": "indicator--91024566-ce9e-4206-8450-7ef93965d903", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--addd58d4-75d1-4171-92ba-15f871705c63", "sighting_of_ref": "indicator--59130999-86c2-4f32-b251-7b64211b9a1a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a4d60ea-8860-49fe-a937-8b856f97bfa9", "sighting_of_ref": "indicator--98a823c4-c5d1-4c28-a1f1-7c07b40b81f1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b1f876-6d4a-4feb-9ca4-d1909d262093", "sighting_of_ref": "indicator--b16f9de7-eb4f-4175-832f-549f8101bddb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7389e5-914b-4829-b78b-252193de5bc2", "sighting_of_ref": "indicator--ea913b1b-e896-45eb-b4b6-341d166ab7ad", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98bd6c2-8dc8-4e1f-a062-25a830458185", "sighting_of_ref": "indicator--1acf80ab-b5f1-4bce-844f-3e8a099060a1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d36ef166-c985-4b63-9863-bb2345bd12ba", "sighting_of_ref": "indicator--1acf80ab-b5f1-4bce-844f-3e8a099060a1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c20b478-0a33-4889-84ca-8bca3b57f476", "sighting_of_ref": "indicator--1acf80ab-b5f1-4bce-844f-3e8a099060a1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4093e93c-c58f-47ce-94d3-974ca5d9a30e", "sighting_of_ref": "indicator--0facaf05-135b-4e84-8ee7-71c772a2f373", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7859cb5-af74-475a-9f00-f9fbe44c5aef", "sighting_of_ref": "indicator--56ae6bee-583e-4eee-86d3-466fd9ee6d73", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48aced85-c667-4e89-b1c5-27a002031c09", "sighting_of_ref": "indicator--ff844042-f478-420f-ae0e-496e1b0951b8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39099b05-ca38-465f-836e-2726eb4b64aa", "sighting_of_ref": "indicator--b8e525ea-dfb8-4f5e-9abe-b708594e9bd3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3773ae49-ea41-4dd3-b9bf-5b3bf065f305", "sighting_of_ref": "indicator--b8e525ea-dfb8-4f5e-9abe-b708594e9bd3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c876fb5-69e4-47a4-a8e8-f850b3f21285", "sighting_of_ref": "indicator--14452aed-583e-448a-bf93-72f6e107e6f6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87640785-1a3d-4c67-a3fd-832bc31290aa", "sighting_of_ref": "indicator--138e6e2f-1170-4e6d-98b6-02368169ab41", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be1aef9c-4cb9-42e2-b82e-511429f7befc", "sighting_of_ref": "indicator--121a29c2-8fcf-4abf-8d9b-0426903e3c93", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe466f5-6ed2-41f1-936b-4253143e1ffc", "sighting_of_ref": "indicator--55d1e3bc-0794-4a0e-bb93-df735cce6829", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b368f339-e079-44eb-b658-a85d615b2f74", "sighting_of_ref": "indicator--1bea15b1-6e26-4d83-9205-42d25907adc1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc03607-8bf6-4e55-87f7-7f58f3eb03cd", "sighting_of_ref": "indicator--b56d257f-182f-4a21-be2a-0820c8f4c9b4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c032ce-a217-47ec-9048-7cba922c9ec7", "sighting_of_ref": "indicator--76e59225-01e4-42ae-8c9a-d46aa7948367", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130f3575-7057-4a0b-bc80-c171b64dd639", "sighting_of_ref": "indicator--532e2a99-27b0-48aa-afa3-2f7bc0af36bf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7460a068-f53e-4025-88a6-a8b67488175a", "sighting_of_ref": "indicator--532e2a99-27b0-48aa-afa3-2f7bc0af36bf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3cb3dce-1cab-46ff-ad0d-d74fad1301cb", "sighting_of_ref": "indicator--532e2a99-27b0-48aa-afa3-2f7bc0af36bf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c4aa7b-20e8-48de-a19a-95c7fa0c031b", "sighting_of_ref": "indicator--77116f55-d9bb-4757-a275-d3ed08615216", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f7378db-0e23-4d7f-98d3-6c98480bd57f", "sighting_of_ref": "indicator--77116f55-d9bb-4757-a275-d3ed08615216", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c1eb29e-e2c3-41d6-b5e5-64631a363bcd", "sighting_of_ref": "indicator--77116f55-d9bb-4757-a275-d3ed08615216", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c392f8b8-b1e3-4f69-ad0d-e5773e35e86a", "sighting_of_ref": "indicator--5e71120d-c70e-44ad-9a92-2b91c9ba211d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d3b968-3f77-42a7-b0cc-e117b38e2645", "sighting_of_ref": "indicator--5e71120d-c70e-44ad-9a92-2b91c9ba211d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fcdfc02-63f2-4ea1-9f39-2b4cc9e7296c", "sighting_of_ref": "indicator--5e71120d-c70e-44ad-9a92-2b91c9ba211d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbeabfae-59d6-4f5c-80a4-79e85a4c129c", "sighting_of_ref": "indicator--b72a9fbd-015c-445f-bda1-9103616e4cce", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41fd9873-ab0e-4b82-8b0b-f6ba541de5db", "sighting_of_ref": "indicator--9bba1005-8335-4cd4-8cec-f7a242cdc852", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f51c22de-f5ec-46c6-98e8-5e86567f46e7", "sighting_of_ref": "indicator--9bba1005-8335-4cd4-8cec-f7a242cdc852", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f135a2c-542d-4a56-b8b6-0952e5630b7b", "sighting_of_ref": "indicator--ad686d9c-3bc6-40f6-8d0e-6c563108dfe4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681be1dc-bcc7-440d-97e3-b309e230bc54", "sighting_of_ref": "indicator--ad686d9c-3bc6-40f6-8d0e-6c563108dfe4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd500f1f-157b-47f8-80a2-19106b5ca34b", "sighting_of_ref": "indicator--c33a357d-7736-43d6-aa2a-891a1c383ea9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584e418f-40da-40ba-9bd0-6382b071fd4d", "sighting_of_ref": "indicator--54448ba0-0d48-4648-a3f1-c77e826d8dac", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42bc9152-6f82-4330-a3d2-b102a5ae55bf", "sighting_of_ref": "indicator--54448ba0-0d48-4648-a3f1-c77e826d8dac", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c9b299-270d-4b8d-95dc-fa89e7c8d248", "sighting_of_ref": "indicator--54448ba0-0d48-4648-a3f1-c77e826d8dac", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2784a2-de86-4c96-ba7e-15117189c021", "sighting_of_ref": "indicator--ca29cd56-ed66-4c51-b3db-0db5b37e0dab", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48953d2b-4c4e-40ba-80c0-ba7294911409", "sighting_of_ref": "indicator--ca29cd56-ed66-4c51-b3db-0db5b37e0dab", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c808201-9a8c-4021-96ee-d2ab9b96a4b9", "sighting_of_ref": "indicator--ca29cd56-ed66-4c51-b3db-0db5b37e0dab", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96fc84d3-3641-4202-804b-876ec7408ffa", "sighting_of_ref": "indicator--15f82547-2789-4621-a466-a6f219b06a03", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf4f5852-12f5-4697-a124-99c7a8488e1e", "sighting_of_ref": "indicator--165b5b75-715b-46ee-a5ad-6da204b82052", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb06f58-a9b0-426e-b1a2-105ed21158ce", "sighting_of_ref": "indicator--165b5b75-715b-46ee-a5ad-6da204b82052", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98910ac9-55e9-426c-91a7-2f54a82301da", "sighting_of_ref": "indicator--165b5b75-715b-46ee-a5ad-6da204b82052", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--493d103c-97f6-4698-87b3-43880d3cc2b0", "sighting_of_ref": "indicator--0fc5917b-3eb9-4462-be09-ab92dafd9bbc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--467ac305-1b1a-426d-b003-23edeec3e213", "sighting_of_ref": "indicator--88c2d514-5177-44c9-90af-5c07fb78cc29", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7a2aff-9653-446d-a373-47b19088ef57", "sighting_of_ref": "indicator--12965c33-a058-4d3c-a76b-3750f7d5d7f8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f30fff7-e8c4-4220-9594-aae4786e40d9", "sighting_of_ref": "indicator--12965c33-a058-4d3c-a76b-3750f7d5d7f8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf8edc2-d902-4c50-9a85-b34392b0cfb9", "sighting_of_ref": "indicator--c4441dbe-4aa8-465a-a52f-d6bb8aeb9928", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5650592a-78c3-454f-ac2f-565091bfd43c", "sighting_of_ref": "indicator--c4441dbe-4aa8-465a-a52f-d6bb8aeb9928", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--892c3dfb-cc11-4b31-ae6d-0d2399d476b3", "sighting_of_ref": "indicator--a37e5e41-61dc-4921-b0a5-c20903af6613", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38cc8a1b-0345-448c-b642-6a4e7d84b821", "sighting_of_ref": "indicator--7930d18c-b928-45c1-9197-cf1a8c707c28", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6735751-8c2e-4d0e-a93e-8949277c0478", "sighting_of_ref": "indicator--15fc6e3a-ebac-493b-814d-99a99993c61e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e56fa186-e955-4fff-a853-efc65f98f506", "sighting_of_ref": "indicator--15fc6e3a-ebac-493b-814d-99a99993c61e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d742a40c-b858-4ef2-9747-bec73295795e", "sighting_of_ref": "indicator--bc2926f9-a21e-492f-ac6d-c0cb59bf11d6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2fed850-6e7e-471c-88ab-655830870c1d", "sighting_of_ref": "indicator--bc2926f9-a21e-492f-ac6d-c0cb59bf11d6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05034f6b-ece5-45d1-bb8a-ee18ad77c420", "sighting_of_ref": "indicator--1622d589-382c-4a01-9d66-bdd1b0a1993c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a2f863-3f55-4dc5-9c0f-e965f868685e", "sighting_of_ref": "indicator--2d197704-2394-4853-8c93-933b7a9c7ec2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9ed510d-3af7-4da2-9753-beeb8729a2cd", "sighting_of_ref": "indicator--3ddbef22-726c-495a-aacb-ec24512ca4dd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf0ad55-dd33-48cd-bd4f-98c9112adaf6", "sighting_of_ref": "indicator--05d86b54-e666-4e3f-96ba-db5916cbe702", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041c14f1-090a-470c-8369-dd751fcc6ca4", "sighting_of_ref": "indicator--05d86b54-e666-4e3f-96ba-db5916cbe702", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53fa4f63-aeaa-481a-9fc8-56966400035e", "sighting_of_ref": "indicator--05d86b54-e666-4e3f-96ba-db5916cbe702", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dfcf97b-b061-4271-b080-e0c720168e8e", "sighting_of_ref": "indicator--1bd76b5f-ae75-49ad-a88f-b3687e1b7036", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed93a0f9-4350-4602-9bcb-337eeb5d79cf", "sighting_of_ref": "indicator--e351f5fa-6def-464a-8c6f-0d15ba4a1381", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74879ef3-ca20-4dc0-a78c-bec86df7dd2f", "sighting_of_ref": "indicator--ab1fa0f8-f129-4fee-a9f0-3f7f3aa79552", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc7a1978-24ef-4fbe-8c70-b746832c651b", "sighting_of_ref": "indicator--6a417443-40af-4d0b-9421-bbcca41935fd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5386e239-369e-4483-8f50-e9bb74c5c695", "sighting_of_ref": "indicator--d6c31cf2-f1be-48e9-bbaf-a45df0731d7d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162dbf4c-df2d-471a-bb38-5adcb3f64a61", "sighting_of_ref": "indicator--54689fd5-2801-4af3-acd8-e8bcf2701aff", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef08396a-a3b9-49a0-9207-bcead2f1f172", "sighting_of_ref": "indicator--54689fd5-2801-4af3-acd8-e8bcf2701aff", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6762cf40-7710-474e-8dd0-3c7ff2075f7b", "sighting_of_ref": "indicator--0d34ed9f-526c-45dd-899c-f41b00170ee5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da4d952e-026b-4da1-b535-b9fd217e9047", "sighting_of_ref": "indicator--0d34ed9f-526c-45dd-899c-f41b00170ee5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f48242ce-fbc9-48c2-b525-7f7caac2d996", "sighting_of_ref": "indicator--0d34ed9f-526c-45dd-899c-f41b00170ee5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3942004f-9f7f-4af3-ad78-d8591fbed8fd", "sighting_of_ref": "indicator--afa714ac-4dcf-4fc3-ba30-5211fde71b03", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daed2cda-e11b-42ae-90c1-f4230394c9c3", "sighting_of_ref": "indicator--7e1e1521-47fb-48d2-81a1-5ee18ab759c2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46594030-1993-4ffa-af40-3d7b1b0a13b6", "sighting_of_ref": "indicator--c46b06d4-b847-4d32-a4bf-10ff7cccd6f1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb0fb570-614e-4414-bf5a-b3fb857a0442", "sighting_of_ref": "indicator--c46b06d4-b847-4d32-a4bf-10ff7cccd6f1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7531cca4-ab69-4392-9cc4-d87d10bc2b21", "sighting_of_ref": "indicator--edd3374a-fb2e-4eea-be4a-45ed0bfb408d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ab2eef-363b-4ed9-8a5c-560fe6ed4c50", "sighting_of_ref": "indicator--167ebfc8-ece9-4340-9a36-ea01eb566be9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a58476d-4190-477c-902a-0bead2bb47f8", "sighting_of_ref": "indicator--167ebfc8-ece9-4340-9a36-ea01eb566be9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cffc30b-a68c-4008-97d7-615632c3e3dc", "sighting_of_ref": "indicator--defb5c85-2e9a-461a-a062-a9d170434790", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93f1c72-56cf-4274-85eb-76cf8e31763f", "sighting_of_ref": "indicator--4c434dd0-4465-4f92-8e76-cccbd3adf100", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5850ebe1-b24f-4c93-a9a6-07da4f3cb792", "sighting_of_ref": "indicator--4c434dd0-4465-4f92-8e76-cccbd3adf100", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f558c9a-b0a0-4f1d-9fc5-449229ca8779", "sighting_of_ref": "indicator--4311f16b-13ae-4c79-8a37-2da18b0b7181", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a1bee16-e592-454b-bf7d-8914bbd7ef9a", "sighting_of_ref": "indicator--41210acc-a145-4e6c-a94a-1e823942c31d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d6abbc-538a-47bd-838a-61536baa349c", "sighting_of_ref": "indicator--41210acc-a145-4e6c-a94a-1e823942c31d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f8a2c8f-125d-4749-8ac4-11eeb526a139", "sighting_of_ref": "indicator--d44d1baf-7013-462e-a81f-b4067d7f9923", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72061d43-0473-4ed0-8de0-e2f9c2d729bb", "sighting_of_ref": "indicator--d44d1baf-7013-462e-a81f-b4067d7f9923", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b66c48-6982-4329-b772-1fc18a7348da", "sighting_of_ref": "indicator--d44d1baf-7013-462e-a81f-b4067d7f9923", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae1086e8-0b1b-4dde-9dca-e2f8a77a77be", "sighting_of_ref": "indicator--76789035-b326-4c26-a65d-6649e6f126c3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272aa070-d4c7-4127-a30d-15ec2dcd9567", "sighting_of_ref": "indicator--f96ea1a7-d31d-460f-8ba1-f2af4c0858f6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf47f16c-44a3-4064-b53f-fad61dcaf041", "sighting_of_ref": "indicator--b9a4737d-81c6-441d-b7d2-2f7dff9be089", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ffb313a-7e33-438f-b0da-291f3002c349", "sighting_of_ref": "indicator--b9a4737d-81c6-441d-b7d2-2f7dff9be089", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2d1da5-a986-4d1f-8092-64088d44e37f", "sighting_of_ref": "indicator--2510b98f-54f1-4ddb-b30f-3033e5c6b68e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9adecb-465e-4913-9a1e-8caff766ec29", "sighting_of_ref": "indicator--2510b98f-54f1-4ddb-b30f-3033e5c6b68e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8240f3e-b475-44b0-a681-ad6249291daf", "sighting_of_ref": "indicator--f7a49d0f-7493-4528-90e7-85b6e8603bca", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca94b30-87ab-41b4-9437-e0c6e9f5e59c", "sighting_of_ref": "indicator--7b7cc4ff-cc00-47b6-bb5f-47f3625bac31", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91dfa51f-763e-4da8-9417-9e5fc10680a8", "sighting_of_ref": "indicator--3a763962-9138-4bea-9c00-d1b7c4443719", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b734b1-f019-4fbe-b229-920ecf23c382", "sighting_of_ref": "indicator--3a763962-9138-4bea-9c00-d1b7c4443719", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d05f2cb-30c2-4d42-aadb-4585e5c4938a", "sighting_of_ref": "indicator--ca543480-c060-4142-b83e-8fc39d8c7a34", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84356ade-aa1d-4e1b-afc6-86ae80d19edf", "sighting_of_ref": "indicator--7cadb5be-f20d-4c30-b071-44b2d23d92f6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6b49ab-4195-4573-abdc-42fe48dc1548", "sighting_of_ref": "indicator--7cadb5be-f20d-4c30-b071-44b2d23d92f6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46711252-271d-41c1-8198-a590dcdafc78", "sighting_of_ref": "indicator--7cadb5be-f20d-4c30-b071-44b2d23d92f6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512f65b3-82b2-4e5f-8ede-17f463579501", "sighting_of_ref": "indicator--d84e97ec-488c-403d-aec8-21dfdb587959", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9eaa559-358e-4a71-9c0e-fe71251e13d1", "sighting_of_ref": "indicator--5c92f56f-daec-4b9f-a2ae-11cdbd49e36b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5b0e26-f18a-4472-9f2d-e2cd11ec1ade", "sighting_of_ref": "indicator--5c92f56f-daec-4b9f-a2ae-11cdbd49e36b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a925a4be-60f8-452f-be53-89ad9571eb39", "sighting_of_ref": "indicator--c0e24cec-6c49-4f2b-ba75-0253c191740a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4276a2d7-eb7a-4c9c-80ea-c1aae2089f78", "sighting_of_ref": "indicator--8e677616-30a6-4fec-8a16-2a2e8ff02b0a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f95b960-bbac-4830-b9b6-e0fe7f6a91a5", "sighting_of_ref": "indicator--5e380825-c0d9-4b27-b6ac-7c6958d6fb45", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c3b264-432d-4df3-b4a8-224b3608970e", "sighting_of_ref": "indicator--32acdbf8-1c5a-482b-b671-362d2d989d42", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a9dff25-466b-4f78-8470-f6731eb68bea", "sighting_of_ref": "indicator--32acdbf8-1c5a-482b-b671-362d2d989d42", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba3f839-d4b9-4c5c-aa45-493c3024915c", "sighting_of_ref": "indicator--2f52ce9a-0614-4795-ae73-728849077436", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c463ace-fb76-4ffd-ba5f-4a751cd132df", "sighting_of_ref": "indicator--b3ccf997-663a-458f-9773-ee6d087e821b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b602323c-f64b-4fc5-869b-34856d365e80", "sighting_of_ref": "indicator--b3ccf997-663a-458f-9773-ee6d087e821b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a21902-39a4-4421-8279-1a55e37cd90e", "sighting_of_ref": "indicator--69073da4-70a6-468b-bc06-69ee07b7bc76", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcac3842-bcce-481a-bf4b-3d772055264e", "sighting_of_ref": "indicator--9e358f12-95c9-480f-b43c-064e0626a601", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd41e0bb-64f9-40a9-9e71-c2cf39881de1", "sighting_of_ref": "indicator--9e358f12-95c9-480f-b43c-064e0626a601", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--825438a2-82e4-4c75-962d-8c592da8ba0d", "sighting_of_ref": "indicator--ef8a035e-d9b1-4c7e-8823-4c8c76ade362", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be695e2-5d08-4cbb-b6b3-6ef87140daa4", "sighting_of_ref": "indicator--fd87ac70-2ea0-43d9-ba21-399fae69d795", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b98e5fd8-aa18-41d5-b108-c9d7296f1390", "sighting_of_ref": "indicator--1eefcc33-6379-4baf-bc3d-64c6e08613bb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ffc1cae-e527-4192-b42c-2fb4adeeddef", "sighting_of_ref": "indicator--1eefcc33-6379-4baf-bc3d-64c6e08613bb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--264340b0-9fc5-4f64-b5b9-ca55207f097a", "sighting_of_ref": "indicator--f289f445-080c-48c6-a3ea-44ef768199c9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e9b667e-5e00-4e5f-a335-14dab8c092fc", "sighting_of_ref": "indicator--f289f445-080c-48c6-a3ea-44ef768199c9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20151f3-998f-4ea6-bad7-aa1f47a1386f", "sighting_of_ref": "indicator--f289f445-080c-48c6-a3ea-44ef768199c9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8019294-f6b3-4322-9288-851691f7b1e1", "sighting_of_ref": "indicator--dde4eb33-19c4-4665-9101-c529654ff277", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8525847-ee9e-4f38-8727-d22f01a6d2f1", "sighting_of_ref": "indicator--f749e060-e357-49c4-a04b-14dd1f17ba4d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--687cd8a9-216b-47dc-9eb1-084ae3e7cf36", "sighting_of_ref": "indicator--f749e060-e357-49c4-a04b-14dd1f17ba4d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c72b06c2-c515-431d-bea6-fe64a9dcdef0", "sighting_of_ref": "indicator--f749e060-e357-49c4-a04b-14dd1f17ba4d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51b5ce9-ec71-4775-a242-cfe412b69689", "sighting_of_ref": "indicator--90cc29bb-44a0-44ed-a4b8-51a78b9e4ce4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca79a99-0787-4289-af02-d3873a99023d", "sighting_of_ref": "indicator--90cc29bb-44a0-44ed-a4b8-51a78b9e4ce4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941d0ce6-24b8-493c-9093-cc53dcef91d8", "sighting_of_ref": "indicator--9b571dd2-7835-4728-8400-e2d1f02bce2d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec7538be-1896-466f-9548-7132bdce917a", "sighting_of_ref": "indicator--9b571dd2-7835-4728-8400-e2d1f02bce2d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213c11e5-9b84-4798-a67c-e085ca3b5a47", "sighting_of_ref": "indicator--57591da2-2adb-48f8-bf59-c00c3c1d0760", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b02f2c65-2845-468a-9aa0-5d4c95fb512f", "sighting_of_ref": "indicator--57591da2-2adb-48f8-bf59-c00c3c1d0760", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57a4e4b-a3e9-4dfb-b64e-1ead8459427e", "sighting_of_ref": "indicator--57591da2-2adb-48f8-bf59-c00c3c1d0760", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb634f1-cf52-4b13-863f-736b92e76852", "sighting_of_ref": "indicator--b28cb623-04f4-4c8c-a2bb-6e14d3de19e3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50775b1f-a19e-40b8-830a-efd9052b8f81", "sighting_of_ref": "indicator--34b8a75c-a517-4530-b053-58163b0e0937", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fdae92f-9c5a-4ab4-8ebc-66b1fcab527c", "sighting_of_ref": "indicator--3aeef7b5-2319-4b34-8ec1-7427e4f080d9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0922c2ef-8a72-4421-b425-92f1d061e44c", "sighting_of_ref": "indicator--3aeef7b5-2319-4b34-8ec1-7427e4f080d9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d3bad7-5b01-4225-9806-aca448eac2a7", "sighting_of_ref": "indicator--885e1ed1-4bfc-4a0e-bdec-1f69f8302596", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80cb7d68-330e-4244-863b-21da8d1c6fa4", "sighting_of_ref": "indicator--885e1ed1-4bfc-4a0e-bdec-1f69f8302596", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab5c9b3-cc73-425b-92ec-b6813a45d26e", "sighting_of_ref": "indicator--ad09e08a-5fc9-4924-9e7b-d63fded5498f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe75110-b74a-406f-8f72-0086023be4c0", "sighting_of_ref": "indicator--94d23d1a-88d2-416e-b74b-d660d93265be", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2139a56-19b7-4cfa-ae6d-8c56731d0cca", "sighting_of_ref": "indicator--c3705c28-ff67-435d-986d-d94446224d38", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--703a86c2-f91e-400e-8ac5-81d568c030d4", "sighting_of_ref": "indicator--c3705c28-ff67-435d-986d-d94446224d38", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b5aea3-eae4-477c-a9de-e487427e7ffd", "sighting_of_ref": "indicator--bc73afa9-7fcf-43fe-8eea-bb3ab98b6c97", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb791587-69c7-44c9-972f-6659b324a550", "sighting_of_ref": "indicator--0204b0cb-ab8c-46bb-960a-f691cc8238e4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--286126f8-95de-4d4a-a95b-0b83a9991bf2", "sighting_of_ref": "indicator--0204b0cb-ab8c-46bb-960a-f691cc8238e4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b813f33-2537-4d60-b18b-cbd29ddd18d0", "sighting_of_ref": "indicator--f2ce99db-a884-4f18-9eb7-f5bb6671a60d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b14ca1-b1d6-4015-84f0-c8c1aad2ca8f", "sighting_of_ref": "indicator--0f855b32-027b-4a51-8947-a2e3d51e7198", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285edbbe-2bf8-4350-9c7e-bd8c28250f8c", "sighting_of_ref": "indicator--0f855b32-027b-4a51-8947-a2e3d51e7198", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f32c1e-95f1-462f-a816-ee5f708091ba", "sighting_of_ref": "indicator--85c5977e-e16b-487a-9a49-0f5326b2736c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9adb3c-421a-4f76-a005-aeeeb9d2527d", "sighting_of_ref": "indicator--85c5977e-e16b-487a-9a49-0f5326b2736c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eaa9aa6-4df1-4b62-8976-ff17d376d6ed", "sighting_of_ref": "indicator--45bd0a42-575b-48db-b892-3ea9e6fba10d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--701a5f22-b92d-4ffb-92a9-20b92846892f", "sighting_of_ref": "indicator--d65e95e9-4b7e-427a-8b97-1ce15bf0df97", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d89c771-2aea-4dcb-b6e0-b75572389cd8", "sighting_of_ref": "indicator--d65e95e9-4b7e-427a-8b97-1ce15bf0df97", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc03e594-3bf0-4230-8c6c-d25b9433a3b4", "sighting_of_ref": "indicator--8f434328-3afd-419f-b28c-37b2b2979fad", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f6d31c-ce4f-4050-ac04-1781d47270c8", "sighting_of_ref": "indicator--5c1022d3-1050-4cca-b365-082f5829afa7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c6ee2f-b823-4a95-ab7e-557de593093d", "sighting_of_ref": "indicator--5c1022d3-1050-4cca-b365-082f5829afa7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01cbd487-a16c-4338-aa20-f905b1f66490", "sighting_of_ref": "indicator--6a6a8f19-5560-49a2-82c5-ea409ed131a0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ba50f6-88fe-47b9-b9f4-0d768d2fbb95", "sighting_of_ref": "indicator--27f39016-d1b5-4836-b1e6-baf43f15c0e8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d19ad9-563f-4435-a0a2-6a7b2e38d828", "sighting_of_ref": "indicator--27f39016-d1b5-4836-b1e6-baf43f15c0e8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f232646-6aa1-40bf-984b-fbb36a8823b8", "sighting_of_ref": "indicator--27f39016-d1b5-4836-b1e6-baf43f15c0e8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08706d72-8389-4649-b72a-2549d0921598", "sighting_of_ref": "indicator--ad2c8997-ed74-4360-937f-8e06233ba749", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc3adf09-6f3b-4358-aff1-98703a022874", "sighting_of_ref": "indicator--0dcbe6b2-f190-4a40-b309-c9f739908b95", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb4c0d58-f976-40d2-b76d-a704b97beb8f", "sighting_of_ref": "indicator--0dcbe6b2-f190-4a40-b309-c9f739908b95", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328f8cd3-0668-440d-8683-ee9ba055daf2", "sighting_of_ref": "indicator--0dcbe6b2-f190-4a40-b309-c9f739908b95", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b158db1a-8adc-4d46-878a-24e4da87b88a", "sighting_of_ref": "indicator--94099638-bc76-49f1-838d-0b61fa7c71a1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0d4e33-e688-4f66-8e7a-63fa0a2502f9", "sighting_of_ref": "indicator--65a0f4ec-8e9f-4c0d-b7a5-497c26162d26", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23d12a9-7438-4bc1-92ed-776eafcb2a3c", "sighting_of_ref": "indicator--65a0f4ec-8e9f-4c0d-b7a5-497c26162d26", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65e0a46-9c45-432c-ba67-8e565f482ccb", "sighting_of_ref": "indicator--9a64ee72-3b3d-4ab9-8abd-90b9395dd2d5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70dd79f1-997b-4bd7-acee-ab694b98eb2d", "sighting_of_ref": "indicator--9a64ee72-3b3d-4ab9-8abd-90b9395dd2d5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae393b3-adbe-4b6f-9be4-6105a4c136bd", "sighting_of_ref": "indicator--9a64ee72-3b3d-4ab9-8abd-90b9395dd2d5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c97fafb-bae9-40f9-8f69-3ac0dfd35442", "sighting_of_ref": "indicator--07098cb8-f1d0-4de2-8f0a-364ff7112930", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ebb642d-83ba-4da3-a646-415f87d3576f", "sighting_of_ref": "indicator--fc51d055-7da4-4fff-a3a0-39cfd3904a63", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20fe4402-450f-40a1-b8b0-a5e504e179b4", "sighting_of_ref": "indicator--2704e970-54c8-42e7-8d56-21e7ba7251e3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de75908-d032-41f4-80da-f396d036b9c6", "sighting_of_ref": "indicator--2704e970-54c8-42e7-8d56-21e7ba7251e3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49685184-0b16-4401-abf8-fbeba107afb9", "sighting_of_ref": "indicator--2704e970-54c8-42e7-8d56-21e7ba7251e3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bfd04e8-cced-4403-93fd-adfe3b6a9e72", "sighting_of_ref": "indicator--113ffa54-b001-4aa0-ba04-7ebc0dc8e60d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7144728-456e-4ebf-9935-f9a5516f5033", "sighting_of_ref": "indicator--b19e8d3c-94bc-4a21-87f5-15c3f7a08cac", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79921cc4-52fe-4060-86f4-13ccc28bf01d", "sighting_of_ref": "indicator--b19e8d3c-94bc-4a21-87f5-15c3f7a08cac", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb59169b-8290-41c0-b0ab-669ada8f37c9", "sighting_of_ref": "indicator--17b433d8-cc3f-4488-ab71-a62f7492ada9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d2440b3-19b8-45cf-9d9d-45ac08070f1d", "sighting_of_ref": "indicator--d1c9c7d2-b02b-4389-96fa-ba9e986d3fc5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94e398cd-2a21-4f1d-b149-4f79eb6a99ce", "sighting_of_ref": "indicator--d1c9c7d2-b02b-4389-96fa-ba9e986d3fc5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2e5aa0-adfe-487c-b59b-bd9090ed364c", "sighting_of_ref": "indicator--d1c9c7d2-b02b-4389-96fa-ba9e986d3fc5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe05d490-724b-448d-8364-1bbf9ff0be17", "sighting_of_ref": "indicator--0a120b22-6535-474e-8d8a-7098761c1fde", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7416fbdd-5220-4003-aada-bcc7f494f6b6", "sighting_of_ref": "indicator--0a120b22-6535-474e-8d8a-7098761c1fde", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b1c2f4-cfe2-49af-b6df-5d66557dcff6", "sighting_of_ref": "indicator--4bb482cb-08b1-4ec2-b276-8fd0175da759", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a352162-c791-4f7f-b846-0391a4a6c126", "sighting_of_ref": "indicator--4bb482cb-08b1-4ec2-b276-8fd0175da759", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4d79b1-9352-40a7-b57a-bfa6413bd6cb", "sighting_of_ref": "indicator--343c9fb8-d086-448b-b5cd-fd6a8a3f0cb1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dcf25f3-30a1-47b7-be98-525594758786", "sighting_of_ref": "indicator--343c9fb8-d086-448b-b5cd-fd6a8a3f0cb1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9a8465-1f02-48b7-89ad-0fdbc18f9b87", "sighting_of_ref": "indicator--343c9fb8-d086-448b-b5cd-fd6a8a3f0cb1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb960b2a-5ea7-4416-94d1-0e1935166e40", "sighting_of_ref": "indicator--4654093c-49a9-49ef-8345-58662fc66572", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f4736f5-3c44-4f77-867f-159a7c7113ba", "sighting_of_ref": "indicator--4654093c-49a9-49ef-8345-58662fc66572", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d779b6e-56df-4d6e-a5f6-2751c10f5a47", "sighting_of_ref": "indicator--e6fa8f53-7aa7-4adf-8b35-629a86069837", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--093662f7-cffe-45ac-9c77-94ad4bb9bb65", "sighting_of_ref": "indicator--5098311a-8c4a-4393-912e-1d3a8c338d2e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c01281-bd4e-4aa7-82cd-b50a68842354", "sighting_of_ref": "indicator--5098311a-8c4a-4393-912e-1d3a8c338d2e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6f39c5-6204-46b6-a9b4-189e9409cddd", "sighting_of_ref": "indicator--568d5945-ed97-4549-b465-15eebf88e370", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b651ce-a8dc-486f-93a1-5f719314968a", "sighting_of_ref": "indicator--a5acdc01-d7ad-4171-b27d-daae095f378b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfcfd19f-8d1b-4df1-a07a-13f79a9de554", "sighting_of_ref": "indicator--4917a3ed-cf62-4a40-bdb7-5213a88b271f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee50643e-60c7-4071-9a4f-f109054bf74a", "sighting_of_ref": "indicator--4917a3ed-cf62-4a40-bdb7-5213a88b271f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e86366-9783-4626-a3d8-7f8c3924bd79", "sighting_of_ref": "indicator--368dda8e-0113-4622-baf4-c7de2f44cb28", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d679f67f-117a-4ee4-815d-50bd4a74717a", "sighting_of_ref": "indicator--605bfe78-882e-4dbb-a346-4deb2d83ad13", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff57275-b6cd-4b06-92aa-a35235aafbb9", "sighting_of_ref": "indicator--605bfe78-882e-4dbb-a346-4deb2d83ad13", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96f2448-f032-45b7-9ddf-ce7013477248", "sighting_of_ref": "indicator--1a69349b-91c8-4cc1-8bdc-3cfddbe60370", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af59a1e9-686e-489d-b2ad-08b12f15d899", "sighting_of_ref": "indicator--1a69349b-91c8-4cc1-8bdc-3cfddbe60370", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4667f6cb-1789-421a-9091-bc0ef00731c2", "sighting_of_ref": "indicator--1a69349b-91c8-4cc1-8bdc-3cfddbe60370", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e790abe7-07f0-487d-a06c-f5889bee797e", "sighting_of_ref": "indicator--4f8fdbd7-a67f-4f7b-99bf-f11658f99cb4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c379545-78a8-44fa-998d-afbcb1a48712", "sighting_of_ref": "indicator--aa9c1210-9161-455d-a0fa-0258582dc891", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b73de65-f2af-4009-9cc8-b31ca87bb837", "sighting_of_ref": "indicator--aa9c1210-9161-455d-a0fa-0258582dc891", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--284e69e0-9a19-4489-b87d-14e7c2372324", "sighting_of_ref": "indicator--7072781a-27a2-4b91-95f7-767ad8b05dfa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6567b88a-a4a0-495d-9925-de22f26f29f2", "sighting_of_ref": "indicator--6184076d-a067-477a-8a85-6f03a91a62ae", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23364e6-3867-441e-b15c-671a8d7bc8eb", "sighting_of_ref": "indicator--6184076d-a067-477a-8a85-6f03a91a62ae", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf17edb-3d09-4b57-a33a-5ed718cfba5a", "sighting_of_ref": "indicator--93ec32a0-0f31-4758-92ec-8121b299e83d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55bae44e-ceb5-4c55-b2e2-6901ca521189", "sighting_of_ref": "indicator--93ec32a0-0f31-4758-92ec-8121b299e83d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--452fd11c-4cb6-4733-92bc-02950f8732f3", "sighting_of_ref": "indicator--78e5d710-c81d-4ce9-b16a-dc338c30088a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15bf146d-7d64-4adc-bdf7-41fed28b9acd", "sighting_of_ref": "indicator--78e5d710-c81d-4ce9-b16a-dc338c30088a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7cd74e2-578a-449a-bd81-c7277f4cd6fc", "sighting_of_ref": "indicator--db03b9e5-758f-471d-9ce0-fb63adc8b794", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac0623e-e0e5-4d2c-bcdc-c97ae81c73a0", "sighting_of_ref": "indicator--444c7498-45df-42bd-84b9-fea843408e8d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5dea570-73fb-4eec-bca1-993f2b6c7701", "sighting_of_ref": "indicator--3e23c974-64e8-48e3-a1b5-ceaaaab1cfac", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137d71aa-8fe0-4cad-9b28-d95df19f43a3", "sighting_of_ref": "indicator--254cd13b-a42c-43d5-adc6-591d2d0ab7ab", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6838b104-d7d4-44a6-b105-f93ea471afea", "sighting_of_ref": "indicator--53c3aed2-0bc7-423e-9977-50aee121ef94", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7898c4c-c8c2-454b-94a8-2173d402d119", "sighting_of_ref": "indicator--6b739515-57cf-4d74-95a3-7903ffd1e35e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ee4822-e57c-41ce-a07b-582815ccbc59", "sighting_of_ref": "indicator--0981d49d-d413-45da-98f5-ffb193176f7b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fafed1fd-6e44-4278-9ef5-c8999c525e39", "sighting_of_ref": "indicator--0981d49d-d413-45da-98f5-ffb193176f7b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f55d05-a3af-4445-a8d8-d6d6bfd7d3c1", "sighting_of_ref": "indicator--7635b3b8-1804-4dbb-a749-697d80c33742", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d8bffe-31aa-403b-aa9e-ffe18def65ea", "sighting_of_ref": "indicator--7635b3b8-1804-4dbb-a749-697d80c33742", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520fa7b7-7ef7-4029-9f86-3ad1b8b14a2f", "sighting_of_ref": "indicator--f1112af5-2c0a-413f-9385-48020f1babd0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0426cf8b-f858-403e-a4da-15522a37213e", "sighting_of_ref": "indicator--a72665b3-7dc4-4f70-b8b8-f82acc53588d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c76bb8-b2f3-484e-a343-058d0698a35d", "sighting_of_ref": "indicator--717b2a29-7386-4966-b669-57dae4c3c701", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d20678-26e5-48c4-86fe-ac0fe5c712d5", "sighting_of_ref": "indicator--835abb19-8588-4d73-9a6e-589c8784d0c5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1cd1ff-3e8d-4927-9146-68103dd676a4", "sighting_of_ref": "indicator--835abb19-8588-4d73-9a6e-589c8784d0c5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4fc4c9-4b7d-4bb4-a3be-680606c1d8c0", "sighting_of_ref": "indicator--835abb19-8588-4d73-9a6e-589c8784d0c5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d1e5c6-dcf3-4ae3-b933-6eb6fd76ccbd", "sighting_of_ref": "indicator--118f9fec-d538-4515-8e60-26c7ce0f3c75", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b054015-1a9e-4794-89de-829e98192d8c", "sighting_of_ref": "indicator--118f9fec-d538-4515-8e60-26c7ce0f3c75", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e49fafa-7078-49d7-868b-2e5c1a7e526d", "sighting_of_ref": "indicator--3042153a-af14-4429-bb77-9ab092e3f752", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4bdab5d-d402-42f2-8f94-f565bbcc6feb", "sighting_of_ref": "indicator--e119aa4d-c498-424b-952a-81c2e0db6f4c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde01a98-8573-48d0-84ec-4756c52a34d2", "sighting_of_ref": "indicator--66452000-cfd1-486e-bff7-cf04c758c7c5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586170c5-7e8c-4c67-9167-ec47af741158", "sighting_of_ref": "indicator--e45369e1-6b44-458b-a675-809ec89f084d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108d13f0-5270-42c8-b93b-73cba898a0ac", "sighting_of_ref": "indicator--e45369e1-6b44-458b-a675-809ec89f084d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08dd3b8b-6cdf-49f3-9a79-7d4b8fd6fde4", "sighting_of_ref": "indicator--e45369e1-6b44-458b-a675-809ec89f084d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca28213-8da7-4dbd-9a79-30c21599424c", "sighting_of_ref": "indicator--a659381e-61e0-4b87-854e-29f55f4ed83f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739f076f-d763-4167-ae75-91d4f1387253", "sighting_of_ref": "indicator--f05e770c-635c-4fa7-9008-c5c043f2f8a7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd58f465-aca2-4dcb-9166-8674ca6c01f4", "sighting_of_ref": "indicator--379460e7-9103-4f86-8bf5-b57d426ccaf1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f35e891-d81f-4027-bedc-5865f1ece19a", "sighting_of_ref": "indicator--379460e7-9103-4f86-8bf5-b57d426ccaf1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26dbcc29-3333-4578-a605-4cb34e610be9", "sighting_of_ref": "indicator--d06cb0ef-9bc5-4af9-802a-0f2209515f82", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4740c88a-ac70-4c53-8b11-d414566a60b2", "sighting_of_ref": "indicator--d06cb0ef-9bc5-4af9-802a-0f2209515f82", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89fa4460-09f9-4a92-80c8-1d8bc217a9f8", "sighting_of_ref": "indicator--528b769e-87ee-480b-8fa7-fd500ecca63d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55d2461-c9ad-4d0e-8426-116cc169c337", "sighting_of_ref": "indicator--528b769e-87ee-480b-8fa7-fd500ecca63d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93003c3b-936c-43c8-8d9f-525741aecb49", "sighting_of_ref": "indicator--a2227492-6e0c-489b-a57c-10c580a3253e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc992aa-b24c-4111-9745-56e97a821a51", "sighting_of_ref": "indicator--35dfc883-0855-4623-a5a6-23cdf9f36611", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad9eee9-4d5b-4a28-b88c-611031663376", "sighting_of_ref": "indicator--5b4c29ea-209f-48a4-a0c9-658c5276e135", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8cfe7ad-b31c-4120-9e8e-759478f9ab73", "sighting_of_ref": "indicator--5b4c29ea-209f-48a4-a0c9-658c5276e135", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3ac2ad-5b70-4ca7-b03e-aafd3407717d", "sighting_of_ref": "indicator--15a85e1e-e277-4095-a3c2-d11912972512", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5aee986-b079-44ae-8d71-d2cdbac8c2ff", "sighting_of_ref": "indicator--15a85e1e-e277-4095-a3c2-d11912972512", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e164722a-acc2-429c-aaad-a809668c0c01", "sighting_of_ref": "indicator--6533c9ec-46e7-4642-8d23-7e492f82f303", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb730ce-6303-40f2-b54d-a4b25e5499b5", "sighting_of_ref": "indicator--5c0c8ffb-5a0b-4855-9dd1-20838a79bec2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1e8301-6752-4c7c-b018-659d7dfc4b5a", "sighting_of_ref": "indicator--5c0c8ffb-5a0b-4855-9dd1-20838a79bec2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a2a1414-3ce1-48c7-a181-e8e30af82ef1", "sighting_of_ref": "indicator--1559749f-b056-4e45-b53e-486aafecb40f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91604ab-4863-4fe6-b048-4da41fb96ff9", "sighting_of_ref": "indicator--1559749f-b056-4e45-b53e-486aafecb40f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17962ca7-8829-4303-bccc-df4f3af1dd70", "sighting_of_ref": "indicator--fede8bc0-ea08-4a32-ae70-4624b177c542", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd9a66b-ad54-4877-8878-8f7d907691a5", "sighting_of_ref": "indicator--fede8bc0-ea08-4a32-ae70-4624b177c542", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ba7764-4be2-40ec-844d-4b20dd8274f6", "sighting_of_ref": "indicator--21d6d467-04ea-45de-97a2-f353fe1bfabb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59098d86-9a27-4603-a645-bc085c324225", "sighting_of_ref": "indicator--b3ba1f1b-599a-483b-9d07-a045c51fe0b4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5907d710-3d17-4b7a-be22-ca87185b802e", "sighting_of_ref": "indicator--b3ba1f1b-599a-483b-9d07-a045c51fe0b4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf34c71-5870-4584-8bd4-3969730cc159", "sighting_of_ref": "indicator--243e4066-ed96-459d-8f4a-50e8b8b191b9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a20b5109-4796-462e-8474-0da2d495fcc0", "sighting_of_ref": "indicator--ec8eaf83-d3b7-4733-98ea-aa16db7a0365", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de8c81a-8abb-4549-92ea-7b8fce2942c9", "sighting_of_ref": "indicator--e929e271-8d47-4851-adae-69710db32f2e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f951fab-3a9d-455c-848d-ff18e13ab077", "sighting_of_ref": "indicator--e929e271-8d47-4851-adae-69710db32f2e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be39f332-5ba2-4779-8f66-9aed7ebdb73a", "sighting_of_ref": "indicator--0cbd06f1-6459-46b0-b2ae-7e85b0cd54ba", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5a6c13-2926-4d18-836e-d4b158a5b9ed", "sighting_of_ref": "indicator--0cbd06f1-6459-46b0-b2ae-7e85b0cd54ba", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678ebecf-18a7-4156-a9df-bf60a4369946", "sighting_of_ref": "indicator--24d55739-f192-43fe-adad-5b1dcd6971d0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c67ae5c-4bc5-4e76-8b7f-f05322c42ad6", "sighting_of_ref": "indicator--24d55739-f192-43fe-adad-5b1dcd6971d0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af306690-de8e-4245-a457-68f5b6861f59", "sighting_of_ref": "indicator--8757bd1e-60e1-4877-a5aa-dce083ee0b76", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ebf266-a728-4923-9eae-ad3e03b76993", "sighting_of_ref": "indicator--5d7c202f-c949-4b8e-ab62-85abfd4f607c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c13e25c-225d-483d-bb6c-4b03abbdf8e9", "sighting_of_ref": "indicator--5d7c202f-c949-4b8e-ab62-85abfd4f607c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516e8552-d1e8-4b4a-9cbb-4b505bb04d96", "sighting_of_ref": "indicator--e7875a32-a425-4885-b1e7-4475f60dd6de", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d8dcc5-a7c3-4373-93c8-8fbf134077fd", "sighting_of_ref": "indicator--e7875a32-a425-4885-b1e7-4475f60dd6de", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc3a319-6ecf-4e41-9b7b-5a569de0fbc6", "sighting_of_ref": "indicator--316676bf-3527-41a0-b89d-af135943ac83", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--849bcc1e-4307-47e4-a1cf-c8fdc90cf872", "sighting_of_ref": "indicator--0a4e2915-d556-4359-8114-75d7efc99e5d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac7ab21-396c-420e-84a1-01ecf0d3ea0e", "sighting_of_ref": "indicator--0a4e2915-d556-4359-8114-75d7efc99e5d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927b4f20-f49b-4779-9a85-bb78989cbc8e", "sighting_of_ref": "indicator--37f7b17a-b2dd-4c63-9278-966e074fc0a6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f416f458-3d24-40ad-a762-cd30c2fa6a59", "sighting_of_ref": "indicator--32c5bdbb-45b1-4da2-98f2-577992611f8e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778ff436-2dcd-4179-9f1e-f59720888bba", "sighting_of_ref": "indicator--8a89daca-f832-4898-9c49-9b58008830e1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3855247b-40ce-4262-9feb-47e3b1b262cf", "sighting_of_ref": "indicator--6cabc401-89ac-4a53-b4f0-8322478fd00c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad1c85dd-28c9-4e66-a0d8-8221e39827f7", "sighting_of_ref": "indicator--6cabc401-89ac-4a53-b4f0-8322478fd00c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ef8c6f-1c89-41c3-bd5f-681b7d27b823", "sighting_of_ref": "indicator--6cabc401-89ac-4a53-b4f0-8322478fd00c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698ab6e8-1239-4679-9bc4-34b3f4228f96", "sighting_of_ref": "indicator--299a510b-85c6-4a93-927d-58e8515ea826", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70eea65a-93d9-47d0-9497-8494b07c9541", "sighting_of_ref": "indicator--299a510b-85c6-4a93-927d-58e8515ea826", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5d6622-93d7-437d-802a-4997dd51653f", "sighting_of_ref": "indicator--299a510b-85c6-4a93-927d-58e8515ea826", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade7884f-4c59-4f13-bcc6-883c85f52026", "sighting_of_ref": "indicator--0937ddb2-c40c-4b8d-a165-622d0a72da64", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7416ef7-92fe-48a3-bdf5-759b56aa9d93", "sighting_of_ref": "indicator--0937ddb2-c40c-4b8d-a165-622d0a72da64", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03097fe4-00bc-4ac9-9e07-54d30c58c2aa", "sighting_of_ref": "indicator--ae12d8b0-35dd-4ee8-b270-76fe144e9a29", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14cc8e9c-e0b9-4386-8fe7-e64f556506c8", "sighting_of_ref": "indicator--ae12d8b0-35dd-4ee8-b270-76fe144e9a29", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24603ac1-9f43-4f28-9ded-ee480240c356", "sighting_of_ref": "indicator--e2ee3714-8e82-4638-8ce7-49d73ebc64bf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a15ab8-75cd-4128-99b0-b580f7f7cfac", "sighting_of_ref": "indicator--49ef6e0e-82b3-4afb-b46d-7ac2a8f2ab61", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83332a30-bc41-4f7d-bc1a-4766e5db192e", "sighting_of_ref": "indicator--49ef6e0e-82b3-4afb-b46d-7ac2a8f2ab61", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24bcdf1e-80e4-4d7c-b98e-1cd01aa4bd48", "sighting_of_ref": "indicator--407d700d-6e47-4176-84df-58de60d5f2c6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--396fd4eb-c014-45a9-ad01-0a433602f438", "sighting_of_ref": "indicator--53dd03ea-514c-4ff4-9b39-e60689a385f6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd27e10b-b8a6-4df3-a794-9f84e7cbca5a", "sighting_of_ref": "indicator--390f4c64-322b-4c05-8cdd-b262fc32a1a5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c59c50-8b9e-4065-94a1-34392701fef4", "sighting_of_ref": "indicator--3f99ac18-c8bc-42f1-9989-d85a9bd17f2b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b43d75-0ac8-49b6-be32-5d4df1e35a16", "sighting_of_ref": "indicator--50d5d72e-d967-44c9-939e-c94413f51dfd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eaf7b1f-b10b-48f7-9548-1f95f7d51fd6", "sighting_of_ref": "indicator--50d5d72e-d967-44c9-939e-c94413f51dfd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72670e2d-cc5e-4383-878a-db522703a9c6", "sighting_of_ref": "indicator--50d5d72e-d967-44c9-939e-c94413f51dfd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd8963f0-2812-4977-b5e3-07a505df064b", "sighting_of_ref": "indicator--1f8d6e00-a014-494d-979a-b63510af2c69", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--757b1292-8cec-4ee5-8405-1b93635004c7", "sighting_of_ref": "indicator--84485143-6964-43fd-98ae-2dc4a6e948c6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aab1f77-5ec1-4b46-91d8-e0fa04b5f66c", "sighting_of_ref": "indicator--84485143-6964-43fd-98ae-2dc4a6e948c6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b7dd54e-3aed-46ac-bf40-0747832ed82d", "sighting_of_ref": "indicator--45bbaaa9-e51c-4384-8401-9a8600316d7b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f8ad34-c5cd-4cbe-af98-f29e6e0ceab5", "sighting_of_ref": "indicator--5d0cef0f-6dca-4751-910d-ac046d041d6f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fbadf41-8f70-49c6-9144-0b49c76ec5d7", "sighting_of_ref": "indicator--f3757dbb-488b-4b7d-9b89-c0a6799e7ae7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd381a67-37ad-452e-94a6-b3095e2ecb64", "sighting_of_ref": "indicator--f3757dbb-488b-4b7d-9b89-c0a6799e7ae7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cadac79-e66d-4e2a-8bfc-e0bf87a7c9f1", "sighting_of_ref": "indicator--41229793-406e-44d4-96cb-4e43b01476a5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b27627-d770-4526-a3f3-36914adbd76c", "sighting_of_ref": "indicator--41229793-406e-44d4-96cb-4e43b01476a5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61cd8ba9-b1cd-44fa-b231-e7173e451d6c", "sighting_of_ref": "indicator--41229793-406e-44d4-96cb-4e43b01476a5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5607b7ff-10cc-453c-aaac-433c0ffce138", "sighting_of_ref": "indicator--c3fd009d-19a9-456c-8663-ca892b38a732", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139a0fdc-aa26-4db7-bbd6-f540581fd7c9", "sighting_of_ref": "indicator--867d3526-b0e9-4cfa-9cb9-e5b97b57bece", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--787b7105-be30-43d9-9924-89821616e6f5", "sighting_of_ref": "indicator--867d3526-b0e9-4cfa-9cb9-e5b97b57bece", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f09fec9-e2fa-4269-9629-f1e0e9a5cb4e", "sighting_of_ref": "indicator--1205374f-b85d-4c66-9782-885d0285fd82", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d2e2e3-6443-4432-973d-f6729dade6bc", "sighting_of_ref": "indicator--28601964-c68a-4a97-b687-0c9a06731fb4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a318f58-dfd3-494a-a1f9-8703ed12be29", "sighting_of_ref": "indicator--28601964-c68a-4a97-b687-0c9a06731fb4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef6cf00-d6b6-4441-a16f-37ae6749ee63", "sighting_of_ref": "indicator--9fbeab56-5777-4653-802a-385bfe6920e3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd446c47-1fa0-43eb-a84c-cb33e96ca400", "sighting_of_ref": "indicator--b893fa02-99e0-4cb2-b416-be8f90ad5adb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3324c4be-48e4-416c-aac7-01b0c4022dac", "sighting_of_ref": "indicator--ff96f5f8-d907-475f-a7b9-9cf2fc94f9ab", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584e9c5e-aeb2-495d-adc0-ab4bfce52269", "sighting_of_ref": "indicator--ff96f5f8-d907-475f-a7b9-9cf2fc94f9ab", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb261291-0c85-49cf-8aa4-ab2576aa923d", "sighting_of_ref": "indicator--bf21076e-84b1-49e4-a603-d53ca893ea0f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85204138-e21e-44bb-b4c4-9269b51d2514", "sighting_of_ref": "indicator--bf21076e-84b1-49e4-a603-d53ca893ea0f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca73624-5393-465d-babe-54b2eb302132", "sighting_of_ref": "indicator--eeaa7e7d-8ffc-4c2e-80b6-11510e895827", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb91d045-285b-4b27-82cb-e07916f3b9ec", "sighting_of_ref": "indicator--eeaa7e7d-8ffc-4c2e-80b6-11510e895827", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad1a6a9-45fd-45e7-84ff-79f51fd5fc84", "sighting_of_ref": "indicator--20399f8a-2c2f-4adb-90fa-371e1009b54d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b871fb-fb9c-49c0-bfa1-7c40c9ae80fb", "sighting_of_ref": "indicator--20399f8a-2c2f-4adb-90fa-371e1009b54d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7aa98e-a8d4-4412-b6ae-2d5be89b0dee", "sighting_of_ref": "indicator--cb104d75-d8cd-434e-8214-10118ea9e4b7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e87d4aa5-7e86-4e70-861f-d556920e968f", "sighting_of_ref": "indicator--cb104d75-d8cd-434e-8214-10118ea9e4b7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa8006f-9009-4e3d-8028-d58c2377bdd1", "sighting_of_ref": "indicator--70833b1c-a823-466c-858c-9ce85dedf83c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbbbb530-57f6-4b3a-a01e-1d021cfc0a40", "sighting_of_ref": "indicator--70833b1c-a823-466c-858c-9ce85dedf83c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc802326-96c6-4cc4-b829-6d178e565ff4", "sighting_of_ref": "indicator--725e1413-c97d-4022-936a-da78d7912513", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837485ae-c33e-4271-b01a-d91abe884991", "sighting_of_ref": "indicator--725e1413-c97d-4022-936a-da78d7912513", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ea3f7f-c1ea-470b-bdf5-096aa5713d80", "sighting_of_ref": "indicator--5f194518-0178-410c-9b82-72aa5abd2b0f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7003ea1-5103-4365-8958-196844d67a83", "sighting_of_ref": "indicator--ae26cd1b-3405-4b2b-9274-6742c2760cb5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a12505db-2c5f-4a3d-aa3e-4d39088ac189", "sighting_of_ref": "indicator--ae26cd1b-3405-4b2b-9274-6742c2760cb5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e0ed80-c29b-48c6-b6fb-1847b799f829", "sighting_of_ref": "indicator--ae26cd1b-3405-4b2b-9274-6742c2760cb5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--068ca79b-8779-4b5f-a527-5693960b954c", "sighting_of_ref": "indicator--9dacfdf8-9512-4f5c-89c3-7931a91eebbc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950d53a4-b884-47e4-8c44-81fdeea929fa", "sighting_of_ref": "indicator--9dacfdf8-9512-4f5c-89c3-7931a91eebbc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e667598c-118f-4753-aaef-c2593cb9790d", "sighting_of_ref": "indicator--9d06f189-ac1c-445c-af99-e973540dc389", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e78ebee1-b46f-488b-a28d-470d222b0115", "sighting_of_ref": "indicator--9d06f189-ac1c-445c-af99-e973540dc389", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf2ae46-5f93-4f9d-b86f-8579cde4256a", "sighting_of_ref": "indicator--2540cf86-0673-40e8-a97c-3e52092bf65e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9252b6b9-3b20-4024-ab68-6e76dbb5bdcb", "sighting_of_ref": "indicator--2540cf86-0673-40e8-a97c-3e52092bf65e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--858ef50f-33d9-491a-8562-272afeafd738", "sighting_of_ref": "indicator--6b380b4c-3446-42ca-96fb-7c4c5c71ff9f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137c0ee5-bcfe-4c37-8529-eac61abcbb60", "sighting_of_ref": "indicator--6b380b4c-3446-42ca-96fb-7c4c5c71ff9f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a81a84ae-aed8-45a1-aef3-a1e5b8c3ea3a", "sighting_of_ref": "indicator--b8d2753c-5812-479e-a2d4-2d5df19f5fcf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c01426b-69d7-4992-8698-625952718cf1", "sighting_of_ref": "indicator--b8d2753c-5812-479e-a2d4-2d5df19f5fcf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5ad8b95-9a61-440e-a615-cb7c8395fc62", "sighting_of_ref": "indicator--f39ab0f3-4fd6-4c53-a3a0-4e1bfe25ae45", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a2d5982-e751-412c-b464-37f08a26d0a5", "sighting_of_ref": "indicator--f39ab0f3-4fd6-4c53-a3a0-4e1bfe25ae45", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--940819e4-9525-406e-ae9a-f45c3fca5f4a", "sighting_of_ref": "indicator--e6a71f2a-2601-467f-b135-5afa6f78a6e2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db35c91a-914d-4494-8032-9473bffeadcd", "sighting_of_ref": "indicator--8b51e4bd-0180-4193-a5d6-4ed23fb3527d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa1b72ae-9d75-433d-bcb3-6c32e5b2d110", "sighting_of_ref": "indicator--8b51e4bd-0180-4193-a5d6-4ed23fb3527d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58c8602-1b51-4238-8a11-fea0a546f886", "sighting_of_ref": "indicator--7ac324cc-d74d-41c8-ab1b-dd17cccc0e79", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978ae1ab-efdf-4d4b-b553-ca1f9a493ca3", "sighting_of_ref": "indicator--7ac324cc-d74d-41c8-ab1b-dd17cccc0e79", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b5346a-b55f-4180-b832-c7bf7cf19128", "sighting_of_ref": "indicator--fa5b8aa5-c0ea-4d47-80e3-b9e03b2043b9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f5dd87c-373f-4928-a2dc-5ad0c0a23f8c", "sighting_of_ref": "indicator--fa5b8aa5-c0ea-4d47-80e3-b9e03b2043b9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7dda57-0c82-45b9-8844-4488789cb086", "sighting_of_ref": "indicator--dac92f0e-8f8c-4af5-bc15-c8fe86d72a15", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7500111c-6688-496d-9c66-d3902c8b8e63", "sighting_of_ref": "indicator--dac92f0e-8f8c-4af5-bc15-c8fe86d72a15", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a713c9f0-186f-45a4-847f-ccd8dcf4ca04", "sighting_of_ref": "indicator--6cd336dd-722e-4af2-a328-234416ba9cb4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca55920b-1050-4a26-a4cc-03bdf113f9ca", "sighting_of_ref": "indicator--6cd336dd-722e-4af2-a328-234416ba9cb4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c87889e-c7fa-4682-8a57-ae07b8f205c2", "sighting_of_ref": "indicator--6cd336dd-722e-4af2-a328-234416ba9cb4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9ad592-258c-42ab-88e8-6cdf768e141e", "sighting_of_ref": "indicator--e3a8b89c-8eff-4acc-815e-e8c331c7f0ff", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--277310de-c516-4f0d-9312-a489317039ea", "sighting_of_ref": "indicator--e3a8b89c-8eff-4acc-815e-e8c331c7f0ff", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e9d65c-dbe5-42cb-9e35-a0ee28e9f7b0", "sighting_of_ref": "indicator--b0a4ad6f-de8d-465f-89d4-7019432cb8ea", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f247403-cbf8-45bb-ad0e-88b1712f9961", "sighting_of_ref": "indicator--b0a4ad6f-de8d-465f-89d4-7019432cb8ea", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5520b5c-6dee-48aa-bcd6-4440ac1ef617", "sighting_of_ref": "indicator--b0e9e3cf-9699-4f46-b7de-9ee9c614c08a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1dfe2d-df7f-4155-b66e-bda07b67730c", "sighting_of_ref": "indicator--1e9d25a7-38a7-46a0-b9c9-0875eb0ba080", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b74dad-bcb0-4c65-a7df-3e5f268dda14", "sighting_of_ref": "indicator--9a7a1678-96a6-4c6b-a5d8-7e6635aae612", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f4f30cc-5e4f-4875-b730-3df47366a043", "sighting_of_ref": "indicator--b16fa0e6-46d1-42cd-a86a-4d58c8c12230", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb1e52d-8191-4a57-81c5-dbe14becda7d", "sighting_of_ref": "indicator--b16fa0e6-46d1-42cd-a86a-4d58c8c12230", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80026df1-10f1-486b-bdf4-322a4187046b", "sighting_of_ref": "indicator--b16fa0e6-46d1-42cd-a86a-4d58c8c12230", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f973c6c-b120-4c21-8638-4ee88d3da770", "sighting_of_ref": "indicator--888eb514-7d73-460e-b589-8414455327ee", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b10d1c-7ab1-4ce4-b9c5-dc3332087526", "sighting_of_ref": "indicator--888eb514-7d73-460e-b589-8414455327ee", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea554a22-aa4c-4b76-8269-59dc7131de17", "sighting_of_ref": "indicator--b0f5ccf0-b1a8-4deb-95f7-9ed8ad122977", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff0fe1f-eb89-4344-bf95-0153d7ee486d", "sighting_of_ref": "indicator--b0f5ccf0-b1a8-4deb-95f7-9ed8ad122977", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe9ebf4-2ba6-4901-b9aa-2bcffd8cb7c2", "sighting_of_ref": "indicator--a23fcaaf-14e7-4e92-8eb8-fb8ae6b7ffc8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c52802-8400-4c60-b8ef-2d8a206af0be", "sighting_of_ref": "indicator--ecd675a4-975c-4042-b1e5-5ec5e64cdef5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52171464-bf13-443b-98ad-141c64b30289", "sighting_of_ref": "indicator--b874fcf4-955d-4147-945b-2771fada18e9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--012a7210-faad-4268-951d-cca9e898adc2", "sighting_of_ref": "indicator--d075bbdb-57a0-49ea-98ff-50edb351d256", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2532aa1e-7e3c-4915-9906-6efbea238481", "sighting_of_ref": "indicator--7e169b8c-ee56-46b5-bd39-750c1128ea88", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64cdd57a-9b8a-4d2f-96e5-4d9248a385a8", "sighting_of_ref": "indicator--a707f8ac-0880-4515-a3bf-2c531a75ab20", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48273a2c-2cb1-4e05-85b9-c467500d7a3c", "sighting_of_ref": "indicator--a707f8ac-0880-4515-a3bf-2c531a75ab20", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b8add6-2713-4ca5-ae06-c15d4f68c0a1", "sighting_of_ref": "indicator--1af585d5-4720-432e-bcb4-dd98edab8e8c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa0254f-6401-4a90-95d3-c78a652f35f7", "sighting_of_ref": "indicator--1af585d5-4720-432e-bcb4-dd98edab8e8c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef2e6fb-530d-472e-afb3-f119a896a84c", "sighting_of_ref": "indicator--1af585d5-4720-432e-bcb4-dd98edab8e8c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01031850-75ba-41b3-b833-1cf5fd398ad3", "sighting_of_ref": "indicator--dea345ed-1c5a-415b-a5e6-2b97de3470c1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfd6276e-81e3-46b9-8546-e04af492c731", "sighting_of_ref": "indicator--dea345ed-1c5a-415b-a5e6-2b97de3470c1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c1eb0e-c2bf-495e-a20b-a5c5ab840c91", "sighting_of_ref": "indicator--dea345ed-1c5a-415b-a5e6-2b97de3470c1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ca898c-9836-46c0-8e91-5873dab3d743", "sighting_of_ref": "indicator--da130a4b-24b7-44d5-9b6e-e73ab6ca451d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35689116-3c2c-481a-bd10-411f39d2a51c", "sighting_of_ref": "indicator--1e1cb4bd-7079-4a94-96e0-30534183df6b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b4e313c-ff4f-406c-84d4-737512559584", "sighting_of_ref": "indicator--ae78315e-597b-44b0-b75c-e8ccb9ef3b3b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b5636a-0d89-4c05-b9be-ed6aab0223e3", "sighting_of_ref": "indicator--d320768f-0ceb-4c8f-9fee-4c13b52ad6d6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa919c1-8bc0-40ee-8ae8-b5c0619525ae", "sighting_of_ref": "indicator--d320768f-0ceb-4c8f-9fee-4c13b52ad6d6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e3a7ed8-051d-451f-ad82-2604fcedbfed", "sighting_of_ref": "indicator--f320cef2-eed2-4894-89ca-ae62ecb9d148", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce00ba0b-a9ea-40dd-b71c-c325374026a0", "sighting_of_ref": "indicator--de9325c8-2657-4f2a-9573-d95b11709ad0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb20d4e-b5cf-412b-ab56-da95b08e3060", "sighting_of_ref": "indicator--cfb7ab2e-de82-48de-8e24-08f45176030a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc4e37f-ed30-410c-a54b-df789d674368", "sighting_of_ref": "indicator--1798c151-e93f-4678-8162-e15e6f614e20", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf48d17b-e5a3-46b2-b6f7-b15358af0fc5", "sighting_of_ref": "indicator--118b24b4-e573-4eb2-8774-337f8e903363", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09bc158-d959-4abc-9c89-6b3acd35c57c", "sighting_of_ref": "indicator--23781c66-9b7e-41c9-ab75-2839d9052bf9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09799b26-50a1-4319-a506-143126b97bd5", "sighting_of_ref": "indicator--bf8b8b43-5ddc-4dae-8061-ce82997384e2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd75603e-9bb2-4b5c-90d9-7248fb00f1f8", "sighting_of_ref": "indicator--4e694a46-5152-48f3-b2ba-b0eb7e0ff902", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d1a6632-f9ea-4da4-a1a6-e7b306dee31e", "sighting_of_ref": "indicator--4e694a46-5152-48f3-b2ba-b0eb7e0ff902", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e27bf05-515d-4d3e-b16e-32b319eb85fd", "sighting_of_ref": "indicator--aab28685-60a8-4871-9045-bd36b7ca8e51", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f009c547-36dd-4bf9-ac4e-c622c824c4e9", "sighting_of_ref": "indicator--2512b64c-0faf-4c67-afec-f0b12129c5b9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1715ba08-7739-4dee-a428-b15e8661ea10", "sighting_of_ref": "indicator--c7c0603d-239f-4db6-b9bc-305e452cd4d8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1cf72e0-2b20-43bb-ab9b-869fddb81ef2", "sighting_of_ref": "indicator--bd5fe6ad-68f9-49b0-9389-02e27773de39", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47b1696a-9329-42c5-acca-8fdaa0e7a14e", "sighting_of_ref": "indicator--2e407d42-19f9-4212-826b-d8a72a93bb09", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9948404-7eef-4f36-9d71-6977394661c0", "sighting_of_ref": "indicator--53f8b3e6-a6f8-4d76-b77a-9345fb188096", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b62336bd-02f4-4f62-b154-d730d2413b4e", "sighting_of_ref": "indicator--5df70821-6422-4e26-8bd4-90517bb417c2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f8d8375-ef86-4f1c-8893-8260ebc2332c", "sighting_of_ref": "indicator--b1f8540b-a095-45bf-81fd-6a930dedba91", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a76fb8a-9515-4eed-890e-3749338ea1f2", "sighting_of_ref": "indicator--5c63e59f-7ef0-48d8-a1bf-a6cbd9fe28c9", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00eed701-00d6-414a-8102-20b23c145c86", "sighting_of_ref": "indicator--258541be-a8ff-46db-8647-004246326d92", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0baae1a-c561-426c-ae34-27f67cfbdab6", "sighting_of_ref": "indicator--f04a752a-d495-4d79-8f9a-ef2809e040d0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac80085-0a46-40e5-a998-a3f88a0dd8c1", "sighting_of_ref": "indicator--73e3b4ce-2082-42a4-b39e-238ec502f76b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65f6f649-6378-41e4-b73e-df4b4ea885c7", "sighting_of_ref": "indicator--b26e2014-22cc-4ab3-bba1-5000f261d67f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aded979d-45fe-49f7-9c28-7b7eb3afac8f", "sighting_of_ref": "indicator--89ba1d14-26dd-4e65-8334-de761ad7743d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817ea89a-090f-416a-b70d-c83c58ef68fa", "sighting_of_ref": "indicator--7dae0cfd-9713-4cb4-ad55-905140e3ca9f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad90f0a-4f32-47fa-9c85-4fbaf3b24ebc", "sighting_of_ref": "indicator--00666c13-46dc-4355-a56f-ac3c4669dc6a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92251ed-cd78-4a6d-8a4b-14fcab76bf20", "sighting_of_ref": "indicator--00666c13-46dc-4355-a56f-ac3c4669dc6a", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5229144-54b3-45fe-a8e5-1afc56be2aac", "sighting_of_ref": "indicator--e15bdf4c-1762-45ab-9aed-cdfe70b63333", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf7bcfea-e09b-41da-9d3f-94710e9c1fc9", "sighting_of_ref": "indicator--4ccc33ee-8fe9-449f-82e7-1f06e1cd0518", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b4c8702-d990-4091-a2f0-a877cf6b8f43", "sighting_of_ref": "indicator--3ba411d2-6f61-429b-975e-37aa6a9ef576", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575306f0-dd7c-413d-91ce-d46d8e2017d2", "sighting_of_ref": "indicator--3ba411d2-6f61-429b-975e-37aa6a9ef576", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2588a3d8-8e64-4435-806b-9bd3428528e2", "sighting_of_ref": "indicator--c9ec8265-ea6d-468a-94ba-330f4b68c813", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ddbd58d-061a-4f21-90eb-f69bfddaa036", "sighting_of_ref": "indicator--e5574b88-77cf-4a75-9ae8-69352ac1287b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2e96ec-52ff-4d49-bb3d-743b67ac033f", "sighting_of_ref": "indicator--e570d798-8010-409a-8c3e-f93788c2e6de", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70743bc-5312-4b20-b8d6-6e3a437b34ec", "sighting_of_ref": "indicator--b75a71b9-8958-42ac-896c-fd3153890da3", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f65a335-8bca-46e2-b4fb-e5acaf90ec22", "sighting_of_ref": "indicator--81c79c7e-1061-4816-b8d4-37a414e3f382", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--188742c9-bbea-4de0-a665-34a291e90e8c", "sighting_of_ref": "indicator--4be2814a-0ac3-47d0-b6e2-757a051a6419", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b41fdb8-c62d-4fe0-a59e-620f389946a8", "sighting_of_ref": "indicator--3fd94fd5-8e6d-4c09-a426-40ac957f985c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0644eab9-ea1e-4881-9eb4-29b5a102e894", "sighting_of_ref": "indicator--3fd94fd5-8e6d-4c09-a426-40ac957f985c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46885a62-b46e-4774-8960-7e8489793c09", "sighting_of_ref": "indicator--3fd94fd5-8e6d-4c09-a426-40ac957f985c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e726a9-4479-4959-b04f-7285f5af6092", "sighting_of_ref": "indicator--9997e18b-cacf-4ae9-a17c-b1a1079f4259", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3113089-1cff-464d-9094-4196e11d4d3e", "sighting_of_ref": "indicator--53de415f-d90e-4555-b27c-9134ead2cd13", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35bdedd-b421-4487-84e2-bb7f7ec82d70", "sighting_of_ref": "indicator--12ff8257-30d6-45c2-bc8d-24286824f668", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0808a3b6-4201-49f5-8771-36ad5091a329", "sighting_of_ref": "indicator--dc5057fb-b173-40c6-82d5-1e612d0b91a4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9a0a9e-e1e5-4c57-87ee-1031f8cbaadd", "sighting_of_ref": "indicator--dc5057fb-b173-40c6-82d5-1e612d0b91a4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f55bc6f-7650-47ad-84fd-a6d2f233b1ac", "sighting_of_ref": "indicator--dc5057fb-b173-40c6-82d5-1e612d0b91a4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55f257d-2104-4ae3-a82f-0c185bc82347", "sighting_of_ref": "indicator--35b448a7-5221-4165-9c73-355692132c85", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f3c9ae-accd-462f-bdb8-fa39ec697e87", "sighting_of_ref": "indicator--69261af3-d842-43c4-984f-49c85542d723", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c043df8-0fa4-4120-bd66-0d2c14cede6b", "sighting_of_ref": "indicator--71cb91fc-398f-4e78-ab5b-341058197a83", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e342eb9-fe2c-4d96-b21d-fbc11966f546", "sighting_of_ref": "indicator--96e1ec74-cb98-4fb1-9832-719cf25ca15d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd10795-b067-4b57-af87-89467efe6da3", "sighting_of_ref": "indicator--a5c53e82-f857-47d6-a427-2380dd740374", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a39732-3a9a-42ce-a18c-da1d644393b0", "sighting_of_ref": "indicator--063b4f91-f4d0-48ee-a247-ee249274f2b1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6853f61f-38cc-435c-a97f-2d61fcb31908", "sighting_of_ref": "indicator--b2467a46-99ff-482d-b736-26c0d27adff5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5826d9-9cac-4123-ad25-0e10bcf78e15", "sighting_of_ref": "indicator--b5ab3720-f61d-4be0-9cdf-58c817c0f41d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b56250-c807-4153-87d6-62bed00b4484", "sighting_of_ref": "indicator--2a400822-2093-45d4-8673-3f768a71573f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42966deb-a9cd-4f59-941f-fe7b9d9928c6", "sighting_of_ref": "indicator--2a400822-2093-45d4-8673-3f768a71573f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--123d778e-0a6c-4f14-8090-5c3509094e2c", "sighting_of_ref": "indicator--2a400822-2093-45d4-8673-3f768a71573f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceddc378-647f-474d-8253-0a52b6a0b8aa", "sighting_of_ref": "indicator--85f9bb83-dd1e-4100-a3e0-c0f82d60004d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d7ecab-1b8e-44b4-be15-ef285486116a", "sighting_of_ref": "indicator--e2e94ed7-bdc6-4373-b64d-20e34c126e67", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c64597-9aad-41a3-b3fc-b3c8efe63471", "sighting_of_ref": "indicator--e2e94ed7-bdc6-4373-b64d-20e34c126e67", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--238fce35-3227-4b11-aeda-9e37cb12c61b", "sighting_of_ref": "indicator--62b66d29-b50f-4c0b-8956-82b4f6d4cc82", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16731664-8263-474c-847e-47e2998a1ad6", "sighting_of_ref": "indicator--62b66d29-b50f-4c0b-8956-82b4f6d4cc82", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d4737f-8245-4573-9e0f-535600c09643", "sighting_of_ref": "indicator--6af9f70b-cf73-42c6-aba4-20295ca052e6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d8fcc3-fa92-4454-8bce-723d58fbdadd", "sighting_of_ref": "indicator--6af9f70b-cf73-42c6-aba4-20295ca052e6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10182e15-dd1a-4f3d-b36c-63d565cda28c", "sighting_of_ref": "indicator--c8663115-ed82-4c4a-90dc-28701578e759", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534948f6-bc32-499c-a58b-dd70f0b3ae89", "sighting_of_ref": "indicator--bf0cf516-70d8-488c-aeb5-659baa5d95cb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec838a99-2f95-42b2-93ba-2c2a66422312", "sighting_of_ref": "indicator--775d66b7-7d00-4a84-a68b-611e03e518e5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da4326a1-9f65-4dea-9929-fa986644ee80", "sighting_of_ref": "indicator--775d66b7-7d00-4a84-a68b-611e03e518e5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0461ba94-e697-43ff-9e48-b7fe550ede18", "sighting_of_ref": "indicator--d28098a3-0949-4370-bfe3-bafe1c10c246", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e9adee-560a-4011-81e1-12095209e882", "sighting_of_ref": "indicator--d28098a3-0949-4370-bfe3-bafe1c10c246", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9545275f-ca21-416d-b453-e66b8d146813", "sighting_of_ref": "indicator--d28098a3-0949-4370-bfe3-bafe1c10c246", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c394b5af-92e9-40e0-af6b-3862a3e4ff0a", "sighting_of_ref": "indicator--bd5aab0d-e227-4e02-8aa1-5d5da3104727", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff47b048-bb2f-4457-b0fd-2d99ebe77837", "sighting_of_ref": "indicator--04741e70-3839-4a5f-9dc7-17c2df0701aa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de6e8770-5ee7-4972-821c-db1fd852e044", "sighting_of_ref": "indicator--04741e70-3839-4a5f-9dc7-17c2df0701aa", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ebd963-cb37-427b-a8ed-fdcb44897188", "sighting_of_ref": "indicator--04741e70-3839-4a5f-9dc7-17c2df0701aa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5452ecb3-b905-40b3-8f1d-4a8279c6e130", "sighting_of_ref": "indicator--9bf64383-6671-48bf-9076-ef99c1b28417", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6952d3b7-9825-43bd-968b-6c00b6eb1e3b", "sighting_of_ref": "indicator--7a2ead0b-abb3-42ad-971d-ba1b0d413891", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e11931-cc60-4657-bbaa-767ed06c682d", "sighting_of_ref": "indicator--4e1c5614-50bc-460f-bc75-fd138d35357a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93609c7b-eb5b-41fc-9705-2e130140daa6", "sighting_of_ref": "indicator--d2086e2a-d5b6-4bd5-bb06-2bf1d45324bb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d0106b8-b84e-4df7-86d8-4c0d05c5e732", "sighting_of_ref": "indicator--d2086e2a-d5b6-4bd5-bb06-2bf1d45324bb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--986e7cb0-e852-43cd-bed4-30cee1392a01", "sighting_of_ref": "indicator--8d03453d-9d63-49ca-ab71-0bc74230d541", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a342264b-31e0-4356-ae59-36332b2c3254", "sighting_of_ref": "indicator--b8da75ff-906f-4e85-9b46-5875b47bf09d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ee0f7b-0bcb-4881-a1f0-a58025bb08df", "sighting_of_ref": "indicator--d59f07d7-9102-4d85-b9bd-8218a09ac3b6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee422b1-f906-4791-8745-6bb805840405", "sighting_of_ref": "indicator--d59f07d7-9102-4d85-b9bd-8218a09ac3b6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91565573-e6ec-4279-94d2-7473a68bcb13", "sighting_of_ref": "indicator--9b5114c3-89d8-47ee-9b89-14a14fd338a5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--502672ad-2a62-4f6a-abb2-e990cdb14e9c", "sighting_of_ref": "indicator--d7cfc4c3-b566-48f0-945f-ed53056631b9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759dc871-4d51-4957-89ee-1eaa3760e17a", "sighting_of_ref": "indicator--b1cf26f7-60e2-416d-99a5-0da97e121cdf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53e1268-e847-4048-8183-f234a524510b", "sighting_of_ref": "indicator--125e0b29-c640-4fba-b940-0f994596674c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a95f97e-be17-436d-a4ef-b618198fb9da", "sighting_of_ref": "indicator--99a4b68f-41a2-48bc-afea-65cbff6e7304", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8845f80-d8fa-4e7c-b063-799d1cc6cc84", "sighting_of_ref": "indicator--cdee73fa-616a-48ee-a43c-057bd690c797", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f627bc08-c4f2-40c5-9480-39e0560dcf13", "sighting_of_ref": "indicator--81675b26-4e2b-4d67-9c4e-5ac3ea57ed55", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b49529-5b5c-4b59-871b-6255ca420ec0", "sighting_of_ref": "indicator--81675b26-4e2b-4d67-9c4e-5ac3ea57ed55", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6396f0-12be-465f-9797-8ff8174108c6", "sighting_of_ref": "indicator--f00d7e18-93cf-462f-b637-4c51040fab1e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4144435e-08b4-4628-af89-8fb54c1a208b", "sighting_of_ref": "indicator--be2c80ee-60cb-4f71-b778-00f7bd55fa1b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b0956d8-1b36-4e97-bf36-74fe95cf0bcf", "sighting_of_ref": "indicator--b02dbd6e-f691-4332-802f-d5cf618d68c1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462cb468-92e4-46a7-9ef0-864bc99a4926", "sighting_of_ref": "indicator--178eeb2c-e89d-4d69-8099-bec436f4741d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ebf589-4fd7-4d8a-b231-c6c8c7d19531", "sighting_of_ref": "indicator--aed8e016-78d7-4a7c-a8d4-c61493499b9c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c0d1af-c4fe-43c4-b9cd-771534b886a8", "sighting_of_ref": "indicator--5bf106be-ee2e-48fd-b4d8-d95a204a7c6e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e35b6f65-f711-41a1-9ecb-dde75ba01e53", "sighting_of_ref": "indicator--ee8557a1-28b5-43ec-ac3f-90d066046323", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d29efc2-552f-47da-8ea6-b08a6db623ba", "sighting_of_ref": "indicator--d1e726f1-9d94-43c9-81c2-ff044096f626", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007ec61e-5e13-4faa-a13d-1db0cbddf770", "sighting_of_ref": "indicator--e51b0f35-e745-4546-83ea-a442f9ec13f5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd74606-431b-47f7-b78d-d211c0bf3eb4", "sighting_of_ref": "indicator--8b9416d6-61ca-4924-9951-be4d305c0baf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed1e58d-c9a9-4a68-8d2f-15bb91f41a4a", "sighting_of_ref": "indicator--3e31bc6b-aa06-4513-9668-45bfd1d53c58", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e39ac970-7154-4b2c-b6d5-58f1e421cd3e", "sighting_of_ref": "indicator--3e31bc6b-aa06-4513-9668-45bfd1d53c58", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49576cb-b0e8-4530-90c5-a2f694a8eaf8", "sighting_of_ref": "indicator--3e31bc6b-aa06-4513-9668-45bfd1d53c58", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47610a86-006a-4981-8b1a-b68032fabb29", "sighting_of_ref": "indicator--202cff93-cd7a-4dda-8143-5255232944b7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c51c34e4-00c4-41db-b7c1-907674d4b586", "sighting_of_ref": "indicator--772d385d-1b0d-46b4-8bcc-98107223a4e5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d3b2b4-f1b4-42cc-807a-d7ba6ed416fd", "sighting_of_ref": "indicator--e2a496b5-0725-41aa-bc7c-7ea2d189d2c9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db60c3a-dc65-498b-90df-5366608c6f1a", "sighting_of_ref": "indicator--54f22ac8-351b-47a1-aa89-072c1a6265f9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd199f8-6cdb-47be-9927-f57fff5e3bf0", "sighting_of_ref": "indicator--6f29965e-2165-4000-9916-3a942ec94288", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d83db8-4f64-4f12-8b3e-7fb47d5b4333", "sighting_of_ref": "indicator--037b3469-07d0-45c6-84fd-4221577dabf7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6616917d-7241-453f-90f8-102c31f5c1c0", "sighting_of_ref": "indicator--fbd72b1d-6705-428c-b871-63a961094899", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6f773c-7fa4-4427-bc81-ab7fd1061457", "sighting_of_ref": "indicator--cdb763b7-40de-4a79-b2b8-33f0a60fb462", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4daf3cf5-8fb8-46a0-a61f-f13965c699f1", "sighting_of_ref": "indicator--ff4650e2-a25a-4ddd-957b-c066950ec204", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aedf6220-5353-442c-a866-0d31065bceb7", "sighting_of_ref": "indicator--2a752d79-27f6-495e-964a-4c3ae6310188", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdacaf57-76fe-4421-bb5e-d55c2b3626d1", "sighting_of_ref": "indicator--0ed3c95c-f683-4ca3-8b4d-9f0b0c8e9623", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ca2f2e-a38f-405a-958b-47bd4eb8254d", "sighting_of_ref": "indicator--924b22d6-a53b-4c80-b1cd-619ee2051aec", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d873f8f-b534-4242-b934-12492dec5f47", "sighting_of_ref": "indicator--d8f9bd23-5025-483a-9f86-471a4e88d159", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0dece53-4dc0-4b9c-bb7d-137095277207", "sighting_of_ref": "indicator--2abf6f0f-9ad5-4b03-90dd-0707298c18b1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3446b34c-750b-4c1c-9557-260b07bc0638", "sighting_of_ref": "indicator--e4a07746-6e61-4574-896c-25d784ff13e7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bebaef2d-994e-4f19-bc50-950080b5501f", "sighting_of_ref": "indicator--e4a07746-6e61-4574-896c-25d784ff13e7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65280c19-cbf4-4589-ab17-7a9dc847c4ee", "sighting_of_ref": "indicator--547398a4-eab4-4b8e-89d7-84a6509f0cd4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc6d404d-ad91-4735-a0f0-66daa7c44fee", "sighting_of_ref": "indicator--f6ebb6d2-b5ba-438f-9a8f-2ac49cbd0e2a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c1d13c-4a04-4fd7-8af6-657e16f864fc", "sighting_of_ref": "indicator--f51e1320-f4a9-4c34-bdd7-3106398f4d79", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d9b785-c84a-4ad5-8076-fe30af90ec24", "sighting_of_ref": "indicator--6a5eda62-9a0e-49c6-85e8-0816f503b0fa", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb386ef6-a9b0-42ee-a6c3-af66221b9bbf", "sighting_of_ref": "indicator--6d14070b-fa5b-4e30-8aa4-0f0f14d68b67", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e50697-5aa6-412b-bde6-9bbcfa26348b", "sighting_of_ref": "indicator--def3a32a-9446-45ed-a81f-511bc9ac2ae9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd58159-79af-4393-8a53-f15f0c20a287", "sighting_of_ref": "indicator--235ca053-9ad7-4ebb-91ed-755e35367df8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e003f4e8-2222-4ae6-9cfa-d08a5fa786f9", "sighting_of_ref": "indicator--f48d1606-d7d4-4047-ab0f-56921dc0ab00", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05762109-dfc8-4809-847a-1e6e02ac0e46", "sighting_of_ref": "indicator--82eb728d-b93e-411a-aa0c-93b78721ebce", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906294f5-43c2-4dcc-b026-7f1551993cc3", "sighting_of_ref": "indicator--070b9e29-3cab-4386-8048-2f54a57dc2dc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f739923f-47a2-4548-b8e5-0e92aec048f3", "sighting_of_ref": "indicator--070b9e29-3cab-4386-8048-2f54a57dc2dc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a99ec0ad-6cbd-4a68-a2b1-38325244b3fa", "sighting_of_ref": "indicator--83ad4a27-1023-4241-8cc0-5dc3eff8aa02", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26591429-d032-41a5-ab08-c60ebdad88c8", "sighting_of_ref": "indicator--3ca0a6d0-3ba1-4fe1-9fd9-2b89d561f1ec", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9e1088-f45d-446d-8d21-9aeca70eb48d", "sighting_of_ref": "indicator--467be044-6a8e-4498-a2c2-7e2072b2f764", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4d878c-bd07-468f-be70-1d105c4716a0", "sighting_of_ref": "indicator--9a606829-f3d5-4700-bbd4-9d10aa46f6a4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c200830-1c4a-438c-adb5-96a162ac65fd", "sighting_of_ref": "indicator--ea5a4dd1-4db5-47e4-a1f5-7cc89a493c6f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--082edd30-ed71-4b82-b2f3-688568b56310", "sighting_of_ref": "indicator--9ffff65d-fcb8-4423-9383-d920b8330812", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c2ef15-2c80-49cd-8acd-7b3c16d66d2a", "sighting_of_ref": "indicator--9ffff65d-fcb8-4423-9383-d920b8330812", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb497b3-854e-4725-8156-e6cbfd98d89e", "sighting_of_ref": "indicator--c1a3da2c-fe29-4eaa-a2bd-5ee298903b9b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8214c7c-60d4-4be0-9680-0a7b268c4e9d", "sighting_of_ref": "indicator--c1a3da2c-fe29-4eaa-a2bd-5ee298903b9b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce1f253d-9dcd-4b38-ad28-acbf8e29d85f", "sighting_of_ref": "indicator--39b4c2d9-b812-4cbd-bb6a-c4b227c938b2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8423313-0f7b-47ba-ae76-ef7e8655091a", "sighting_of_ref": "indicator--6dfa7632-01cb-418e-850c-b35677981cd5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f88e635-a846-4c66-a70a-fa98f0ab369d", "sighting_of_ref": "indicator--eb625cb5-2892-4148-8b47-0906057021a4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca26f66-7866-4a7b-9fef-8b057b9c1e78", "sighting_of_ref": "indicator--f7da9af9-feb3-4657-b3e2-bff128730789", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edba255e-7caf-41c4-9a3e-687393f2bea5", "sighting_of_ref": "indicator--17df3c39-ef2a-42f9-9599-0a6da712639b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b357291-9366-4a97-87fd-2dae160d4928", "sighting_of_ref": "indicator--7494a1d5-56fd-46b3-9eee-e29cba2bc233", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb80271-3826-4a25-a717-ed8fd62e682b", "sighting_of_ref": "indicator--966fa0fb-376e-47cf-9353-7e181c478ae6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9353ccf6-d42b-433e-bff3-dfe6e6988af3", "sighting_of_ref": "indicator--c1b669d1-62b6-4acd-8830-386505087f1a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a3fefb-529b-43d4-b76d-fb6d1d613069", "sighting_of_ref": "indicator--acceadb3-312c-40d6-bb11-f563a25269e0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523d55c2-df35-4c0b-8336-fadc8d3c3da6", "sighting_of_ref": "indicator--198ddd6e-4db7-4890-8bc5-c0f60d9123ed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee3fd14f-2ecd-4cc5-b605-137b6dfe4348", "sighting_of_ref": "indicator--55c65942-0e98-4e8e-96f8-283aedc6dbd7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00979520-dd6f-4c70-b62e-0bea964d9540", "sighting_of_ref": "indicator--5a5b8e3d-6616-4473-a0b3-bb84381b7950", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b70ee6fb-ff35-4478-a4ab-e3378519bc18", "sighting_of_ref": "indicator--5bf4225f-6a57-4913-8b9d-74a33d739dd7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9522f58b-8bca-4edc-93ab-bf0a3980384c", "sighting_of_ref": "indicator--39053435-1522-4070-8966-fed42b5714d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--151b345e-5cb9-4024-bbba-0430f388ba92", "sighting_of_ref": "indicator--adf1230a-3fb1-4994-8758-0f39489ba600", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294eb1c8-c533-4129-aa3f-a75b581bbe96", "sighting_of_ref": "indicator--dc1bd639-5e01-4d5a-815d-2ec8e6b48783", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8161f559-f998-4841-bd89-e8243c6b2eb1", "sighting_of_ref": "indicator--b4493f02-d59e-4009-979e-8d011c024ac7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7acdb1b-e8ab-429e-ad6a-513b718f194b", "sighting_of_ref": "indicator--340638af-e4cc-447e-b980-97732dbd76da", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a173942-db93-4f41-a75c-3db4a21476ba", "sighting_of_ref": "indicator--2de95d0f-cd77-49c4-ac72-47636ed3c80e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d38c24-d405-44fd-a344-4ee7a5add315", "sighting_of_ref": "indicator--b8e99aa6-a6b5-408b-bda1-f8ebb7b64434", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cab586a-c2b8-45e6-9c06-5cecd86c7344", "sighting_of_ref": "indicator--651c106b-ef9e-48e4-b768-44bc538c1948", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3c94b54-e570-43b2-be13-108608278ecb", "sighting_of_ref": "indicator--35a4310e-197d-4316-abec-90d7b43fd89f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567bc918-c01f-4249-80bf-b35e6d6538b7", "sighting_of_ref": "indicator--8ab0c46f-108e-4871-9782-968e33378aa7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea422cf-51cd-4176-a067-773801e0d338", "sighting_of_ref": "indicator--1bee6162-ecf1-4209-ae9d-81a5e200744b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--899edb99-cd7b-4d2b-848c-d37b2871928d", "sighting_of_ref": "indicator--f14ec2f5-5828-421c-b05a-f84a4b760415", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd109458-a30b-449a-af22-1501c6abf401", "sighting_of_ref": "indicator--25e99ded-eebd-4322-a58e-494993dba811", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b76c5ea-bb5e-40c7-8174-f36cfc6a6503", "sighting_of_ref": "indicator--5ab111ef-b248-40a3-ba6b-189a5493214d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec2de1ef-fe09-4bd4-841a-bd026346d120", "sighting_of_ref": "indicator--bde34cd5-7a44-4ef4-b71b-ad5087e5ea36", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08d6a62-dd81-4ad2-bc07-5e65307a8fbf", "sighting_of_ref": "indicator--9c29cb75-13db-424b-8676-cadbaea900c7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00457d67-d800-41a0-a463-869b6b15ba65", "sighting_of_ref": "indicator--9c29cb75-13db-424b-8676-cadbaea900c7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--464a4d02-f031-42fb-b541-670e45c04886", "sighting_of_ref": "indicator--0dd38951-af73-4f4b-9f85-7de1550425d0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef27b2c-b728-43c4-aab8-135dd503098c", "sighting_of_ref": "indicator--ca9c5c85-5e6c-4ee1-b97e-2adae422c7a6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--290e6a97-f9f8-4ea5-b597-b1a2a4703b8c", "sighting_of_ref": "indicator--2ca59e74-a51c-4a8d-8b4e-dbe0004bed20", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e9a2bea-0f3e-4a1d-941a-be6f49118dd5", "sighting_of_ref": "indicator--45b53c5b-b6ec-49e4-9c9c-30f34dcd57fc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360fbfe4-5cef-444d-ac3a-2c9887ab4cf5", "sighting_of_ref": "indicator--12516d6f-1d45-4940-a299-865f9d1853dd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a66d113e-c7ed-4b3e-bffe-5853b6005b2e", "sighting_of_ref": "indicator--5fa94f11-fadf-4d88-a0bd-550243ebb3dc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bce188b-6abb-464b-8644-4cb4499e9526", "sighting_of_ref": "indicator--fd7c7422-ed1f-471c-a0d1-79a36852a623", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbda99bb-378b-4cdd-98d3-7e9bd0d6728e", "sighting_of_ref": "indicator--7056d148-80d7-4aab-9e20-410fc013293b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17538331-e273-492b-8cdc-b56d9c20b9d1", "sighting_of_ref": "indicator--0fc56854-e3a7-4346-9a39-fb7d53eb3511", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d86ef9c-45fb-4da7-b0a5-dfd85048da35", "sighting_of_ref": "indicator--0d11341d-71ba-463e-afe8-645c27b2b5cb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae1443d3-30cd-4832-88ea-97b2c8cd6c2e", "sighting_of_ref": "indicator--eb922d0b-d3ae-4a6d-b4d9-c4e99345d473", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef8e3bd0-ed7b-4703-8ff3-4875b4a2967f", "sighting_of_ref": "indicator--38831360-57d8-4cf8-9271-ec050e09c804", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93c9ca2-0140-4af9-a4cc-7bce14337f52", "sighting_of_ref": "indicator--a95248d7-7fa0-47b3-966c-a5d322209a79", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9349c4e-616c-4f89-ae8e-5e3497852dfe", "sighting_of_ref": "indicator--f778ddb7-d9f9-4145-bded-d07269743c95", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9b1262-76bb-424e-955d-8216334cc5f2", "sighting_of_ref": "indicator--5378bc39-450a-4a97-87e4-84f329f757c8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3836318-56f8-4613-8338-491ca946a287", "sighting_of_ref": "indicator--1a3a294e-66f9-4514-bea8-aafd955a1b9a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4512ca3-2c65-405c-bee4-d57aafb699b2", "sighting_of_ref": "indicator--d280f823-51cb-4793-9eb9-a9a7044cd755", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4adce77f-42e1-4562-9a14-aad00208ae96", "sighting_of_ref": "indicator--624195a9-4c26-43c2-9a71-45fdc0a429a6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4fa7d3f-71c2-4fba-9d42-1d72e6ac02a3", "sighting_of_ref": "indicator--a6532cda-0bc8-4768-9070-9bfa34351e4e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d3b499-06fe-4f84-ac4f-ed7364a4132b", "sighting_of_ref": "indicator--ea3984b0-8e78-4f0b-9532-bdaaad71adcb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b401b7-372c-444f-80cb-4bb44b22bc95", "sighting_of_ref": "indicator--056e5f4c-527b-4f0f-acc4-295ea4f08027", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--404e66a6-30cf-47c7-ae48-4b4612dce668", "sighting_of_ref": "indicator--6dce8fac-8181-4d18-a995-ebb0c643ff99", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195f2e69-aa8c-4504-a0a6-e6332e0ad5d7", "sighting_of_ref": "indicator--cebc4d60-e7b0-4366-ab61-51eb6e4ff43a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb2e376-a786-4e84-9e8d-95c364ea5bbd", "sighting_of_ref": "indicator--b9b54979-7e76-4f8b-96f0-2b834f7491c0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6beeb249-2e95-45fb-a489-455d7812873b", "sighting_of_ref": "indicator--bb1c766e-6b0c-4066-b403-c6ceb2276f77", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65da41cf-a79b-42b0-a2b1-53ff3f866002", "sighting_of_ref": "indicator--34fad481-8f47-4c47-aba6-67e846797d4e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc4de90-03dc-4cdd-bc4c-ecbd72fb7fad", "sighting_of_ref": "indicator--5883d787-d7db-4902-99da-a369e1ae7182", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6caad829-8d03-4566-857c-ec9bb4b32c21", "sighting_of_ref": "indicator--a95ad31c-e552-4cd4-840e-b254a16e5b85", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc27591-0283-4c93-9481-97ada9887f81", "sighting_of_ref": "indicator--f951b334-c79c-4ed6-ba15-ba561238f1be", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36098f10-a96e-405b-a963-180cfd1cafe3", "sighting_of_ref": "indicator--85293185-c98a-47c9-913e-8729c4883b50", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab810eec-d3dc-4f81-96cb-95ab801c11ee", "sighting_of_ref": "indicator--74e9ff9b-391d-49b7-ae6d-117a0f9a5a23", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273353ef-a3a3-4889-9493-8f9b094e0791", "sighting_of_ref": "indicator--03500ff5-127d-4917-8377-6b589da4b99f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8913c60a-a23b-48c6-ab9f-38f1aaa0c014", "sighting_of_ref": "indicator--6e6744b0-248b-4883-bb29-d0d0a883f7ef", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ccbfc94-6374-4500-93df-3bef0cf34875", "sighting_of_ref": "indicator--deb0c5fb-77a3-4a63-8d3d-dbf6cf058cd6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a11643-fe15-4825-a811-a012eb01cdda", "sighting_of_ref": "indicator--b3236d55-bd13-4afe-9e6e-4a4feb36e0ab", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8243340-f15b-45c6-ac79-b1b48c3aaae0", "sighting_of_ref": "indicator--b2c09572-2367-4865-b835-e352667d5404", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206d7a70-363a-4b64-a539-c630c4fe5a7d", "sighting_of_ref": "indicator--a19ec58e-2c99-4aec-b0e0-6bdc2a53510b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ca38f7-5e0e-4512-b1a4-375b4b2af1a0", "sighting_of_ref": "indicator--6b09ec42-17ae-4254-9077-330fb4888fee", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--701cfc2f-d7ea-45aa-8186-293ddb4631ec", "sighting_of_ref": "indicator--ba3215c6-5746-40cb-a7ab-4f51e170c740", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4226818d-2fdc-4fc1-9ff0-4a30fbf493fc", "sighting_of_ref": "indicator--90f96248-eb57-45d5-a17c-ced1ae9a5636", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49b8a02-6cf1-4808-81b3-677499c35f25", "sighting_of_ref": "indicator--fb3145ea-38db-426a-88cc-33c36e46f52d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609ae4f9-f6f2-421d-8f62-37d425cfe8a1", "sighting_of_ref": "indicator--22a72547-5654-4042-ae85-98a62da2b096", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03ba6350-a680-46ba-b0ce-8ad94c946fcc", "sighting_of_ref": "indicator--2300745d-b916-40c3-80b5-2183bd4c2b39", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3586cd2c-8e66-4d7a-8632-c1f8c16b2df5", "sighting_of_ref": "indicator--37ca5789-6d1d-41aa-abb6-656fe7575f31", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b354cfd1-ec32-4c33-b445-1fc396ed4880", "sighting_of_ref": "indicator--a8c70983-28fb-4336-a970-5f5b7730c66f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec9fe8d9-f537-4f70-90cf-9770cea7126d", "sighting_of_ref": "indicator--100ca52a-f678-4247-a6f6-d41a639b0bed", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d3ffb49-a1ea-4e17-a304-7826f23fae99", "sighting_of_ref": "indicator--bd7657d6-ea75-41fc-b6d1-01baacecf457", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b256ebd1-81a0-49b1-92ad-d66803a0c864", "sighting_of_ref": "indicator--51e9f54d-85c1-4177-9e4f-2bd35f5679e4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1513eb1-4ce9-47ca-9718-98e7714f17e0", "sighting_of_ref": "indicator--85d01ea8-3793-4399-b3bc-1081cb75fa6b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23599172-9fd5-4b99-af7f-789943dcb9bc", "sighting_of_ref": "indicator--c1966586-2f8b-49f6-aa80-18c126291d92", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6e085f-df26-43d9-8c5a-f40a57749e35", "sighting_of_ref": "indicator--b5964ee8-b4a2-4cf1-bdc0-e3b788a906f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5ca959-07a9-4cf6-ac1f-31f05cbeccca", "sighting_of_ref": "indicator--c40900c4-ff85-493b-a8b1-1082f73dd5a3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be83afb6-5758-4ea0-9073-2032ca789b84", "sighting_of_ref": "indicator--7e467111-ee12-4a74-a10d-20e0e66be98b", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0420920-5924-44b4-912f-fd5030e001c0", "sighting_of_ref": "indicator--912205e2-0a4b-4ead-8e2a-5180d956bcc8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--699713bb-8ddc-44d0-b3e3-27b7bd8fd38f", "sighting_of_ref": "indicator--1b2dfc29-e98c-4d84-917e-c4d808bce8fc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73fbb75-37b1-45e3-98f2-2aefeb2fadbd", "sighting_of_ref": "indicator--2b2a5d56-2369-4a32-a007-f137fa0a7b84", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56e92c2-57bb-48a1-b79b-22c46b46de66", "sighting_of_ref": "indicator--64d07f6c-bc9a-4b9c-ba87-864985177d9b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--318ae48e-0f74-4b90-9297-7ac3a3ff4ae1", "sighting_of_ref": "indicator--496cbadd-80b7-4ab5-9277-0d0a03d03e7e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aca859a-9825-443e-99cf-787327f6b775", "sighting_of_ref": "indicator--79e46c95-2209-4a92-b05a-ec296ab05dbd", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555bf66f-8473-482f-924a-11e49a1040b0", "sighting_of_ref": "indicator--13f37197-ae13-41bf-9ce1-6e146760ea42", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d1aea7-d545-4ace-8178-f50eeb899ad3", "sighting_of_ref": "indicator--fc962c5a-b765-40d8-99aa-fa60ff02927b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db06f79-a90e-4e4a-90fe-7af8011a8c12", "sighting_of_ref": "indicator--279e96da-f3f5-4a13-82d8-252bc5208890", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb090b07-b9c8-4acc-a26a-143eb5706160", "sighting_of_ref": "indicator--ef0d756e-2ff0-401a-9594-1e5bdb3f572c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdffc246-d067-4f43-910b-b4067d89b129", "sighting_of_ref": "indicator--a87bf97b-b98c-464b-999d-68b7d5451c46", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a85bbfa-faeb-4da9-9d57-4c3f3b0cf282", "sighting_of_ref": "indicator--197939dd-5cba-417d-a062-686f52c2de5e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f323d5f-c958-4f6c-b1c1-46e515438749", "sighting_of_ref": "indicator--659dd440-c3d2-4e9c-858f-c3c127da919b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--728806b1-ca34-4779-9c78-62b194516b78", "sighting_of_ref": "indicator--a56c2c04-8664-4797-b82e-1dd00dcb2acf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ccd357-2472-4cca-b05e-080420c2895f", "sighting_of_ref": "indicator--17ca6da0-3cd6-4ee6-a5bb-ffdf3b2f9e13", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49ec2b2-f320-4a43-827e-920dfebd41c0", "sighting_of_ref": "indicator--5fb20cf3-8a24-43c6-a273-6b65206e9bce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39884ddf-345e-4ad9-b963-f87f2c087ef8", "sighting_of_ref": "indicator--09445aca-9cbd-4e9e-8f11-1f6b3f75f584", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be794fae-3e79-457a-abee-25c4e15f8a62", "sighting_of_ref": "indicator--35ed7dd7-1773-4479-b245-192ce76e1d42", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb780521-822d-4c07-9821-ea93c120a64f", "sighting_of_ref": "indicator--978ccb80-3090-4ad2-a1c7-f0df784b4da7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a535e5-e48c-4ad3-a36d-a805fbd363ab", "sighting_of_ref": "indicator--f13d4388-b5e6-4484-bdcb-4789d37ec4dc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f49daf-259f-4c54-aa76-2a4764ee0d9f", "sighting_of_ref": "indicator--d8f70972-64a8-48d6-a171-1bd0f2f806aa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e41f86-193b-4b6a-b072-e03419a75338", "sighting_of_ref": "indicator--010366f0-863f-47ea-b6bf-0dc4c0a99133", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7579224-777c-4b74-baf9-b921182b1654", "sighting_of_ref": "indicator--0bc502fd-76fe-4ba2-944f-aa0e7520b966", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd81e72-6133-49e8-9cec-b6631730b5d1", "sighting_of_ref": "indicator--f0da7d39-7f2b-4971-8751-039bfab927c2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a830d767-cb12-44a3-a6a2-51af873455c4", "sighting_of_ref": "indicator--d110db83-ddf5-4b57-b257-2981138e92ee", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d0f71e-af4e-4be1-a734-573d2b993180", "sighting_of_ref": "indicator--d110db83-ddf5-4b57-b257-2981138e92ee", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c077989-2a38-44e2-bdc1-9d60cd2fd64c", "sighting_of_ref": "indicator--d110db83-ddf5-4b57-b257-2981138e92ee", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccecafac-4739-48ed-9bc2-060a54faf312", "sighting_of_ref": "indicator--525ec90b-85dd-4df0-bba0-386e298362c2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54ecf1b-8b4f-47ac-aff1-3ea5b088babb", "sighting_of_ref": "indicator--525ec90b-85dd-4df0-bba0-386e298362c2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d37e28e0-5e08-4b2a-9a57-63af375c2fe3", "sighting_of_ref": "indicator--525ec90b-85dd-4df0-bba0-386e298362c2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a4e279-5cad-4fc5-9a33-8f17ae7d6717", "sighting_of_ref": "indicator--ec0f8fd6-7ac2-4109-92ab-d0f57a3a62f4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7975659-c0e9-443a-aae5-4df70d71c33e", "sighting_of_ref": "indicator--ec0f8fd6-7ac2-4109-92ab-d0f57a3a62f4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2130b3b4-26b7-4be9-8c07-f010bd49a041", "sighting_of_ref": "indicator--ec0f8fd6-7ac2-4109-92ab-d0f57a3a62f4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a8ea72-9650-40e7-b770-4d5492410a7b", "sighting_of_ref": "indicator--3b90eda3-f197-4623-845e-bdc1a134db44", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--280131ed-d335-400e-9798-662ba389de88", "sighting_of_ref": "indicator--3b90eda3-f197-4623-845e-bdc1a134db44", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634ca4fe-61cc-45cf-b253-531d6a328750", "sighting_of_ref": "indicator--3b90eda3-f197-4623-845e-bdc1a134db44", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd00f27c-58e0-45a2-9199-aa99acb4728a", "sighting_of_ref": "indicator--ef7fce0f-11df-4755-94a3-6acf4ab34347", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab95f37b-9460-4ada-87b9-234e94f7ccf1", "sighting_of_ref": "indicator--f9c5b43b-6e60-474e-b829-b28e859624b0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f983659e-1156-4510-85d6-daa81a91c306", "sighting_of_ref": "indicator--f9c5b43b-6e60-474e-b829-b28e859624b0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08e81ed-74e7-4509-b498-6a81c6a51f67", "sighting_of_ref": "indicator--f9c5b43b-6e60-474e-b829-b28e859624b0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da1b0bd-ad13-44b0-9fc0-5ca121d339c4", "sighting_of_ref": "indicator--038e03ac-41b3-4c33-b323-5ec415fdeb19", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba9768f-8a24-4916-989d-15eeb96e4a19", "sighting_of_ref": "indicator--a6d0d759-b4ba-4907-b76c-a46b63f8153a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--122675e6-3250-4e82-890e-a1d5b4720b43", "sighting_of_ref": "indicator--680ec136-be41-4e54-9e02-68a61bf530bd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77de3c8c-9b59-4fde-8bf3-4c91ec7321f9", "sighting_of_ref": "indicator--18184728-2d0f-43d1-8f28-4f4a6e954afb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3f24b9-374e-46bd-bfe7-7deba25d8660", "sighting_of_ref": "indicator--3e63b4e8-31e5-46b7-8557-d098359012c7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc068b8b-4af0-44fe-a2a0-73442087676d", "sighting_of_ref": "indicator--cb7347e0-bf16-4031-9470-e7abc8063489", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--439769b7-f0ca-47d9-8ee4-860eab911f99", "sighting_of_ref": "indicator--fee13b06-4499-4fa6-966d-4abd251a3021", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a6c643-813f-4860-b96f-a8c290a563b8", "sighting_of_ref": "indicator--afe89e98-f434-4fea-9a51-5a23fbb1268a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a9e324-2276-4047-8825-c6d99f64c20d", "sighting_of_ref": "indicator--afe89e98-f434-4fea-9a51-5a23fbb1268a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d6a75c5-3583-4f1f-9330-24b3b05cee3f", "sighting_of_ref": "indicator--39efe9dd-e12b-4c50-aa63-21a605525641", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2aff5c-9e84-47c4-b230-72d88dbda678", "sighting_of_ref": "indicator--dec6f242-ff90-4870-a3ba-e5286424adcd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4966650e-d71d-49eb-b3cd-d2c9f3ce866c", "sighting_of_ref": "indicator--dec6f242-ff90-4870-a3ba-e5286424adcd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c580fa1f-1df6-492c-a6de-2b7926871dc7", "sighting_of_ref": "indicator--d2ea8566-4d65-4d3c-981a-38e71f1387ba", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c23112-0d96-4761-ba4e-f6d2bbd03173", "sighting_of_ref": "indicator--27cb6a4b-e69f-468d-ac63-5b16e3facdc8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f8691e-a7f8-469a-ad32-e8d7b18a6f78", "sighting_of_ref": "indicator--cce436e2-ba1e-42fa-8adf-f0a72b2f975b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d91d61-81e5-46a9-a586-f9f5bbc76523", "sighting_of_ref": "indicator--432c963a-25be-406a-987c-696e9ddb8b26", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b401bc45-b249-4209-ae72-561e6cd8fe1c", "sighting_of_ref": "indicator--903a4573-15ae-41de-b769-64c276d1da83", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69681c40-fc6e-4328-8b5a-f029d544ea70", "sighting_of_ref": "indicator--903a4573-15ae-41de-b769-64c276d1da83", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8faed3-7244-4d9b-8995-2bb14800db2e", "sighting_of_ref": "indicator--27823ac2-8dd0-4360-a89e-a903fa03fede", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b38f166-e9b5-4446-b282-0ca04f92309c", "sighting_of_ref": "indicator--c3c407ee-486f-4fbd-b887-8c9a319c2942", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1decdba-4028-4444-abea-a18da7811a34", "sighting_of_ref": "indicator--470d6aa2-00d9-40ca-b467-fd80962c3f4d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2759f91-e7e5-45e3-b80f-933ec32904d4", "sighting_of_ref": "indicator--8490416b-5c52-4d0c-b04c-04ae80a84419", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--608d9134-3896-4840-8e1b-2982e488fb6e", "sighting_of_ref": "indicator--a458adce-d380-4d3d-b968-b2a577ddd41f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31383abb-c978-46a0-9930-6101d0abb2b8", "sighting_of_ref": "indicator--eb01b24c-118b-448e-b293-cdd924817831", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4007a8b-2bc9-4e50-a1db-e615bf480e2b", "sighting_of_ref": "indicator--eb01b24c-118b-448e-b293-cdd924817831", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd3b43e-5e63-4032-b491-1f5fa17c22f8", "sighting_of_ref": "indicator--c1538aa5-ccc8-4bf2-99ef-f22129775c3d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17159c6f-b08b-48bb-a42e-f145059ee361", "sighting_of_ref": "indicator--4ed27766-70dd-4ae4-add2-490b0524c564", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--807eb45a-5b19-45fe-9ef4-9fa4efd206dd", "sighting_of_ref": "indicator--4ed27766-70dd-4ae4-add2-490b0524c564", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04107f14-1c4d-4715-9fbe-5e02f09db2af", "sighting_of_ref": "indicator--de349e2d-717a-4d61-9c6a-4ea261b80bdc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e734c7-3adf-4a87-80ae-bcd4a98116bc", "sighting_of_ref": "indicator--dba1f2b2-d975-48be-b0e8-bb3f43ba0fdb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1401895c-064d-43bb-b821-05e44eb753ae", "sighting_of_ref": "indicator--dba1f2b2-d975-48be-b0e8-bb3f43ba0fdb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0cddf37-3a3e-491a-8b74-107b75ac61c1", "sighting_of_ref": "indicator--dba1f2b2-d975-48be-b0e8-bb3f43ba0fdb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995aab0b-f84a-47f0-887b-7b9f1b911351", "sighting_of_ref": "indicator--f535e0a2-d1ac-438b-91dd-d17888e4f22f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a51a1a4f-098d-4417-8aac-3a45423bfc50", "sighting_of_ref": "indicator--f9b9dab6-3628-447e-863c-f38e5662fa73", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feffe273-d0ba-4a7a-907a-bb1eb391ca64", "sighting_of_ref": "indicator--f9b9dab6-3628-447e-863c-f38e5662fa73", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70901939-7f47-48df-a553-1a6075f22f3f", "sighting_of_ref": "indicator--f9b9dab6-3628-447e-863c-f38e5662fa73", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0525c4c3-b4b7-46c6-9660-0fc971ed1c14", "sighting_of_ref": "indicator--687f1f3b-c0c8-4243-8b3d-69cecb16b859", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a048e793-22e2-4268-9d62-0dcf82e01b95", "sighting_of_ref": "indicator--6ea60ea9-bd06-4d8e-8d56-ae61e72c3d30", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfcc503e-5a56-4f22-818d-ca991df1975e", "sighting_of_ref": "indicator--6ea60ea9-bd06-4d8e-8d56-ae61e72c3d30", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b0d853-ecfe-459d-ae93-98d461abbced", "sighting_of_ref": "indicator--6ea60ea9-bd06-4d8e-8d56-ae61e72c3d30", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f19432b-d4d2-43fb-9900-0e2e6942438b", "sighting_of_ref": "indicator--1e4a9152-aecb-40ab-a657-4efaa97cf854", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94538bd4-da9b-4b97-aea6-7e61cc84b50b", "sighting_of_ref": "indicator--59e0f280-7750-4c6a-9ebb-14ed3a337c72", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab79d99e-7609-4d81-8899-33f65fd3b5a6", "sighting_of_ref": "indicator--59e0f280-7750-4c6a-9ebb-14ed3a337c72", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909aedc6-db11-48db-984e-c75f891dba9e", "sighting_of_ref": "indicator--59e0f280-7750-4c6a-9ebb-14ed3a337c72", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee70f44-6926-465f-83d0-cc2f24950373", "sighting_of_ref": "indicator--2e52652e-51c8-45b4-ad3b-94ce3d6c705b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c4beaa-7cb3-4590-89aa-19d2a06061ba", "sighting_of_ref": "indicator--100dae50-302f-4e12-9d66-8a9f75c4da38", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c86575-389b-4e89-a620-be08873e3fdd", "sighting_of_ref": "indicator--d803369c-0008-46d1-ac83-5a242b80b445", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dede27e9-4bb8-4bf9-9b6b-a2867f04c665", "sighting_of_ref": "indicator--d803369c-0008-46d1-ac83-5a242b80b445", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975b9161-5d6d-4cb2-a226-4cb05454e361", "sighting_of_ref": "indicator--d803369c-0008-46d1-ac83-5a242b80b445", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e49b603-192f-409d-9a57-5b28c18b9941", "sighting_of_ref": "indicator--54d01c25-392b-430c-a234-9aedcdb4722f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e0b8748-2bdf-4853-8b40-227c8e8a3913", "sighting_of_ref": "indicator--54d01c25-392b-430c-a234-9aedcdb4722f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b74a67-2ab2-4a31-8e23-8c5e00a02b0b", "sighting_of_ref": "indicator--54d01c25-392b-430c-a234-9aedcdb4722f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b891491-7ba5-4e64-b9ea-1bc92ea17327", "sighting_of_ref": "indicator--0c3e583f-fc58-4864-a160-67ae0c74a44e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb4b546-f367-449b-ac03-b168947a0948", "sighting_of_ref": "indicator--0c3e583f-fc58-4864-a160-67ae0c74a44e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a512021e-d9cf-457d-a02d-6f0e700b0549", "sighting_of_ref": "indicator--0c3e583f-fc58-4864-a160-67ae0c74a44e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--510c5c83-8e8b-4d84-a6a1-e331296ebd52", "sighting_of_ref": "indicator--5215dad5-49e7-4b2f-949b-e8214833ac4a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ffa764-237b-4da2-811f-399c341e8030", "sighting_of_ref": "indicator--5215dad5-49e7-4b2f-949b-e8214833ac4a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--332b7d00-b9b8-409b-9ddb-49ac042a9079", "sighting_of_ref": "indicator--5215dad5-49e7-4b2f-949b-e8214833ac4a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1722ecb-e62e-4894-880f-bfe8e51ff95c", "sighting_of_ref": "indicator--ac6b1c1a-f17b-47fb-8e9d-d7068e270049", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--618e3621-c175-4864-89f9-33efce1551a4", "sighting_of_ref": "indicator--ac6b1c1a-f17b-47fb-8e9d-d7068e270049", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df214948-26ba-4d20-8927-9a982113773b", "sighting_of_ref": "indicator--ac6b1c1a-f17b-47fb-8e9d-d7068e270049", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4e5bef-144a-427e-9ae9-fcce926dd7e6", "sighting_of_ref": "indicator--383baaed-dc32-48d3-8c59-3a63b23e21be", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7896acb8-0b23-4e4f-818f-6cbdd664abf3", "sighting_of_ref": "indicator--cb0e390e-a752-4bde-9f1e-cf7bb5a46e1b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--576fcc60-d397-4db6-8db5-5a05be85f32c", "sighting_of_ref": "indicator--cb0e390e-a752-4bde-9f1e-cf7bb5a46e1b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c64f581-51f1-4e7d-b695-677c1ac5cddb", "sighting_of_ref": "indicator--cb0e390e-a752-4bde-9f1e-cf7bb5a46e1b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83003b7f-b17c-48a6-8a22-0ed64338140f", "sighting_of_ref": "indicator--22eac6ce-e884-402d-a8ae-a204488f80b4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c94def-74a5-463f-bec7-a1da01603e32", "sighting_of_ref": "indicator--22eac6ce-e884-402d-a8ae-a204488f80b4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154ec5a8-f266-47e1-b9a4-ef80273d480e", "sighting_of_ref": "indicator--22eac6ce-e884-402d-a8ae-a204488f80b4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--121c8806-3916-4e2b-8b97-ad50543156a7", "sighting_of_ref": "indicator--c034bab7-e253-472e-a4a6-19886f1c4dea", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c4bd8b-a570-4953-ac0a-9a3ec86c5b25", "sighting_of_ref": "indicator--c034bab7-e253-472e-a4a6-19886f1c4dea", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b50950-40fb-4bd6-ba21-e4e7898f0dc8", "sighting_of_ref": "indicator--c034bab7-e253-472e-a4a6-19886f1c4dea", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb16883-d624-4902-94c7-c89a6fcf8a5c", "sighting_of_ref": "indicator--16408478-a915-4733-a75e-1ed124c69ba6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b59c80-b2db-4395-abd3-f3b1afaa73a3", "sighting_of_ref": "indicator--16408478-a915-4733-a75e-1ed124c69ba6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--230a6ba3-8bd9-42eb-8699-02ee0d67df9e", "sighting_of_ref": "indicator--16408478-a915-4733-a75e-1ed124c69ba6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01bd1d3-f536-479e-bc19-cefc79c29836", "sighting_of_ref": "indicator--010bd205-e2c9-4ae4-9c26-6fe431cd1a64", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7f04e8-1c9e-4f4f-8f15-601027715ecb", "sighting_of_ref": "indicator--a357aacd-c7f5-490f-8ddb-ebbdb3745a54", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b24e00-45dd-4ce2-96f9-bc9546aaef76", "sighting_of_ref": "indicator--a357aacd-c7f5-490f-8ddb-ebbdb3745a54", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f3038f-d491-41f2-852e-dee5959ad618", "sighting_of_ref": "indicator--a357aacd-c7f5-490f-8ddb-ebbdb3745a54", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b670f0c5-8961-428d-bee1-2ef1f9b1cbb4", "sighting_of_ref": "indicator--b4893322-a587-4809-8fe4-15922631572e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c04ccc3b-bfc5-4cb2-a7a3-ba7cbf167022", "sighting_of_ref": "indicator--0ad8efd4-4853-49a1-a8d0-a5586af9873c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5013bc2b-5868-4de8-bfe1-a89becca29e8", "sighting_of_ref": "indicator--0ad8efd4-4853-49a1-a8d0-a5586af9873c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d06886e-d265-442e-a7fe-9f18464172e4", "sighting_of_ref": "indicator--0ad8efd4-4853-49a1-a8d0-a5586af9873c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c2acb10-41ba-4e1d-88b3-9dbd5e7614e0", "sighting_of_ref": "indicator--af4c4f0b-a02e-4ff9-959c-81b614263506", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1815fd8e-6337-4082-9877-f5b1faba34e1", "sighting_of_ref": "indicator--af4c4f0b-a02e-4ff9-959c-81b614263506", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25eccef2-e04c-4cfd-bc27-d79177532d84", "sighting_of_ref": "indicator--af4c4f0b-a02e-4ff9-959c-81b614263506", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce8311f-48c3-4747-a023-945a11469f20", "sighting_of_ref": "indicator--e6475c1a-f065-4405-a1da-0d771e41d20a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3584b1a7-79b0-4d28-9954-dd7af594f645", "sighting_of_ref": "indicator--e6475c1a-f065-4405-a1da-0d771e41d20a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9429cd85-ff59-4c66-b8ff-4d9ddfcbad78", "sighting_of_ref": "indicator--e6475c1a-f065-4405-a1da-0d771e41d20a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6969dab5-5b07-49d9-b62f-bb0d247e868c", "sighting_of_ref": "indicator--038a32f6-db0b-4a7c-8149-a9fcb5cffcad", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c63c2ddd-0580-455e-a0fb-2c5e63b876da", "sighting_of_ref": "indicator--038a32f6-db0b-4a7c-8149-a9fcb5cffcad", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96278fc9-8b99-4a9b-973e-6f382e4092bc", "sighting_of_ref": "indicator--038a32f6-db0b-4a7c-8149-a9fcb5cffcad", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c30911-951a-4d7f-994d-d286a79ea0ca", "sighting_of_ref": "indicator--0a200be5-32fb-4c2b-a3f6-0b1f5b7415da", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f33086-0d49-4a74-ae3b-ca42069c64e9", "sighting_of_ref": "indicator--09c10d0c-71bc-4048-8e7f-64b7db1e8ecc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bedc792-602d-4425-b2c7-793f4f352009", "sighting_of_ref": "indicator--09c10d0c-71bc-4048-8e7f-64b7db1e8ecc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654adad0-8f0c-40e7-b567-ab7012c4ced1", "sighting_of_ref": "indicator--09c10d0c-71bc-4048-8e7f-64b7db1e8ecc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd27a0e9-e584-4b2f-b965-65795dc7b315", "sighting_of_ref": "indicator--09c10d0c-71bc-4048-8e7f-64b7db1e8ecc", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1888ccd-f3d5-40ff-afaf-b974b92be20f", "sighting_of_ref": "indicator--09c10d0c-71bc-4048-8e7f-64b7db1e8ecc", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60872b3a-6ab8-40ad-9f7b-005cd60df8ab", "sighting_of_ref": "indicator--3a338555-e888-4775-be99-8db150512b73", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--675a7465-6e49-4f0b-8f0b-fee3f8eeb337", "sighting_of_ref": "indicator--3a338555-e888-4775-be99-8db150512b73", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62fa6d61-c25a-4ead-9498-f0eecf053d52", "sighting_of_ref": "indicator--3a338555-e888-4775-be99-8db150512b73", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43d633a-1a02-48ef-810a-8d64c94106af", "sighting_of_ref": "indicator--bdac0f61-e001-4057-bfc5-3d0956bf5c56", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91510cd-72e1-4ddc-be87-20caca4a09fd", "sighting_of_ref": "indicator--bdac0f61-e001-4057-bfc5-3d0956bf5c56", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f919a9ea-829a-4c11-9f3a-470668112edb", "sighting_of_ref": "indicator--bdac0f61-e001-4057-bfc5-3d0956bf5c56", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c22c51-b9c5-450d-acc9-d466ff65a4cf", "sighting_of_ref": "indicator--bdac0f61-e001-4057-bfc5-3d0956bf5c56", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f6fb1e-e74d-4fec-85e8-86a73fcc531f", "sighting_of_ref": "indicator--b7be6143-5ae9-4a5e-b5cd-12fe6ca24e11", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc2ce5ae-c9f8-46b7-959d-80380854e646", "sighting_of_ref": "indicator--b7be6143-5ae9-4a5e-b5cd-12fe6ca24e11", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce34fc8-647c-4993-899f-c5cb3f6cae7c", "sighting_of_ref": "indicator--b7be6143-5ae9-4a5e-b5cd-12fe6ca24e11", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2e003e-fbd5-47fe-8aec-3f5012bd3215", "sighting_of_ref": "indicator--b7be6143-5ae9-4a5e-b5cd-12fe6ca24e11", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0757e65-9322-4458-96fd-97c24800430d", "sighting_of_ref": "indicator--3e71776e-c627-41d5-91bb-ddd974fd1553", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--105aa728-79eb-4411-afce-405a0b23c926", "sighting_of_ref": "indicator--3e71776e-c627-41d5-91bb-ddd974fd1553", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--312aa396-8746-4af3-9411-1cf713b334dc", "sighting_of_ref": "indicator--3e71776e-c627-41d5-91bb-ddd974fd1553", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c16c9a-0886-4879-9ab0-d31c3728aec8", "sighting_of_ref": "indicator--3e71776e-c627-41d5-91bb-ddd974fd1553", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e9b4da-59cb-4a3e-85a9-600404b18a3b", "sighting_of_ref": "indicator--fec93ba4-0a86-480b-a508-d4bdac3b3ab1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e1ed23-53e3-4003-b368-693f00643aef", "sighting_of_ref": "indicator--fec93ba4-0a86-480b-a508-d4bdac3b3ab1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66dc9702-82d2-401e-9e28-152db2edfa5b", "sighting_of_ref": "indicator--fec93ba4-0a86-480b-a508-d4bdac3b3ab1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96619174-35d5-4772-a60b-8968bdf347cd", "sighting_of_ref": "indicator--fec93ba4-0a86-480b-a508-d4bdac3b3ab1", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c6ad79d-4dc9-450b-b7cd-c39e6fddd47b", "sighting_of_ref": "indicator--5498fe35-57b5-4d85-b45a-c6b343359ca6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce00dce3-a9bb-4dca-ba00-5185cf4a6c9b", "sighting_of_ref": "indicator--5498fe35-57b5-4d85-b45a-c6b343359ca6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aefd3ae-9322-488b-899e-11b23d0f28a8", "sighting_of_ref": "indicator--5498fe35-57b5-4d85-b45a-c6b343359ca6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2247bbc-8e3a-41a0-92bd-ef96dac3e3ce", "sighting_of_ref": "indicator--5498fe35-57b5-4d85-b45a-c6b343359ca6", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4aa9dad-4bca-4e6d-83ac-9a87d19aa177", "sighting_of_ref": "indicator--737e33f6-ee15-4f65-86e0-f1cfb63c760f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a0ec2e-f41e-43ba-8dbc-330b013aa2f2", "sighting_of_ref": "indicator--eec9efb4-6053-4533-9cd5-23b9628f014e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4945a396-20f5-40a5-a509-6af154fb4f38", "sighting_of_ref": "indicator--eec9efb4-6053-4533-9cd5-23b9628f014e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10904df1-d694-4225-8a0c-718bdbfbba89", "sighting_of_ref": "indicator--2597d0ac-865a-4efc-9268-87dcecbcbb90", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c13283e-f0c5-4df6-be50-f9b4d6545faf", "sighting_of_ref": "indicator--d95d0616-feea-4014-af83-b6a83c0b8905", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e3a11fe-6381-4383-9fce-f55d025e7ca1", "sighting_of_ref": "indicator--d95d0616-feea-4014-af83-b6a83c0b8905", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946b5b18-23be-4374-b6b7-2118f5b84d85", "sighting_of_ref": "indicator--d95d0616-feea-4014-af83-b6a83c0b8905", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ade51e3-134f-4669-a464-d69eb0ead7ff", "sighting_of_ref": "indicator--5e60f3c5-b529-483e-9346-f333d23f1063", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4b920c-9c92-453f-8984-42d2e0550246", "sighting_of_ref": "indicator--5e60f3c5-b529-483e-9346-f333d23f1063", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1dba91-0328-4128-bc9b-1b17422e0c36", "sighting_of_ref": "indicator--5e60f3c5-b529-483e-9346-f333d23f1063", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--715c4730-74a2-4598-b457-baab0230faec", "sighting_of_ref": "indicator--54ee4fc5-2b87-4cc0-bd8f-859955207cdc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5c5b23-3597-4eab-89b2-7368fb1d1783", "sighting_of_ref": "indicator--54ee4fc5-2b87-4cc0-bd8f-859955207cdc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1e805d-bd41-4a6b-8242-657657423379", "sighting_of_ref": "indicator--f4a8494b-4a58-4152-982f-5e6970e9ece7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b5d109-f148-459d-938a-e886548339fa", "sighting_of_ref": "indicator--ca94952f-5d7c-4df8-9f4f-9d9a1e86282d", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c2e259b-18e9-4a45-8e64-9b3673b8fcce", "sighting_of_ref": "indicator--487e2e8e-a46f-4680-a408-e7ca995e2547", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8bfa12e-180b-41c1-b6a3-90302b65b3f1", "sighting_of_ref": "indicator--bf2825bb-5884-4d15-9990-dceaca37f317", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c2efd9-b26f-4c70-bb11-04ca67f40b75", "sighting_of_ref": "indicator--36b66c86-ba04-402e-b99e-47d05c3eded9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2d3293-9618-4ab2-8725-25425a8cd44d", "sighting_of_ref": "indicator--36b66c86-ba04-402e-b99e-47d05c3eded9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4907eac3-ece6-4423-9471-0ef34d7a6e35", "sighting_of_ref": "indicator--36b66c86-ba04-402e-b99e-47d05c3eded9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ccd6d4b-92fa-46b6-a438-1014a53e9714", "sighting_of_ref": "indicator--d2e6d67b-130b-4c9f-a480-82589d2c6e4c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a425ee-0206-4a97-9495-c778d759c671", "sighting_of_ref": "indicator--79eb9520-dfbb-4fed-827d-86d42565d2a2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3157c87-32d0-43ff-8b20-bdd36085c7a6", "sighting_of_ref": "indicator--629d5d9b-81bf-4848-a642-88284ab56804", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d36674-df14-432e-bb7e-223123f0e6c2", "sighting_of_ref": "indicator--fa82dc01-e49c-4f29-988c-a236579b945c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef4d8351-3ef8-41b9-bb3c-a6900fe31244", "sighting_of_ref": "indicator--8dd79b3a-1ac1-4e24-a147-7deaa6fe0b73", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da655d71-e5f1-404c-983e-d03656088bd2", "sighting_of_ref": "indicator--590bd611-d3ad-4971-85e4-ecd573b82c03", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8877538a-1f5a-4027-859e-13a4d97cb53e", "sighting_of_ref": "indicator--b759254c-4a7e-460a-a08c-3166d38633b1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c34f09-92e4-4eec-8273-4408fce6498f", "sighting_of_ref": "indicator--2ceeff82-ab43-4c95-8541-1b2989b5fdaf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c0ce6fb-411d-4014-8169-fe86a3abe8d5", "sighting_of_ref": "indicator--6d28959f-896b-44ae-958a-486c29813458", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197294dd-0cc5-4d6f-ae0d-b4d171394b0c", "sighting_of_ref": "indicator--e442ed11-f61b-48d7-ae0c-81c5f82b94da", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83ef99d6-c342-45f7-a77f-38e199225559", "sighting_of_ref": "indicator--330da5f1-07b5-425d-9b49-74f031ede9c4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f341a521-3403-4060-87cb-6cd0238a7d78", "sighting_of_ref": "indicator--330da5f1-07b5-425d-9b49-74f031ede9c4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9a8429-a02e-41ba-a0ce-6f7450068c90", "sighting_of_ref": "indicator--330da5f1-07b5-425d-9b49-74f031ede9c4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--123f5811-6b78-4c7f-9e67-81a8f9396a02", "sighting_of_ref": "indicator--5f56006e-b71e-4271-9fca-17e317af8c48", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b06c65f-9a73-4cf7-8a08-2b77d8ae7994", "sighting_of_ref": "indicator--5f56006e-b71e-4271-9fca-17e317af8c48", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667902c6-3c9f-47a6-9180-241be6e73c91", "sighting_of_ref": "indicator--b4cbfc12-2e54-4a83-94b6-3fb1cc3d5bb9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ac74bf-ab40-40a5-9e09-abefce178642", "sighting_of_ref": "indicator--305b4692-1000-4317-a91f-9ccd7c28031b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b02e5ff2-c9a6-4493-bad6-721d72856e3e", "sighting_of_ref": "indicator--a60fe73d-3908-4bff-946b-7c31c8dbdeaf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--403803b0-6e36-466d-8465-60f4ddfa87ee", "sighting_of_ref": "indicator--d1685507-54cd-4139-aaf3-ce5eba6e874f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1568a63f-f71d-409a-8b1b-7b6ed15196a5", "sighting_of_ref": "indicator--cb22a2e8-9177-4a12-9ad2-c7e974134537", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58397d4e-be0f-49aa-a014-f1bcef384e5c", "sighting_of_ref": "indicator--ba358147-0e67-4882-852d-47f5144a87da", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97565963-9c79-4317-8dbf-0220ad3ab623", "sighting_of_ref": "indicator--aebae829-60b6-4de2-8b89-f6b1fedb3e11", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38cd9c0a-4478-4159-9db7-e42139566505", "sighting_of_ref": "indicator--aebae829-60b6-4de2-8b89-f6b1fedb3e11", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041f9777-848e-4356-b1ee-e02fa1987492", "sighting_of_ref": "indicator--4a76314e-c0c0-4955-a535-f62ac5f62387", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebcd612-b127-4c80-88a7-bb38fb312389", "sighting_of_ref": "indicator--4a76314e-c0c0-4955-a535-f62ac5f62387", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4faa98-8b13-4bee-b006-223e0fd0de39", "sighting_of_ref": "indicator--f3ec8298-81a7-4366-973d-c2045a835cdc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a221f85-8a32-4fce-92c9-1ee1324b5add", "sighting_of_ref": "indicator--f3ec8298-81a7-4366-973d-c2045a835cdc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ef878f-3050-4161-b4e7-4628716256e0", "sighting_of_ref": "indicator--4d92627a-51e8-495f-9b5c-10aa8efb40df", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d47ad046-4d35-47dc-a762-6f5c2b4a49bb", "sighting_of_ref": "indicator--4d92627a-51e8-495f-9b5c-10aa8efb40df", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864c5829-2640-4344-936e-a63b7202ece2", "sighting_of_ref": "indicator--3c3ea032-aaf1-4633-89d6-1043968f5bb3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89805f6-fc35-468d-8167-d0c2bfcc35d9", "sighting_of_ref": "indicator--5a9820a8-6b62-4f7c-a4ba-d32d77bccb05", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caceccfc-bd70-44b5-8b58-fcacb699d95c", "sighting_of_ref": "indicator--5a9820a8-6b62-4f7c-a4ba-d32d77bccb05", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301c86c6-5215-4d8a-b1d1-359186556108", "sighting_of_ref": "indicator--3688c018-3260-43c1-be43-d8ab38e407d3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561c6e2d-2045-485b-acbc-fb4193ed3812", "sighting_of_ref": "indicator--d54c93f6-8b15-4d55-b20e-79924a8693ca", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf16756-f24f-482d-bbea-f7942b4722c0", "sighting_of_ref": "indicator--06a60d8d-16e5-40da-8ede-9f6f1ab42848", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc5b7420-0f24-44c2-b8c5-6b223a1d0149", "sighting_of_ref": "indicator--3fcbf3ca-46c2-4844-9297-703080bb0dce", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c14d27d-ce4e-4f87-a7be-a62d1d05c2ee", "sighting_of_ref": "indicator--4a3a3f03-838f-46fb-b65e-4f9edf1cbbd7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec568d3-71e0-42a4-9e3a-e7f561a7eca4", "sighting_of_ref": "indicator--987ee020-9762-4c38-8793-89c2564f992e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--582657f4-c0ae-48b7-b5da-50c2b2e5deb0", "sighting_of_ref": "indicator--eea7a71c-883d-4789-a2a7-c6e5bab11558", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c6c363f-877d-4afa-b62a-d20decd5fa09", "sighting_of_ref": "indicator--eea7a71c-883d-4789-a2a7-c6e5bab11558", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33404eaa-8d6c-4268-9885-189e5e0865f6", "sighting_of_ref": "indicator--c8b86755-301c-45da-af87-11262fe6a4a7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31dd2a86-5713-41c2-b873-233c1db78a9e", "sighting_of_ref": "indicator--dc107a4a-df68-49cf-a75f-e9eb9e52a7f4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b4e3264-43a9-4716-89d7-146121909aa4", "sighting_of_ref": "indicator--5b6cc73f-cd1f-4cf2-94ba-0e15123f6746", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72612f9b-b562-40e5-bb69-3fb2cff68466", "sighting_of_ref": "indicator--c75448d5-009f-41b0-8d42-0992a9744fc6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77138e6d-f08c-4a4e-95f8-35ad9fa913f5", "sighting_of_ref": "indicator--4beb3525-e7c4-4c07-9f8c-8e60ba758631", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58624c35-a9d3-47a6-80df-6f81de7918a7", "sighting_of_ref": "indicator--c7da6957-6d65-4c5e-83a0-bc6c5bacbaa3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc392969-ef1c-461a-862d-e0cba530ada0", "sighting_of_ref": "indicator--80c98e5a-7559-43af-a657-1dc0c1490c27", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbabd6b1-602f-4fe8-a6bc-5aadf7823428", "sighting_of_ref": "indicator--945c5ff6-5a8a-4aeb-bdc6-621faf1e976a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28c765e-84ef-42e6-a7ec-6453bf1468bc", "sighting_of_ref": "indicator--2bb8337c-cd53-4ec4-b426-9ce470749592", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a50aeb9-2325-47bd-9c69-ac579f3ed182", "sighting_of_ref": "indicator--2bb8337c-cd53-4ec4-b426-9ce470749592", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--519fcc61-b84d-47b7-a4cf-737bedb8024f", "sighting_of_ref": "indicator--1fee3a98-a298-42de-af4f-55dda610491f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fbaa870-df0f-4c33-9af9-81e1242dea07", "sighting_of_ref": "indicator--8e1e1ad1-2388-4e07-8cc4-0a2a6211dc5d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a951cd91-f3ca-4f2f-8ac7-26c04f28d7d3", "sighting_of_ref": "indicator--229bb897-580a-4582-afdc-8ac185b62dbb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edbea671-958a-41b0-8829-5b98374396b1", "sighting_of_ref": "indicator--fd94fd16-2eeb-4d12-b873-9da43804f992", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9f37f2-7ea9-432e-ab1c-2c17816854b0", "sighting_of_ref": "indicator--6b4b38de-5220-4d51-b217-8cfa9bd28d43", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e38a46-d0d3-4cf9-b1c6-0c1d3ff416b3", "sighting_of_ref": "indicator--95ab1410-a511-419e-9ec9-3af4dc6a3762", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--283749c4-5828-43a2-9bc0-48f5be63c4f3", "sighting_of_ref": "indicator--95ab1410-a511-419e-9ec9-3af4dc6a3762", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3c9ac8-84c1-486a-a44b-cf31ea0201ca", "sighting_of_ref": "indicator--95ab1410-a511-419e-9ec9-3af4dc6a3762", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ea92fd-8145-4405-8a7d-b2fcf6454d82", "sighting_of_ref": "indicator--1def1632-4aa3-48ef-9a00-69464034562c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6b326f-127c-4b99-baf0-cadf639489a8", "sighting_of_ref": "indicator--cae0e66e-dae3-4f06-89a3-8e1a3a248429", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bea7a62d-4897-464a-87f7-d5dd3965e947", "sighting_of_ref": "indicator--cae0e66e-dae3-4f06-89a3-8e1a3a248429", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9706db8f-89f8-4434-bdf3-49e31245b887", "sighting_of_ref": "indicator--46e2ec61-9f25-4b13-8e3b-3386ea5ba5bd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c54368-215d-4ad6-8d03-f445e315a92f", "sighting_of_ref": "indicator--bd31a9d8-01c9-4d0c-9f60-a250b1155635", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4654e97c-9ce1-4027-b741-d1e463697b0a", "sighting_of_ref": "indicator--f7a7af37-dfad-4dd5-aa52-f0a6a7c2e62a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f931da0-f70f-482d-92e7-fb13f1e2ffe9", "sighting_of_ref": "indicator--49717bce-82b7-444e-97e4-948a8453c526", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ffe9354-3938-49de-aa60-06f588be1bc4", "sighting_of_ref": "indicator--cf1372e1-a7ad-48cb-8123-29c99e335328", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ddae56a-c305-48ed-a031-8fcc82a57ee1", "sighting_of_ref": "indicator--cf1372e1-a7ad-48cb-8123-29c99e335328", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1de5972-165b-4df0-8725-0b13f017d6a4", "sighting_of_ref": "indicator--12b23636-ecbd-473f-b79c-3e5238714a7e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7344c53d-009a-4131-ab63-e0fb06f51127", "sighting_of_ref": "indicator--d322bba4-a032-47a6-b810-b5daec0e128e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f26b03-a151-4c79-9e1d-9f790d98c8c1", "sighting_of_ref": "indicator--287f3380-d1b1-4418-bec4-0cb4c52ad4cf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--352fcdb2-7aa8-4117-9fef-3c88ed2d80e8", "sighting_of_ref": "indicator--1e0cf1a5-69e0-4a4f-b31a-f60567727df5", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf73425-b93f-415c-a36b-dee7b80dd795", "sighting_of_ref": "indicator--463e3858-137c-4957-bce7-ef41cb4e9a22", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed7ab13-72f8-4b5c-9572-b08262441a7a", "sighting_of_ref": "indicator--3d9b1f75-1bd1-453b-a0b2-007b75f4e8d9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e254b1b6-6e80-45ca-9271-0472b1c7ac7c", "sighting_of_ref": "indicator--89d29d18-4951-4dbf-9a79-453951f7fb48", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73d20df-6a9a-40e6-95b8-b977f65379c0", "sighting_of_ref": "indicator--8c5a88f6-bf73-47ed-85ed-51ab11cea767", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ceae9fe-c96a-433b-9d1d-c75616997f0d", "sighting_of_ref": "indicator--c65d1d4b-c3f1-454b-bd27-bc6d1176062e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb741de3-5269-4486-b20e-ede55bd56fc8", "sighting_of_ref": "indicator--1f019e6b-95cb-4025-a816-e29836064ef8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2499cc32-23eb-497d-8b4b-dc5551fe74ba", "sighting_of_ref": "indicator--2eeb5288-50f4-4ecd-a36b-f3a6d484ec6b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf1bcb8-7b8a-4deb-9aef-96c2c46a3e98", "sighting_of_ref": "indicator--5016ccdc-2812-4e47-966f-e75f668cac60", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f57afb2-c6a6-4292-821b-e0618bc6ca63", "sighting_of_ref": "indicator--f115365c-842d-42ff-8457-075c05f5cd6d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c9e6dc-5af1-400e-8590-f6be26899990", "sighting_of_ref": "indicator--e0a575b9-8b50-4afa-a481-df3e56d1b2ad", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444e5832-47dd-4f59-b23f-22f9c06ba108", "sighting_of_ref": "indicator--d7495058-5abd-4144-8eca-0ac854d8099d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f0c59d-f7a6-416a-bd79-ebf0d234b4ef", "sighting_of_ref": "indicator--3b16e700-78da-4337-bcc6-98e86b9f72ee", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51883d94-d4c6-4d62-b141-3f322aab2454", "sighting_of_ref": "indicator--3b16e700-78da-4337-bcc6-98e86b9f72ee", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b027b503-07ff-44d3-8cac-66ebaf973169", "sighting_of_ref": "indicator--3b16e700-78da-4337-bcc6-98e86b9f72ee", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23eabb37-d968-4640-8eb5-1f7df8333767", "sighting_of_ref": "indicator--b8c45d1b-c3aa-4ba2-99e2-1cafcadcadac", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d51747-8d68-4bf7-9cee-51ae961fc289", "sighting_of_ref": "indicator--077d8a8c-22e8-4422-bedd-a7d628c6893b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e5a09e-f6c5-463f-90fe-b4391dde919a", "sighting_of_ref": "indicator--077d8a8c-22e8-4422-bedd-a7d628c6893b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba07bdc-7daa-41ed-9cc4-cea7dc28f6e6", "sighting_of_ref": "indicator--077d8a8c-22e8-4422-bedd-a7d628c6893b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1656da1a-e9a1-49bd-9328-6fc6788a130e", "sighting_of_ref": "indicator--5b3d774b-163b-40b7-974b-b75e7b95fc76", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d028b29d-5d8c-4478-b655-77cfb56dd17b", "sighting_of_ref": "indicator--5b3d774b-163b-40b7-974b-b75e7b95fc76", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd6f79c4-0c68-40e7-bebb-f25ead1f8267", "sighting_of_ref": "indicator--5b3d774b-163b-40b7-974b-b75e7b95fc76", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32caccf1-ccab-4856-8c65-a730da041940", "sighting_of_ref": "indicator--bb2fd62a-005e-46c0-8d50-2885361625c8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77afc8bd-1b3d-4b4e-be40-8978fe006d4d", "sighting_of_ref": "indicator--bb2fd62a-005e-46c0-8d50-2885361625c8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f5134ab-2aea-46e1-8905-51904397e636", "sighting_of_ref": "indicator--bb2fd62a-005e-46c0-8d50-2885361625c8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e79a7c-89e1-4ed4-8cc7-fba3c345a14c", "sighting_of_ref": "indicator--a42ff2f0-1761-4946-afc5-db7ce0e4a454", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d902253b-5f5c-46b7-b2d5-44c77cf1b5f2", "sighting_of_ref": "indicator--a42ff2f0-1761-4946-afc5-db7ce0e4a454", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ded110-c700-4591-8792-d4332b713808", "sighting_of_ref": "indicator--a42ff2f0-1761-4946-afc5-db7ce0e4a454", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab204b2-36f2-42c8-b3d6-1eff25d783fc", "sighting_of_ref": "indicator--f95500e3-96e7-4da9-8cc7-eb424e23349e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a39254c0-ebe0-4fd2-a8c5-5238238c1783", "sighting_of_ref": "indicator--f95500e3-96e7-4da9-8cc7-eb424e23349e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b2e834b-1d81-450e-832e-08bf040f2731", "sighting_of_ref": "indicator--f95500e3-96e7-4da9-8cc7-eb424e23349e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9ff6fe-c4a1-4984-8b0b-27877026a4d0", "sighting_of_ref": "indicator--b5786064-94c0-491e-98f6-8bc4b1ef0c7c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff77cf6b-a1c7-4aee-88b4-45724ce5419e", "sighting_of_ref": "indicator--b5786064-94c0-491e-98f6-8bc4b1ef0c7c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1846038d-1cdc-43b7-be22-b99874043f4d", "sighting_of_ref": "indicator--b5786064-94c0-491e-98f6-8bc4b1ef0c7c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61cdc1b8-6051-4c09-b84c-8340c1974950", "sighting_of_ref": "indicator--b5786064-94c0-491e-98f6-8bc4b1ef0c7c", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8afd1b46-3228-40aa-ae5f-cd4d22dbb10a", "sighting_of_ref": "indicator--976af87c-7ea6-46b5-b478-d4f8155edcf4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d80fa5-4e11-4b6b-b18a-d642ec06b5e3", "sighting_of_ref": "indicator--976af87c-7ea6-46b5-b478-d4f8155edcf4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92619b87-227c-4331-aca8-d8fbbfea387b", "sighting_of_ref": "indicator--976af87c-7ea6-46b5-b478-d4f8155edcf4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aede015f-cb19-4a01-850a-225e5221fd60", "sighting_of_ref": "indicator--80425b66-26d3-4c98-a331-eda30c6e7af4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30cbbdd-1705-4a06-a05f-999c237e2464", "sighting_of_ref": "indicator--80425b66-26d3-4c98-a331-eda30c6e7af4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d276cdd-f246-4f78-adc6-8742aa046351", "sighting_of_ref": "indicator--80425b66-26d3-4c98-a331-eda30c6e7af4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21db1ff5-7bb3-4f18-ba3f-4d7ba0805568", "sighting_of_ref": "indicator--a3313ff3-4faa-4c5e-a200-04716e5c636a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd2003a-9596-4382-97d5-fc4864b96276", "sighting_of_ref": "indicator--a3313ff3-4faa-4c5e-a200-04716e5c636a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9e1b44-0271-4861-9a68-65fb7a84e1a9", "sighting_of_ref": "indicator--21959c3a-8e5a-4460-9698-8d48d88d7530", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d985e7-47a5-4fcf-ac12-c437492267d7", "sighting_of_ref": "indicator--21959c3a-8e5a-4460-9698-8d48d88d7530", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea1578f-0d2c-4d48-a396-08eb76d14e97", "sighting_of_ref": "indicator--21959c3a-8e5a-4460-9698-8d48d88d7530", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59bf4e84-661a-4c8c-a9fc-5d3d1671055b", "sighting_of_ref": "indicator--92ec466e-986c-4b7c-939b-e109663a62d4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c6a4d85-add6-43a0-b031-ccf50ab5ecce", "sighting_of_ref": "indicator--92ec466e-986c-4b7c-939b-e109663a62d4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9548edaa-9b5c-4517-8916-4d8ba17ef92c", "sighting_of_ref": "indicator--e0a31515-91ff-4ad1-9e31-ce7b356d5a06", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b630d6e2-0223-47a2-917f-f846a831b993", "sighting_of_ref": "indicator--e0a31515-91ff-4ad1-9e31-ce7b356d5a06", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb60239-33f2-46f5-98f1-281f3999ee95", "sighting_of_ref": "indicator--e0a31515-91ff-4ad1-9e31-ce7b356d5a06", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1122b1d-90fc-4587-aaad-04d5399d94e3", "sighting_of_ref": "indicator--efb752ed-7a32-461f-af1d-bde71ae41d2b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4093056-7c72-4c8c-93a2-937512b6fb72", "sighting_of_ref": "indicator--41f7bc23-ebf1-45d7-9e75-0a70cba39a66", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b026d1b6-c7b6-4c6f-8096-e82c63376449", "sighting_of_ref": "indicator--8c42cd70-94c0-4dc2-ab7a-f5f2c4b87c5b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4bd0be-0c5b-43e7-9cc7-50a00cb994b6", "sighting_of_ref": "indicator--4733ac3e-d182-4001-94f9-a72407f70b9d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a45264-a817-49d1-bdae-3e3ea4b4323e", "sighting_of_ref": "indicator--4733ac3e-d182-4001-94f9-a72407f70b9d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067fa3f2-f0ec-4193-9a63-5a4df3734952", "sighting_of_ref": "indicator--0f9d8065-b571-43d4-8e78-c1ac12c5be2f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55930315-0db9-4a83-864d-32a062099274", "sighting_of_ref": "indicator--1e3c39d0-793e-4228-8018-933ac2b53001", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c39fd94d-48e1-429f-a4c8-295f7ee17512", "sighting_of_ref": "indicator--32b4e14b-13d0-484e-8cc4-e66038de2c23", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256466ba-da71-4163-b162-dbe9fbd574fe", "sighting_of_ref": "indicator--b39659bb-7d12-4ab4-962e-7c32e3052307", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4af960c5-9351-4adc-9dfc-c300c757c0c6", "sighting_of_ref": "indicator--b39659bb-7d12-4ab4-962e-7c32e3052307", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d283ee6e-3847-4afc-b6e5-55f77929101c", "sighting_of_ref": "indicator--b39659bb-7d12-4ab4-962e-7c32e3052307", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d76647-3c43-4657-bde7-6c4c26457a4f", "sighting_of_ref": "indicator--b39659bb-7d12-4ab4-962e-7c32e3052307", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06251898-ed8c-4a13-899e-b12dde2e2e34", "sighting_of_ref": "indicator--8e0480a6-64e1-44dd-9172-12a96ced93cb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ac2ea7-72bf-4604-b631-c76b219d98dd", "sighting_of_ref": "indicator--7a9d7b5f-f682-479e-9fe9-2f3a788281b1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e25700-a652-42a5-b266-bf82562f7a95", "sighting_of_ref": "indicator--7a9d7b5f-f682-479e-9fe9-2f3a788281b1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5894306-7f40-4935-af46-d8217947d5a7", "sighting_of_ref": "indicator--7a9d7b5f-f682-479e-9fe9-2f3a788281b1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1e4280-2abd-424a-b414-1c55e1c1e426", "sighting_of_ref": "indicator--90670fed-84b8-4f5a-8593-346358edf1e9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f615eb33-840a-49bc-8b1d-4dc366af225e", "sighting_of_ref": "indicator--90670fed-84b8-4f5a-8593-346358edf1e9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61402e2-15e4-4858-b12d-082bdd039a74", "sighting_of_ref": "indicator--90670fed-84b8-4f5a-8593-346358edf1e9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537d5e42-2965-4b7a-9d57-bd1c2d49d82b", "sighting_of_ref": "indicator--e3e17141-4102-4a0e-86d9-53e5e11d856b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--257328ca-a7aa-4e5e-8b77-83b749ddab63", "sighting_of_ref": "indicator--e3e17141-4102-4a0e-86d9-53e5e11d856b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1925d354-393c-4475-8ec5-ee4e5d70ff00", "sighting_of_ref": "indicator--e3e17141-4102-4a0e-86d9-53e5e11d856b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8146f0f8-cbde-4803-81e9-095019fcea19", "sighting_of_ref": "indicator--a742d467-bad3-4741-aee9-eb75a28f96e8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0af92af-1caa-4d13-9a2a-2fa4e4c3d4f5", "sighting_of_ref": "indicator--645a8d0c-5205-412d-9d63-dc100565efd4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99155ccc-7d10-4109-a103-78c22db87837", "sighting_of_ref": "indicator--00cbc332-defc-41d7-b3c0-fb799889d117", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ecb622b-a8ae-43a0-a3b0-bf288e654de9", "sighting_of_ref": "indicator--00cbc332-defc-41d7-b3c0-fb799889d117", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e8934b-3672-422b-a2f6-c4045bf1ee8f", "sighting_of_ref": "indicator--00cbc332-defc-41d7-b3c0-fb799889d117", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f770a8a-c259-4d7c-9278-65f62ce46510", "sighting_of_ref": "indicator--0dd88095-4a82-48a3-93f8-9f66ef65d1a1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8faa5ac-c990-4b19-85c8-a6af4cab6f5b", "sighting_of_ref": "indicator--0dd88095-4a82-48a3-93f8-9f66ef65d1a1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81044ff3-1d82-4b72-97dc-28960c0d9717", "sighting_of_ref": "indicator--0dd88095-4a82-48a3-93f8-9f66ef65d1a1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1bd3533-5aaf-41b2-b271-dc29e717781f", "sighting_of_ref": "indicator--762ffcc0-071a-4ce4-90f0-798d859d045d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7488ce0e-d60c-4139-916f-a0c5e343d952", "sighting_of_ref": "indicator--d051ee3b-dd28-4d3e-a46b-dd7629b8e200", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86349675-e49b-4d99-9e3d-28d36add6211", "sighting_of_ref": "indicator--42e3b02b-8206-4c1c-9826-bc1c86cdb185", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a66e5f70-0948-4df7-978a-da358bc7721b", "sighting_of_ref": "indicator--e976fe88-661b-45f3-9aa3-33d976f6b3a1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cdd732e-b0c5-4c84-88b3-749b868c3083", "sighting_of_ref": "indicator--e976fe88-661b-45f3-9aa3-33d976f6b3a1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec8b992-2906-4435-a44f-a7e590b71e37", "sighting_of_ref": "indicator--e976fe88-661b-45f3-9aa3-33d976f6b3a1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a56ef170-49f7-40b0-9263-24cc55f00457", "sighting_of_ref": "indicator--437507b2-8bce-4525-a309-7a99c2a03050", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782b0f2a-a9b0-4b99-abd1-a1498f05d188", "sighting_of_ref": "indicator--4af7deee-f36e-429d-9b6c-abf06d573e5d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce05875-70c8-4008-bf97-49afa700a91a", "sighting_of_ref": "indicator--14002023-0f9b-4709-bf00-652390e67f57", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba60df0a-0853-46d3-b70a-117930c4eb3d", "sighting_of_ref": "indicator--14002023-0f9b-4709-bf00-652390e67f57", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a7d43e9-5f5d-4725-b0f2-937b200da91d", "sighting_of_ref": "indicator--14002023-0f9b-4709-bf00-652390e67f57", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e96740-b9bb-4ed6-a2b7-1c4b26f10d42", "sighting_of_ref": "indicator--f7e09122-91f1-436f-b133-409cf87e4ebc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71497c18-3dbb-4a21-b629-4f3fa7e97fda", "sighting_of_ref": "indicator--f7e09122-91f1-436f-b133-409cf87e4ebc", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327838ef-ee03-43db-9a7e-d6a3849b54a6", "sighting_of_ref": "indicator--3c689720-8060-4ccc-b2db-b22673077c47", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe4c830-a354-4250-98a4-6718c66f3a9c", "sighting_of_ref": "indicator--baf72f88-0c63-4b31-a64d-155698a90139", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9924ddb-44c3-4c09-a930-794152fb2ec9", "sighting_of_ref": "indicator--663a4b57-40fb-4436-bc80-faff1a2dc886", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48ef528-8f01-4a33-bf65-239a2c34a9dd", "sighting_of_ref": "indicator--663a4b57-40fb-4436-bc80-faff1a2dc886", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b4e90a-37a7-41e0-b496-2e765edc1493", "sighting_of_ref": "indicator--663a4b57-40fb-4436-bc80-faff1a2dc886", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a2f14a1-50ff-465c-ad08-2ca4c62856a7", "sighting_of_ref": "indicator--33885a1e-15ab-4b17-94bc-67f07e984e7d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--901fda24-f0c0-4c02-9c5e-3c94e3c5477e", "sighting_of_ref": "indicator--33885a1e-15ab-4b17-94bc-67f07e984e7d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce33c976-0226-41f9-a1bf-6236c15c33d7", "sighting_of_ref": "indicator--33885a1e-15ab-4b17-94bc-67f07e984e7d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0889eff-e495-487e-98ad-ff2e9f071b96", "sighting_of_ref": "indicator--c0318d9c-360a-4ef7-b204-f767c69355ff", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7086c67-6c05-4b02-93c0-c51d4b7bb396", "sighting_of_ref": "indicator--c0318d9c-360a-4ef7-b204-f767c69355ff", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ecff618-fa9d-4fc7-8545-fd5c7e1d135c", "sighting_of_ref": "indicator--c0318d9c-360a-4ef7-b204-f767c69355ff", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24e80d3-0af5-4c0c-92aa-8805fea17216", "sighting_of_ref": "indicator--628611ec-6e8f-465b-9db5-3deb6dc3f2e8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--454ce89c-01b3-4b80-a2bc-a536bd4e65cf", "sighting_of_ref": "indicator--25d6518a-d67c-478e-95dc-a349df912119", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e05db3-6448-49dc-b1a5-7db25d21fe87", "sighting_of_ref": "indicator--25d6518a-d67c-478e-95dc-a349df912119", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11fe85b-9f45-4f66-b531-6c8247a50300", "sighting_of_ref": "indicator--25d6518a-d67c-478e-95dc-a349df912119", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2721be81-0f18-403b-bf7f-933121af51c5", "sighting_of_ref": "indicator--f071e46f-3500-4911-b136-271de8919cf7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da6a2be-3bbb-4184-84cc-12b84c3c932c", "sighting_of_ref": "indicator--9fe43063-17ed-4918-bc0d-b788b8d3ca9f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84556bb-61f8-449f-bea5-9c718b13219b", "sighting_of_ref": "indicator--9fe43063-17ed-4918-bc0d-b788b8d3ca9f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c21e3c-7cfb-4422-963b-36fe4dcaa95f", "sighting_of_ref": "indicator--985f353d-342f-45a2-be87-4d948c600b9e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40191f4a-1359-4995-a0ad-37bb111eec8b", "sighting_of_ref": "indicator--96696a4c-94e9-491c-a9aa-0e516c5296da", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be542934-0525-4100-a6da-83e383457baf", "sighting_of_ref": "indicator--96696a4c-94e9-491c-a9aa-0e516c5296da", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa973e6f-9864-4bcc-bf51-f64e7141db35", "sighting_of_ref": "indicator--9ded1726-893b-49aa-a017-6d15a4fb4921", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--448cd1c5-66de-42b3-b0d6-1fb2122817d7", "sighting_of_ref": "indicator--9ded1726-893b-49aa-a017-6d15a4fb4921", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4148a6bd-33d6-4f34-8a33-c897c2fcb72c", "sighting_of_ref": "indicator--9ded1726-893b-49aa-a017-6d15a4fb4921", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69811efa-8d46-49a7-9fff-75d6fe7df8f8", "sighting_of_ref": "indicator--8f034fb7-688a-4f84-9faf-3c36d7f0df4b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f74d54cb-9fd7-44ab-af88-312e0d0f3996", "sighting_of_ref": "indicator--7b0e3134-84e7-44cf-81cf-4f2109c70b53", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c96dd240-7d03-49b5-8cbb-abab2dc10fb5", "sighting_of_ref": "indicator--7b0e3134-84e7-44cf-81cf-4f2109c70b53", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93cf08d-4cee-4384-8c4a-807a4bea4b8f", "sighting_of_ref": "indicator--c4bbf2d4-55b0-498a-b41d-64dcff822588", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22544294-fa93-401a-8f5d-5c9836890ce5", "sighting_of_ref": "indicator--c4bbf2d4-55b0-498a-b41d-64dcff822588", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2808a44-811b-450a-842f-5634eb197527", "sighting_of_ref": "indicator--a5edf16d-1149-432f-8c2a-601ecab67923", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e155f34-681b-40ac-88fe-1bfdc59f7bd6", "sighting_of_ref": "indicator--7eb0bdda-4e70-464d-b0ba-104d67866169", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4fe1536-458e-46fb-8318-6dc601f19849", "sighting_of_ref": "indicator--f8eb7cd3-2472-49f7-964f-2f5833ecbae2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--463496a8-2a1f-4fb2-9567-0efac277cc14", "sighting_of_ref": "indicator--b3ceebaa-2764-409e-81cf-d3f0c705867f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2127eba7-623c-4c71-9599-4716fb662c22", "sighting_of_ref": "indicator--b3ceebaa-2764-409e-81cf-d3f0c705867f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a35ff0-9da9-4c3d-b0e0-507612229013", "sighting_of_ref": "indicator--b3ceebaa-2764-409e-81cf-d3f0c705867f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96cc2e71-5e36-4ef1-96d6-e5d5d9632704", "sighting_of_ref": "indicator--ecd1ee77-9cc3-41ed-af95-0c92957e6b85", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c8682c-0956-4e21-90d8-4eade0963083", "sighting_of_ref": "indicator--ecd1ee77-9cc3-41ed-af95-0c92957e6b85", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc86e33-186a-4ad6-80d0-0e1960ed3c79", "sighting_of_ref": "indicator--114a77d8-30dc-4db1-b03a-158778e6eab4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ceec91c-4988-4410-8bde-42158955dd51", "sighting_of_ref": "indicator--114a77d8-30dc-4db1-b03a-158778e6eab4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ccf3fb3-5c35-43b2-9054-0c69a465fd61", "sighting_of_ref": "indicator--c744909b-4aa8-44f3-a98a-a40eac10e807", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad0629a6-8331-4776-8c4e-10a9ccd8ca12", "sighting_of_ref": "indicator--c744909b-4aa8-44f3-a98a-a40eac10e807", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d07156-50e6-4089-89c5-496f95193e11", "sighting_of_ref": "indicator--c744909b-4aa8-44f3-a98a-a40eac10e807", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d55d35-b653-4ccd-8a62-a1c6357081be", "sighting_of_ref": "indicator--df3c5f98-6a65-448f-b44b-6d590ec3039c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fbec656-7dfb-4325-8e24-11b9b235c901", "sighting_of_ref": "indicator--375a4317-97f8-436d-a52c-817d9c41f2b3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e16e7382-8bb0-4c02-a8c9-bc1c4403142a", "sighting_of_ref": "indicator--214a8db7-7204-4403-9522-c4834e8894a4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1dda5ef-79b0-468d-b343-37e15902f9cb", "sighting_of_ref": "indicator--9ae2e6fa-6e53-491c-a277-b435b7a3ff79", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a02d732-48fb-467c-bdcf-477eac9f9264", "sighting_of_ref": "indicator--438c455e-bdf6-4b0b-9041-a1ee826576eb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--011274e5-38de-453a-a975-a1135d91dbc4", "sighting_of_ref": "indicator--070f58fd-e1e7-4957-b473-e7911825063e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d97ac3-8907-475b-853d-1e8d3fdd42dc", "sighting_of_ref": "indicator--070f58fd-e1e7-4957-b473-e7911825063e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d21d3164-7ee4-4e0f-ab5b-eb63af8f43cd", "sighting_of_ref": "indicator--070f58fd-e1e7-4957-b473-e7911825063e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db1129c4-a19c-45b1-8b12-aa04a0688f7e", "sighting_of_ref": "indicator--7b143c4b-d570-4a62-9ef8-30e934208526", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--190cd700-ea4b-4de2-a7ca-e5080cbd2778", "sighting_of_ref": "indicator--f71544e0-21c8-47eb-8594-f5ffb8e48a38", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed49cce0-60d4-478f-bf90-a91623f24fdc", "sighting_of_ref": "indicator--f71544e0-21c8-47eb-8594-f5ffb8e48a38", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9a6043-6992-48b8-bcf6-44c37d5034e6", "sighting_of_ref": "indicator--f71544e0-21c8-47eb-8594-f5ffb8e48a38", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ade843-0d91-405d-9685-ea72346adee6", "sighting_of_ref": "indicator--97f21871-4aaf-4533-ac87-3c82aa84465d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede20622-48d1-4603-a250-13c5e10f98bc", "sighting_of_ref": "indicator--97f21871-4aaf-4533-ac87-3c82aa84465d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f43d33fa-5b69-4320-9cc9-bfd992de6dbc", "sighting_of_ref": "indicator--b4b2b03f-21a1-4d23-ba4f-3f976602c109", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5873e188-d7e9-43db-826d-a0757c171966", "sighting_of_ref": "indicator--b4b2b03f-21a1-4d23-ba4f-3f976602c109", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775ea0de-799c-440d-8b9e-7249c2c6074a", "sighting_of_ref": "indicator--b4b2b03f-21a1-4d23-ba4f-3f976602c109", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd5e096-5e77-4e14-8ddc-a3a5d55893f7", "sighting_of_ref": "indicator--43f3ae28-ea1d-48bf-868a-36d85c830fa6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--014f1330-181e-4df5-97f7-0ef83842b1b0", "sighting_of_ref": "indicator--43f3ae28-ea1d-48bf-868a-36d85c830fa6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e67ab95-e430-4dda-b032-48fee4336ee9", "sighting_of_ref": "indicator--43f3ae28-ea1d-48bf-868a-36d85c830fa6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406c8f6b-73c8-482f-a21b-c779bd2d8f6b", "sighting_of_ref": "indicator--23135e40-dfc6-4735-8198-23b16d06bc01", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0d46ef-d88e-4255-ac72-06a8fe2a9bb0", "sighting_of_ref": "indicator--e68f6ebf-1431-4b22-937f-0488f5207b4a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85abedd0-3467-46d4-a2d5-acf9b7df1eb7", "sighting_of_ref": "indicator--16c9fbaa-67cf-4765-992b-76698a109b12", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d117e86-b40b-4ab3-ab1c-e904e9dd6a2f", "sighting_of_ref": "indicator--301379e9-ca06-4c19-9ab2-4b3601899d91", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d572a38-1ff1-4427-bcfa-4d69158feadf", "sighting_of_ref": "indicator--301379e9-ca06-4c19-9ab2-4b3601899d91", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee462d0-8ed6-47c7-bfef-73269dd451d6", "sighting_of_ref": "indicator--301379e9-ca06-4c19-9ab2-4b3601899d91", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e671f8f6-b5a7-4a5b-a013-c58054c55b68", "sighting_of_ref": "indicator--732af402-6c2a-478e-be1a-d1faf9f72b3c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--170eafeb-df81-4548-86bd-306472edf3ed", "sighting_of_ref": "indicator--732af402-6c2a-478e-be1a-d1faf9f72b3c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c8c1b6-6ac4-49de-bc40-ba39fb5a976d", "sighting_of_ref": "indicator--732af402-6c2a-478e-be1a-d1faf9f72b3c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840aabe8-221b-42bb-aff1-bea59b75866f", "sighting_of_ref": "indicator--732af402-6c2a-478e-be1a-d1faf9f72b3c", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e543a0b0-a0ca-49c4-9323-742f4994f9b8", "sighting_of_ref": "indicator--a86dda33-dd78-4704-adcb-c5abd1291ef4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b3ebe18-167f-4d5d-9ad5-9a96d1376a90", "sighting_of_ref": "indicator--a86dda33-dd78-4704-adcb-c5abd1291ef4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9619997a-2c3f-4ec9-aa6f-eccdc055b4cb", "sighting_of_ref": "indicator--a86dda33-dd78-4704-adcb-c5abd1291ef4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7290f575-16d0-4556-8db2-d546b4af304d", "sighting_of_ref": "indicator--45a86708-0aad-4906-a2c1-fd57060a00ab", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f846653-c604-4585-9905-6eb052f50368", "sighting_of_ref": "indicator--36335fb5-fa33-48bc-887d-f6ef7b16e2ce", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c7bbb3-9dda-4942-ab61-b9557c3ec101", "sighting_of_ref": "indicator--dc6b5c61-e9d2-4ac8-bae3-2001a59dea87", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0d7d44-6cc4-4374-a58b-cd9064191867", "sighting_of_ref": "indicator--dc6b5c61-e9d2-4ac8-bae3-2001a59dea87", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d5b2fa-d167-4fc8-a975-1e61b0f698a8", "sighting_of_ref": "indicator--dc6b5c61-e9d2-4ac8-bae3-2001a59dea87", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e6d4bf-c1d5-487f-9145-394eeb1efdbb", "sighting_of_ref": "indicator--86c948d3-a0f3-40d4-9ee2-3c5d7baa8dbd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7b71c8-5f25-4a4a-848b-4147b186072e", "sighting_of_ref": "indicator--86c948d3-a0f3-40d4-9ee2-3c5d7baa8dbd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b714f374-a623-40e4-b41a-d7522b2922ea", "sighting_of_ref": "indicator--a166b704-bfa8-4352-bc15-df2f75055a00", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f8959d-0dbc-49a3-bc59-93ea5e5f71f4", "sighting_of_ref": "indicator--a6cb4cd1-7add-480c-b6f0-39af1d03c99b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c132755a-70ab-45ad-943c-7f5288238088", "sighting_of_ref": "indicator--fd787381-7082-4ce1-9f01-c640760b19e9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e54fb8e-7449-47ee-8b2d-09607c8286ab", "sighting_of_ref": "indicator--b4c53444-02f6-4052-bd60-462cc9e4ecd7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--015ccc19-bb88-43a5-a1b7-ce41481fcfd7", "sighting_of_ref": "indicator--75122a10-4aa3-42ce-a01f-68846b020bcb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d31fab-cf59-4942-9516-d486a793d1b9", "sighting_of_ref": "indicator--75122a10-4aa3-42ce-a01f-68846b020bcb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ed4aef-cf7d-49d8-a185-056fc1d349d3", "sighting_of_ref": "indicator--75122a10-4aa3-42ce-a01f-68846b020bcb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abca5ec4-0a07-4bfe-95a3-f46520fb1d6c", "sighting_of_ref": "indicator--96ea9721-df16-4735-80d9-971b7c321776", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244408af-4f80-4dc8-97af-917ced89724a", "sighting_of_ref": "indicator--402567fe-f897-4834-a68f-8b1afe678f68", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8110fef2-91fb-4d8e-92aa-c3584825ce36", "sighting_of_ref": "indicator--402567fe-f897-4834-a68f-8b1afe678f68", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f73bad3-dcbc-4fbf-9a9e-eed241f3fb19", "sighting_of_ref": "indicator--402567fe-f897-4834-a68f-8b1afe678f68", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40123df-0ca4-4d48-bd4b-5b9872e6cc21", "sighting_of_ref": "indicator--4efeb222-1a2f-4573-a359-f45810908da6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae1c44a1-4172-4e61-b281-15982ba0032b", "sighting_of_ref": "indicator--522fd781-ebd8-45a6-8f28-dbf671fe2490", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab1ffce-1326-4982-8c2b-a2d40e14d90c", "sighting_of_ref": "indicator--522fd781-ebd8-45a6-8f28-dbf671fe2490", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec7f2db-0c6d-4101-a6d6-9f021c08c209", "sighting_of_ref": "indicator--522fd781-ebd8-45a6-8f28-dbf671fe2490", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c84cdc8e-2b25-4beb-965a-c225bab5274a", "sighting_of_ref": "indicator--76f72123-d8a9-4272-a1ed-9977079accc2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e09e299-93c8-4b1a-a688-232dfe969543", "sighting_of_ref": "indicator--f291e7c3-5c24-46fa-b154-4cbda0116627", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80bb359b-ec60-4cdb-9a3f-95442bd46b84", "sighting_of_ref": "indicator--e9403b28-c6fe-42b1-80c8-be8af4e9ffa8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9b5200-eb1f-4e5e-9ecb-7b6df7c6a761", "sighting_of_ref": "indicator--e9403b28-c6fe-42b1-80c8-be8af4e9ffa8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f83d91f4-bb51-465c-98d1-a0b7ea38e3dd", "sighting_of_ref": "indicator--07c5fd7a-6d78-4c39-b326-a1df7a23b759", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f090b8ca-8eb5-445e-acb0-2d682da990a4", "sighting_of_ref": "indicator--07c5fd7a-6d78-4c39-b326-a1df7a23b759", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--051281f4-5d56-41bd-b0bd-5ae54a226643", "sighting_of_ref": "indicator--07c5fd7a-6d78-4c39-b326-a1df7a23b759", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc502f8-b0b3-4cb5-9efd-3cc6f78ad82a", "sighting_of_ref": "indicator--42d813b0-f1dc-48e9-97ba-2ff2b92d06b5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed939b4-1da4-4c27-84b0-8c654962dece", "sighting_of_ref": "indicator--42d813b0-f1dc-48e9-97ba-2ff2b92d06b5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9abaff2-45a0-4463-add0-c13cf93a562c", "sighting_of_ref": "indicator--42d813b0-f1dc-48e9-97ba-2ff2b92d06b5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a937fb-c723-41d7-9757-7a9d8393ccb6", "sighting_of_ref": "indicator--85759002-cdbb-46a3-8e44-b059d8f16be9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dac5b00-1768-4a92-9e9e-19b70318a116", "sighting_of_ref": "indicator--85759002-cdbb-46a3-8e44-b059d8f16be9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58aeee75-3167-4999-8f6f-96327497f45e", "sighting_of_ref": "indicator--85759002-cdbb-46a3-8e44-b059d8f16be9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4da7565-ea41-4932-8cc7-b97ec0e0ac29", "sighting_of_ref": "indicator--e843d430-0b87-4582-8615-47d39515da00", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ab1532-4ce7-4dd3-a0df-df1292c2be3a", "sighting_of_ref": "indicator--e843d430-0b87-4582-8615-47d39515da00", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c3ad20-b538-4cbd-9468-81cf294a764b", "sighting_of_ref": "indicator--e843d430-0b87-4582-8615-47d39515da00", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb8dd5ac-871b-44a2-975a-a9021847809d", "sighting_of_ref": "indicator--f5a8eef4-905b-4788-a261-2f0726e5ddd6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a71bde-8a19-411b-a18c-3f5e623fd4f3", "sighting_of_ref": "indicator--f5a8eef4-905b-4788-a261-2f0726e5ddd6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b55077c0-9563-4d52-a519-df6dad051613", "sighting_of_ref": "indicator--f5a8eef4-905b-4788-a261-2f0726e5ddd6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b86648c4-b80d-4804-92fa-a7f7182740e5", "sighting_of_ref": "indicator--c7c88b41-0e57-423d-babe-ef2b4dfcfee1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07c23ef-6676-4b65-a006-cc15fe142061", "sighting_of_ref": "indicator--7d5fbf20-80a4-48c9-83ba-d89109920956", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0ec2be-f47c-4030-abe9-bc3072ff762f", "sighting_of_ref": "indicator--2ff5ef60-e653-4b91-a532-2d4f029eb3a8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--955720e7-860f-4281-9f47-19df76782fb3", "sighting_of_ref": "indicator--2ff5ef60-e653-4b91-a532-2d4f029eb3a8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ee91ba-1361-4a82-bbe3-76a57031b52e", "sighting_of_ref": "indicator--7dc144bd-6072-4999-91bd-d8cc6a014183", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cba0381-3ca6-4f1c-80bc-2e1b73402016", "sighting_of_ref": "indicator--7dc144bd-6072-4999-91bd-d8cc6a014183", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162c9eb2-912c-434c-93a3-2ab87a6a8b91", "sighting_of_ref": "indicator--7dc144bd-6072-4999-91bd-d8cc6a014183", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c97e2d-19df-4815-8fb7-d5648788b640", "sighting_of_ref": "indicator--25ff687b-9fce-47ce-81e9-f78565701c83", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274c9635-f631-4e18-aded-3997db1ff0cd", "sighting_of_ref": "indicator--25ff687b-9fce-47ce-81e9-f78565701c83", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01c4525-696e-4006-922b-c8f0c8f85794", "sighting_of_ref": "indicator--25ff687b-9fce-47ce-81e9-f78565701c83", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9a7e20-920c-41f2-b95f-c8175456d68f", "sighting_of_ref": "indicator--2c1417ac-9ca1-43ee-b3e5-78e76fd12b11", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e555a84-3d3f-4a43-8f69-ac0ce78f040c", "sighting_of_ref": "indicator--2c1417ac-9ca1-43ee-b3e5-78e76fd12b11", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512e4571-0b80-4c67-a6bd-409055c7eb82", "sighting_of_ref": "indicator--2c1417ac-9ca1-43ee-b3e5-78e76fd12b11", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3f7351-2c35-47c5-ad36-f632f6064daf", "sighting_of_ref": "indicator--e36ccf6e-6305-48da-b2e8-2f9134fd72f4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb4d8666-c4b8-4b2c-ae56-272efea29980", "sighting_of_ref": "indicator--e36ccf6e-6305-48da-b2e8-2f9134fd72f4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ba1319-f66b-408e-b589-7c4531e2ee57", "sighting_of_ref": "indicator--e36ccf6e-6305-48da-b2e8-2f9134fd72f4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1650b99e-d596-4cac-99fb-3cb1847ae3ce", "sighting_of_ref": "indicator--849a31a3-c26f-428d-9764-5fc7d98eb8ca", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b082a4e5-48da-4f75-a202-c42e7f8ac3b8", "sighting_of_ref": "indicator--849a31a3-c26f-428d-9764-5fc7d98eb8ca", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cad6c62-4ac4-4af0-ac34-daa9ffac9822", "sighting_of_ref": "indicator--849a31a3-c26f-428d-9764-5fc7d98eb8ca", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c90392-0217-41ec-87ae-ed92594c994f", "sighting_of_ref": "indicator--c5224777-37ca-4542-ab4f-fbcd49c8ee9b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ca0dff-6f4b-4927-8059-a8a2c62880ab", "sighting_of_ref": "indicator--c5224777-37ca-4542-ab4f-fbcd49c8ee9b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0a66da-fdca-4b11-9ab4-3edc87b2f96b", "sighting_of_ref": "indicator--6d9aaeef-0f8f-4a38-a03e-c87d79632d9e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90379935-9bd5-45cc-84a8-04b3fe4e61f9", "sighting_of_ref": "indicator--6d9aaeef-0f8f-4a38-a03e-c87d79632d9e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed249fc-8acc-490b-94f9-9a26986fd156", "sighting_of_ref": "indicator--6d9aaeef-0f8f-4a38-a03e-c87d79632d9e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c697bf6-add4-4eaa-a807-5833925335cf", "sighting_of_ref": "indicator--67eeafc1-56d0-4144-abab-cb7ecd3489b8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1fef9f-457a-4748-a822-f1a7abd5396e", "sighting_of_ref": "indicator--9f00fadf-5874-4ed4-80ad-65cf290ea57d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e3d903-1aba-4c22-beef-86c689190610", "sighting_of_ref": "indicator--2d549b15-f318-4eb6-83ae-dfba6390fe6b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b5c0009-c90f-47c6-a060-a12cdf04dcf3", "sighting_of_ref": "indicator--2d549b15-f318-4eb6-83ae-dfba6390fe6b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f36293-b678-4fea-9ac3-31bdb1d14b89", "sighting_of_ref": "indicator--2d549b15-f318-4eb6-83ae-dfba6390fe6b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68dfea84-4cda-4ec3-bae3-a699281160bf", "sighting_of_ref": "indicator--58c54573-bb6a-4e78-8300-f1d4c502b747", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c44142-916a-49d9-ac26-41b085fc4c9f", "sighting_of_ref": "indicator--0167da2d-b9ab-4513-9d61-51798574210f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b84ff6e-c861-4a43-9e56-5fafbd6fde99", "sighting_of_ref": "indicator--a0e3c1c8-1f0c-4b4a-81f3-96cfdfc8f955", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f95a01-8ef9-4228-8e77-61d700073aef", "sighting_of_ref": "indicator--24d0a61c-4b62-460b-8e41-411203a621cf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce735708-175d-41cb-8fe5-16fb5c1c7dde", "sighting_of_ref": "indicator--55b457c8-b0e6-486f-a030-79bf0a0fc584", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe47ff9e-85c8-447b-9418-36312f4479e7", "sighting_of_ref": "indicator--55b457c8-b0e6-486f-a030-79bf0a0fc584", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c624142e-fcf1-48eb-9ab4-556efb70206d", "sighting_of_ref": "indicator--55b457c8-b0e6-486f-a030-79bf0a0fc584", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84ab88e3-3423-4b4f-9a7f-1ad3a52201cb", "sighting_of_ref": "indicator--c6f9e323-c5d1-4757-924e-3c0b6d452766", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e2facf-03c0-4019-9871-4ec75baa1f94", "sighting_of_ref": "indicator--c6f9e323-c5d1-4757-924e-3c0b6d452766", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a3afb9-afbc-45cf-9e58-17c253d064da", "sighting_of_ref": "indicator--c6f9e323-c5d1-4757-924e-3c0b6d452766", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1121ee5d-ce33-4866-bbc1-a15b561b0740", "sighting_of_ref": "indicator--c8c9166c-6804-4160-8ddf-bd401ccdf9fc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28548c92-5ef2-4589-a8a0-200c0c6ecdcc", "sighting_of_ref": "indicator--3057b68b-b53a-4293-be41-a594670e94af", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b62c2810-938b-4fbe-856c-f63cf7badf7d", "sighting_of_ref": "indicator--ecf626ae-54b2-4e24-a41f-4cd3c5493122", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd38b35-c1c5-4ba1-86ac-9f2de25b6749", "sighting_of_ref": "indicator--c563b249-5f7f-4569-8c93-efdc6a066f8b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb9d5246-b171-4f25-b628-2baf22b6a908", "sighting_of_ref": "indicator--48f40aa8-fd71-4d1e-b7b9-4f8d23d9e531", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839b21b9-39fc-4ddf-a69c-f4bf4ad01b66", "sighting_of_ref": "indicator--9b0b20be-de94-46fe-aeef-535f3d1eb8a3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfbdfcb2-0a15-40c0-a690-0bc68311edf8", "sighting_of_ref": "indicator--9b0b20be-de94-46fe-aeef-535f3d1eb8a3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a681b1-f2d3-44fb-b416-3b343310c576", "sighting_of_ref": "indicator--328f75a5-e174-4036-aa04-48e5fe26913a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28277247-11d7-47aa-8a0f-5031ac3aecff", "sighting_of_ref": "indicator--328f75a5-e174-4036-aa04-48e5fe26913a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--293d65a0-be9c-48f8-8c14-9275bbd63fac", "sighting_of_ref": "indicator--15aeff3e-b1d0-4a70-9801-976387a3bc9e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20decc17-eb78-4241-a181-3a57426219c5", "sighting_of_ref": "indicator--f48ab2ff-0be1-4c99-a033-7f9d7322d4f0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2efd055-1903-422a-937b-8c261d4e7385", "sighting_of_ref": "indicator--c011b6a1-f54c-4954-89aa-9ddf699e0f28", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca2cdd0a-ad72-49b7-8ec9-2503cd150dfd", "sighting_of_ref": "indicator--7138d489-d848-4abb-9546-202cd3d995f8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c6813a-32ee-4e48-aefa-78c5632d32cb", "sighting_of_ref": "indicator--7138d489-d848-4abb-9546-202cd3d995f8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41afc479-e064-4fc9-aba3-bec0630da74a", "sighting_of_ref": "indicator--7138d489-d848-4abb-9546-202cd3d995f8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b15e6c-91ac-43d8-be57-ea5f891e9b90", "sighting_of_ref": "indicator--04d3a782-2711-4782-9d7f-3b9c84007daf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--249aa811-efd5-4402-be95-a54283efb121", "sighting_of_ref": "indicator--22361d51-f78d-4f90-97da-0f83f9e16e74", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f7d1821-82e6-4780-a711-280f2426860e", "sighting_of_ref": "indicator--5e0f2e9d-bc32-474b-b5d6-0decc8fa6b87", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866c10e0-aaf3-43ab-ba5e-d31bb15bb017", "sighting_of_ref": "indicator--374da096-ce63-4a55-b0e4-4fcc2922a9e0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd1a5d37-8b2b-4e2b-a936-b5158f7dfacc", "sighting_of_ref": "indicator--374da096-ce63-4a55-b0e4-4fcc2922a9e0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191008fc-4118-47de-a1cf-01910b007d3b", "sighting_of_ref": "indicator--aed6c214-dbd5-4c47-a3b2-8ce94932a0c9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4bdc5b-4818-4546-a019-dfdbedc805e1", "sighting_of_ref": "indicator--752dd2a7-5195-4473-9e06-a3cf1004b312", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f334db-08ba-42a1-b5a6-b6e8a565d54e", "sighting_of_ref": "indicator--752dd2a7-5195-4473-9e06-a3cf1004b312", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6bc61c6-d268-48a3-ae27-74996217277c", "sighting_of_ref": "indicator--cab8f0d3-0e4e-4c73-8968-faa0b51011b0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007b19c8-709c-458a-a8c8-53854df6a49c", "sighting_of_ref": "indicator--cab8f0d3-0e4e-4c73-8968-faa0b51011b0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb34104b-b2aa-4bc9-a1e3-f9e1d0495a2e", "sighting_of_ref": "indicator--cab8f0d3-0e4e-4c73-8968-faa0b51011b0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad6049d2-104a-45ec-bbe8-f255b59cc3bc", "sighting_of_ref": "indicator--6025f03b-5fae-42d2-a898-8768a6c98f57", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1eaac0b-9520-4114-bc43-f52011d778de", "sighting_of_ref": "indicator--84bced41-c9b2-4e82-9ec4-93d29ae30b86", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3776a7-588f-49af-b1e4-5aa6bc65cd1b", "sighting_of_ref": "indicator--84bced41-c9b2-4e82-9ec4-93d29ae30b86", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bfb30f3-2fbf-42fd-b461-d610e7ece960", "sighting_of_ref": "indicator--84bced41-c9b2-4e82-9ec4-93d29ae30b86", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f6bb17-1e74-47fd-88f7-83de662614e9", "sighting_of_ref": "indicator--036f1f3a-28ce-47eb-814b-fb6346fc42d0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8e0cff-3b19-477c-a718-efbe08db5f91", "sighting_of_ref": "indicator--90a70651-65d5-4bab-a0dc-fec77e0bd0ee", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0340684-a1e4-404e-9d9c-7f3471781851", "sighting_of_ref": "indicator--3068d155-7196-42fd-ac17-9a505c65dbc5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed1a3bf-04fa-4a38-a155-bf2d019e751b", "sighting_of_ref": "indicator--8afd3130-b769-4642-a97c-2b397fc00a1a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5354e1c1-de64-4afd-8970-f118ae7ae8d5", "sighting_of_ref": "indicator--8afd3130-b769-4642-a97c-2b397fc00a1a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9316f3cd-0324-4019-ac8a-6757da17da3e", "sighting_of_ref": "indicator--8afd3130-b769-4642-a97c-2b397fc00a1a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047b4350-48ea-4980-a406-47e24608a03e", "sighting_of_ref": "indicator--b74e0f18-f5cb-4737-9e3b-1de29d6abceb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae1a2d8-3daf-4916-af6b-eff8918784af", "sighting_of_ref": "indicator--b74e0f18-f5cb-4737-9e3b-1de29d6abceb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878e6932-4f58-4f00-b275-1375126f9c3f", "sighting_of_ref": "indicator--77a2c8e7-aeb5-4638-a542-1cc8c83fb71c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f4edfaf-91e6-4d54-8522-e26eafff95cf", "sighting_of_ref": "indicator--77a2c8e7-aeb5-4638-a542-1cc8c83fb71c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe74d320-a565-4769-84ed-37b1a28fc4d5", "sighting_of_ref": "indicator--49a86e92-7ff0-43ef-9cbc-746d0b3c91d7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd4c8ab0-7cd2-469d-abbe-773864ef8bd7", "sighting_of_ref": "indicator--49a86e92-7ff0-43ef-9cbc-746d0b3c91d7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ee6e37-da80-423f-b0be-d71103cdf64e", "sighting_of_ref": "indicator--f152fba8-518a-48e5-9f8a-2b708084372e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ecaf54a-d65d-473c-9364-8180b25202bb", "sighting_of_ref": "indicator--1bb51101-178a-4ece-9958-03c0ab1e1e78", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc850f18-8e22-4da0-895e-6867c0f5c6a1", "sighting_of_ref": "indicator--20204be5-1242-4a6f-9e06-3eee9e25b7e8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9614945-ee9a-4662-850d-dffcf830f504", "sighting_of_ref": "indicator--20204be5-1242-4a6f-9e06-3eee9e25b7e8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a0e8430-179f-4e17-92b0-e0c620c4ad6d", "sighting_of_ref": "indicator--14dadfa3-ddf5-4fb8-98d4-33b0b225262a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb2d274f-2efc-425b-a6bd-d31a979d8923", "sighting_of_ref": "indicator--14dadfa3-ddf5-4fb8-98d4-33b0b225262a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e93c73e-c3f0-41b6-a81a-5696c4950068", "sighting_of_ref": "indicator--14dadfa3-ddf5-4fb8-98d4-33b0b225262a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a5b324-7e7b-4243-b547-37ca21a769eb", "sighting_of_ref": "indicator--a8446d86-a93e-42c8-a037-26b552c0a1c2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39194acc-f48a-4555-923d-d65af9ad03a6", "sighting_of_ref": "indicator--a8446d86-a93e-42c8-a037-26b552c0a1c2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94fc5f9b-5fed-4b6d-b28f-1169439a96b0", "sighting_of_ref": "indicator--0bbf3795-fa1d-49d1-ad54-dad941969ae0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6811ddf7-4fe6-446e-8ca3-26606f27cc88", "sighting_of_ref": "indicator--db4582c3-bad5-4321-9c22-4f0ccd527a39", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f30d45-49a5-4afa-a98f-430d434f7b1c", "sighting_of_ref": "indicator--db4582c3-bad5-4321-9c22-4f0ccd527a39", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85aacd07-4563-4c2d-9485-092a6ebe1a06", "sighting_of_ref": "indicator--db4582c3-bad5-4321-9c22-4f0ccd527a39", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66fb8337-4fc6-4a84-8a30-ddd407216073", "sighting_of_ref": "indicator--cc39fe18-a26b-4e19-8129-7dd639396eb3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e41db8-98b1-468b-90f0-f5bb8dd845ab", "sighting_of_ref": "indicator--48d03256-ec93-4ae2-8ee6-d3b8b3ee5116", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10555d28-dab2-4755-8a83-d773fa8f09d3", "sighting_of_ref": "indicator--92cc8053-7c16-4e38-871c-67d11d91dad7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7edc0e87-8791-4122-8feb-f7d3ddb191bc", "sighting_of_ref": "indicator--6d77a20f-ec0c-44ae-b878-392db14910fb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--214de93b-5165-4975-9ce4-a74a44369483", "sighting_of_ref": "indicator--6d77a20f-ec0c-44ae-b878-392db14910fb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11c7e4d-efd0-48e4-95b6-ba485bb783be", "sighting_of_ref": "indicator--6d77a20f-ec0c-44ae-b878-392db14910fb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d593427-e13d-4830-ba9e-f6ab57d6f517", "sighting_of_ref": "indicator--34bb62ae-4c59-4c1d-971e-865c99f315c2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3997f1-ba50-44b0-90ab-9ba0e1c64951", "sighting_of_ref": "indicator--34bb62ae-4c59-4c1d-971e-865c99f315c2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513167d6-d88a-4e30-b605-93340defdf91", "sighting_of_ref": "indicator--34bb62ae-4c59-4c1d-971e-865c99f315c2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1149e8f6-460a-4949-b92b-ae369423d487", "sighting_of_ref": "indicator--3a37c74e-6914-4779-a4cc-f8da3f3788fa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f15b62-33b2-4f96-b365-0e5a84fe4dba", "sighting_of_ref": "indicator--3a37c74e-6914-4779-a4cc-f8da3f3788fa", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26380bb1-1e58-4486-b3ed-b8f82fa241c6", "sighting_of_ref": "indicator--3a37c74e-6914-4779-a4cc-f8da3f3788fa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f50434-f89e-4e69-b107-cea8ff1555ad", "sighting_of_ref": "indicator--a1066e5f-be00-4f6c-8697-50f14ff43e5a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb5f190-1be0-4797-a1b3-10a5c4180bf5", "sighting_of_ref": "indicator--a1066e5f-be00-4f6c-8697-50f14ff43e5a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ebe6332-38fd-4e92-b6d3-4a2be95cb0a1", "sighting_of_ref": "indicator--82acf69e-d2d3-4946-bd13-2d4d2b8d214e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4b5f5e-5415-4e71-9e7d-17d45d4d3e39", "sighting_of_ref": "indicator--82acf69e-d2d3-4946-bd13-2d4d2b8d214e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e6669e-368e-4c63-84df-e76cb8f4d8ca", "sighting_of_ref": "indicator--c06a3198-c960-4bd7-8c5a-e8a784bc14f4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634afbd9-c6ab-4acb-bd1e-49bbade4a05f", "sighting_of_ref": "indicator--c06a3198-c960-4bd7-8c5a-e8a784bc14f4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae6bf79c-98d4-4d78-8933-651195421ab1", "sighting_of_ref": "indicator--13c463ae-d68c-4e99-8fff-2cd43667739e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da06759-7af5-4321-b520-d9d4b6ec8b7b", "sighting_of_ref": "indicator--636bad6c-858b-4060-b390-7eeefe6b695c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212ece54-cc22-456d-918b-05f5993f55db", "sighting_of_ref": "indicator--636bad6c-858b-4060-b390-7eeefe6b695c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5104363-44ab-4d89-bf8a-d19386663be9", "sighting_of_ref": "indicator--5169b76a-624c-4feb-aca1-1be79ee02983", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79de37b0-4afb-4639-a2ee-c7645a95735e", "sighting_of_ref": "indicator--5169b76a-624c-4feb-aca1-1be79ee02983", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea1507b3-0e9d-4d98-8b2e-48f5d042f76e", "sighting_of_ref": "indicator--df256069-2b04-4663-839d-b935a1ecf75f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd484e8-a410-4cda-b7ed-c5ad3d7b6486", "sighting_of_ref": "indicator--112aaae0-02d6-4ff1-997e-5f9217be5c23", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c030f02-b08b-403e-9a4b-7cceae2b6c6e", "sighting_of_ref": "indicator--112aaae0-02d6-4ff1-997e-5f9217be5c23", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72113f4a-ab3c-40b1-8c74-766df47ff6b9", "sighting_of_ref": "indicator--9989cc04-96d6-4054-a640-0ef27c32826b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2208331b-a3e7-4316-b597-025b20ef84a7", "sighting_of_ref": "indicator--9989cc04-96d6-4054-a640-0ef27c32826b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b34228-61dd-43c3-9c25-7430d06a3601", "sighting_of_ref": "indicator--9989cc04-96d6-4054-a640-0ef27c32826b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d490143-1cde-4402-bff0-845efdf15552", "sighting_of_ref": "indicator--b0d3918e-d28c-492e-a706-8e44ab42cab0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a755f1-1234-4270-b354-5ae6f253f83d", "sighting_of_ref": "indicator--b0d3918e-d28c-492e-a706-8e44ab42cab0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c16cd4-a98c-4869-a305-d26664b31ec1", "sighting_of_ref": "indicator--04c89393-56dc-44de-8f9e-c3a5264ebe36", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c2d6b4-4120-458b-b5e3-a7890a7148e6", "sighting_of_ref": "indicator--04c89393-56dc-44de-8f9e-c3a5264ebe36", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f5a8942-c087-4bcd-adb4-c26604f8b142", "sighting_of_ref": "indicator--44ee7880-880c-4910-8b9d-f384e21c6055", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b6e2a4-5023-44f0-be92-fb434d571336", "sighting_of_ref": "indicator--44ee7880-880c-4910-8b9d-f384e21c6055", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae43dc4-b085-4f03-8b86-4df4a858dc3b", "sighting_of_ref": "indicator--7b0b9c4b-63cc-41ac-86a5-6abbf22864ef", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5f39ae-00a3-4523-a1cc-b527ecb81d2f", "sighting_of_ref": "indicator--ced2ac58-98fa-4cd2-a37d-f533500d9fc9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c6ef2fa-0620-4ddb-96a5-7b7a369fc1ce", "sighting_of_ref": "indicator--ced2ac58-98fa-4cd2-a37d-f533500d9fc9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc837e9-9cb4-4c64-bd8a-3a1dc7d032ae", "sighting_of_ref": "indicator--ced2ac58-98fa-4cd2-a37d-f533500d9fc9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa864417-1bba-4c8d-acc1-e878035bf33e", "sighting_of_ref": "indicator--7cffdab4-7bb9-444f-9fbc-366058cb0b89", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9adbdbf1-2a15-4af1-8c4b-ead03145c83f", "sighting_of_ref": "indicator--7cffdab4-7bb9-444f-9fbc-366058cb0b89", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e472f7-17df-403d-a9f1-6220640b77c4", "sighting_of_ref": "indicator--7cffdab4-7bb9-444f-9fbc-366058cb0b89", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9199d86-7197-42cc-99f3-72472fd605c8", "sighting_of_ref": "indicator--de4fd179-43ff-4b0f-93d7-602fb9d1f73d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61534656-ce51-4eb5-8789-b14ca71d6ecd", "sighting_of_ref": "indicator--de4fd179-43ff-4b0f-93d7-602fb9d1f73d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb241dd-91a1-4181-a00c-daaa882e654f", "sighting_of_ref": "indicator--de4fd179-43ff-4b0f-93d7-602fb9d1f73d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6485af81-080e-4623-8bc1-dddc349c729f", "sighting_of_ref": "indicator--c082b75a-164b-44b1-996b-2c9e050f4874", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c25dee-4a09-4636-9861-703b375c26c8", "sighting_of_ref": "indicator--2e20a551-b098-4151-b8ca-6a3ece97affc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acdfe7c4-3c72-4dd2-b20b-4658b35ca1a3", "sighting_of_ref": "indicator--2e20a551-b098-4151-b8ca-6a3ece97affc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6277c5b8-0b4e-4cd7-9ba7-46bcf8f77da4", "sighting_of_ref": "indicator--e45e25fa-a5e4-4991-9f09-9e24d877497b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63b9b85-a26a-4545-a308-910079c98891", "sighting_of_ref": "indicator--8472cbf6-df16-4719-bf6b-c93dda78d3c4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8233e3be-4c28-42f7-9091-3884fd39af78", "sighting_of_ref": "indicator--8472cbf6-df16-4719-bf6b-c93dda78d3c4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62bc4688-fe79-4e52-a5e9-9a460b17aa73", "sighting_of_ref": "indicator--8fbc8695-d267-4821-a708-44af7fbec29e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--895b0860-9d89-4b04-8bb9-d37c917e3c6c", "sighting_of_ref": "indicator--8fbc8695-d267-4821-a708-44af7fbec29e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d679bb8-3685-4705-9e31-09d02f832c9e", "sighting_of_ref": "indicator--b0385efd-ac87-4bce-9dab-54b5906e6e38", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5864ff1a-6b54-45d8-9ea6-28b3271ec3a6", "sighting_of_ref": "indicator--6da2dd41-3941-4b48-9b4c-6a6ffbb2275c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f15523e-a372-4660-8b8e-df4a50a8790d", "sighting_of_ref": "indicator--6da2dd41-3941-4b48-9b4c-6a6ffbb2275c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--096e0e9b-8a0c-44b2-9aa8-dc73563fe6fb", "sighting_of_ref": "indicator--6da2dd41-3941-4b48-9b4c-6a6ffbb2275c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e1a5d2-6c33-42c7-b97a-d99183a39f88", "sighting_of_ref": "indicator--f4fc2fe9-f715-4dc9-b5b2-8e074fe39fb8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ffe32c-b0fa-4e7f-b207-a10272f0d88e", "sighting_of_ref": "indicator--f4fc2fe9-f715-4dc9-b5b2-8e074fe39fb8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ba8d0c-91f8-41fb-bbd9-8f96f7f234d0", "sighting_of_ref": "indicator--18abecbe-a108-40d2-b1a1-2cc3743e69cb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456c35ab-d50b-464b-8d78-5fa60704c67f", "sighting_of_ref": "indicator--1e353264-2c41-4c15-9f02-54f1b524754d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b6984e-63bf-4d0d-88f1-48ba7513b4d2", "sighting_of_ref": "indicator--1e353264-2c41-4c15-9f02-54f1b524754d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa0a13c-0900-4368-85b7-e91cf6017f1c", "sighting_of_ref": "indicator--f2f85cd8-1513-429a-8888-ce0000ab8cd3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102b6dab-5cca-4d6a-bfb0-e64ebc81fe36", "sighting_of_ref": "indicator--f2f85cd8-1513-429a-8888-ce0000ab8cd3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec982024-4d72-4c8d-a9a6-82e1b4bdbe6f", "sighting_of_ref": "indicator--6d3ab950-2bf1-473f-af9b-1dbc5850f450", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7adf3cab-cc9b-4859-9946-8c8b225fc47e", "sighting_of_ref": "indicator--db59610a-6ae5-4ca3-94fe-0f4b00763284", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6428b30-6493-4a83-b8fb-70435faad407", "sighting_of_ref": "indicator--db59610a-6ae5-4ca3-94fe-0f4b00763284", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba91b3b-2f68-4356-a973-83137d5a54b3", "sighting_of_ref": "indicator--7657b9ba-5400-4510-a620-8992b5032d9d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1556f26f-7c27-4520-9c5e-0b95df941b46", "sighting_of_ref": "indicator--7657b9ba-5400-4510-a620-8992b5032d9d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d6c872a-15a5-4191-a54a-a60d15e83127", "sighting_of_ref": "indicator--2f6eb457-2934-415b-b514-4c43cd0ccc85", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16beb88f-cc7c-4061-9b03-c77b9be9135a", "sighting_of_ref": "indicator--cac6998d-b7bf-49ec-8809-f160282d4419", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a8d92c-078e-4185-ba3d-e2d627dbc50e", "sighting_of_ref": "indicator--b4e517df-9f94-4e13-8b7f-05282a93ad66", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95227e00-825d-4bcf-aa18-20d979626405", "sighting_of_ref": "indicator--b4e517df-9f94-4e13-8b7f-05282a93ad66", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e40e216-8ecb-4235-99a9-29c3684d1548", "sighting_of_ref": "indicator--b4e517df-9f94-4e13-8b7f-05282a93ad66", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1fefb49-0788-4f6b-9817-0415d437b1dd", "sighting_of_ref": "indicator--80575b81-0b02-4b52-9e15-8707c6790fc2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--577504c6-85d2-461f-969d-32584ea5330c", "sighting_of_ref": "indicator--c8989f69-f3b6-443e-8e84-3d358d5638f5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb607ccf-3ddb-4d91-8775-3d25b6aebc9d", "sighting_of_ref": "indicator--d4a35197-ad5d-4875-a89f-5949abc93e9d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f37823fc-874e-4c84-bd20-b1de7dee7f83", "sighting_of_ref": "indicator--75d1294a-65c5-4582-b9ff-3d674b0682ff", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5cae69d-e43b-44cd-b7c0-a8a5d2f86640", "sighting_of_ref": "indicator--0876fc95-b3fb-45c2-9ea0-ba10cf56b922", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e25ba32-253c-473c-87b2-5fc6123d3474", "sighting_of_ref": "indicator--e7a8b5b7-66c0-4b8b-b88b-8ddcab2f2879", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c76a8d7a-78a4-4312-9b78-44b4c2b460b3", "sighting_of_ref": "indicator--0fbe019e-6b57-46c9-9b95-93cd823b54d1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4d4841-503a-431d-b10b-a0c5ec9125c4", "sighting_of_ref": "indicator--0fbe019e-6b57-46c9-9b95-93cd823b54d1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f87a4d-9d5c-462b-abe1-46fc59042b84", "sighting_of_ref": "indicator--37bb17a7-8ca2-48eb-a7a2-81e3241f0e87", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b4aa32-291e-4dac-be52-1ba067e73edd", "sighting_of_ref": "indicator--b99f9da8-5b1b-43a2-8631-fff133ca0aa7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b53f7d81-de61-4621-9d41-791b85c8cbdb", "sighting_of_ref": "indicator--b99f9da8-5b1b-43a2-8631-fff133ca0aa7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db4c3c5-31a8-46e9-a90a-7bf0c1a3133b", "sighting_of_ref": "indicator--ae7607ba-8436-439f-be93-423f95e877dd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e5d3ff-b409-4e2b-964d-5e720ae55477", "sighting_of_ref": "indicator--86d5ad70-e3a5-4ea6-a70b-6787f522f053", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ba1ab3-09a6-4829-805e-360545b5e69d", "sighting_of_ref": "indicator--7d371c64-fde2-4e43-b6a3-1ebfcfe0d425", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22500a6e-1fc3-4032-9458-8b4c7934bd24", "sighting_of_ref": "indicator--369e2d16-6534-401a-8f59-0b375d940949", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a99a341-0f65-4b7f-9622-80dbc9da7070", "sighting_of_ref": "indicator--369e2d16-6534-401a-8f59-0b375d940949", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1b446c-d36e-4978-a850-3912aa5fe49d", "sighting_of_ref": "indicator--e3a9ddfd-71d8-4858-906d-77293f70a332", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4141f8f-5a3b-483c-affd-f9326f60dd22", "sighting_of_ref": "indicator--e3a9ddfd-71d8-4858-906d-77293f70a332", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a818776-777f-410a-bec1-bea0bab61d77", "sighting_of_ref": "indicator--0ede1bbd-7b46-4632-ba8c-09c01755cf42", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1440ad9f-9dfd-4b1b-9166-ec0163d1b8d6", "sighting_of_ref": "indicator--35b7e82c-35ac-4b6e-8461-cd590558a7e2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff80964c-74a7-46d6-af99-2d43d6b5d799", "sighting_of_ref": "indicator--5d2373d1-bf11-4cba-82a7-e5bab2eee9cb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8429d035-c80b-4bb1-96b3-59f20703ef8d", "sighting_of_ref": "indicator--dac24b9d-4738-470c-8bbf-bfcc59546a5b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f854647-1ffc-4a33-872f-c24575ea3c75", "sighting_of_ref": "indicator--f418fd5f-e356-4e01-b839-8a0408515563", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee916fa-5c73-4e61-adce-d66e60dd327e", "sighting_of_ref": "indicator--056cb09a-eccc-4c29-b643-efbbc8291f0f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ca560b-f6cc-487e-829e-a9024a11cc34", "sighting_of_ref": "indicator--dac7916b-4a26-486b-8115-57b0c899b1bb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490a6cb7-cce0-4956-ba66-a110d108fe15", "sighting_of_ref": "indicator--c362265b-7c83-4a32-a95d-ea908bb41ed9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a143356d-8bf6-45f9-b36c-6f79f4d21149", "sighting_of_ref": "indicator--4ff88ea5-916d-49ac-971f-a1b73d76f061", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29403e15-575e-41c3-b0ef-c6d404caf00c", "sighting_of_ref": "indicator--e1d7e072-eb0f-4825-8d50-c36ee24b24fa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a41e7c4-fc63-4dcd-8c70-178fd4be9b76", "sighting_of_ref": "indicator--e1d7e072-eb0f-4825-8d50-c36ee24b24fa", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb171f95-235d-4f39-b37b-b5f4f78e86c0", "sighting_of_ref": "indicator--e1d7e072-eb0f-4825-8d50-c36ee24b24fa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c980a3d-4851-44a0-ad66-f8eeb05c6028", "sighting_of_ref": "indicator--727f3075-a744-48e3-bf59-7ef27d8bc7f8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--758e222b-42cc-4c3b-b621-2f87300e745d", "sighting_of_ref": "indicator--727f3075-a744-48e3-bf59-7ef27d8bc7f8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ca2a75-afc3-4bcf-9842-2a8875036505", "sighting_of_ref": "indicator--727f3075-a744-48e3-bf59-7ef27d8bc7f8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1070cf6-9ba7-4f1e-8d67-5612331cfbb4", "sighting_of_ref": "indicator--937069a1-ed0d-448a-a07b-175c64823bae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--282ed177-8f2f-4bb2-bcda-c967fd612211", "sighting_of_ref": "indicator--1d7fe3f9-15a9-42e7-bafc-46d0c66bdd29", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e78844-9e36-4149-abef-d35d21bf9822", "sighting_of_ref": "indicator--b36e0f23-78aa-4ed2-afd2-a3334e8f30c0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc42f4d5-c9ec-4c24-9e1c-911149e4601b", "sighting_of_ref": "indicator--39157ec6-84ed-4aaa-beda-4d7d8431c3ff", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4269b902-5174-46f0-a81c-e4c71d098cd3", "sighting_of_ref": "indicator--39157ec6-84ed-4aaa-beda-4d7d8431c3ff", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--705b5035-4b05-4d9e-a237-cca72a95473a", "sighting_of_ref": "indicator--b3b807d7-375a-434f-839e-0a367dec33e0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e209d7f-ba05-4efd-9c0f-a59098069d25", "sighting_of_ref": "indicator--16361379-bd25-4586-a89f-124f4f80bf1d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e2259f7-25ba-443a-9dc6-cafb9a608052", "sighting_of_ref": "indicator--497a8829-2d2d-4019-8882-5fb50f7fdfb2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d57a993-a8ec-4dbd-968f-d8b7799838a1", "sighting_of_ref": "indicator--a0c71157-ca17-40b5-abb6-55038f6b2699", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a383ff-b836-43e5-884b-624add899558", "sighting_of_ref": "indicator--e10a62a8-cbb6-40ed-a419-c521cb72dee0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49cd859-adab-4223-987e-7417e611f8bb", "sighting_of_ref": "indicator--817f4317-61a1-46a6-85da-4fc96f58fb15", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff3cdff1-314d-4fa1-bc26-7bfc8e32c2f0", "sighting_of_ref": "indicator--6aa409bc-b7ea-46dd-b740-5eeb085d60b0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd4e158-6a9d-4eda-8119-cfa685a11a8c", "sighting_of_ref": "indicator--01b9121e-27df-4970-9706-39975a6a7cb1", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd034104-6a5f-4a0a-a66d-db35d4c24e6a", "sighting_of_ref": "indicator--969354d8-3077-4005-a2ad-e9233bbff864", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879553fc-755a-42c1-80f2-28afaf8d015e", "sighting_of_ref": "indicator--7121cd52-f329-4349-9d3c-f7a67b424eb4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b68025d-f7c5-454c-a405-1b35f1cd462e", "sighting_of_ref": "indicator--70e4cdba-00e7-4b4b-a1e4-5964f6accd53", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ff5eb3-b1d8-4130-ab06-203b68b62c48", "sighting_of_ref": "indicator--0da050d3-80e7-4419-8eea-ad279feb66e4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f9b93a-56e2-4f76-8bb6-9e81d03b05be", "sighting_of_ref": "indicator--dac08be1-da49-4415-9f52-ae344aa91c3b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--573af78b-2fed-444c-8829-8a1b32a9ecb8", "sighting_of_ref": "indicator--7632b23e-7845-469d-bf20-a56fb7cba478", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dbad0e9-a395-4e49-9413-147100682285", "sighting_of_ref": "indicator--7632b23e-7845-469d-bf20-a56fb7cba478", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9418aa4-6afb-40f6-a972-a6a1ddca3f62", "sighting_of_ref": "indicator--1e668635-9a08-42c5-a45f-fb3e70a6f802", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f4226f-7d96-4ae1-b0cc-32d41b56d409", "sighting_of_ref": "indicator--cdbca0ef-685d-4782-8eba-3a0231b26e64", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d4e09a-9c36-4a16-910a-21a1ac8e7ea3", "sighting_of_ref": "indicator--f6985ba5-883e-4255-b70f-d1e0bdf6920a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef8888d-a654-4606-8e1a-3db2b6116a69", "sighting_of_ref": "indicator--c41f3cdf-a493-4ec0-ae5c-d30733ad40ab", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a56a3902-0146-4224-89d3-fc8a2e51d7e0", "sighting_of_ref": "indicator--c41f3cdf-a493-4ec0-ae5c-d30733ad40ab", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a78396ec-388b-463a-93b2-e90740618ebb", "sighting_of_ref": "indicator--3abe9224-3a2e-4cef-9f91-82197b0d08aa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e289d00d-5ced-4ada-8a55-0e331297b864", "sighting_of_ref": "indicator--4f38d550-26c5-434c-9998-6c408e58643d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f95e62-e040-4b6f-b651-a5ef9c51db55", "sighting_of_ref": "indicator--b1c1702c-4c71-480b-ae22-ea1f7ca57cbf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1605782c-a1a1-4c2a-9b1a-05953d2794a7", "sighting_of_ref": "indicator--beb82d40-3197-4b8e-91ff-64fe37878639", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b988c4cb-b6d2-42b5-a711-67294528248b", "sighting_of_ref": "indicator--67198a99-7e21-4fb0-86e6-84720baef52b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff9b712-e07e-4ded-99aa-83f8b18f2f71", "sighting_of_ref": "indicator--5ad17186-f5da-4526-a93c-ca74f524ebf6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ba7659-7145-40f4-a417-83acca1055b6", "sighting_of_ref": "indicator--fa22f6c4-9efc-4275-81e6-b242a4c1faf5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edff9b63-5cf7-4e5d-8852-4d2f7b3a72f8", "sighting_of_ref": "indicator--d8e8f2a6-ffc3-4b07-9eb0-9afb8e839299", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--414b5c63-f16a-4b03-97cd-5fe155698749", "sighting_of_ref": "indicator--d8e8f2a6-ffc3-4b07-9eb0-9afb8e839299", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c499e6-428e-4f4a-9dec-76a7b1f2e74f", "sighting_of_ref": "indicator--b1c83b65-ff26-4433-aa1c-bda473bbcc78", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3031bba4-5f69-456e-b474-32046240c00a", "sighting_of_ref": "indicator--12c755ee-bc54-4433-894d-11e775f8454d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0341fa63-f6e0-4bcb-90ff-dd02a5b6149c", "sighting_of_ref": "indicator--81331551-ef7f-4501-bf49-f145f0815c7d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8adda621-23d8-4886-8f23-59f93e3444de", "sighting_of_ref": "indicator--74b305ec-6a20-4728-b1d2-5588625bb902", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc810dcf-dc5a-42dd-9c65-66a94afcdbd9", "sighting_of_ref": "indicator--fd432612-4978-4e9e-a708-7cdc252854df", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f37639-a376-4ed5-ac1c-2176cfca88ec", "sighting_of_ref": "indicator--13761873-4faa-4532-8769-700c04044980", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--997d3c45-7e46-417c-af33-7cc8250e105b", "sighting_of_ref": "indicator--906d34b3-a5ec-49c1-a9cb-7b05b555942a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36767435-f37f-429b-8b00-176171b9ed9c", "sighting_of_ref": "indicator--e573f606-df05-4592-8365-6f826b4bcbed", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b249b01-a3d9-48e0-9cb5-00296acd8e05", "sighting_of_ref": "indicator--37a6ed23-9c5e-46e7-807a-394687b6a506", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5531412-160a-4296-ba6a-402f37be6aef", "sighting_of_ref": "indicator--03de6f45-54d7-436a-a840-21f55b12bb12", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5815bf7-ffcf-47b7-b4fd-1ea15531bb96", "sighting_of_ref": "indicator--2c1ab0f6-de14-40ed-9cf4-13d90ea02f3b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4aa9101-0d74-4436-bc48-2408a602ef2a", "sighting_of_ref": "indicator--f42240df-b3bf-4d9b-a5e0-e3fecf853b6b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94fea336-990d-4974-9dc6-56d386ab0fda", "sighting_of_ref": "indicator--aafd2857-1f06-4773-a732-7469964f3c95", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c0b17b-6a70-4240-b89f-777d8a5e8ac8", "sighting_of_ref": "indicator--b23aa30c-aa63-4d29-8c13-6c8372f02dbb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127ebe6a-a19f-4dec-b9dc-98ff19877bc3", "sighting_of_ref": "indicator--e243bda6-fac8-4fd7-9283-e1b9112d1cda", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b99ffff2-8e57-4e38-909c-1d931b2842b1", "sighting_of_ref": "indicator--d0bd321d-7945-458f-9797-6ee0c6029fa7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f649edb-3c29-4391-bffc-0ad158a33061", "sighting_of_ref": "indicator--e263141b-ed27-474c-95c7-1077691d81ea", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--646e3c64-7de9-4f83-af68-466654001e9e", "sighting_of_ref": "indicator--6998fdf9-c91a-4f43-891e-93db4958b025", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf6251c-15a1-4201-af7b-9102e2a85eef", "sighting_of_ref": "indicator--bdc81b04-dc58-401a-ad5e-8ec840295b9c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25b7bc6-a4ab-4ad7-9d0f-b454a09aa3c4", "sighting_of_ref": "indicator--d3f48b2c-4479-47d1-b384-a6be246a8ab6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--747bddf0-bf34-4304-8a68-ad5c6324fb3d", "sighting_of_ref": "indicator--506aa0a4-9947-4e47-bfda-08d56bf6499b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97efdb80-aedb-4bd5-8698-33c9f122943d", "sighting_of_ref": "indicator--7a63201f-4aef-4ee1-ae9c-56cd3db4d242", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed45588-549d-4ac7-882a-e5d9fe4a65f8", "sighting_of_ref": "indicator--6922f189-656d-47a3-b9ba-c6f10fb2706d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee47a3a-6cc1-40db-81a6-29f612369ee0", "sighting_of_ref": "indicator--b7de604d-6a0f-45cb-8439-bb3be725bc20", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f237db8b-5234-475d-b0e4-3c0dfe6df751", "sighting_of_ref": "indicator--ad7c25b0-706f-4c9c-b4ac-44b4838a25b0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5457dd7e-e78a-47fd-94d9-a54e63d1ff10", "sighting_of_ref": "indicator--11cb3cb6-3a88-4c55-b7ee-f0053fb23728", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52ae82b-2ea3-484d-abe6-319658c116da", "sighting_of_ref": "indicator--e56b24db-5f40-4313-968f-9f030bc28110", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1047d43-24bf-4567-afcf-aa14547f02d1", "sighting_of_ref": "indicator--c1003699-d2e6-4f1c-b9ce-d270827eb0ea", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a85801-1d7f-4513-8912-639180fcf6d6", "sighting_of_ref": "indicator--15dbe348-ed83-470c-9744-1aa464543261", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c4ed40-0c87-42a0-b6b0-74c41f8f1e8f", "sighting_of_ref": "indicator--249a1471-4d9a-4032-8f92-c414110dd1f5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--805063c9-4b2f-4727-8c66-a78a59645e65", "sighting_of_ref": "indicator--572b1563-1e9f-4815-9cd6-ffd35caf010f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995188f2-3a11-4fb3-b30d-bedb011d7f1b", "sighting_of_ref": "indicator--e0f5460b-4420-46e0-9197-64004943a6d5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd3e48b-bc75-4cfd-bd67-33dfb12d3cc0", "sighting_of_ref": "indicator--ce9b2bfd-c9ba-4336-9dee-8c340ef0a642", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8266cbcd-1ecd-44fa-a88d-8626f04ec1cb", "sighting_of_ref": "indicator--32555213-eb26-4118-b22c-25b435ffbde3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--219c84ff-b6df-40f8-9726-20e11d860f58", "sighting_of_ref": "indicator--9ef4b942-143a-497e-a2cf-e8565e9f4bd6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb2569b-57b2-45ff-abd8-6125f0633615", "sighting_of_ref": "indicator--8c20dbbf-ce62-401d-908f-4683e6740799", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0756c88d-488b-4501-b545-d8771846ba17", "sighting_of_ref": "indicator--94887720-c671-4848-8550-e6108a04a7f5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5232b5-5837-4b7d-a8aa-7dde910ecfc4", "sighting_of_ref": "indicator--94887720-c671-4848-8550-e6108a04a7f5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ab67bf-dd7f-4f78-b73a-fd301724774e", "sighting_of_ref": "indicator--9aeb4a73-7402-4489-ab46-68f6e7d2b91d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb3b5bc-2355-42df-9493-d6835f92df50", "sighting_of_ref": "indicator--eceec770-07e6-46e2-8f90-c5b428b36983", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff06de9b-a50b-4975-8356-cdf9de98479b", "sighting_of_ref": "indicator--111e44a2-35a9-421f-88dd-2fe44aac1363", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af1b2ec-ea5b-4112-b63f-9691e728cb39", "sighting_of_ref": "indicator--111e44a2-35a9-421f-88dd-2fe44aac1363", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee38f237-ba5b-47bd-83ab-292fa0b06c0d", "sighting_of_ref": "indicator--dd06e668-e519-4416-8e78-e2925f831f28", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d0d5e78-2f5f-4f28-97a2-f90649086d12", "sighting_of_ref": "indicator--0171f7c2-8f33-47d4-9f22-0dfba4c959dd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5531aaf-d52d-4cb3-a9e7-7823407193a9", "sighting_of_ref": "indicator--672b97c4-ab65-49a4-9613-92a555cba099", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd722308-c570-400d-9642-1efd47ea84e4", "sighting_of_ref": "indicator--9ac0d628-53e3-4274-a664-a1b20b770923", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e64b64-7572-4cd6-b9d7-80af4b9f3fc8", "sighting_of_ref": "indicator--ec6ac8e8-a0f0-410e-a03e-0fc0d985c227", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b258def6-2dbf-4666-b819-3f7012a82ba8", "sighting_of_ref": "indicator--ec6ac8e8-a0f0-410e-a03e-0fc0d985c227", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea50e024-9fca-4f80-9206-264a38205325", "sighting_of_ref": "indicator--980aa33b-ef98-4de6-a91f-d3003b24ae8b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dccbf828-3bcb-41d1-b625-7c97eb7c5a35", "sighting_of_ref": "indicator--980aa33b-ef98-4de6-a91f-d3003b24ae8b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3316da65-ee1e-42d1-800a-9fdfe0f11fd7", "sighting_of_ref": "indicator--bb0c838a-e0a0-44be-8ad2-eb8760e4ca79", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0cb13a9-3e2b-40ef-abdd-bcd89d089214", "sighting_of_ref": "indicator--0330c543-9281-48aa-a57b-5c56f7b2199b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1667d197-0d5f-465a-af78-157a8f9171a7", "sighting_of_ref": "indicator--d349c348-ad46-47cd-801f-c9cd57b266d1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b8b90b-049e-462b-8a1f-9f70ab4df7ff", "sighting_of_ref": "indicator--eaf49771-ff71-4aa8-b4c9-3927bff3a0fb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--359c8506-cd86-4966-aa21-8ba6f6f32d0b", "sighting_of_ref": "indicator--a056775f-ccfa-4543-80ef-94cb11aea876", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac5087a-bd96-45ba-a358-7d3c3241e9a4", "sighting_of_ref": "indicator--7d9a9dc9-5066-4a89-838f-43ce919330da", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2913ba68-ea5e-4f04-82d8-882cda2e55c7", "sighting_of_ref": "indicator--ebea3e0b-d419-482a-ad7f-d14ace1eb313", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdfefc17-cdbb-4140-8b28-19c3dbb54666", "sighting_of_ref": "indicator--ec14682b-3e21-4e65-b400-279f196c5738", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb301375-ebab-4c17-b13e-f13f6ea2a6c9", "sighting_of_ref": "indicator--d3f865d3-2d39-4463-ac38-d3b921b8065e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9720e17-ed68-4628-9dde-15f29c2262a2", "sighting_of_ref": "indicator--7081f613-bd22-4bec-a66e-dcddf0ee7880", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd41ec4a-36be-43ae-ac08-bbb3400963ea", "sighting_of_ref": "indicator--f9d66482-5902-45bb-9b62-3b83409dd00c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be0a73f-a2b0-4a68-8bf9-138cd81b7907", "sighting_of_ref": "indicator--b398ba92-0efa-46cb-862e-f8084a018276", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--926c037a-9bc1-47b4-a6da-b59d52f1b84b", "sighting_of_ref": "indicator--d68db27f-72d4-4761-b074-99dba8b3ee32", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f55794-4a31-4fdf-ac92-e0147ba8a90f", "sighting_of_ref": "indicator--eaab7f68-5eba-40c6-8be5-d95922ce0724", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5765f266-e264-48b7-8e02-4f60765357f7", "sighting_of_ref": "indicator--0de6c350-c18b-486d-8611-7c73d6d68389", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f78501d-99a4-4653-8f46-5fbbe8fccfc4", "sighting_of_ref": "indicator--c2e00bf5-1752-4025-b984-c57af9307164", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acad8c78-706b-415c-9fa0-6aacd5858c63", "sighting_of_ref": "indicator--e3a8ee9b-688e-4dbf-879a-4ae847f87c13", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c610bcb-9b2f-4fe8-831f-fa34324f9cf2", "sighting_of_ref": "indicator--aaa3fc6c-98fa-46bc-a246-012f5684943d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b383517f-1d9e-4f4b-9fa9-3eb9b8a418d8", "sighting_of_ref": "indicator--afde1d35-001a-4aa7-91cd-1d0f794185c8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2843488f-86c6-4311-a428-f2a7a03166a6", "sighting_of_ref": "indicator--da73f08b-8014-4daf-bdc9-9d58cb236c31", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d6be62-f74a-4a28-9143-40951111306e", "sighting_of_ref": "indicator--aab45cac-e120-4b04-8895-a2840079a030", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5456f8b-6799-484f-890f-4a1191c236d0", "sighting_of_ref": "indicator--752804fe-0697-4007-9a4e-555c7e34d53e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ae2c92-4a83-42e7-b115-3995313edb9c", "sighting_of_ref": "indicator--37b314f8-87eb-4437-b0f7-59244b30598c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1bd56d6-bdb6-46eb-87ff-36276584ab05", "sighting_of_ref": "indicator--b8ea7f63-4c16-462e-9119-cd8b27fc412b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36fb2f22-17ba-4057-878d-8d0e7075cd32", "sighting_of_ref": "indicator--659dae25-ed0c-4956-8a96-ca54fc54353a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7d3928f-bae1-4801-85b6-de0ab81e3222", "sighting_of_ref": "indicator--0044cac8-194b-48dd-85a9-5f77696035c7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af91462c-c05a-496a-8ed7-119840e7e404", "sighting_of_ref": "indicator--474aad39-db02-45ec-b927-35dfcd816c57", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6512aae-6a0d-4a62-9c1b-e213d15d222c", "sighting_of_ref": "indicator--90e53083-a7a5-48e6-a10e-2dc0d630689c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db700d6-6392-492f-9807-001f2e40d55b", "sighting_of_ref": "indicator--5b72498d-5cbd-495f-aab2-4b49d193f062", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb1e04f-8fa6-42c6-9d4e-74b2bfb27778", "sighting_of_ref": "indicator--9b142f87-3a44-4658-add4-53c00676c49d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb9dcd1-20cc-4890-b33e-353c3105d29f", "sighting_of_ref": "indicator--23956d4e-c1b9-4fb4-9167-0d060d059ccd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7d0ace-82e1-440b-9e53-89bb57637700", "sighting_of_ref": "indicator--c049709b-7dbc-4ea4-bd01-c53d2adf1b19", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822f7a93-2409-4038-92f3-643fb0f4b36c", "sighting_of_ref": "indicator--5cdd23f3-0cb8-4e7c-ba5d-6b6578f5adb6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1542f3ff-92be-4ca1-bc9a-eaebebbd14a2", "sighting_of_ref": "indicator--8d3c7a69-bf1c-478b-8769-8894c21befbb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b484aa5e-8fa5-442f-8ae6-084613957eb1", "sighting_of_ref": "indicator--9c4f412c-a48b-4bbb-9a8f-7b3dfe5b7dbd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a81d505-65ba-4b4a-ba31-737d22c3475f", "sighting_of_ref": "indicator--fca52bc5-1dca-4452-888d-6e6bbce458ba", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa79236a-3dda-4546-b4fc-c447e6ac44aa", "sighting_of_ref": "indicator--73661952-8082-43be-aea9-28064b73c502", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7764374d-7035-4871-a52e-ef7ac377b1fa", "sighting_of_ref": "indicator--9b47c285-992b-4aa0-a194-5e125f1c361f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5fc944-426f-4baf-ac57-b95ee588a4c6", "sighting_of_ref": "indicator--a1b98963-8fc4-45a9-bcfd-90d2b11175c1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fafdba4-9658-428b-9f2e-c1dedb5988ff", "sighting_of_ref": "indicator--6fab34a4-dc67-4065-b612-086fbd090584", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c91e069-c440-47b3-a901-f9639aaaeb5f", "sighting_of_ref": "indicator--4e58340e-b72d-4b90-a310-6f298ca18ca7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4354bb-af1c-49e9-a016-07d1bf78f387", "sighting_of_ref": "indicator--ebc14fb4-baac-429a-a898-b0ba1cd318ab", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0255e1e8-8193-4c33-ab53-24e480ecd136", "sighting_of_ref": "indicator--ebc14fb4-baac-429a-a898-b0ba1cd318ab", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc16b81-810a-4603-abfd-4c8ed56e86a9", "sighting_of_ref": "indicator--d5564b3e-0c24-4eba-acbf-e83abe10fbd8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c081298-5684-482c-a6f1-04eb24bcca92", "sighting_of_ref": "indicator--9f99f112-6e54-4844-b199-fc2c951ff89e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b67613-3772-49e2-812a-d1ca44974430", "sighting_of_ref": "indicator--dbd5b44b-20fd-4a08-9e6a-8382fc30b993", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9749ec-d255-41fc-8ea8-ffe8e06d3e5c", "sighting_of_ref": "indicator--1fbe3c01-9aea-44ea-928a-4eb728a53949", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81dd3b9f-6adc-431f-b523-5654d645815c", "sighting_of_ref": "indicator--1fbe3c01-9aea-44ea-928a-4eb728a53949", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70027c78-d3f0-4517-bcc8-fb9e94891d64", "sighting_of_ref": "indicator--0a7bfee2-f124-4bed-af2f-4fae262ba7f5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526c6128-2a05-4c9d-bc93-85e3f9e0f4d0", "sighting_of_ref": "indicator--c39cae88-f0f4-458f-beeb-da5fb8dfaa15", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8323ce-ef8d-4497-bea5-45644eb405c2", "sighting_of_ref": "indicator--3e88b7cd-fbb8-40c3-95e2-88effffed0af", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ac0fa6-8b5b-43af-833b-2477cfc97b01", "sighting_of_ref": "indicator--8b65fe21-895f-4f0a-b6dd-920bfb7f1dc3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--424df981-0191-4e8c-8aca-b3d18b41785f", "sighting_of_ref": "indicator--3c475600-d40d-4324-850d-36584f281f42", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55091b47-681b-4439-af64-41b470da494a", "sighting_of_ref": "indicator--c2b08052-3275-4ddb-bb6e-143817ecf389", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--973b3e63-c8a3-4645-a91a-56bdbabae0e3", "sighting_of_ref": "indicator--6007b40e-573c-4ce9-83e6-2bf24969ec06", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9229e9c1-ae3b-475f-9a1f-cabdec62d542", "sighting_of_ref": "indicator--3b8d9ecf-d546-4bfd-938e-217558ff4879", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f15a2c-d6a6-4588-b4e5-f4254acc6379", "sighting_of_ref": "indicator--bce279c2-3836-4181-ada4-46072d26aae3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26a60dd-1670-4871-9720-3fff6df97661", "sighting_of_ref": "indicator--ae12f845-22a5-49fb-b185-06794b9adb07", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d9c7cd7-c563-41dc-88cb-6d909ae6b117", "sighting_of_ref": "indicator--51f828da-8008-4d02-9b64-862475f6811a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3ed2a5-6400-4e2d-a32b-9c406af747a2", "sighting_of_ref": "indicator--6c241330-7c15-422d-a3e9-e815e673002c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7e526f-b59f-484a-9fe5-36c5b417d628", "sighting_of_ref": "indicator--9472e34a-4306-4ecc-a22a-e742d9f5562f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610a4faa-de9e-4530-a12e-00c64efdb64d", "sighting_of_ref": "indicator--13982136-5bcc-48ab-8294-07aa95d70874", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23fb2f45-e690-4475-b47e-cdb52ee49c49", "sighting_of_ref": "indicator--5c391e9f-a659-49ad-a932-91f94dc6dd39", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57fc47f3-575f-4e55-8eea-5ab6d91036d0", "sighting_of_ref": "indicator--4b74ced1-08c7-4ea5-89a4-120526e3f84c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8301674-ee2c-4d9e-9657-80e54331d178", "sighting_of_ref": "indicator--4b74ced1-08c7-4ea5-89a4-120526e3f84c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2373284f-b8d3-460c-83d4-6f27b96dd9f6", "sighting_of_ref": "indicator--cf357c50-6c6e-47b4-ba3b-7a5b4cd18889", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d76fbb-e896-406e-a974-637f3f332503", "sighting_of_ref": "indicator--c930328c-4638-450c-9601-456b7cb27042", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34962355-8805-4843-bef3-52c9e336ab23", "sighting_of_ref": "indicator--cc4f48d8-c6f8-4857-9db9-31b9efad8da8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9fb53a-ee13-45cb-9c34-c87c17c9a5f5", "sighting_of_ref": "indicator--9f72fa14-2a97-43f0-9b79-18553684308d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d8653e1-a87e-4c64-9b21-1a2e372cdf92", "sighting_of_ref": "indicator--ffebaaef-9469-4065-ac7e-e45adcb3e76f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da8c842d-6e33-465d-a252-761b253ecae5", "sighting_of_ref": "indicator--edfd892a-eaec-41b4-9c7d-c02ade0c03d1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adedef51-3083-463f-840e-70727a0ea498", "sighting_of_ref": "indicator--198447fa-3885-48b9-bf29-cb5f85a1c1c1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a725a71d-c6d8-4c2d-b49a-c05e6c1d8826", "sighting_of_ref": "indicator--198447fa-3885-48b9-bf29-cb5f85a1c1c1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f25a18da-6afe-49a8-bc1c-0dd855e59545", "sighting_of_ref": "indicator--6d3b0f08-3bbb-479e-a515-3b2ee1b94375", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae5666a3-ec7a-411d-b851-43d14fb91b20", "sighting_of_ref": "indicator--603fb68c-c967-47da-bc54-6e9e15b401e2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c01b2e37-3a8c-425f-8906-fc2c649409a7", "sighting_of_ref": "indicator--32112cd5-6e2f-4c8e-8439-3c0ed9b67bd9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50fc8f32-4375-4b04-ac7e-f3a8eb9cdd2c", "sighting_of_ref": "indicator--a02b6adb-1877-486f-b6b9-b61d34b134d7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d727bed0-3163-4413-ad5b-c806b07ed79a", "sighting_of_ref": "indicator--6521202e-e07d-4c3f-9542-eacd17c8680b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3956a7-1d36-4caf-b020-c87eff8cfd99", "sighting_of_ref": "indicator--6521202e-e07d-4c3f-9542-eacd17c8680b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3eadd1-4134-4d5e-8faf-52a40e4cff9f", "sighting_of_ref": "indicator--52f7d78b-06a1-453e-82f6-f3e30ee9222c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c69843-0c58-4c90-af73-185614056f23", "sighting_of_ref": "indicator--608bde01-d4d4-484e-a36b-44c024a9802a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f1726a-718b-4384-948c-e6f8b2d8c485", "sighting_of_ref": "indicator--96b4e108-daf0-485f-ac77-ee75a2af4738", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca1c7e9-3973-4115-a2fc-ccf73d99377e", "sighting_of_ref": "indicator--96b4e108-daf0-485f-ac77-ee75a2af4738", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef9d206-dc84-4f51-9e5f-6f78e06eabcf", "sighting_of_ref": "indicator--4497a068-3e3e-4f61-a557-3cd79eb3c388", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee669b2e-0702-414c-a85b-5d3073e74c70", "sighting_of_ref": "indicator--8bb99928-562c-40e6-a235-7ba092e74194", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c33ce7-8e59-4243-90d6-9e5264d7e97e", "sighting_of_ref": "indicator--e07ec38b-7107-40ab-9f8b-6dbb625bf2f4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f6a9e6-d0f1-4c91-94a8-36a72dca3355", "sighting_of_ref": "indicator--ecdda0f9-0b5c-4eb0-a55a-c1268d1edc31", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--781c5094-8170-4c91-8ae5-ce667e2776c7", "sighting_of_ref": "indicator--64a192bc-18c0-48d2-9a2f-9379d427b200", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e11be48-ccb1-4b51-b1b8-4118321b2d44", "sighting_of_ref": "indicator--abbbda55-1780-49ef-b131-bd84e878bbba", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de675247-355d-465b-a7b3-ecfad6c1136f", "sighting_of_ref": "indicator--53e655fc-b12d-4034-b6c8-f5b130885684", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8783ddf-abc9-4026-af66-d5637364849b", "sighting_of_ref": "indicator--53e655fc-b12d-4034-b6c8-f5b130885684", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc4c48d-5d8e-437e-a279-d1ddf2c327c1", "sighting_of_ref": "indicator--0fee1913-773a-4422-a9d9-a1e2c54e5612", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ccfded-64f3-489f-8e14-ab24bf1b1dd1", "sighting_of_ref": "indicator--69cbbcce-d6a5-4a6b-8bcf-b4000890ef43", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb33ec4-bb13-4981-9188-a5e4ee2d46fb", "sighting_of_ref": "indicator--2acdd77b-8bbd-45f5-a9f3-980651311460", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677c600d-44b1-4dc6-b9bf-9bbbb4d60e3f", "sighting_of_ref": "indicator--2d04b7cb-c70b-480d-8251-ecb5e64bbae3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4907c7-9809-461c-9eb9-701f01dd74e6", "sighting_of_ref": "indicator--60271119-0a11-4352-b22b-e2e940203143", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6fcd4f7-94c9-4b5e-9bbc-d7824bf4cc20", "sighting_of_ref": "indicator--f42ce193-76d6-4c8a-93c5-57b52c5b37ee", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02aa1ba9-3c7f-4736-9a68-4711475fdf28", "sighting_of_ref": "indicator--a3b6b481-8059-4201-a8d6-da4bfc9ac847", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ec18a4-68cb-408c-8aac-248fa2896be4", "sighting_of_ref": "indicator--c8b27c89-2889-40d5-bbd4-4d0633cc0267", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c6448d-c31d-49ec-bca9-c8b86643cf31", "sighting_of_ref": "indicator--c371cb33-1e7d-4208-9c24-67118af5a3a1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de01f59-f374-4241-b6b3-7bf888f177e8", "sighting_of_ref": "indicator--0f980640-cd1a-484c-b38d-3287f637048a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ad9129-fb58-490e-897e-c5410fc03a62", "sighting_of_ref": "indicator--7ae8ad36-3a5b-405a-a6f7-16c631050e9a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a147fe-151c-4886-8622-10f019d27bad", "sighting_of_ref": "indicator--b4398764-c972-4092-9192-bc82c2a7c7d1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aebc6221-8059-46fa-9d51-a7bb00ee8698", "sighting_of_ref": "indicator--af3835bf-a81d-4512-a78e-8842fc765716", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a014e66-f7de-44f6-afd8-87d62f792b9e", "sighting_of_ref": "indicator--c2f2246c-eb51-463f-b66b-42efb8976356", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--054f02fc-592a-4842-b63e-fbaa9cd466f7", "sighting_of_ref": "indicator--e802d359-1918-4a90-8368-e95dbd8c1be4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7c93a0-f3d6-465e-91cc-fb35160bbd55", "sighting_of_ref": "indicator--e802d359-1918-4a90-8368-e95dbd8c1be4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4251f0bf-8acc-4ed5-87d6-0195bbdac41b", "sighting_of_ref": "indicator--1c3fd4d3-4dc5-4764-82a9-7ad68e427e1b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--606c442c-a408-4f46-8876-09360bbe3265", "sighting_of_ref": "indicator--84675936-c9db-4a26-bfc1-01a1ff951177", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa2bb71-f6ac-4ba1-a908-4da898a749d9", "sighting_of_ref": "indicator--edc7befe-692e-48bf-8ff6-485c91df52c8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2115d6b-729d-45e5-95d7-662db849f504", "sighting_of_ref": "indicator--9d2ddbb7-8be3-406b-8d2f-58636cef3347", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e14fe2-211c-4b41-ba24-b6017dcadb49", "sighting_of_ref": "indicator--5185d2a4-4085-48bc-bacf-977d4e78a99f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0703ff9-c6bb-4254-96d0-3a1042f93fdb", "sighting_of_ref": "indicator--f76e3da3-0348-4ea7-9470-4a863016f447", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d88206b4-50dc-4c05-98f4-1d94507f7aa9", "sighting_of_ref": "indicator--66c92852-f9d9-4306-81d7-91169979c7c5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b86bcd8-5d70-4e52-b846-91c4aa7ee5ab", "sighting_of_ref": "indicator--ad72b77b-5f51-4bf4-84d2-ada906cbe54c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a536cf-5b7f-4831-9161-c54634fb4150", "sighting_of_ref": "indicator--ebf80304-f5c6-45ef-ba94-31b4226ac274", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef65aa8-406e-41a5-b281-8fd69ccbec3d", "sighting_of_ref": "indicator--027c3baa-002d-4cea-be2b-150b397d29aa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df93bf4-c4aa-432e-ae17-980b5566fc8c", "sighting_of_ref": "indicator--0cc1ddca-3c7f-478f-9ebb-dbfd1c55128d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07fd0141-8774-4718-a41f-1e94f81024e5", "sighting_of_ref": "indicator--40fb1b7f-577b-47e3-a151-ec810cdc9feb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a861dd-12c9-4e38-989b-ee7f4017a618", "sighting_of_ref": "indicator--40fb1b7f-577b-47e3-a151-ec810cdc9feb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0824b84f-260a-4930-8db3-c65f280078d8", "sighting_of_ref": "indicator--ac50e6c3-7ce7-4740-9dda-ece28c9c0610", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e6e7da-f62a-42fd-9414-681bc3f325d1", "sighting_of_ref": "indicator--b11f3e07-4c1b-4cee-aae6-2d7244cf6a06", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3ff5ac-754a-4262-b0b8-86fd342491f5", "sighting_of_ref": "indicator--ca205a77-91c3-4412-a23b-7c34802a692c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3af0ab-b878-4d37-a2e1-4ab9b91b7774", "sighting_of_ref": "indicator--1f476f8d-f726-41a4-b342-3a2080c63444", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b794c268-34cf-4ce2-a7e8-518a0dd00159", "sighting_of_ref": "indicator--1637dd61-6d87-4c68-8c79-64705bb6a323", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a204201-b5d4-4cf6-8c8b-bbe0d0835b19", "sighting_of_ref": "indicator--91c95e1e-c317-4101-9b7c-a0cc295741f8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e393ec40-02bf-49f4-b1d1-2109312892d2", "sighting_of_ref": "indicator--749fa2c8-0598-41b5-8ebc-117c74c34a31", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832f0295-a8d5-45aa-a540-8c72d73fa95b", "sighting_of_ref": "indicator--57a5e57b-0a45-4ada-87fd-c45cc15dedcd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3315988e-0a7a-48a1-81c8-6ed92a31ceab", "sighting_of_ref": "indicator--d04a658c-eceb-49a5-839a-2d3f71f11b21", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80980038-86da-42a7-8e1b-ce5d3c5ca056", "sighting_of_ref": "indicator--6d3246a9-99f5-4b43-8ad4-a0b92c82b999", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80fb0cb4-b0b4-4e34-93c9-e9e693a91b3b", "sighting_of_ref": "indicator--0c9577f5-57c6-45ae-a98c-1e10931a88dc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9700750d-ea09-4e50-8f2a-56b5115c4c08", "sighting_of_ref": "indicator--b9e1f4a7-79a9-47cd-8b38-7d91c696047c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5a130e-dac1-4478-bbf6-a570a47092ac", "sighting_of_ref": "indicator--d3cbc653-6a9b-4403-aefc-783aa3cd7fec", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53fbdabd-2d24-4686-ae1d-b0faaf4b8879", "sighting_of_ref": "indicator--9ca94d57-0d05-4c3c-88c8-f9741ce10dc5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7fa4ed-42b4-4d35-8bca-57dab0b09a15", "sighting_of_ref": "indicator--e78b2d41-7c69-47e7-8f5f-fca5698d71e1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd2828d4-2703-46ad-9dc5-f293dfc4e676", "sighting_of_ref": "indicator--4b6f68e4-91ab-4868-aea8-e3e9ec6ef26e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e889a0-8ee5-4089-b832-e2a8bf46ab32", "sighting_of_ref": "indicator--eafab26c-4178-4fe1-a614-fa802fd66dd1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f4fa8d-5f40-4ed7-ade8-3db4ac684432", "sighting_of_ref": "indicator--4db2dd31-6fd0-4723-8c96-63fd0a6722d0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf55e41-ff2e-49d9-9251-7ac8b7dea125", "sighting_of_ref": "indicator--6b19d3e6-58f2-4e52-979b-5dcbb122e715", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84493db2-dd47-4832-b95e-4bd6b0a3f114", "sighting_of_ref": "indicator--50362d89-7bd7-4112-a0ec-c6c1a010810d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8620a48-e1be-4621-af1a-78b2112a0e32", "sighting_of_ref": "indicator--abefec45-ae4a-4174-8624-e5d51d86e49c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d1545c5-4f22-4f54-942c-1c38bd038a6f", "sighting_of_ref": "indicator--8389b483-a7b1-4ef9-bbe8-2f95f280d904", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ef071e-156a-4c2b-9f3c-adb4bb433a95", "sighting_of_ref": "indicator--8389b483-a7b1-4ef9-bbe8-2f95f280d904", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--803a783c-bee6-4252-82e6-299fa01eb597", "sighting_of_ref": "indicator--30e5e249-c579-4cd0-864f-7f3cdc5730e8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87cda0f3-2443-4e3e-bca9-767ff43a89da", "sighting_of_ref": "indicator--98d81e15-2836-459f-b9bd-bae3994656af", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c2eba6-23b2-4ffb-96d1-9ed1b7593b84", "sighting_of_ref": "indicator--cea6e5d4-fd1d-4d14-a237-6cd3f1468b2e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d1d34b-aa11-4b77-9d6f-00242c85ccc1", "sighting_of_ref": "indicator--e0d9aee2-9037-4984-ad79-051cdcee649c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7bc8181-2444-4811-856b-dfad65dbbc1b", "sighting_of_ref": "indicator--1d3131cd-fbb1-43aa-87d3-857067a91358", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66cdc9f6-3aa9-4cb1-8aff-5af790248b57", "sighting_of_ref": "indicator--acd34396-052d-4108-b435-887e112d448e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf27cac8-0ba2-4dbb-85c5-8c2dfc0499ab", "sighting_of_ref": "indicator--4d32f6df-fef5-41dc-8171-8558d44413a3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd31319d-ddd3-4e13-b431-5304d4fbc4d7", "sighting_of_ref": "indicator--f2e35c0b-6a50-48d0-81a7-6ba74a3f9af3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503b3a3b-5f7b-4d70-86fc-1fa68b018d14", "sighting_of_ref": "indicator--1433060a-c830-406b-93e5-b2c62f6fa621", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82be0b89-12af-495a-b913-b86cbed10cc6", "sighting_of_ref": "indicator--37e63b1b-8652-4c60-83fb-6694ac20230b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c56e9c-3fec-4380-af53-0697342f1840", "sighting_of_ref": "indicator--5adade9e-162f-42bb-aef3-fcf3f260e84c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9c593e-26de-4977-b94d-9b1b9a5e1e0f", "sighting_of_ref": "indicator--27f62d4c-88f3-49fc-a967-d38fb4d4f304", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0382f3e5-a829-4ce1-bbef-8100a03e253d", "sighting_of_ref": "indicator--b835e666-36e7-40f5-b0f9-b0377fc1ba5a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ae5707-3f5f-4cc6-b9ab-ea3aa21ef0e1", "sighting_of_ref": "indicator--e05466f2-c707-48ee-bbb4-65bced24d482", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe1d8dc-5225-4808-9ddb-3c26c989c8ce", "sighting_of_ref": "indicator--9ccb16ac-570f-4398-97c6-3be5c1dac5f8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a91d984-e2fd-4daa-af64-26626b1e7199", "sighting_of_ref": "indicator--1d01a498-cbf0-45bc-af48-7738df6ad697", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--912e484d-cc5f-4f4a-88d2-d32905f08394", "sighting_of_ref": "indicator--a7b89dab-c3b6-4a72-bdb3-ca2cd921c594", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8644d08-03f2-4ba0-b515-bac7d6d3b418", "sighting_of_ref": "indicator--372ee0c6-5cae-4164-8e76-adddcd78bf99", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e18cdf44-7c61-499d-8c50-ba74a572212b", "sighting_of_ref": "indicator--8923a3bd-9488-4f23-8de6-4995936d2deb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebea0744-605a-433b-82e5-69c782dd1118", "sighting_of_ref": "indicator--12ec174e-ab46-4521-9304-de534d499bff", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab1eefff-e028-47ef-b41c-7a38b4e27032", "sighting_of_ref": "indicator--562dd71f-912e-4f77-a8d5-cbc27548e68e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f02df0-5643-49df-86a6-291747be5a18", "sighting_of_ref": "indicator--b1ddabb7-0263-4160-8a0e-036007c2e294", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cbe64a5-2825-4525-ac9c-a2dd4ba43c77", "sighting_of_ref": "indicator--73cec2cc-962f-4701-86c0-67a7e383a30d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d53ce1fa-8d33-4153-9a19-cd0b53278072", "sighting_of_ref": "indicator--cc3ae4e2-9550-4414-9d7c-ca978642d90d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf739f22-6cfe-4d97-8742-79a3ef524153", "sighting_of_ref": "indicator--cc3ae4e2-9550-4414-9d7c-ca978642d90d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c624c2-75cb-497d-af16-6275b8f829ad", "sighting_of_ref": "indicator--210916ad-de2e-421d-87fa-94858e82214b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e0f805-7f6d-44f1-98be-b531b51b4987", "sighting_of_ref": "indicator--66ba9c07-b016-486e-9db4-1f1247818fe7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6389054f-d40a-4fa7-a0a4-e5a166b355a5", "sighting_of_ref": "indicator--6a01ec2d-30f8-4824-9a5c-b9a04f9ac0da", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8464c760-4460-4279-ae11-ff6c8006c3e7", "sighting_of_ref": "indicator--6a01ec2d-30f8-4824-9a5c-b9a04f9ac0da", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e4d966-61da-4694-98f9-be07afff6c4e", "sighting_of_ref": "indicator--6a01ec2d-30f8-4824-9a5c-b9a04f9ac0da", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba4b7d6-d348-487a-a972-e9c817ad455d", "sighting_of_ref": "indicator--1b5fe6a1-ed39-4627-883b-d4abb043c916", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9d2515-98ac-4bd5-ae7e-111c2f5f1fdb", "sighting_of_ref": "indicator--1f5e07e1-0722-42b7-9d65-9e6d9aaf0183", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c293a5a8-b5e2-4966-87b9-2de93c1b4ee9", "sighting_of_ref": "indicator--6d1bad2c-ff9a-4c8a-96bd-7b172afa1aae", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef380aef-ba92-4370-853b-19b4efce8311", "sighting_of_ref": "indicator--efca596a-7c77-4ccf-8f32-5220e9d88b04", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942547f5-8fbe-49f6-bf2c-781f3c23a64a", "sighting_of_ref": "indicator--d2cca21b-0430-4197-b438-ea08120df8cd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d715b7d8-f705-4d8c-abe9-89a3c00c8a2d", "sighting_of_ref": "indicator--ba5ccea4-e323-4e55-9e12-dc0b62241522", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6ad359-abfc-427d-86f4-e94baaee7041", "sighting_of_ref": "indicator--8ec256fa-b846-4b75-96ba-c61aebf5f3a3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c18224-2d02-454e-91bd-c7a95f79ce5a", "sighting_of_ref": "indicator--61a0c179-6c7b-4cb4-a5db-86f786673986", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ec9e93-1f62-4333-b20d-f4f7663280ad", "sighting_of_ref": "indicator--1e9ec54a-4bcb-4f53-ae14-97b4bc854f3e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0041a6ab-8e82-4b19-a12b-bafdb6e7db4f", "sighting_of_ref": "indicator--960b798a-d7f3-4e1d-8a85-6b48b227c060", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43e1b11-8773-4bb3-8575-e44536e5fec7", "sighting_of_ref": "indicator--2551f1ea-c0ed-4a23-9531-7c6ef2829a44", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5153bfe9-c219-4ce8-b352-9db682800aab", "sighting_of_ref": "indicator--5b82e23e-2a2b-4371-af6d-25aa7022d1d1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83fe194f-dc2d-452d-9408-68a9890ad39d", "sighting_of_ref": "indicator--8d13d2bf-686f-4c4d-bba9-d914659f71dc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2d2163-26d4-479e-8a42-186413ade4b1", "sighting_of_ref": "indicator--42aea973-8b93-48f5-af71-1ceb255c0a56", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02092966-ad7d-40cd-845c-830cc2d50ef4", "sighting_of_ref": "indicator--88940e0a-8853-4245-bd2b-b77de301d03e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6069735e-248b-495a-8f17-57019af2d34e", "sighting_of_ref": "indicator--dbdf3a05-e992-4c11-a6f7-a315b57f6bff", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c758c7d-f616-44cc-98f4-b83232af6355", "sighting_of_ref": "indicator--2e5376b0-b29e-4435-964f-33be7d9c84b0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f0406e1-e2f2-4c0a-89db-2f57cb087035", "sighting_of_ref": "indicator--1972bd8f-d575-4918-86c0-19b14fd0c3cf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed972162-b65d-460f-b57f-236531013861", "sighting_of_ref": "indicator--0dc19d63-6620-4f9b-8b9c-e0933e8f2751", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d867d9-213f-4b43-9d2a-860b0b587da4", "sighting_of_ref": "indicator--0dc19d63-6620-4f9b-8b9c-e0933e8f2751", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99703d41-3694-434b-aa25-fa1330910f7a", "sighting_of_ref": "indicator--ac9be95e-16ba-404b-b08d-a0d0300d5cf0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a4bdf9-5c7d-43ae-bbc0-258d5d82457f", "sighting_of_ref": "indicator--4073fc77-adfd-4298-a2b5-a4610a2e7da7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f7f96d-09b4-4df4-beff-3d10b4b2a4f3", "sighting_of_ref": "indicator--4073fc77-adfd-4298-a2b5-a4610a2e7da7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28b0ca5-8184-44d2-98e3-07d1689448d4", "sighting_of_ref": "indicator--e28d247f-0832-4286-85ea-19c15ed9c8b4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc881e40-2c0e-49be-9981-9396561e8b03", "sighting_of_ref": "indicator--e28d247f-0832-4286-85ea-19c15ed9c8b4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b04a80-d15c-4e2a-a93a-bc5a89b654a2", "sighting_of_ref": "indicator--f8540945-7d53-421b-97a0-5cb427623e29", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47001f7a-63f2-4dd5-bd01-151f2720a0c1", "sighting_of_ref": "indicator--4ec1147c-e91a-4200-a369-2cd58d393a01", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b988e57f-3284-4b8d-b0ea-6f184e71aed9", "sighting_of_ref": "indicator--fb9eccfb-cbd9-416f-96a6-86210f05cb6e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25a99574-8f11-418c-8b09-5c47bb3b5c46", "sighting_of_ref": "indicator--fb9eccfb-cbd9-416f-96a6-86210f05cb6e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ed27e0-8777-4f77-90b6-3e612fb96e2c", "sighting_of_ref": "indicator--21b0b643-cc50-4176-9e44-d5a1eb3aa4a8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd98c40-65e0-4196-8c3a-b6396d0143e3", "sighting_of_ref": "indicator--e7b8c81d-a790-4bd4-83fe-35f8bfd1a177", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20bd4733-cf73-4f9e-8565-d2ee0f4baaa3", "sighting_of_ref": "indicator--93a9530a-28fa-4b28-b0b2-0af0eff08025", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29257403-c6e8-4268-9bdb-752865d18efc", "sighting_of_ref": "indicator--93a9530a-28fa-4b28-b0b2-0af0eff08025", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1cb3def-214e-4593-9253-a3912d82e5a9", "sighting_of_ref": "indicator--58cf2593-c343-4db1-a955-eb0b9c8bac70", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8106b97-342e-4ecf-8dec-5a7e9f01446e", "sighting_of_ref": "indicator--e264fded-958c-4183-9c08-0367d271ccec", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05011b8b-33ca-48b4-a49c-62365fd8bf40", "sighting_of_ref": "indicator--c062bac3-5023-44dc-94c7-bb054ed5b17e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92a57d4-242e-4aef-9401-031fbef774a7", "sighting_of_ref": "indicator--f89494d1-13cb-4aef-b6b4-c14007b09bd0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--303eb156-087e-4044-bc0b-e4a48b5507aa", "sighting_of_ref": "indicator--ed5e7209-98ee-4810-8947-bd83095cd043", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d21a802-841f-43e1-a314-bea6f26f13e7", "sighting_of_ref": "indicator--56df6547-0015-42f7-aa6f-04f3359e196c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b0e3967-5823-4597-97e6-656255c8a5c0", "sighting_of_ref": "indicator--18c94649-6b18-4383-a77d-17560ec48dcb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--607d6fff-b532-40af-a725-3be22d5337c5", "sighting_of_ref": "indicator--b83a82a3-ba58-4b81-9dd6-a1095ecf8e79", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--510fe628-019d-4e78-b654-b131be7f4bca", "sighting_of_ref": "indicator--48cf5d50-75bc-4be5-aae5-f435904e68b1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45177e96-0a08-43be-aca9-fb1efd5d79d6", "sighting_of_ref": "indicator--175feab3-bc4c-4bf8-8749-f67f135ab5ea", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3429217-7800-463b-9616-c637f725102e", "sighting_of_ref": "indicator--f2162c51-ef01-4a08-a0df-b2911c25ec23", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34459ad-e170-4c69-b86f-aad5229d2c14", "sighting_of_ref": "indicator--0ef56408-b57c-412b-b0b9-0c45fc794a6e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8344c645-7b36-42de-94d7-2dfc644ca64f", "sighting_of_ref": "indicator--081d1a82-ee91-459b-b7b4-cdabbe3075fd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de87514-939e-4d2a-bb5a-d20030d54db4", "sighting_of_ref": "indicator--524227b1-cd27-4be4-b2e1-07b7240d810c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac219a0-cab3-4df1-a141-6e6f3b3ef6b9", "sighting_of_ref": "indicator--524227b1-cd27-4be4-b2e1-07b7240d810c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d75fc8fd-ea9a-4f93-9130-fcd53b0076f8", "sighting_of_ref": "indicator--cbfe9fc4-1aac-4062-92b8-d98063b6012d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2512a17-aa98-4f66-9ec1-8a4297d27f6c", "sighting_of_ref": "indicator--83fe01e8-f024-4f6b-9219-014cb540d385", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e75118-68a4-4fed-8e12-28020b31bb10", "sighting_of_ref": "indicator--148052e5-a79f-45a4-9ebc-c7c386384b9a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffbc7dc5-6af7-4e5e-a7c7-48a49c8982a0", "sighting_of_ref": "indicator--3d1aa80f-3b30-4c99-9024-7e443ffcdde7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4541140-5477-422e-95e5-f26247e09040", "sighting_of_ref": "indicator--32933cb6-d151-49fb-bedf-f01ee7375e27", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--588dc148-e626-42a4-87eb-9548103f4aad", "sighting_of_ref": "indicator--9ed12462-aebb-48b4-bf35-082f8128c978", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85710c59-54ea-4951-a220-9a023bc2bb64", "sighting_of_ref": "indicator--bff38b21-58a9-451d-831e-59cbea2970fe", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae0ce4a-c143-435d-b70f-a76274de3a42", "sighting_of_ref": "indicator--d318bca8-81b0-48c9-8c11-6aedf658837b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8745392d-f730-41c9-a59b-7e749c486a03", "sighting_of_ref": "indicator--a2cc2473-ac14-4288-a60e-596344163d86", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3283d41c-9c7d-4f93-bf18-b1828c439da9", "sighting_of_ref": "indicator--d3f8dbef-cc5f-4ef3-a9bc-dccc23cb1ad7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e8b14c5-762f-4605-8d04-02ef459b3739", "sighting_of_ref": "indicator--d448e8c0-1c1d-4c6e-9574-a3a877769108", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e07415-2a8a-44e2-8782-397d5e936396", "sighting_of_ref": "indicator--cbb7b437-bbd4-4395-b51d-95dc2f91ab4f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41290aed-1312-436b-b6a4-a88a6d333ee9", "sighting_of_ref": "indicator--d6b23940-9309-4f4d-a622-68d7a8794ccd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac5438e-8e24-4e6c-adce-462958955df2", "sighting_of_ref": "indicator--2362ade1-a1f5-4be7-863b-b1ab62ee6e6e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c225659-3772-488b-b1f3-a36aa341856c", "sighting_of_ref": "indicator--ceb27547-898d-4851-a2f4-f1a460d75ef9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2718600-e7c1-4dcd-8b99-9b8c392b217e", "sighting_of_ref": "indicator--824b62f9-e2d8-4d68-8cac-0972a521de96", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c8de6c-e4bb-4c2b-93a5-bacb85191ae0", "sighting_of_ref": "indicator--4d6cb99b-b4cd-406a-a626-9d453fd14116", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a3f06ba-4263-4f4f-9490-ad086eb77a09", "sighting_of_ref": "indicator--f9d1df1b-2c72-4329-9287-514c98cd6227", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7300bbf-aa1d-408c-be8b-59b8ff4eea04", "sighting_of_ref": "indicator--1fd305fa-73d3-4d9e-9e55-4d0ca1012c09", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7656d510-7fc5-4dba-850f-ed5a64bb0bad", "sighting_of_ref": "indicator--33541a19-2389-48a0-bda0-f5487c85ad55", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888df889-ab77-4041-b08f-846bb544228f", "sighting_of_ref": "indicator--be630338-d231-4110-9e45-e674d473bfc1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f630dc03-98f3-4268-b830-58845d314521", "sighting_of_ref": "indicator--dc736a2b-bebf-45ee-a9c4-3c4631b679cf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27edf46a-c2a7-47da-b6f8-494eedae21ed", "sighting_of_ref": "indicator--570de263-aa3d-4abc-b0d1-341885dd2036", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a494c3c9-eac8-475c-bb99-5b89b63bbfc2", "sighting_of_ref": "indicator--74e183ed-f6b1-4400-bc48-8591cde76423", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf00bab-2876-49aa-a16b-f9f4f430108b", "sighting_of_ref": "indicator--21eedfd4-a5ae-446a-a63c-d15b7f0ac399", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4429ae2-5075-448c-bd68-e312448be5df", "sighting_of_ref": "indicator--300478db-79a3-47bd-bc57-e6331a882c92", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b66983a-5311-46d0-b219-d91f27a9bfd3", "sighting_of_ref": "indicator--fe628e05-3f39-4a3b-ab71-00791544ed9b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0441c70f-1d64-4793-a8f0-284a75fdbc6d", "sighting_of_ref": "indicator--ec70cfde-8827-4afe-96f5-988d640f38d4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153c31b2-12aa-492a-b0b1-757e819d937a", "sighting_of_ref": "indicator--8ad7359f-0e62-4fad-8b7a-088a71e34a4a", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d736ea76-f526-43e8-af8a-15f8bc522688", "sighting_of_ref": "indicator--91187176-151e-4c66-970e-4f6ccc5ee876", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f8dda1-4edc-4d82-a043-8b30b62c53dd", "sighting_of_ref": "indicator--489c6ff2-b4f7-477d-90ad-876d597fdf51", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81baf0f8-349a-4a12-9255-7a3e67c0a8fc", "sighting_of_ref": "indicator--489c6ff2-b4f7-477d-90ad-876d597fdf51", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f79afc93-5b42-44a8-b201-14539a1d4bbb", "sighting_of_ref": "indicator--542e331e-c0a7-46ba-8f5d-d8f36cf2cde5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c96426-f15e-450f-9a39-100fbce31099", "sighting_of_ref": "indicator--542e331e-c0a7-46ba-8f5d-d8f36cf2cde5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75659686-d3e3-4e78-9081-d8eea61f2202", "sighting_of_ref": "indicator--d2350307-084d-4ea1-bd77-c300a47dcc29", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522286a8-4831-4c68-844e-0e3d1e62bdc9", "sighting_of_ref": "indicator--0bd62b1f-212b-43b7-a2fb-d39eb3d25fb2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3aef87-3b0d-4665-8341-34eaa39f9992", "sighting_of_ref": "indicator--525318e3-afe4-46c3-aa53-9af53a8fae94", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f272b88-ae61-4cbf-a58c-485344273231", "sighting_of_ref": "indicator--b9fcfecf-1bf3-450b-8f10-1ebbfaca28d2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a8fa65-1a44-48db-8a06-408d9be659b2", "sighting_of_ref": "indicator--83df7759-15aa-442e-a800-2d5ed696bb98", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce813e0-896e-4055-9b23-cc8571505ed3", "sighting_of_ref": "indicator--3251c21e-ffb3-4b21-a74c-d620f2941b87", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--414181b4-d28a-48c8-9a7c-f2ee4a3e34e5", "sighting_of_ref": "indicator--89b55798-c3f4-431e-b07d-28ecac1c5e85", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d8dbec-e477-453a-8f45-3bc9b1dfcf12", "sighting_of_ref": "indicator--892e8500-a9a8-4ce5-9a7f-caaf5714aa66", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--030d9fce-d451-4787-b311-eb5941d5bbf8", "sighting_of_ref": "indicator--04f20b0f-449d-44b7-8eea-cf59302275af", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498e35eb-0943-4786-9998-79c400695efd", "sighting_of_ref": "indicator--0c431fde-dfe2-4ee0-b0bf-816c889d3a80", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4654e14-e667-4817-a133-8099c437306a", "sighting_of_ref": "indicator--d26ade00-2084-4e7f-a656-0c078149fab7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42e5ad8-5266-42e2-a8d8-6d8b1b051fba", "sighting_of_ref": "indicator--93ab5f15-1d4d-453b-8105-e1eb222365d8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26fc4199-c1a6-45da-bd8b-cc03795fadb5", "sighting_of_ref": "indicator--77120f6c-4191-4253-b2fe-0a65746f3f05", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--965ff8b7-6a20-45b8-b65a-75f5ce552366", "sighting_of_ref": "indicator--f6fec57f-0e03-4c35-8bac-e6f8744933ba", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0700c48-90cc-43dd-bdf1-1870e7205a39", "sighting_of_ref": "indicator--ad27363f-f085-4d6e-bf98-ed0e54f3be59", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6281c628-0acf-4aa0-85da-17045942e269", "sighting_of_ref": "indicator--c3ecddc4-0926-4885-ad54-f6ddfc278e67", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a158290-396e-4386-b85d-23574467c894", "sighting_of_ref": "indicator--bf4a54be-fdc7-4048-9306-f42ab292ef46", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35a2846-5f9c-4b2c-80d9-be75c2402043", "sighting_of_ref": "indicator--88eaa0e0-afb9-4113-b17f-8c92d0bfefec", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2453eb-9a5b-4500-b558-15fe0da9d83a", "sighting_of_ref": "indicator--4df6f997-891d-453f-9a5c-c69e6c5e39f3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f40bc7b-ae84-4c9e-b364-b697ccaadaf9", "sighting_of_ref": "indicator--4df6f997-891d-453f-9a5c-c69e6c5e39f3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6155dc-374e-4ecf-8133-0dbdd3a1b668", "sighting_of_ref": "indicator--6a3595ce-1193-4728-98e4-62ef1ac0812a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de9f7d7-5f7a-4209-b562-5ef5c8dae2a0", "sighting_of_ref": "indicator--3aaaf6ff-a328-46eb-bbb0-f752aacae357", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41675481-9347-4baa-a4dd-cab50c926268", "sighting_of_ref": "indicator--e1607f10-e6be-45f4-a93b-dd4623caf3be", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed95931f-1035-440e-ba01-e2d4fe4da0cf", "sighting_of_ref": "indicator--12451562-a9cf-4529-9ede-8de0c7926754", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a322ff48-3eae-4a77-a8b2-d6a248338c27", "sighting_of_ref": "indicator--23fd1b09-f9fb-479f-95ad-779feee5de2f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3c332f-21c7-4117-9989-7b93ad157d29", "sighting_of_ref": "indicator--6387bc29-1067-4677-8295-a655d1e037f7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d02475-e95c-4d24-9f55-459bc91795c3", "sighting_of_ref": "indicator--1240b927-cdba-4f5c-a94f-f543bca0bd03", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0902096a-718b-4757-aa33-d21389ffa89a", "sighting_of_ref": "indicator--168241b0-f322-4bb7-bb7b-119964fa504f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6445146-2ec8-4ca6-9ea6-2f12f6087926", "sighting_of_ref": "indicator--776aab1b-f4bb-40ff-84c4-dd6cf0480fcf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d031b8-0607-40e0-8e63-545069b68570", "sighting_of_ref": "indicator--84252f74-9afa-41c6-88ce-2e9757947ae0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--657f5fa9-a6fe-41a6-ac01-292483e4130f", "sighting_of_ref": "indicator--30f9e9a8-37ad-4ff8-b79b-78c39d57d88c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72bb959b-4c83-4b5d-a5a3-37d4b9fef3ad", "sighting_of_ref": "indicator--6781b325-c97a-40db-b079-2f25b9730318", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a978d9-dc80-4db6-9488-abb46cc1a545", "sighting_of_ref": "indicator--4a9a2976-831f-46ca-a0c9-e88c1df1e8c4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7759c61d-342d-441f-a913-bc1948d8a8c0", "sighting_of_ref": "indicator--4a9a2976-831f-46ca-a0c9-e88c1df1e8c4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9611fde-8508-4b13-8d60-977f05d0e623", "sighting_of_ref": "indicator--3cae41f6-fea4-46eb-b09d-3033d6473af8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f94b7f51-c068-4f37-a616-146a1b8a1a6f", "sighting_of_ref": "indicator--2e733e11-298c-4350-b89f-a95969131f73", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bea26b5-4172-43d1-8bc0-fc2fc6463aa7", "sighting_of_ref": "indicator--2e733e11-298c-4350-b89f-a95969131f73", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a019262-445b-4afb-8622-a1bb74293b2f", "sighting_of_ref": "indicator--b957eb41-1093-4987-8efe-409bacfe6226", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55dc090f-72b5-493a-9e4b-2dad0a34fe89", "sighting_of_ref": "indicator--b957eb41-1093-4987-8efe-409bacfe6226", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da86f2bf-5a8a-4b2b-b5f5-9675a0c7e886", "sighting_of_ref": "indicator--1cf978b6-ab4c-4412-b009-c22f6b8072e6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a635ad-2c91-48ce-8da2-22e99aa2e604", "sighting_of_ref": "indicator--e00a66d0-ccbb-4cb9-9533-0b1ce8f24f34", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563cbee4-2d30-4be5-a315-b3ac7e03fc2f", "sighting_of_ref": "indicator--9651123f-1cac-40df-aac1-3c8de1f883b7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047d81a5-ba4a-4d7f-ac5d-4bf017f2ea57", "sighting_of_ref": "indicator--b79c6545-5a11-4c13-8049-acad55c734c0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65548f6c-9a2f-477a-9f09-0119a79e4e06", "sighting_of_ref": "indicator--02345d3d-0116-4f8b-93db-f37de3c78269", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433fff5d-43dd-4a1c-8236-5d065b43a1e7", "sighting_of_ref": "indicator--af6d6844-b903-4998-b7af-704cf3d8d505", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5850254-1e3d-4879-85be-ac0a910e7865", "sighting_of_ref": "indicator--f77f3a7d-6726-4bbf-b19f-064e5b9dc2fd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef8648e3-198a-41bb-a77f-e1c08c58384f", "sighting_of_ref": "indicator--3dffcfdb-fc4c-42a6-9dcc-24807c1d9aa5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c92b271-36a1-48b8-b646-dc30a719c358", "sighting_of_ref": "indicator--5284c43d-7d89-4293-90a2-5b8543acd2fa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d0243c-2d4d-4d11-ac5a-bb2c7eb253cd", "sighting_of_ref": "indicator--34ecd1bf-64ea-4ea9-8924-5b66137863d0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e8d3ec-c614-44c0-b6cd-61c5c236b986", "sighting_of_ref": "indicator--d8508f66-de50-469c-9e4a-fac12bac9b93", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02716fb4-e257-4743-967d-930d0271e6bc", "sighting_of_ref": "indicator--6fdbf19a-e5bc-49c2-b36d-1b9ba4310681", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50034fa9-2026-4198-a684-fffba32e1be9", "sighting_of_ref": "indicator--1b7af4be-a812-4c0c-b5e8-b2d4aa2f8872", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--152e7439-fd55-4c1c-abfb-ff572ba7f203", "sighting_of_ref": "indicator--c497f1ed-2572-4c82-8657-8008d3a168fe", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--229637ea-35d0-4283-9f1f-7268b40e68e5", "sighting_of_ref": "indicator--43939111-17d4-4a29-8aa9-763bfaa3cc3b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d24e4ee-36d8-4921-8777-cb31f7873a44", "sighting_of_ref": "indicator--43939111-17d4-4a29-8aa9-763bfaa3cc3b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7dab918-59d2-401d-9ce6-abb6960c58d9", "sighting_of_ref": "indicator--aab28fbc-20d2-49fd-ac22-0f3d7eb2690a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6652b918-ea73-48a4-8778-ee725e69d5b7", "sighting_of_ref": "indicator--d0d478d4-6d2a-4ad9-a3a1-751e07e69ed6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d64741-1da5-4d42-b475-2c554cbfc0ef", "sighting_of_ref": "indicator--d92425cd-347f-4ee6-994f-2b61372972a3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e69ad4-cbb3-4ed1-88fd-43e63ff6e12f", "sighting_of_ref": "indicator--41805212-2e04-490b-b3ca-e6f031cd8222", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--541ab412-a8f6-4c06-95ab-44010446f191", "sighting_of_ref": "indicator--258faf3b-8b9d-435f-b03d-d2fa4b994181", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e371640-d091-413d-9c3c-57b93d2fcedc", "sighting_of_ref": "indicator--b9026e0d-072f-49f0-823f-b7e4b90b9617", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d496e24b-2d84-4ad7-bc47-8f7e69da2e91", "sighting_of_ref": "indicator--491bee70-6d8f-48a3-a6fa-ffc74f24eea9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f11d6680-60a3-45b8-a6c0-515b41fc0665", "sighting_of_ref": "indicator--491bee70-6d8f-48a3-a6fa-ffc74f24eea9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000cbdda-34ab-4ad5-b2c5-2daf04e18dad", "sighting_of_ref": "indicator--1f4368e7-29bf-4d27-a4c4-8b884b91d6bc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba9af775-0c82-4f3f-bde3-6e578ae4a683", "sighting_of_ref": "indicator--cf9fe0f3-6079-4892-a4a3-ef352eeae2eb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a71c453-52c3-4dde-bbda-53b1040510db", "sighting_of_ref": "indicator--88a43e1c-b593-4d49-947b-36214a57ee69", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7381d34-1ec3-4e30-9dda-9d45f7d53970", "sighting_of_ref": "indicator--faef106a-6953-405f-9d52-37facaace5a2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6bcd689-07b7-4153-863d-053b8e6d445e", "sighting_of_ref": "indicator--155fc65f-ea57-4681-8c06-6aabaaf296ef", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7b703b-0977-4ac9-9eb6-c5264805a721", "sighting_of_ref": "indicator--28edc11e-3e56-47d7-bd61-74f86472cba1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785567ef-57bc-47b0-b9ce-3e41f9e5b4d3", "sighting_of_ref": "indicator--d72b29a6-2366-4608-b4de-5d96596ba2ee", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85f7ef19-93ea-4a31-bc4f-f4ff4feeea57", "sighting_of_ref": "indicator--c69c861d-c0b9-4372-a599-8791068198e4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33fbad83-fd51-4d8f-8609-4dc293aa6cee", "sighting_of_ref": "indicator--32a5cb83-85ea-4ffc-b731-d194760448bb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7edda0ca-0f1b-433c-9398-a4b531bd4b90", "sighting_of_ref": "indicator--05c56f93-4c60-4667-8830-278bd294225b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c6d91a8-6085-4c5a-b743-f531fbc14459", "sighting_of_ref": "indicator--48250952-e8a0-4939-be55-48bfa5932b22", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ebfdaae-25d3-4f1f-9717-641cae3c76c8", "sighting_of_ref": "indicator--314a878d-40af-4ab5-b594-49f7a45672f9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40512bfb-5824-49f4-94e9-96c7dd512cb7", "sighting_of_ref": "indicator--139e619f-98a1-4841-a69b-6a7d3580f0b5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e78ad933-55c8-41f4-853c-88bfc3a34cd4", "sighting_of_ref": "indicator--5ee947f8-92f6-4cfc-b985-6b9830348c95", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad8758a6-ba07-4c47-a97b-42e1fb9718a0", "sighting_of_ref": "indicator--30bbd1cc-e2b6-4b28-9cd8-22ea388d8ead", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81dee856-99ea-4e32-8dae-8642613998f2", "sighting_of_ref": "indicator--8fd8fdad-0fe8-4a31-ac28-95b010b068b6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--447ed208-8d83-4980-b21c-39e45c0a0b3d", "sighting_of_ref": "indicator--8fd8fdad-0fe8-4a31-ac28-95b010b068b6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ade7c1-bae8-4e23-9675-3692cbb269bf", "sighting_of_ref": "indicator--b26cf81a-ea1d-4bf5-ae1c-4ecc1f613f7a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df516f78-7d57-40d2-87c8-67aaca30eca9", "sighting_of_ref": "indicator--b26cf81a-ea1d-4bf5-ae1c-4ecc1f613f7a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f7917b-82dc-48dc-b340-e6227b2dfd34", "sighting_of_ref": "indicator--f098fe4f-2f00-4bc6-9454-9fb6204635db", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5882c5cf-c636-42b5-a0c3-a5e10c5331d1", "sighting_of_ref": "indicator--eecab3cc-3e03-4c4a-93c4-1f916c443906", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea5a79c-5763-4468-b547-a6cf00c1bf60", "sighting_of_ref": "indicator--832afab8-e738-47f6-ad41-ce0fa420c3ea", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f543b25-ee1a-4fb3-a728-cb588e9a8f58", "sighting_of_ref": "indicator--dc182a0d-b617-4ff5-8eae-04347904f38e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6f37f9-7fc7-47e8-b4ec-7d011fb88786", "sighting_of_ref": "indicator--a83749cb-973f-4e0c-be4d-2fca823566f7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b8fed3-3f69-496f-a445-b9d348a816e3", "sighting_of_ref": "indicator--a2d12056-819e-4502-b7e6-d0cd6a4a4628", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf95cdcb-915e-478c-8fcc-70164d4dc0f3", "sighting_of_ref": "indicator--14b8d9e9-34b1-4c7c-b939-9f6cab380f26", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393f9e05-126f-401a-a89f-a7a4cdfdd41a", "sighting_of_ref": "indicator--6415f6cd-b1be-4b1d-aa49-49eae1e43a53", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7739db2d-d18f-41fe-abc7-2b96a58628e4", "sighting_of_ref": "indicator--30ad981b-83e5-4a48-80ee-15ad37378440", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b1f9fb-dd6c-42cf-b263-b9fbffe0287f", "sighting_of_ref": "indicator--daf651d4-db07-499d-a831-7153eed03130", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53937720-181a-4aa9-9f15-c04167faac11", "sighting_of_ref": "indicator--21cfcc53-6330-4e38-89f8-bab6faaedac6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3e0ec00-761e-4cf3-adfe-c74b48bd214f", "sighting_of_ref": "indicator--5830f94c-e85e-4470-9d2e-3f242f8c3069", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5513d6d5-4a16-4030-a390-5767f56064ab", "sighting_of_ref": "indicator--5830f94c-e85e-4470-9d2e-3f242f8c3069", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63209e0a-40f7-4402-8127-0901c62ad587", "sighting_of_ref": "indicator--706f9d92-54cd-4e18-8640-bab23c91ccbd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d72a13-e476-4a64-8b17-94591e986aec", "sighting_of_ref": "indicator--b5de7a8f-f8b7-4d6a-80dc-167068ea5283", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df66aaa9-35a4-4b16-b9dc-e0fc23a6153c", "sighting_of_ref": "indicator--617812cb-1fbf-428f-b8b2-fa90e3e75176", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4eba1ea-0f6e-4d27-bc34-32e75d0a58b1", "sighting_of_ref": "indicator--bcd77e7d-1755-4aca-a364-ee5bf46c8576", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48fd2d3-4327-4e45-ae46-5a05ad56687b", "sighting_of_ref": "indicator--d4412a02-4b1a-44d5-84bb-a975fac1754e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1877baa-18ad-482c-9c00-e389b911fdc8", "sighting_of_ref": "indicator--8ab06fae-22f3-4a95-9736-d02d3157af7d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e014f97-1a2b-4f69-b89f-29ffa9edfb6a", "sighting_of_ref": "indicator--962e1668-46a2-43fc-8205-2b8300247ad7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033e0c64-5a63-4843-8edd-f6897e49857b", "sighting_of_ref": "indicator--962e1668-46a2-43fc-8205-2b8300247ad7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba70adb-8396-47a0-b598-145cd44c50e0", "sighting_of_ref": "indicator--e060d3a3-3c8b-416e-8775-192a4fa7be54", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc25e9d-2fa9-4ffc-bc25-2621733180cf", "sighting_of_ref": "indicator--e060d3a3-3c8b-416e-8775-192a4fa7be54", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5bf369-7618-46cd-961e-caba4130d065", "sighting_of_ref": "indicator--8f727e1c-3b72-4c99-b808-c52c6812dbe8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a5bca7-b0c9-462c-a9cc-986b8b4e07f1", "sighting_of_ref": "indicator--1b74157d-7e88-47bf-85b5-32dd795f618d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d61c20-f8a5-4b01-8e06-f63e6d58d368", "sighting_of_ref": "indicator--93cec63b-f360-4e5f-9608-64c943291daa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc4ea6a3-66ef-4346-b064-aa7b328184e5", "sighting_of_ref": "indicator--489421bc-05f7-4e08-9300-cdcb547dcdc3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29729b33-7221-479f-9040-1de1eb63bf1e", "sighting_of_ref": "indicator--6da2d402-0295-455b-9579-b01d0349ec34", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--495d7448-3f7c-4ce6-91ff-98ebe6053732", "sighting_of_ref": "indicator--9c4d7ab9-7d2d-41a7-9c37-b7a7323927bf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b825e1-ae54-41fb-b720-937089dfdb0f", "sighting_of_ref": "indicator--46807ff3-b218-4912-8c4a-d60efc3f4ae9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e238414d-4be0-4a9d-9992-36aa9cea31b3", "sighting_of_ref": "indicator--77727458-421d-450b-b0ec-9c58309a6e5d", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9625c30a-3042-4329-afe4-f0983aa20c89", "sighting_of_ref": "indicator--e42cd4f3-dbd4-4088-8cd0-fc9a233604f4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1706e17-22b3-4617-8c4e-b85086d1b5be", "sighting_of_ref": "indicator--e42cd4f3-dbd4-4088-8cd0-fc9a233604f4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43890120-c5e3-48e2-a0f3-cd2330233a05", "sighting_of_ref": "indicator--748dec31-ecd3-4c6e-a85d-08e42bb52e2d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2a54aa-26d8-4075-af35-9a5a6eff2445", "sighting_of_ref": "indicator--6327e090-9e94-4bc6-b574-5929dd19209f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5544ec3d-9ceb-4da9-9317-b75d43acec71", "sighting_of_ref": "indicator--47b67951-64e2-4ea1-a3dd-c1d531fa5140", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a522f784-75e0-4797-9cea-3fb206a26d41", "sighting_of_ref": "indicator--fc31bca8-f245-4b61-a2de-7c6465d3bba5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac8c7ac6-3a78-4285-883b-045374f46965", "sighting_of_ref": "indicator--fc31bca8-f245-4b61-a2de-7c6465d3bba5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54cc6af0-d45b-4e05-b060-ee585440c6d0", "sighting_of_ref": "indicator--997c5692-df2d-48e4-be32-e91ba45fa19e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f077cf02-4210-41d4-8fdb-413b18706414", "sighting_of_ref": "indicator--623bda54-e155-4709-b70e-570438bdbb3c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8c2b44-3a8b-49f7-a1c8-3e55208e8a47", "sighting_of_ref": "indicator--dac11e0d-a40e-48b5-88b4-966d18fd7b06", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79d4308-b405-40a1-8c83-d0a0e5b61e84", "sighting_of_ref": "indicator--f575fd75-5fe1-4598-8164-4751a84e6a0d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84cf2f56-a2a5-4d45-8a06-bec92b221609", "sighting_of_ref": "indicator--ee082b57-7790-4a90-86c6-211716d0a33b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff2b8660-7243-4dd8-a5e1-8fd7b7943f18", "sighting_of_ref": "indicator--5c2ab505-98eb-4d61-a73f-ae294a5e9e69", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33cec0c-7770-4757-95ed-d97fb6c402f5", "sighting_of_ref": "indicator--cc485509-6983-44f4-8a4b-66ba258ed73d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e0d20fe-a977-485a-b659-7c1519ea2277", "sighting_of_ref": "indicator--ea43ae40-a1c1-4e7e-ac75-14e76297f76c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d81af3-7a10-427a-9645-a6ba224250c7", "sighting_of_ref": "indicator--719705f4-2c53-437c-ac5a-b67a9f10eff2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a6504b-0b0d-4a79-814c-610850c56181", "sighting_of_ref": "indicator--b7b46661-3c88-4e2e-953f-d86a29af007b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef41c22a-9793-46cf-8cff-e5a80fe7e485", "sighting_of_ref": "indicator--b7b46661-3c88-4e2e-953f-d86a29af007b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc3dbf8-79c9-4b7a-97cb-c2d45a6cfb37", "sighting_of_ref": "indicator--99e5f0ef-37a3-43e9-9f76-e3bc5331ebcf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc9fc79f-2ba7-45da-aa91-e71c6e1e5558", "sighting_of_ref": "indicator--99e5f0ef-37a3-43e9-9f76-e3bc5331ebcf", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c761b04d-b1fd-4e5b-afad-11dba9cf1674", "sighting_of_ref": "indicator--7395d2e1-7862-4828-8932-2965815767c8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a58ac57a-0373-42b9-9aa1-c4c5cfbcca2c", "sighting_of_ref": "indicator--f145ba71-ae65-433e-a27b-44ac47175fbd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32cd043a-49f6-41e9-9c5e-f200f4b4076e", "sighting_of_ref": "indicator--65f74e67-12be-429e-bcf4-5e6a6c730280", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21895508-0a60-4fc8-91d0-ddfa2e879af8", "sighting_of_ref": "indicator--02ef4f5a-afa1-4aae-af21-a0ca4fd43a18", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b45ac09e-f831-4671-bd0c-2247d6206dae", "sighting_of_ref": "indicator--8ba64983-151f-49cc-bc19-a1c0aeea7e4b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce0ab82-d514-4f18-a872-f52633dc69e4", "sighting_of_ref": "indicator--cc38e507-2373-4bf1-8508-095cbf2ffba8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--184db4fb-e915-44c9-89f4-80a308c62885", "sighting_of_ref": "indicator--6c3c40d1-7c91-4b81-a8ec-be8020b81ecb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--199c3b66-c6d2-46d9-ae32-18fe24b5e130", "sighting_of_ref": "indicator--0feefdb3-f6c5-4e03-8ece-4cd2cb90f922", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3005477e-9d99-49e9-9a0d-2d3b5f7e7812", "sighting_of_ref": "indicator--6d3d3f83-7fc8-497d-a3c5-3f489a14ef02", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d89249-15e1-4e61-b5b8-d434a5f2a709", "sighting_of_ref": "indicator--ecd78126-ff85-4104-bea5-5a825fd092a5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9643562-c6c5-4adf-95bd-0c5c20d8d05b", "sighting_of_ref": "indicator--c8dcbb94-8310-464f-9c8c-03d4e2dcc295", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbb562a5-17c9-4e5c-a7c7-6ba54e7a1593", "sighting_of_ref": "indicator--190ab2dc-cdd4-42d4-80c3-04748724bece", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--569cec31-64ab-436d-af91-40f6fff76e8f", "sighting_of_ref": "indicator--8cb25e85-8c61-44e6-a3ca-86aa747d5935", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc10607-b163-4d7f-8224-7c64b173d0e4", "sighting_of_ref": "indicator--f23b480a-4cc8-40d2-83be-fb4f8d8da88f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b0d0be-ffc6-44de-968e-773e1a719ab1", "sighting_of_ref": "indicator--9c9fd446-70f8-4181-98b1-40757072e9c9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--794a1de3-589a-44ea-a8cd-da46aec9ad4d", "sighting_of_ref": "indicator--04b46cef-a725-4685-a4ef-2040326bdf8c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5192a25a-ea44-44e8-9725-5d00befabc59", "sighting_of_ref": "indicator--b12c9b94-d93b-450b-83ec-467da69c6c7c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b5a3784-015f-4793-84e0-8776bc16599b", "sighting_of_ref": "indicator--ae61708c-da23-4fbc-97c1-e022b9fb8c2d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--045347c2-aa03-4ec5-adc6-97afbfb802ee", "sighting_of_ref": "indicator--33d539e7-3e8a-46b2-862c-632ace30fe0f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517bc55a-9ac6-417a-ab19-74c59d1647c0", "sighting_of_ref": "indicator--b61558e8-3826-42f9-9aca-e0d970ea6dc0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8802d9da-51ee-4f3a-9387-da12ba97e69d", "sighting_of_ref": "indicator--02bf4896-391f-4bd7-ac9e-63771d04198d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaed145a-c734-4a9f-a2b4-668845b32bc2", "sighting_of_ref": "indicator--5b2b58ee-a01b-435d-980e-8ac4a70f5163", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53fbf78e-4ec8-413d-8b70-b4541fc18e98", "sighting_of_ref": "indicator--70d33874-c7c2-4d37-883f-ee56ce906a5d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e66fe57-74fa-410e-aaa1-807c2c53a8ad", "sighting_of_ref": "indicator--1000c013-1c03-4aba-bfee-4ccf02be4494", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e685e151-6f28-4529-8503-4726221920e3", "sighting_of_ref": "indicator--b8113266-3736-42a6-94a0-68faf95e8b9c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d17ecb-fa5b-46ac-a3c2-20222e773fea", "sighting_of_ref": "indicator--bd6057c4-0346-45e4-9fb3-657bba960e4b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5bd735c-b8d1-4e87-99d1-45d802944110", "sighting_of_ref": "indicator--bcd5cb66-c9b9-401e-8e20-507bf1287382", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a1845d-e9c1-42bc-ab08-85aa44d23307", "sighting_of_ref": "indicator--117d4435-599e-4503-8367-c6792210ccc6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59eb0b85-f5f5-4881-a9fe-f5321b33d00e", "sighting_of_ref": "indicator--cd28ebe6-a580-4cda-8c3f-b80a56a373e0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007055e6-c98e-4247-9042-6921db2095a5", "sighting_of_ref": "indicator--37fdf10d-9873-4120-8333-e3befbd275e2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8851ffaa-81b6-4716-9046-9ce7ee11d8df", "sighting_of_ref": "indicator--16c5ee6e-b957-457f-adc1-64293563bad0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156d7266-8406-447a-b1b5-a33cf4d30170", "sighting_of_ref": "indicator--9677f696-bfd3-460f-8104-e60dc4e8ae1b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb5c91ab-a718-41ba-a7b2-ab428bf7bbc5", "sighting_of_ref": "indicator--0040c302-5640-4ad3-bf7b-7f439a8c200d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e21172-a15c-418f-9cec-35d3c4588d2a", "sighting_of_ref": "indicator--0040c302-5640-4ad3-bf7b-7f439a8c200d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7665f24c-657e-43c5-bb0f-f399b6114f6c", "sighting_of_ref": "indicator--5218b701-1550-4ec0-a8fe-05d969b86459", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3dd236f-5971-496c-bb09-76d5c4b6aff9", "sighting_of_ref": "indicator--863ca295-877d-4d04-88c6-fd0ebf27f3e0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598fbf77-cf1d-4443-9095-42a109ff8565", "sighting_of_ref": "indicator--54a956ce-0531-467d-a7af-0f9f076652cf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--009c9ff8-7b8e-4a02-af56-65b7e021f00b", "sighting_of_ref": "indicator--0edfa03d-5e7d-4d2a-9df2-198f00b79ac6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2fb1d24-5614-4c38-b184-bf8c9948215c", "sighting_of_ref": "indicator--72136c99-aa28-466f-a14d-92a4b224ccc9", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7fe3e2-eb1b-4cea-a0ca-b91fd3b96a36", "sighting_of_ref": "indicator--cb251ffa-8870-45ae-8815-20518deb7fe0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1859998c-fcc8-4132-ace2-bd756a2df48c", "sighting_of_ref": "indicator--658dd5ef-3922-437c-86dc-32dd1cbbb92a", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f91cc2-248f-4c63-ae41-618ca5fa1f8e", "sighting_of_ref": "indicator--9832da73-c2a1-4e5e-aa16-16230f173972", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a96f85-c7e2-4502-9424-26694b0778b6", "sighting_of_ref": "indicator--5e563edc-e9fb-47ec-a68e-8a8a36ce5036", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3485c8d-c931-47dc-b8ab-f5db4c3ff925", "sighting_of_ref": "indicator--d5b31354-a78c-4c53-aaf0-9179a7dbc897", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b1ac17-f191-4958-b0b9-7852b56d6276", "sighting_of_ref": "indicator--c7fcf383-e9f9-4c54-b483-d361fc310e92", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93c8039-677c-45db-8116-81005bc4f688", "sighting_of_ref": "indicator--c7fcf383-e9f9-4c54-b483-d361fc310e92", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e81d02-48d2-40ae-8fa5-017ec8c58b33", "sighting_of_ref": "indicator--82706eed-d3d4-4101-862a-da71d6a88047", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3868de-ea0f-4d6e-a578-1e73aba1d0ee", "sighting_of_ref": "indicator--bb32f00d-d5a5-4cb6-9959-191ffc897de3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d9ce7d-703f-4f42-b056-c4d93ddc671d", "sighting_of_ref": "indicator--bb32f00d-d5a5-4cb6-9959-191ffc897de3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a70d5b-70b2-49f9-836e-a9e1907504d7", "sighting_of_ref": "indicator--bb32f00d-d5a5-4cb6-9959-191ffc897de3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--030d10cc-b15c-421f-a304-6093d832f5e2", "sighting_of_ref": "indicator--23494584-f484-4bfe-9004-2567b2b4d1e0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a60ad56-dd5c-40bf-a61c-f0d06af1eb89", "sighting_of_ref": "indicator--3ae2f355-fece-4e9d-a06a-a512006b4798", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a09d49-9c21-40d5-a86e-397d308b52fd", "sighting_of_ref": "indicator--3ae2f355-fece-4e9d-a06a-a512006b4798", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f54e0a9-a285-4769-93fd-edc4bf1a4349", "sighting_of_ref": "indicator--026a66da-6260-4072-8ad6-1d6a2b827c68", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d8af8a3-7e78-48b1-8e32-cbb4de3c749b", "sighting_of_ref": "indicator--06ef602d-1010-4f7f-9114-86230a1d947f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0603e76b-0f85-4636-aab9-c97c685c2606", "sighting_of_ref": "indicator--0357f5bf-aea6-438a-8554-8a682b7dbf2e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5908902d-22cd-4391-8c7c-174b02d06c93", "sighting_of_ref": "indicator--0357f5bf-aea6-438a-8554-8a682b7dbf2e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e4edda-d29d-49f4-a3f0-987de3ebe641", "sighting_of_ref": "indicator--0357f5bf-aea6-438a-8554-8a682b7dbf2e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f82ff9f3-67c9-40ba-87d8-f0d8b7003e45", "sighting_of_ref": "indicator--0b7bbeb4-852e-4631-82df-5d3f9f8d65a4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3697ecc-20e7-4863-913c-f0dea7d60f0a", "sighting_of_ref": "indicator--0b7bbeb4-852e-4631-82df-5d3f9f8d65a4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b8f4350-af42-4624-b935-e80f826b724c", "sighting_of_ref": "indicator--0b7bbeb4-852e-4631-82df-5d3f9f8d65a4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d800650a-dba2-4026-95e8-e820b117f022", "sighting_of_ref": "indicator--2c7733ba-f5b3-4412-b605-e61d5312b023", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98749904-2f35-4c93-9324-f811750c1370", "sighting_of_ref": "indicator--2c7733ba-f5b3-4412-b605-e61d5312b023", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69af122-9fa8-4c98-b8a4-1ce68c593597", "sighting_of_ref": "indicator--2c7733ba-f5b3-4412-b605-e61d5312b023", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb524f3-1374-4b96-958e-012b87378bce", "sighting_of_ref": "indicator--e7acb24e-5ddc-4590-9b4c-e5ea42d89f82", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--931bcf7f-7ddb-420a-a5c1-dbbe28a8837b", "sighting_of_ref": "indicator--e7acb24e-5ddc-4590-9b4c-e5ea42d89f82", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f12f76-3a24-4327-88d3-3128acfed561", "sighting_of_ref": "indicator--f0239653-eb8e-474d-8c96-64d01ffdbba3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e508e62c-5da3-4dfa-93bb-d18105024d82", "sighting_of_ref": "indicator--f0239653-eb8e-474d-8c96-64d01ffdbba3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406dd1fd-6356-41e1-a26a-539f41cbf866", "sighting_of_ref": "indicator--f0239653-eb8e-474d-8c96-64d01ffdbba3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b2b966-891f-4635-9670-af477f25266c", "sighting_of_ref": "indicator--8cd9962a-2e31-44bf-a359-d9b28639dccc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc4b973b-8d0b-4011-8411-aa525d15e3ad", "sighting_of_ref": "indicator--80a430b3-2985-4111-a748-21c9036b520d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93bca2d5-45d4-496d-942f-e3886e952015", "sighting_of_ref": "indicator--20bac942-9b35-44bf-82ed-cf42e276499c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b415675-ca6a-4108-8c0c-39014866134f", "sighting_of_ref": "indicator--e3edac58-49ee-4e5d-82a5-816b6282c3ab", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6164e1e2-392d-459f-9069-e8d378bf0551", "sighting_of_ref": "indicator--61b6421a-b45b-41f9-bc07-463c18ad603b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b783a5-a107-4dc9-b489-d6429d13df65", "sighting_of_ref": "indicator--59b0f042-0695-46fe-8519-1c37edf23849", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df21292d-2f8a-456b-b7cb-d31774720d02", "sighting_of_ref": "indicator--a291e8d4-2a41-4f15-866e-d2190705ea8c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d5b3b86-6101-4293-90f4-452ac87234e2", "sighting_of_ref": "indicator--a291e8d4-2a41-4f15-866e-d2190705ea8c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b90f394-e707-42dd-9e09-b62e0c010db9", "sighting_of_ref": "indicator--3663a2e4-2889-4874-8d75-a90916e4c609", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd40ce24-e674-40c7-928a-e9c49f3cd235", "sighting_of_ref": "indicator--49ceb14d-b884-445e-ab5f-93b72c497631", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3805c6-1d32-4309-a3c4-46d6b2c954d5", "sighting_of_ref": "indicator--78d6bff0-0cdc-4a57-bdc4-1054f69f9607", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a68a0fc9-a032-4945-a75f-6353e20b013a", "sighting_of_ref": "indicator--66a8bf02-bb97-4f7b-bebc-2ea046906897", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca363de7-6afd-47b8-bbe8-6a4c06ced8fe", "sighting_of_ref": "indicator--9f8fb0fa-bc1c-42f3-aafb-ebe8ce67996d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e779d6-0b36-4e0a-bac6-59cf36c9b7c6", "sighting_of_ref": "indicator--5a3bddda-6562-4622-9cce-93df05569291", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd4d927-ffd4-4157-94cb-3212b915687a", "sighting_of_ref": "indicator--f8386260-2cf0-4aa0-be99-3d2eefa4583e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1413c422-4eb3-45d7-8267-6e2b890ffd47", "sighting_of_ref": "indicator--f8386260-2cf0-4aa0-be99-3d2eefa4583e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05432af7-6d14-47fb-89a4-abccd75cf6d6", "sighting_of_ref": "indicator--f8386260-2cf0-4aa0-be99-3d2eefa4583e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dce3d1b-fa67-45bc-8ff4-fce38410426e", "sighting_of_ref": "indicator--f8386260-2cf0-4aa0-be99-3d2eefa4583e", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e2cf81-029b-4f5a-abee-e075d1889137", "sighting_of_ref": "indicator--4dd36fca-8ae7-460a-872c-fff6248b0141", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba21ec4-6dc2-4d8b-a606-024ada4019bb", "sighting_of_ref": "indicator--ebd66084-b656-43d8-94c8-4d0afa75636b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d76b9a1-0109-40fb-87a8-6eb5c6a9af62", "sighting_of_ref": "indicator--ebd66084-b656-43d8-94c8-4d0afa75636b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40ab72aa-b67e-4b2a-8f0f-0a70152facc4", "sighting_of_ref": "indicator--ebd66084-b656-43d8-94c8-4d0afa75636b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd7455f1-c891-45b3-b180-81463d93ca7d", "sighting_of_ref": "indicator--4b8428ce-c273-46fb-b881-3d622950375d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15cf953-a413-4e9a-bc46-d4b2f6dc4288", "sighting_of_ref": "indicator--7a24b457-fd35-4700-a19b-22a2b609c4aa", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ea87ec-818d-4191-8534-8cc214a558d3", "sighting_of_ref": "indicator--9e9c9a2e-3f55-491a-9c31-b5036838af86", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d96ff5-e3ad-4add-9825-5d1643d4aeeb", "sighting_of_ref": "indicator--e2f3bc05-0828-4881-8ab6-de4dd75d7f49", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3026f02-8ed0-40ef-a8bd-c14d595c05f8", "sighting_of_ref": "indicator--270dd562-0f98-4081-bf37-2a8898c1d9d5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f731f4f8-e80e-404b-9bed-6392db61ea53", "sighting_of_ref": "indicator--4ab5fd20-faf2-4306-9f0a-e8b4178f75cb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f801544-3ffc-404e-bb92-9b2922afec31", "sighting_of_ref": "indicator--4ab5fd20-faf2-4306-9f0a-e8b4178f75cb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce29c0d-c52e-4afb-9fec-d24f82556738", "sighting_of_ref": "indicator--4ab5fd20-faf2-4306-9f0a-e8b4178f75cb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64c7bca-4a7c-46da-9c81-37fdb86b3bcf", "sighting_of_ref": "indicator--9117a90b-6383-49d3-899c-062fb00c2e2f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48142357-2b52-4fa8-9a22-646ce7c026e9", "sighting_of_ref": "indicator--c8578b07-5bfc-471e-8525-d88333a8b673", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d8d2a13-8351-4e2e-9f6d-a8ec345919c7", "sighting_of_ref": "indicator--c8578b07-5bfc-471e-8525-d88333a8b673", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bef99f0-a336-4f7e-a56a-c1f716ca99c3", "sighting_of_ref": "indicator--bb0258d7-fd2a-4dd4-9426-1af84ba048f0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406849c9-ec18-4a65-a70f-b2ee25eaa773", "sighting_of_ref": "indicator--d33ea488-8646-4cc2-8e18-7c3cfc23a4a0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd0a728-ca01-4fec-b2f1-e21ac59ba439", "sighting_of_ref": "indicator--691a3d28-16d3-4abe-82d5-959845cc3c80", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8300c1-90c5-46ed-b41e-b9dca72e0d13", "sighting_of_ref": "indicator--4e90436a-3a5c-4c97-b120-bbdb5b3d17f7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dcead28-7300-4370-b049-bf16f2a50ce1", "sighting_of_ref": "indicator--d699b14f-561f-4b3c-928f-5eb141c8dfb0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c091fa1a-04ca-4de2-8176-13f0d5e44413", "sighting_of_ref": "indicator--8d484fea-f574-4b1c-9462-25e9fe998ee1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3593e40a-99be-43ea-97f0-df7feb1416b1", "sighting_of_ref": "indicator--4e62375d-6a30-4e7e-aa66-f3d71cbe4847", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b95c2d-5a5d-418d-a166-4acd8a07be9f", "sighting_of_ref": "indicator--47ac5d92-ae6f-4993-bc46-a9d9c44e32cc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e951ba1-d53e-4c61-9124-ffbf60101682", "sighting_of_ref": "indicator--7705af6b-18e1-4d9c-a6da-391e7a89ff0c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a01ef0bb-5a4e-4fc9-848c-11d6672e9ccc", "sighting_of_ref": "indicator--0045d1be-b3e3-4405-892c-a5f4eeafec1b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4d3c127-46fb-4f19-a330-6d9b37ec659b", "sighting_of_ref": "indicator--eea80efe-4e49-47c4-b88a-e5cf0c6b5ebf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f57499e0-db68-4cf1-8497-f6c8e32955b0", "sighting_of_ref": "indicator--329e09c3-a168-4d00-a906-fdb441d33747", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520c311a-7ad9-41a0-a568-6b4ccdee696e", "sighting_of_ref": "indicator--ff07139d-6330-4c90-85ba-a30ec83bc42a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60fa9a5b-4ade-4b37-aeb4-12bd00f2cdb9", "sighting_of_ref": "indicator--eb8c28ec-c9e6-4134-a3be-c8042a3e2726", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e187bd-be19-451f-a08f-64b34e80edbd", "sighting_of_ref": "indicator--f13afe32-dcf0-4f0d-8a6a-02c1e6a5d883", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73829856-29b8-4846-a835-3144ba271489", "sighting_of_ref": "indicator--7edb26a9-28c9-4894-aa90-403b2c3ed87a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc969571-3463-48e6-88bf-213df60995c5", "sighting_of_ref": "indicator--414bdd0d-cb98-41fe-b4fd-7dcf7294e1f1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad1efb38-0bf2-47a3-801e-d1c417ac6177", "sighting_of_ref": "indicator--f61b6b8f-74a3-476c-929e-18b9a0bcf26d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3456b4-d9ee-4104-85fa-c588a1993515", "sighting_of_ref": "indicator--f61b6b8f-74a3-476c-929e-18b9a0bcf26d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a05b3657-cf89-4643-909e-fdb3938f728d", "sighting_of_ref": "indicator--f61b6b8f-74a3-476c-929e-18b9a0bcf26d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--890f2aac-f561-4bfb-8710-e1b150b5507d", "sighting_of_ref": "indicator--d9306a7f-0675-47bc-859a-79e8998d3856", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2efc8e89-ce70-4639-a190-5412bdd96d13", "sighting_of_ref": "indicator--bb714636-fa15-4969-96e1-d6132ab3258f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7abcf757-4fba-408f-9cb0-eff01e85be10", "sighting_of_ref": "indicator--bb714636-fa15-4969-96e1-d6132ab3258f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbca2403-b2ea-440b-b666-e940f952c0d3", "sighting_of_ref": "indicator--776f4096-f3a3-4e9e-8d6a-17fa6f352fc1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a4e56c-ef96-4b8c-afb2-cf9230d14c41", "sighting_of_ref": "indicator--776f4096-f3a3-4e9e-8d6a-17fa6f352fc1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96bf1256-6ed4-4105-a9ea-ce6c23687dab", "sighting_of_ref": "indicator--57911987-2276-4544-a416-fdadbd50e02f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce2d865-143d-453c-98a3-e786fdcb1853", "sighting_of_ref": "indicator--57911987-2276-4544-a416-fdadbd50e02f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e7148f-56e7-4415-8eeb-f0c7f2e610d5", "sighting_of_ref": "indicator--57911987-2276-4544-a416-fdadbd50e02f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b650c2cb-2a5f-46a8-97f7-9e93c01592a9", "sighting_of_ref": "indicator--2ffc5f08-6353-4905-b86b-60ec80122af0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555237b3-4bd4-4e8b-8a8a-925e76450585", "sighting_of_ref": "indicator--2ffc5f08-6353-4905-b86b-60ec80122af0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662977cf-4b0d-4f8d-8ead-6ff8bb58fbfb", "sighting_of_ref": "indicator--46915cbd-6d30-4125-86ad-ed30ad6df069", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1875bfc7-4791-48ce-8813-f6b7ccc74cac", "sighting_of_ref": "indicator--46915cbd-6d30-4125-86ad-ed30ad6df069", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e733bb6c-75ec-4294-84d6-2618c8b2ec16", "sighting_of_ref": "indicator--17ace56c-f646-4c2b-afae-3a6acccfb56b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56268836-7149-4578-9a4f-dc51abcb75c5", "sighting_of_ref": "indicator--7b6b899d-12fb-458c-a9e8-3e870aac5b54", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23859f32-7490-4c83-b05a-84c400a68f12", "sighting_of_ref": "indicator--7b6b899d-12fb-458c-a9e8-3e870aac5b54", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557f4699-3cfd-46f0-8692-00da96fc558d", "sighting_of_ref": "indicator--7b6b899d-12fb-458c-a9e8-3e870aac5b54", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3fe4207-0e97-4513-bc34-d2b68eb00a5f", "sighting_of_ref": "indicator--7a048076-ca0e-4b69-a2f8-1e2f0afba02b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--052b8976-e9a0-4439-ade5-7e97335697d7", "sighting_of_ref": "indicator--7a048076-ca0e-4b69-a2f8-1e2f0afba02b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c03a4d-bab7-459d-9b13-fb818050ee6f", "sighting_of_ref": "indicator--7a048076-ca0e-4b69-a2f8-1e2f0afba02b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce106aef-b9e4-482c-947e-f4749a8bdee4", "sighting_of_ref": "indicator--ff11c405-e94d-4ba1-b9b6-16a6e075d281", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e1ff0d-4df0-4f9c-8596-1e07d478eae1", "sighting_of_ref": "indicator--ff11c405-e94d-4ba1-b9b6-16a6e075d281", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b49034d-abda-4ee6-9c9c-1ae604838b91", "sighting_of_ref": "indicator--ff11c405-e94d-4ba1-b9b6-16a6e075d281", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614cf372-9b70-4146-820f-56206de0318e", "sighting_of_ref": "indicator--b9dcd2cd-ba5c-4819-8574-5969e88a24e4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4fd225-9c2e-4df6-b955-42152357d4a9", "sighting_of_ref": "indicator--559168f4-dd7d-40af-bea7-cc18eee8c9ef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307e0ccc-871e-457f-a034-d9002f6f5703", "sighting_of_ref": "indicator--a2ad1b9b-6413-4c17-b963-0b5f40579f37", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf905ee-99e3-4e2e-8913-4cc1862963c8", "sighting_of_ref": "indicator--8255688d-2183-4b21-95f1-6949919a80a8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598500b6-55b8-447c-bf36-acde037268c8", "sighting_of_ref": "indicator--8255688d-2183-4b21-95f1-6949919a80a8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec8ff062-2080-4a83-85fe-b4aa24cbdf68", "sighting_of_ref": "indicator--8255688d-2183-4b21-95f1-6949919a80a8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf55f1b-2e94-4023-9aeb-91724b53e569", "sighting_of_ref": "indicator--36626185-67dc-4581-bd98-e2fefbcfa272", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58fdbd5c-70ce-402e-abb5-fd8b40c0aa81", "sighting_of_ref": "indicator--1539be78-40c0-4aeb-b65c-7a692addbd6f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee83a61-c989-419c-a957-7ff142435229", "sighting_of_ref": "indicator--0922c172-18b6-4eaa-9377-a42c13ce611a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf1a87f-9fc2-43fa-b4d3-dfe96d297d12", "sighting_of_ref": "indicator--9ceda434-744f-43de-9761-c452ec5f7c7e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52458f4-604f-4a71-bc44-ad81f172bdf0", "sighting_of_ref": "indicator--9ceda434-744f-43de-9761-c452ec5f7c7e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a76ac9-88ab-4090-9aaa-a54aab9aea11", "sighting_of_ref": "indicator--64bb779a-ecb3-421f-b8c9-6c3e99c2f167", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca51451e-42b2-43bc-baed-635b757324cd", "sighting_of_ref": "indicator--4dafc365-7666-470a-83d0-f8c5a8884b0f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9515e4ce-16a1-4852-8ac4-d0f3812d8415", "sighting_of_ref": "indicator--4dafc365-7666-470a-83d0-f8c5a8884b0f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f7fd06-d543-44a0-a9b6-519aef49eb91", "sighting_of_ref": "indicator--4dafc365-7666-470a-83d0-f8c5a8884b0f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0145c49f-638a-4e5d-8fb9-2b3c591cbdb8", "sighting_of_ref": "indicator--4dafc365-7666-470a-83d0-f8c5a8884b0f", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46339bd-208b-4554-b37a-96cb11da6994", "sighting_of_ref": "indicator--521469e1-bb8f-4291-9e45-42b0f9582e95", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--359fdbd7-2fe8-4ddc-910a-a58db99b3ef4", "sighting_of_ref": "indicator--19a0179b-cb82-4b0f-bd82-f828ad347b72", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4fd5112-85cd-4f14-a44d-1e2ad89bd1cd", "sighting_of_ref": "indicator--c658a70e-64c7-47ed-8053-c7687ce9574b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b8f539-6399-4e85-bb1d-9c3cd99e1d63", "sighting_of_ref": "indicator--cc577053-b165-4509-a440-a62ad23c2b7d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bed6b84-d0de-4cc0-975b-f331bcc373f7", "sighting_of_ref": "indicator--2f58d7fd-f3aa-4d1b-805b-4b2379601d77", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3694891c-854a-4b47-8c84-56aa2dca7afc", "sighting_of_ref": "indicator--24e73239-6fcc-442e-b1dc-bc1f7723dbef", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56254b4c-505b-419e-8d7a-479af8321dce", "sighting_of_ref": "indicator--24e73239-6fcc-442e-b1dc-bc1f7723dbef", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d39a67ae-7ac4-4b16-a6ef-80a1fa3f3a7b", "sighting_of_ref": "indicator--ceacf6b7-10a8-4f52-8e1b-31f1004c4ccb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0820191-1100-4197-85b2-92f855fe05c3", "sighting_of_ref": "indicator--ceacf6b7-10a8-4f52-8e1b-31f1004c4ccb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c89608e-6a31-4b99-9f28-8bf4361cbbac", "sighting_of_ref": "indicator--ceacf6b7-10a8-4f52-8e1b-31f1004c4ccb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--121920a6-b81a-433c-ba1b-65ac0277ef09", "sighting_of_ref": "indicator--08dd67c5-948c-4e9c-a36e-af12b731ad30", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e3cfa7-76e5-44b0-83b9-448e2c0ee23b", "sighting_of_ref": "indicator--1ebddd18-7c11-4745-9a10-752eed3ae2ac", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca9df08-dfc5-4001-ba35-1ce556d7b672", "sighting_of_ref": "indicator--070a7080-e968-417d-9e7d-8447ca2013a7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36fc06f2-ab64-4b7d-b94b-7995fcfc2a85", "sighting_of_ref": "indicator--d02bacb3-b920-42a7-88a0-11956a12c3a8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c8e2c8-3651-441c-9ed6-3de80728bf06", "sighting_of_ref": "indicator--cb8b7fd1-c4bb-476f-9f24-c0680db5af69", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76e10a3-9a2e-456a-869c-650eac79abfc", "sighting_of_ref": "indicator--f4875425-fef6-4141-bf0c-8287ccedc0c0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c68bad0b-51a5-4b87-b553-c8dcdf44c157", "sighting_of_ref": "indicator--8d5102af-8e7d-4bf8-87dd-b2c87c73f32b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e49b03-72f0-413e-8f80-fe20695923e7", "sighting_of_ref": "indicator--10597009-0963-4027-ad81-2f3466af7bc0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd63cf8-7a4d-4379-9a49-ddfe4c310cc2", "sighting_of_ref": "indicator--e41b9ed1-e409-4cb3-800b-e6cc8feee7a2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d8947b-ffc9-460a-9aef-28406f446d44", "sighting_of_ref": "indicator--b9cd32f2-abc6-4a7b-8d2a-773657897a6f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--027fae11-5227-4d7e-a300-5a2480d0ee8f", "sighting_of_ref": "indicator--51631725-2e77-4231-b087-0d87f1f36591", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c12aa3-ff76-41ce-a95b-7ee063f96978", "sighting_of_ref": "indicator--f9e940c0-4b91-4304-8721-40519f05f4e9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1500633a-eab0-4547-93a9-15a552aa09ed", "sighting_of_ref": "indicator--9916c7ac-3766-4460-a37c-69d2013bb9f7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6968699f-950b-4a8f-b75d-a1c85251516e", "sighting_of_ref": "indicator--9916c7ac-3766-4460-a37c-69d2013bb9f7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff3e776-a71e-421f-a26f-d7429d435672", "sighting_of_ref": "indicator--81882783-c04b-43c2-b5dc-43764efb0c94", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27b3ab43-0a91-4843-a797-736d32582841", "sighting_of_ref": "indicator--40c16368-99f2-4034-a97b-de8f3d94ca4a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d634bd87-7e39-43cd-874b-1b79c9146f63", "sighting_of_ref": "indicator--0c39d445-ec4b-47e1-9939-3361e93f030c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67173510-dbb2-443c-af4a-17147eba6df8", "sighting_of_ref": "indicator--434ca339-d79a-43d3-8c1f-21bfce7117fd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ab71e4-2cad-40b3-8b9b-75cb43570e02", "sighting_of_ref": "indicator--8e29e266-8843-4943-8702-495882edab1d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed233e88-981f-4727-a17a-9ae9dec31a46", "sighting_of_ref": "indicator--4bf73b85-3684-46e4-832a-7cb4e76f887b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b7fbad-7a77-497e-b807-9c18a97d81fd", "sighting_of_ref": "indicator--12ef55e1-fbee-4caa-b4b9-859c448baf2c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a073078a-531a-4ea3-85d5-f1701273d5d1", "sighting_of_ref": "indicator--e4567835-da4d-411f-9105-cad2d85b8987", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01852853-f0cb-4cda-8e02-5a11831c285a", "sighting_of_ref": "indicator--ab5bfc78-72eb-4629-a1a5-9783f07d71eb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d149007b-84f7-4014-af1e-2772ceaee758", "sighting_of_ref": "indicator--4bc15a62-fb50-4b66-916e-b6dcb591a732", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9039703-ee59-4508-822a-496d587daf69", "sighting_of_ref": "indicator--c7d15d6e-3b2f-4ebb-bb59-6b92d877286d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723642e2-518a-404b-8bd0-ee2dd7a9757b", "sighting_of_ref": "indicator--342a2762-7fdc-4bda-b3d7-19c8bf9b6e6b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0556f5-5bfd-4b67-8618-2302246086a0", "sighting_of_ref": "indicator--fb739234-1a0e-4ec2-b765-ae8bbdd43fcd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2210355-8698-4e3e-8cf9-e4fb6c6dd994", "sighting_of_ref": "indicator--d6bbcf00-4101-4220-8e4f-e1f971640be6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbbb5cb7-cef4-4b80-ba6d-5d750597a232", "sighting_of_ref": "indicator--206f6a91-8987-4b08-b155-c214a3bf0ca5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3567bc0-3356-46a9-8285-f5a3b3c8baa7", "sighting_of_ref": "indicator--f3273ec5-109c-4410-99b3-3be05dd8d8cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af97f9df-3462-4e24-9fd3-521c19211580", "sighting_of_ref": "indicator--f6df97cd-76d9-4f30-9b13-4b05acf984cf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9056bd9a-c289-4021-8255-8856d8704110", "sighting_of_ref": "indicator--7a891171-81b2-4289-9573-f06d8cf70b1c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ce72f2-df33-4535-9ce2-4679d7541e0c", "sighting_of_ref": "indicator--f83bca25-f967-4412-a1cf-2152d80eba4c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b920bec6-6785-44ec-bd76-aa86ad47e642", "sighting_of_ref": "indicator--a0cbb4ce-a120-4794-b1c5-8d66f2d0937d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05905840-9d41-447f-be42-d28ac7d475ea", "sighting_of_ref": "indicator--bf3675a1-9740-4019-ab8b-ec5b9e485b20", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c2c2d44-1f98-41ff-863a-aa1ca9395d8b", "sighting_of_ref": "indicator--684c032e-b348-4768-bf5b-7353f847fa4e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f24883-7737-497e-a9cb-398dda1c9250", "sighting_of_ref": "indicator--93b76832-06b0-4597-ae83-22d06269ac0e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2fd19c-c69a-45ff-ba82-66e5238658fb", "sighting_of_ref": "indicator--62a29339-b5c4-4944-ac18-321889b19fd2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--271b7da4-79c6-45d5-8c0b-b9d29b5c052d", "sighting_of_ref": "indicator--a2fc0ab8-8c85-4afe-9296-80e63bbb77c5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113d0988-ad08-490c-a667-bc7ba0882272", "sighting_of_ref": "indicator--896aa168-5c3b-4bee-b1ed-372822f977d4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b729bf89-396d-4939-8e62-f77fb620a63e", "sighting_of_ref": "indicator--cdac0656-4c46-4596-bf40-d533dec4d5ea", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f5df02-69c4-46c8-9c04-e0f157127818", "sighting_of_ref": "indicator--8b4c8f54-f898-4ab9-913f-8dc6bddb3a42", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b07ce7-ff1f-430f-ac98-9d8eef2b5e2b", "sighting_of_ref": "indicator--d90e63db-fc5b-492d-b547-1b7c927043b5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60e103a-9e62-4e9e-9497-ba9a6b5e19ae", "sighting_of_ref": "indicator--50eb5f2b-d5d5-47b7-891b-47ef25270777", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60800c62-ac2c-4398-80da-909345ddf9bb", "sighting_of_ref": "indicator--4e444b8c-734c-4f3f-a28a-dc72537f27db", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1bf8d9d-35f6-40fa-8f75-aa4edfab1e18", "sighting_of_ref": "indicator--f16c0b54-0dc4-4213-add7-e478d79a54d0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b76737-8c69-4faf-a191-5d64979ad7d7", "sighting_of_ref": "indicator--e8e8ea86-dde6-4fd7-a294-fb19ec9a7f32", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af673b83-4b4f-473c-a914-6a8821ff02b6", "sighting_of_ref": "indicator--a202e910-6d77-4699-ae03-dd39133d35af", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8926f83-76c6-4e28-a47c-bc87e0195857", "sighting_of_ref": "indicator--fc459513-2dac-4679-beb8-70e94bcf76a7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2581f233-df00-444c-9adf-243d90712c24", "sighting_of_ref": "indicator--ec0d3fd9-60bb-4d3f-968f-5c5996dffc10", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f132ebcb-809a-4131-8f07-a384b9415ee4", "sighting_of_ref": "indicator--ec0d3fd9-60bb-4d3f-968f-5c5996dffc10", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7b4689-381c-46b2-8592-0523ec9434b0", "sighting_of_ref": "indicator--b318febd-6949-4444-9cb8-2a645f6d5b4c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b70405-7bdc-443c-9fad-c641dd8f03e9", "sighting_of_ref": "indicator--bec8da5e-2480-45a4-9cff-231876a607b0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b20d2b8-0026-4498-9734-22e4e1daf2fc", "sighting_of_ref": "indicator--8464007c-fafa-4b93-85a7-a94846fbf475", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9dd465f-9f26-499f-8d13-76b15f7b43ba", "sighting_of_ref": "indicator--dbfb1844-3e00-4599-82e3-899e652d7c0c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ec6f8a-f1c7-42c6-b1b4-1a9b2537dabf", "sighting_of_ref": "indicator--dbfb1844-3e00-4599-82e3-899e652d7c0c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd45ad5-55e8-430d-9a71-25aae1c8e367", "sighting_of_ref": "indicator--8bb9d73f-c021-430f-96e1-77fb3a9b90e8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0975bf01-7397-43b2-8378-444b3a318458", "sighting_of_ref": "indicator--96e79898-e0e7-4ca3-ada6-fcbe6ccd7eed", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37afce0c-3222-437a-a6fb-c949162e3be8", "sighting_of_ref": "indicator--c3912eff-1a24-4a94-af3d-5885068bd948", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18de5f41-3e34-49cb-bd36-5a02263786d6", "sighting_of_ref": "indicator--525e3b06-84e1-425d-8f8d-48e8db2cf013", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28b8d6d-013e-4881-b820-c25ad433ebda", "sighting_of_ref": "indicator--525e3b06-84e1-425d-8f8d-48e8db2cf013", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5b213c2-5ebb-4b06-bc77-db7e36432c36", "sighting_of_ref": "indicator--525e3b06-84e1-425d-8f8d-48e8db2cf013", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb59318c-5331-42e6-8300-c4499107fc7f", "sighting_of_ref": "indicator--60c87e82-08fe-46dc-bfa6-8ef87ef87547", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbbb3a0a-6b89-4aff-85ea-8df84dbf2277", "sighting_of_ref": "indicator--931452bb-57ad-4a74-a50c-7d079345e070", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf407f49-656d-40d0-86d3-6b3b91afcbcd", "sighting_of_ref": "indicator--1be14506-d663-4d07-91ce-c28101c8f5e1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ec88d5-720c-4b3d-bf67-7a64c0c3c88a", "sighting_of_ref": "indicator--1be14506-d663-4d07-91ce-c28101c8f5e1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2720f18f-97ec-4cd1-b380-cd9e581bb5e2", "sighting_of_ref": "indicator--316dda36-d470-46af-8a05-68d07e0e138a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aaec28c-4398-4f63-b6dc-5b88968daaa2", "sighting_of_ref": "indicator--316dda36-d470-46af-8a05-68d07e0e138a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e93ad9f-61d5-4995-92de-113f5ecc2a49", "sighting_of_ref": "indicator--a086f25f-24fe-43ba-a258-db2daae777e4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b23ca6-56e8-40c0-bdc2-af751cae7d3e", "sighting_of_ref": "indicator--fa7bbb82-943b-464c-94a3-092e54f8d53a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55334675-a360-4054-8937-f939e254f177", "sighting_of_ref": "indicator--12c0c340-449b-484e-8e74-253bad44aec3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149dfbb4-ed25-4ae8-bd83-f8238fbd4f89", "sighting_of_ref": "indicator--3e6d4ed9-1faf-4f2b-8ab4-775605131363", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1891359-2116-4d30-aef1-7e4d37e451d8", "sighting_of_ref": "indicator--73fc8440-8329-4176-815d-8506e8ba7efb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6af8de-0165-4db7-913e-0edad7fd5ea6", "sighting_of_ref": "indicator--05d178c3-3528-4f7b-af6e-e532adc81222", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--292c3754-a8f4-486b-ad13-b8bafee33434", "sighting_of_ref": "indicator--2ff1c143-d0e6-47e0-9738-2ee6cad32ebe", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--032a486f-5f78-478d-bd21-5223ddb66672", "sighting_of_ref": "indicator--ebd610be-3635-4fd3-93ff-795d9f762ea8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a3c9048-33a7-46eb-adc8-fa37b15c6467", "sighting_of_ref": "indicator--993619cb-9094-492b-b58c-a0615fe6a53d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df02ae3-0846-438f-adb8-0ff5fb1e0a6f", "sighting_of_ref": "indicator--4c5430e4-4f99-4742-8b91-52a4bb95b17c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6729109b-b729-41f0-bc23-712f6165dd5f", "sighting_of_ref": "indicator--4c5430e4-4f99-4742-8b91-52a4bb95b17c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839c5fb9-f2cf-46b4-87f7-a91c3fe3ff48", "sighting_of_ref": "indicator--defd48f8-945c-4927-8e53-f38003d46e6e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d72cce-1bfb-4c59-9396-084cdef79492", "sighting_of_ref": "indicator--defd48f8-945c-4927-8e53-f38003d46e6e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0387d50e-fd27-4fce-a89f-5f6ba530a40f", "sighting_of_ref": "indicator--93ef8473-4a0a-43ab-b93f-c669805a6957", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42d9023-4d15-45f6-b222-fc8b55c4ac85", "sighting_of_ref": "indicator--93ef8473-4a0a-43ab-b93f-c669805a6957", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce12162-c51b-42f0-91d7-9df590bbd5f8", "sighting_of_ref": "indicator--c77dc22b-07d6-4750-b2e5-7b1f503a469a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b0b7b7-2d20-44fa-ba1a-f1491f1553ef", "sighting_of_ref": "indicator--4e19e767-aaa8-42bb-a0ef-2e1ec4b8ab67", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--617d644b-1872-4d5a-ab99-60fd51a8cb7a", "sighting_of_ref": "indicator--ad1f1394-e4ca-421f-be06-6b3493144245", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--659f8f8e-094f-4440-b959-b0271ca3aef5", "sighting_of_ref": "indicator--1fbdbd50-2c4e-48b8-b5ee-4d576b66c0fd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf365a8-e9dc-40cc-92bc-894304b694da", "sighting_of_ref": "indicator--f66c4c08-8d0f-45c0-ba1d-cf5eb5dec135", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8da552d-2c1f-4c7f-adec-f2679fa0f24e", "sighting_of_ref": "indicator--f594dd04-0173-4721-9d5e-03059ab49326", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06eaa024-2cec-468d-8e9d-abf19ddb4c76", "sighting_of_ref": "indicator--3c779191-42b5-4add-a85f-dfe1d459e25a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4623607c-02d4-45fd-aef9-f426f2b0bf11", "sighting_of_ref": "indicator--44fe4fea-40f5-495d-89c2-7db5b20abf7a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ee9080-f141-4fb4-b6f3-8895cb1e3588", "sighting_of_ref": "indicator--3a5d87fc-8dd1-4079-bce1-93853838c1ed", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--861b36d5-ac6d-40b4-b4a7-0cc6a56d884f", "sighting_of_ref": "indicator--952c47d2-1523-4ff9-8f23-d94304849bec", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a4fc00-75c5-4f81-a965-4c084a8032bc", "sighting_of_ref": "indicator--952c47d2-1523-4ff9-8f23-d94304849bec", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782bcb15-df61-4d34-a9b2-c703df68f445", "sighting_of_ref": "indicator--02e82718-390e-421e-bed9-e90c503b251c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff21fae-fa00-4a22-859b-5fd7991b47d3", "sighting_of_ref": "indicator--c899ebb3-0a95-4df1-9a1c-acc2d7348ef7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9039b00-e3a7-421b-a921-6a4510512622", "sighting_of_ref": "indicator--c899ebb3-0a95-4df1-9a1c-acc2d7348ef7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f561e52-6993-4ac8-93b0-a91d3513fdcc", "sighting_of_ref": "indicator--ff6aabbc-a19d-4c7c-b423-92ab591c1f76", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7750f17-aaa5-42a2-a4fd-ad3e889a88e9", "sighting_of_ref": "indicator--c7a5aa1e-f959-4240-8a31-c09406795586", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3db4eb-00bb-4a33-b4bd-721aa9cabad1", "sighting_of_ref": "indicator--88199f1a-16b9-42dd-bd22-2b5c0b92b083", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce923505-4c75-48e1-9e39-a6049f82402c", "sighting_of_ref": "indicator--ceae60e7-a3da-46fe-b4f2-9b73d550d306", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975ebf5e-6049-4342-8a88-2559ec580e91", "sighting_of_ref": "indicator--232b1723-7cc1-41d6-9236-f0d4d251610a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96cd662d-9d9f-4741-8fc9-9bb72fd6447b", "sighting_of_ref": "indicator--b61afe39-806a-4850-a095-ff1f17fca3c3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab871ba0-3c86-431c-b969-476488b70bfa", "sighting_of_ref": "indicator--49552281-a861-43f2-97a5-156a066fd6ea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04db8940-bbb5-431a-b7fa-f4e65c334b3d", "sighting_of_ref": "indicator--2059fe04-3dbf-4d7b-860b-7217cede1a35", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30faadec-86b7-4804-a93b-60d437037e09", "sighting_of_ref": "indicator--f914b140-63f2-465e-a76e-a4d62192a93c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d66018b-1569-4262-b144-ec39d02a0723", "sighting_of_ref": "indicator--a86fc389-74b0-419c-9aa9-11b2c97a54b0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da285d07-aca7-4d65-8bf8-2532c63fd4bb", "sighting_of_ref": "indicator--a86fc389-74b0-419c-9aa9-11b2c97a54b0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a4a93b-4e3f-4567-b0ad-1f93d24fcbd8", "sighting_of_ref": "indicator--c44abad4-7880-4388-a2dd-adc629e4a0fd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd8344d3-481e-442d-a570-b117c5f0d06e", "sighting_of_ref": "indicator--c44abad4-7880-4388-a2dd-adc629e4a0fd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8355389-ccf4-4808-a7b5-c85748942729", "sighting_of_ref": "indicator--fb27b282-82e0-4011-9e99-76bdf9f1d10f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb35873-8424-447e-913d-59cc84c6b7e6", "sighting_of_ref": "indicator--e16f3f96-0281-45e4-875f-6756018773f6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f27c0e7-b8d7-4384-9d47-84c6b37461d7", "sighting_of_ref": "indicator--21fdf966-4677-4c17-a587-d755e39627d0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df18502-470c-42c6-b01c-cf17b0a0f883", "sighting_of_ref": "indicator--de8543f3-96bb-4838-977b-d3d20a6705c6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e82fd41-5635-4c06-b98d-d349d961c88f", "sighting_of_ref": "indicator--5104d5ab-ea85-4eb0-a225-d7ad0e35a448", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a85e9b1-9aa0-43c4-8605-16a354df3bbc", "sighting_of_ref": "indicator--696768d8-d27d-4754-a3be-83530ca67975", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc8d3a9-f243-469f-98c0-d98cc9856526", "sighting_of_ref": "indicator--fe450813-5918-45cc-b084-bb2843082f01", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0afbbfd-e500-4805-ae19-27f00355c972", "sighting_of_ref": "indicator--3f783c31-9029-43f4-a03d-ed387fc402c6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b42ff2f2-22f3-4d1e-9724-152b08e6d7e7", "sighting_of_ref": "indicator--065834c1-8394-459c-9e7f-fb20671168ad", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96338ec6-b75e-43c5-b7a4-30ccde597036", "sighting_of_ref": "indicator--d0dbd826-a98d-4065-a720-5a0f20e2a6c1", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81917a5b-5511-476f-9e71-f5a8761b062e", "sighting_of_ref": "indicator--30998382-1118-49b3-bce4-4fb76f3e6375", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5b65d0-8070-4ff2-8f04-34473ff4ffa1", "sighting_of_ref": "indicator--ef78472d-2a51-4ea0-be8a-546382aae453", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e6c010-c346-42ce-aa7f-80282d43808b", "sighting_of_ref": "indicator--cdc0ff31-4bf5-4307-a5b4-548c4030d77a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec1d50c9-09d8-4eba-b873-35424da05f96", "sighting_of_ref": "indicator--51086458-5f2b-4adb-baf4-aa18aea12a2a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77364f47-5d12-44c3-880e-3aacab22a5a1", "sighting_of_ref": "indicator--1e5e1550-2269-4a7d-9367-9128bbba492b", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5004ed5c-52a6-46d8-8c62-e87b5696ed3d", "sighting_of_ref": "indicator--74710d3e-4164-444f-8f90-10fc09e425b4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b24b7dda-4aee-4c09-a1b9-d09de88dadb5", "sighting_of_ref": "indicator--90e44f94-b04e-4288-9bcb-c110e627b427", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f03c7a5-b008-4739-81d4-81c35064c1d2", "sighting_of_ref": "indicator--31e2ea27-6cff-46be-9030-ef29156d6a33", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71592667-1992-4bbc-9267-e5c9043f320a", "sighting_of_ref": "indicator--67560bd5-afe5-416d-9e4b-7bd1f849c138", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de4e944b-a482-4cf3-8a5b-185fdc7f9aee", "sighting_of_ref": "indicator--d96f9bb0-270a-4324-ab67-ac77e2b9c4ab", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cba8d25-48f7-4e59-8e6b-af805bbc92a0", "sighting_of_ref": "indicator--46722e68-ccda-45cf-bc67-1ddf04687eb6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5865339-d078-4dce-b07e-9f56156380c5", "sighting_of_ref": "indicator--e9971acb-70c8-46a0-85da-cc6af2e09c0c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1320b88e-6df5-471c-81d6-34c3bc41ec87", "sighting_of_ref": "indicator--539e734b-2776-4e78-aa18-27c2fbda093f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba827bae-338d-4308-9a09-625fa7a2ffbd", "sighting_of_ref": "indicator--2f26beea-e7b3-4085-a356-16d89cb41a9e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab76f8bb-4862-48ec-b656-1a2cac3ec5b6", "sighting_of_ref": "indicator--53d6576d-f248-4b33-b2ec-539a0968e6f7", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b641656-61c1-4cef-830a-0fc229053072", "sighting_of_ref": "indicator--6213ff70-7cf9-4ab3-904d-7368bd626162", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3ab821-f5cc-4752-a06e-3e61a609623a", "sighting_of_ref": "indicator--10eefd25-cd48-4646-b3f3-00a7a25af0a2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c296990-099f-4830-889a-5012432c8d59", "sighting_of_ref": "indicator--9417a156-814d-4296-83c4-19dd3c33b64a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a6a319-38aa-438c-a42d-cdfffd09ceed", "sighting_of_ref": "indicator--a0f35ce4-1903-4050-8cbe-2078bc16281c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f234ad10-d4a0-4f80-8b2c-65af5c844289", "sighting_of_ref": "indicator--bbd5df23-281d-4e59-ad00-a08fe9b4acdf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e07a5d3f-c493-4669-97bf-bbee27801cc8", "sighting_of_ref": "indicator--d834c2a3-99ce-48b3-99c0-c66fda62987e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2acd6552-220b-4bde-96e1-b7703b3d8faf", "sighting_of_ref": "indicator--f561062b-7991-4e52-8381-230f5b7c5311", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492ec67b-51fa-47e4-9780-fd4de58e4f6b", "sighting_of_ref": "indicator--b0622864-92e6-45f8-a03f-a96bbb2a3fac", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b42f1ee-d0a8-4a70-9e93-6dd02f87c1c1", "sighting_of_ref": "indicator--b0622864-92e6-45f8-a03f-a96bbb2a3fac", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5403dc85-24a2-4934-8ffe-eb8d5202810e", "sighting_of_ref": "indicator--bf11d62e-88cb-482e-a53c-fe353210f0aa", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e9a773-3b16-42fe-9ac8-b46dcec804a0", "sighting_of_ref": "indicator--3a92d7fc-f41e-486f-b6f9-e60b2eff12c5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee06ced6-039a-4557-9ac1-74041b980d8d", "sighting_of_ref": "indicator--8417bb0f-ba0d-4dd9-879c-738e599d2636", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64356079-4462-4e00-8240-b4a005509090", "sighting_of_ref": "indicator--dd87869c-e31b-4762-8918-cc54ad7de63b", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5895321c-6935-4da7-bd9a-a6aef71bd445", "sighting_of_ref": "indicator--6d01c0ff-47e8-4e89-b9ce-1964c57554c3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba36fa37-b135-48c0-8412-b6696f88490b", "sighting_of_ref": "indicator--be83c7c5-6282-4933-ac52-c67697aa6ee2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6d6502-69f5-4e65-8e53-d39360603e14", "sighting_of_ref": "indicator--dd3f6db8-5d56-434f-a6ef-d438119c89d5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d4881e-2acb-4dad-8abf-23653938563a", "sighting_of_ref": "indicator--9d9c858c-9084-430e-baec-10f2bd63a9c0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--691cb6d4-c45d-4e9b-92b7-3e2828981cb5", "sighting_of_ref": "indicator--76d5115e-d156-43e4-a183-9aac7e9ff609", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fbc4963-154d-4fca-ad79-8a34dff9fea8", "sighting_of_ref": "indicator--f2fd3814-4fb5-4dd5-b144-77d5889d8abb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aff04ec-32d2-4a54-9361-77a0ccc8edc5", "sighting_of_ref": "indicator--2f0020d4-0dab-4f10-8e1b-546c4708c1be", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c673e5c-3be6-40f1-970c-577f98198933", "sighting_of_ref": "indicator--2f0020d4-0dab-4f10-8e1b-546c4708c1be", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--646163d7-9b94-4c3f-bc53-d3d60d27ad20", "sighting_of_ref": "indicator--05ed0ebf-26e1-40f5-a539-459da804881c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da54c8fc-4b87-404d-b8b8-fae495d5287a", "sighting_of_ref": "indicator--05ed0ebf-26e1-40f5-a539-459da804881c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0636d094-2a11-4a6d-a9f0-3cc71a24bf75", "sighting_of_ref": "indicator--a6239b69-8491-4a6e-8ab6-29b4d4ae7bdc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a261cce7-b4cb-4d7f-817f-7e3c9774a6af", "sighting_of_ref": "indicator--a6239b69-8491-4a6e-8ab6-29b4d4ae7bdc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab2575d-6f96-45e4-8ab8-c5078f1ded7c", "sighting_of_ref": "indicator--a6239b69-8491-4a6e-8ab6-29b4d4ae7bdc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--835cead9-3a02-4686-b586-c422ed970309", "sighting_of_ref": "indicator--a6239b69-8491-4a6e-8ab6-29b4d4ae7bdc", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--009270f9-90e3-4bee-a660-0fd406eca46b", "sighting_of_ref": "indicator--9f67ed0f-8b79-4e98-8c01-c23ed1667890", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab8e0e8-b86f-4527-a55e-9436917bebad", "sighting_of_ref": "indicator--1fdeeff5-8f3d-45b9-a8a5-bc5aab45d0f3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a887e5f4-dfd2-47b9-b09a-d87d527853c0", "sighting_of_ref": "indicator--20c8175a-5b7b-49f6-b786-4f99867f20a4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263b75a7-4d5b-46fe-a7af-5320adaa2b88", "sighting_of_ref": "indicator--62dd29ec-b045-42cd-9f9f-ce17f54a4723", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a93bebb6-cbce-435b-95fe-dd4e1dd8ea74", "sighting_of_ref": "indicator--c471a92e-c4fe-4553-a03b-d40923fe2cda", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bcabc0c-cf59-4d03-8d33-14fc63426f79", "sighting_of_ref": "indicator--c471a92e-c4fe-4553-a03b-d40923fe2cda", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97af5d3e-002e-4dd0-8878-453dabc43046", "sighting_of_ref": "indicator--9e566aa2-b25c-454e-a7a2-1df6c63b529b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05dfb165-1fcd-447f-82f9-fbdfdefd9710", "sighting_of_ref": "indicator--9e566aa2-b25c-454e-a7a2-1df6c63b529b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d48b02-6148-449a-bc56-12152df7d006", "sighting_of_ref": "indicator--a243820f-e0ab-4ee7-b997-2f169d0e4ae7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf915970-cb5a-47dc-a0dc-4c0f8e66b6a0", "sighting_of_ref": "indicator--a243820f-e0ab-4ee7-b997-2f169d0e4ae7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f5f291-9f87-4759-bb7d-b8970a51d6e7", "sighting_of_ref": "indicator--eff24d29-97ed-4a49-ba3a-f1ec4cca208d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456c4ed3-389b-455a-81ff-2381a9b82afb", "sighting_of_ref": "indicator--a68f715e-f041-471e-86f2-4963e1bdffa7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b96d2c3-2e25-4a29-8d92-838676a7ea09", "sighting_of_ref": "indicator--b8a3c385-be6f-43c6-bc46-680b5d266a9a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e217b83-14e3-4dc4-a4c1-6ad18bbd4872", "sighting_of_ref": "indicator--f37da44c-7903-4322-a655-6849a4b48617", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531579d5-b60f-4489-b079-dc8f4db0894b", "sighting_of_ref": "indicator--2f162490-ff64-4e71-b0e9-999edfd84b05", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b861dd58-5e79-40f2-94a1-2a318c76c5bc", "sighting_of_ref": "indicator--f9333879-fa00-42c6-b94c-9b5d1ace2f02", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a490920b-f572-4f1e-a967-06e93e330e86", "sighting_of_ref": "indicator--d8add1e2-1061-43c5-a470-7c277fc8d176", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56455f64-e404-49b6-ae74-bd2e4d2d9d59", "sighting_of_ref": "indicator--d8add1e2-1061-43c5-a470-7c277fc8d176", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c99b681-df9f-43e8-a8c5-f299f3c89145", "sighting_of_ref": "indicator--d8add1e2-1061-43c5-a470-7c277fc8d176", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1101d15-d6a7-4007-95b8-9cbb8b1c3767", "sighting_of_ref": "indicator--41428a87-baf7-4e19-8200-4f121a2a24e1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2786b7b-7422-4e44-acac-dd9f70a34efc", "sighting_of_ref": "indicator--52b58006-abda-49a7-8e5e-c22562a25ecf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c0c956e-f72d-4e84-88e7-ac627ea540ed", "sighting_of_ref": "indicator--7a961131-56d4-41e5-9ef7-a491e2413a66", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3c887f-bb9a-4beb-a681-723ce7ed52ac", "sighting_of_ref": "indicator--377a2034-a3d0-4fbb-9624-be9f20058c97", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d3ce3aa-b47c-4888-99c5-1946416d2c80", "sighting_of_ref": "indicator--115fd0ca-dc6c-4674-baa6-b9776b828d63", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb46164-f02f-4d7f-ba9d-d94440bd3e07", "sighting_of_ref": "indicator--26912c8b-e240-4f16-85b3-dbb5968e7a50", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44bd9869-90d6-47ff-913c-1442e483140a", "sighting_of_ref": "indicator--4c80d941-73fb-4a48-a1b3-eee4c8f5d518", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58cf1d8-11c9-4c07-ad7c-d387479f31ff", "sighting_of_ref": "indicator--181047b1-7851-4e54-ab4c-e6293e09fa03", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3280bd46-5983-4d7c-8cd8-ca327b36291c", "sighting_of_ref": "indicator--22c44e17-cd67-43f7-8229-4a9db42b2c61", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0b7fd4-fd5c-418d-8222-90ebc6ec839e", "sighting_of_ref": "indicator--5b1e0887-80a9-47f4-9198-4f8804f3d037", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec2c295-b043-4fb6-9b0d-553e1b99b0ab", "sighting_of_ref": "indicator--4c80035f-5e12-425f-8b04-fb7b59d4c8ba", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175ff7fa-7c61-440b-bfe7-ac3a578d652a", "sighting_of_ref": "indicator--a1edf4e3-408f-4161-90b2-b9347fdbd96d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b64f93a-8d5a-43d8-aaf6-b2b2ab80cc88", "sighting_of_ref": "indicator--24149242-8176-49d6-8244-0ff70e019ddd", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a2a40c3-4993-4a29-8b56-b0e41ff87e6f", "sighting_of_ref": "indicator--6de56f5b-dbb3-4b07-9bd1-c2493756e9d6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7fa5e6a-9278-4513-8cba-b05326be50fa", "sighting_of_ref": "indicator--381caff8-1409-46df-9085-2b8b63259161", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db1ab94-eac6-4397-ab8e-aaa5269ae6d5", "sighting_of_ref": "indicator--ec23c9c3-43a3-45f5-a3fb-c10b59a75a95", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3898e8a-6d6a-41e7-92db-c0e9ca60b841", "sighting_of_ref": "indicator--d28d7f4a-e695-43ef-bb1e-0412c04bf16e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45fa783d-206c-4228-b94a-5dbec617603c", "sighting_of_ref": "indicator--6e13b183-0bc2-4f7e-b927-c130f8f65153", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2acc2a3-9764-4459-b1a5-c53b28fed75d", "sighting_of_ref": "indicator--0ab7af2c-4f8a-4138-b153-1e656cf09a75", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--362f3d94-f4a6-4a50-ba76-1e7c048104e2", "sighting_of_ref": "indicator--8091db2d-c70c-4bcf-9d42-247bbc61ef63", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5923775-6056-4c58-bb46-ddfac6b27e54", "sighting_of_ref": "indicator--716dfb37-3a3f-49d5-86fc-2383959ee1ac", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62389b2f-e38d-4674-81a3-8bb6a2fe968d", "sighting_of_ref": "indicator--dcb13ee7-73fe-44a8-99bc-0d2592783a71", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1181d7d5-a328-432a-80d8-a5ff416d2b86", "sighting_of_ref": "indicator--f1956627-8ebc-4fa3-ac8d-d7a55b38e868", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87daa199-9d82-4236-99c4-f161f43d4adf", "sighting_of_ref": "indicator--dd076ebb-9553-47ae-9acf-93c1af0758b5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb46dca3-bafa-4143-9c0e-2d9ec0454b85", "sighting_of_ref": "indicator--54fe8916-bda0-465a-a9ca-87eda04bc9fb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dea546f-bf28-4896-a935-a356121e3309", "sighting_of_ref": "indicator--54fe8916-bda0-465a-a9ca-87eda04bc9fb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814ab035-c30c-4f66-bdfb-cac5c4e6c22e", "sighting_of_ref": "indicator--c146e3e4-a60b-4d87-b78a-4376c4bd1f86", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37125211-cd60-4e5f-9350-44a7bb620069", "sighting_of_ref": "indicator--d107fee1-bceb-4228-910a-358b8e80c880", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63c7a9a-8314-4326-b7c7-aa11a3e733e7", "sighting_of_ref": "indicator--f2f1f7b3-c4b5-4c63-9112-f84823bd1605", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd9ec3e4-f8cd-42b5-a4f2-eca45afbee16", "sighting_of_ref": "indicator--37394b67-da56-4173-ab39-83c915d5649f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0a0c2d1-9bae-459c-b6a6-ea02891b6624", "sighting_of_ref": "indicator--ab1aa2f7-9d18-41e7-92d7-034c7b148549", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8007fe13-e490-44ce-b4f9-801a0ddbd6dc", "sighting_of_ref": "indicator--ab1aa2f7-9d18-41e7-92d7-034c7b148549", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31b529f-e1f4-4951-8575-a485d4ec1668", "sighting_of_ref": "indicator--a8a43fe0-af7b-404f-940c-a265e8b9d922", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d38fab-84ef-4a2e-9ea4-551b3d4d9156", "sighting_of_ref": "indicator--524f1ad8-7134-46f0-9bb9-b10bc5f4b0d9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c1cb31-904f-4d85-a116-798b46501192", "sighting_of_ref": "indicator--8c7d8f6f-5840-4e8c-a90c-88940bc3e3b2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--104a05cd-07cd-4682-9cce-6fd02267a485", "sighting_of_ref": "indicator--587c7bf2-65cb-4bc2-95e2-c468195a2e2f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89964dc8-c6d4-4e5a-a757-8faff5ca1ff2", "sighting_of_ref": "indicator--587c7bf2-65cb-4bc2-95e2-c468195a2e2f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5145e466-c234-4a10-9393-3df9808442cf", "sighting_of_ref": "indicator--8ce2f03f-a355-45c2-9a2a-6689d7cfaa01", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7133d350-de64-4053-9df6-a52053f2f630", "sighting_of_ref": "indicator--8ce2f03f-a355-45c2-9a2a-6689d7cfaa01", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8df71e-376d-40af-ae89-2a3adae62d29", "sighting_of_ref": "indicator--8ce2f03f-a355-45c2-9a2a-6689d7cfaa01", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87cca7c4-b0b5-40e2-89b7-da87242f2127", "sighting_of_ref": "indicator--575233ee-9e7e-4dfa-8229-e2ca4480da37", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6ca11c-2030-47d4-9a55-aa65c7f5df91", "sighting_of_ref": "indicator--14360f4a-fafb-4244-bcb3-3435672c523f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7ed6b3-ca74-47e9-9cf8-469b1cf0ce68", "sighting_of_ref": "indicator--6367e290-2f4e-4358-ad5d-5424fcbc650f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c01f8248-fa34-4211-84e2-4d6b336bbaa9", "sighting_of_ref": "indicator--6367e290-2f4e-4358-ad5d-5424fcbc650f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa83c99-80de-411b-b0c3-c18c585f315e", "sighting_of_ref": "indicator--0b48acd2-c368-424d-889b-cc745d241e75", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--443c6c76-e2fa-43a0-8d99-074dd3391732", "sighting_of_ref": "indicator--c2c666aa-fa57-40d8-8d2d-cd1eb25a3b2a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c38fb5b2-0814-4496-851b-7e2c3228e9de", "sighting_of_ref": "indicator--fb07754a-7f26-4676-a9d9-04277d9216ba", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a2d8264-e708-4cc1-9da5-1d91ce67baa1", "sighting_of_ref": "indicator--fb07754a-7f26-4676-a9d9-04277d9216ba", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0ccc08-d9fa-4739-8eca-f526e16a8820", "sighting_of_ref": "indicator--a5fb66b7-e87e-450b-b860-263ffaada4d3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156efde0-638f-4118-8cad-df417fb6d10d", "sighting_of_ref": "indicator--f189a113-82ad-44be-8369-6e1d45de0b43", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccaca362-e829-427a-b11d-b1fe907c0d13", "sighting_of_ref": "indicator--e5ba7ab8-3f98-406d-abe5-e2519b00b2a5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ede657-c200-4b77-9aee-145749eeb721", "sighting_of_ref": "indicator--e5ba7ab8-3f98-406d-abe5-e2519b00b2a5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c96982-7f7c-4dd3-b59c-f4d1bb304913", "sighting_of_ref": "indicator--a21bddc7-7333-45f5-b977-c8a223dbfbb9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f375618e-1a14-4f79-ae8e-a051ef8c6427", "sighting_of_ref": "indicator--7e2144b2-f8c8-4dd2-9acf-b3872cc9b25a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4821b115-f12a-4132-8874-d4047312ece0", "sighting_of_ref": "indicator--7e2144b2-f8c8-4dd2-9acf-b3872cc9b25a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a02aca5-bceb-448e-b434-b060ca0828f5", "sighting_of_ref": "indicator--50d2dbf3-372b-4759-9851-a9f1d3796293", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dce150d-d61c-40e6-bbdd-0240e1f2648e", "sighting_of_ref": "indicator--50d2dbf3-372b-4759-9851-a9f1d3796293", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f950279-ee9e-49b2-a328-ae859965a331", "sighting_of_ref": "indicator--4932a87f-1c99-42b7-b94a-511fcfbe7c73", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5e037d-5b9c-424e-b1b4-4334413e4ab7", "sighting_of_ref": "indicator--e5cc7593-ac53-42ab-9173-f7a1772b849d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c84c25e-aa38-4e8d-8ff0-11a6e59d83d5", "sighting_of_ref": "indicator--c4132727-20f0-4caf-b294-c4ffb636ab77", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2ba98c-52b7-4345-aa59-fbb3f6a2cb8a", "sighting_of_ref": "indicator--c4132727-20f0-4caf-b294-c4ffb636ab77", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00155b7-8470-42fb-814a-a440fd32cceb", "sighting_of_ref": "indicator--5d6fc32f-a6f4-46bb-8c8c-3ec6dc13313c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1fb505a-e08b-4c12-a9ad-41fe0362445d", "sighting_of_ref": "indicator--5d6fc32f-a6f4-46bb-8c8c-3ec6dc13313c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f9e86d-fbc6-468d-8275-3e0b1f2120c2", "sighting_of_ref": "indicator--7882c06c-1e4d-4895-9440-246b38d60f48", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1f0870-0be4-4813-9f1d-80619546fb65", "sighting_of_ref": "indicator--7882c06c-1e4d-4895-9440-246b38d60f48", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca5b516-0c98-4a7d-8598-eddc8ce836d5", "sighting_of_ref": "indicator--9c63049d-b08c-44f7-be49-0044975e277d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f838110d-206d-4d18-b1d2-54b93c6e527e", "sighting_of_ref": "indicator--9c63049d-b08c-44f7-be49-0044975e277d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a26a73-0c91-4fe4-b7e4-7419bde6f2dd", "sighting_of_ref": "indicator--d29e5725-c9a7-4887-8538-b73c4ff3c6c6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa675a5f-bf4a-4c86-b62c-066d87f3b16e", "sighting_of_ref": "indicator--25301559-4fdd-424b-a5a1-4b392bdbf13e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a17272e-4eda-4bc2-b2df-40e9e09ec97c", "sighting_of_ref": "indicator--9458e35d-07b2-4170-9a70-23b4c46fe3ec", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a33996-3163-47df-94e0-5b6390901ce6", "sighting_of_ref": "indicator--742d6b10-a14a-4a26-8935-fd2c030d38f7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90649a10-15d0-4ebe-81ce-c5cb8cd8a22a", "sighting_of_ref": "indicator--742d6b10-a14a-4a26-8935-fd2c030d38f7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6232c0ed-5a14-4271-a272-9364b97d498a", "sighting_of_ref": "indicator--c7bc7209-6fae-426d-9f98-9bb7592912dd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f4a2d3-7f11-44a1-8ace-509f67c54c11", "sighting_of_ref": "indicator--c7bc7209-6fae-426d-9f98-9bb7592912dd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19e4962-3e65-4060-9fbb-ebf2f9714410", "sighting_of_ref": "indicator--811d27b5-b302-47e0-a56e-eeb47e279b42", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e8faf3f-3438-43e9-9946-98726a03913f", "sighting_of_ref": "indicator--38423841-60ea-45e9-8d0a-d25fba314296", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae5cfcd-0eb4-49ba-9e59-0e5dd014b968", "sighting_of_ref": "indicator--16dbf928-8109-44e0-8e80-c81a3cccfabe", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90d40e1-2b8a-428b-bfee-a7630dd6959d", "sighting_of_ref": "indicator--16dbf928-8109-44e0-8e80-c81a3cccfabe", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f249e3f-4658-45c0-8f7b-3164fcb0badc", "sighting_of_ref": "indicator--85ae16a0-59a8-4ac2-926d-4c1a9bcf3259", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a00623-dd5b-4915-b869-a9816718c99b", "sighting_of_ref": "indicator--4159fbeb-fe5e-4bde-a229-bbe8d4419f13", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--342c2df0-1778-490c-8c99-b21aaa80f67d", "sighting_of_ref": "indicator--4159fbeb-fe5e-4bde-a229-bbe8d4419f13", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed2a7ae-e64d-43b3-9536-d1b5edcab08e", "sighting_of_ref": "indicator--9fd5d280-4402-4d6f-b606-b4317dffa5bc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d134ef39-1a87-43db-aadd-a05bb9e974c7", "sighting_of_ref": "indicator--9fd5d280-4402-4d6f-b606-b4317dffa5bc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8950c702-4715-4f09-aaf2-1c4820d8c0c8", "sighting_of_ref": "indicator--eec19a43-f025-4231-aa76-436158910725", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e737c3c4-479b-44f9-a67f-8468ff2c6cc8", "sighting_of_ref": "indicator--eec19a43-f025-4231-aa76-436158910725", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01047ca-6214-4635-a633-6da7e3ddb1dc", "sighting_of_ref": "indicator--246be7bf-ac5d-439d-bb63-6387e0797eee", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b70ab68b-dbb1-422e-b0bf-a8fda7fdd523", "sighting_of_ref": "indicator--2f93052f-9972-4a64-914f-6ac035ab6e09", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c993252-64f6-4c0c-b1b7-4e06775fe0f4", "sighting_of_ref": "indicator--2f93052f-9972-4a64-914f-6ac035ab6e09", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9864a356-2b21-4093-9fdc-fae252ccb0b5", "sighting_of_ref": "indicator--1d0e0e05-3c04-4f8c-b46e-15b673987e26", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce5c913-f7ed-4dba-a74d-ee9835ed0c02", "sighting_of_ref": "indicator--1d0e0e05-3c04-4f8c-b46e-15b673987e26", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--330b3b88-77bb-47b4-af8b-8b77f17db062", "sighting_of_ref": "indicator--1d0e0e05-3c04-4f8c-b46e-15b673987e26", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fdb6e6a-ae9b-49bb-bc76-5e406c354299", "sighting_of_ref": "indicator--218a9728-b596-4e3c-9b70-1e5546a89327", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f1307c-db09-4d20-aaf5-339257f5f25a", "sighting_of_ref": "indicator--6cdb169e-3959-474f-aab6-84111ed2131f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44aeaca3-d82c-46ad-882c-38c0eeafe86f", "sighting_of_ref": "indicator--6cdb169e-3959-474f-aab6-84111ed2131f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bad0506-3392-43aa-8249-d9aa58704d37", "sighting_of_ref": "indicator--6ce347c2-ce7c-4e36-a6b3-46f819516fd5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf3580d-b412-4440-9af3-e1cafd889228", "sighting_of_ref": "indicator--322ea85e-73c1-4ec8-a3cc-58d2aafe7686", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06edfda5-e268-4862-83e6-b51980fce58b", "sighting_of_ref": "indicator--2d858303-7deb-49e2-8a19-f5d8a95119fe", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc373226-1309-44b6-b7e2-936cdd4638a3", "sighting_of_ref": "indicator--3d489c0d-b8a1-4359-a8ca-4f72d2d8d40a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ed5447-d598-4496-9c1b-e9f8fd7a240e", "sighting_of_ref": "indicator--40adcf78-3539-43b5-9c99-cdeaa7cc03eb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d6ee6f2-2913-412f-a531-f3a18bffe41d", "sighting_of_ref": "indicator--d8e897fb-eacf-47ae-b148-4a6ecd0cd3c9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d73ca9d-bb6f-46f1-ba9b-395093a1fc42", "sighting_of_ref": "indicator--f730f5b7-a6f8-4b2a-9dba-7f23a575a5f5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86262941-a17c-46dd-8c3b-2c0bb4235eb8", "sighting_of_ref": "indicator--c81710ac-ad12-47be-8f9b-b4b62b9c4028", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2de0dc27-b57c-4242-9ef0-127ce4715275", "sighting_of_ref": "indicator--b8a8308d-a27c-4cd4-ae79-d4ac7d7c4ec7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f388c763-8824-40bc-9124-e4e7294a562b", "sighting_of_ref": "indicator--0c191e87-26f6-40e6-ab9f-4c5d8bf4eed4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--786f9321-5402-453e-bf88-8a4499bad331", "sighting_of_ref": "indicator--442c966a-0a50-4546-b2c8-216ebf1e9959", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--119ccec0-695a-42f8-a2a3-d131d554caf2", "sighting_of_ref": "indicator--442c966a-0a50-4546-b2c8-216ebf1e9959", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08012e8c-5384-4e3f-a7f8-05e3c8fb895d", "sighting_of_ref": "indicator--aeb149dc-146d-4d67-b8bc-09d1b2de1d70", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76947980-e3f1-4b19-a501-fbd73f8bee45", "sighting_of_ref": "indicator--aeb149dc-146d-4d67-b8bc-09d1b2de1d70", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a51213-78dd-4ab2-a1fd-bbc2f0f15bd6", "sighting_of_ref": "indicator--c6fbf1f1-494c-498d-9043-b0a806d842c5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba04b24-1f6b-4c5b-b6f0-09f662ce074f", "sighting_of_ref": "indicator--c6fbf1f1-494c-498d-9043-b0a806d842c5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17492a97-16e8-43bd-a8c8-9a43e1bbfc64", "sighting_of_ref": "indicator--ece0a62b-6ce1-4729-9fd7-10d38e64423a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee96165f-6f55-4e55-8e0f-c5202a5662d4", "sighting_of_ref": "indicator--d637a170-3a2d-44e4-a8e9-aa85493b3b41", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026bd4e7-4ac6-4bb8-99fa-716065c85a18", "sighting_of_ref": "indicator--d637a170-3a2d-44e4-a8e9-aa85493b3b41", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b832426d-df78-4a19-bf62-2a68c10e2868", "sighting_of_ref": "indicator--8e00f33a-577b-477c-b0ac-39f75b11d33b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da344a8-cf87-434f-8b30-f1eba3d67726", "sighting_of_ref": "indicator--15c0876a-6296-49cd-9b9f-e463098968ca", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e87e1ce-b22d-41a9-b889-c4ccd568622e", "sighting_of_ref": "indicator--0f04ffa7-e021-454f-9f5c-ca4d4be57f06", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0260d07d-27bb-4bdc-a65c-bd124501bb76", "sighting_of_ref": "indicator--0f04ffa7-e021-454f-9f5c-ca4d4be57f06", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eed6a2a-421b-4ea8-a219-235fa66bf1c6", "sighting_of_ref": "indicator--b20a5774-21b3-4c23-bb13-b729698077a2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d36c91-dcac-4069-b385-34b96d6af4ca", "sighting_of_ref": "indicator--b20a5774-21b3-4c23-bb13-b729698077a2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85108bc-648c-4401-a29d-c47aedd458b4", "sighting_of_ref": "indicator--b20a5774-21b3-4c23-bb13-b729698077a2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ebb30ab-7bea-4c02-9d0c-08119b4589ff", "sighting_of_ref": "indicator--16561f3d-6713-454f-930d-6e8b84f9ccdd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08fdcaee-e168-4154-84b0-6f426bbeaf8f", "sighting_of_ref": "indicator--29b2377d-3811-483f-953b-aa7fbdc87bd3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e4f0f2-14bd-4841-9a0a-4fb7c46b4e7d", "sighting_of_ref": "indicator--72bc984a-b3eb-480a-b0d6-4de29d2d43ae", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da094733-31ed-4594-bd61-117646d1496a", "sighting_of_ref": "indicator--28926501-44fa-4b9e-be16-baf020cf398b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080dd995-c309-41d0-8011-bd9cd7664f25", "sighting_of_ref": "indicator--3c87a1b4-7051-4370-aaf0-6bd7fec9a127", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f74a852-3cb1-453c-a731-f7f708645f20", "sighting_of_ref": "indicator--3c87a1b4-7051-4370-aaf0-6bd7fec9a127", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3cf68b-0f1f-4db1-8b8c-5d88c877c393", "sighting_of_ref": "indicator--7502c124-dcb0-446b-967f-cafc93766e53", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--371d9b2f-c259-461e-9110-efbec38fc4d3", "sighting_of_ref": "indicator--7502c124-dcb0-446b-967f-cafc93766e53", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6966e37d-f1fd-4082-ab36-c5f930e582c2", "sighting_of_ref": "indicator--dae0d6ad-698a-4707-a477-5961b22e1701", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ed3e7f-2735-4f1b-95e3-17c54d617180", "sighting_of_ref": "indicator--dae0d6ad-698a-4707-a477-5961b22e1701", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6433f5b-ceb3-424c-aba4-3cf51e7a9df5", "sighting_of_ref": "indicator--3e6ae7da-8b2d-4fb4-b316-91dfb9293a40", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f6f0e2-1f22-4ced-b628-c0c89af74a90", "sighting_of_ref": "indicator--4db0eba5-d978-419b-88e0-d32435e34fed", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71723e41-cbf0-4732-bab0-7f9d5d2d23dd", "sighting_of_ref": "indicator--4db0eba5-d978-419b-88e0-d32435e34fed", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f1503a7-2847-41de-b311-877a6fd6fb3c", "sighting_of_ref": "indicator--4db0eba5-d978-419b-88e0-d32435e34fed", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30343eb-0072-437b-8fd9-28e97ce89850", "sighting_of_ref": "indicator--338e41ac-3a27-4daf-b694-56f5d5fc375a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17da63d-b76e-4abf-aa34-d16db01fcce9", "sighting_of_ref": "indicator--96437b6e-3e37-4da4-a53c-5eed5ae258a1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9e3263-280e-420d-a01f-2b037e935968", "sighting_of_ref": "indicator--96437b6e-3e37-4da4-a53c-5eed5ae258a1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbfc19a4-83e4-4ea6-b5da-b51d199ecbbb", "sighting_of_ref": "indicator--96437b6e-3e37-4da4-a53c-5eed5ae258a1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43628c7-7a75-4bce-b83b-0da77f7b4bd9", "sighting_of_ref": "indicator--d761f5a1-2512-4024-b86f-9b8bbc53b66a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c4509b-732d-4594-a9e6-11979a215e7c", "sighting_of_ref": "indicator--d761f5a1-2512-4024-b86f-9b8bbc53b66a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d7c3d0-e215-48a5-92ab-55c55e41a1ec", "sighting_of_ref": "indicator--5377e8b9-2764-4ee9-8b35-7fc9844f504f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1e49b0-178c-4882-8774-64e0c17cec39", "sighting_of_ref": "indicator--5377e8b9-2764-4ee9-8b35-7fc9844f504f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68eab004-871b-462e-bf0c-6fd6ae85c10e", "sighting_of_ref": "indicator--da14fd49-d9cd-4aaf-be45-476c6744b69c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab28f671-b7a5-47d5-b303-fe4cc724ca70", "sighting_of_ref": "indicator--5a450f41-e15e-4928-843e-8ddc4910b76d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef026a66-62c5-49b6-9683-529efaf36a52", "sighting_of_ref": "indicator--5a450f41-e15e-4928-843e-8ddc4910b76d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9870f183-184c-4e68-91e8-5f0fb75f748e", "sighting_of_ref": "indicator--5a450f41-e15e-4928-843e-8ddc4910b76d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa612fbe-4ea0-4541-b3de-3d3f649cfbf0", "sighting_of_ref": "indicator--21fbc0ed-9a5b-4c24-8bb8-8842e5843c63", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c60af0a-32b6-46b5-9367-46a5f09adb5e", "sighting_of_ref": "indicator--cb83704b-1952-4d79-9a4a-d7837c33fe37", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--decf7ade-4a14-4fb6-9031-46ebc307772b", "sighting_of_ref": "indicator--cb83704b-1952-4d79-9a4a-d7837c33fe37", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7f745b-49b9-4368-8b69-728eac4d917c", "sighting_of_ref": "indicator--cb83704b-1952-4d79-9a4a-d7837c33fe37", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b5d860e-5900-4ba4-8434-172a91799ee5", "sighting_of_ref": "indicator--28868bbb-0613-4554-83b4-faaff81c2b40", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d43fab65-2b01-401d-b9d6-d82b43e49444", "sighting_of_ref": "indicator--28868bbb-0613-4554-83b4-faaff81c2b40", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204e53f8-539a-46b3-b357-632cea4c379e", "sighting_of_ref": "indicator--fe2867a2-5dfb-495a-b9b5-269bed254e7f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70891202-33d3-4f20-baea-710a1c464727", "sighting_of_ref": "indicator--dd34ebf8-bf32-4d1c-962c-edad6d8ad761", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcbe1dd9-5b7a-4e88-9315-e6b4ec093226", "sighting_of_ref": "indicator--dd34ebf8-bf32-4d1c-962c-edad6d8ad761", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--115b7599-4f9a-49f7-9751-2cb1db6b4c8d", "sighting_of_ref": "indicator--dd34ebf8-bf32-4d1c-962c-edad6d8ad761", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c2bdb5-c8f5-4736-ad54-b3bb1c7528be", "sighting_of_ref": "indicator--57380a0e-55c2-4812-8876-e8492118558a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d975161-7071-48c8-a341-795c10200d48", "sighting_of_ref": "indicator--57380a0e-55c2-4812-8876-e8492118558a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3252c00-b0e3-4e37-9619-367e22006709", "sighting_of_ref": "indicator--57380a0e-55c2-4812-8876-e8492118558a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b54ca2b-a800-4a4f-9b80-73c4504dc833", "sighting_of_ref": "indicator--2126f6ee-46a6-4c54-b7e6-50ca117d2e51", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bec5d91-4d6c-4e21-a2bb-228aac3658de", "sighting_of_ref": "indicator--2126f6ee-46a6-4c54-b7e6-50ca117d2e51", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca5afb5-079b-4fd3-8477-5e4a8b7f364f", "sighting_of_ref": "indicator--26b07076-6abb-4a8a-8022-974e52ca8d10", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8db7ed-d52c-4125-abd3-4def5b25040f", "sighting_of_ref": "indicator--26b07076-6abb-4a8a-8022-974e52ca8d10", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0806f97e-ee7b-47b1-84e4-79f681c46776", "sighting_of_ref": "indicator--210e43fb-9ef1-45a0-8445-f14a955ca19c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--988deb49-b386-464a-b13f-e3c45291515f", "sighting_of_ref": "indicator--210e43fb-9ef1-45a0-8445-f14a955ca19c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a5f8d8-2bb5-4094-9727-bbc0ed8a19a4", "sighting_of_ref": "indicator--b1654979-dadb-4230-a076-598c7fac8474", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a6c4cc-ff86-4e6e-833c-74b6968e72e0", "sighting_of_ref": "indicator--00f8bace-a8e8-4b3a-ba89-e7fd9d565cdd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c2ec4bc-4067-45b9-ad19-e1451c29db2f", "sighting_of_ref": "indicator--0ff296a8-4de8-4e24-a866-5fca4a8a778d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9592aa2e-53b3-4a0b-adad-52d79cf5c5eb", "sighting_of_ref": "indicator--7b30f0d4-72a5-4edf-8db7-e4da81ed300b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8549239e-8f93-415b-b9d5-bb0fb929cdca", "sighting_of_ref": "indicator--4cefd796-153c-495b-95ac-e1e50b1f996b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--939b0bba-376b-49d4-b8f6-df1ab2e83b9a", "sighting_of_ref": "indicator--23add353-3cb8-4bbc-be10-27a2f1ab7e79", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37e7da8-e4d8-4c93-9710-29b4b486f618", "sighting_of_ref": "indicator--d365610e-9e73-4863-b314-d1002b8a1ddb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f868b16-f414-43ce-bd8d-6beb9116a440", "sighting_of_ref": "indicator--d365610e-9e73-4863-b314-d1002b8a1ddb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f568779-1ede-400b-9b03-d3b6a6b085db", "sighting_of_ref": "indicator--02d7eb2e-8e3b-4c3b-ae69-061a4718d528", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7d40ab-1cda-481f-92ba-1cd2d50fd7c9", "sighting_of_ref": "indicator--57cfbc0b-4544-42e1-8aee-f6b894242ce9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822c8721-66c6-4058-9858-d4cfd53e8264", "sighting_of_ref": "indicator--2d846cdc-b6bf-4e8b-9e4e-b4df953ebc0b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2860452-2a66-4cd8-8ea9-0f379a65c5e9", "sighting_of_ref": "indicator--2d846cdc-b6bf-4e8b-9e4e-b4df953ebc0b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33b28e6-f45c-4f25-a654-9a32e920e929", "sighting_of_ref": "indicator--2d4cf471-4c71-49f7-9b1c-bbd9f8009eaf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe3336b-2763-4938-a119-d45f29851b1e", "sighting_of_ref": "indicator--2d4cf471-4c71-49f7-9b1c-bbd9f8009eaf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd0f211-521e-4aba-ae64-41e89ad0e062", "sighting_of_ref": "indicator--d6e65d9b-7553-4e9b-b199-a082236d941a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8eb6b3b-6064-4aba-84c8-ecdb4fd17678", "sighting_of_ref": "indicator--8f10cacf-776b-4ec2-b33e-afb164cfba56", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4c93b2-feac-4a01-9aca-89e67c8b89fe", "sighting_of_ref": "indicator--8f10cacf-776b-4ec2-b33e-afb164cfba56", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8dec4bf-ffeb-4d35-af41-5fb35a085666", "sighting_of_ref": "indicator--7a5a0b29-5975-4003-bdcc-34e951c53980", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e887cc9d-b088-4625-81e0-c9b02d4230f6", "sighting_of_ref": "indicator--7a5a0b29-5975-4003-bdcc-34e951c53980", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf7ff59-4118-40dd-9a2a-dba9b6336521", "sighting_of_ref": "indicator--7a5a0b29-5975-4003-bdcc-34e951c53980", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301a2270-f463-4934-9c80-1cd536ae8388", "sighting_of_ref": "indicator--9839914e-57e6-4168-98eb-ca12716eb2e4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f0eab1-2752-4eb8-9572-d0c7c3e8705e", "sighting_of_ref": "indicator--9c597669-9774-4323-933a-c82edd727679", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--030566a7-f994-4a38-ae07-21199f2791ad", "sighting_of_ref": "indicator--9c597669-9774-4323-933a-c82edd727679", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c60d328-0dd8-4745-b29d-f22cfbce4d2b", "sighting_of_ref": "indicator--1e1be7fa-aa04-4a45-9ae9-c4b713cc3a64", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3d6f66-125f-4951-b547-5a2de55b8bf0", "sighting_of_ref": "indicator--1e1be7fa-aa04-4a45-9ae9-c4b713cc3a64", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a0a6367-7a92-4178-a45a-d599c9fa4e4c", "sighting_of_ref": "indicator--1e1be7fa-aa04-4a45-9ae9-c4b713cc3a64", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e8dabab-e518-41bc-a1fa-6bd891f660a0", "sighting_of_ref": "indicator--1773a529-5f3b-469f-b9f7-8a337e161f29", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b7a585-d15f-4358-b97a-fea3fa82e286", "sighting_of_ref": "indicator--26c4ad41-39b7-4619-850f-db095ddd0446", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d291825-b3e2-4bec-a874-efbefc1a10f7", "sighting_of_ref": "indicator--26c4ad41-39b7-4619-850f-db095ddd0446", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f57614-4980-4b7a-8830-c4983776070c", "sighting_of_ref": "indicator--5d6964ff-fb3a-4ad6-b645-924e78cc29dd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d469b8-c856-4a75-8eb9-9d70375b81d9", "sighting_of_ref": "indicator--f31dec32-0b44-467c-9264-ac9da498f809", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e240195-fa68-49bd-b25a-648ccf4f46c7", "sighting_of_ref": "indicator--c083b44d-1f9d-47c7-a912-6d22159a721f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eccda5b-7572-48aa-b3d3-1da28ff2e320", "sighting_of_ref": "indicator--86e7c5c4-749d-4983-a4bc-32e888507ff5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d57f52-5e7e-4086-8f74-026a841f6a8b", "sighting_of_ref": "indicator--a72b1167-c710-4d6f-9e5b-008d6084d623", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e4c6884-e038-4aa3-aa87-1e341fc98427", "sighting_of_ref": "indicator--6e75292a-00d5-47d3-be4d-4d55fa322db2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--965bb4ad-48dc-442f-a789-169a85707e67", "sighting_of_ref": "indicator--6e75292a-00d5-47d3-be4d-4d55fa322db2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb4e9b15-8942-41d7-a230-714fdef20ed3", "sighting_of_ref": "indicator--700ac9c3-63fd-44ca-89e4-73c84703c2da", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98eca271-3902-4e0d-b009-e0504f0c0158", "sighting_of_ref": "indicator--593f62ed-e103-4b9f-9438-44f9e5afaa71", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3652ed-bf7a-4024-9835-a65946d2535b", "sighting_of_ref": "indicator--0b8babca-bf58-49cf-86fb-de9169087060", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3ba311-7d5c-4f8a-a76b-e6eefdc253a3", "sighting_of_ref": "indicator--9bc0f4be-9445-4088-b74b-f8a40597120b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3bf60d5-72c5-4561-9b8e-024741ca4edb", "sighting_of_ref": "indicator--9bc0f4be-9445-4088-b74b-f8a40597120b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae9b3d0d-0257-403d-8a30-00140d975bc2", "sighting_of_ref": "indicator--ef6f1cba-b014-4f60-a3f1-a3f59764201c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--754815e1-5a46-4c26-b6c2-c84afb75e42a", "sighting_of_ref": "indicator--d2a36c8c-1060-4150-84be-142ee72ec93e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa49de02-6690-454c-8a28-d53fde9840b6", "sighting_of_ref": "indicator--6550d4c9-ee82-4a9e-803b-7dc5579e43ad", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac684cd-1c84-4848-845b-8e95547922b3", "sighting_of_ref": "indicator--2666cd6b-c1bb-44ba-9a1f-297404658b7d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7521e3b-bbc5-4c28-a3d6-68d996568036", "sighting_of_ref": "indicator--8670e5fc-e4bd-4cad-a3ef-eb52855bcda9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d2cda5-6b30-4e70-97b2-eeaa5783786d", "sighting_of_ref": "indicator--38ef3fa1-1de9-4391-b33a-50d10afaaa31", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25584ad2-4bfe-4751-8e8c-bbf6ac5dc503", "sighting_of_ref": "indicator--38ef3fa1-1de9-4391-b33a-50d10afaaa31", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524a8f73-b449-4f3e-9d57-1b0696fa2325", "sighting_of_ref": "indicator--f2c52120-5eac-4024-baf3-34fe9e541d68", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c896ee-cccb-41c8-a9ca-21ddd34c21b4", "sighting_of_ref": "indicator--e0c05aa0-06e4-4a4f-b238-af536695d8ad", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97abb4ce-fbba-406d-97e2-af35403de117", "sighting_of_ref": "indicator--f54df4eb-6f86-4459-8ff2-f2bd0758681d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2637ae6b-7dde-4c5a-b18b-47d3f0243509", "sighting_of_ref": "indicator--5bb9f65a-21d0-499f-ad33-fdfde756c3fc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970fbfad-fe4c-41d5-84f5-4cc497eaf069", "sighting_of_ref": "indicator--3076f289-4351-4411-8f22-758c05ce6d79", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2267dd4c-f4d1-4cdc-84cd-2a6f7d3e5162", "sighting_of_ref": "indicator--5745b252-1038-4124-a53f-f5f3f1be7674", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99383b2c-8afc-4aa1-9bd1-77bf424eae95", "sighting_of_ref": "indicator--5745b252-1038-4124-a53f-f5f3f1be7674", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b12887-7bc9-45cf-a9f3-7dd3bb78d6ef", "sighting_of_ref": "indicator--58c664cd-6aba-485c-bc2f-91ca204b8a8e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61976382-88ee-40d4-93a4-90df8b3b0064", "sighting_of_ref": "indicator--6d3650ce-fdfd-4792-ae24-caf4692319ba", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5c1f4c-70cf-47f5-b56f-c9c9b2e81ca3", "sighting_of_ref": "indicator--6d3650ce-fdfd-4792-ae24-caf4692319ba", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--552c7d6f-62ae-460a-9a32-ef6f53317586", "sighting_of_ref": "indicator--0d21b56a-ee9a-4ec7-aaea-a43561d8ab12", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4905d99-118c-4ac1-976f-08ccc297f33c", "sighting_of_ref": "indicator--6c9489af-6444-486b-94f5-5984914e0d19", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73918814-2be1-4229-b752-ff2750bf6278", "sighting_of_ref": "indicator--d2ffa3ef-16d6-4368-bd32-db1a4a7b8286", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--833729d5-174e-4c7e-bef4-36dae0f2a385", "sighting_of_ref": "indicator--8837da47-b9e8-40de-8ccb-c7ed051870b0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc6cae3-291a-4f0e-a20e-5055b04fb767", "sighting_of_ref": "indicator--592f8fbc-83fa-4a99-bad6-cb4739e49a70", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8ebabd-e404-4951-b372-671ba0ad9a65", "sighting_of_ref": "indicator--8fabb7d9-5fe1-438a-8845-2963673cc9e7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18d0cda-23c4-4cfc-87bd-7e87f880a5f9", "sighting_of_ref": "indicator--8fabb7d9-5fe1-438a-8845-2963673cc9e7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ffb1b72-bc89-4549-9579-fcbaf8aa0b39", "sighting_of_ref": "indicator--99af5f64-97a8-42cd-9ed5-a8e4de468a9c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf1505c-c390-4292-b044-331c5fe73d38", "sighting_of_ref": "indicator--e1c3ccce-bcb2-41c1-88e5-268ecc815772", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4889ef0-ba66-41c9-97c0-54de6e58fbeb", "sighting_of_ref": "indicator--b067d5c7-fff0-480e-b841-35b660a867df", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5083257b-073f-4df8-9a85-ae435c81e5c7", "sighting_of_ref": "indicator--8653baff-f397-4b3b-9c8a-786c9419f8ec", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e02df75-4270-4a8a-a458-0c34aa3cf1b9", "sighting_of_ref": "indicator--5aa1c665-9334-417c-8345-c82611508321", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a8a26f-39ed-41e2-950e-96a35227ffdd", "sighting_of_ref": "indicator--5aa1c665-9334-417c-8345-c82611508321", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a70810-9c71-4bc7-ae79-872a375d6e2f", "sighting_of_ref": "indicator--924d391d-2f99-45cd-9d70-76287cce38dc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e2a616-402c-427b-ad0e-e92433768315", "sighting_of_ref": "indicator--924d391d-2f99-45cd-9d70-76287cce38dc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d0aced-57c8-43a1-b53d-ffd516ac1a7b", "sighting_of_ref": "indicator--924d391d-2f99-45cd-9d70-76287cce38dc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd92f964-9fbd-4026-8c98-44251127a157", "sighting_of_ref": "indicator--3de0c4ee-56ec-4e3a-98f1-81e2137a5136", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4d436f-1605-4a7c-8cc0-151ac37eaa99", "sighting_of_ref": "indicator--73317aaa-c3e8-47cd-a2da-b67938f5c502", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f521c7-ccd7-45f1-b745-82917cf60da0", "sighting_of_ref": "indicator--04f59c08-6f9f-475c-ba7f-e1222c5de5fa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e0d2a2c-bb10-41cd-a60b-6770448aed48", "sighting_of_ref": "indicator--f0da2dba-f554-44fb-bbb9-16d621d74732", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b5398d-ac5f-4182-9984-bab5fa1fdbb7", "sighting_of_ref": "indicator--46125f80-603d-4c37-8ba7-ba4fdbe87fe8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f985505f-be23-4ffe-b0dc-18250e85082a", "sighting_of_ref": "indicator--14453550-6ecc-4c1c-92dd-764edddf577a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6dff22-58ce-4eee-a342-3d2b06a3fc09", "sighting_of_ref": "indicator--b1beab7b-516e-42b5-8218-040391d689d2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ac2d39-9bc5-4fb7-bc08-a4e5e6cd6780", "sighting_of_ref": "indicator--b1beab7b-516e-42b5-8218-040391d689d2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524ec459-b7f7-43dd-b434-7bcc8b0dd708", "sighting_of_ref": "indicator--4771e624-655b-4ac1-8153-ee1668ebfaec", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77fc2bab-79d6-4052-b424-a941b304b829", "sighting_of_ref": "indicator--25eb8302-cd3f-4969-91e8-1fe84f9618f6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10656b1a-7761-4f56-ac7f-586519a586f6", "sighting_of_ref": "indicator--3bfa6d31-e02c-44a9-af40-eb2297d7ab61", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--292cf0a3-fce6-4302-8be3-11696ae09029", "sighting_of_ref": "indicator--50621328-40ff-4df4-9725-0362d1388961", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--773e5119-9345-4b50-9018-bd1d88427d45", "sighting_of_ref": "indicator--50621328-40ff-4df4-9725-0362d1388961", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0ca760-066a-4cfe-b0de-3b3268593fca", "sighting_of_ref": "indicator--bb4577f3-1b86-4c32-8a4a-5fdcd474dd9d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7d4d1e-e1f8-4468-81cb-1b0d0b00dfc9", "sighting_of_ref": "indicator--1ff0914c-93b3-4795-83e1-5b0f71f66600", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--453d57b3-a2f9-4db5-b96a-ccaeb70de660", "sighting_of_ref": "indicator--dde2541f-14ed-4d5c-871f-f9b221f1038e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e49e2c-d928-42e4-b6fb-a7c1fbead3d4", "sighting_of_ref": "indicator--dde2541f-14ed-4d5c-871f-f9b221f1038e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c416fbaf-830e-4a1a-9254-7a50e137483a", "sighting_of_ref": "indicator--a5a7c0b5-7aff-4ce1-96a9-d3b6252bd654", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa73e5e7-e9e2-444f-bf41-9797c66c0c36", "sighting_of_ref": "indicator--cf8c6763-4c00-4345-a5ef-89ffbef353b0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f687286-e8a8-46ff-b571-9210f17724dc", "sighting_of_ref": "indicator--b62ea7f2-0efb-491b-b76d-57466151a17e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f72414-c8ff-4414-94c2-87df1f4dd189", "sighting_of_ref": "indicator--61e12f5b-b0e6-4770-820c-256bb612d9a4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb64a35-245f-44da-a933-9be72777e328", "sighting_of_ref": "indicator--f63ae3fa-2ee5-47d1-bc8f-edb769e9bf67", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afdb4e94-1387-4374-8f7d-08f4d6720ef7", "sighting_of_ref": "indicator--67bdc59b-6650-436a-a0d7-b58f7fea9906", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c686a1-c250-41da-b0fe-97fc64b9f0ce", "sighting_of_ref": "indicator--d18daf09-c253-4b48-b0cd-ccbae71e9bf9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d9ffd1-1a9c-4138-bf02-994e03d17f48", "sighting_of_ref": "indicator--70f9e2df-4ba3-4f19-be64-213c08301c3d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9743b9-a668-480e-9d38-9165807b9b79", "sighting_of_ref": "indicator--bfca90cc-c9e3-41cd-9941-d51d6aa81851", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a973dd4-ec13-42e7-a0d7-5c41ae6e222f", "sighting_of_ref": "indicator--bfca90cc-c9e3-41cd-9941-d51d6aa81851", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e909cb61-20c2-4130-9e26-4b3976ee44f5", "sighting_of_ref": "indicator--a5e3b191-480e-48c1-b5e5-51698f5e50f6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b199a15-ba29-481d-9cfd-179431a87d4a", "sighting_of_ref": "indicator--e5aa9dfd-b67a-4400-8d00-e5abbb8c4e18", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8db1af-76f1-435a-a082-b8e1be265684", "sighting_of_ref": "indicator--45ec0500-00b4-4e09-a458-4d6b0c8b303c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b44efa93-dd75-4eb7-bde5-024624de29fa", "sighting_of_ref": "indicator--45ec0500-00b4-4e09-a458-4d6b0c8b303c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e08781-3874-402c-9377-ced37764f902", "sighting_of_ref": "indicator--1909eb3d-b8a6-4830-b842-d611bbc30b82", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08baa86c-e598-4827-a67d-4ea481b3131a", "sighting_of_ref": "indicator--6fcc1e01-fd57-4fe3-8c3e-655284a76e57", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9741f0e4-1704-4651-93c6-a20756769d04", "sighting_of_ref": "indicator--90d0b6c8-4ebb-40ed-b77a-df7753ee8cff", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3abf5a3-8c6d-45e4-b422-dc8f2f9258f3", "sighting_of_ref": "indicator--25b68208-1a7b-42a0-a5d6-ab8ce623e4f8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4870a8-6dbe-478f-b57e-e10bc3a56f64", "sighting_of_ref": "indicator--25b68208-1a7b-42a0-a5d6-ab8ce623e4f8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3cf06c3-6fc0-4e54-b260-a0119827ccea", "sighting_of_ref": "indicator--132b4999-b253-4890-b399-1ec9b295fb33", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcea46ab-83c8-41ec-8720-e4e3d55a7c4d", "sighting_of_ref": "indicator--9ae614f7-efc9-429c-82ca-c4d04aa8b7c2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2079fa6-db0e-4d3f-a44a-8f53b2b5c33a", "sighting_of_ref": "indicator--6ece4a6f-a70a-4980-93b4-98076da20a17", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9161a6b7-bdcd-4c51-bb0d-23d0ed544c40", "sighting_of_ref": "indicator--6ece4a6f-a70a-4980-93b4-98076da20a17", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2c04fc-dd84-4689-a148-071504971bb0", "sighting_of_ref": "indicator--cc04d41b-c24e-4dd7-8c1c-ca4bc9be5277", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f694e88-0830-4c1a-b5ee-a99623825399", "sighting_of_ref": "indicator--cc04d41b-c24e-4dd7-8c1c-ca4bc9be5277", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--835fc3ae-1240-4dfe-95da-92c6cdc636e1", "sighting_of_ref": "indicator--5d4cbc0e-5617-4ba3-8378-fbf801121817", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90dd4ff2-42db-47da-a9b7-faf1a1821b10", "sighting_of_ref": "indicator--5d4cbc0e-5617-4ba3-8378-fbf801121817", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df69bf20-addd-4e82-839a-bafe0f27b1e0", "sighting_of_ref": "indicator--0c5c1a9c-8e26-4a30-a95a-90cb0f8cdc64", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca340690-bd55-4666-8b48-c02f83d63dac", "sighting_of_ref": "indicator--5fabbe95-4be6-4282-8484-38b151621737", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4941cf56-a7bb-4031-91c5-4662444d9598", "sighting_of_ref": "indicator--b8e7ae35-438b-43f9-a80d-b20db468c17d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0ccbfe-dd8d-45fb-96ca-41081dd23d61", "sighting_of_ref": "indicator--b8e7ae35-438b-43f9-a80d-b20db468c17d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--185323e6-b79d-4981-9477-8a1f015851af", "sighting_of_ref": "indicator--b8e7ae35-438b-43f9-a80d-b20db468c17d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070ab655-8cc6-4f9f-8ff7-000939d2445b", "sighting_of_ref": "indicator--c1d58889-47f8-48da-b799-f3911373d714", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f988fd4-35f3-43e7-b550-2f1f289b1c56", "sighting_of_ref": "indicator--708f8da6-cc8b-472c-9002-13bef26f5970", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c799977b-eef8-48af-b587-c60b0ffceaf6", "sighting_of_ref": "indicator--708f8da6-cc8b-472c-9002-13bef26f5970", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c09a02-b592-4708-b7c7-5a19949f7c24", "sighting_of_ref": "indicator--ab85d76f-470c-4461-8364-826a3b175eca", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546a074e-263d-42c0-aab6-0efd42488f73", "sighting_of_ref": "indicator--cd36940c-5201-4e74-b6e6-8617bf4dae92", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd14ad5-3ed7-498a-ba80-aba4e839009c", "sighting_of_ref": "indicator--e18b1170-70b9-40bf-8f55-cf9ce5ffe3e4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f8e105-17bf-46f6-83de-9bb5d8271f80", "sighting_of_ref": "indicator--e18b1170-70b9-40bf-8f55-cf9ce5ffe3e4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349c4e8e-4fe2-4ba1-8fea-88ad1285e3d8", "sighting_of_ref": "indicator--5cc892cb-d5a7-4e08-a909-05adb1131889", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae91085-113f-4626-98b8-6ebd4154071e", "sighting_of_ref": "indicator--8718bd56-ce56-4f6a-ab0d-2e6264e39990", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17acb2b8-4fa3-47de-ac98-9f5dfc71a195", "sighting_of_ref": "indicator--8718bd56-ce56-4f6a-ab0d-2e6264e39990", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a734cc7f-a8d8-4095-bf79-12cad7d76e4d", "sighting_of_ref": "indicator--852cc020-2659-4f62-bff9-fad02ab0aa0c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f960b1-2ad7-42a0-98b6-d50432127598", "sighting_of_ref": "indicator--852cc020-2659-4f62-bff9-fad02ab0aa0c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca4a507-e574-48e9-929e-83711ba03715", "sighting_of_ref": "indicator--56a3a444-6b63-47f2-96c4-76ac5ca967ac", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fafa8814-95bb-4fc7-b8df-dfa594289ae8", "sighting_of_ref": "indicator--028d079d-44bc-43d9-9cbd-d68ee673a7c5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--010056ce-1eb8-44b0-a355-e321df8fc1b3", "sighting_of_ref": "indicator--659a4f2e-76d9-4190-a68a-1d1d574c4292", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68da97d-1d43-4ba2-bec8-78bcd8afe89a", "sighting_of_ref": "indicator--976eba9e-7c8e-4488-89a3-abd80774face", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c2ad71-1f96-4e9a-8c3a-2cd06a86d056", "sighting_of_ref": "indicator--b1f767ae-0cf9-4024-8b2f-de4f9812c47b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af8fdc4-33d5-4668-a5f9-764c2e6297a8", "sighting_of_ref": "indicator--977dcb8b-c9d8-46dd-8ea4-8bcd63fac83f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7946add-9202-4260-b65e-de3fcf482635", "sighting_of_ref": "indicator--437ce2f8-ac6b-47ae-a81e-33c370e70e9c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc058d6-990d-4898-ac56-6347642b5c3a", "sighting_of_ref": "indicator--e35ed449-f0f4-41b6-bbdb-8ce921e50929", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b1ba471-8a2a-4268-b11e-aedfe848a76b", "sighting_of_ref": "indicator--d6844569-c71b-4ee4-9712-de41ff27ee6d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a2085c-6006-48dd-bf09-e4d2922dd0ac", "sighting_of_ref": "indicator--33daea04-0674-4e9a-afc4-8014046a742e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--477b06dc-f654-4ebb-8ee1-bd413570be4e", "sighting_of_ref": "indicator--345a8fff-2e94-42b5-b03b-84b2476ef792", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe43141-a931-4b45-8e41-67f67e624349", "sighting_of_ref": "indicator--d9fade75-1b88-4263-b0c1-34a73891ba47", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6842ea-ff41-43bc-907b-2355a953fcb7", "sighting_of_ref": "indicator--d9fade75-1b88-4263-b0c1-34a73891ba47", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82f60d5-b254-408c-b39c-c3ccf32b610f", "sighting_of_ref": "indicator--0edcd8c2-6985-480d-b908-d1e7e9640caa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7defc5ea-ec8f-40ac-be15-83871d823381", "sighting_of_ref": "indicator--0edcd8c2-6985-480d-b908-d1e7e9640caa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--158de1e7-6409-4486-b908-35670f15d8e3", "sighting_of_ref": "indicator--d10da8fb-e4de-455c-95b1-b655f36f389d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e249f950-df24-476f-be74-989c12182957", "sighting_of_ref": "indicator--e5e6a933-b196-4c8c-8c90-716e5f255f6f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da27ae8b-31e5-46e7-a05e-c3c3e6286e72", "sighting_of_ref": "indicator--e5e6a933-b196-4c8c-8c90-716e5f255f6f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f112cbd7-2cfc-48bf-9a0b-fb8ca3db7924", "sighting_of_ref": "indicator--6939764f-e703-4dd4-a6a2-6130b4516a50", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--748528ac-5d9f-42a5-ad1f-73dd23cdc366", "sighting_of_ref": "indicator--575fac59-f1dd-4af3-8d1e-90bf558ab20f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97725f3-c48e-4f54-b1f8-103693a03bfd", "sighting_of_ref": "indicator--0cb652f7-a245-4db2-8ff5-fdcb350685af", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b592d42-4e25-49ef-baee-4879f824fa61", "sighting_of_ref": "indicator--0cb652f7-a245-4db2-8ff5-fdcb350685af", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b7d6bf8-0502-48fe-83df-7bd1a72219d1", "sighting_of_ref": "indicator--33aef7ec-1f2f-49f9-961f-7f1e0a9c67ba", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d61934a-2c42-476b-8519-2026500bac0b", "sighting_of_ref": "indicator--76cf3327-1c26-4006-8f5a-e550b7a305f7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de13c29-cbc9-4ac5-82b5-d2e0800dda6c", "sighting_of_ref": "indicator--1cd2a3d2-45da-484a-b7e7-7e58460f89ea", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4988eac6-f58e-4249-9148-f19820d0b7ca", "sighting_of_ref": "indicator--60d7fdd6-caa9-4dc6-a282-97f485ee3546", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ee6bb5-21fb-4012-ab19-5b028f77765e", "sighting_of_ref": "indicator--5bf03d57-44cf-4efd-9b57-ca1d96776b4a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d08c8c3-9509-450a-acce-10e2ef97cf54", "sighting_of_ref": "indicator--5bf03d57-44cf-4efd-9b57-ca1d96776b4a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654fcb42-1999-4751-b652-02b6edf78e92", "sighting_of_ref": "indicator--1cfd5098-0344-423d-9144-2d8a16fb445c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f2cf03-1a29-4c60-baf0-da1094508ad2", "sighting_of_ref": "indicator--fda4f4c3-1323-4957-91bc-a2d04b6f7caf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf7f115b-8fad-44ea-bb35-a81b8b0f1c67", "sighting_of_ref": "indicator--fda4f4c3-1323-4957-91bc-a2d04b6f7caf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735a261d-1979-4936-a872-ca42acd41b2b", "sighting_of_ref": "indicator--e5583cf6-03dc-4d42-bca8-0ace835257dc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db70ae2a-cce8-4eba-bdac-a609b615617e", "sighting_of_ref": "indicator--e5583cf6-03dc-4d42-bca8-0ace835257dc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d85a56-aefe-4885-825f-83521c2203fb", "sighting_of_ref": "indicator--33f80d5f-ba9f-412f-a2b7-ece5bdb49feb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefbb701-d275-47be-868f-fc9010473136", "sighting_of_ref": "indicator--8f8a1aa3-5cfa-48c2-ac2f-c1b531e2e2f7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f0e054-cadb-4c74-b6f5-fe4c32562446", "sighting_of_ref": "indicator--b3fc853f-c89a-4c58-9986-b2eb745928c0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18dd05d5-e804-44c3-98fa-9e2ab1e1bb30", "sighting_of_ref": "indicator--b8e0a338-80e4-4ab1-a521-16e1ff5a49e2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa94a6e-4a57-45f3-94a1-62795e673796", "sighting_of_ref": "indicator--ab4be314-d8f7-41f4-a978-ae87a554bf86", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc330b9-89d8-4609-b652-d79ef79cc1e6", "sighting_of_ref": "indicator--ab4be314-d8f7-41f4-a978-ae87a554bf86", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a20f15-249f-45a0-8d7e-32d415a978d2", "sighting_of_ref": "indicator--ab4be314-d8f7-41f4-a978-ae87a554bf86", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7352f749-9845-4a49-a2dd-30cc98fa36d2", "sighting_of_ref": "indicator--fefb4836-245d-436b-a954-67bfa40d4761", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d968de84-df70-43b2-a072-674697a6546b", "sighting_of_ref": "indicator--fefb4836-245d-436b-a954-67bfa40d4761", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--901b257c-cd74-4f74-8dbc-d3f215d84fcc", "sighting_of_ref": "indicator--8f3fa1bd-caf2-463f-8a06-56eca23edbb1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947f0e88-71a6-4167-bded-4f6e81d57375", "sighting_of_ref": "indicator--f60cc6b9-fbb5-4615-ac02-5e12d07b2041", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327f0580-edbb-4587-af27-f446666cc252", "sighting_of_ref": "indicator--f60cc6b9-fbb5-4615-ac02-5e12d07b2041", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b027063-320a-4b0f-a076-8d80bc0089f0", "sighting_of_ref": "indicator--6897008f-f6b9-4acb-9abf-2740f9fc0405", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d415330b-68e7-4a4a-b0a2-b84ea002c7b2", "sighting_of_ref": "indicator--d3786b10-3c75-4936-b78d-f9d8500286d7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--539587a4-f22f-4c2d-9b47-27bf08b21ba8", "sighting_of_ref": "indicator--d3786b10-3c75-4936-b78d-f9d8500286d7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd30bb8-06d4-4c6d-ab6b-46d537b72e82", "sighting_of_ref": "indicator--b438dbae-ee0d-41ee-9af4-3f8e709fbf79", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88be5a78-a432-42b7-90ad-dc3ecc161222", "sighting_of_ref": "indicator--b34f1a42-3cfe-4510-a8e7-a576d6571ab0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1f1f8a-d022-487d-9949-6dce094eb0b1", "sighting_of_ref": "indicator--78132efb-465c-448b-b882-352792b05f8e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1863218-4720-49ef-97c7-a2fab23ed498", "sighting_of_ref": "indicator--11f70423-b70d-465e-9af2-f332f0fbdf0f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662d5251-9b32-4c70-af79-9ecefbbb5ff2", "sighting_of_ref": "indicator--6447acd5-0598-4960-8fad-e82b96649ead", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf05851-176a-4ae2-95d2-29c3c819da9c", "sighting_of_ref": "indicator--6447acd5-0598-4960-8fad-e82b96649ead", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2f2053-aa44-48a3-b4e4-28c6b83d4c41", "sighting_of_ref": "indicator--23cc11cf-d66e-4372-8d8d-98691ec37142", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5dd811-0c99-401d-afb3-7adb8323b465", "sighting_of_ref": "indicator--23cc11cf-d66e-4372-8d8d-98691ec37142", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77567283-8505-4e78-9886-d0488cd24dd3", "sighting_of_ref": "indicator--95df3efc-2226-4b68-902d-3ee6a9005ea8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5094213-c9b3-4700-b71e-adb2ce4a633a", "sighting_of_ref": "indicator--949224bf-15d0-4bf8-8223-e8be9533318e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--312ca742-973a-47ee-8a51-90be8dca0abb", "sighting_of_ref": "indicator--5708190e-ec39-4c17-aabd-61edc543587e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c5a8fb-118c-4e4d-bb91-fdcf0bc6cae2", "sighting_of_ref": "indicator--7e858418-abf0-4473-92da-db4190979a60", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--174a2686-a25d-416f-9030-fa383fd80033", "sighting_of_ref": "indicator--047c11ad-8400-4aeb-a82e-7d1021aa598a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--120f502a-fa73-4db4-abd8-2640573c6615", "sighting_of_ref": "indicator--047c11ad-8400-4aeb-a82e-7d1021aa598a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0945e44-f512-45fc-aec2-f15591421114", "sighting_of_ref": "indicator--b6e8c5a4-8215-4b0a-8261-937a5a386835", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--783d23d0-fe59-42f2-962d-9a41b059b5d1", "sighting_of_ref": "indicator--b6e8c5a4-8215-4b0a-8261-937a5a386835", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c0c519-eb56-45f2-8c71-00608beb39e9", "sighting_of_ref": "indicator--2c2814a9-03b6-43b4-ac28-2b7153d908dd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7f769e-dcff-4152-9e9c-d9957b7249fb", "sighting_of_ref": "indicator--2c2814a9-03b6-43b4-ac28-2b7153d908dd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d819bb-99de-4094-a830-7647ce29b4e8", "sighting_of_ref": "indicator--07a8845a-137f-482b-8537-cdc84e0dca74", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10ba8e7-ec8b-450e-a8a3-a2e1a0945208", "sighting_of_ref": "indicator--07a8845a-137f-482b-8537-cdc84e0dca74", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd2a4f8-fd06-484f-838e-3a373f54c9f2", "sighting_of_ref": "indicator--bec5ca1d-f967-42ae-9d1e-1526cd293381", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887218f2-316e-4d33-bc1b-aa54367998a1", "sighting_of_ref": "indicator--bec5ca1d-f967-42ae-9d1e-1526cd293381", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013d5f40-b13d-47a2-923e-4eaf3039f176", "sighting_of_ref": "indicator--c2d5313a-dc81-4509-ab56-ed1702c987ab", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130974c8-d746-408e-9580-473449c29741", "sighting_of_ref": "indicator--f916cf20-96aa-4509-9677-ca6a99543999", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d6f432-fc33-42db-a75b-24dd1fbdae8a", "sighting_of_ref": "indicator--71fb849c-3d00-49f0-934b-46e81c87a995", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56a2720-6e6a-4e81-872e-fbad5673d102", "sighting_of_ref": "indicator--181a97fb-28fe-4f9b-aa94-514fc84525ee", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--651044ba-6695-4199-ae8a-3056d0aa96e8", "sighting_of_ref": "indicator--181a97fb-28fe-4f9b-aa94-514fc84525ee", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--509d82a7-69dc-43e4-b73b-8e1abfdab026", "sighting_of_ref": "indicator--f6a50bae-5f74-425b-9c43-17b667fece38", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--870f7df8-b572-4916-8b4a-05b513a6e0e5", "sighting_of_ref": "indicator--9d001879-efa7-45d7-b7b9-31c0b451ca75", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d64a794b-f6ca-4244-b2db-2c8870a1b940", "sighting_of_ref": "indicator--ae1cc86e-bead-4383-a7e0-f464d457ab47", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d296bb-373d-40b7-8de8-98386180eca7", "sighting_of_ref": "indicator--ae0fb76d-ef98-472f-aae5-35cb5a7eee08", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--381d563b-6aaa-4e56-8e49-8fd57781aa46", "sighting_of_ref": "indicator--ae0fb76d-ef98-472f-aae5-35cb5a7eee08", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f242adc-2c21-4d7c-82ef-b206c7fd585e", "sighting_of_ref": "indicator--311f230f-9bfd-45d6-8e82-4e49f291d95b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4692b275-cdc3-46db-a038-c58787936bde", "sighting_of_ref": "indicator--3fdc95b9-39f7-4b43-ad0f-ddba3b8206b8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe09436-8f3f-48bd-9495-e278d56c3638", "sighting_of_ref": "indicator--ba8b802d-d9f1-4f83-b7fd-29817c9c24ad", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a95f8c1-0b32-44ed-9090-47d5395d7839", "sighting_of_ref": "indicator--ba8b802d-d9f1-4f83-b7fd-29817c9c24ad", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68bd26bd-8099-4273-be7c-7598e0857995", "sighting_of_ref": "indicator--0bff94c6-90f3-49e4-a5e5-7ada16704c20", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87cc8b43-00c7-4189-ba18-ddf0e139d9e3", "sighting_of_ref": "indicator--d9208cb2-fefd-40b9-a77f-cb12c01261c2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4cf1f61-195c-45e3-b8e2-f8d70ebae240", "sighting_of_ref": "indicator--e997f48b-aeb9-48d8-8370-62f8b2101416", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a72d0d3a-6a46-4919-ab17-6a833b555380", "sighting_of_ref": "indicator--fb1ecc40-743c-4d5c-87b0-934c8d73a577", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4201187-f8e5-457e-b72a-d18d4c5b72dc", "sighting_of_ref": "indicator--4b129527-9523-47de-b2c4-2a5cb669441a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efdaa274-2f16-4492-80a5-dfc3684ff49e", "sighting_of_ref": "indicator--301a3e78-3917-43a0-b353-69dbb829c46b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2131c8c-99e5-4be4-9c7e-664f8bde5648", "sighting_of_ref": "indicator--7f6dc908-7bcf-47c2-9759-9c29bf790ea0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6f39ea-dd2f-429d-8f25-21e577031c81", "sighting_of_ref": "indicator--467a6c5c-50b7-4623-b940-bf9f0e7c4164", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff48540-6a71-4b4c-b3f9-712261c655f6", "sighting_of_ref": "indicator--f4d9239f-bf8f-4ecc-a488-0eaef8ccda6c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd102da3-61db-4af8-a612-ba47d05cbab7", "sighting_of_ref": "indicator--f572ef5f-99a2-4399-ae88-f02c2b62ced9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae0318a-383f-4ff7-8614-e19c937cc499", "sighting_of_ref": "indicator--9045ad0b-5150-4784-adc8-75d023f48d4a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6547549-f5e9-4199-a74b-eee3ea5bd8f5", "sighting_of_ref": "indicator--dfc49f22-241e-4f4e-90f5-2a981e43443e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c1fbf3-50fa-4193-8bde-2788728d6f82", "sighting_of_ref": "indicator--53ecc710-c103-46b0-8075-49903c4061c0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59da37de-b8ca-4ca7-b44b-ddf6414c977a", "sighting_of_ref": "indicator--0d0a2d06-72ed-4eb6-bc7e-728142692c2b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7432536-8b83-40fa-8a15-9754ae67e72e", "sighting_of_ref": "indicator--67d9ac18-9afc-4fa1-ad78-c4b21556de59", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42a21c8-6f1e-4ef5-b280-115a4e99bb5a", "sighting_of_ref": "indicator--af7960b3-385d-4450-a0f0-7a311cd95f2e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c74d62b7-ae4c-4be7-8cd7-bfad5144a6d3", "sighting_of_ref": "indicator--fdb73672-8c84-469a-80b5-5b4a3d85dfbd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ab26a2-1c65-4509-a1b6-79a8101f7d69", "sighting_of_ref": "indicator--fdb73672-8c84-469a-80b5-5b4a3d85dfbd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f366ae2-8e3a-4297-99f6-000a5a0b2314", "sighting_of_ref": "indicator--489d3996-12ba-4ed4-b5eb-d82ef6765b19", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c49451e3-4a37-4d2b-8a35-b37003983155", "sighting_of_ref": "indicator--f90dd02f-82f1-432c-bef4-550b8dfc7a64", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25fdce42-7b36-4047-bb5d-17a6327577c5", "sighting_of_ref": "indicator--50c11081-c431-4644-9437-1ba58607e228", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b17d04-c7bb-48b9-9368-2e45a574df5f", "sighting_of_ref": "indicator--0b70c86d-6e6a-4411-ae64-15ef8fe27daf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15a3d28-6bf6-4899-8789-f60509af9397", "sighting_of_ref": "indicator--07adb5d4-5775-4c1d-af90-3fa585c5d85d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68aea80-52c9-4711-844a-6f6fc89c965f", "sighting_of_ref": "indicator--07adb5d4-5775-4c1d-af90-3fa585c5d85d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b29beaa-c020-4b0c-a48a-026548fa9423", "sighting_of_ref": "indicator--450bac97-d399-4596-b6d2-bc4feb30251e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf649406-a616-4369-acfd-fbcfa4fd677f", "sighting_of_ref": "indicator--699144e2-adb4-4e33-a2df-7d12db75b264", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8777abaa-0dad-4843-994e-2ef7b5f8ec4f", "sighting_of_ref": "indicator--041bbf2a-5f84-4958-8fa4-ee970363e477", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0928639e-9e58-4226-af61-d331702b8611", "sighting_of_ref": "indicator--041bbf2a-5f84-4958-8fa4-ee970363e477", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa5990b-f637-4c5e-9ba1-231007249307", "sighting_of_ref": "indicator--b821ed5d-bb22-4d7b-8c50-760bb32e4196", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6743397-f689-41d5-aa56-a8b3d3bdab8c", "sighting_of_ref": "indicator--b821ed5d-bb22-4d7b-8c50-760bb32e4196", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a25318d-93c6-4dfe-bab9-a8c6dbb6fb4d", "sighting_of_ref": "indicator--a53e4cf0-a4e2-4d39-8d86-2d3efbd02d03", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc4b3f9-4cc2-40b9-9d89-2cd78b95d433", "sighting_of_ref": "indicator--a53e4cf0-a4e2-4d39-8d86-2d3efbd02d03", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d1ce08-16e9-4ea2-82c6-671b3f5bf251", "sighting_of_ref": "indicator--d7c42aef-79b3-461b-a9a5-8c5d843f3d9f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c787f1c-5833-4466-a481-a6a95f19e1d2", "sighting_of_ref": "indicator--d7c42aef-79b3-461b-a9a5-8c5d843f3d9f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a0995c-8510-44f6-80bd-d6f27b236b4a", "sighting_of_ref": "indicator--d8503718-f8f8-4b4a-aa2d-018aa62283f2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58d59c4-ebb2-41be-97dc-a389b029e5ad", "sighting_of_ref": "indicator--2e9d9206-069b-4c61-a509-8b3f0f23c367", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d2d2b2b-b900-4f85-861b-240fa5786805", "sighting_of_ref": "indicator--d67521ea-37d4-4412-9cf0-28c5a9b38a9b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dfb297d-6c76-490d-9430-a33bc52bdde1", "sighting_of_ref": "indicator--7be224a3-0575-4a3f-a2b9-6a19d0b61d52", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e50145a4-d199-4e48-9376-ccce572b8412", "sighting_of_ref": "indicator--efffd556-c4d8-4c03-ada7-dc0250368b78", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d55775-048f-49f8-8175-1f7c69db8a55", "sighting_of_ref": "indicator--efffd556-c4d8-4c03-ada7-dc0250368b78", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced32401-90af-46ab-9ae3-0bd3a4198156", "sighting_of_ref": "indicator--7d56cf93-23bd-4dcb-9735-4b4e26fe80d0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2447faa-0ec1-4ba2-aeda-de0b4a0ee395", "sighting_of_ref": "indicator--7d56cf93-23bd-4dcb-9735-4b4e26fe80d0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5febf5e4-5ee4-4196-bba0-7332ac2c6c1d", "sighting_of_ref": "indicator--14556781-6b07-4933-bc12-ad1b081df752", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6108d7-7ca4-46b5-974f-4970998ff805", "sighting_of_ref": "indicator--b6805006-2087-4ed2-933f-4000d14bdb37", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77820677-21c8-4ea0-876d-21f1084b4bb5", "sighting_of_ref": "indicator--8c5f3c31-bdbd-4b87-97e8-d930f1f7acb8", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--183afb53-c242-46c8-8f76-79c3923d3dad", "sighting_of_ref": "indicator--afff2685-ca55-4c16-b846-3ca9f08fa1aa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee37aa33-4262-432d-a428-14d36b43595e", "sighting_of_ref": "indicator--afff2685-ca55-4c16-b846-3ca9f08fa1aa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4db146-bb61-4557-9504-a210dde4b961", "sighting_of_ref": "indicator--4245bdba-9033-43dd-8f6c-33fb16c30f27", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e197d7b-b392-417e-bfbe-2e60353160b8", "sighting_of_ref": "indicator--7216e940-f28e-4679-9f03-f2399d8945d4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18973146-b5a4-4189-901a-3e7819a7eb8a", "sighting_of_ref": "indicator--7216e940-f28e-4679-9f03-f2399d8945d4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750b3391-5c19-45e2-8ec1-71208f1c8888", "sighting_of_ref": "indicator--86b8907c-474b-4103-8d65-1aa1573c7608", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d57aa445-61bb-469f-9a0b-46acf1d1d792", "sighting_of_ref": "indicator--86b8907c-474b-4103-8d65-1aa1573c7608", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c23bf76-cd9d-48fe-885b-6fb3117b1ef5", "sighting_of_ref": "indicator--3065bb80-8fcd-4e7f-b483-e252f853b26a", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd466b6-235d-40b2-a886-a212c2baab52", "sighting_of_ref": "indicator--413c4b0e-c404-4081-876a-6b2bb8b793ad", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51d5942-70d8-42fd-b8af-5f76e3005287", "sighting_of_ref": "indicator--d286f946-cb8a-4c12-9915-f2ce6265cbc6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dd935c3-916c-4ef3-8446-de02489a6bb4", "sighting_of_ref": "indicator--77e4080f-e681-4f7e-9a23-9b439e47d88a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2e7997-da41-4a75-83ac-9bb3dbcc1d2e", "sighting_of_ref": "indicator--b576ef92-c5b0-4fbc-a0ef-cebc2963b021", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18fc7799-47cc-4c4a-ad77-05b0d7d74e56", "sighting_of_ref": "indicator--7f93a63f-115d-4b1e-9d37-61cf72e25b04", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cbbcda5-08c1-472b-a4b3-f443041dd1ab", "sighting_of_ref": "indicator--c6531e43-2131-41a5-a15d-31eefe53e0e5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64511053-0562-460d-8ff9-e803dbd79637", "sighting_of_ref": "indicator--4ee6fbd3-a24a-4396-99a3-0a8cb713f52b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de6ff06e-1ea2-4ec8-b21a-14d3369d515a", "sighting_of_ref": "indicator--f1cccab6-c75b-424b-8eec-e37126fde14b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd4ca33e-51c1-4474-a7f4-86c8bb667e47", "sighting_of_ref": "indicator--f1cccab6-c75b-424b-8eec-e37126fde14b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f209e13-f0c7-4a9c-8c08-ccc8653f83f6", "sighting_of_ref": "indicator--c4113913-e81a-46bb-a7e7-8e08744bf7fd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d838fc8b-c3e7-4476-99f3-169b84b14d91", "sighting_of_ref": "indicator--f15e4921-7fad-4dcb-b33a-ef3fd91dbcdb", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe77714-db7c-458c-853e-208fa1685f41", "sighting_of_ref": "indicator--8a7882c1-a6ae-46ec-9b4d-9ad903ede135", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e00fce-6bef-4e33-afe5-ea87d23f6ddf", "sighting_of_ref": "indicator--8a7882c1-a6ae-46ec-9b4d-9ad903ede135", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a16427-3621-4569-81f7-f84e63e16c4c", "sighting_of_ref": "indicator--a5b2589d-4939-426f-a4ac-d3f93c2c90d4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dced45ad-ce13-4f89-95b4-0bf869258a6f", "sighting_of_ref": "indicator--7a4b3595-63a4-4b23-ab1d-c5f7f9d5f5f7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15196d4-1de2-457a-bb37-6f1f03a6e186", "sighting_of_ref": "indicator--781e522d-c63c-4e91-9768-a7af056ecd5d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033a1f8c-4e17-4cba-8bb4-911ca69d5882", "sighting_of_ref": "indicator--b167cf7c-af7d-4f27-b31d-e09af7f3a338", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77bc0bd2-3cac-4a1a-b002-613d5c2a7646", "sighting_of_ref": "indicator--c3c4dbff-8fc6-4764-ae3c-8f3cc0593f0d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9b6583-2ced-4ef5-b97b-e31fcf6c8976", "sighting_of_ref": "indicator--c51930fe-41e0-4ef3-80da-36c219d24ea6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a002973-355f-4457-9877-914b2bd41d61", "sighting_of_ref": "indicator--dd4cf63a-6924-4913-9fe3-d7745754e61f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb4773a-ed81-471a-a380-c642484f78db", "sighting_of_ref": "indicator--bbe5a0ed-db04-4218-add6-6482b8705a56", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fe053a9-518b-4889-a255-260fcdf2d3e0", "sighting_of_ref": "indicator--e87c8ce6-ea54-4cae-a4b8-24205d02e3a9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c61b26e4-cc6c-47c2-a331-1997be903521", "sighting_of_ref": "indicator--50d36c17-4788-4f12-bab2-8688a0acce07", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4373bbe3-0c17-426b-8998-cd93131e7ef5", "sighting_of_ref": "indicator--17f6d00e-4a84-47c5-ac46-ef445f61b2cf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681e57de-a5ba-4bc6-aa73-84a17e125c43", "sighting_of_ref": "indicator--40e39be2-4a78-45ab-b896-05a1b25c7008", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee5709f-b4a1-475c-84fc-124ee29617b9", "sighting_of_ref": "indicator--b8bcc8c8-cd51-4b8e-8622-cf13acd5f67f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1fe872-5e28-47f5-b03f-d5140fa3d48a", "sighting_of_ref": "indicator--91a3a35d-c6f0-4867-83ee-1d2b45f38b82", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3eff64b-a901-4c4b-8341-bd659c777a5d", "sighting_of_ref": "indicator--4a8c13c6-d3ca-46be-b06c-bdbde9a92539", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e022618b-6e9c-4dd4-9927-1f25365b6054", "sighting_of_ref": "indicator--1e8f554e-6e30-4c09-bbe1-3cb422c521e8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf36721c-f03d-40b9-84f9-4949eee49901", "sighting_of_ref": "indicator--e481ba51-7e2d-4df6-8ade-eb5b1fc85973", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--987a1318-c8cd-43ce-a071-e44bbabbdf96", "sighting_of_ref": "indicator--e481ba51-7e2d-4df6-8ade-eb5b1fc85973", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09fee473-bb90-4a90-a98b-8508c29f0cee", "sighting_of_ref": "indicator--06a8b6db-2c68-4e72-8979-f434e215fc35", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a42bb0-7b60-4c29-a6e7-9fd9393fe52e", "sighting_of_ref": "indicator--10a5a1ff-c8c2-410d-aa63-082ad54523a4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0562822-82e4-45b6-8da7-114a9cc64d51", "sighting_of_ref": "indicator--10a5a1ff-c8c2-410d-aa63-082ad54523a4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ad04e6-78ae-4650-85c6-ff39b3d4b8bd", "sighting_of_ref": "indicator--7d81c9a3-d494-46b8-ba0f-43dd4f9b89ae", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a5aacc1-f745-4e46-a3ec-14acf4b6fc74", "sighting_of_ref": "indicator--7d81c9a3-d494-46b8-ba0f-43dd4f9b89ae", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ca34ad-0e93-43fc-831e-c1147da4ebe8", "sighting_of_ref": "indicator--c9833693-c912-43bd-811a-713d6f6979bc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ebaa3c9-9f83-4565-acfb-92daa72254be", "sighting_of_ref": "indicator--464b1be9-a837-4230-a993-1b9721d0a653", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d27f7e2-9487-4299-be7d-6b6f8d31928c", "sighting_of_ref": "indicator--37ff3d57-9fb5-402e-8ccb-149098d8cc04", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a35bb4-abe1-40c9-8402-7f5fb329a7a5", "sighting_of_ref": "indicator--37ff3d57-9fb5-402e-8ccb-149098d8cc04", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d18bcc2e-0413-48f8-874d-87e35898a3e8", "sighting_of_ref": "indicator--7f9f09d7-e790-4573-b303-16c9d447f720", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7e3351-a6bb-4e2b-b32e-9856d75bc806", "sighting_of_ref": "indicator--8e42c043-7f36-4c1f-b70e-c9e384493310", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cae390b-ab34-4150-9b86-4d177d52e0f5", "sighting_of_ref": "indicator--8e42c043-7f36-4c1f-b70e-c9e384493310", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd0ed0e-4b86-447d-8ba0-e65ad52f3a5c", "sighting_of_ref": "indicator--8e42c043-7f36-4c1f-b70e-c9e384493310", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f00c013-15d5-4a2b-950e-065c0472d11b", "sighting_of_ref": "indicator--1d3c5fa5-1a38-4bd3-92b5-746ffa7e679a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eee345b-e181-470f-86e7-1378b6369c93", "sighting_of_ref": "indicator--1d3c5fa5-1a38-4bd3-92b5-746ffa7e679a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff3b1b4-9445-4053-b3d2-ce7920efe77b", "sighting_of_ref": "indicator--1d3c5fa5-1a38-4bd3-92b5-746ffa7e679a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5e356d-e60e-4cd4-9a77-744c2472ecdc", "sighting_of_ref": "indicator--5f4fb098-1643-4116-93e9-817549c8ee75", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f621800-8472-42b6-8740-3bd832a3bf68", "sighting_of_ref": "indicator--e2da92b4-50eb-4215-8fa5-cdb6e0e26fc4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe4479a-5b7a-41cc-91b3-ec85c7ce9727", "sighting_of_ref": "indicator--8a0d6977-7140-4f70-bf38-010bf7ea9653", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb1b564c-aa9b-4c09-b6b7-beaf64d73c83", "sighting_of_ref": "indicator--8a0d6977-7140-4f70-bf38-010bf7ea9653", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63448e35-4306-4d33-91ef-37ed4de91aa0", "sighting_of_ref": "indicator--5aa6795c-17c8-44e8-8d6c-211f763b98d4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921ba658-7a81-4116-bc98-f9b931a794b3", "sighting_of_ref": "indicator--5aa6795c-17c8-44e8-8d6c-211f763b98d4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f3f81bd-9e3f-4048-9bb7-0266cfa40a1e", "sighting_of_ref": "indicator--15634d05-d451-41b0-9053-91d32d06e6e2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f44f2a5c-d46a-422e-ab18-1985f4ce6be0", "sighting_of_ref": "indicator--15634d05-d451-41b0-9053-91d32d06e6e2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f09e24a5-14ba-4a26-ba4d-354fc011bc52", "sighting_of_ref": "indicator--a5d91285-ea70-4707-9752-d58de9e7750b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a8827f-0fb0-4212-9f54-07699190ae3d", "sighting_of_ref": "indicator--78422b33-7aff-4c2a-9dd1-fe384d1f5ec2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d919dc22-3a87-4e39-ae42-929eb3343cb6", "sighting_of_ref": "indicator--78422b33-7aff-4c2a-9dd1-fe384d1f5ec2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d4b30e-5330-4c01-80b2-53c2fa708420", "sighting_of_ref": "indicator--0c87089e-d1c1-4519-9be3-a6ec5149c1bb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26aeb974-0d99-4f54-8205-719404b0bce7", "sighting_of_ref": "indicator--90217846-0471-44d7-a0d9-aef74cdef711", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52cc367a-45cd-40e7-9b75-5b0e0e3f7f67", "sighting_of_ref": "indicator--319f0bd8-afd5-4fa8-846a-f627e982f502", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da75fbf4-5c1b-433e-9933-749e7b050546", "sighting_of_ref": "indicator--319f0bd8-afd5-4fa8-846a-f627e982f502", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605f45a6-4281-4c0a-9825-8757f129328c", "sighting_of_ref": "indicator--9d6318db-1649-4fe0-b5eb-873dfd6098af", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f1927c-bd64-45ba-9c76-58cbc5aeb3b2", "sighting_of_ref": "indicator--10db7296-7c65-423c-8395-74cf3b209f7a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9041214a-ad68-4617-acee-f68db18ed5ad", "sighting_of_ref": "indicator--10db7296-7c65-423c-8395-74cf3b209f7a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25f0901-4763-46ad-9d14-03d5b06e27c5", "sighting_of_ref": "indicator--10db7296-7c65-423c-8395-74cf3b209f7a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f135b6f-b2c6-47bd-9de5-4c0a72c80d5b", "sighting_of_ref": "indicator--ef1bc2d8-e641-4329-a889-31c45c5c4f9c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6afe584-c336-446e-8829-7b830473b00d", "sighting_of_ref": "indicator--9d7c8e14-c8ed-4312-be35-87cd13e12e6a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d520c4-3904-4d8f-8c81-df282f9245ec", "sighting_of_ref": "indicator--9d7c8e14-c8ed-4312-be35-87cd13e12e6a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a148c6-302f-4982-bfe8-5ed1aeb685ef", "sighting_of_ref": "indicator--29cd471b-48af-4bda-8e33-f931c5b79d48", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941af712-5cb2-4eb1-8f42-fa61c8b5dbf7", "sighting_of_ref": "indicator--ca122492-45ba-4975-a518-a52f236220a4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea0747c-3292-45aa-b202-0a22f1610ed6", "sighting_of_ref": "indicator--d52ce84b-0305-43a2-bfec-43d99f82c88e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c914e190-e9fa-4c55-91e2-70cab2ba93ba", "sighting_of_ref": "indicator--d52ce84b-0305-43a2-bfec-43d99f82c88e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75fa92a0-3d92-4b1d-8ece-d76063c5d0cc", "sighting_of_ref": "indicator--a501a818-f3b3-4b83-8d75-7a571a28c9b0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb0a576-395c-4c14-a499-1dd5470248e6", "sighting_of_ref": "indicator--d6afd6e9-2b11-4886-b16a-fa13fb208117", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6bf8150-2527-4148-bdeb-ad716cbb08ac", "sighting_of_ref": "indicator--da0ff1b0-8058-43cc-955e-c4144cb22c88", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f964fa60-2712-4f76-bed8-a3fa25b66a7e", "sighting_of_ref": "indicator--e4ceb4f6-1946-4d87-8431-750e1cbe8adc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2edd2f-f349-4dea-83f3-b9b01ead7621", "sighting_of_ref": "indicator--e4ceb4f6-1946-4d87-8431-750e1cbe8adc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22700632-dc8d-4303-ab79-cdf2202d1c1d", "sighting_of_ref": "indicator--e4ceb4f6-1946-4d87-8431-750e1cbe8adc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa9cd25-5d4b-4478-b9b8-975c13e85a9e", "sighting_of_ref": "indicator--83280c1f-69b9-4752-a9ff-f66cb49f6bf2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f01632-cfb7-4c1f-8abf-3c4b2fa894fd", "sighting_of_ref": "indicator--5bf6d287-5b81-4591-990d-be67aed884b3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9d34cb-14f5-46d7-b297-aab9a0d6296b", "sighting_of_ref": "indicator--5a0e22df-1b88-449a-8084-6a3c2b14e403", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8035a1c-e4de-4195-9d42-356d3d4bbff9", "sighting_of_ref": "indicator--5a0e22df-1b88-449a-8084-6a3c2b14e403", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb935da-0e81-403f-b334-b9345523c4cb", "sighting_of_ref": "indicator--ac0fe71d-efda-4208-991f-5fc53588de1b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93ef6d4-54c0-4301-9964-e76c7993d148", "sighting_of_ref": "indicator--ac0fe71d-efda-4208-991f-5fc53588de1b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4745762f-acee-42ef-a4d0-12ff2ccba3fc", "sighting_of_ref": "indicator--7388b9d8-c71d-4a65-b6a3-b3dcf18f617f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--722b6c54-9df2-40e1-9772-88720b039dc8", "sighting_of_ref": "indicator--7388b9d8-c71d-4a65-b6a3-b3dcf18f617f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85fdda87-ad44-4a0c-9c4f-ad356cdec3bd", "sighting_of_ref": "indicator--871c4309-618f-4d0f-ab98-b306074af09a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a91a57-117b-4f5d-92cb-3986864d8356", "sighting_of_ref": "indicator--df36843b-15e4-444a-b3df-57c40fb7eef7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b770c0-654e-40dc-ac0f-192363a4f677", "sighting_of_ref": "indicator--8290737a-34b6-43d9-b446-f29ae4df3105", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c82c15-e9ba-4958-8326-de8ff236c9ae", "sighting_of_ref": "indicator--8290737a-34b6-43d9-b446-f29ae4df3105", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac76a98-54ef-4353-aed0-5982229b85e4", "sighting_of_ref": "indicator--9af47160-da6d-4f7a-964f-0850771f96fe", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b279cd-3a12-49d3-aaa2-5a9eaed84de7", "sighting_of_ref": "indicator--9af47160-da6d-4f7a-964f-0850771f96fe", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae3d0f9-b7e4-4595-a5ef-fc66c0f65bb5", "sighting_of_ref": "indicator--fb26149f-ef9d-4970-9b9a-9257b4c236f8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a92a81-980f-4067-a577-44a7bee633cf", "sighting_of_ref": "indicator--23a4514d-c6a1-4c5d-bfa4-409c88901e5a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b8ef118-823a-4850-b771-1eba95d542e2", "sighting_of_ref": "indicator--23a4514d-c6a1-4c5d-bfa4-409c88901e5a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--155029cb-6b8d-4feb-9927-8303604302dd", "sighting_of_ref": "indicator--740fa075-8773-4547-ae9d-04eb16d85687", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee3eb4c3-8240-44e0-9def-0e0c58b972ef", "sighting_of_ref": "indicator--08cc12df-3aec-48f6-8abb-81f46e1aa0c4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a75fe4e-c5a3-471e-bfa8-d2382ed4255a", "sighting_of_ref": "indicator--08cc12df-3aec-48f6-8abb-81f46e1aa0c4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad84db7b-585d-4a9c-87ec-a146d463cbf9", "sighting_of_ref": "indicator--08cc12df-3aec-48f6-8abb-81f46e1aa0c4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3081ea68-084c-4b51-a478-5325854ab783", "sighting_of_ref": "indicator--e78e5fe9-0ac3-4148-b4f5-21644a5d2204", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d821f79c-54ff-4406-81d2-be7837c7fad8", "sighting_of_ref": "indicator--73f5011f-ca02-4215-9d88-b013b9d28fb5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--541e1763-b5f9-4e71-8719-47e226b5de23", "sighting_of_ref": "indicator--2ae560a1-c18e-4c5c-bdf9-8fd4315e45d6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a40215-4cfd-4182-87db-78215bb64918", "sighting_of_ref": "indicator--2ae560a1-c18e-4c5c-bdf9-8fd4315e45d6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd5a516-6b10-46d3-8694-891734320f43", "sighting_of_ref": "indicator--187d5b4c-11f3-4cc4-b4e2-3d3ed721347b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca644012-ee8b-45bc-9596-9857b4dfae30", "sighting_of_ref": "indicator--187d5b4c-11f3-4cc4-b4e2-3d3ed721347b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23da46a-6964-4765-9172-8c6e983ccdb3", "sighting_of_ref": "indicator--7b84cc7d-4433-4627-becf-ad2b3a437ec6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--015e8b9f-0c7f-433c-a49e-6c68e085f7c7", "sighting_of_ref": "indicator--c231a818-354f-4e6c-abb9-8e23f13b1f80", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0444a2-e727-4549-91fb-3e79d940f998", "sighting_of_ref": "indicator--c231a818-354f-4e6c-abb9-8e23f13b1f80", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f7a057-66c5-4e4a-8d3e-a7b7a4680296", "sighting_of_ref": "indicator--c231a818-354f-4e6c-abb9-8e23f13b1f80", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7b2814-f2d9-45d9-aff1-8e0c0d24f77b", "sighting_of_ref": "indicator--7ed263ea-d590-4713-a000-d70c2995b61d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2155ca69-2c84-48f6-9cb2-b07d28eb8db7", "sighting_of_ref": "indicator--fc037c28-95c0-43de-8993-107998ba6e27", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43418161-3f3e-4836-a0a6-e7ce2b097670", "sighting_of_ref": "indicator--fc037c28-95c0-43de-8993-107998ba6e27", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd34007d-3b14-4740-a5a5-51134a09818d", "sighting_of_ref": "indicator--6202709d-8dea-4934-bcf6-1db9a2ee02ad", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc5386d-17dd-4110-b217-204c96e53dfc", "sighting_of_ref": "indicator--7e97555d-f2bc-4a41-beca-f0c69a74e0da", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1242201a-a59f-4412-8bc7-86ea0458d66a", "sighting_of_ref": "indicator--7e97555d-f2bc-4a41-beca-f0c69a74e0da", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db8651e1-fc0e-46bb-9445-e113df8abf48", "sighting_of_ref": "indicator--9c83e6ff-8408-457f-a26b-28e8ffd7f190", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88dae009-dbde-465d-bc29-d1a2ddb02698", "sighting_of_ref": "indicator--c4cd9dfb-49a6-4ed8-862d-d23750cbbaa9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b93a4df-e031-434b-ad0c-f6bb2f374e2f", "sighting_of_ref": "indicator--14f022da-c70b-4513-8ff3-47ccb1ed09b4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--786b8da7-8cbe-4c74-9ee7-0a3b5c485190", "sighting_of_ref": "indicator--439db9cc-a1e7-4615-aec6-b0e740633494", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdaa7bcf-2ea6-4463-9914-93a7b0d9b322", "sighting_of_ref": "indicator--439db9cc-a1e7-4615-aec6-b0e740633494", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b35098a-d574-4f6d-8b06-b3baeafd409e", "sighting_of_ref": "indicator--3026677c-51a6-4387-a4f9-41e9ced5903a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01355892-b3ca-435f-8aa3-9f085ba802c2", "sighting_of_ref": "indicator--b9fe82f0-5a50-4e5a-9492-84d091386d2e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b6c533-2e2c-4633-af52-5db754405108", "sighting_of_ref": "indicator--bb450729-3cc5-4373-be91-7a12ec57ebf1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d198d6-64a7-4d49-aa8e-d67e8aa55267", "sighting_of_ref": "indicator--190a080f-8d64-46ed-8e10-c2533305dbef", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e4dc36-ef2f-4e89-aab3-e97ac0d98240", "sighting_of_ref": "indicator--86572a23-646b-42c0-a37b-fef41a2d1a7b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ebe1229-1de2-4dd8-a786-4306229e5590", "sighting_of_ref": "indicator--b975f8df-b7ab-467a-a888-b3133a1dafe1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c97b3f1-4ffb-43b6-97bb-e58185f18d97", "sighting_of_ref": "indicator--fa3e65fa-4172-4cbc-a1e5-22ef46cd2e2f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cccda4d-1ae1-476c-9f02-e2c83124f933", "sighting_of_ref": "indicator--191e900b-646b-4890-bdb9-473e1d96808a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c78627f0-7d0f-463d-a0b8-02f87350c431", "sighting_of_ref": "indicator--d28b2638-cb6a-4f71-9044-67eb6043cc2e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c44c2a-a315-49f9-9810-bc735c4144b8", "sighting_of_ref": "indicator--d28b2638-cb6a-4f71-9044-67eb6043cc2e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a090ea-c2bd-4b9a-b823-7272daca2675", "sighting_of_ref": "indicator--6960f639-d83b-41fe-92a8-344c2b9d1074", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea0352a7-e19a-4100-bf2d-a0565f4e953a", "sighting_of_ref": "indicator--6960f639-d83b-41fe-92a8-344c2b9d1074", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c890268-b085-4ca3-a8fe-762009ecc349", "sighting_of_ref": "indicator--033f8b91-2e8d-46ca-81ea-72f33a3d3c2e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf9429ba-5086-4724-92aa-a34236058e63", "sighting_of_ref": "indicator--033f8b91-2e8d-46ca-81ea-72f33a3d3c2e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ba5128-75c5-4262-806c-3cee4dbb09f1", "sighting_of_ref": "indicator--a63ad1c4-1de5-4f4b-8a01-dda74a9e4801", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--940f9b20-d8c0-4866-9dc3-14d32ce7eae7", "sighting_of_ref": "indicator--e77ff4e3-3724-40cd-80bc-45da55312de1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0434d629-5f8d-4e34-b0f8-28785c521cac", "sighting_of_ref": "indicator--e1319a8b-fc80-4d96-b5e7-75d554b4b9bb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a29214d6-bf6a-4957-984e-798c25d72bd8", "sighting_of_ref": "indicator--1834b298-1720-4a99-be52-49210469d27f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77bf8dd3-df8b-458d-ad0f-8e3abe940348", "sighting_of_ref": "indicator--c006e559-126a-4a04-9b5c-1dabbbe91c5f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d3c3358-ca51-4bcd-9d5d-2513c69ebe4f", "sighting_of_ref": "indicator--c006e559-126a-4a04-9b5c-1dabbbe91c5f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a28e9a-e5fb-45b3-81be-2948b0667319", "sighting_of_ref": "indicator--ae7a56fc-bed0-4a39-aae3-d2d543a02a7d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b00eda-ff4f-407c-b3a8-49735dbbad7d", "sighting_of_ref": "indicator--a40bd092-f160-4c45-ab78-f11d98684136", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac4aa099-c219-45b1-ba7a-0674a1bbd48e", "sighting_of_ref": "indicator--16aabf5e-4844-46fe-8e3b-b3ff7de5ede7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0aea1ef-413a-4570-b6db-ed1da6613ded", "sighting_of_ref": "indicator--faa65340-d043-49ea-9b5b-aa8736031aef", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641f0a88-d997-4dd8-86b3-73bb14edef09", "sighting_of_ref": "indicator--dcb091e3-acdf-498f-8823-f90a770e8277", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ebd590-3f9a-40de-a13b-115f7df3c440", "sighting_of_ref": "indicator--a1c130e7-432d-4e73-ae74-83a911a64aa8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079c2541-dadc-4504-8b12-fe452e8f3e97", "sighting_of_ref": "indicator--a1c130e7-432d-4e73-ae74-83a911a64aa8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253d1083-909b-442e-bffb-816a5c946ed9", "sighting_of_ref": "indicator--0413e227-1b32-4b23-bb82-7e739c73b3e2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407bded2-9dfc-44f3-99f7-b424b13cf603", "sighting_of_ref": "indicator--0413e227-1b32-4b23-bb82-7e739c73b3e2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432221c1-be62-4b67-a791-299a2c64a751", "sighting_of_ref": "indicator--57d850fb-7565-4ff4-a5d1-a583668958a4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8066c1b1-3bce-4c75-b4a6-d47566a5bd2e", "sighting_of_ref": "indicator--0f9ca034-3df9-420a-8e58-0f8e2162cb56", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0abe46e2-91d4-45c7-b5d5-f7444376986c", "sighting_of_ref": "indicator--b3be3655-ecac-4d49-a292-406bd85e6343", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc328be-1ef2-47b4-8932-98c415ab4dc7", "sighting_of_ref": "indicator--b3be3655-ecac-4d49-a292-406bd85e6343", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c74b3da7-a63a-4b41-85fd-c04cfa9f5e21", "sighting_of_ref": "indicator--5fbd1a68-8404-4b39-be50-09cd5733b05f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022d453b-96e3-4ae7-ab16-8b92fd3ea7af", "sighting_of_ref": "indicator--8d95e00d-ee34-4cb7-a6da-c421e0a520c9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d040c60-18de-4620-99b6-36aebaa327d9", "sighting_of_ref": "indicator--5e96c366-90c8-44c4-89be-8f416292bdc0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e511c6-333a-46cd-bdb7-e60970eb0ae9", "sighting_of_ref": "indicator--2e839c9d-a5a5-4a6c-8e6d-bea07f2d8191", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a76030-49cc-474f-9af3-753caa03b6ff", "sighting_of_ref": "indicator--e095be16-7427-4920-b8b2-3601c51b111f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e248197-3c84-414b-9aeb-c950f3550b1a", "sighting_of_ref": "indicator--21f0a864-791c-4617-bc12-d0175ba14808", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ece482b-2f10-4e5b-9bc9-6a4e05ca0280", "sighting_of_ref": "indicator--de24c5c8-522b-4505-a498-7e8b7281cd6b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ebc122-609c-4ed5-8a0f-cbaa001449e5", "sighting_of_ref": "indicator--05a781f3-eab9-491c-8e79-6718a419ba8d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6abb7363-be4d-4a28-a7d0-9cdd5c906ebd", "sighting_of_ref": "indicator--28af8bc0-b34c-4404-86cc-96a412288f3c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1aab5ef-308f-4da2-ae7d-58db79865bad", "sighting_of_ref": "indicator--be37c6f3-8374-426e-b696-d6767fe15134", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e06dae47-9c5b-4888-a8ad-ac50f2edc089", "sighting_of_ref": "indicator--eb121d44-008b-485e-93c9-14e095f12435", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c02cf7-e31e-4f09-b5a1-bee6d46235aa", "sighting_of_ref": "indicator--8a60c555-06c7-4368-96ce-81f17b3e0a69", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df821a0-a62f-4eb3-a6cc-9e46fcfdd096", "sighting_of_ref": "indicator--28a0a8ef-a28c-47cb-af3b-ed04b851f54e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4ddce7-3933-4632-a4f9-ff0c3d41b1f2", "sighting_of_ref": "indicator--f0e7be26-d53c-480e-b9de-efccbb131f20", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5931882a-adbd-4e42-9c25-f4abbbdcb3d1", "sighting_of_ref": "indicator--bbcc651c-b8d5-424f-b379-80150c99f02c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ab401f-c581-419b-8bb9-5ee3b58bc193", "sighting_of_ref": "indicator--bbcc651c-b8d5-424f-b379-80150c99f02c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ee2ae2-2468-4971-8d97-8c4565e63b59", "sighting_of_ref": "indicator--b3b7dc38-6086-4e96-bb78-403649eff016", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfab23cb-a83f-4584-832c-5923d867d2cb", "sighting_of_ref": "indicator--e80a107c-7680-4616-92f2-9864143f3de2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1c08a5-f746-4c87-ad13-6b763863e8e7", "sighting_of_ref": "indicator--8fde7ff9-a6bf-4b63-bcc8-f1a0d20ffd55", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b15ba0dd-d2cf-4a77-bfb1-9fb69c93f413", "sighting_of_ref": "indicator--8fde7ff9-a6bf-4b63-bcc8-f1a0d20ffd55", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af673ce3-7ece-4bc5-838a-204e0bc418aa", "sighting_of_ref": "indicator--f204e22f-1db2-415e-81e6-5f2f253c8d9c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85f1731c-a6b4-4560-b826-c18b5f01adfa", "sighting_of_ref": "indicator--2f170783-6afb-4032-bd01-e9d3f9819276", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53423b9-4546-4864-9de8-7cd699d155ca", "sighting_of_ref": "indicator--2f170783-6afb-4032-bd01-e9d3f9819276", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bde5009-6fd2-4471-bfb8-1abeec163c8d", "sighting_of_ref": "indicator--3a8fe644-de80-430e-9bfa-a28e9a16fd41", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c00e3d2-64a8-4904-8323-b21cb26b488c", "sighting_of_ref": "indicator--67e51eaa-4710-46c2-889d-397aeeda997b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a80ee935-6112-4d13-9ace-29f2f4f6572e", "sighting_of_ref": "indicator--6b555c84-a009-40d8-98e5-6f9b75d4dbd9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a0130c-ca77-4891-8825-8a3b03b35cbf", "sighting_of_ref": "indicator--2d485064-e6bb-4de4-b2fb-0df851c21910", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ac61d1-a01d-4869-8936-027f3fd74432", "sighting_of_ref": "indicator--9a8c0744-060c-4e0d-adfa-bfe404dd7d0c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6c61b5-00c2-4a79-9825-63e547ef3694", "sighting_of_ref": "indicator--1bbdb142-2175-4d45-bb9c-cff7601b54de", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d90725-6b90-448a-b794-f02a7818e606", "sighting_of_ref": "indicator--1bbdb142-2175-4d45-bb9c-cff7601b54de", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4beda7d-9cfa-4603-abff-769d64527eb4", "sighting_of_ref": "indicator--e6efacb2-ee2b-4512-9d90-42567f6a7279", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e2cf1f-f85e-4ef1-aa09-63bbe9ed0cb9", "sighting_of_ref": "indicator--5d502a75-1021-4df1-afee-b9abb04b36a2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd648f9-2229-492e-9b04-c69bae54f417", "sighting_of_ref": "indicator--efd76746-f1a0-4317-9164-77dbcf81eb26", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f746ea7a-034a-4017-83ad-f808ef23dd34", "sighting_of_ref": "indicator--aa12e9d0-acaa-4524-abf8-ff4fa7c6db86", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22dc3e94-c498-4aa6-97ac-411c22cd8cb4", "sighting_of_ref": "indicator--3df48331-d0a7-4100-a20b-fab0c6ffffa7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a09ebde-d2c3-415f-9050-2b69529bdac9", "sighting_of_ref": "indicator--cb5b29a4-d06f-44a1-b7e4-e9c30cd7a9ec", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf07a706-0d53-4035-ad3a-e7af60d9c541", "sighting_of_ref": "indicator--26d74d60-1da6-4c92-bd5e-bbc6ce5b583a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89fe2f1-870d-46c3-88dd-776a3c3060f0", "sighting_of_ref": "indicator--e0f71b8c-39d9-4917-85b2-c9b96426063a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43fdb2b4-47ec-471d-b8c6-46eb95389666", "sighting_of_ref": "indicator--e0f71b8c-39d9-4917-85b2-c9b96426063a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc2b532-153c-48c3-8c13-4c2d7a0cdb2b", "sighting_of_ref": "indicator--51c71677-1978-43cc-95a3-1c0cd6a8bb43", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71912bbd-f23f-4148-aca7-3b651648e7a0", "sighting_of_ref": "indicator--d8d59943-6241-4ec8-867b-66df9eb10824", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abedb677-59a5-42cb-b061-9618ec33d220", "sighting_of_ref": "indicator--934d6fab-1e7b-4a51-aa34-d918f1c80120", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29bbd73-499f-4a10-b700-8511cc3ffecc", "sighting_of_ref": "indicator--bae82667-3277-4235-8820-50d3e017e1eb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca4e482-bbac-4e57-b7a2-3fcada9c9d5a", "sighting_of_ref": "indicator--2e7eb7fd-1921-465d-b364-46f70e184224", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb0a2e1-1710-4f2d-b566-33d3c1765d52", "sighting_of_ref": "indicator--950274f8-de04-4663-9b5b-88a1b8629625", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7efad7e1-717c-487c-a611-b0c35cd60201", "sighting_of_ref": "indicator--a7de1e90-1640-4c5c-9ad4-600c6b576d05", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ab8aab-ec8e-4f62-9141-182f2b1aa059", "sighting_of_ref": "indicator--4431bd7f-8c9b-4128-bae1-8d230d145db9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--193f2638-318a-4da0-ae72-5b624ca6d3a5", "sighting_of_ref": "indicator--4431bd7f-8c9b-4128-bae1-8d230d145db9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9680898-e796-44db-92d9-2d6e91fecda0", "sighting_of_ref": "indicator--971fc0bb-e8e9-473a-b606-243762832025", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0348031e-22be-4b56-9595-9bc9f6df9043", "sighting_of_ref": "indicator--05494482-44f5-4b4f-8c2d-037851a3e080", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a7f0b2-c01f-4ead-b110-c6f8bb8bcc69", "sighting_of_ref": "indicator--05494482-44f5-4b4f-8c2d-037851a3e080", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2028e391-33f3-41f4-be80-0018c89116f9", "sighting_of_ref": "indicator--05494482-44f5-4b4f-8c2d-037851a3e080", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c76fe026-37c2-491b-a30a-ec1002fe19e2", "sighting_of_ref": "indicator--7a56778b-9cb6-421e-ad63-2d21a34b9bf7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd79cd3a-5b06-4a11-af0d-5c091f97641d", "sighting_of_ref": "indicator--0620e3cf-8f27-4a3d-b5e6-7c89c218aeb4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d00ae97a-8f0e-4769-a455-ec4996067f76", "sighting_of_ref": "indicator--d0a2b89c-baf7-491d-aef4-31f5d7b56972", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbfc3357-227a-49b1-bcf5-359928ea6dbc", "sighting_of_ref": "indicator--1bea04a9-0510-43f5-bc8e-04531f473d60", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc9360e-6052-4e89-8bab-15d099434f30", "sighting_of_ref": "indicator--78737d45-c06b-4ed5-b689-c26c8f2db3f7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fdc2515-f45f-44a4-8ec8-ae9805e56998", "sighting_of_ref": "indicator--980d08a0-9f43-42f8-93df-f07a2f028ade", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5788f71a-95b4-4e19-b262-2cf5ccac7720", "sighting_of_ref": "indicator--980d08a0-9f43-42f8-93df-f07a2f028ade", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b769bf-ca5c-4be7-8151-8c3cda85c57b", "sighting_of_ref": "indicator--e4e8f34d-bec2-4f79-ae0b-f6098885211d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eefe9c41-2111-4935-9d6b-5638a2bf7841", "sighting_of_ref": "indicator--e0c8805a-02c4-4341-8a00-6912f9e0239f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--550317cb-13c2-44df-803f-d3ae8220fc7e", "sighting_of_ref": "indicator--e0c8805a-02c4-4341-8a00-6912f9e0239f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc3843f-c37a-4a03-aeed-7f55e43608e9", "sighting_of_ref": "indicator--422e7a0d-e082-4545-821e-7205803b01fa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e64a1e2-583f-43e1-8b48-fd8c7fe6b894", "sighting_of_ref": "indicator--db8d37d1-793b-4544-8e37-ea298efd3120", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3504e140-e260-4abd-aace-cce80bc33943", "sighting_of_ref": "indicator--21428260-f067-4536-8583-e8397fcc6cc4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f25247f-0990-4fc9-906f-37db989598f1", "sighting_of_ref": "indicator--9c40f687-0a6e-48c7-af09-0c0fa7d808fc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a40e04-0bb0-491c-bfc3-677b7dc78a92", "sighting_of_ref": "indicator--b5074b96-2ec7-429d-a900-8a9b7e2b6e36", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c20179-7265-4182-8048-1f609568b6d9", "sighting_of_ref": "indicator--4c314197-0941-48e5-af75-78c42f825ffd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf0a1df-c963-48f2-bf01-1a89c22dd473", "sighting_of_ref": "indicator--272f9304-6f6c-4f89-8ebb-04a4ab2451eb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f83ac81f-0f6a-465c-8092-aa562cd411c1", "sighting_of_ref": "indicator--272f9304-6f6c-4f89-8ebb-04a4ab2451eb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9e49eb-cc4c-46e5-8fa7-c06f7bcd5ad3", "sighting_of_ref": "indicator--f9127530-669f-49b1-985a-f53a81759c03", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e079f12d-473a-4207-a853-c9593eb1bc2b", "sighting_of_ref": "indicator--1bbc0285-3c63-4b41-84f8-b5f02664312e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb0896c8-c44b-4b85-b31c-bb54d64398ba", "sighting_of_ref": "indicator--1bbc0285-3c63-4b41-84f8-b5f02664312e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce30ed0-e20c-48d7-b1b2-6503027baca4", "sighting_of_ref": "indicator--0eb7859b-36d8-4b79-b848-5d4312201243", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247d8359-351b-4d0f-b98f-c5f4c395b8d0", "sighting_of_ref": "indicator--0eb7859b-36d8-4b79-b848-5d4312201243", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a535d288-95ac-4bd5-ae8a-42d1ff278c91", "sighting_of_ref": "indicator--bd81a025-9136-42f0-9eed-48c6a2b88790", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1869601f-0acc-485a-91ce-015d20a3f986", "sighting_of_ref": "indicator--bd81a025-9136-42f0-9eed-48c6a2b88790", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e27c47-5f00-4525-8b3b-8ea9724ac322", "sighting_of_ref": "indicator--c157a8d9-315c-4e7a-84c9-fd6cb8d1457d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c3e8c3-a5c0-4edc-a4cf-f7f071333eed", "sighting_of_ref": "indicator--75eea4c8-8273-4bc9-a429-c681d3871d5e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d421e280-c110-4791-9833-33a912f889be", "sighting_of_ref": "indicator--2250e33f-f1eb-4289-951f-ae45aeb13a97", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c150450-06d3-4f53-bdb9-7e7fd999bc1d", "sighting_of_ref": "indicator--a49e2ab9-bb1d-4e35-8469-5d96a72c4895", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5109220f-9261-4a9b-bb22-1bee23f03be0", "sighting_of_ref": "indicator--567e39e4-9451-45d4-bed1-4017923c5052", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8a5fd6-e8f7-4cc4-8d95-798b1d47248b", "sighting_of_ref": "indicator--60ee3133-44c6-4f49-a09c-b84872578d24", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a607299-59ff-46c2-bafe-47b9ba203261", "sighting_of_ref": "indicator--1a9d4b93-b047-434f-8f78-8d89d43b70e1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba3cc1e-1d7b-459c-a2e8-e1e6cfd96729", "sighting_of_ref": "indicator--1a9d4b93-b047-434f-8f78-8d89d43b70e1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94dbe87d-f2e6-4ca8-88b2-b787f53de6be", "sighting_of_ref": "indicator--3ec0e010-0a4d-4e1a-ae9c-242571fcfb53", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c43cdc-020d-42dc-a40d-a7d75eafb208", "sighting_of_ref": "indicator--193a330a-fb40-400a-b152-29f7d5a68740", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1764bda-1e3f-406d-b28f-2b135a976a8f", "sighting_of_ref": "indicator--6612383c-c75b-4cc3-a6cd-168a065a93fa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c719a6-7fad-49c7-8b53-14ad3bbf860b", "sighting_of_ref": "indicator--2e83156e-0ee3-4f99-abbb-3e51b7961491", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7224483-d853-405d-a5d9-6d5dd2bd7644", "sighting_of_ref": "indicator--2303039f-669d-494c-b8de-49668222b600", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527baf77-fd01-4f8a-ade7-e026b306b6ef", "sighting_of_ref": "indicator--02ffa4df-7563-4482-8a7a-a81edd5aa903", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--414e377d-c8bd-4740-907b-b1be5444e0e1", "sighting_of_ref": "indicator--6308fa96-adc5-45e2-bf17-f0838b878ac0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f4703c4-7d18-4665-a7be-ea6c60948df6", "sighting_of_ref": "indicator--7c77b30f-eb47-4515-b940-16d7d2b6a2bb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9808ddd9-9b2e-4bc1-9458-4efef62abe6c", "sighting_of_ref": "indicator--7c77b30f-eb47-4515-b940-16d7d2b6a2bb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--703d446d-5a88-42a4-bc10-00fd9db46b4b", "sighting_of_ref": "indicator--dc8236e0-4e3d-4c62-bd58-8f46ef53aa52", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--364b467e-0381-43bd-bfab-d097da22aa51", "sighting_of_ref": "indicator--a3cbe6e4-135f-4bc2-86d9-83b81948c6db", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c641fbd-011b-4065-b00a-6d8541442735", "sighting_of_ref": "indicator--be5179ad-e9b8-4cef-99f5-861f5f390392", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63bcb713-112a-422f-98f8-262962165069", "sighting_of_ref": "indicator--5310fe0c-c7ec-4146-b806-f414fc0a54c7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f41143-d82e-4e16-8a20-f56384f64680", "sighting_of_ref": "indicator--89e6acd7-2eae-49b8-b36a-56a2f47ec5a5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a850c63c-36fa-41f2-b4b0-e431b93d2326", "sighting_of_ref": "indicator--89e6acd7-2eae-49b8-b36a-56a2f47ec5a5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4f9355-cc48-41de-8253-7d44d91389ec", "sighting_of_ref": "indicator--89e6acd7-2eae-49b8-b36a-56a2f47ec5a5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e88a66-aa8d-417d-935e-20596b81cdf7", "sighting_of_ref": "indicator--a1c64199-43ce-477d-9c68-48b8bb241544", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c6f374c-9a01-4897-9049-295eae7328c5", "sighting_of_ref": "indicator--b585427a-f9fb-405d-aa26-84a6af53f2e2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3808ff84-0bb4-4f72-903f-3fa5d09efb7d", "sighting_of_ref": "indicator--b585427a-f9fb-405d-aa26-84a6af53f2e2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a662aaa-c136-4ea5-ab6d-21f83b4a43f4", "sighting_of_ref": "indicator--b585427a-f9fb-405d-aa26-84a6af53f2e2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3cf69d5-d4e9-4e54-a585-799f02f25d3e", "sighting_of_ref": "indicator--e11c5d82-f284-4c96-987e-ba226a8480d1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb1a62b-881c-4690-b3aa-ed2a3fdde180", "sighting_of_ref": "indicator--e11c5d82-f284-4c96-987e-ba226a8480d1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a355728-165d-4edf-8624-0163ce469940", "sighting_of_ref": "indicator--e1760ef5-bccc-4ec4-b1e8-c57e261d6ef8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--147c3a6e-bdfd-495a-8572-526c356a1b59", "sighting_of_ref": "indicator--804ec31a-e39b-4ce8-b010-1bd866816e63", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f8f1bae-2130-4aec-8ad5-bd3d10c0cdb9", "sighting_of_ref": "indicator--ee135ee4-fc25-406f-815a-963b370261ad", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--684c74e2-e505-4ee4-9ead-b22212c7268d", "sighting_of_ref": "indicator--da5dc1e3-5e68-452f-9301-86d2080aa1b3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b362ea6b-2947-4fbd-996e-92c0b90d0ef5", "sighting_of_ref": "indicator--7ff32baf-b240-467a-bc6c-83f648dfca84", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19839962-f6db-4e83-9e59-db40ff764432", "sighting_of_ref": "indicator--7ff32baf-b240-467a-bc6c-83f648dfca84", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da285242-ce2b-4873-b1bd-7f827b52f3d7", "sighting_of_ref": "indicator--7ff32baf-b240-467a-bc6c-83f648dfca84", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c4da52-ca8b-466c-93f1-633bd19afcdb", "sighting_of_ref": "indicator--e98491f6-8b44-49e6-98ba-85b2c504e804", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e64a7427-b58e-4363-81f6-ff9c1237a8da", "sighting_of_ref": "indicator--e98491f6-8b44-49e6-98ba-85b2c504e804", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42bfcf1b-7950-4d81-bf32-dab3ccc38686", "sighting_of_ref": "indicator--8fd12580-9966-4ed7-994c-3fb506072035", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a7f273-32c3-473f-9246-a360cfafda99", "sighting_of_ref": "indicator--8fd12580-9966-4ed7-994c-3fb506072035", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f4eb22-3ca3-4a47-8e3d-e003f795b304", "sighting_of_ref": "indicator--8fd12580-9966-4ed7-994c-3fb506072035", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb826ac9-0e41-480b-9f17-0b00ae7389f3", "sighting_of_ref": "indicator--25ab312e-625d-4991-a189-bb63e89e80b4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868a82d9-87d5-4654-9fc1-52fab19ebda4", "sighting_of_ref": "indicator--25ab312e-625d-4991-a189-bb63e89e80b4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61cfebe8-ed48-4102-9384-b3cac3d17913", "sighting_of_ref": "indicator--5d273a84-0948-410a-91df-5301f70d9114", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c822d0-ccaa-4123-bf21-cc7527bd6fa2", "sighting_of_ref": "indicator--5d273a84-0948-410a-91df-5301f70d9114", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f88759ac-424b-4aca-bcda-48287f5aacf2", "sighting_of_ref": "indicator--5d273a84-0948-410a-91df-5301f70d9114", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2cd6084-ab75-4ec7-966a-a828e4deade5", "sighting_of_ref": "indicator--db97c831-6681-4e4a-b6e5-74487847e553", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f3c1ff3-beb7-49f6-ba44-6afc63a28d69", "sighting_of_ref": "indicator--db97c831-6681-4e4a-b6e5-74487847e553", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8d7572-96aa-425f-a684-c329c391301d", "sighting_of_ref": "indicator--db97c831-6681-4e4a-b6e5-74487847e553", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3114bcb-b9e3-4b90-ac2a-1b1a8b0bf3b7", "sighting_of_ref": "indicator--70a3a98d-8d8f-42c0-9261-4d5d5ceb73ab", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b7be7e-70ae-4869-b591-9ddff866d708", "sighting_of_ref": "indicator--70a3a98d-8d8f-42c0-9261-4d5d5ceb73ab", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--565dd652-d28a-4595-b83d-65bdd56a272c", "sighting_of_ref": "indicator--70a3a98d-8d8f-42c0-9261-4d5d5ceb73ab", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef51d514-d968-49b2-be03-39bb8e7c49f4", "sighting_of_ref": "indicator--dcb03661-7b14-473d-bda3-5c6045c102ac", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec68fd04-3d1c-4acd-ac41-0d0cb986b4f4", "sighting_of_ref": "indicator--dcb03661-7b14-473d-bda3-5c6045c102ac", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd8b99b-98d1-4035-bd5d-366abb420b4c", "sighting_of_ref": "indicator--dcb03661-7b14-473d-bda3-5c6045c102ac", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0697086f-e7e4-41a0-9dcd-8ca9738bb44d", "sighting_of_ref": "indicator--c03b8188-a00a-4287-9caf-757160559bad", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175ce1b4-7442-4629-b612-4082ce1ad6e1", "sighting_of_ref": "indicator--d6c7b8f6-b8b2-45df-b7a6-099c941195e5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de06f00e-bc46-48c1-a93d-f3626f5796db", "sighting_of_ref": "indicator--d6c7b8f6-b8b2-45df-b7a6-099c941195e5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4bbf186-a5d8-4320-bae2-8ed3912d534a", "sighting_of_ref": "indicator--d6c7b8f6-b8b2-45df-b7a6-099c941195e5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b084c2-8191-4ab5-9a0a-17114e7373f9", "sighting_of_ref": "indicator--d86eeb64-59bb-449f-86bb-9c1ca0317ebd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff4be8d0-81b0-40dc-b5a0-4332ef7452e2", "sighting_of_ref": "indicator--d86eeb64-59bb-449f-86bb-9c1ca0317ebd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f12382-a9bf-40f1-b4a7-69108b871f31", "sighting_of_ref": "indicator--2fa736f6-1362-4623-ad4b-362d2e102587", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267df8eb-63fa-4b93-ae35-84a652169c05", "sighting_of_ref": "indicator--21fef60f-08e7-4a04-82cc-f49344580d52", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc533d4e-db22-4fd4-8c15-ff3e6aa3113c", "sighting_of_ref": "indicator--21fef60f-08e7-4a04-82cc-f49344580d52", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0873550f-0d66-4a4b-b015-65d4ae02993a", "sighting_of_ref": "indicator--21fef60f-08e7-4a04-82cc-f49344580d52", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e55e74-0d8a-4b77-b1e8-e52139cdfc82", "sighting_of_ref": "indicator--e6bda607-2fde-4b4b-865e-d0b2939d62f9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169d64a4-e4e6-4e52-b269-6435c6783156", "sighting_of_ref": "indicator--e6bda607-2fde-4b4b-865e-d0b2939d62f9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c99d88-ce03-4c98-937a-62cba38af39a", "sighting_of_ref": "indicator--00980de2-a5c6-4e6c-a0d0-e0158926132f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f17a4e-03bf-4eb6-b76d-62f020515a04", "sighting_of_ref": "indicator--0fa8031e-d960-4866-a160-eea8050f0e3a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bff0ca4-46a3-4cbc-a52c-66f556497ed9", "sighting_of_ref": "indicator--0fa8031e-d960-4866-a160-eea8050f0e3a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d798458b-4596-467b-a7cf-2a19d55fc52b", "sighting_of_ref": "indicator--0fa8031e-d960-4866-a160-eea8050f0e3a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a795c4-47e4-475a-96b9-ba30682bdb23", "sighting_of_ref": "indicator--df1f9586-70c6-4240-a3f5-218e756a441e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a847fe08-e871-47f2-9610-74a5c119b1de", "sighting_of_ref": "indicator--0202f812-1905-417a-b463-69f999d13624", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a6af64-9ed2-4cb9-86c9-ca06c1692da3", "sighting_of_ref": "indicator--bbaece49-54a4-45c1-a644-120d69295281", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebeef9d2-6050-40b7-9a4c-8321802496ed", "sighting_of_ref": "indicator--bbaece49-54a4-45c1-a644-120d69295281", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6154264-df89-4a7f-8e30-f6afc2a7d2c7", "sighting_of_ref": "indicator--08741db4-6a98-4571-9d9a-8601bc830e52", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1f8f3c-85eb-49be-b39b-8fcaa1e5cffd", "sighting_of_ref": "indicator--df580f5e-2e34-4a5b-b916-9ef83884568d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e84d34f-370b-47a0-bb3d-d7db75c4bbbd", "sighting_of_ref": "indicator--df580f5e-2e34-4a5b-b916-9ef83884568d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64dde84e-9ba7-4228-8d14-f4ece6423d36", "sighting_of_ref": "indicator--df580f5e-2e34-4a5b-b916-9ef83884568d", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06574fff-905c-4bc1-ad1d-4708ab479d2f", "sighting_of_ref": "indicator--e3d64889-a1d3-459f-bc94-d9be00c447b6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9bdebd3-0c7c-44df-a01c-06cf8560073e", "sighting_of_ref": "indicator--8d56442a-33c3-418c-86b8-f50450dd1004", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d35b508-4038-4cb7-a454-16a5684c09cf", "sighting_of_ref": "indicator--8d56442a-33c3-418c-86b8-f50450dd1004", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f60665-fb32-4e65-8c9a-66638ccfdc12", "sighting_of_ref": "indicator--8d56442a-33c3-418c-86b8-f50450dd1004", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d464f4-1f1a-4724-8284-bd1de276b3ac", "sighting_of_ref": "indicator--0878a363-344d-444a-9e5a-8bcf506a9a84", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75cc0143-0413-4f74-a281-e6f3ee91f2f0", "sighting_of_ref": "indicator--0878a363-344d-444a-9e5a-8bcf506a9a84", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5552b8ff-9268-4e58-81ce-4c3fef4aa5d9", "sighting_of_ref": "indicator--0878a363-344d-444a-9e5a-8bcf506a9a84", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c21f0f-84f7-49ef-845a-28ff53f0c3f3", "sighting_of_ref": "indicator--757c42df-a55e-40a4-a003-45899e97a84b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b92cca2c-ada9-4376-bf78-cff54726d372", "sighting_of_ref": "indicator--757c42df-a55e-40a4-a003-45899e97a84b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b22df20d-7e36-4386-8df2-793f1a9328ff", "sighting_of_ref": "indicator--5c040346-8c6a-4f09-877b-cc9ad3c5f940", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd191cb4-a9c7-4f71-91df-9f2c12e2a88a", "sighting_of_ref": "indicator--5c040346-8c6a-4f09-877b-cc9ad3c5f940", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac2a183-9ac8-4113-ba3b-294b7189d584", "sighting_of_ref": "indicator--5c040346-8c6a-4f09-877b-cc9ad3c5f940", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53164636-5c2b-4be8-969e-3c441d6d7982", "sighting_of_ref": "indicator--7a455fcb-166b-419d-a833-287b4102fa5b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5645f1fc-5c93-4bea-878c-4104ded426ae", "sighting_of_ref": "indicator--7a455fcb-166b-419d-a833-287b4102fa5b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a3dfce-bd58-415e-96c2-49bd3e11444a", "sighting_of_ref": "indicator--7a455fcb-166b-419d-a833-287b4102fa5b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983cba91-eace-418f-9da4-4f386cd708a5", "sighting_of_ref": "indicator--ec247655-f35d-4db4-905b-a706f643e256", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20a595d-eceb-4a8a-b79e-365fd14d9c5a", "sighting_of_ref": "indicator--82282625-6bd9-4fb2-89f5-29e8f0e5015c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a989a40-829d-488f-b627-70b13382cb53", "sighting_of_ref": "indicator--82282625-6bd9-4fb2-89f5-29e8f0e5015c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018e2569-af6e-4c3b-893e-115bf6405117", "sighting_of_ref": "indicator--82282625-6bd9-4fb2-89f5-29e8f0e5015c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f428d9a5-a927-4f6b-879d-6418cec637d6", "sighting_of_ref": "indicator--17ab2aa6-b47f-4b2e-b027-816ca51e5c83", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a878cf2b-4a1a-41c0-abda-bad2b851ad7f", "sighting_of_ref": "indicator--17ab2aa6-b47f-4b2e-b027-816ca51e5c83", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aeb4ca2-7ca7-42d5-b875-063e5191b82b", "sighting_of_ref": "indicator--17ab2aa6-b47f-4b2e-b027-816ca51e5c83", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51cd7b83-43dd-42a9-8fe7-2c8d23ac794f", "sighting_of_ref": "indicator--91c17e0d-8ee2-4f44-b05b-ae24f557e1ec", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3718c64e-ae24-4428-9aa5-c38927e52afc", "sighting_of_ref": "indicator--91c17e0d-8ee2-4f44-b05b-ae24f557e1ec", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa21631-d438-4e98-840b-3b4a2326e68c", "sighting_of_ref": "indicator--36a4f289-8a3d-4cc1-a2e3-25f60b62dac9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20393fd0-2598-4d5a-890b-91f22c46f7c8", "sighting_of_ref": "indicator--36a4f289-8a3d-4cc1-a2e3-25f60b62dac9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c194c1a1-be0f-4d97-8e7c-104208e51547", "sighting_of_ref": "indicator--482c0da0-c259-48fd-91d2-cd222d21be32", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2430f51-f523-45d1-9f64-28e62b3e6911", "sighting_of_ref": "indicator--482c0da0-c259-48fd-91d2-cd222d21be32", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4870ebc-b625-498e-a27c-d1b29582c000", "sighting_of_ref": "indicator--482c0da0-c259-48fd-91d2-cd222d21be32", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1bd7ce1-49ee-4a3f-817f-30ec63ec3e71", "sighting_of_ref": "indicator--0dbc2105-f95b-43bd-be2b-126ae8038cf0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e22f2e5-2258-40f8-a020-1e6b8898d59f", "sighting_of_ref": "indicator--0dbc2105-f95b-43bd-be2b-126ae8038cf0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c85cfa0d-20ef-44e9-a998-9cd0ecb6dcf1", "sighting_of_ref": "indicator--0dbc2105-f95b-43bd-be2b-126ae8038cf0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7171883d-b9f5-47b1-a891-3891e46ad89c", "sighting_of_ref": "indicator--ac202ac7-e1d9-4659-87e7-080b35a2ffd0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3987df-0033-446b-8aac-990db1bf4da0", "sighting_of_ref": "indicator--ac202ac7-e1d9-4659-87e7-080b35a2ffd0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0205305f-4f64-4d39-9693-f66cc3da7711", "sighting_of_ref": "indicator--ac202ac7-e1d9-4659-87e7-080b35a2ffd0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0e3a7d-9ba2-4892-a2f2-70c34b29e9a0", "sighting_of_ref": "indicator--4e22c372-785b-4a6f-90b1-b8220a164d0a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2cdebf9-c86a-46e9-af11-39be5fbbf2ca", "sighting_of_ref": "indicator--4e22c372-785b-4a6f-90b1-b8220a164d0a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0e9dcd-ee82-4bf0-8527-de189466426e", "sighting_of_ref": "indicator--814cd59f-39b5-4ac4-8308-8699cbcf49e3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abdffb79-099f-4a69-9bc6-edf0cbd5afbf", "sighting_of_ref": "indicator--814cd59f-39b5-4ac4-8308-8699cbcf49e3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--224583cb-6535-4baf-868e-4686c470a453", "sighting_of_ref": "indicator--be92b504-87d0-43ed-9496-8089cba009ef", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a39b35cf-80a8-428a-b8ad-1d065cc577bd", "sighting_of_ref": "indicator--be92b504-87d0-43ed-9496-8089cba009ef", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1d1067-9b4c-4b56-b9eb-5952d39eaa7e", "sighting_of_ref": "indicator--300d3b16-a77b-44d5-b55b-456485077657", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca576e5d-3332-486c-ab4c-80c5b5d5462a", "sighting_of_ref": "indicator--300d3b16-a77b-44d5-b55b-456485077657", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--680f8b84-aa19-4b02-addb-4d87ed2fd71e", "sighting_of_ref": "indicator--300d3b16-a77b-44d5-b55b-456485077657", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c69d52a-e950-488f-8cbd-ccc17300f63a", "sighting_of_ref": "indicator--696aa6e0-739f-457c-86d1-b0290edf2b0f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf13d8e-1a21-4e67-b18a-8c745c998308", "sighting_of_ref": "indicator--565e6b7f-0657-407c-9a90-c0a7df07061b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f97f1c-fe9e-44c7-8aa8-2b4538f0aff5", "sighting_of_ref": "indicator--268180a3-0f16-4873-9ef2-a404a1923e10", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd00ede9-888c-4f7f-8489-42e117228a92", "sighting_of_ref": "indicator--a2cd956e-e11e-4d5c-998e-27c9b73b1a70", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9910b1f3-09bd-4379-abac-d2490670e822", "sighting_of_ref": "indicator--3a0750b7-fa3d-42af-9c1c-bd09d4333e92", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d40af472-d42a-4cb6-9766-29d61492c788", "sighting_of_ref": "indicator--73ff8102-3757-4137-aef0-0f11eb7caed6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92be0e2b-3ee0-4d69-9aaf-6401368ce625", "sighting_of_ref": "indicator--ba3265b1-3929-46ee-99d5-2e31e1f191e5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--138e2d56-774d-4358-91e5-a8c24b6b02ee", "sighting_of_ref": "indicator--ba3265b1-3929-46ee-99d5-2e31e1f191e5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564b9b52-42cd-4be2-b499-262542da6733", "sighting_of_ref": "indicator--9e3bf29e-2abf-4255-86da-b9b6eb780b69", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e6ded9-2faa-4225-96c0-1efa141b2f48", "sighting_of_ref": "indicator--87edc892-5c4f-44a3-bee4-5f28a8a45cba", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--763f1e43-7735-44b9-8297-455b5ee72ffe", "sighting_of_ref": "indicator--87edc892-5c4f-44a3-bee4-5f28a8a45cba", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d0b0a0-f458-487c-9ef3-fce16a81c497", "sighting_of_ref": "indicator--318fb024-971d-4ed8-b562-389bc7e13373", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772431a0-4737-48ca-8b92-b4f09cbff603", "sighting_of_ref": "indicator--5cd597b6-64d8-4e54-b8d3-ae1cefe0e0f6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d953a018-5d84-455d-bccd-697b6470ff1a", "sighting_of_ref": "indicator--950a70c7-da46-4124-9183-ad31ff7ac05d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d8380f-52f1-413f-8570-6c5df33a58c8", "sighting_of_ref": "indicator--950a70c7-da46-4124-9183-ad31ff7ac05d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f414c243-96ff-4e34-bd39-563a132cfc69", "sighting_of_ref": "indicator--c1312da7-2df3-4d40-a86b-f2eed17693f5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58df5600-26c2-4230-8098-476c216fa4f0", "sighting_of_ref": "indicator--c1312da7-2df3-4d40-a86b-f2eed17693f5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996ccc02-8ec6-4588-b576-1daccb29fc1b", "sighting_of_ref": "indicator--901c526f-cfa4-47bf-8dee-9b614ef7636f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e404e3-e34c-454b-be0f-3d6f03e7fe14", "sighting_of_ref": "indicator--18cb6630-3815-435f-945e-5417f4a193c9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21417873-25a2-4354-8d90-437596258aa5", "sighting_of_ref": "indicator--18cb6630-3815-435f-945e-5417f4a193c9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0697ee8f-9633-4dbc-ac92-69abb7a88e06", "sighting_of_ref": "indicator--18cb6630-3815-435f-945e-5417f4a193c9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--135567bb-1e32-47a6-90bc-d49d5609c7cb", "sighting_of_ref": "indicator--67484fb3-43a1-4020-8a2a-297e9640c2d3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e36f0632-1a4c-4760-bb31-930b996d8b2f", "sighting_of_ref": "indicator--67484fb3-43a1-4020-8a2a-297e9640c2d3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3199fedc-5a95-42b1-bd52-619e91dade58", "sighting_of_ref": "indicator--67484fb3-43a1-4020-8a2a-297e9640c2d3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8baf36-e140-4fe5-892e-d49ba97b7882", "sighting_of_ref": "indicator--05805c57-10b3-4339-824a-630c0a9ac5d6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3362e8d4-ba09-417b-9b8e-f68c76c07411", "sighting_of_ref": "indicator--05805c57-10b3-4339-824a-630c0a9ac5d6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ca1c9f-1ae1-4e42-afcd-89cca4ed7b6c", "sighting_of_ref": "indicator--81e4a6a9-a368-4a4b-8f69-b9ba7ae42d3b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72d4b6fb-beea-4cc2-9303-8aa325db802d", "sighting_of_ref": "indicator--81e4a6a9-a368-4a4b-8f69-b9ba7ae42d3b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e6713a-0a2b-4de8-b390-695bceabea09", "sighting_of_ref": "indicator--81e4a6a9-a368-4a4b-8f69-b9ba7ae42d3b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb002005-43a2-4b91-8cf4-5a1285fd7def", "sighting_of_ref": "indicator--ba735618-7856-4a07-81bc-8ecf28177af0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efba2900-25db-42ca-adae-c0fceb1c2ad8", "sighting_of_ref": "indicator--ba735618-7856-4a07-81bc-8ecf28177af0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82cb27ca-bbd4-433a-b09a-b96346a15ad2", "sighting_of_ref": "indicator--1e11f01d-7414-4dd3-b089-f0cc6e4d4250", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b83b5708-a439-4d73-ad39-063997b3b07c", "sighting_of_ref": "indicator--1e11f01d-7414-4dd3-b089-f0cc6e4d4250", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e54c4e-2207-42c2-b925-c162ef42b4c7", "sighting_of_ref": "indicator--1e11f01d-7414-4dd3-b089-f0cc6e4d4250", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ce530f-9b5c-4daf-8dae-5213c85fa186", "sighting_of_ref": "indicator--454aca18-cdba-41d9-a8a4-7671214956b4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81de3052-24da-414f-9c27-9212ec0c80ba", "sighting_of_ref": "indicator--454aca18-cdba-41d9-a8a4-7671214956b4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70fd406d-c700-47fc-9c11-06819ca6f5ad", "sighting_of_ref": "indicator--b9bbf4e4-111f-4b5c-824a-32fe86964add", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba2ba3d9-55aa-47b2-b40d-967135cfebd3", "sighting_of_ref": "indicator--b9bbf4e4-111f-4b5c-824a-32fe86964add", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419b5a85-1cc5-485e-8ae3-58ac0d90ee79", "sighting_of_ref": "indicator--b9bbf4e4-111f-4b5c-824a-32fe86964add", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ad6f75-cdf1-4942-a978-b0ebf7a6002c", "sighting_of_ref": "indicator--e1bef495-9a13-42f5-83e7-92298ce1f9e3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b98b233a-d5f6-47d9-a44c-0d86582f66e5", "sighting_of_ref": "indicator--e1bef495-9a13-42f5-83e7-92298ce1f9e3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c49527dd-a043-44da-8894-7801498d3bf2", "sighting_of_ref": "indicator--ac30190f-a7f3-48a8-af87-74e8706dac2d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6889b4a9-c020-46d5-8687-009432921da9", "sighting_of_ref": "indicator--ac30190f-a7f3-48a8-af87-74e8706dac2d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7755833d-57db-43ba-b214-636b5eacdae8", "sighting_of_ref": "indicator--ac30190f-a7f3-48a8-af87-74e8706dac2d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdda6ec7-0cbd-45bc-92c9-caee47b77f9f", "sighting_of_ref": "indicator--f2d66090-156e-477e-bda7-f9fdeb29795e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a438f0d-2c51-4538-88f9-f783446f4cc7", "sighting_of_ref": "indicator--f2d66090-156e-477e-bda7-f9fdeb29795e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82362bb-3909-40eb-bca9-15fa1d8f9714", "sighting_of_ref": "indicator--22539d96-b660-4a6b-a47b-abebfc1c8a25", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--645630f6-9fa6-49d1-be54-57c5daa55f0d", "sighting_of_ref": "indicator--22539d96-b660-4a6b-a47b-abebfc1c8a25", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e61257cb-8085-4ad6-9633-8215da6b0a70", "sighting_of_ref": "indicator--22539d96-b660-4a6b-a47b-abebfc1c8a25", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9875af62-4f53-47e4-8b5a-73a0551117a1", "sighting_of_ref": "indicator--4963c903-002b-4823-8612-dda210df6d2b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f7e10f-222c-4bcb-9f0e-3949fc0224bd", "sighting_of_ref": "indicator--4963c903-002b-4823-8612-dda210df6d2b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd840b4-d8f6-4f3b-a0d4-e60bfa621983", "sighting_of_ref": "indicator--22d986c8-b4b6-4bb8-b234-a47790058637", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225836d8-5c44-4be3-95fa-c46f972dcf42", "sighting_of_ref": "indicator--5c6ef979-4261-496a-be5d-e6cde9caa179", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8178cd67-0f03-4a81-99a0-726d112ea6b7", "sighting_of_ref": "indicator--fd03e4db-cc14-491c-96d2-a574acbddbcf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3104732-dc6d-4bc8-ba35-17bd07df8c72", "sighting_of_ref": "indicator--65343876-58e7-4ac8-b3a9-0fed59b755b9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6b1892-22a5-4c47-8c68-c3a6147d6f39", "sighting_of_ref": "indicator--2a56574b-291a-464e-a0dd-43d9d33de410", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb58dab-4e88-4782-904e-ab17715c7488", "sighting_of_ref": "indicator--5d420dde-2594-4296-828f-5c1f03aa997e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676332c5-4b39-40b7-927c-557762fae27b", "sighting_of_ref": "indicator--eaf91036-6a52-4bec-8473-8ca2faf86201", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b022990-7316-422c-9821-1679df7dffaa", "sighting_of_ref": "indicator--0918b8e5-bd5d-4bdd-b539-37aa51baa451", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f16f4f-093d-4ac9-8715-d663a08a936f", "sighting_of_ref": "indicator--ada27b80-7edf-44c8-937d-6daec44d3941", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf033af1-b593-4bf7-94df-8156f9e1c708", "sighting_of_ref": "indicator--ada27b80-7edf-44c8-937d-6daec44d3941", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ccf27ed-2ea3-4de2-ab83-89e88228ea60", "sighting_of_ref": "indicator--a77d4665-f44d-4356-a5f0-faf3aa23ebfe", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa51e5b-fa81-4443-9f0c-d5dff741fd7a", "sighting_of_ref": "indicator--a77d4665-f44d-4356-a5f0-faf3aa23ebfe", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03593599-a387-4830-9d03-bbc5fc32a4cf", "sighting_of_ref": "indicator--a77d4665-f44d-4356-a5f0-faf3aa23ebfe", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070e11da-1793-4b33-91a2-d9424667fab6", "sighting_of_ref": "indicator--10925968-8d24-4756-8391-74d2b61f2858", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01177f20-2f60-4658-87cd-65a379011ac0", "sighting_of_ref": "indicator--10925968-8d24-4756-8391-74d2b61f2858", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfbd0fac-98b3-44bb-a376-31f65439c07e", "sighting_of_ref": "indicator--10925968-8d24-4756-8391-74d2b61f2858", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf26d2e7-2de9-41eb-bbcc-0b21634250b7", "sighting_of_ref": "indicator--cfe7d13e-21ba-4ea6-bed8-4c36bed9530f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0295e497-7f24-42d6-b9e2-3df8e12e048c", "sighting_of_ref": "indicator--cfe7d13e-21ba-4ea6-bed8-4c36bed9530f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d141cd2-abaf-4177-8212-51a80f1b9f84", "sighting_of_ref": "indicator--cfe7d13e-21ba-4ea6-bed8-4c36bed9530f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5273dcb3-ede2-4d53-93f4-65c4eb30845d", "sighting_of_ref": "indicator--8e67c21b-0396-4035-9bc5-a9d0ac5695c6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c42c79-f96b-43c1-bc67-d302bead49f0", "sighting_of_ref": "indicator--8e67c21b-0396-4035-9bc5-a9d0ac5695c6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0192dd-ecfb-43fb-b9e9-3463c1882f40", "sighting_of_ref": "indicator--8e67c21b-0396-4035-9bc5-a9d0ac5695c6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9bc05ad-8023-413d-9159-ba76b6635a45", "sighting_of_ref": "indicator--1a875f88-b7f3-4772-a61b-f3563b5df4d6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8de4c4-ad10-401e-af1a-1116b1358d4d", "sighting_of_ref": "indicator--2171a2c7-48ac-4653-8796-b9507e184c31", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68869f1-d759-4098-af5a-373dcdfeb80c", "sighting_of_ref": "indicator--2171a2c7-48ac-4653-8796-b9507e184c31", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28132d9a-d2b6-4e78-b5ee-1e625df7ea84", "sighting_of_ref": "indicator--46561221-716a-4ac5-bc41-5b0fffd29ab2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d140478f-c7f5-4417-8a84-ccc553f685ca", "sighting_of_ref": "indicator--46561221-716a-4ac5-bc41-5b0fffd29ab2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b37a43a9-ce63-405c-b9ad-9d9d4bf25944", "sighting_of_ref": "indicator--46561221-716a-4ac5-bc41-5b0fffd29ab2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e150550-d177-4942-9b69-18d95c490080", "sighting_of_ref": "indicator--9fc96baf-3b5c-492d-8f49-f1aca1eb4be7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3b5930-cde9-4c4a-9e8e-de0d32ab0802", "sighting_of_ref": "indicator--9fc96baf-3b5c-492d-8f49-f1aca1eb4be7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac0fbfad-8003-4462-91b1-0830b9219681", "sighting_of_ref": "indicator--9fc96baf-3b5c-492d-8f49-f1aca1eb4be7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--754042ac-2c90-48e7-a6bc-92f7abffa8c7", "sighting_of_ref": "indicator--b18d4c7b-6131-479a-961f-5954497148d1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2172ba-f602-45e2-a7e2-62b94cea9364", "sighting_of_ref": "indicator--b18d4c7b-6131-479a-961f-5954497148d1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37c28a6-b031-420d-9fe0-35be7e78731b", "sighting_of_ref": "indicator--b18d4c7b-6131-479a-961f-5954497148d1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66140fe3-ed48-4e70-8fc9-a35aa26a271d", "sighting_of_ref": "indicator--a4a3276f-1928-4c77-a31b-47d6c1bf78c6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60233b9-2eec-4c1b-8843-2b4434b1bc97", "sighting_of_ref": "indicator--a4a3276f-1928-4c77-a31b-47d6c1bf78c6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a34a2c-c2ed-4e67-af6a-b12115ac9883", "sighting_of_ref": "indicator--a4a3276f-1928-4c77-a31b-47d6c1bf78c6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc32af0-ea75-442c-b6f1-5e9fce4e4538", "sighting_of_ref": "indicator--ad227b57-d4ba-4593-b54d-7d8265339369", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--277c5456-2c00-4ad4-bbb2-b44f8f5b4661", "sighting_of_ref": "indicator--ad227b57-d4ba-4593-b54d-7d8265339369", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd5d944-7bc0-4e3d-a598-d97afd351473", "sighting_of_ref": "indicator--ad227b57-d4ba-4593-b54d-7d8265339369", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d130cccc-a4f1-4e1d-b0a7-f02bce47e9aa", "sighting_of_ref": "indicator--c01845dc-2e24-4bc8-9a03-585a3ec368de", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c786ab3b-2dc3-4371-a84e-a3e21ff10757", "sighting_of_ref": "indicator--e26b5d20-f35f-4f2d-bbe3-ea0b44cd08a3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda2b065-0970-4e6e-93ae-7a2c8af0b951", "sighting_of_ref": "indicator--e26b5d20-f35f-4f2d-bbe3-ea0b44cd08a3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef818558-ff9d-4452-80d5-1668dd6a66cc", "sighting_of_ref": "indicator--d66b488c-0dfd-41ec-bf0b-3d3039542f63", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c4aedbf-825d-4099-95f8-5fbdb67bfffa", "sighting_of_ref": "indicator--d66b488c-0dfd-41ec-bf0b-3d3039542f63", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8685098e-02f8-4bea-a997-2a05f051220c", "sighting_of_ref": "indicator--a43064a3-7146-471e-bab6-806c62b65aed", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055818a4-42b2-4f0b-b576-1b8bf2560022", "sighting_of_ref": "indicator--a43064a3-7146-471e-bab6-806c62b65aed", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba0ec51-8026-4915-bb05-51e73a56f313", "sighting_of_ref": "indicator--f30fc658-8b69-4a83-ba88-0024656e0338", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79fda3c3-3637-48fb-9e61-cdb01ac52943", "sighting_of_ref": "indicator--f30fc658-8b69-4a83-ba88-0024656e0338", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8382ee22-6ee0-466c-9294-6cc8d13b5580", "sighting_of_ref": "indicator--fc571a15-299d-4c8d-9eff-eb9754196dfb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007949ac-9740-43f5-b7ab-4fa41f0726e5", "sighting_of_ref": "indicator--ec173a10-d95a-4ac4-ae1d-984d9cef08aa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5449473-fbd1-47f9-89e8-4b10a044ed90", "sighting_of_ref": "indicator--e26e39a9-b3ca-49f1-8cc6-915cb2ee5a1e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf513df-9fe2-48ab-92a6-3bf649a7acc8", "sighting_of_ref": "indicator--c60b6aaf-acca-428f-b341-c1827c0dd5ec", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca88adaa-4e9d-48c5-93e3-0ab0a2c8de87", "sighting_of_ref": "indicator--db4f913e-ad8e-4f4b-904b-f21f2b253b80", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e49e32-d93c-4c5f-8aa4-275120fc8cb1", "sighting_of_ref": "indicator--a3740e47-84bd-4604-9d3d-bf6d7d10915b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02dfe913-b0fc-4dfa-923f-5bd99f8e0ec7", "sighting_of_ref": "indicator--2ee53b8f-c1d2-407b-887d-1c0d69957caf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cfa2402-8a17-4e66-b2de-15caae939d85", "sighting_of_ref": "indicator--11bb407a-f7ad-495b-9f5e-e57f152bc34b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2daaf79e-d10b-4d82-b184-0702ab2734ee", "sighting_of_ref": "indicator--11bb407a-f7ad-495b-9f5e-e57f152bc34b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ef7811-c9a8-467f-a422-7d4533d29da5", "sighting_of_ref": "indicator--11bb407a-f7ad-495b-9f5e-e57f152bc34b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7cc7bf-73ab-4c37-8cd6-96b7939f20dd", "sighting_of_ref": "indicator--9547f692-2cc0-4379-ba85-bf327a7469c9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba1ab31-fcef-43eb-bfd0-1e67ac4f8ccd", "sighting_of_ref": "indicator--9547f692-2cc0-4379-ba85-bf327a7469c9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c2363e-aa99-41a6-bafe-3338de7340b2", "sighting_of_ref": "indicator--169a17ca-4c9d-4e90-a20e-b0d57684ccf7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a64c4337-19a9-45bb-b9fd-55e61a3667c1", "sighting_of_ref": "indicator--169a17ca-4c9d-4e90-a20e-b0d57684ccf7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb822d6-883a-4edb-a0c5-2fca9b084356", "sighting_of_ref": "indicator--169a17ca-4c9d-4e90-a20e-b0d57684ccf7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--402aa3de-3c8b-49ca-836a-46f5992af742", "sighting_of_ref": "indicator--8f5325be-d434-4ab6-8d03-504f7c70342f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17aff38f-c050-4f82-85da-f3b3bbfda4fc", "sighting_of_ref": "indicator--8f5325be-d434-4ab6-8d03-504f7c70342f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--925a3e2b-308f-402b-b931-d0fb0f566511", "sighting_of_ref": "indicator--8f5325be-d434-4ab6-8d03-504f7c70342f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2af2271-39aa-46d9-996f-1adf3aa6f133", "sighting_of_ref": "indicator--56208dbd-a3bc-4555-8dc1-96d8cb841f52", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7593aae-09e4-47ea-b25a-3982d7677b5d", "sighting_of_ref": "indicator--56208dbd-a3bc-4555-8dc1-96d8cb841f52", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a09f159-acdc-4120-9c3c-55d9fc70a0d0", "sighting_of_ref": "indicator--56208dbd-a3bc-4555-8dc1-96d8cb841f52", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b69657-a81a-4ed0-a03d-b48970c7f541", "sighting_of_ref": "indicator--4e92321e-ee21-42d3-918f-1d819915f888", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a7dbcba-d157-4240-8c24-ae2182cd03a2", "sighting_of_ref": "indicator--ceef0a54-deb6-42b8-bb8d-aa59f74aba43", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4709c22-03f3-41cf-9ea7-6edb60e632a7", "sighting_of_ref": "indicator--ceef0a54-deb6-42b8-bb8d-aa59f74aba43", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c084825-ddbd-4f56-8890-7674b4e34254", "sighting_of_ref": "indicator--ceef0a54-deb6-42b8-bb8d-aa59f74aba43", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eddb3724-08aa-46a1-be8c-1286b6dbcd55", "sighting_of_ref": "indicator--92406914-736d-4517-bb36-c93f5a726a0a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b53f7de6-938d-417a-a239-174adff3c001", "sighting_of_ref": "indicator--92406914-736d-4517-bb36-c93f5a726a0a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5254c104-a7fc-4b4f-b988-712b4f47c9c4", "sighting_of_ref": "indicator--92406914-736d-4517-bb36-c93f5a726a0a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ae751d-216d-4f7b-af64-ac7e6c0db51b", "sighting_of_ref": "indicator--69311078-469f-4dff-8cae-80b83dacd8a4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b0d5f4-a4e1-4bc6-9761-a2f99d276330", "sighting_of_ref": "indicator--e1ae4b99-c1d0-4d3c-9814-66522584d0ff", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde628dc-bf0e-44b2-8b11-bd30cd73b511", "sighting_of_ref": "indicator--e1ae4b99-c1d0-4d3c-9814-66522584d0ff", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c747fc47-b679-42af-be66-aa08a18b0731", "sighting_of_ref": "indicator--e1ae4b99-c1d0-4d3c-9814-66522584d0ff", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e65018da-1131-42de-8db4-af96016e4be7", "sighting_of_ref": "indicator--c875dec0-ba71-47c2-86af-78057fca1697", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a34309-5dd6-448c-8912-77af10ef7170", "sighting_of_ref": "indicator--3c37bf01-5997-4eb8-92a1-169802e966d8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e88a12a3-61fa-44be-8aac-ced66c8ec66b", "sighting_of_ref": "indicator--a6ee227c-a720-4aaa-8cbb-c32abbc1c1da", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--121548c6-2f41-44a3-9201-f0580fd73d5a", "sighting_of_ref": "indicator--a6ee227c-a720-4aaa-8cbb-c32abbc1c1da", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20430d6e-666d-4ca7-acf8-c0c8564c1462", "sighting_of_ref": "indicator--a6ee227c-a720-4aaa-8cbb-c32abbc1c1da", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2106d9-fefa-487c-8b92-78679c8f0a0f", "sighting_of_ref": "indicator--b585ca46-9e0a-4ec1-9e2d-f23d38284b86", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bba7141-3a2f-45c1-b53b-2c8ba23b82c1", "sighting_of_ref": "indicator--b585ca46-9e0a-4ec1-9e2d-f23d38284b86", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6efd0ff-43be-4b77-90f0-664ff58aaadb", "sighting_of_ref": "indicator--b585ca46-9e0a-4ec1-9e2d-f23d38284b86", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac49de16-9e76-49ae-ab4f-c989d5365d67", "sighting_of_ref": "indicator--3c164ea7-942b-4f53-bb73-e7f686ffd686", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5edd9d72-79d4-4bc9-b668-b831869938f3", "sighting_of_ref": "indicator--3c164ea7-942b-4f53-bb73-e7f686ffd686", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c89869b0-0482-42f9-9a95-4acd6f01d1cd", "sighting_of_ref": "indicator--eaa8da45-81cd-4278-a0bd-0b540d145eda", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1c5b47-e9b4-4491-9930-0dafcff9bc6e", "sighting_of_ref": "indicator--eaa8da45-81cd-4278-a0bd-0b540d145eda", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd582ef-9192-41b2-ade1-6fe8cddbe158", "sighting_of_ref": "indicator--eaa8da45-81cd-4278-a0bd-0b540d145eda", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512a42c5-97a7-4870-9c41-ce253768919a", "sighting_of_ref": "indicator--279816c2-b490-497b-8493-955f95c6c4f5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8715153b-b787-48fc-8f50-e3e2e770cfec", "sighting_of_ref": "indicator--d74db772-285a-426a-a22b-afc3bfac0ed8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8415c157-4314-4e23-9e94-a1a027bb646d", "sighting_of_ref": "indicator--d74db772-285a-426a-a22b-afc3bfac0ed8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc6078f-bd1f-4b5b-8895-6680f046df6a", "sighting_of_ref": "indicator--d74db772-285a-426a-a22b-afc3bfac0ed8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60dab91a-a5b4-4544-b1f8-021ffd05fef2", "sighting_of_ref": "indicator--30e6ffdc-6d40-4692-b062-3173159d9eae", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d74a95ad-2e20-4ee2-8475-6a725200c191", "sighting_of_ref": "indicator--5c2dba17-cecd-4554-82d8-89789caa1a90", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da676b8-f68e-4933-997d-0e380a6129d1", "sighting_of_ref": "indicator--5c2dba17-cecd-4554-82d8-89789caa1a90", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8064f6cb-bcd6-4220-a519-a84e17991036", "sighting_of_ref": "indicator--5c2dba17-cecd-4554-82d8-89789caa1a90", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f0f48f-3a68-484a-a7a5-880403b77538", "sighting_of_ref": "indicator--7de1f4fe-a6bb-42d7-b7b5-30ce6a337c15", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebbf4273-94d4-4b27-a676-8a59738bcf39", "sighting_of_ref": "indicator--1cd549d5-f632-406a-a79a-ed3f3f465c3d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc6f985-d395-4ac8-a0ef-611c0cba872f", "sighting_of_ref": "indicator--a404de41-3e25-422d-b069-b45f85ea874d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c1d6524-fa4d-4647-a512-0837c21891fb", "sighting_of_ref": "indicator--a404de41-3e25-422d-b069-b45f85ea874d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95801bc9-e7fa-400c-bab3-ed448ede8774", "sighting_of_ref": "indicator--a404de41-3e25-422d-b069-b45f85ea874d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96da7521-fae2-4566-ad0f-4388f5eadc80", "sighting_of_ref": "indicator--897655ee-725a-4fb1-86f0-3929926c8aed", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484c584e-462b-45e6-9c54-16dee9dcc244", "sighting_of_ref": "indicator--897655ee-725a-4fb1-86f0-3929926c8aed", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9df4eba4-00a9-4123-af03-30eefb62e79b", "sighting_of_ref": "indicator--a964a2ed-b0e5-4107-bc15-0921c8114409", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aff04be-c8dd-460b-bddb-fd42279c3205", "sighting_of_ref": "indicator--a964a2ed-b0e5-4107-bc15-0921c8114409", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28cfb52-eff2-4b9f-ba6b-4e3fc70b60f8", "sighting_of_ref": "indicator--a964a2ed-b0e5-4107-bc15-0921c8114409", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e10286ba-baaf-4754-b9e6-b472c4ba373b", "sighting_of_ref": "indicator--f951dd0b-fb23-4eed-80cb-3491628a223e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93816669-3481-4da3-8919-52c0e9be14ad", "sighting_of_ref": "indicator--f951dd0b-fb23-4eed-80cb-3491628a223e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089ce273-266b-4868-a949-372a58fbd22e", "sighting_of_ref": "indicator--f951dd0b-fb23-4eed-80cb-3491628a223e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21af42b-c9e6-4cbd-8bb3-adbd72b17773", "sighting_of_ref": "indicator--35020a54-100e-43da-9ec0-09a7c86d2aa9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae723d1-85c1-496e-bbba-1fdbcbb95283", "sighting_of_ref": "indicator--35020a54-100e-43da-9ec0-09a7c86d2aa9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ae806a-0563-411e-b1e5-cbfd4b809fc6", "sighting_of_ref": "indicator--35020a54-100e-43da-9ec0-09a7c86d2aa9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89988f24-a268-43b7-b821-3bd4e7d7cc05", "sighting_of_ref": "indicator--90bfb3d7-acb1-4af8-9af0-fe5871807c78", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8570a04-14cb-40d6-b4ac-bb55643935a9", "sighting_of_ref": "indicator--58c20d73-47b2-4cfc-8fcb-375b74d17650", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac51dd17-5b0c-4b48-ae3b-4412dc62573a", "sighting_of_ref": "indicator--58c20d73-47b2-4cfc-8fcb-375b74d17650", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0573b1e2-3015-458d-89a9-1d06267095f8", "sighting_of_ref": "indicator--58c20d73-47b2-4cfc-8fcb-375b74d17650", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59f3052-6104-4163-a5f3-2782a9f6b05b", "sighting_of_ref": "indicator--ed650e51-23f5-4d81-a41d-5f5f1f7704dc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9531de6-a7ea-4704-950a-7a1568f21e31", "sighting_of_ref": "indicator--ed650e51-23f5-4d81-a41d-5f5f1f7704dc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb1d923-b9f3-46a8-85b3-34307d25879c", "sighting_of_ref": "indicator--de8cdd22-a842-4648-950d-adc1f97d38ca", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1534c345-55c8-45d8-8663-f83922f86633", "sighting_of_ref": "indicator--de8cdd22-a842-4648-950d-adc1f97d38ca", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2f4e3c-519b-41aa-9725-10c9890b161b", "sighting_of_ref": "indicator--de8cdd22-a842-4648-950d-adc1f97d38ca", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b100179-0544-42f3-9a25-55c53c55aafb", "sighting_of_ref": "indicator--9f8c6664-3956-4ce8-b053-d14e6baf2d19", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4316ef7e-76b1-4a5a-9888-bf2803b9ff64", "sighting_of_ref": "indicator--9f8c6664-3956-4ce8-b053-d14e6baf2d19", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7af9e69-4c1d-4258-94d8-56bccbc59f83", "sighting_of_ref": "indicator--e1e95617-7df6-4c65-b4c6-9ce9af9e0761", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd355eb-b7b9-46e3-a39a-c788e0b35c01", "sighting_of_ref": "indicator--fb3d54d9-47a7-4e0d-8f7e-231a9982b100", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995b520a-ff70-47fa-8226-b362ee28e9ed", "sighting_of_ref": "indicator--fb3d54d9-47a7-4e0d-8f7e-231a9982b100", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5bfca0b-19ac-4cdb-a50c-4c8e154091a4", "sighting_of_ref": "indicator--c7fecf36-b93c-4484-9cb2-0506c88e137e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77bf0561-9e3d-4914-934b-dc5d8bf6dec3", "sighting_of_ref": "indicator--c7fecf36-b93c-4484-9cb2-0506c88e137e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef9b8b4-f51e-44ca-accd-f963adbd1fa5", "sighting_of_ref": "indicator--7c4432fb-6123-41d5-9841-c62469c2e720", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a2582f-5c52-4277-95a8-461c357f02f0", "sighting_of_ref": "indicator--7c4432fb-6123-41d5-9841-c62469c2e720", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b1063b-d001-42a1-beae-4625fd3f15aa", "sighting_of_ref": "indicator--7c4432fb-6123-41d5-9841-c62469c2e720", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b3a293-ab18-43ef-9f75-e7959c9e21b2", "sighting_of_ref": "indicator--f50b0685-1647-4da4-b4f1-16b488037647", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9e2730-67b0-4d88-9793-7bd3c08d7ce1", "sighting_of_ref": "indicator--f50b0685-1647-4da4-b4f1-16b488037647", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49154c6f-bc07-48ac-9774-ecc85ff6681b", "sighting_of_ref": "indicator--f50b0685-1647-4da4-b4f1-16b488037647", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--039aa785-fe02-48f2-9585-c1535d8abf1c", "sighting_of_ref": "indicator--dd21f8f6-b46b-4384-a282-3055f7339211", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efc6c8b5-cbae-4a5f-95bf-e3bdcfc3ba20", "sighting_of_ref": "indicator--dd21f8f6-b46b-4384-a282-3055f7339211", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab582745-0d6c-4396-b0c9-29892f354475", "sighting_of_ref": "indicator--dd21f8f6-b46b-4384-a282-3055f7339211", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a90369cd-10f4-413a-a11e-fe20e4037548", "sighting_of_ref": "indicator--b8b32062-aade-4c6d-bbe2-a060fdd6463e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21a0526-6b7f-419c-939b-1a243bf78498", "sighting_of_ref": "indicator--038de942-1336-433a-9990-a268db4005cf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29899a9-2824-4c99-996e-7b1122e8b1ea", "sighting_of_ref": "indicator--038de942-1336-433a-9990-a268db4005cf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f9f547-481b-44d3-aaba-7589b10cfd26", "sighting_of_ref": "indicator--7283e585-e045-460a-8412-912fd15013bd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d58a2465-c11c-4c55-9340-b5db96d4144d", "sighting_of_ref": "indicator--7283e585-e045-460a-8412-912fd15013bd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70874c79-f39d-4730-8461-c389c66c1a8d", "sighting_of_ref": "indicator--4930f1ec-2798-4348-93dc-0a273d9792b3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26d5e9e-88f3-48e7-b339-4ca1a2ef77d0", "sighting_of_ref": "indicator--4930f1ec-2798-4348-93dc-0a273d9792b3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0468b69a-0aea-4889-808b-9b00aa9eea9f", "sighting_of_ref": "indicator--4930f1ec-2798-4348-93dc-0a273d9792b3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d2fe08-3589-4cf6-8562-446da82f8b2d", "sighting_of_ref": "indicator--08d9d5e7-76f0-4bd9-b0ea-27fc859aa91f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e749d411-ad0c-42a6-be6b-d79d6920900d", "sighting_of_ref": "indicator--08d9d5e7-76f0-4bd9-b0ea-27fc859aa91f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb52966-45ad-40e4-be39-f05eaa85f36d", "sighting_of_ref": "indicator--6687df82-dec4-4bd2-b6bd-278346e4c8f3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--510855ac-ba1b-4f10-a733-c58b15c8aadb", "sighting_of_ref": "indicator--6687df82-dec4-4bd2-b6bd-278346e4c8f3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76261cc4-6c7f-4e89-a9db-15c3ec7b8d1c", "sighting_of_ref": "indicator--7687077b-763e-45ef-9842-e72c2e99229d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e06a6c7-178a-492f-bf39-332271a2ba55", "sighting_of_ref": "indicator--7687077b-763e-45ef-9842-e72c2e99229d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475c7a61-1484-4b60-b4d4-c71bdff4a019", "sighting_of_ref": "indicator--7687077b-763e-45ef-9842-e72c2e99229d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c38524f-de29-4cb5-bdad-dfa92991a3f0", "sighting_of_ref": "indicator--d70e0b27-f1e2-4173-aa3a-a81b73f6c62c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149a6deb-5403-4f33-b1a3-a3e49f550123", "sighting_of_ref": "indicator--d70e0b27-f1e2-4173-aa3a-a81b73f6c62c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be437df6-d221-4466-ab5e-6c513f683b95", "sighting_of_ref": "indicator--d70e0b27-f1e2-4173-aa3a-a81b73f6c62c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42eee5e4-00cf-44a7-9f24-599dfad9b549", "sighting_of_ref": "indicator--9144de7e-4e68-4dac-9e6b-2ff0b4b59470", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0beb6ff9-6fcc-4252-bfa1-2dcd70681fb3", "sighting_of_ref": "indicator--9144de7e-4e68-4dac-9e6b-2ff0b4b59470", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930eed6f-8222-48bd-9f0f-a3bed6ac26c4", "sighting_of_ref": "indicator--9144de7e-4e68-4dac-9e6b-2ff0b4b59470", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67708cb-088f-46f6-8b9f-90805d9848c1", "sighting_of_ref": "indicator--25ac52b9-e6fc-4799-9beb-7fb44959a074", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171e9760-9744-4cdc-b9bf-034976b04585", "sighting_of_ref": "indicator--25ac52b9-e6fc-4799-9beb-7fb44959a074", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b1f5e8-3640-462f-bf99-b51b67647172", "sighting_of_ref": "indicator--19f69606-a3a7-43f6-9145-a03a9ec8abf7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d1eb10-19eb-413c-ae66-742a8070b028", "sighting_of_ref": "indicator--49691047-bec5-4a07-8b62-c3128b958fec", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--045bbfc2-360a-43c3-a991-418bc94b0417", "sighting_of_ref": "indicator--75526e36-25e0-4419-b77f-36982fee51ab", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e986941-811c-47ed-ab6e-29b7dcd6253b", "sighting_of_ref": "indicator--e7890a14-be09-4bb8-9af7-f47ff5432dd7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ccbcafc-0a72-4dcf-be71-fea4d3acbb05", "sighting_of_ref": "indicator--e7890a14-be09-4bb8-9af7-f47ff5432dd7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e318ef-02bd-4552-b42b-63180752b9c7", "sighting_of_ref": "indicator--7d34385c-d447-4fd6-8095-42e14b1cc445", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b33720-4e6b-4a63-abf0-36ed75b351cf", "sighting_of_ref": "indicator--a12cef0a-7c1d-41e2-a5fc-cf4144b9676b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b55f7964-b9ca-4ee3-8301-336663c433df", "sighting_of_ref": "indicator--a2c8c61e-c6bf-40f1-ada9-f2381ad69474", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f9489f-ed18-4df0-8b91-83d73ffe27da", "sighting_of_ref": "indicator--db6766c1-bc3b-4d6a-b766-1766ecb70339", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c15a8081-1696-4171-a730-9d0560c17828", "sighting_of_ref": "indicator--94878925-7eb3-468a-87ef-9629c8a81aed", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d48a4cbb-17c1-48a9-9813-1a1d392c568c", "sighting_of_ref": "indicator--851d7e8d-f007-4ba9-b722-982f0d226bac", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9c7073-1e06-4fac-be9e-3db8266b2616", "sighting_of_ref": "indicator--851d7e8d-f007-4ba9-b722-982f0d226bac", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e6d10c-95e1-4126-8296-3711a4dd5657", "sighting_of_ref": "indicator--851d7e8d-f007-4ba9-b722-982f0d226bac", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b0bc754-6c9a-40c2-997d-1de46a1116e4", "sighting_of_ref": "indicator--3a98cc61-161a-43b5-acde-33116bf56059", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb516dcb-c920-456f-a7e4-bdc398200e47", "sighting_of_ref": "indicator--db7df4af-6f8a-456c-ae27-35bf713858b6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a0cbb63-8806-48ce-b88d-c6d38aab83f6", "sighting_of_ref": "indicator--db7df4af-6f8a-456c-ae27-35bf713858b6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877c9a1a-0182-4522-a8f1-c24648061903", "sighting_of_ref": "indicator--db7df4af-6f8a-456c-ae27-35bf713858b6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b391a0-eb45-4306-bd59-6733857703ae", "sighting_of_ref": "indicator--cfae1a4b-9f43-4472-9e37-da84c744b6d5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d051ee-3448-483a-9a92-bb539bb2fe2a", "sighting_of_ref": "indicator--9141144d-5e23-4a0a-8e8b-7b0dc6b759a6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4650b43d-38f2-4371-a532-870800495009", "sighting_of_ref": "indicator--06fbc6ec-3a3c-4b51-ad4e-850efaf9f1cb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d39310-0933-476a-afa7-efc0ab0b3e67", "sighting_of_ref": "indicator--1279cc53-6472-4b63-80d6-c5e1e1bc463e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6a7dd9-f042-43bd-9b8c-da0b938f02c2", "sighting_of_ref": "indicator--1279cc53-6472-4b63-80d6-c5e1e1bc463e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f574698-4926-4ada-9beb-ca85790d2103", "sighting_of_ref": "indicator--1279cc53-6472-4b63-80d6-c5e1e1bc463e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98763a62-699f-44d6-a67f-7b5b6030aa0c", "sighting_of_ref": "indicator--4db647ab-231f-4ff4-bea3-836628b8d1ed", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b411ca-4bb9-46b2-abba-a27f11a575f0", "sighting_of_ref": "indicator--4db647ab-231f-4ff4-bea3-836628b8d1ed", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5edc8720-90cd-4eb4-a36a-a0b4ba699863", "sighting_of_ref": "indicator--4db647ab-231f-4ff4-bea3-836628b8d1ed", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d58d43-875d-4a33-b68c-b6d03643f67f", "sighting_of_ref": "indicator--2c5ca470-7500-49f4-bf6f-94ff9062f78f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a38cb01-ce05-48fa-ab76-c4ab58773407", "sighting_of_ref": "indicator--2c5ca470-7500-49f4-bf6f-94ff9062f78f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daecd22b-a8c9-4ceb-a7b6-288ae77cc041", "sighting_of_ref": "indicator--2c5ca470-7500-49f4-bf6f-94ff9062f78f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8fe107-1b48-4229-93de-2178356d9b56", "sighting_of_ref": "indicator--4ad72b52-5de6-45c9-87a0-13b42d37c9f5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dccea4f-56e0-446d-ba2f-c542a14f2df5", "sighting_of_ref": "indicator--4ad72b52-5de6-45c9-87a0-13b42d37c9f5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91783f32-e1d2-439f-a1fb-ea9a0e0293bf", "sighting_of_ref": "indicator--4ad72b52-5de6-45c9-87a0-13b42d37c9f5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--732f0894-f9e4-43d5-854c-d10b3702d940", "sighting_of_ref": "indicator--b88be670-3e75-418a-aa07-406a41605976", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6849266a-c1d5-4977-84f3-1a8e9cac49aa", "sighting_of_ref": "indicator--b88be670-3e75-418a-aa07-406a41605976", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34dc5b3-3611-4e57-8f28-e18556ead9ec", "sighting_of_ref": "indicator--b88be670-3e75-418a-aa07-406a41605976", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25acab8-ec05-4520-b8fd-6c36affcbaa7", "sighting_of_ref": "indicator--0569e5ed-e0eb-46c9-b12f-a2f6bf55a0cb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b003a1a9-e2b3-4e96-a3ba-d07ff5510220", "sighting_of_ref": "indicator--0569e5ed-e0eb-46c9-b12f-a2f6bf55a0cb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff4780f4-493f-4668-a013-f75796382744", "sighting_of_ref": "indicator--0569e5ed-e0eb-46c9-b12f-a2f6bf55a0cb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21201816-c9dc-4493-b1b1-b5aa59bc8e0c", "sighting_of_ref": "indicator--f073cc41-c9cf-4a6f-a955-904c7baf1274", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0591917f-5c4c-4627-a836-4b0f888bd08d", "sighting_of_ref": "indicator--f073cc41-c9cf-4a6f-a955-904c7baf1274", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db02d398-41a8-4aae-a694-0ede9a43d3cb", "sighting_of_ref": "indicator--f073cc41-c9cf-4a6f-a955-904c7baf1274", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2483eaee-eb85-410f-a8b5-aeb182e59f22", "sighting_of_ref": "indicator--3850bb6f-cbd4-4fc1-9dfc-87a075101637", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a59725f0-e7c7-48a7-816d-6d967633fa64", "sighting_of_ref": "indicator--3850bb6f-cbd4-4fc1-9dfc-87a075101637", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118038b9-ec4a-47b1-9aaa-f1ab3ffaea29", "sighting_of_ref": "indicator--3850bb6f-cbd4-4fc1-9dfc-87a075101637", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a25dd1-bc24-4308-bde3-5999385ec69e", "sighting_of_ref": "indicator--4947b42f-7cb4-40cf-8bf2-692cc9b56483", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae068d17-f272-43f0-9ebd-3db46a202729", "sighting_of_ref": "indicator--4947b42f-7cb4-40cf-8bf2-692cc9b56483", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418d4839-1017-4146-88b3-91682130efa1", "sighting_of_ref": "indicator--4da2ebf6-825f-49d6-95db-4e3857bba3fc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50de7729-99e6-420e-920d-6a8ba92096b1", "sighting_of_ref": "indicator--4da2ebf6-825f-49d6-95db-4e3857bba3fc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eab4424-1e04-4459-a9b7-da51d97c0632", "sighting_of_ref": "indicator--4da2ebf6-825f-49d6-95db-4e3857bba3fc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09295316-660a-49ea-abab-858acc67c079", "sighting_of_ref": "indicator--c6d61493-cf08-43ba-81c7-eb96649f6439", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19de8278-4363-4d2f-9e2a-13a480a837c1", "sighting_of_ref": "indicator--c6d61493-cf08-43ba-81c7-eb96649f6439", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b10ed10c-354c-4b8c-8e92-11e833e81e8b", "sighting_of_ref": "indicator--c6d61493-cf08-43ba-81c7-eb96649f6439", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92162856-167f-4ba1-95b4-83fa25a3b243", "sighting_of_ref": "indicator--a6187c65-2efb-47ce-be72-440492a5dd46", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e906c3f7-626a-4358-be7c-ce8f19f5164c", "sighting_of_ref": "indicator--a6187c65-2efb-47ce-be72-440492a5dd46", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ccb83a2-e1a1-4cda-b4f5-2a73d1bae322", "sighting_of_ref": "indicator--a6187c65-2efb-47ce-be72-440492a5dd46", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ea05ad-0902-4121-a60e-38e8c2b09d7a", "sighting_of_ref": "indicator--f2fe5af7-1ed5-4aa3-8793-6cc2a359a93c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--045e9159-282f-493d-9137-d5a9a003f533", "sighting_of_ref": "indicator--f2fe5af7-1ed5-4aa3-8793-6cc2a359a93c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da3cfb5-8865-44d7-bc4c-ab43c0e2bbf0", "sighting_of_ref": "indicator--f2fe5af7-1ed5-4aa3-8793-6cc2a359a93c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--348893fb-159a-4cc6-bfd6-da3d716036f0", "sighting_of_ref": "indicator--e1d1e1c8-a03c-4f20-96e1-590d606f095c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27e6147-ecf2-419b-9cb0-82a0cb088c90", "sighting_of_ref": "indicator--e1d1e1c8-a03c-4f20-96e1-590d606f095c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef5b5fc-858f-4217-bb7d-f34e2c4fb75b", "sighting_of_ref": "indicator--e1d1e1c8-a03c-4f20-96e1-590d606f095c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4db1cd0-98dd-47b6-993d-c46cc220d406", "sighting_of_ref": "indicator--701c4aa4-5154-4985-9a14-24d9d45d5ce0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--908392e6-810e-4050-960d-350171d78ea3", "sighting_of_ref": "indicator--701c4aa4-5154-4985-9a14-24d9d45d5ce0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412cfb15-61be-4704-bf73-95333cc5a52b", "sighting_of_ref": "indicator--701c4aa4-5154-4985-9a14-24d9d45d5ce0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dec279d-4ee8-4f96-977d-f32a7888fd32", "sighting_of_ref": "indicator--6b09fa76-3ee8-4a87-846d-580b87396930", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16b9860-72b7-44e6-88ce-6e630a0f2bfa", "sighting_of_ref": "indicator--8a59443c-9e6f-40c0-9bdf-26e20cfc811c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf027a8-c34b-4b9c-966b-b33a8e0feabc", "sighting_of_ref": "indicator--215f6ea7-2cbd-4bff-9611-13bbf29f708f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35956d7d-eb95-4a21-97b4-ae8838affe9f", "sighting_of_ref": "indicator--8f8e264b-434b-4d9d-9bfb-f7c8d096844d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30e666e-6295-4a28-b2e5-5eb1904c9734", "sighting_of_ref": "indicator--31a3b52e-2df9-4127-a823-3045de3e934d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4abc802-c7bc-4fc7-8594-9b5a649bfc98", "sighting_of_ref": "indicator--4f87f351-486a-4c01-8819-c1fb3d23fc46", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf9ada5b-32e5-4351-b930-17a6d8fd2c02", "sighting_of_ref": "indicator--9478cbf8-9185-421a-b673-bab6a411ff5e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47acc0d6-14ee-41d6-993c-b6ce87d6431f", "sighting_of_ref": "indicator--ca9bb369-6ff9-4216-8479-71ecd0926c2e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d90190-51ba-464a-aa00-d2726e795151", "sighting_of_ref": "indicator--a486fe02-8265-40ef-9327-a237cdb78b90", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b2d296-2b02-4a4d-a7dc-0118db269c42", "sighting_of_ref": "indicator--c91fc0fa-d9ab-43c0-b474-bd854d3d4560", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975eab85-2b1d-433c-a2bf-870fe083668c", "sighting_of_ref": "indicator--16a6ed1c-d5f0-497e-89d3-18a79bdeb116", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a7a1038-b8ef-45d3-ac1b-35d7c37477cb", "sighting_of_ref": "indicator--1b91254d-bc8a-4fc4-a82b-cb25aecee996", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b8f61a-a38f-4e86-a7d8-07ae32fa3341", "sighting_of_ref": "indicator--ba776d47-0bfc-4c56-9c41-2ae601c813f4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b2f7258-7adc-48ba-86c6-e81b33d24b24", "sighting_of_ref": "indicator--279f6bd5-eae8-49f5-8ed6-1664d5f320bf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfaf9603-2c00-4ea8-8d64-c87f63d8913d", "sighting_of_ref": "indicator--67d0a96c-b225-4b14-9c0e-655a5f036108", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93fba8c2-292a-4fe7-b047-f53804a31b3d", "sighting_of_ref": "indicator--477867b3-f075-4fc8-9d12-cf141341c26d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b3c4ae-502f-4853-9aaa-bb8dec312c6e", "sighting_of_ref": "indicator--477867b3-f075-4fc8-9d12-cf141341c26d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54fc95a8-6ba4-4f9b-9dba-5e9112325882", "sighting_of_ref": "indicator--0d8daaf7-cb6b-4429-8f34-5c7226cc6631", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3b6ae3-9a8c-4864-9a5a-571f76f6551b", "sighting_of_ref": "indicator--5a140ccb-74f8-4404-911b-677762526c6a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b98f8f9a-7ca4-420c-96dc-8b1a50719300", "sighting_of_ref": "indicator--21b0e7ab-0c55-4b7d-be4e-e1d17c73e9a8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e881cc7-1d03-4ecb-877a-ff0cbc20ffc0", "sighting_of_ref": "indicator--aeb2a690-6a54-453d-95b9-3c88349a03c1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203c5138-ba69-4165-a689-8fb39f23ece2", "sighting_of_ref": "indicator--aeb2a690-6a54-453d-95b9-3c88349a03c1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c50b6dd2-3181-4d2f-b9a3-0981ddfa5540", "sighting_of_ref": "indicator--28c3bf70-311b-400d-9479-712f08200815", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678ce3aa-013d-4db3-8231-0ed86da55d70", "sighting_of_ref": "indicator--28c3bf70-311b-400d-9479-712f08200815", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9c2190-c324-4c02-a1c0-c8ca9b5046f4", "sighting_of_ref": "indicator--e1867d0a-033d-4107-bb27-bea0bdd22fd9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de2ea09-24b1-4999-855b-ab3335c33e54", "sighting_of_ref": "indicator--e1867d0a-033d-4107-bb27-bea0bdd22fd9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd5fcd61-acd2-42fc-a6db-5641cddde55e", "sighting_of_ref": "indicator--bcf9ff58-bf35-4ad6-8d81-20a3831a8e76", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ae004b-7bd3-47dd-8022-34f17f6e0d4d", "sighting_of_ref": "indicator--bcf9ff58-bf35-4ad6-8d81-20a3831a8e76", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e5fe2b-d036-4e14-a187-418b0c15c39b", "sighting_of_ref": "indicator--3941d5a6-a1ca-4376-ae6f-a24144cf5064", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2912f6e-a52c-463e-8ce3-de53f536ab95", "sighting_of_ref": "indicator--3941d5a6-a1ca-4376-ae6f-a24144cf5064", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a1746a-36cf-4d67-9e08-6e5c70dbc88b", "sighting_of_ref": "indicator--68ad6d16-f16a-498d-aefe-1c03da657131", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2606f4dd-c4e6-464c-af5c-a2bef87bae6c", "sighting_of_ref": "indicator--68ad6d16-f16a-498d-aefe-1c03da657131", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--757683cd-90be-45f1-bbe5-cbf4a8098071", "sighting_of_ref": "indicator--14731983-0c7c-4102-a388-20e4ebfadc99", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263d0641-ac09-438d-ba42-77e42eb6e09a", "sighting_of_ref": "indicator--14731983-0c7c-4102-a388-20e4ebfadc99", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf84ef2-d65c-4af0-bbee-bd935bdd73df", "sighting_of_ref": "indicator--54df7311-cce4-4390-b164-a341f6a05019", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1d1990-6bff-4eb8-b654-877812b9d758", "sighting_of_ref": "indicator--54df7311-cce4-4390-b164-a341f6a05019", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f36bf4-a7cc-4e6a-9112-7d8d5746bede", "sighting_of_ref": "indicator--54df7311-cce4-4390-b164-a341f6a05019", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4783c83-9fa4-4949-9556-a12f0f6c84d8", "sighting_of_ref": "indicator--8bb60f4b-b07f-48ce-ae63-1293eced477a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2789a5c-9d1f-4422-91e2-01fd6b5a3af8", "sighting_of_ref": "indicator--5c67d765-4d4f-49e0-b5ae-23c2af2cb293", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6303d2e0-89f3-4bcc-8659-aa3290ed4514", "sighting_of_ref": "indicator--3c6aefdb-de90-485a-a04c-4bd9361558ea", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb0969eb-cdae-418e-800f-a70b5e6b7840", "sighting_of_ref": "indicator--3c6aefdb-de90-485a-a04c-4bd9361558ea", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--383f59d8-4cc4-4164-873e-9fe898ddc537", "sighting_of_ref": "indicator--3c6aefdb-de90-485a-a04c-4bd9361558ea", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca11159-1a94-4ebb-a440-2717ee26f7f1", "sighting_of_ref": "indicator--7e159031-c096-4e9f-934b-23a38a2cbba9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a17de9-c667-4a82-8b8d-743a5453c8f9", "sighting_of_ref": "indicator--7e159031-c096-4e9f-934b-23a38a2cbba9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d15060f-341b-4f5d-9ed3-37b3de6d345d", "sighting_of_ref": "indicator--facc7b2d-5a51-4ea2-b75a-3ef3051dff3f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52983de-4d5d-4884-8993-9ca87d5ad416", "sighting_of_ref": "indicator--facc7b2d-5a51-4ea2-b75a-3ef3051dff3f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba19b3b3-ea8b-4cad-b327-7b0641472f46", "sighting_of_ref": "indicator--8489a27d-dff3-467c-a7de-3bec3d6e6acd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36a316b-6056-495e-b7f9-a33fd1bef7f5", "sighting_of_ref": "indicator--8489a27d-dff3-467c-a7de-3bec3d6e6acd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c16dacf-eb42-4181-bb11-55683cbb9dce", "sighting_of_ref": "indicator--83bc0c71-3aff-4530-879d-469f69487a05", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7fdd56c-1af2-4938-9b64-3e8bbed18221", "sighting_of_ref": "indicator--83bc0c71-3aff-4530-879d-469f69487a05", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7889c8-cfb9-446f-8e94-495142a87b80", "sighting_of_ref": "indicator--550503cf-1af1-4502-8a57-676f52f88a96", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe00cdc-84bc-40e5-b0ef-6395b11e3733", "sighting_of_ref": "indicator--9209539c-3417-4297-bf29-97696457b912", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95556d0d-a3c9-4b99-b870-09774ae143c5", "sighting_of_ref": "indicator--9209539c-3417-4297-bf29-97696457b912", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488a9e54-1c52-4a42-8e2d-9e87431cd7d3", "sighting_of_ref": "indicator--5aaa476c-9380-4a1f-a4f6-a282d0dbc2c0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2898dfab-f552-477d-bbf6-cda7fe5f7413", "sighting_of_ref": "indicator--969d3e07-4cfe-4372-948b-76ab8bb0e6a4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1723b7f5-fac6-47a8-8418-1c7242bccf23", "sighting_of_ref": "indicator--a5ba9bce-78ee-4842-9490-f583aceacd77", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66553378-bf3b-4348-8f59-e2697df6eb8b", "sighting_of_ref": "indicator--0b324504-929d-4a2c-8ef0-37342b75ea8e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa5db674-70d7-4d03-808c-f7d90f59aa36", "sighting_of_ref": "indicator--0b324504-929d-4a2c-8ef0-37342b75ea8e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c3fdf49-635c-48c8-8c87-41331c92ce9e", "sighting_of_ref": "indicator--b5d93dab-225c-4f8a-b03f-31ac602a6400", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7317183a-94e7-49bd-a0e1-cfc11dab336f", "sighting_of_ref": "indicator--57d66512-af5a-41cf-967a-6443e46cc5c8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd71005-428c-4f91-9019-dd9824876999", "sighting_of_ref": "indicator--57d66512-af5a-41cf-967a-6443e46cc5c8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55554986-2510-4de1-95e2-7b023e2a1212", "sighting_of_ref": "indicator--6dd20b69-c80b-462a-9892-a220e98566d7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58572ee6-1859-4097-991b-101d3724c96d", "sighting_of_ref": "indicator--fa1d21be-5483-4dbb-86ea-9f652f226045", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae8f7b8-a99f-4162-88ca-4d5d558bf6f2", "sighting_of_ref": "indicator--b5c2c76d-0f39-4af3-8744-1faa699bf92e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e2cfc3-3862-4c58-9064-462fab5861cb", "sighting_of_ref": "indicator--db40c734-d402-4426-9275-1ec7bfea0cea", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3d5c81b-fc51-445a-af5c-395693c8a414", "sighting_of_ref": "indicator--db40c734-d402-4426-9275-1ec7bfea0cea", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea24fb59-cf21-4bc0-b3ff-f7c6a86efb67", "sighting_of_ref": "indicator--db40c734-d402-4426-9275-1ec7bfea0cea", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a160770-d2f4-4e8b-9863-a7ea8f25e7a2", "sighting_of_ref": "indicator--aa4a45bf-cc11-452c-b4c3-43d474c4ee36", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3f2da3-3970-40eb-87fb-431f746fabc1", "sighting_of_ref": "indicator--fb939b15-cd74-485c-8f8c-bb20f9eeba5e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--969e605c-c939-4d45-92e6-b3b5cb3b3e50", "sighting_of_ref": "indicator--d7f26be2-4afa-4f8a-84a8-4d0f441e0388", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163ddf18-a157-4487-a0a4-7e20c3bebdc2", "sighting_of_ref": "indicator--d7f26be2-4afa-4f8a-84a8-4d0f441e0388", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111a75e6-45ce-43ac-b7d3-0ba5da202973", "sighting_of_ref": "indicator--979256cb-16da-4917-94c8-d024c7d78ed6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5542336f-3f8a-4e29-ad79-37ddcabeb94e", "sighting_of_ref": "indicator--86a70116-945c-4ccb-9c05-18e61c0cbfee", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484b2c07-010d-4664-856d-c693084fa4ec", "sighting_of_ref": "indicator--8d96eff3-6736-4b18-ae26-76ab29e8d3d3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2850602-2bf3-4242-b08a-4c2863be49c8", "sighting_of_ref": "indicator--8d96eff3-6736-4b18-ae26-76ab29e8d3d3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e3ef60-eff7-4536-93fa-46c0291b91bf", "sighting_of_ref": "indicator--8d96eff3-6736-4b18-ae26-76ab29e8d3d3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd8b4c94-0cf7-4721-934b-740062df140e", "sighting_of_ref": "indicator--8444a0e6-d5d5-424f-ab2b-2fa4d89ffa0b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d94dc5be-6224-4523-84c8-f80f8c6b2d84", "sighting_of_ref": "indicator--8444a0e6-d5d5-424f-ab2b-2fa4d89ffa0b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e72fa4-6efc-4e1a-9070-8d8e43fefec9", "sighting_of_ref": "indicator--99e750bb-df67-4a81-ba2d-9d5080f95664", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801100ac-5882-47cb-b5e7-b1f8ea157c81", "sighting_of_ref": "indicator--b6a005ec-b3e6-4fd1-a838-e29d46b33b4b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf239673-bcd8-4e7b-b691-035db06eea8a", "sighting_of_ref": "indicator--b6a005ec-b3e6-4fd1-a838-e29d46b33b4b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea18e5d-92e2-4007-b1bd-9ac2ca28b617", "sighting_of_ref": "indicator--7c75cee9-c0fb-4261-8fad-8475d1849cf8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a383d39b-4f0d-4213-86ac-b8d92c4fe178", "sighting_of_ref": "indicator--fd7b41d5-f9cc-4d50-b21e-4a10fdd88696", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9b66c0-b8a6-4e7c-9aaf-7575e25cd939", "sighting_of_ref": "indicator--36ac3aef-ab86-4826-9698-997c4577ab16", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2400069b-d6a0-4a70-85bf-f692c7d12feb", "sighting_of_ref": "indicator--36ac3aef-ab86-4826-9698-997c4577ab16", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48139c51-0a16-4da7-9730-b4eabd7ed938", "sighting_of_ref": "indicator--1e03f492-347e-4dbf-a7d6-504dd07d0961", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--663c5359-d24e-4a35-ba5c-d084047a5fc1", "sighting_of_ref": "indicator--4be37af9-4f59-49c5-baa5-b2118c15f9fe", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b12d4a-64f8-42ca-bcf2-22d279275d8e", "sighting_of_ref": "indicator--5b5e324c-b5d8-43bb-a628-24b79352792c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6179fd13-1f89-4476-b0bb-cdb6f243daf1", "sighting_of_ref": "indicator--48bab5fc-bf7a-47d4-aee1-c5d02da58739", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b156ea5c-13dc-40cf-aa0a-28ffb65f9ab1", "sighting_of_ref": "indicator--2e0be7b8-84ac-467a-83da-1875319746ec", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d4556e-eb5c-477b-962a-55f84aa97400", "sighting_of_ref": "indicator--d04ddbde-8949-42ea-94e0-fa154cb630bd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b101d719-9d2f-420c-9906-9399fb3173b1", "sighting_of_ref": "indicator--d04ddbde-8949-42ea-94e0-fa154cb630bd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3fdb037-8b6f-4354-ac81-f3b1e990f2ff", "sighting_of_ref": "indicator--96b0e850-3a7c-4055-b46e-92a94a3aabe0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd816812-b1ae-4ed9-8fe3-8fae97e108a6", "sighting_of_ref": "indicator--df7c44d3-065c-47da-8b7b-0f0e18ae934c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d176b3c0-bf7b-4f16-b42d-67596f1235a6", "sighting_of_ref": "indicator--df7c44d3-065c-47da-8b7b-0f0e18ae934c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361c2f4a-73ab-4f90-b8ed-d002877c64ff", "sighting_of_ref": "indicator--b0492be9-2bab-4e43-84c4-02af70312722", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31218fe8-b689-4128-be7a-e8c2ef6d3051", "sighting_of_ref": "indicator--7f463b39-291a-4098-8728-e3445c8d1dcb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c94a5c7f-4863-4eb5-86eb-9b5a84858df7", "sighting_of_ref": "indicator--0a7c6556-79f6-4331-9e60-5a3c463cb126", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b91cb32-cf34-4723-ae00-c45c334d8034", "sighting_of_ref": "indicator--2e3fdedc-4ca4-4742-a362-22606920858c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f416b161-db78-4688-81ff-0ff39de7de2d", "sighting_of_ref": "indicator--e7ebe4c2-3c7b-4780-93de-e3a8c809e70b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc18803a-992f-47d0-aeeb-01d7a7db34b2", "sighting_of_ref": "indicator--f66ec417-322d-43c0-a656-1b17ac385c56", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b938df74-58d9-4b95-b2b6-e89a7abcad20", "sighting_of_ref": "indicator--f66ec417-322d-43c0-a656-1b17ac385c56", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12271614-244b-489b-a90a-fdeb05766071", "sighting_of_ref": "indicator--245676b2-3545-4563-b825-a4efbe5c324a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b69c54-bac0-4b84-8afd-a32893825eaa", "sighting_of_ref": "indicator--245676b2-3545-4563-b825-a4efbe5c324a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebadee55-6909-4d65-ac69-52a0825d5db3", "sighting_of_ref": "indicator--245676b2-3545-4563-b825-a4efbe5c324a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3674b9d3-4197-4f1c-828c-86901fce6cdb", "sighting_of_ref": "indicator--cd54b825-a2d3-4bae-a8cb-935a7d594d61", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b5100a-e738-4301-a686-c6b29c8fad6f", "sighting_of_ref": "indicator--cd54b825-a2d3-4bae-a8cb-935a7d594d61", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2d5a5d-d5ff-4ca1-a2da-9202222539b8", "sighting_of_ref": "indicator--cd54b825-a2d3-4bae-a8cb-935a7d594d61", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe046f0-42cf-4dae-9062-11e8236cd61e", "sighting_of_ref": "indicator--bdb4af29-3e5d-4da0-b8ea-96481069ee78", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96bd521e-124d-4cb8-8488-d20df700361c", "sighting_of_ref": "indicator--bdb4af29-3e5d-4da0-b8ea-96481069ee78", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45c72aa-7631-4d35-a99b-cf43f5e4afd8", "sighting_of_ref": "indicator--e9b08531-a6c2-4589-bafb-960a6e1718ee", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007a1681-b04a-4488-a725-aa3b2f216030", "sighting_of_ref": "indicator--e9b08531-a6c2-4589-bafb-960a6e1718ee", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2800e5ca-2f11-4eb9-b3dc-82f0ce0b73c8", "sighting_of_ref": "indicator--19e415cc-8233-48d4-a13e-98f600b18cb9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f80ad9ac-2e34-4afe-b938-c8567faa0fab", "sighting_of_ref": "indicator--19e415cc-8233-48d4-a13e-98f600b18cb9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d42856-7696-4222-ae29-86771f0e9c96", "sighting_of_ref": "indicator--51e62c96-844c-4e32-90c6-4be18f1de3a8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a507ccc5-f356-4d89-9094-fac57cdaefd0", "sighting_of_ref": "indicator--f0e962c2-24ec-4e85-9f78-1fc1dae1f5f6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9992b88d-6546-400d-9f68-07557febb7d2", "sighting_of_ref": "indicator--440df71f-8cd5-441d-a91b-ce7390f5cb26", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac915de-342e-4bcd-9180-5a3c56482e4c", "sighting_of_ref": "indicator--440df71f-8cd5-441d-a91b-ce7390f5cb26", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc490b1a-d46e-416a-9fce-1c42c64094a4", "sighting_of_ref": "indicator--e638dfc0-96eb-4d13-837f-a563bc617f47", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f02a6d12-be04-48f7-b9f3-e93cebfe01df", "sighting_of_ref": "indicator--e638dfc0-96eb-4d13-837f-a563bc617f47", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e470e6f8-1f42-4580-87d1-a0b56e51a240", "sighting_of_ref": "indicator--e638dfc0-96eb-4d13-837f-a563bc617f47", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c16fab8-6efb-4b88-9fb3-bccccdeec9fd", "sighting_of_ref": "indicator--733ece44-b85d-457f-aae0-d34173f06dd0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a39520f-b293-4c5f-baaf-080319498f1d", "sighting_of_ref": "indicator--4fadcc9f-5645-4df6-b85b-046e9a5f79a1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c08f7a-bc02-4f8c-8636-1fab60e46e08", "sighting_of_ref": "indicator--314d3342-40d1-4fef-9998-7651fec2d3e1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f3e955d-0dc6-4ca9-9770-50a8f0cf138c", "sighting_of_ref": "indicator--f8c8eaf6-878f-4b94-a927-b39850a2b33a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627b0228-c438-4750-9831-2bc0f74b7f25", "sighting_of_ref": "indicator--69323a67-6d9d-4698-b136-9826de605476", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b97acb-c6c8-4661-a08a-6df28fcfc2b8", "sighting_of_ref": "indicator--1ae3c8b7-223b-46be-93c7-d449a195440e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c155d81-01bc-4843-8a5c-b019696e17ad", "sighting_of_ref": "indicator--72f5bc7a-c782-40ff-9492-dc9a24d20b6b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d39ee9-b9ec-4619-b1a0-f5266a66030d", "sighting_of_ref": "indicator--82e6367a-4a0f-4b20-b611-e5a475aa0b55", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58cc251d-a793-4338-93ec-a10423b3a22e", "sighting_of_ref": "indicator--bbc5d543-fb9a-46e4-a7fe-c7a50e41e29b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7203282-0196-4fdc-9aa9-7ab264487d48", "sighting_of_ref": "indicator--bbc5d543-fb9a-46e4-a7fe-c7a50e41e29b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff08e8a4-93db-43b1-88cc-34c160442075", "sighting_of_ref": "indicator--bbc5d543-fb9a-46e4-a7fe-c7a50e41e29b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a74732c9-4193-4ce1-a03d-e41829bdb798", "sighting_of_ref": "indicator--4f9fe295-0ef0-4998-bed1-1f1531b3eda0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9408ed-ca1a-4c93-92e2-7198be4bc1bf", "sighting_of_ref": "indicator--8e215d56-e99f-4443-b8ef-90fca22ae3bd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed20c89-ee47-4d50-9093-a6e5897d0d0c", "sighting_of_ref": "indicator--ff49b9a7-b061-433a-9613-dec7fe7dfa30", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b40750-6162-49ca-b24f-01c1a2166ef5", "sighting_of_ref": "indicator--ddd4207e-15d4-42da-99ff-634907dee769", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2467ceb0-b025-491c-bf2c-0100e6a02487", "sighting_of_ref": "indicator--4d936f38-89cc-463e-ba44-e0fbabb25504", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b658c06-32b5-4c0a-87fc-28b069cd951b", "sighting_of_ref": "indicator--8fbd5673-e4ed-4bbe-b9bc-2f37941a923b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f02dec-7cf6-4072-9925-c509f077a936", "sighting_of_ref": "indicator--24eddd6d-628b-4b2b-9669-3a5f5ec66d55", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec432c0e-49f5-4a27-839e-9c31fe3e1f25", "sighting_of_ref": "indicator--11c58a0a-494a-4d3f-a375-702d05d04a4c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b66aef-007d-4761-8b15-5b998a94560b", "sighting_of_ref": "indicator--c5b3318b-a292-46b6-a71f-689a4e1f5b42", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5887ffc0-e377-4433-9536-671734ffc895", "sighting_of_ref": "indicator--707d453e-aa1b-4a78-8fd6-45d38d264c3b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff9dc7f-a793-42c9-88c4-3eae738c2e73", "sighting_of_ref": "indicator--b1601248-84dc-461a-9138-a827d6c5e658", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d60d82-378f-4e25-b4c5-eee9b37c8e38", "sighting_of_ref": "indicator--c486ce5a-4934-412a-8fde-653bb1b2a146", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d7130f-a524-4fbe-a1ac-869af0c2d121", "sighting_of_ref": "indicator--c486ce5a-4934-412a-8fde-653bb1b2a146", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fdf68d1-edd2-4e76-b0e1-391ebc63cdfb", "sighting_of_ref": "indicator--c486ce5a-4934-412a-8fde-653bb1b2a146", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af39882-9931-4b1f-8df6-6c7a22fe85ab", "sighting_of_ref": "indicator--4a5ef8d0-606c-45aa-9173-857de977353c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df715e41-0da2-4e36-9176-6f3a3c09a494", "sighting_of_ref": "indicator--305dcb84-257d-41e3-8b04-23e713ffd3d2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb57b078-f7a6-4327-ac9d-e5497e80e60d", "sighting_of_ref": "indicator--84c7b6db-ab08-4c84-9131-589457f5bb3a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cfe1afa-2521-4cd7-a920-4c5292209fb0", "sighting_of_ref": "indicator--8206ad5f-b851-4e39-b9c1-a002dd8da71b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f101093-544e-4fae-affd-64c040bf8d0c", "sighting_of_ref": "indicator--8206ad5f-b851-4e39-b9c1-a002dd8da71b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8825ad3e-464d-4801-8f30-8e591de5b02f", "sighting_of_ref": "indicator--f5e7b499-ff2e-44a5-bfc1-06ed1cd8e000", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b26da71-1bd9-4985-86b5-5ef06cea0f0f", "sighting_of_ref": "indicator--499eec3c-1c45-42e3-a511-da49381731c4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b258b5d7-342b-4561-8d9a-8cd28338263e", "sighting_of_ref": "indicator--ac444722-c805-4716-9e8a-a0cf8d6b1063", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b01268-0a92-44e2-9635-4f7c63c93b69", "sighting_of_ref": "indicator--d88baf7b-cafb-47ef-97b3-3e9aad8e59b5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862496ac-107d-4567-859b-c8160607dab0", "sighting_of_ref": "indicator--67f14f68-9594-4ef1-9546-53493d04fc01", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e8ce51a-1c13-42ba-97e9-a7577e85eb10", "sighting_of_ref": "indicator--329a8696-1341-42f4-8c1b-12badb32e8cb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b049d91-a0e0-4181-89c6-b887f63162bc", "sighting_of_ref": "indicator--ccb4e6d3-61b4-4cc4-8e82-f061cf6924b7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354bf4e7-e7d9-430e-9232-128e32cafc5a", "sighting_of_ref": "indicator--ccb4e6d3-61b4-4cc4-8e82-f061cf6924b7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698356d9-3fe0-49f5-8b62-e4b69f6c565e", "sighting_of_ref": "indicator--ae33b33d-a5d3-4155-a347-315072f78b84", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7abf2eeb-082d-46e6-b999-78d3dd8e4c63", "sighting_of_ref": "indicator--ae33b33d-a5d3-4155-a347-315072f78b84", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efc587e9-77e3-4a9d-823c-6b1de765f03c", "sighting_of_ref": "indicator--ae33b33d-a5d3-4155-a347-315072f78b84", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b548621-4656-46e3-bcba-717ed8ad0591", "sighting_of_ref": "indicator--8113e929-cb0e-49ac-9974-a0a141d3a407", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb7507b-f3e4-4b05-b477-0025293ea937", "sighting_of_ref": "indicator--836fd9b1-4695-4c06-80ca-0aa9a1f4976e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45906ace-f3f8-4502-81a3-febbc3f992ca", "sighting_of_ref": "indicator--836fd9b1-4695-4c06-80ca-0aa9a1f4976e", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8fe4577-fc80-4a70-b2d9-130223047d11", "sighting_of_ref": "indicator--4530de94-4343-4717-befb-b10f0c4bf093", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e66b13-b47f-46eb-9e26-6895fb797391", "sighting_of_ref": "indicator--4530de94-4343-4717-befb-b10f0c4bf093", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b132b55e-a120-4185-880d-d37cdf112f78", "sighting_of_ref": "indicator--166b17d0-5498-44f7-abec-6d7d66cf6218", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2123db79-d0cf-40cc-b78e-0358bfde28fe", "sighting_of_ref": "indicator--80604428-53ab-416d-b6f5-343801143896", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f78b932-3309-4ca5-af1a-cb41fd23f24e", "sighting_of_ref": "indicator--35e1f78c-e008-4979-93c8-ea429c87be7e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b83f0d-77ae-4de3-a25b-d632b7c6f04a", "sighting_of_ref": "indicator--35e1f78c-e008-4979-93c8-ea429c87be7e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--143614e2-d588-4bc9-a507-a291db0283cf", "sighting_of_ref": "indicator--35e1f78c-e008-4979-93c8-ea429c87be7e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c4c049-8ed4-4c86-a405-5a6046829fc3", "sighting_of_ref": "indicator--151b5a5a-a872-467c-9b4f-ac4b3d2727e9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8fe1fdd-ef67-4c08-8cca-d8c9829eda5a", "sighting_of_ref": "indicator--151b5a5a-a872-467c-9b4f-ac4b3d2727e9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec20306c-5de3-4dcd-b21c-3e2cf49222d1", "sighting_of_ref": "indicator--151b5a5a-a872-467c-9b4f-ac4b3d2727e9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9976a144-631c-43f4-9a05-f458c15f8979", "sighting_of_ref": "indicator--dc0f697b-a8cc-49df-a7ce-1923eabb2918", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d70c7d82-90a5-4c04-944b-ae32906947bf", "sighting_of_ref": "indicator--dc0f697b-a8cc-49df-a7ce-1923eabb2918", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15975de4-00a3-4185-acb4-00da783df739", "sighting_of_ref": "indicator--c936b2d8-5532-4be1-965d-5758c29e7675", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--955e28d6-7c89-4ced-bc11-a1ad907f548e", "sighting_of_ref": "indicator--c936b2d8-5532-4be1-965d-5758c29e7675", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ffa1057-bfea-4477-b082-76dbbaa901a4", "sighting_of_ref": "indicator--c936b2d8-5532-4be1-965d-5758c29e7675", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514c8f8c-6575-45cb-b77a-500af19e2259", "sighting_of_ref": "indicator--13301712-9705-4074-a5a1-935cbc6e1968", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f327f8ef-d18f-4992-a2d1-455c213c4ca4", "sighting_of_ref": "indicator--13301712-9705-4074-a5a1-935cbc6e1968", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72258b1a-effd-4571-a570-97059aa9125c", "sighting_of_ref": "indicator--13301712-9705-4074-a5a1-935cbc6e1968", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153ef531-4b77-4000-a044-51e36eb7072b", "sighting_of_ref": "indicator--2240fe83-28c6-4f3d-9a5f-861fd3109796", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9911279-ea60-4cd6-9191-4bbd8f63c765", "sighting_of_ref": "indicator--c9630c95-a461-4c62-8d8a-8dc9e0f2582d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b41ab2-00a7-41f1-a2ae-6b0ef0871437", "sighting_of_ref": "indicator--c9630c95-a461-4c62-8d8a-8dc9e0f2582d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae82fb35-5fcf-4e90-bc8f-b5d91104de4e", "sighting_of_ref": "indicator--c9630c95-a461-4c62-8d8a-8dc9e0f2582d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7c6abd-f29a-4d60-b957-2a8afd208424", "sighting_of_ref": "indicator--bdf026f2-4ec3-4a1c-a764-c60b000e0943", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96118fab-2b0b-4ac3-becd-29efda5fc8b1", "sighting_of_ref": "indicator--bdf026f2-4ec3-4a1c-a764-c60b000e0943", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3afb323c-99f8-4975-a3f2-734ed0f2f7ed", "sighting_of_ref": "indicator--bdf026f2-4ec3-4a1c-a764-c60b000e0943", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be4e3cf-8579-4d28-bb6b-389bdf536870", "sighting_of_ref": "indicator--ebd78533-e1ea-44e7-ae3f-8f87ac2cbc11", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aea769d-c499-4a6e-84e8-7aa34cf95b52", "sighting_of_ref": "indicator--ebd78533-e1ea-44e7-ae3f-8f87ac2cbc11", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c170df7e-056e-40fc-99f5-172c830e1fa0", "sighting_of_ref": "indicator--d072e326-8889-4f20-8f14-04a9d08c5bf6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9723e6b1-a6b7-4188-be65-d605a0f470fc", "sighting_of_ref": "indicator--d072e326-8889-4f20-8f14-04a9d08c5bf6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9df8edd8-f9c8-4523-a19a-ce9f251a5e07", "sighting_of_ref": "indicator--d072e326-8889-4f20-8f14-04a9d08c5bf6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b13d18-bd6e-458c-8884-c7484f2cfba2", "sighting_of_ref": "indicator--92a96fae-59b0-48b0-88e9-807bc48e9552", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07c6fa8d-31c6-4b73-9e75-4ddab6f4e6cb", "sighting_of_ref": "indicator--92a96fae-59b0-48b0-88e9-807bc48e9552", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3951e42-eb26-4dbf-acf8-cc5939d4a32e", "sighting_of_ref": "indicator--92a96fae-59b0-48b0-88e9-807bc48e9552", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a7b09f-e1a3-429b-bc41-2a6e4ad6defb", "sighting_of_ref": "indicator--e8026131-109c-4c6e-abc4-f2594727629f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61671ee3-3fe1-4ad4-be9c-6c3e1ea1868c", "sighting_of_ref": "indicator--e8026131-109c-4c6e-abc4-f2594727629f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--350f0bb1-4ed8-43de-acf4-fd765acb1f5f", "sighting_of_ref": "indicator--e8026131-109c-4c6e-abc4-f2594727629f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d0317c-c153-402b-b89a-ede830034085", "sighting_of_ref": "indicator--d61c8756-bed1-4a1c-8f16-8b3a5bd1f7e4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1ba49a-8179-4f87-a624-37eedbfdfc28", "sighting_of_ref": "indicator--d61c8756-bed1-4a1c-8f16-8b3a5bd1f7e4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2858263b-138e-41e5-a21b-8e5b3a16a8ef", "sighting_of_ref": "indicator--d61c8756-bed1-4a1c-8f16-8b3a5bd1f7e4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2701262-cd32-4ae9-9b9b-392a57875e5d", "sighting_of_ref": "indicator--9e4f59dc-9f66-4389-9691-1d6a1997fe20", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db0014a-a68d-4dea-ab1e-bf69967da106", "sighting_of_ref": "indicator--9e4f59dc-9f66-4389-9691-1d6a1997fe20", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5187faf8-10e1-4109-9a95-6a1b42b44fca", "sighting_of_ref": "indicator--9e4f59dc-9f66-4389-9691-1d6a1997fe20", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e02e78-4635-4b0c-b362-fb04aea0fc0f", "sighting_of_ref": "indicator--8f620853-0d54-450a-a9a6-da9dd5d074bb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d61ab04-4073-4455-a12d-67a965947608", "sighting_of_ref": "indicator--8f620853-0d54-450a-a9a6-da9dd5d074bb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206927d0-f372-474f-b343-0dd086704526", "sighting_of_ref": "indicator--8f620853-0d54-450a-a9a6-da9dd5d074bb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b3af79-fb46-41ab-b6fe-23d05dcab0fc", "sighting_of_ref": "indicator--abffda0d-02b6-444f-88c8-1d3a03e129c3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ead047-17f4-4494-abc7-e3bb52fb65e5", "sighting_of_ref": "indicator--abffda0d-02b6-444f-88c8-1d3a03e129c3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8a2625-041f-4b1b-832c-e6c2272802d5", "sighting_of_ref": "indicator--abffda0d-02b6-444f-88c8-1d3a03e129c3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe5c9808-370b-40e1-9e43-fe02dad2c345", "sighting_of_ref": "indicator--a8b0719c-80a5-48c9-b6d9-a82d49b88eb0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41900030-5131-412e-bd3c-43aebc3fbdd6", "sighting_of_ref": "indicator--a8b0719c-80a5-48c9-b6d9-a82d49b88eb0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe97a48-3280-4980-b0d6-e92174f550b1", "sighting_of_ref": "indicator--a8b0719c-80a5-48c9-b6d9-a82d49b88eb0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f627ecbb-dcf6-4e74-8e68-b8f422889579", "sighting_of_ref": "indicator--d43599aa-17c2-4976-a5d8-cc0923fbd112", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196a171b-f936-42e3-998b-784c356b71a6", "sighting_of_ref": "indicator--d43599aa-17c2-4976-a5d8-cc0923fbd112", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829ad29d-0d54-4962-9d30-2aab55320d8a", "sighting_of_ref": "indicator--621a1c8b-ee76-48a4-99ca-4f9590315e67", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13923dd8-a24a-402c-bf7d-3485c6d7695f", "sighting_of_ref": "indicator--621a1c8b-ee76-48a4-99ca-4f9590315e67", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59201476-e400-42cf-8161-c999cb730e05", "sighting_of_ref": "indicator--621a1c8b-ee76-48a4-99ca-4f9590315e67", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a37df3-c476-46c7-bff4-fc4dd8a0345e", "sighting_of_ref": "indicator--7c670d43-7803-487a-a2a3-1ff896059f14", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03965fc9-a5ca-461e-9bc5-af88823cce4a", "sighting_of_ref": "indicator--7c670d43-7803-487a-a2a3-1ff896059f14", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20cdda91-47b4-4adb-b158-39d9d52796e5", "sighting_of_ref": "indicator--3534d036-c193-454f-9ba6-47d7fda31cdf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a34701-4f76-42a5-a90f-ae664d6dc858", "sighting_of_ref": "indicator--3534d036-c193-454f-9ba6-47d7fda31cdf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb6ba40-956a-4ce8-8dd6-316489aebfd0", "sighting_of_ref": "indicator--857e524e-eb5a-4863-b3e7-3f0ea12dd5cc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1533191-f503-46a5-8b6a-c54d5b42948b", "sighting_of_ref": "indicator--857e524e-eb5a-4863-b3e7-3f0ea12dd5cc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb8eaa3-d659-4842-a008-1601695526ce", "sighting_of_ref": "indicator--0d561403-e2cc-429c-ac0f-34366e87e2b5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ebee1a-caff-4d99-9695-3c15947cc28e", "sighting_of_ref": "indicator--0d561403-e2cc-429c-ac0f-34366e87e2b5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1ddd34-f9f8-40bf-9802-95bd251625b4", "sighting_of_ref": "indicator--0d561403-e2cc-429c-ac0f-34366e87e2b5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4116e52-bf59-4158-b4af-9b52ce145e56", "sighting_of_ref": "indicator--11c81260-9252-48f8-b84e-e64d94129c8f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf023eb-6107-4396-9a72-0919df9ca1e9", "sighting_of_ref": "indicator--11c81260-9252-48f8-b84e-e64d94129c8f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8610600-6406-4b9d-b9e4-b171e9c716d9", "sighting_of_ref": "indicator--c4dcbae6-9ea0-4123-9e75-cdb6ab0c71dd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3fe173-c89c-4ffe-ad4e-03199f09bd4f", "sighting_of_ref": "indicator--c4dcbae6-9ea0-4123-9e75-cdb6ab0c71dd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f93ccf5-1cf7-4f41-9e5b-3a1616fd0752", "sighting_of_ref": "indicator--c4dcbae6-9ea0-4123-9e75-cdb6ab0c71dd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e925ed-429d-49cf-939c-8222df5c87e7", "sighting_of_ref": "indicator--103fc168-d59c-4799-b66e-95adb5947c5e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1ef848-89ed-4c7e-ad4b-b95d1fff461d", "sighting_of_ref": "indicator--103fc168-d59c-4799-b66e-95adb5947c5e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c57eed77-c766-484c-99cc-79c4f8c78e38", "sighting_of_ref": "indicator--103fc168-d59c-4799-b66e-95adb5947c5e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3043d32a-8876-4e76-be08-9b5c51594d94", "sighting_of_ref": "indicator--8f41863a-289e-4b5e-b18c-d287b4854d3e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f091148-9d07-4277-b642-510b792e218a", "sighting_of_ref": "indicator--8f41863a-289e-4b5e-b18c-d287b4854d3e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1406b95-0a82-4290-8e99-fc7cd8f0e30c", "sighting_of_ref": "indicator--8f41863a-289e-4b5e-b18c-d287b4854d3e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46dee192-6f7b-4fee-bf45-f276821fe494", "sighting_of_ref": "indicator--84f6753f-14d8-4122-8bee-abdb9511c4ff", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b21fe1-deab-4fac-9d1e-ff8551f8bea2", "sighting_of_ref": "indicator--84f6753f-14d8-4122-8bee-abdb9511c4ff", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1caaa88d-a0f9-4d9d-8580-2ac25aced406", "sighting_of_ref": "indicator--9faacc24-16de-4b3b-9512-29a43bfc546d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--200d00f5-a6c8-4ac6-a030-24d4c3dcc6f3", "sighting_of_ref": "indicator--9faacc24-16de-4b3b-9512-29a43bfc546d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24144712-ffab-4f3b-94e6-29a40084dfaa", "sighting_of_ref": "indicator--9faacc24-16de-4b3b-9512-29a43bfc546d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ed183c-3868-4a00-8fdd-3bcaa88e25b1", "sighting_of_ref": "indicator--4e15af92-6bf0-4431-b45b-2822d6495a2f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1aebfd-2997-4bb3-bad2-d132764b1b3b", "sighting_of_ref": "indicator--4e15af92-6bf0-4431-b45b-2822d6495a2f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52fc4f8-6cd1-4326-bfd5-d275affb39f4", "sighting_of_ref": "indicator--4e15af92-6bf0-4431-b45b-2822d6495a2f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ec901d-20c3-44a1-aeaf-7b8e9523e389", "sighting_of_ref": "indicator--762f5d80-2559-4ec9-ae5d-415a2697313e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56142d09-af75-4c50-beb7-aeb92b40a0a2", "sighting_of_ref": "indicator--762f5d80-2559-4ec9-ae5d-415a2697313e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c1f924-ce58-4c8e-9777-73ac228099eb", "sighting_of_ref": "indicator--762f5d80-2559-4ec9-ae5d-415a2697313e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d7371d-926c-4575-a1a5-d34368cc2009", "sighting_of_ref": "indicator--03211eed-c11e-460c-b22e-9044fc47d8b0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5936335-89f8-41cf-87fe-96a4e7a6d324", "sighting_of_ref": "indicator--03211eed-c11e-460c-b22e-9044fc47d8b0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80fe1cf-39cd-4b13-9998-04a601d5e9e8", "sighting_of_ref": "indicator--03211eed-c11e-460c-b22e-9044fc47d8b0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c05a52-9fb2-4804-949d-8a16e9c94aa0", "sighting_of_ref": "indicator--7b218282-fe98-4b69-bd15-4d7db22db17c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57d242e-34f4-4b96-ad0b-a79cb1b46d84", "sighting_of_ref": "indicator--7b218282-fe98-4b69-bd15-4d7db22db17c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d822c77-ee32-4858-8ca9-2f2f8533042e", "sighting_of_ref": "indicator--7f8bd82c-4cdf-4147-a65f-15019c29774e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce5a495-85b8-4eff-9016-d57cbe41d583", "sighting_of_ref": "indicator--7f8bd82c-4cdf-4147-a65f-15019c29774e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb81b633-ae82-4855-a0a8-adb22542e2f0", "sighting_of_ref": "indicator--7f8bd82c-4cdf-4147-a65f-15019c29774e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15796fbc-6500-456b-9c93-068780ddcdb9", "sighting_of_ref": "indicator--6fac3f42-dff0-442f-a3bd-7cc696bb4101", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411e4809-9101-4595-af0c-a0c4080d092a", "sighting_of_ref": "indicator--6fac3f42-dff0-442f-a3bd-7cc696bb4101", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18cf2212-3480-459a-a063-bee7e5fc2a13", "sighting_of_ref": "indicator--6fac3f42-dff0-442f-a3bd-7cc696bb4101", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71260a6d-8228-4a61-82cf-712bbe45705e", "sighting_of_ref": "indicator--7439cb6b-4684-4198-98be-5a2601764782", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e225ae-a1f0-45cc-84e7-fa811d8f12b0", "sighting_of_ref": "indicator--7439cb6b-4684-4198-98be-5a2601764782", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a8c5cb9-1759-4def-bdaf-abc083812b65", "sighting_of_ref": "indicator--7439cb6b-4684-4198-98be-5a2601764782", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d077f7f2-09fc-4d90-b30c-8c984f2466e7", "sighting_of_ref": "indicator--7cbba8b2-544a-4faa-92d2-93196a420c81", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82eb809d-f9a8-4be9-8521-8087413c071d", "sighting_of_ref": "indicator--7cbba8b2-544a-4faa-92d2-93196a420c81", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d1bb59-cdb4-489b-a380-527fb0d545e5", "sighting_of_ref": "indicator--7cbba8b2-544a-4faa-92d2-93196a420c81", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d86f37-f67d-4df1-a224-de6e33974f8f", "sighting_of_ref": "indicator--89980675-080e-433c-8e89-dbcbeaf9a8da", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--397a47e1-a140-4dc5-bc5d-1ccd3884b0a2", "sighting_of_ref": "indicator--89980675-080e-433c-8e89-dbcbeaf9a8da", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c61278-1927-497b-a348-31a5e2901a3d", "sighting_of_ref": "indicator--89980675-080e-433c-8e89-dbcbeaf9a8da", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8cdc81d-850e-459a-98d8-961e8cfa889b", "sighting_of_ref": "indicator--9e07893d-db9f-45e5-875b-e0466c7724a4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf53c5c-f52d-4a29-88a2-f6ac28a782a1", "sighting_of_ref": "indicator--9e07893d-db9f-45e5-875b-e0466c7724a4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baac50c0-6b75-463b-a7d3-c3975b33fa09", "sighting_of_ref": "indicator--9e07893d-db9f-45e5-875b-e0466c7724a4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e3b23b-960f-43b6-afd3-46ea7cf627dc", "sighting_of_ref": "indicator--fa7d5675-8290-489f-8885-ed8a55035f78", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a84b2e6-d1d4-47b7-9163-12464c134997", "sighting_of_ref": "indicator--fa7d5675-8290-489f-8885-ed8a55035f78", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856c7321-fc1c-4a38-95ce-e974d1e14e68", "sighting_of_ref": "indicator--fa7d5675-8290-489f-8885-ed8a55035f78", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221eeabd-9d9a-41ea-8baf-9837a62e545e", "sighting_of_ref": "indicator--6438fee6-b4d0-4dab-b9bd-088cbf3fc01c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08aa68d9-7412-44be-b163-7a62d476242f", "sighting_of_ref": "indicator--6438fee6-b4d0-4dab-b9bd-088cbf3fc01c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--682fee30-f148-493a-9036-d182fe17a313", "sighting_of_ref": "indicator--8b55121f-35de-4d2b-b41e-38cffaa7e5c6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d814774c-d36d-409d-9e33-20c31685517b", "sighting_of_ref": "indicator--8b55121f-35de-4d2b-b41e-38cffaa7e5c6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ecf7bb-d9c2-4752-b862-5c5dff35d492", "sighting_of_ref": "indicator--8b55121f-35de-4d2b-b41e-38cffaa7e5c6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a008324-e8f2-46eb-8f33-3a85b2d9b157", "sighting_of_ref": "indicator--2b3ee8d4-55d1-4e05-8afc-6899ca64e3cd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce674ceb-612d-4d1a-b320-5b0e663fc8d4", "sighting_of_ref": "indicator--2b3ee8d4-55d1-4e05-8afc-6899ca64e3cd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec8d205-9c86-4354-9319-18052e09e100", "sighting_of_ref": "indicator--d79fee85-546c-4004-b8b5-4273ed638814", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d54d2a-ab0b-41a2-b113-44c6194ef54c", "sighting_of_ref": "indicator--d79fee85-546c-4004-b8b5-4273ed638814", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2881036-406d-4c2d-ae5c-0cb8712b7b10", "sighting_of_ref": "indicator--d79fee85-546c-4004-b8b5-4273ed638814", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74869624-7dc3-4f1c-997f-2c0da2338593", "sighting_of_ref": "indicator--0cbdbe8f-5e4d-46f2-9bad-2053ddbde1f5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c9e170-2d39-4dbf-ab3b-fdab11ab0a46", "sighting_of_ref": "indicator--0cbdbe8f-5e4d-46f2-9bad-2053ddbde1f5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c55ea43-a002-4a4a-95b0-488642937784", "sighting_of_ref": "indicator--0cbdbe8f-5e4d-46f2-9bad-2053ddbde1f5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fdf461a-7b16-497c-8226-ab019c2af130", "sighting_of_ref": "indicator--8f2c3ae1-7d7d-43d5-8fb1-120a5cd3bf7b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9151b2e3-307f-4c91-9a86-33550c19c326", "sighting_of_ref": "indicator--8f2c3ae1-7d7d-43d5-8fb1-120a5cd3bf7b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b476792-4695-4467-929d-474f28c69566", "sighting_of_ref": "indicator--8f2c3ae1-7d7d-43d5-8fb1-120a5cd3bf7b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1614e0-2b05-4d24-b3ff-51e1f130fd40", "sighting_of_ref": "indicator--dd8e76db-3cc6-498d-aa5d-664008bbcd9d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c2bd6c0-2e09-4cb1-9157-66e23120dfad", "sighting_of_ref": "indicator--dd8e76db-3cc6-498d-aa5d-664008bbcd9d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b3c194-00c3-4674-ad30-16c93845b827", "sighting_of_ref": "indicator--dd8e76db-3cc6-498d-aa5d-664008bbcd9d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b97c030-fd5f-4df3-aae4-fd8681b814e5", "sighting_of_ref": "indicator--72b6bd65-fbe5-4246-bea3-e5ee02dd8a7b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a4ab2b7-6960-4c63-ae9f-7d3f56b9e89d", "sighting_of_ref": "indicator--72b6bd65-fbe5-4246-bea3-e5ee02dd8a7b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf76dfa5-ea61-4db3-a08c-dfb7c22f5664", "sighting_of_ref": "indicator--b0fc04c2-2603-4669-9b75-93dd92a42878", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c39e82-0303-47b3-acd2-f41defb22268", "sighting_of_ref": "indicator--b0fc04c2-2603-4669-9b75-93dd92a42878", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f091f2-058d-48ff-a5c7-e8d16d471a35", "sighting_of_ref": "indicator--b0fc04c2-2603-4669-9b75-93dd92a42878", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9c6a8d-78fd-4890-a40c-3b419e3c83ce", "sighting_of_ref": "indicator--24bc9210-6fa2-484d-9e36-3401fe02bbd9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6704e14e-7542-43ac-b7c6-d3ff56addda2", "sighting_of_ref": "indicator--24bc9210-6fa2-484d-9e36-3401fe02bbd9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b157387-fe19-49f5-b7ac-0c525e9bf0f3", "sighting_of_ref": "indicator--24bc9210-6fa2-484d-9e36-3401fe02bbd9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c14b66-b5a6-479b-bbbe-680a46901dca", "sighting_of_ref": "indicator--e7fd8942-96a5-4184-a650-ba4fe03f0a55", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e5cfdc-7d31-4f5f-ab12-cd9f63fa70b4", "sighting_of_ref": "indicator--e7fd8942-96a5-4184-a650-ba4fe03f0a55", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ecf8b8d-cd87-44b7-8da3-14c723f217ca", "sighting_of_ref": "indicator--e7fd8942-96a5-4184-a650-ba4fe03f0a55", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf2fd7bc-a690-4036-8cff-0e45d94bb175", "sighting_of_ref": "indicator--68661a6a-e064-4cce-a309-cecff9d712c1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d7370c0-2084-43da-8a41-cb445dcbc39c", "sighting_of_ref": "indicator--68661a6a-e064-4cce-a309-cecff9d712c1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b2b6976-934d-48b4-a0fa-385fee1236d2", "sighting_of_ref": "indicator--68661a6a-e064-4cce-a309-cecff9d712c1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b64e57-f6af-4c53-b982-588c20513c7a", "sighting_of_ref": "indicator--7ae239c9-825b-482a-8b18-bca83ed3a3b8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a47aa1-49ee-496f-a461-cc331b6ec181", "sighting_of_ref": "indicator--7ae239c9-825b-482a-8b18-bca83ed3a3b8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a9f1d8b-ed46-45df-80ac-77204d317c77", "sighting_of_ref": "indicator--7ae239c9-825b-482a-8b18-bca83ed3a3b8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6abc7b8-6ecf-40c2-84e8-58d51bfd0315", "sighting_of_ref": "indicator--408116e5-b64e-427f-a5e8-f8cebd8adb40", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e042ea8-7195-4eac-8f79-8956fc9c6451", "sighting_of_ref": "indicator--408116e5-b64e-427f-a5e8-f8cebd8adb40", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903d3e20-de72-4cde-a3de-2c5c1f445fc9", "sighting_of_ref": "indicator--408116e5-b64e-427f-a5e8-f8cebd8adb40", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b51a5f-94da-4fbf-ad89-c037483908a3", "sighting_of_ref": "indicator--388b600a-3e09-420a-8d9a-06a6b6cc108f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e190239b-9673-4935-9940-8725b06ba698", "sighting_of_ref": "indicator--388b600a-3e09-420a-8d9a-06a6b6cc108f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2b24327-7f41-4775-85b7-5f855617e1d9", "sighting_of_ref": "indicator--388b600a-3e09-420a-8d9a-06a6b6cc108f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c4873e-ded4-413d-b3ab-47aa82dff399", "sighting_of_ref": "indicator--388b600a-3e09-420a-8d9a-06a6b6cc108f", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b5e5e8-13eb-46de-9165-5782c53794b0", "sighting_of_ref": "indicator--2f9a8369-4896-4199-926f-170c7c7c14ec", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18168632-a3da-417d-80b2-d6fe91705bd8", "sighting_of_ref": "indicator--2f9a8369-4896-4199-926f-170c7c7c14ec", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd181ec1-95d0-4b45-975b-59d4c6d39ba1", "sighting_of_ref": "indicator--2f9a8369-4896-4199-926f-170c7c7c14ec", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c657c2-07df-4dbf-b980-65ca60fe12d1", "sighting_of_ref": "indicator--3b94be0b-fe80-4091-9122-42ae0f5ae57b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce8301e5-3022-4506-b325-df50dccf0a85", "sighting_of_ref": "indicator--3b94be0b-fe80-4091-9122-42ae0f5ae57b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d326eaf-4733-4c34-8614-a7507b89f68c", "sighting_of_ref": "indicator--a06ba148-488e-472c-8bed-cf512fd410dd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8dfa68-344a-4c56-a8e9-41fc27d4b53d", "sighting_of_ref": "indicator--a06ba148-488e-472c-8bed-cf512fd410dd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966b62f8-e6fd-4db8-9752-4c4f4591120d", "sighting_of_ref": "indicator--4ab8afe0-978b-42dc-8805-694e192d42bd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a11644f-0da7-44da-8429-244777cb250c", "sighting_of_ref": "indicator--4ab8afe0-978b-42dc-8805-694e192d42bd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2394fac4-e8c7-4875-b4a0-717012be9428", "sighting_of_ref": "indicator--4ab8afe0-978b-42dc-8805-694e192d42bd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b9a95d0-9fd5-4ea4-8127-45f3379f2e57", "sighting_of_ref": "indicator--8a051143-6141-4160-8ccc-07a460561d50", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--727c4f60-1f8d-4205-bea9-f91f2fb0181c", "sighting_of_ref": "indicator--8a051143-6141-4160-8ccc-07a460561d50", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--604f34cc-efd5-4d3d-a811-d5997d3492fd", "sighting_of_ref": "indicator--8a051143-6141-4160-8ccc-07a460561d50", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e753a2-572e-4e9a-9b54-bd03a832a056", "sighting_of_ref": "indicator--0216e769-13bf-482f-8c83-c9f74844079e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6435fd-969b-4dfa-8b8f-8891d153d334", "sighting_of_ref": "indicator--0216e769-13bf-482f-8c83-c9f74844079e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--335e2744-2e1d-42c6-9564-9c81ea65ca94", "sighting_of_ref": "indicator--0216e769-13bf-482f-8c83-c9f74844079e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--025ea19f-54de-485d-9ff3-9424d0ee56c4", "sighting_of_ref": "indicator--c88a197a-a42d-4bd6-b9b1-820cd22235f7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ad0dba-7344-4e4c-b18b-be2059d518d8", "sighting_of_ref": "indicator--c88a197a-a42d-4bd6-b9b1-820cd22235f7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e78503-da00-4ce3-9efa-f7e511d3cfc9", "sighting_of_ref": "indicator--c88a197a-a42d-4bd6-b9b1-820cd22235f7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4a1cac5-e93f-476c-94a0-0b1f86aaeee5", "sighting_of_ref": "indicator--d3f5d6cb-c5f1-4d96-902e-b2ab354c6fb1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ba68b0-8a7e-49de-b270-241387fd7672", "sighting_of_ref": "indicator--d3f5d6cb-c5f1-4d96-902e-b2ab354c6fb1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac5f95c-b267-4d0e-804e-4a41c794998a", "sighting_of_ref": "indicator--d3f5d6cb-c5f1-4d96-902e-b2ab354c6fb1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd3c4aaa-d9d1-4842-95c6-f8c25af69baa", "sighting_of_ref": "indicator--de035d79-60fe-4447-815a-1643a636b86e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fe57b2-1f73-425d-8241-12f6f754894e", "sighting_of_ref": "indicator--de035d79-60fe-4447-815a-1643a636b86e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b21297-7476-446e-8c61-158a4c47a697", "sighting_of_ref": "indicator--de035d79-60fe-4447-815a-1643a636b86e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412cda6e-19d8-4381-b846-1fb561ecb7b1", "sighting_of_ref": "indicator--f1d5d017-59d6-4a6b-8402-4b1db49413b1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b26a02-f783-4349-9cd3-1f2adbe93add", "sighting_of_ref": "indicator--f1d5d017-59d6-4a6b-8402-4b1db49413b1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71786dec-d336-4574-9cf5-0644dde73f59", "sighting_of_ref": "indicator--f1d5d017-59d6-4a6b-8402-4b1db49413b1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a4ef45-7b34-4fe5-acf0-3743bb80bf56", "sighting_of_ref": "indicator--70065d9b-4fd9-45c6-9e08-9758d83abc77", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54f00a7-85f4-4c9c-bc53-feef7a545aab", "sighting_of_ref": "indicator--70065d9b-4fd9-45c6-9e08-9758d83abc77", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b6acac-e809-491f-9892-b0263d09c94d", "sighting_of_ref": "indicator--70065d9b-4fd9-45c6-9e08-9758d83abc77", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd074ea-76cf-447e-a6ec-77eba2e3c945", "sighting_of_ref": "indicator--0b834c43-a047-4562-9d89-26711a3df2e4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ca2940-af3d-4f28-ad3f-353e6a9492ef", "sighting_of_ref": "indicator--0b834c43-a047-4562-9d89-26711a3df2e4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b682fe1f-a87a-428c-a6cb-f2a88d923008", "sighting_of_ref": "indicator--0b834c43-a047-4562-9d89-26711a3df2e4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3408c51-601d-4f9f-a66b-5c51aa124184", "sighting_of_ref": "indicator--18b6e022-8bd8-4a36-baff-0c3f9cd63ff7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3227c708-6a5e-471a-aebd-98194883d188", "sighting_of_ref": "indicator--18b6e022-8bd8-4a36-baff-0c3f9cd63ff7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a15a35-4450-42c5-b00b-c245d808f03c", "sighting_of_ref": "indicator--18b6e022-8bd8-4a36-baff-0c3f9cd63ff7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cbf0b70-7c24-4011-a84e-567a14cdb277", "sighting_of_ref": "indicator--931bbf0c-e294-4701-98a9-64d02a5b5fbb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a940bd1-98c9-45a9-9ec7-02750a04542f", "sighting_of_ref": "indicator--931bbf0c-e294-4701-98a9-64d02a5b5fbb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b80afd2e-2b7b-4dfc-b223-1de0269e2e7f", "sighting_of_ref": "indicator--931bbf0c-e294-4701-98a9-64d02a5b5fbb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c84968f7-590d-4ed8-b45d-ace37a2e8e30", "sighting_of_ref": "indicator--9d1252e7-6507-44f9-9883-d4cb7cc0fb17", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440efd6b-e5e9-4619-8571-2fdf6c4da716", "sighting_of_ref": "indicator--9d1252e7-6507-44f9-9883-d4cb7cc0fb17", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63ee758-e83c-402a-86aa-02e966aeef5f", "sighting_of_ref": "indicator--9d1252e7-6507-44f9-9883-d4cb7cc0fb17", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c2b8dc-6c23-490a-bfc1-83e806e8412c", "sighting_of_ref": "indicator--c2e8ac4a-8c96-45af-93b8-cbcfc55750ac", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996a24eb-5dd1-42aa-9623-8f4ad7dcb95a", "sighting_of_ref": "indicator--c2e8ac4a-8c96-45af-93b8-cbcfc55750ac", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0080609-e553-451c-811e-3d7fadd134bd", "sighting_of_ref": "indicator--c2e8ac4a-8c96-45af-93b8-cbcfc55750ac", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c15fabc-9c31-4564-b24f-d6a9a4123acb", "sighting_of_ref": "indicator--c2e8ac4a-8c96-45af-93b8-cbcfc55750ac", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1ffd2d-6507-4a6a-8470-6804f1491ab2", "sighting_of_ref": "indicator--3a435662-8cc1-4785-a1e6-273e7d633afb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4fe9d0b-bf3e-41cb-9782-b9faae320220", "sighting_of_ref": "indicator--3a435662-8cc1-4785-a1e6-273e7d633afb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73cc4e4c-b792-4f2a-b5b7-aa5853e5d7b5", "sighting_of_ref": "indicator--3a435662-8cc1-4785-a1e6-273e7d633afb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1516cbba-f3b2-4692-83d6-3b931b139b1c", "sighting_of_ref": "indicator--cceeac1d-c59b-4db2-ab50-d803945a1922", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b28ed3c-be02-4d1b-91e4-01faadb377be", "sighting_of_ref": "indicator--cceeac1d-c59b-4db2-ab50-d803945a1922", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2287d061-7a8b-4c19-9b48-75280473aa80", "sighting_of_ref": "indicator--cceeac1d-c59b-4db2-ab50-d803945a1922", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9228a3ad-71c4-4f72-afa7-5eebe21a9bd2", "sighting_of_ref": "indicator--a1954141-30d5-4b66-b482-106b6a7cbcde", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a6c8f8-1170-400c-b28e-389c8b9ecadb", "sighting_of_ref": "indicator--a1954141-30d5-4b66-b482-106b6a7cbcde", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57583c77-34d3-4170-826d-05934417a09d", "sighting_of_ref": "indicator--a1954141-30d5-4b66-b482-106b6a7cbcde", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c5ab8bc-89da-4115-b057-a1acbe88897c", "sighting_of_ref": "indicator--964256a7-bf64-4ec9-91a7-e5fd97d489c1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fafbacf8-bb85-41a1-8885-44c8c30ad809", "sighting_of_ref": "indicator--964256a7-bf64-4ec9-91a7-e5fd97d489c1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ab0d69-2f96-4d71-ac90-8d2106469ced", "sighting_of_ref": "indicator--964256a7-bf64-4ec9-91a7-e5fd97d489c1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7759e4b2-c61a-4e47-a31b-4fda7e2c4444", "sighting_of_ref": "indicator--be1ed735-8bb9-4454-86e1-ff62c07884f3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842c78a1-687b-4ed3-87c8-8cd2ed6a9752", "sighting_of_ref": "indicator--be1ed735-8bb9-4454-86e1-ff62c07884f3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa0d0be-c905-4f4e-9552-1322177092e8", "sighting_of_ref": "indicator--6e228aa7-4c16-4196-ad9f-577c248354d1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e9a761b-5202-4f0e-9a9c-8a433f072343", "sighting_of_ref": "indicator--6e228aa7-4c16-4196-ad9f-577c248354d1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13336723-5f14-4bf8-94e4-a30fa78b01c8", "sighting_of_ref": "indicator--6e228aa7-4c16-4196-ad9f-577c248354d1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b549fca6-90b7-4399-af08-e849ca910ef8", "sighting_of_ref": "indicator--c506be9c-144a-4402-b503-f78ce7e99e6c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42679405-a64b-418a-81f5-82668ef92d93", "sighting_of_ref": "indicator--c506be9c-144a-4402-b503-f78ce7e99e6c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a52415-0853-439a-b6af-d03414d206d5", "sighting_of_ref": "indicator--c506be9c-144a-4402-b503-f78ce7e99e6c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82fc1255-5ef4-4e02-8110-a2e403a29568", "sighting_of_ref": "indicator--3f1d7852-14e1-4c2d-895d-41b2024a9fb3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28089505-6c80-433b-8550-557d23357f8d", "sighting_of_ref": "indicator--3f1d7852-14e1-4c2d-895d-41b2024a9fb3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac903e4b-ba8d-4a3d-b5f6-ff5a0cca515d", "sighting_of_ref": "indicator--3f1d7852-14e1-4c2d-895d-41b2024a9fb3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d1949c-34a4-4154-871b-2ab5d6f9adb6", "sighting_of_ref": "indicator--d7715b29-dcdf-4a45-8b3d-df2691c87575", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a99a58da-44af-4da8-9349-78bc570b377d", "sighting_of_ref": "indicator--d7715b29-dcdf-4a45-8b3d-df2691c87575", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d0a981-0363-482f-9457-1f59dd3bf465", "sighting_of_ref": "indicator--d7715b29-dcdf-4a45-8b3d-df2691c87575", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf8db63-c446-473d-92cc-46b4c40c0429", "sighting_of_ref": "indicator--faafdac5-9330-4f64-bbcd-406d5bae754f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54eed9ae-3e4b-4557-b10d-6bac41ade016", "sighting_of_ref": "indicator--faafdac5-9330-4f64-bbcd-406d5bae754f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc4b3e06-c78b-4697-914f-da0881930907", "sighting_of_ref": "indicator--faafdac5-9330-4f64-bbcd-406d5bae754f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb41c1b-2c74-474d-ad68-2e9ad5edc480", "sighting_of_ref": "indicator--46998d75-5dcb-43fa-9ab7-0f552d5ab5a0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f891612d-20ad-440f-a319-df1187ea425f", "sighting_of_ref": "indicator--46998d75-5dcb-43fa-9ab7-0f552d5ab5a0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97686214-526f-438a-9523-946c0820b2e8", "sighting_of_ref": "indicator--46998d75-5dcb-43fa-9ab7-0f552d5ab5a0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638a7009-c5ab-4b07-ad50-a1905e614e92", "sighting_of_ref": "indicator--8ad7fad0-ba30-4e6d-ae67-ef1acce73339", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf5792e-e6f2-4edc-9a6c-3160124996b9", "sighting_of_ref": "indicator--8ad7fad0-ba30-4e6d-ae67-ef1acce73339", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034dcabf-747b-4818-88cb-4a22fea35091", "sighting_of_ref": "indicator--97b89b63-c958-4c8e-a990-956ac629f0d6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ff5b45-7bec-4765-aa2a-99efc297dc4e", "sighting_of_ref": "indicator--97b89b63-c958-4c8e-a990-956ac629f0d6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05cc0cb4-b4d0-4fd5-82cd-6270d111daa8", "sighting_of_ref": "indicator--97b89b63-c958-4c8e-a990-956ac629f0d6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f3385f5-2a22-4022-a48e-6ef0e1af6725", "sighting_of_ref": "indicator--ed08b495-4c08-44ef-a144-c710ee416215", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca74a0fd-0954-4389-9a5f-dab93a268369", "sighting_of_ref": "indicator--ed08b495-4c08-44ef-a144-c710ee416215", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7569acb8-ab08-4467-81e6-1e931ee7997c", "sighting_of_ref": "indicator--ed08b495-4c08-44ef-a144-c710ee416215", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2efe11-0263-4e6b-a8e8-35d2b64ec89f", "sighting_of_ref": "indicator--c647b712-b047-41e3-bcc0-a871f4dcced1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9680c913-1d75-4acc-b6f6-8a55ab76ef56", "sighting_of_ref": "indicator--c647b712-b047-41e3-bcc0-a871f4dcced1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a73f513-5549-4d4e-8497-825dde2883cc", "sighting_of_ref": "indicator--c647b712-b047-41e3-bcc0-a871f4dcced1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6fd9c3e-9f7a-4e3f-8152-aff6a9c45c81", "sighting_of_ref": "indicator--d6a50d47-297e-4a45-b5dd-162b5d0b05cf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52745a8-d8c5-4e0d-8602-13700a021d17", "sighting_of_ref": "indicator--d6a50d47-297e-4a45-b5dd-162b5d0b05cf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45031890-724b-4c56-9b98-bbe96f221eff", "sighting_of_ref": "indicator--d6a50d47-297e-4a45-b5dd-162b5d0b05cf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984985ec-94ec-469f-a2eb-a899b7a607a9", "sighting_of_ref": "indicator--2151f1f5-59e8-4a71-bf2a-b3861182b4a6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1edc23-49b5-420e-8087-6aae6785f1b8", "sighting_of_ref": "indicator--2151f1f5-59e8-4a71-bf2a-b3861182b4a6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a34f6c-5ce9-4875-8a21-d4edfb2d4fe3", "sighting_of_ref": "indicator--7d0d8d8d-21ac-4348-ab58-330dc6725a5c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b3f67a-7d70-478d-ad35-fbdf722df62c", "sighting_of_ref": "indicator--7d0d8d8d-21ac-4348-ab58-330dc6725a5c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4960d5c-6e20-4917-b207-c1e94b13f97b", "sighting_of_ref": "indicator--7d0d8d8d-21ac-4348-ab58-330dc6725a5c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13210db6-9261-4c00-bf73-d01e74a18a70", "sighting_of_ref": "indicator--7d0d8d8d-21ac-4348-ab58-330dc6725a5c", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad41575b-dade-48d9-9c9a-b9d35f457b61", "sighting_of_ref": "indicator--8c5a49d1-19a4-4518-b252-9afbf9827c75", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a6f02e-a2c5-4e4b-9820-832ecfabf393", "sighting_of_ref": "indicator--8c5a49d1-19a4-4518-b252-9afbf9827c75", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe771c6-7db0-46e3-a03b-2426b59f7b37", "sighting_of_ref": "indicator--8c5a49d1-19a4-4518-b252-9afbf9827c75", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693f81b9-72ef-40fb-a254-978fff9db5c2", "sighting_of_ref": "indicator--4db8b7ab-f752-485c-a95d-92cbb62c6d83", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4c02cc-3c09-466e-b21e-3bb382c4a5b3", "sighting_of_ref": "indicator--4db8b7ab-f752-485c-a95d-92cbb62c6d83", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bedd7c97-ad12-494c-9aaa-e25f35258f90", "sighting_of_ref": "indicator--4db8b7ab-f752-485c-a95d-92cbb62c6d83", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a7b086-4e24-48f0-b2c1-fb2b4de8a10c", "sighting_of_ref": "indicator--ad83ffe7-3091-4c1a-8215-0237f984e539", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d0e95e-cbf6-43ca-a725-5839e92b9ba5", "sighting_of_ref": "indicator--ad83ffe7-3091-4c1a-8215-0237f984e539", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76228098-8aa0-4739-9a12-510e8069965b", "sighting_of_ref": "indicator--ad83ffe7-3091-4c1a-8215-0237f984e539", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db063ef2-2204-4a87-b6e1-c98b5acea15c", "sighting_of_ref": "indicator--0cf70af7-7ecc-4e7c-9d09-22140a4226b0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--303bde59-d4b5-4ed9-8a9a-ddc3635ebbf9", "sighting_of_ref": "indicator--0cf70af7-7ecc-4e7c-9d09-22140a4226b0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d0ddee-a165-432a-8c9f-41d01d841170", "sighting_of_ref": "indicator--0cf70af7-7ecc-4e7c-9d09-22140a4226b0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436ef075-4921-42b5-bbbe-35e1ffb1259c", "sighting_of_ref": "indicator--6188dd2c-7569-4962-8bfe-0d2cf7c37f75", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ecf0501-562d-46df-8c49-82290e47488f", "sighting_of_ref": "indicator--6188dd2c-7569-4962-8bfe-0d2cf7c37f75", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac97c1f7-75de-44ba-a751-adde04b0246b", "sighting_of_ref": "indicator--5d6a148b-b6fe-46f0-a49f-236d426a0cba", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e144372b-fb74-4fb2-a946-e9f48e6e248c", "sighting_of_ref": "indicator--5d6a148b-b6fe-46f0-a49f-236d426a0cba", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d725779d-049e-41d4-9a0f-2f0df6734f12", "sighting_of_ref": "indicator--5d6a148b-b6fe-46f0-a49f-236d426a0cba", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2438e0cb-36c1-493f-9946-981455daa09f", "sighting_of_ref": "indicator--d8e0d9c7-b760-4ac4-8a06-a53d5863ece6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240c1229-7e88-459a-96f0-c0e9876c634c", "sighting_of_ref": "indicator--d8e0d9c7-b760-4ac4-8a06-a53d5863ece6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16af288e-37bf-468d-9678-6d807a201d7b", "sighting_of_ref": "indicator--d8e0d9c7-b760-4ac4-8a06-a53d5863ece6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3988bd-8822-4390-aee2-f16dc7649feb", "sighting_of_ref": "indicator--ff9b62c9-298e-4ad5-b492-587fd8b69a29", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb14c543-1315-4ca2-8e69-94cf51588885", "sighting_of_ref": "indicator--ff9b62c9-298e-4ad5-b492-587fd8b69a29", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25122eda-b949-4594-b4f1-99ee0ec0fa92", "sighting_of_ref": "indicator--ff9b62c9-298e-4ad5-b492-587fd8b69a29", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--145a2c60-bb15-42a1-99a6-e05e7676253b", "sighting_of_ref": "indicator--8495bb94-e887-4640-b0c2-79d025baab39", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6149e8-4f33-460a-a435-08b0c5b15d58", "sighting_of_ref": "indicator--8495bb94-e887-4640-b0c2-79d025baab39", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef80a758-80c4-4e9c-93d0-17bf3b6adaa7", "sighting_of_ref": "indicator--aa1f5382-17d6-43a4-ae60-f1816d4b54d1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a67f51-2682-478a-ade2-c043116dff2d", "sighting_of_ref": "indicator--aa1f5382-17d6-43a4-ae60-f1816d4b54d1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--062f9b38-be48-40af-bd1c-b8ac2c2e8597", "sighting_of_ref": "indicator--aa1f5382-17d6-43a4-ae60-f1816d4b54d1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a54b78-94b0-4513-828b-f02be645b82b", "sighting_of_ref": "indicator--3ac6b64e-31ca-4797-9a09-7726b6e900fd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3329cb80-e90c-47b2-895e-c6d50c90c960", "sighting_of_ref": "indicator--3ac83075-4340-44e4-8c4c-fffd0f20fd01", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11fd86c-24b6-40ed-b4ad-9db8a75a564c", "sighting_of_ref": "indicator--3ac83075-4340-44e4-8c4c-fffd0f20fd01", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b14fe75-8460-4a67-a241-05ef5ea8cc31", "sighting_of_ref": "indicator--0fc5abd1-c21b-4bf3-b4c8-7d62fdf389aa", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90c2fcb-c3f9-4e0b-993e-80411bfc8747", "sighting_of_ref": "indicator--2c37468f-e5fe-48ce-9639-1ce621dd7426", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d6a3fd-4202-4fba-8634-0b1bc0394538", "sighting_of_ref": "indicator--38b685ed-1569-4493-8414-c24f4e5f84dd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3c32360-4036-409d-ac53-da57f8deafaa", "sighting_of_ref": "indicator--d582fe0c-720f-42b2-b04e-c4ef10d7a948", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c842cf-b7b2-41c3-b3af-e11c3104d9ff", "sighting_of_ref": "indicator--d582fe0c-720f-42b2-b04e-c4ef10d7a948", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a682d4b7-7e57-4f04-b2af-4130fe738180", "sighting_of_ref": "indicator--b3a52d42-b6b2-446f-9ab6-37f701092b73", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e421275-b706-4a68-ae85-3a4502d5851e", "sighting_of_ref": "indicator--b3a52d42-b6b2-446f-9ab6-37f701092b73", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c092bf5d-8c3d-4eb3-81f0-9edf403df1c9", "sighting_of_ref": "indicator--b3a52d42-b6b2-446f-9ab6-37f701092b73", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97cc15e2-4bbf-477b-b4e9-c5a86f0a26b1", "sighting_of_ref": "indicator--ef719399-13ca-4ed6-90e2-5665805ca702", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8679a5e-ab52-42f9-84f3-4b7bdc23eb0f", "sighting_of_ref": "indicator--ef719399-13ca-4ed6-90e2-5665805ca702", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b75199-0804-489f-9f6a-ac752f5fe34b", "sighting_of_ref": "indicator--ef719399-13ca-4ed6-90e2-5665805ca702", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f3f7a58-9716-4a70-8236-4fa4f6ff1519", "sighting_of_ref": "indicator--1175c400-bb0b-4174-bbe1-52f1f05bca1e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399d1eaf-5e28-407c-b683-f493187f1113", "sighting_of_ref": "indicator--1e55c668-247a-409c-8c8c-fcb72cdfe8e1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1efa5706-ee32-43b1-91fc-4d7727ef1645", "sighting_of_ref": "indicator--1e55c668-247a-409c-8c8c-fcb72cdfe8e1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c0987a-39fc-4db8-980c-d81aed5849bb", "sighting_of_ref": "indicator--8ecdddd9-a3fd-4ac0-bebc-67141b6a2503", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc13fad-fb4e-4cf7-a23a-8a61a468bb16", "sighting_of_ref": "indicator--8ecdddd9-a3fd-4ac0-bebc-67141b6a2503", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2262a7c-6743-4600-8dff-28f82c753f0b", "sighting_of_ref": "indicator--a6a438c5-5146-4529-bbe2-eebc410c2133", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cabeee90-caf4-4e4b-8b19-595d111faefc", "sighting_of_ref": "indicator--a6a438c5-5146-4529-bbe2-eebc410c2133", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abaef966-c155-4717-a01c-f181ed48f179", "sighting_of_ref": "indicator--8968bae2-47f7-448d-b3e2-981521e2ab71", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df2f11bf-84b9-47fd-b8f8-e68e018d5864", "sighting_of_ref": "indicator--0cdb7b7a-32cb-4b70-aee7-3cff0045635c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad75e87-ff66-4681-903f-dd48e4600a8e", "sighting_of_ref": "indicator--0cdb7b7a-32cb-4b70-aee7-3cff0045635c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee5ad510-c555-45fd-b19b-cd6aa0b56565", "sighting_of_ref": "indicator--0cdb7b7a-32cb-4b70-aee7-3cff0045635c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a143a529-c9bc-4d22-b015-d5d43a727810", "sighting_of_ref": "indicator--c780f848-54fe-4fe9-ab4b-c43515315481", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962420c5-60f7-4c03-a416-315efbae037b", "sighting_of_ref": "indicator--c780f848-54fe-4fe9-ab4b-c43515315481", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee6b9e6-b32f-4e9a-bc55-696632a5dbdd", "sighting_of_ref": "indicator--c780f848-54fe-4fe9-ab4b-c43515315481", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130ad276-afc6-446e-b234-48948cfafe75", "sighting_of_ref": "indicator--9187a96f-e5c8-484b-8d9d-7aae5617aad5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b99175-1ace-480e-ba14-74522420e3b6", "sighting_of_ref": "indicator--9187a96f-e5c8-484b-8d9d-7aae5617aad5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67210e15-db72-4195-b223-1952f518d999", "sighting_of_ref": "indicator--9187a96f-e5c8-484b-8d9d-7aae5617aad5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37fab2db-d708-4092-9b56-63bed4ed2704", "sighting_of_ref": "indicator--cea397aa-1043-4adc-ad49-feac5073c2d6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb5a4b2e-0143-4dee-977a-072d1d6abded", "sighting_of_ref": "indicator--cea397aa-1043-4adc-ad49-feac5073c2d6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c12b4c43-80cb-40b2-b78e-14fa16858961", "sighting_of_ref": "indicator--c832864d-7b91-4832-8ca6-c7f2acd70d17", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bba9103-d2f1-4bf1-abf1-e7d18fdf5fa7", "sighting_of_ref": "indicator--e936f347-3133-4c8a-8ec4-c3a8eb9ad214", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d6c8b5-4840-4d33-adce-d6d5ec4b9081", "sighting_of_ref": "indicator--e936f347-3133-4c8a-8ec4-c3a8eb9ad214", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b21a55-2b91-47da-b9f3-61baa77f4add", "sighting_of_ref": "indicator--e936f347-3133-4c8a-8ec4-c3a8eb9ad214", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee10428d-bbda-4fb5-88e3-2004208880b8", "sighting_of_ref": "indicator--0769a04e-35b3-4e60-b6c2-478fb597bf89", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d57175e-9aaa-42e5-9494-93f2d22a345f", "sighting_of_ref": "indicator--51ef3c3c-91ec-4677-9ef3-6fa84ad051ca", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e75722a4-2cad-4dde-b468-a34ddfcbbd9e", "sighting_of_ref": "indicator--586e0153-88ad-46b3-ba94-fa27233df021", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6f78003-4814-4195-8307-12154928f77d", "sighting_of_ref": "indicator--586e0153-88ad-46b3-ba94-fa27233df021", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f86344-a1df-4fbf-a8aa-957c9f774735", "sighting_of_ref": "indicator--586e0153-88ad-46b3-ba94-fa27233df021", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4887dfe4-8212-40ed-9ced-62e22d9621a3", "sighting_of_ref": "indicator--b1dee002-8ac9-4cb8-b499-8c378c21518a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7038e5a4-5841-4369-b98a-ffe2010f310d", "sighting_of_ref": "indicator--b1dee002-8ac9-4cb8-b499-8c378c21518a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af95aca7-453b-47bc-9265-2703b4043649", "sighting_of_ref": "indicator--b1dee002-8ac9-4cb8-b499-8c378c21518a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe10748-2912-4425-98c1-06b2a8bb5631", "sighting_of_ref": "indicator--f2927301-a617-448a-a1ca-fcd7f4204318", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7f4c92-de0c-4d35-a51f-6ccf26e25f23", "sighting_of_ref": "indicator--f2927301-a617-448a-a1ca-fcd7f4204318", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--640daab2-21cb-4f95-b995-27dc2a6f1d90", "sighting_of_ref": "indicator--fdca18c8-a2cf-44e3-b356-f96c0195d64c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b011ac00-c343-4850-836b-095d1b193ecc", "sighting_of_ref": "indicator--fdca18c8-a2cf-44e3-b356-f96c0195d64c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fccb57a7-5783-49ac-b466-06bc02aaa2e8", "sighting_of_ref": "indicator--fdca18c8-a2cf-44e3-b356-f96c0195d64c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d59c413-0cd8-49b4-a6e9-bf308d441ff3", "sighting_of_ref": "indicator--2ef1ccd0-257a-4ba3-8ca5-102ffffa9a19", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14204933-c187-4224-8644-719201129c2c", "sighting_of_ref": "indicator--797105a9-7a2b-43d8-afed-e343daa6734c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d63ec9-c766-4693-9a34-9d7f54a9e178", "sighting_of_ref": "indicator--9ec4d096-0970-43be-a042-0305dd51f6ec", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e662dd89-f48b-413a-97f2-63e78755c335", "sighting_of_ref": "indicator--2c53473d-4245-45f6-a1a9-6d8322bdbe48", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c2eefaf-9b64-4200-89a6-df597e65a4f5", "sighting_of_ref": "indicator--2c53473d-4245-45f6-a1a9-6d8322bdbe48", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e39d4245-cb3a-4c7d-9c81-28335537a248", "sighting_of_ref": "indicator--9b419e09-8033-4b97-8f77-156f9885dd61", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b268ea-aba7-42ae-a4fd-e733a72c1ca2", "sighting_of_ref": "indicator--4a875a53-64c5-48d8-acd0-8fe5437eb9c9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd6c8db2-b493-4ac0-bde1-9337d3d09266", "sighting_of_ref": "indicator--5a77e6bd-41a4-4b83-928c-b973f2940640", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eccdb21-5250-4e64-8cac-03486fbe82cf", "sighting_of_ref": "indicator--63c7e51a-48f5-444e-b0d2-f24567ce90f4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a931e7e-16c0-4a26-a431-5caf31daa13c", "sighting_of_ref": "indicator--e0e42be5-adb3-4eca-8af8-c3e32ca37db8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae01597-e5a5-4f52-8afc-98357b8a1a67", "sighting_of_ref": "indicator--2d7f84a4-ce67-43a2-9ee6-d309c26965e4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55aacd87-978e-4203-b08e-686c9554d91c", "sighting_of_ref": "indicator--ad670155-baff-4fa2-8b29-70b17af979aa", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa4f03a6-63eb-407f-bcc4-2a6902ea46fb", "sighting_of_ref": "indicator--63bf3e73-6566-4b58-bd9e-3e52621661df", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e38b084-3a44-4b3e-889b-4f44e576a980", "sighting_of_ref": "indicator--63bf3e73-6566-4b58-bd9e-3e52621661df", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2a85cb-85bc-4638-a05e-b6d92478f984", "sighting_of_ref": "indicator--63bf3e73-6566-4b58-bd9e-3e52621661df", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a425a7d6-ee88-422e-b484-380dbd2dbb23", "sighting_of_ref": "indicator--c71921ce-051f-4298-becd-6bc3a58b80ef", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b47946c-530a-4dec-b936-3d2e08e90eb0", "sighting_of_ref": "indicator--208025ae-3896-4a56-9d73-4a1c06669b7d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af37b304-337d-48ab-a902-a5097a6893b2", "sighting_of_ref": "indicator--85e8236c-8269-4d93-a2ea-6a00449568a9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d1c4c76-78ba-4c98-af76-7ca6cc56e23d", "sighting_of_ref": "indicator--37e8c070-be3f-427c-acd2-c201db144ad3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5195715d-b387-4a02-b4cb-2cf1c25f6182", "sighting_of_ref": "indicator--21eef725-4170-4c58-9702-0d8e8e90dc33", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5125f381-af02-4449-94db-13657b041009", "sighting_of_ref": "indicator--82bd5f9e-3a9c-4cee-a5e2-08dc651a4490", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c227e6-784d-4d07-89d5-f45119033509", "sighting_of_ref": "indicator--eb1aad80-bc98-495d-a3f4-fb869ef2503e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a1a50b-1818-49c0-8add-3bb4f7b87b73", "sighting_of_ref": "indicator--394abc7a-3fb7-4ce0-af0d-e9a712fce53e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--616e89d6-8d6a-4d7f-b9d4-f50ee479277c", "sighting_of_ref": "indicator--55f6f320-1a6c-435c-a458-f1cc63b34e68", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9aecdc2-2fec-4f82-ba02-e3214f1bb6b8", "sighting_of_ref": "indicator--dafce368-7c5d-4b3c-b572-f4a65b5795a6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ff5412-4e43-41be-a322-6ddfb12c6b88", "sighting_of_ref": "indicator--49afcedd-4401-40ee-b229-54aa42f7f0ff", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa66626c-a7ad-4162-a452-8b9495cd8c1f", "sighting_of_ref": "indicator--3822c631-1ca5-4989-9fef-19aae8059354", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11464a8c-6422-48e1-a5cf-e4c71e541dcf", "sighting_of_ref": "indicator--90a8c344-6a44-4e85-816d-01cccc8be929", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afda446d-ff7a-4549-892b-0a685755db32", "sighting_of_ref": "indicator--387cf90d-05e9-42e5-9f7c-26f683355c4c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3261df2-987e-4f83-a057-a4a589673c3a", "sighting_of_ref": "indicator--988dcf2e-6c9e-48c5-a61d-049674c935c6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b38c09b-e9d5-421b-a8fa-8692af53d473", "sighting_of_ref": "indicator--96b0a128-8a17-47d6-ad97-f3d37019ff65", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae88320-ad86-4b65-917e-f816f1a83552", "sighting_of_ref": "indicator--d33d7c04-55b4-4bd7-adad-e9f3d6d35086", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd86334-982f-4976-a315-7a75c2090af0", "sighting_of_ref": "indicator--6848ae62-6185-487e-9313-bdd8d63e4f43", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb9035f-b739-4ad3-b0b7-205b42250b2b", "sighting_of_ref": "indicator--361ac883-b777-4cec-8e6b-db8157a5a556", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e945c6-5ef8-42ef-b08a-1081756457bc", "sighting_of_ref": "indicator--bc569c74-77cf-46da-a892-d882fae91bb7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce51700-139a-491f-9763-cef70b1f5d34", "sighting_of_ref": "indicator--73de8a89-6882-44a7-a832-7cfa37a4e75a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f9677f-3dfd-4729-99a1-e495e234f3c3", "sighting_of_ref": "indicator--b07b01b2-ac5c-4b96-9fd6-2d0b18c7c2e7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d439cd44-7c98-4738-bc25-3fc1be33556f", "sighting_of_ref": "indicator--1f36e187-b71f-4bed-8c4c-51f8176f8bf1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9cda91e-7ca6-42f5-b762-a305f3b9c0b3", "sighting_of_ref": "indicator--9bed0684-6529-4060-801c-a2ad346ceb18", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8542922-fdd5-480f-934b-db52c9c46b5e", "sighting_of_ref": "indicator--5e0f211f-b9ab-4579-8a69-d7e7f3d8cd5b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--998925c2-71b5-484d-8661-a316a375c11a", "sighting_of_ref": "indicator--5e0f211f-b9ab-4579-8a69-d7e7f3d8cd5b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b4864f-3872-4ce2-aa5f-be5a4adc04ce", "sighting_of_ref": "indicator--5e0f211f-b9ab-4579-8a69-d7e7f3d8cd5b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--110525ab-ed11-446e-b73c-2f75a04ae4f4", "sighting_of_ref": "indicator--95f72455-ce16-4352-a862-0c1a9ffdc99e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e95784-8fb3-47c7-9b8e-a4ecb8bb8e80", "sighting_of_ref": "indicator--94290541-1a6d-4285-a798-91f123a778de", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5970174-a476-46cc-80ae-979c958efed3", "sighting_of_ref": "indicator--e936a6eb-e250-4b82-a6ac-4cacac6c3b38", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36397289-5f9d-4fc5-ad61-3656d3398fb2", "sighting_of_ref": "indicator--0b1f9ebf-b894-432c-a139-fe2e0716ce63", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f326ee7-1f78-4a8b-b93b-0a342d06864b", "sighting_of_ref": "indicator--f8388455-7b0a-4ada-8762-bbd9e2735c7a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b997a0aa-a64f-45e2-b77b-62c2905fa7d9", "sighting_of_ref": "indicator--c853e98b-d5cd-4ab9-8bc6-2c29a81c3ba7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--457056c2-7495-46c4-b141-3a79acc51698", "sighting_of_ref": "indicator--ca7e6757-0346-4847-890e-642821f696a4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b83f4569-d477-4a1d-af0e-152ecb11ba94", "sighting_of_ref": "indicator--b75392d5-c43d-469b-840b-ccd12f0769d5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ed55e4-4972-4f17-8166-c3838f505210", "sighting_of_ref": "indicator--acfa9fa1-2643-4bea-aac0-2c451b1c5d2a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef5c3683-28a0-4fe7-acb7-eff3e35336f6", "sighting_of_ref": "indicator--3528a524-6708-44ec-881b-26c18570dba2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6e812d-2cfd-4240-b7fb-75949b63528e", "sighting_of_ref": "indicator--eaee9b11-9d00-4e61-80b1-55a5353ef224", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8dfd7a-2ca3-4cbe-a4f3-1dc513b898dc", "sighting_of_ref": "indicator--be4882ef-8382-4f9b-a768-00e13f9470a2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--277dcc85-0748-4f5d-99a3-551c66c14346", "sighting_of_ref": "indicator--c65965c5-b44f-4af0-83e5-553379f777e1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a99873-5227-4150-ae03-f1ab30c75f22", "sighting_of_ref": "indicator--80651975-4b73-40c7-9262-25f4db87ccfd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5933f6f5-7a2e-4158-85ba-19d9dd26cc9b", "sighting_of_ref": "indicator--64050d04-22f3-4e75-b75c-c49f2581345a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6097701b-93e1-4116-8cef-47cf4fbac185", "sighting_of_ref": "indicator--22c5af65-cdac-4b82-93b4-65456dcc8aac", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05547583-9d46-457a-a062-15aefcde3abc", "sighting_of_ref": "indicator--38250ee4-965a-4c4b-b101-cb12686d8156", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9bdeb6-1884-4469-be15-8e5686fa6e32", "sighting_of_ref": "indicator--262879e6-6a57-459b-ae65-07cb117b753a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--005d42b2-71ad-4bf3-8c90-6ff34fa3cf23", "sighting_of_ref": "indicator--e71f1e02-991b-42f4-a267-3710d4ad2c22", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80348c49-34a8-4b15-9678-998551ccc053", "sighting_of_ref": "indicator--ef33c860-67c1-4508-918b-63f46180789a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b36c161-e738-4f33-bcce-e72342487e08", "sighting_of_ref": "indicator--b2ca0d50-8f54-4a6c-9afe-5005281ed614", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d5d791-8880-4d0b-aef7-db050fbc1eb3", "sighting_of_ref": "indicator--637506b1-eb03-4449-800c-6974c7249978", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a47a751-1af1-48fb-a2fc-e211a8d1916b", "sighting_of_ref": "indicator--007f246c-751b-4ec7-a453-88df33df9c1a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86cccec2-86d2-4b41-8a43-436acff5405e", "sighting_of_ref": "indicator--06fec941-b8e0-4122-b821-77314639a5f9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f08caf-7a22-4a57-9f76-869d6e52cbf3", "sighting_of_ref": "indicator--06fec941-b8e0-4122-b821-77314639a5f9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bdc53cd-1689-4ac0-ab10-451e094e116c", "sighting_of_ref": "indicator--6ff4c2c5-acb0-4dc4-a8e3-8c25b2eea6d3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--876519d1-58f4-4ca6-bfaa-587b2e98d666", "sighting_of_ref": "indicator--436e8462-c13d-4073-b4e9-0f4854f0a12f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e939bb-b09c-4f0c-b50c-914aedeea5c0", "sighting_of_ref": "indicator--59bbab00-b45d-4f5a-8730-df0e4de2364f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48497dd-13c7-4d26-b09f-01cb8602944e", "sighting_of_ref": "indicator--d34c34a7-eec7-4cfd-bfda-619d5d55bf78", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d870141e-acf0-4329-b82f-fd2d8e308881", "sighting_of_ref": "indicator--538c0bda-a6ed-421d-950b-d12e69325bf5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78925cf9-87f8-4a49-8802-0f9e470ffee4", "sighting_of_ref": "indicator--a9922efa-cdd6-43e0-a3e4-841fa8466d18", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5d57e4-f621-47f5-9fdd-88b0095ad52e", "sighting_of_ref": "indicator--a9922efa-cdd6-43e0-a3e4-841fa8466d18", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01fd7d92-b065-4603-9d2a-1f522b0c08aa", "sighting_of_ref": "indicator--ff61ce45-5d89-4f9b-bd34-40ec5fad236a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b184b22-55ca-4e9f-97be-2280fc9ea021", "sighting_of_ref": "indicator--d077bc47-e91a-40f9-b8aa-01e119925c36", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--464208f1-c6c6-4f20-add4-d7188a8f1fba", "sighting_of_ref": "indicator--42b08ec2-d493-497d-9e0c-53fecc2a68c3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ab64b3-6f3b-46e7-b9dd-2a2638350fa4", "sighting_of_ref": "indicator--ab1872bc-dfaa-44c4-b674-4795f19397c1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549bf460-20f8-4fe1-b7b6-a865b275e153", "sighting_of_ref": "indicator--a0590978-8dc9-412e-994f-a513ea4980a8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c20b02-5d7b-4879-a0bb-d89126692ed6", "sighting_of_ref": "indicator--7c89ebbe-08fc-4327-a7af-0f3e276cd04e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f3be7e-6723-4514-8606-e0da5288db3c", "sighting_of_ref": "indicator--7c89ebbe-08fc-4327-a7af-0f3e276cd04e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8470fdec-87ee-449e-8680-5ec501b83e59", "sighting_of_ref": "indicator--57a17fb1-d7bb-4ded-b3ad-c0b533732c6f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb620a3a-3f45-4221-abad-13bd210b224f", "sighting_of_ref": "indicator--62eae36c-4ae2-4aa8-9b45-0f8e8ca7921e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b307fe9-5fd2-441d-b7ec-5ca5015fba7f", "sighting_of_ref": "indicator--60c4404b-7a40-4d52-8381-737d699e31c0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dec840c-fa0f-4995-95b8-bca6112c7abf", "sighting_of_ref": "indicator--6ba7cc38-e08f-4a69-997f-667ecf11770d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b4618c-15bd-41e3-93cd-9a2a7514eafb", "sighting_of_ref": "indicator--cbbae586-06b8-4209-a4f2-32c1cda64a1c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f5e427-544d-4bdb-aaef-25dd95fa1738", "sighting_of_ref": "indicator--cbbae586-06b8-4209-a4f2-32c1cda64a1c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c00b82-35f5-426e-908b-8b6b9cbb9c3c", "sighting_of_ref": "indicator--49bfceb8-b57f-4c76-92e6-48a7d0c80a66", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71190c6-d0b8-4dea-b072-80180ce00492", "sighting_of_ref": "indicator--f5d3ece2-aa7c-49e0-b0c5-c52d0019aceb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c18fe5-9047-4f23-9ebc-fe0634c5ac01", "sighting_of_ref": "indicator--f3671dd5-4c9c-4de1-becf-d0c4a31cfb1b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a09dbfe-13d9-45f0-8e4b-3df80367d734", "sighting_of_ref": "indicator--9d095bc3-3954-4f2b-bf79-46dc779e992c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55322854-711a-407a-a97d-525ade180c43", "sighting_of_ref": "indicator--2e2a65f8-7e99-403f-a3b5-b8d531092027", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7bf8917-29a5-44f0-b6d7-9f5cf97dd2ea", "sighting_of_ref": "indicator--d40b0bba-01f6-4cf9-bfcd-4c1b0e6deb09", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f90bfff-f596-496b-9bc2-df47d9ad0fd8", "sighting_of_ref": "indicator--07a118b9-7ce0-42ed-8ec6-ad8343bc5ca5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a01b2f-d761-4bb1-835e-48ee702e15d1", "sighting_of_ref": "indicator--07a118b9-7ce0-42ed-8ec6-ad8343bc5ca5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64306533-1e6d-4dc9-aba5-697f72b1853d", "sighting_of_ref": "indicator--d7fa549e-555d-47fb-ade4-f37904c9a259", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9e4f81-242c-44c9-a545-335f7892f72e", "sighting_of_ref": "indicator--d2a54169-d17c-428d-a28b-d54f32ed32a8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66a8d66-19d3-419f-9ee9-2b088302ba72", "sighting_of_ref": "indicator--97c13530-68bc-495b-9321-e041f6c39513", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08edbbc8-f166-4748-941b-0e17788389d4", "sighting_of_ref": "indicator--07453867-8385-4e9a-b147-49843fbb88a0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df7e3d2-ba3e-4be1-ad12-b3d915544e5b", "sighting_of_ref": "indicator--07453867-8385-4e9a-b147-49843fbb88a0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fbbe0ff-2eee-4349-87df-35bba43e6188", "sighting_of_ref": "indicator--07453867-8385-4e9a-b147-49843fbb88a0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15987b97-bf74-444e-ad75-7dec00232136", "sighting_of_ref": "indicator--a3bca4c5-bbb4-4298-b0c6-67a84369001c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e388a9a-7baf-418e-85f9-08d342342a73", "sighting_of_ref": "indicator--dd6f5ae5-6cec-4835-840b-6e86bcce71b8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--164970f4-cbe3-45a3-b4e4-676f6dd2c674", "sighting_of_ref": "indicator--dd6f5ae5-6cec-4835-840b-6e86bcce71b8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2130e808-1842-4b29-8d29-02f0e8ca2029", "sighting_of_ref": "indicator--dd6f5ae5-6cec-4835-840b-6e86bcce71b8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--666b0afe-5f97-4b9d-985a-adeb9527142b", "sighting_of_ref": "indicator--513cfa3f-f7a9-4718-a64d-311be6af29f9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c1a785-0a55-4f00-aae4-ec5ccd46e2d5", "sighting_of_ref": "indicator--4bcdb8ef-6db1-4f0c-a413-4c66f5858542", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--754293e6-0475-4974-89c4-e26446c07603", "sighting_of_ref": "indicator--71dcc9c1-df6a-421e-b6c8-78c5da9f2e4a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04eed27b-4ca0-44ff-a375-44f5e80ab591", "sighting_of_ref": "indicator--71dcc9c1-df6a-421e-b6c8-78c5da9f2e4a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ce1d0b-8efe-4dd7-972b-c198460f63c8", "sighting_of_ref": "indicator--71dcc9c1-df6a-421e-b6c8-78c5da9f2e4a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd3e9df-ffa9-48e5-a6ca-2d1e6b57cee5", "sighting_of_ref": "indicator--288478e9-50da-4bb6-ba5e-8697d7df9592", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc2b412-898d-4cb5-a88e-733cfbec402c", "sighting_of_ref": "indicator--288478e9-50da-4bb6-ba5e-8697d7df9592", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--364c69a2-1e59-4364-9c16-60d4dc56d07b", "sighting_of_ref": "indicator--288478e9-50da-4bb6-ba5e-8697d7df9592", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a0f8a2f-c659-4b4c-88dd-d41d88886699", "sighting_of_ref": "indicator--96677132-3f64-42c3-a785-48e8b474e483", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa8df1a-cd56-4567-a6cc-714c94687923", "sighting_of_ref": "indicator--625de4dd-f1d5-429b-ada1-42354c648cf1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b36d58-5421-41bc-9d61-c1e1f5c6c1be", "sighting_of_ref": "indicator--625de4dd-f1d5-429b-ada1-42354c648cf1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3c5ca1-2087-4ce4-a2d3-16312ee0c4d2", "sighting_of_ref": "indicator--625de4dd-f1d5-429b-ada1-42354c648cf1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80609b44-73ec-4503-bb01-d2e4248e9d9f", "sighting_of_ref": "indicator--a6f5d920-5ba5-4474-a0cf-c34bc9c4c220", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d3ceb01-d8b3-462e-9e4b-4dcfbcff8e1f", "sighting_of_ref": "indicator--a6f5d920-5ba5-4474-a0cf-c34bc9c4c220", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2043be19-53a3-4a17-b8b2-ae3ca2f713df", "sighting_of_ref": "indicator--277f028b-41ba-4988-924b-a5c8740fe528", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a5d28e-f10e-4e4a-9a9b-f3de53d49e57", "sighting_of_ref": "indicator--a9fcb3fa-737b-4938-85cc-78dacdaedfe0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2320cd-d445-4f29-b92b-6f2a192921c0", "sighting_of_ref": "indicator--a9fcb3fa-737b-4938-85cc-78dacdaedfe0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd88ff35-3a29-44b1-b1a6-369b878f0a81", "sighting_of_ref": "indicator--b35f32e5-b4fc-43d8-ade2-28e309a7b7c4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9b59e4-8063-4895-8206-a8b657880a1a", "sighting_of_ref": "indicator--b35f32e5-b4fc-43d8-ade2-28e309a7b7c4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19963946-eddf-46d2-9694-6f89780f30e1", "sighting_of_ref": "indicator--b35f32e5-b4fc-43d8-ade2-28e309a7b7c4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3131a7-b996-479c-903f-c69d66eb85fa", "sighting_of_ref": "indicator--4ba3ee84-6212-452b-ad2d-33bda8e41a3c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba6b959-b8e9-421e-84fd-ef8c325ae1ee", "sighting_of_ref": "indicator--4ba3ee84-6212-452b-ad2d-33bda8e41a3c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3704af75-9678-420b-bac0-d590a0c8bc83", "sighting_of_ref": "indicator--6d5f59dd-8451-4d3f-afc7-7b98fdc327f7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf568b54-193b-4c9f-ba42-9a23c08e6673", "sighting_of_ref": "indicator--6d5f59dd-8451-4d3f-afc7-7b98fdc327f7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7ac2b0-dfdd-4105-8138-a3b0331ea96d", "sighting_of_ref": "indicator--6d5f59dd-8451-4d3f-afc7-7b98fdc327f7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e75165c7-27e7-4e72-9f6e-a4e85488bda0", "sighting_of_ref": "indicator--d6013bd0-1209-4e66-a9b1-820f7ccfb02b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe391a7-7c28-4826-b245-bccde6699afc", "sighting_of_ref": "indicator--d6013bd0-1209-4e66-a9b1-820f7ccfb02b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ac9e0f6-56aa-4d14-90ff-0041410f372f", "sighting_of_ref": "indicator--d6013bd0-1209-4e66-a9b1-820f7ccfb02b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e62df7-e11a-437b-ace6-785a17b49f1c", "sighting_of_ref": "indicator--5523eb66-de46-4812-b154-8a84fff21df9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb3f7cd-4eae-4457-b78f-db88bc5247ef", "sighting_of_ref": "indicator--5523eb66-de46-4812-b154-8a84fff21df9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed536ab1-95c1-4a21-b5dd-38ae7ba0bfa9", "sighting_of_ref": "indicator--5523eb66-de46-4812-b154-8a84fff21df9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7570dc-d505-4caf-bd7c-950e7723b3c6", "sighting_of_ref": "indicator--5be31011-d702-40fc-b3f8-e43f467bbb34", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a158d8-f72a-40e2-bae0-60638cb625ec", "sighting_of_ref": "indicator--5be31011-d702-40fc-b3f8-e43f467bbb34", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf31c51e-0460-42a0-9894-71bba1deadee", "sighting_of_ref": "indicator--a95d319b-2d7e-4d72-b698-e6cdbb3d0f4a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d8498e-c7c6-4650-968e-2370c158e4de", "sighting_of_ref": "indicator--25636e9c-38e7-42bd-a640-bbb9f0fc9264", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87c72fb4-dbb1-4c9c-83ee-6caddf2a0b8e", "sighting_of_ref": "indicator--c9f5f43e-f94f-414d-86c9-27233649acd4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa47381-e8a1-442c-b235-e3eeff5033ce", "sighting_of_ref": "indicator--c9f5f43e-f94f-414d-86c9-27233649acd4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb5ad9d-dc63-47bf-80f9-0468da3b0cd3", "sighting_of_ref": "indicator--65c94bc7-d05b-4c1b-839a-8be86d6373cb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b90a92-d3af-411e-b1cc-eac5a12b95f9", "sighting_of_ref": "indicator--f9086127-33a4-4e6c-a0f8-054dd724793e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f20a0833-f2f1-4139-9ca7-4cb62ae42f73", "sighting_of_ref": "indicator--dce54000-87d6-4c61-9950-77bc7f775fc3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afdaad13-6909-400f-8622-d1ad794df923", "sighting_of_ref": "indicator--dce54000-87d6-4c61-9950-77bc7f775fc3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3c868be-b67a-4b8b-921c-be761ff2c948", "sighting_of_ref": "indicator--dce54000-87d6-4c61-9950-77bc7f775fc3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eedcad2e-65bc-431a-b3c4-2a6aaa6107e0", "sighting_of_ref": "indicator--844065ca-8cef-4309-90d3-dc8bbbe0df5b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f284bb2e-8b5a-44af-a886-788bdf12ed26", "sighting_of_ref": "indicator--844065ca-8cef-4309-90d3-dc8bbbe0df5b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47e5b40-cd0c-4c06-9ea7-1277bca7f8bc", "sighting_of_ref": "indicator--844065ca-8cef-4309-90d3-dc8bbbe0df5b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40599b4f-4c7f-4b68-99be-a4dd38cd2c5f", "sighting_of_ref": "indicator--459bf294-e14f-4673-b464-03ab5140f220", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d36f488-8609-45c6-b06b-43d9ced62863", "sighting_of_ref": "indicator--459bf294-e14f-4673-b464-03ab5140f220", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c46f76-f829-4f52-beda-06f391a2a07d", "sighting_of_ref": "indicator--459bf294-e14f-4673-b464-03ab5140f220", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc278c8-704a-46a8-8da8-532f0197edf3", "sighting_of_ref": "indicator--97c4f704-e8db-4eee-a304-bae859794e1d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da47e2d-8f18-48d9-a676-83e7d3c4225f", "sighting_of_ref": "indicator--97c4f704-e8db-4eee-a304-bae859794e1d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab9e34f-2e20-4dbb-938d-8d85d465fef7", "sighting_of_ref": "indicator--97c4f704-e8db-4eee-a304-bae859794e1d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0abec46-d899-4193-8432-0ac88413dbfc", "sighting_of_ref": "indicator--17ea2cae-f342-4f6b-bc82-8b50998f4351", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b1403fa-e650-4657-a809-602419c9ab4b", "sighting_of_ref": "indicator--17ea2cae-f342-4f6b-bc82-8b50998f4351", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa4b740-5c26-4965-897d-f7535898cdbb", "sighting_of_ref": "indicator--17ea2cae-f342-4f6b-bc82-8b50998f4351", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae5ea09-bbcf-4c91-af09-609e7890cd8f", "sighting_of_ref": "indicator--19318811-6a25-44bc-bbcc-0ecdd3df3b5f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843769b4-2a02-494a-a595-9a3d40422293", "sighting_of_ref": "indicator--19318811-6a25-44bc-bbcc-0ecdd3df3b5f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97cf0d85-6242-4188-90f2-ac56ffacac85", "sighting_of_ref": "indicator--86db84fd-1309-44b1-bdce-6692bfea5007", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706743e9-791c-442d-9ef2-e72a1e5b7ebd", "sighting_of_ref": "indicator--86db84fd-1309-44b1-bdce-6692bfea5007", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66bb9725-910d-4a08-8de2-3c0f2ab92858", "sighting_of_ref": "indicator--86db84fd-1309-44b1-bdce-6692bfea5007", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1286cd-2918-4b31-993c-d5074b071540", "sighting_of_ref": "indicator--7d3d5323-9c0c-4d4a-8850-3fcbbe4f5a85", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ca1c30-8d6b-42e8-ab37-89f97a6fe3ba", "sighting_of_ref": "indicator--7d3d5323-9c0c-4d4a-8850-3fcbbe4f5a85", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72bc360-497b-404f-bece-b24ec196aab4", "sighting_of_ref": "indicator--7d3d5323-9c0c-4d4a-8850-3fcbbe4f5a85", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1f2a0a-a937-43ea-9f84-a269d04054d4", "sighting_of_ref": "indicator--6ebb8ca8-962f-45f4-9e39-8d50cea54997", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c8430eb-c493-4dde-b43d-f77064cd1513", "sighting_of_ref": "indicator--6ebb8ca8-962f-45f4-9e39-8d50cea54997", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c14c9b0-f772-41cc-9d69-72336b01181c", "sighting_of_ref": "indicator--6ebb8ca8-962f-45f4-9e39-8d50cea54997", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c86b8c-94a9-4f69-a195-84f2c0eb3ac3", "sighting_of_ref": "indicator--cd121f5c-b6eb-44ed-a6fc-c45db766dde4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730e59bb-e0d5-4551-8182-15750b0479cb", "sighting_of_ref": "indicator--cd121f5c-b6eb-44ed-a6fc-c45db766dde4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a8e065-7227-4f7d-96e4-c54fcc0ff1d3", "sighting_of_ref": "indicator--cd121f5c-b6eb-44ed-a6fc-c45db766dde4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3831abd7-f07c-4a35-87ae-a300e2a7393d", "sighting_of_ref": "indicator--ac5cdeba-afa8-4419-8d2d-5869b504c3ee", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f1433c-b6ad-42c9-b81d-f716ad86595a", "sighting_of_ref": "indicator--ac5cdeba-afa8-4419-8d2d-5869b504c3ee", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b4d5fb-05ec-4286-b2c6-d7a4581734ab", "sighting_of_ref": "indicator--ac5cdeba-afa8-4419-8d2d-5869b504c3ee", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c2bbf41-533b-4ce5-a45d-4cb7dc550c6b", "sighting_of_ref": "indicator--351535f8-e2f6-40d7-9241-797ac50654eb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5ab761-7df7-4702-814e-ec3919ff3e38", "sighting_of_ref": "indicator--351535f8-e2f6-40d7-9241-797ac50654eb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47cfa308-b731-48fd-8aaa-06963052f97c", "sighting_of_ref": "indicator--351535f8-e2f6-40d7-9241-797ac50654eb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92181743-9002-4146-a159-43695b65ac53", "sighting_of_ref": "indicator--96956be0-4485-4a1d-bb76-d02aa7f19747", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a76cb6-6175-41b7-8ac6-d18251f48124", "sighting_of_ref": "indicator--96956be0-4485-4a1d-bb76-d02aa7f19747", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f13d406-506c-4da7-b830-b16bf55a807f", "sighting_of_ref": "indicator--96956be0-4485-4a1d-bb76-d02aa7f19747", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034f32cd-35c3-4aa2-a44e-5bc43c646cea", "sighting_of_ref": "indicator--1d7dce13-7201-4281-90a9-f7a294cb809c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e0a280-3e37-4565-a16e-e4294051dd5f", "sighting_of_ref": "indicator--1d7dce13-7201-4281-90a9-f7a294cb809c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26232a7-ac3f-4636-a4b1-bc2b70bf36a1", "sighting_of_ref": "indicator--39a39a47-311b-4860-b608-e00e50658994", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd22427d-06d0-4bda-92d7-aa72757f7b35", "sighting_of_ref": "indicator--01f1fe80-9ba7-4202-95a5-aaef54f63aa2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d11d0312-702e-414b-9ef9-aec631ae1091", "sighting_of_ref": "indicator--01f1fe80-9ba7-4202-95a5-aaef54f63aa2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8345e6-847b-482a-8c13-fec69c10b426", "sighting_of_ref": "indicator--4f87e1e2-ea21-435a-be6c-03d5e6c1cc18", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b98ebe-db7f-4427-be31-31760bf259d5", "sighting_of_ref": "indicator--c7839f19-fd40-44b3-abf2-33942700e1c9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79417b34-c82c-4fad-9c8c-f3bf5bc698ac", "sighting_of_ref": "indicator--c7839f19-fd40-44b3-abf2-33942700e1c9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a4967c3-2c49-44cc-aa05-6a8633e410ce", "sighting_of_ref": "indicator--9be47337-0175-4f12-9bca-03b67df0b4e8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddfa3483-c73a-40ba-aac9-94b0e2e6fb53", "sighting_of_ref": "indicator--cc65233f-52b2-4820-a071-76fc0e60ac28", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fced47b6-7a0c-4754-a55d-db0f2f55b131", "sighting_of_ref": "indicator--c8e8329f-fa57-439f-932b-19421630d0e5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d31071b-e9a9-4f6e-a325-c10493177089", "sighting_of_ref": "indicator--b5337078-88c3-4881-8ddb-113064bc4ca3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605e4990-cf9d-4dae-b4ae-c496f7061e0c", "sighting_of_ref": "indicator--15f7ec82-f6fe-42b6-9801-39a792f75017", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c58037-4965-4564-800b-f24ea08997cf", "sighting_of_ref": "indicator--15f7ec82-f6fe-42b6-9801-39a792f75017", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc65a0b-392a-4e11-b548-f50ae0c7925c", "sighting_of_ref": "indicator--15f7ec82-f6fe-42b6-9801-39a792f75017", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e5bdf0-d98b-43c3-bc0d-a59f150fc926", "sighting_of_ref": "indicator--d5760f82-9b8c-4f3a-ae8a-4851f95f90c8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2637649-2a15-40a1-b7b4-e7c93436395c", "sighting_of_ref": "indicator--a82ac5fa-c512-48ab-9662-379486dc55ae", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f45ae7-84a9-4b0f-9b13-c46663c1e562", "sighting_of_ref": "indicator--a82ac5fa-c512-48ab-9662-379486dc55ae", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a93ab2-e0fa-4329-9e74-687b82e2a872", "sighting_of_ref": "indicator--a82ac5fa-c512-48ab-9662-379486dc55ae", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c88131-d7d9-4bbc-9187-4a851b8560a5", "sighting_of_ref": "indicator--dab4dacb-92c9-442a-966f-97e80624d88d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c237ed0-ef84-4b39-9523-f7aea4217d11", "sighting_of_ref": "indicator--13e50cae-6338-482c-aed3-b818716707f3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35586812-b81b-4d83-96b5-51f65ef5f48b", "sighting_of_ref": "indicator--13e50cae-6338-482c-aed3-b818716707f3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f58ff9de-ccbd-417c-aadf-3f440b959b46", "sighting_of_ref": "indicator--13e50cae-6338-482c-aed3-b818716707f3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d92d61-dd86-4d4c-b00d-678f7b35d127", "sighting_of_ref": "indicator--cc854f4f-15f6-4fd4-8fff-d341f52c5832", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab1c5c6-bf1f-4853-9b38-c9aa9fcbea38", "sighting_of_ref": "indicator--cc854f4f-15f6-4fd4-8fff-d341f52c5832", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--495de332-d5c2-4ed0-a6f9-26b4e92c2912", "sighting_of_ref": "indicator--0a1982fc-3b2b-4cc6-8df3-bfd6811292e1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be686bf0-08a3-4c53-95c9-198b00933d44", "sighting_of_ref": "indicator--0a1982fc-3b2b-4cc6-8df3-bfd6811292e1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85886bfc-9528-4d4b-9a17-bee824765a72", "sighting_of_ref": "indicator--0a1982fc-3b2b-4cc6-8df3-bfd6811292e1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5e46af-18ad-47d4-b997-fcf1d005e357", "sighting_of_ref": "indicator--b31fbdae-85db-4df4-8c62-aa7b6227ba6e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0c3a9e-9116-4883-af98-ee8e2428fdf2", "sighting_of_ref": "indicator--b31fbdae-85db-4df4-8c62-aa7b6227ba6e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dfdd3e0-7e41-4b30-bd34-9f9d4913f35a", "sighting_of_ref": "indicator--b31fbdae-85db-4df4-8c62-aa7b6227ba6e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a2528a-af6b-45b5-bb31-adb4066239e1", "sighting_of_ref": "indicator--b4d6809c-2909-4d95-a87f-445fd155b716", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de105a63-d1cd-4e51-a9ec-3ebdea81d2cd", "sighting_of_ref": "indicator--b4d6809c-2909-4d95-a87f-445fd155b716", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca78590-e7f1-4a40-b067-3d33e3c7d1d1", "sighting_of_ref": "indicator--b4d6809c-2909-4d95-a87f-445fd155b716", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228f0924-f4d7-4d66-95de-4cdc9bf57e73", "sighting_of_ref": "indicator--10c52d3b-b59e-4ce1-afc1-2da855767e55", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67998a7e-8113-4081-896c-ab835bca46a5", "sighting_of_ref": "indicator--10c52d3b-b59e-4ce1-afc1-2da855767e55", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7994468-1f0c-445f-ba57-e009628c1c95", "sighting_of_ref": "indicator--10c52d3b-b59e-4ce1-afc1-2da855767e55", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca236ba-19dc-4eb7-918b-e03eac7e9213", "sighting_of_ref": "indicator--ce3121b0-7b27-4434-86cc-22393b7ded49", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28df414a-6413-4916-8df7-d05a97ed6519", "sighting_of_ref": "indicator--ce3121b0-7b27-4434-86cc-22393b7ded49", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab6f5e3-a456-4115-a02a-fed00acc6c2e", "sighting_of_ref": "indicator--ce3121b0-7b27-4434-86cc-22393b7ded49", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c1221e-1e39-4259-84a5-82a160bf7842", "sighting_of_ref": "indicator--af60d7d0-f3ca-4445-bb30-2857a6f00347", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f4b7d2-dcbd-48ce-899e-331056a104f1", "sighting_of_ref": "indicator--af60d7d0-f3ca-4445-bb30-2857a6f00347", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd734f9-e7ac-42d4-aed0-5fbab0faf281", "sighting_of_ref": "indicator--af60d7d0-f3ca-4445-bb30-2857a6f00347", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a1c03b-1063-464f-9534-4cae31792a78", "sighting_of_ref": "indicator--b251d147-017d-4bd5-b4a5-3a170e97eef2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bc7d90a-fe84-449f-98c7-7244cb372508", "sighting_of_ref": "indicator--b251d147-017d-4bd5-b4a5-3a170e97eef2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c458d6a7-888e-4501-94d1-39743a9e824e", "sighting_of_ref": "indicator--325c5f0a-2765-4068-b66b-413a8efadddd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e56af1c-150b-4f0f-8333-6ca5c4521542", "sighting_of_ref": "indicator--325c5f0a-2765-4068-b66b-413a8efadddd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06037cef-433c-46e0-82a5-416dcc511edd", "sighting_of_ref": "indicator--325c5f0a-2765-4068-b66b-413a8efadddd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b460208-ec36-4295-a214-cf9446999769", "sighting_of_ref": "indicator--942fc755-d7af-4f91-9869-6d23fea22af3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b73fd3-28f2-4380-804d-fe09b8fc2b96", "sighting_of_ref": "indicator--942fc755-d7af-4f91-9869-6d23fea22af3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc17d45-be37-4bc7-8dee-6ea2a78fe4fb", "sighting_of_ref": "indicator--a29449cb-911e-433c-98c7-93e61e404d6f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba8ad82-9eb3-43f4-94d8-35e1dc79479b", "sighting_of_ref": "indicator--a29449cb-911e-433c-98c7-93e61e404d6f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b271f8d4-dd88-4530-9ba9-7385ad4445e6", "sighting_of_ref": "indicator--a29449cb-911e-433c-98c7-93e61e404d6f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1654edae-990e-47d4-a230-6702aa65f64d", "sighting_of_ref": "indicator--d8310a6a-ec0d-4faa-82f4-0ce9a44225a8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c9a3ab-f2b9-4027-9db8-e37b7c5cf8d7", "sighting_of_ref": "indicator--d8310a6a-ec0d-4faa-82f4-0ce9a44225a8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1329b66b-95e6-4cfd-b098-c3ed1a655408", "sighting_of_ref": "indicator--d8310a6a-ec0d-4faa-82f4-0ce9a44225a8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc8a9ee-3fbc-475f-b43a-f5f2df03d30b", "sighting_of_ref": "indicator--bd4272ad-bc92-4076-b67e-3e00205f08cf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5bc91d9-2a13-4c5a-8e10-307262866fdf", "sighting_of_ref": "indicator--bd4272ad-bc92-4076-b67e-3e00205f08cf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a4cae3-6b70-4aca-80c9-922c919b00ea", "sighting_of_ref": "indicator--bd4272ad-bc92-4076-b67e-3e00205f08cf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60a2dab-878b-4d0c-959b-ed5d9019f69d", "sighting_of_ref": "indicator--a7bf4282-6d05-4a1c-be9a-06cf26901354", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08373196-e3f1-41c4-b0ff-f74fffff073f", "sighting_of_ref": "indicator--a7bf4282-6d05-4a1c-be9a-06cf26901354", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fec2621-f1a3-4924-8d30-8c7148eef674", "sighting_of_ref": "indicator--949bc4be-d764-4ee4-9f99-0a9386831047", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b20c76c-da82-447b-8800-25d6c70c00d8", "sighting_of_ref": "indicator--949bc4be-d764-4ee4-9f99-0a9386831047", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac126ff7-dafe-4e2a-a27f-136b40fec104", "sighting_of_ref": "indicator--1c0cdbbd-a25b-412a-81a8-15ae1a920b5c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8919f30-5082-40e2-b9a2-20b36a185d7d", "sighting_of_ref": "indicator--1c0cdbbd-a25b-412a-81a8-15ae1a920b5c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f81332-4044-48c2-bea1-e64cbd9f7421", "sighting_of_ref": "indicator--1c0cdbbd-a25b-412a-81a8-15ae1a920b5c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97057997-1513-4825-819b-3c7efd7f322e", "sighting_of_ref": "indicator--2b6e9358-6d27-4bb3-9466-fd56061aa0fe", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c274e98-b4b5-49eb-92ae-349a4fe4cb3f", "sighting_of_ref": "indicator--2b6e9358-6d27-4bb3-9466-fd56061aa0fe", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c49f32-cb57-4779-a5b2-0664c4eedb25", "sighting_of_ref": "indicator--6e84845d-c59b-4eed-8613-1f65dea034b6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc74aa31-c26d-431b-b7c5-86ef7b025454", "sighting_of_ref": "indicator--ecdf0bf4-b0d3-414e-9612-2e728e75c1f2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ee3cfb-c95f-425f-99ff-3e2bbef43115", "sighting_of_ref": "indicator--c9e029f6-553b-4707-b4fa-8db44966fdcb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d55a85-3bd1-48b5-a134-f77ebcb10827", "sighting_of_ref": "indicator--6b9bb40b-84ce-4f7c-a743-20587cea30a9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49511d08-6be9-4fc8-a4f0-1f65d3a6a991", "sighting_of_ref": "indicator--c7ccc3d7-3eda-49ef-85da-7655e29aa979", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af7bc4a-fc6f-4234-8940-301499640654", "sighting_of_ref": "indicator--d064d99c-e560-4a30-bb58-af8808852a52", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c4127a-28c5-4caf-bc81-7d25741452a2", "sighting_of_ref": "indicator--7769dcc7-30cd-4545-912a-c6f9d71da6f5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af4831b-130c-4396-8df2-da624b1cbf0e", "sighting_of_ref": "indicator--dd6cee86-c2ce-48a8-8c3c-057699423a6b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d779b710-5401-4035-9dd7-97898174da74", "sighting_of_ref": "indicator--c0756899-a0e8-4a78-9cd1-0c87445ec215", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e6604a-a18a-41ab-856a-0c7a3b153baa", "sighting_of_ref": "indicator--e1adeb13-9f29-4a73-ad3a-0fa5506ad478", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5876f89e-641a-42fc-968f-9ed113d67fb7", "sighting_of_ref": "indicator--94ddca11-ec33-4dcc-bc3a-a094a7fefd73", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa8f9ac-6c72-41ac-9634-c239fee898eb", "sighting_of_ref": "indicator--515c198b-63fc-4d64-ba23-8f90c7a6486f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5401db9c-faed-46c0-8ff2-c55e4ef9f4ba", "sighting_of_ref": "indicator--7b0ef078-c198-47cb-bf32-5b1ded3d86e5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e04a85f-8b06-4ac7-8934-f03746fa7119", "sighting_of_ref": "indicator--aa51a13e-75c7-4c07-90bc-f7e866e787f0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056344c7-be3a-470e-8640-b39a9689c226", "sighting_of_ref": "indicator--53be574b-1643-45ea-9365-65b75cf2e85e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5004c05e-3d4f-430e-acd5-f87d13b26ce7", "sighting_of_ref": "indicator--f2e2831a-67fd-443f-a357-7f7d2e7719c6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd11cf3-356d-4a1c-8a35-904859d3658e", "sighting_of_ref": "indicator--f2e2831a-67fd-443f-a357-7f7d2e7719c6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3492d85-8447-4308-96e5-73acef27c45b", "sighting_of_ref": "indicator--cac19311-4279-42cd-93bf-c73a720b6935", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc798097-7b30-4bb9-ae32-03e69d4b2bcf", "sighting_of_ref": "indicator--f3c79f1a-5e7c-403d-a8fb-d43a88df7cdc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1aad9d-c3c9-4104-9785-2226ef28dfa7", "sighting_of_ref": "indicator--ffc8c5cd-15e9-480b-af1e-cae650e329a7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85601264-a17a-4c80-b6cc-ce9d9686f19d", "sighting_of_ref": "indicator--ffc8c5cd-15e9-480b-af1e-cae650e329a7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9169f5c2-88e7-425f-8479-291a3066f82b", "sighting_of_ref": "indicator--ed526b00-ce9a-48a9-9ad1-685997d2daf8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de08d55-2283-4aac-a1f9-53ccbe643237", "sighting_of_ref": "indicator--054d12e7-f230-47b9-ad10-453dc8461dae", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2813609f-2659-4722-8cdc-cf5795cf01a8", "sighting_of_ref": "indicator--2f706896-fadb-46df-92b8-d2bc4481b53a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437ac401-cf45-46ba-9540-9d65a81b79d0", "sighting_of_ref": "indicator--34225a94-6bfd-4e13-beab-3871b093f866", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4cbef6a-af15-44f2-a2b2-232c77eedf78", "sighting_of_ref": "indicator--2c4c1d97-f934-430d-bf5f-faccf3294a48", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d21be8-0b73-46f1-b1a8-5904f24091ab", "sighting_of_ref": "indicator--f04a9538-2f0f-44e2-9ebb-0938f75a7684", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb024af2-7762-4c28-a1ed-2fd351a0e21b", "sighting_of_ref": "indicator--a9d92116-9213-4a49-8229-f82c63f8f994", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b79567-12c9-4c75-924b-c3983f348c9d", "sighting_of_ref": "indicator--302de9d3-2103-4cbf-8abf-d194ecea70fa", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a77fc3-88a1-4c3b-97de-cdcffdfbf124", "sighting_of_ref": "indicator--d953e557-8276-42d4-b321-5d4db3ad8b07", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7acb67-8f85-49ec-858f-2375b4ce1552", "sighting_of_ref": "indicator--bf21ba87-2dd1-4f51-86f8-91220f044e19", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e931f1-3111-41ef-b18b-36ec20353e68", "sighting_of_ref": "indicator--b45701dd-34e2-4375-ab75-d6f30e922357", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--491a5cbd-219a-4295-a56f-9de46ea4841c", "sighting_of_ref": "indicator--03bb7793-9ab7-489a-96b9-e52e50e221b0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f75d89-b107-49d3-9aa4-baf483591eb6", "sighting_of_ref": "indicator--32c6b7bf-fc97-4d22-99a7-856245206b3f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a94020-0d95-4517-8240-40cbb143ad50", "sighting_of_ref": "indicator--eec96259-cf13-4c67-8761-8786d9a3060d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--653b7f55-496e-4959-82f1-1cf67e796422", "sighting_of_ref": "indicator--d33e616d-84bd-4406-9b09-a1ca103b0404", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37803ad8-3f51-4ff6-8473-7b909b815f5a", "sighting_of_ref": "indicator--05c9d2f9-df7a-4fe5-81ef-f353584fa541", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--002447ae-68e8-4e65-91b9-1e59a65a2cd4", "sighting_of_ref": "indicator--4170cbd9-60ae-401d-bb1d-1ed2ab46e123", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5e561f-b551-446c-8544-0ca713fb68fa", "sighting_of_ref": "indicator--a72c841c-3361-4b2e-8fd6-b80572edb533", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aecc507-e662-46eb-8995-2af06c79dd57", "sighting_of_ref": "indicator--8f80096e-7d3d-469f-ab3c-658b90db8dcf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b1c1a6-2ecf-44c2-8e3b-24db47d6c5c9", "sighting_of_ref": "indicator--eff4a9bb-14a4-4248-a3a2-976c086e6b51", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdef7a0e-0449-435d-bdcb-ffb5682d9882", "sighting_of_ref": "indicator--8aa081a0-98fe-4547-ac37-3026f7abff02", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c16eeb6-eacb-4b09-af4d-4b381550f7d9", "sighting_of_ref": "indicator--77734252-b9d9-4d35-b6df-652cde98f5c2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59dafa34-744a-4375-8704-42ff4cba2231", "sighting_of_ref": "indicator--77734252-b9d9-4d35-b6df-652cde98f5c2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f1230d8-0344-4d99-902e-a638c7c57fba", "sighting_of_ref": "indicator--c47a4ed5-098e-4a63-9cbd-ec817affea3f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b914b4-27db-424d-96e5-98725dcbe5d4", "sighting_of_ref": "indicator--2036171a-95c3-49a0-b85e-b130b0b83521", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e8aea6-c8fc-43c5-a463-7f2aa1c62d8b", "sighting_of_ref": "indicator--b1036d85-2947-4353-93da-51a8894ea3ff", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--716f2544-0e30-42c5-a656-314358af8087", "sighting_of_ref": "indicator--fba5fbaa-48d6-41a9-80c3-300fdafae999", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1f2874-268d-4265-8800-029752f0f66a", "sighting_of_ref": "indicator--8a092c0f-9e4e-4ae0-9745-780326575c63", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c580c55-73e3-4287-af49-d787acbf1c79", "sighting_of_ref": "indicator--20de47f5-84df-4320-b4d3-0b184ffe382b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f8a78d-896d-45d2-8e62-ee4124e3f695", "sighting_of_ref": "indicator--0e2fee16-9d7b-447c-adab-b4234afab27e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22619017-391c-43e7-ad24-e024806f381b", "sighting_of_ref": "indicator--f0ecfbad-833c-44ee-b2ff-51f07f4a9672", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c0390d-21c8-48e2-b1ec-d87d0103982a", "sighting_of_ref": "indicator--3077ad28-d2ac-4f3a-910e-2cbec8870da1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d0178c-d73d-468c-8347-10b62483d1db", "sighting_of_ref": "indicator--19068d1d-ba37-43b4-bebc-14706d2e1b59", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f0a12cd-7fc4-4572-9eee-90311cc8ad7a", "sighting_of_ref": "indicator--c96bab97-be7c-471e-a7bc-e88bcc2f2aa8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f62059a-4f13-493e-9f6f-5154023070ae", "sighting_of_ref": "indicator--c96bab97-be7c-471e-a7bc-e88bcc2f2aa8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77dbe882-6051-4f33-8d59-3a557f17c1a0", "sighting_of_ref": "indicator--36b847a1-2637-4439-ac3d-dd06e0a7b1f8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66023c7-ee93-48bd-a749-ff11ce8156ae", "sighting_of_ref": "indicator--f6ab8764-2e28-4962-b50f-e05c51bdf9eb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67680dfe-e3bf-40f6-9ef5-fe30df4ef444", "sighting_of_ref": "indicator--668bf9ae-6524-47f5-9d50-398d7dc93cc0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a20e38-1247-4312-b929-986cf6513353", "sighting_of_ref": "indicator--95df21bc-3fb1-445a-81ba-edcf03e02ca9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400842cc-c5c8-44c3-ac1f-f82d43d67c15", "sighting_of_ref": "indicator--7576fe31-7dbd-45e2-ad1a-434f1172abb8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f4f061-b645-4a85-96ee-a69522a5014d", "sighting_of_ref": "indicator--4651e944-55d6-443f-963a-79735947b1f8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1227ac86-1226-45cb-bcb1-13c55b40d6d9", "sighting_of_ref": "indicator--9dee741f-632c-4671-8834-bac02f448b26", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d76c17cc-00e5-4956-a8ab-7591f6d90048", "sighting_of_ref": "indicator--10cda643-a6d3-4cce-8493-429c15035442", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7108536d-12e8-4dff-9931-1548ad2791c7", "sighting_of_ref": "indicator--32260aef-c95c-4328-b02d-3fe298a5548d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753b30da-1dfe-457d-baca-f1be19e9c216", "sighting_of_ref": "indicator--93fb4a90-2f2c-4378-8ba9-d6575c207ff9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad06c4e1-b91d-4858-b6ea-a298a2db39d0", "sighting_of_ref": "indicator--bb0f2a2c-4ef3-41c5-9079-d3ef085529b5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f98e4109-f2c9-49aa-944f-b2ad6e6f4df6", "sighting_of_ref": "indicator--09406b37-f6d6-4eb0-aed4-b1fadf6bae91", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae40ff01-5334-45e7-8998-82eaaa0ff6c8", "sighting_of_ref": "indicator--4d9f21ce-27ff-4a59-a6d7-31aeb00256b6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2265df-6a63-43a7-8fc8-95b382e029fc", "sighting_of_ref": "indicator--72f95ff8-c012-42ff-9ad3-0b4fe5ac416e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30416253-0d0d-4a6f-bc86-3604a3975212", "sighting_of_ref": "indicator--9cab0a7d-e8ab-4768-affa-93d35be4ecb8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d681f3d0-b70c-43ad-8237-05f65b9d77e1", "sighting_of_ref": "indicator--b4597a72-cbed-4dcf-94ea-ac001809e0a2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97fa04f4-057b-4d64-8276-488b460efa63", "sighting_of_ref": "indicator--150e04d9-0ec6-4049-851b-b8c1181377e1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26cac20-d023-47ec-b0ca-9be335138517", "sighting_of_ref": "indicator--a7ffcfae-1e87-43fc-bd81-98ac3bc0edf5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29aa3fbc-1ddf-46b6-9f40-f5d23aa95e7a", "sighting_of_ref": "indicator--c227eddb-7e0f-400e-987f-eceecd543f83", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2d92ed-7772-468e-a34d-6fc8b77e1de5", "sighting_of_ref": "indicator--bcb7287e-a81f-4972-baec-c259637d70bb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc8b0c2-a10b-44fe-84cf-6666ddf27c4c", "sighting_of_ref": "indicator--489f0862-2fc6-4b5a-b7fe-2e0c0b19ddec", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169a4b90-aaec-4352-a2f2-e791f9f40ba3", "sighting_of_ref": "indicator--5b971247-c1d3-453c-ac12-da88e2c9942a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c198e7b-e5fe-4545-b338-5d2f9e674961", "sighting_of_ref": "indicator--b76e8b41-3cec-47d0-af65-48656f5e2cef", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad52c5f-0e37-4d6b-b9a0-b651225936a0", "sighting_of_ref": "indicator--07a20915-4726-4ec9-8897-c774a7ccfc65", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d79830-cdc0-49ae-9eaa-3c0a5cd4937b", "sighting_of_ref": "indicator--07a20915-4726-4ec9-8897-c774a7ccfc65", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0765990-47bc-46e6-b2e3-d04007cb4ba1", "sighting_of_ref": "indicator--5034c3db-f0cf-4491-b2b1-74079ed6d68d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c73bb75-b06e-4fd5-b2a6-1b225603fe72", "sighting_of_ref": "indicator--5034c3db-f0cf-4491-b2b1-74079ed6d68d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15484a6-88ee-4b0f-ab00-b337dca3415a", "sighting_of_ref": "indicator--4a3306f1-1108-4514-a765-d889993a04f5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b8447b-114f-4d69-81ca-8816217fd83e", "sighting_of_ref": "indicator--663e2223-2714-4e3a-b4c9-ce482f06e124", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194c21c0-6c90-435f-aae4-0d918d903008", "sighting_of_ref": "indicator--663e2223-2714-4e3a-b4c9-ce482f06e124", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac56306-8323-461a-ae43-706992e151be", "sighting_of_ref": "indicator--b957716f-84ca-44c7-9331-c8319ec02c2c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593f4565-c425-4f04-98b9-7318b8f3e947", "sighting_of_ref": "indicator--a8de3fc0-70e9-4628-8211-4f3e4dd5828a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb4740e-a2bb-4fd8-98eb-c70ef467a64d", "sighting_of_ref": "indicator--0d169307-3139-49bc-adc5-135c80908c3d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bbe70a6-8d04-4772-944e-788d3eb482e6", "sighting_of_ref": "indicator--4f68b43f-a4b3-481e-8231-53e44a806ab4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb631479-23c5-4bac-947f-ae49ed5e8be1", "sighting_of_ref": "indicator--244d2f95-8f5b-49a3-a9fc-da067784f3dc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420836a0-02b3-4f8c-bac1-7ddcee003ac0", "sighting_of_ref": "indicator--fca1b1ac-9b56-49be-9892-15da70a94afb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda87f9d-0e7f-453c-aada-3f48a2cae07b", "sighting_of_ref": "indicator--e5ecfcf1-e181-4ec2-aab2-679364b95ab8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba177dec-b2bb-4144-a65b-574eaac49b4a", "sighting_of_ref": "indicator--7a65ada3-4ee9-4098-9c26-29531db8a915", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3523d1d7-cded-48ad-b3d0-dc1372deae50", "sighting_of_ref": "indicator--9d08e7f3-2890-45fa-94b1-4bad3d5fb582", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11eaf5d0-cdc3-422a-83b3-9dd7b709e8f9", "sighting_of_ref": "indicator--d5c6267e-462f-4d02-a575-3aba35c02d4d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a8ebe77-e082-462f-b7f2-0d991d5a227b", "sighting_of_ref": "indicator--3edf90b2-df57-4b60-9c3f-ad5c18fdf368", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4afc963f-9454-4e42-875b-7e64f4da815c", "sighting_of_ref": "indicator--e28144e2-3301-48e9-80d4-512de9c90fc1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21427f5a-defd-41cd-ba97-4bb4fe2df1fb", "sighting_of_ref": "indicator--e28144e2-3301-48e9-80d4-512de9c90fc1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b304285-4c81-4448-a01a-cd021e46650b", "sighting_of_ref": "indicator--777c3a3a-623e-4d31-900f-77d4265e2c9b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a064b4-1dc1-4128-82a8-ddfc8ef22caa", "sighting_of_ref": "indicator--5de9610c-5f0c-4fb3-bc62-7b779db04be8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90196bd8-5a2f-4045-9938-99d337fbedf3", "sighting_of_ref": "indicator--c0dea8b5-723d-4254-b4e7-a3474b2cd1fa", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--374a98e9-f76a-479d-9f31-decc027dcad0", "sighting_of_ref": "indicator--3a88cfee-dc4d-4cdd-a569-0bcd8010b365", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dbd9295-798f-4a2c-851b-bb5c86c80dda", "sighting_of_ref": "indicator--6be27e37-b068-4c29-af06-b00178351f31", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a5e1a0-7d2f-42bb-9ccc-9f6e5ca0640b", "sighting_of_ref": "indicator--68567de6-ea2f-4cc3-b3a4-3d688804fbc9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e438c45-a147-468a-817d-0fcc8698696c", "sighting_of_ref": "indicator--68567de6-ea2f-4cc3-b3a4-3d688804fbc9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0ff0bf-614c-4ef4-96f8-8c12eec6dad4", "sighting_of_ref": "indicator--e620f978-d201-4b4c-97a3-c5cba4530b84", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf9cbfd-9aec-45f9-85a8-faf352ab10fb", "sighting_of_ref": "indicator--e620f978-d201-4b4c-97a3-c5cba4530b84", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e742729-7cf9-4d06-aee4-985edd3af72f", "sighting_of_ref": "indicator--e620f978-d201-4b4c-97a3-c5cba4530b84", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c4e41e-9585-4b72-b7d3-7a7f7e6c0cf6", "sighting_of_ref": "indicator--12468795-b551-437d-a19a-65a8345d6e8a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd3a992-3401-4e1e-af76-ac283d70e65f", "sighting_of_ref": "indicator--71d8c13d-3a11-4364-9dcc-bd5c7fdf8188", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be34cf81-698c-436c-900c-d009bdbb509a", "sighting_of_ref": "indicator--290b080b-566d-43b9-b269-2f11e294ae9a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4a1138-c619-4f54-87b0-86136c663e88", "sighting_of_ref": "indicator--069b3735-bab7-4bb9-99cf-9339f8d3f0dc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff92edef-351a-4827-98bf-2b54d8521999", "sighting_of_ref": "indicator--17258538-6c9e-4bad-a34d-c3f7473e3c0c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a047d4e1-6271-4ea6-bdec-50ad9aaaddf0", "sighting_of_ref": "indicator--17258538-6c9e-4bad-a34d-c3f7473e3c0c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fae9ff6-e7bb-4f4d-8438-6733601963c2", "sighting_of_ref": "indicator--a0a9c759-aef9-46c1-9d27-7858ee18e20f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f0354cc-c618-4582-a263-4044af6f03f4", "sighting_of_ref": "indicator--24590fdc-d2e7-4f33-8a41-f07a3878c141", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac9a877-678d-40c5-bc8e-d44da55011e0", "sighting_of_ref": "indicator--dfd593ae-2781-436a-b393-bdddfd3d827f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38bcd4ce-5f8d-4061-9165-16d1da33c131", "sighting_of_ref": "indicator--5af59f6e-df26-430c-be03-4dad7f1891e6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de484d8-c8fa-4ee5-b9d4-bf3345549f6b", "sighting_of_ref": "indicator--91d9fb3c-ceec-426b-aa60-d2634146e78e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb38c28-4eb7-4a8e-b3aa-688cf038ae3a", "sighting_of_ref": "indicator--ce2430c0-2aea-4aa9-a648-8d5d93794b6e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c262606c-b865-42a7-8d34-30f057e5bef9", "sighting_of_ref": "indicator--8c4b7b61-cde8-47b9-9373-2d5bd2522e1a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71465ad1-a8f4-4481-a6a6-4eb5b3690fc5", "sighting_of_ref": "indicator--d9188453-bf86-485e-bca8-4623ad0d4f62", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3449d0a6-61ed-4c4e-9c81-dbe87c2eed1e", "sighting_of_ref": "indicator--d9188453-bf86-485e-bca8-4623ad0d4f62", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1cf79a4-f0d3-4a06-801a-b5d2955eea9a", "sighting_of_ref": "indicator--f9fe1924-51e5-476e-884d-0ab22d541820", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e7bee6-6a9b-4d28-a4ce-f86608fcd094", "sighting_of_ref": "indicator--d9e2e2c0-9fea-4519-b434-27c361b7a7c7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d31097-67c4-473f-aab3-0544db9ee626", "sighting_of_ref": "indicator--ab935740-3599-4cb7-897c-9755ad2bb5c4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dddf768-ed06-4e68-b56d-6125396506b7", "sighting_of_ref": "indicator--9c7957a7-56f5-45c8-be15-d7919cbf4cfd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c383d4a0-ae93-42fb-84ed-455793fd3323", "sighting_of_ref": "indicator--e5f6dbd1-93bc-4ec6-891f-2e2e862fe9d5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97963042-2945-47c7-a72a-311ea942ec54", "sighting_of_ref": "indicator--ffe5f170-cfbf-42f9-9f78-cf2deceaed99", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf01032-2f30-434d-a1f3-61e14fbc8d7e", "sighting_of_ref": "indicator--5648655f-cdab-4b7c-b041-90c1498d0533", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6f21727-0696-4ae6-af11-e69988b835e2", "sighting_of_ref": "indicator--dd650435-1746-48e2-8602-f26b11f89123", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--556c9c0b-48cb-41b7-a6ae-12dca5caccad", "sighting_of_ref": "indicator--7ca10081-0415-46e4-bfa2-5d666a6b80c9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--372d7ce9-2586-418e-8aa9-21bfeb7e656a", "sighting_of_ref": "indicator--3c22d1a5-d5f5-4c9c-9724-46115b516bca", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6161c387-0746-4af0-b244-c7a34fdd0356", "sighting_of_ref": "indicator--3cdd1779-fd0d-4c13-b9ca-0dcf96eaeeb9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f96566-6fd1-42c9-b57c-27080c9e2dc5", "sighting_of_ref": "indicator--a22415f2-18f8-4281-a973-0ef9347d1f30", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f1bfc2-d50c-488b-84b5-6cd0430bd568", "sighting_of_ref": "indicator--0ee5a1cc-bd95-4113-822f-a2b407e2bd87", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a3e20f-bca0-4fa5-a64e-74628c77e548", "sighting_of_ref": "indicator--f606ffd3-a20c-4140-8a6d-28162cd94508", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f582cee-134c-4ffe-a4aa-8780018ea607", "sighting_of_ref": "indicator--d541d7fb-0b8f-4ee2-87df-c18da289a084", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20733670-d5ce-4d3f-8c41-f9fde83aaac9", "sighting_of_ref": "indicator--a3a3ae85-d6f9-4057-bfde-ecc3c55bd535", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cebec89e-c9af-4f98-b4c1-918bc4b63a78", "sighting_of_ref": "indicator--7d402589-70c2-418b-a00f-5d8141c4490e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68abb07e-c184-4235-8a92-207d49ee0667", "sighting_of_ref": "indicator--4ad02f2d-ffd6-4c66-ae12-829021b2958f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1815af13-b72d-474d-a653-bf458134e490", "sighting_of_ref": "indicator--4ad02f2d-ffd6-4c66-ae12-829021b2958f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2997f923-ea65-4d92-b45c-a72b7088efc0", "sighting_of_ref": "indicator--fa212be5-d402-4b1d-9631-52728d7040ee", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3cee9af-e7a5-416b-83f9-495c0d1d5b23", "sighting_of_ref": "indicator--55935b9e-08a8-4866-b1fa-8d818dba48d1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b64578a-9680-4b57-add8-9d573929b1d6", "sighting_of_ref": "indicator--b2204ed9-7894-4259-a499-2b95ad3c573e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516ac144-9145-4ca0-9ab9-52e91fd6750d", "sighting_of_ref": "indicator--0b3957ee-eef6-46ea-a452-aec2b986339d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8374673d-48f6-49d5-9158-2d95d1df24e3", "sighting_of_ref": "indicator--77335b63-e3cb-4859-b193-117dc4cc21ca", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01beafa4-a3f6-4647-876e-9f11ce81b1be", "sighting_of_ref": "indicator--b17be841-a088-4bdb-ac03-1791313aaad9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f611e91-7719-43d5-b736-334c6934eed9", "sighting_of_ref": "indicator--1c432e64-810d-4c0a-abd5-5ad77486650b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac265ffa-8942-47ba-839d-838a370e258a", "sighting_of_ref": "indicator--769e2e7d-d513-43e9-b914-b0542ec0e598", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86741d88-d544-4c67-b1f3-4d96fc067088", "sighting_of_ref": "indicator--f5baa9c2-0649-4fd7-8933-9f536891921a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37fc0b2-2de2-48a7-abfc-d4033188d883", "sighting_of_ref": "indicator--62d64228-4c30-4d18-a5e4-2517f81c7afa", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41dd7c37-68e1-47d1-a9c5-90118c83ff85", "sighting_of_ref": "indicator--db92d0f7-f6de-4bfa-9133-560130886906", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d8e243-6201-4c27-818d-491abd4e7966", "sighting_of_ref": "indicator--201ef4fa-b87b-4a66-acec-948b4d042433", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4eca73-0806-4dc3-baf9-0cd0b6d54b4b", "sighting_of_ref": "indicator--6b593f39-f266-45de-af15-38a686786d21", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89033832-69da-4c7d-b72d-06cc42ae718c", "sighting_of_ref": "indicator--c20cd346-9eb4-47f6-9830-84fc4ee93d04", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83f3db6-2069-4775-8de1-c5bdb364ee1b", "sighting_of_ref": "indicator--9f6984d8-0826-4c03-8279-8afad9b7d668", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05963ec5-a293-4767-95dc-8b46c08fa4ce", "sighting_of_ref": "indicator--449170f5-62f1-4fa2-b035-903987765496", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1358ac4d-6d5e-4662-9e7f-8d2f0d394c23", "sighting_of_ref": "indicator--449170f5-62f1-4fa2-b035-903987765496", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53713c1b-495d-43c9-99fa-d4ac710ee629", "sighting_of_ref": "indicator--5d9e668b-6b32-4edb-9b46-1bf8e94e601d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b0a34d-89bc-4317-9623-dc9a3ca2a1e6", "sighting_of_ref": "indicator--f48ad2b7-1089-4ed5-a7a7-978a4c98b8c6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbdfc906-5e8b-40bb-8f34-1e0a93e0fd5d", "sighting_of_ref": "indicator--4fc34352-28ed-48d8-b194-4646ae1a0329", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--151e5669-2dba-4f4e-8848-fabd992f0c4e", "sighting_of_ref": "indicator--a62ba369-9a78-4948-9333-aab014185c1a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c5cfde-a67e-450f-a1bf-88ddfe4fa697", "sighting_of_ref": "indicator--b06e680a-eb0b-4e65-9749-114aa1ba6a4f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d49a6cf-d9cb-4523-98f3-38f8957d9bfa", "sighting_of_ref": "indicator--1ceb8c1e-f956-4855-9dab-e76ce269f408", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce764e7f-f431-4b83-a8ea-15709498ed5e", "sighting_of_ref": "indicator--45e01baa-974c-45d8-8330-fa7c08505fd9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72767d1a-86d5-4321-98de-968bb78892fb", "sighting_of_ref": "indicator--5abac377-5b19-4ef9-acc9-086dd0b38c2e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b2e595-4348-47d3-8bcf-e50c809fe956", "sighting_of_ref": "indicator--dbac08a1-ad0d-44e1-b50b-9bb419a3857a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba500bd5-ccdf-4d97-a034-5ba958c9e2cf", "sighting_of_ref": "indicator--8eee0d69-670f-496e-8d2a-3b8f55355d83", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aca6dd2-0832-4c5d-b122-1f2839b1637e", "sighting_of_ref": "indicator--03e902de-c6ed-4214-8215-9132f5fd1e07", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b86125-8dc8-40e9-b9e7-0dbceb6ddd15", "sighting_of_ref": "indicator--c991bfca-1ff1-48f1-935c-2b696818a4ac", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c229f48-58dd-4cf2-9bd2-fc756bceb6c2", "sighting_of_ref": "indicator--9de8bf19-0817-4f81-9bc6-4b5bbbccf0ae", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb182457-ee6d-4fe3-8860-d854f3648073", "sighting_of_ref": "indicator--fd3abc31-ae32-4c60-aa17-17f83db2a9be", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad9ece85-8b08-4e1c-9aa8-895ef45d2f28", "sighting_of_ref": "indicator--fd3abc31-ae32-4c60-aa17-17f83db2a9be", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa48da2-c957-455e-a354-81010e129ab6", "sighting_of_ref": "indicator--5cc10320-00a1-4ac3-937a-6da72e2dc6b5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7d724f-a167-424f-b7cb-ff5e3a2e954e", "sighting_of_ref": "indicator--1233bc0f-5ef0-4ef4-8695-6385d7c2dd91", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f2cf7a-d8de-4198-912e-c9f3a1aea9dd", "sighting_of_ref": "indicator--e713c7da-bfa0-40af-960c-8ce6fd21f20c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444f5364-c319-420e-ad04-be9af773a0fa", "sighting_of_ref": "indicator--e713c7da-bfa0-40af-960c-8ce6fd21f20c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aeb93c4-a175-41ad-b815-4b441cb1664a", "sighting_of_ref": "indicator--13e9b6ea-25f8-4d39-a23b-a30ac1b932d7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c4fcf8-bc5d-472d-9be0-b5089d3bf7f4", "sighting_of_ref": "indicator--202f7b44-31cc-4b31-93b4-3e84cdedd9e4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b920093-0a47-4c6e-a755-b3a383389b93", "sighting_of_ref": "indicator--ed68e9c3-4767-4730-936d-463a2192fb26", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5d5e90-e881-4192-bc4f-eb8e6f43e887", "sighting_of_ref": "indicator--ed68e9c3-4767-4730-936d-463a2192fb26", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f606b6-1afa-4464-9c5f-74618b16129b", "sighting_of_ref": "indicator--d1aa381d-a2b0-4a7f-ae5d-a867beb8e83f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2144d11a-b71a-4f32-b963-cb7905d360f6", "sighting_of_ref": "indicator--34873229-3cd2-4963-8abd-b4eeeca4cc3d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51fe2fd8-4d4d-4120-a8b4-9072a49b4369", "sighting_of_ref": "indicator--b98d0d3e-b989-4a8b-b251-63e9436fee78", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3bb38b5-2302-4ff7-a5b7-6b39143ad88f", "sighting_of_ref": "indicator--33182665-603c-4621-9b85-742359df9f3f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989aefe6-d570-40cd-9571-974995d02962", "sighting_of_ref": "indicator--0dac344e-8837-447c-9a12-3cbaac57088e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387fccab-bd3e-41a4-a7f9-4d6b21c2292f", "sighting_of_ref": "indicator--c6b2578f-3855-4787-abae-5630a29ab99e", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97dff0aa-4db9-4509-871d-1439137f0f55", "sighting_of_ref": "indicator--d0ee0442-2eab-40b3-bde6-ce1672ff00c7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b81b995-4075-4ac6-b3b6-b13ffa43622f", "sighting_of_ref": "indicator--e99b1532-802c-4cfb-b580-aaee25283ed3", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53fef63f-7172-4faa-b635-b82475a5d900", "sighting_of_ref": "indicator--290a954f-2f51-4e05-ae3b-43daa7283637", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd64943-bd3f-4a8c-8218-1c7b76a658a1", "sighting_of_ref": "indicator--75942f84-65bc-46d9-bf08-1454169adfd0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f5b193-c330-4777-ad4d-e1342a645d46", "sighting_of_ref": "indicator--75942f84-65bc-46d9-bf08-1454169adfd0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9969d06c-e041-4999-a71a-19dc911e3438", "sighting_of_ref": "indicator--75942f84-65bc-46d9-bf08-1454169adfd0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb97e3be-f193-4b60-8f5b-fbf40bb98c97", "sighting_of_ref": "indicator--d3523bf3-b639-4b7f-a45a-cfe74a4e0014", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--639da273-87f4-4e38-b661-404ff13713b4", "sighting_of_ref": "indicator--d3523bf3-b639-4b7f-a45a-cfe74a4e0014", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c20daa-03dc-4033-9202-5d892523525a", "sighting_of_ref": "indicator--d3523bf3-b639-4b7f-a45a-cfe74a4e0014", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2e4dfbf-255a-47e4-8b1a-1c1b5dd8c45d", "sighting_of_ref": "indicator--58e75cf2-ba2d-41fa-b129-100c3633c7e5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e096cc7-32a5-49f9-bf1b-2f0ae8a475e0", "sighting_of_ref": "indicator--58e75cf2-ba2d-41fa-b129-100c3633c7e5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a20c740-24e5-4e09-8215-fa7a352924cc", "sighting_of_ref": "indicator--b78d38f4-5083-4667-bc6e-192a446cc601", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae56e814-2fa9-4aa1-abc2-9783278caea0", "sighting_of_ref": "indicator--b78d38f4-5083-4667-bc6e-192a446cc601", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16380cc7-8952-45d6-a402-0ac51946b0c6", "sighting_of_ref": "indicator--adcdb721-7bd6-4506-bedf-0fb2cf759065", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc757b08-cf5d-4386-b7ba-5ee989d8236e", "sighting_of_ref": "indicator--adcdb721-7bd6-4506-bedf-0fb2cf759065", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6867b0-e1fe-4610-8445-b98d137486ce", "sighting_of_ref": "indicator--adcdb721-7bd6-4506-bedf-0fb2cf759065", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc8f5c53-acec-4608-880e-8c8d63b775e2", "sighting_of_ref": "indicator--7b472122-34a3-4dd2-b987-8866b76d031e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69201dea-a60c-4172-b8fb-bd87814aac3f", "sighting_of_ref": "indicator--7b472122-34a3-4dd2-b987-8866b76d031e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d0e7584-09dc-4df6-b0b1-4a7cfa9a810a", "sighting_of_ref": "indicator--1a9f4853-d21f-422d-a378-cd0e809ceba7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d670d22c-608f-4193-ac7f-f8aa3e5af63e", "sighting_of_ref": "indicator--1a9f4853-d21f-422d-a378-cd0e809ceba7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97d56da-fd0f-4266-ab5d-4709e9af91a4", "sighting_of_ref": "indicator--1a9f4853-d21f-422d-a378-cd0e809ceba7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437cab6a-6d01-43e4-9be7-48dbd56060df", "sighting_of_ref": "indicator--5ce7435b-abb3-47e6-9a79-0947e5af7c0b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9735372-cb1b-4910-bc4b-7ed4686890fb", "sighting_of_ref": "indicator--5ce7435b-abb3-47e6-9a79-0947e5af7c0b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce14a7c-9e08-44bd-8544-c3f8fa7afc57", "sighting_of_ref": "indicator--5ce7435b-abb3-47e6-9a79-0947e5af7c0b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14bfed55-c0bb-4eee-8e1d-523b0944f384", "sighting_of_ref": "indicator--bd707482-f7de-406d-a7e7-8bb2b46b9db4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c08fafb0-f086-4d88-b093-3fc39bded478", "sighting_of_ref": "indicator--268c28e7-5ddb-4a3d-a6cd-32c0f6c6bca3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3139e5bc-d3cd-4273-a8e2-afb6209d2d57", "sighting_of_ref": "indicator--41538cff-91a3-4b0d-9bec-2fa446c439eb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28a6988-558b-497d-a86b-4d9a66973c72", "sighting_of_ref": "indicator--41538cff-91a3-4b0d-9bec-2fa446c439eb", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98774d8c-cdb8-44f9-9ca9-aa923b7d849f", "sighting_of_ref": "indicator--5ade1e11-5dff-43a9-8234-2cdd9c498360", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--849a452e-9c59-4e4a-8e63-35ac3a442742", "sighting_of_ref": "indicator--5ade1e11-5dff-43a9-8234-2cdd9c498360", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c54505-eb23-42d2-9a4b-c402301f4cb0", "sighting_of_ref": "indicator--298a46b6-f4bd-42e4-a809-a568cb406e7c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a50d60-4533-49b3-8a63-f9228dc78b02", "sighting_of_ref": "indicator--298a46b6-f4bd-42e4-a809-a568cb406e7c", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed3a4e7e-e198-4cb4-8a8e-69045daa2680", "sighting_of_ref": "indicator--a3f87cd6-f458-4000-b9f8-91badd354098", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f2f178-7c17-4f06-9974-d59a3858cd90", "sighting_of_ref": "indicator--a3f87cd6-f458-4000-b9f8-91badd354098", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5412fedd-7d96-4452-a378-49a26f3f6e91", "sighting_of_ref": "indicator--420b5a26-d9f5-4041-bd25-b3f6a6d671e3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525da601-c244-48b7-bf34-98229907a69b", "sighting_of_ref": "indicator--420b5a26-d9f5-4041-bd25-b3f6a6d671e3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed8dfce-d6dd-49ba-9723-62ae2c03aaef", "sighting_of_ref": "indicator--4d35a034-a823-4009-8c7a-a4a33e42b282", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--184b0752-a90b-444c-9d05-01b739d24ca4", "sighting_of_ref": "indicator--81b0e1a6-75f0-4d70-8c07-8eaf56302c2a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2026026a-e743-4594-b71f-12b1b564d73c", "sighting_of_ref": "indicator--0d2b0096-f570-49a2-9ee3-043a40c2dd1f", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f906a122-3876-4109-ab81-ba72065ae3b7", "sighting_of_ref": "indicator--1541227d-15f8-4d34-af07-3efd1ccd367a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c1a239-3e0f-4a36-ba84-b2b212bb1dbb", "sighting_of_ref": "indicator--1541227d-15f8-4d34-af07-3efd1ccd367a", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e1a5d01-43a9-45fe-bf3f-121c10d02420", "sighting_of_ref": "indicator--ea7bbb5d-7a0e-4e6e-ac2e-c80878e5894f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c684ed85-3f36-4204-aee0-b31e1038b27d", "sighting_of_ref": "indicator--cbad85cf-b1c4-4371-ae94-13b95d0ffd62", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70398802-74b0-4aa9-bee0-dbf45f8910c1", "sighting_of_ref": "indicator--bcf8dbd5-bc18-445b-a432-e2f4720e232e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24eef74-8a01-4702-854f-386c132fef7f", "sighting_of_ref": "indicator--bcf8dbd5-bc18-445b-a432-e2f4720e232e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856fccf0-7bc9-45b7-97aa-aec10ce7887f", "sighting_of_ref": "indicator--0045eaaa-c9da-4e09-964f-fb02d246fea4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2410399-97a1-42a9-8ceb-db1eb2aa9fa3", "sighting_of_ref": "indicator--0045eaaa-c9da-4e09-964f-fb02d246fea4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2330e5c-525f-43b7-8cee-e82b8146df2d", "sighting_of_ref": "indicator--0045eaaa-c9da-4e09-964f-fb02d246fea4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2f4a2a-4f55-4faf-ac2c-a8ae02f4af2f", "sighting_of_ref": "indicator--17661e4a-81cc-4c63-a258-c670b1fae0f0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c59ef59-2e8b-417f-ba66-99f8c3aaa94b", "sighting_of_ref": "indicator--17661e4a-81cc-4c63-a258-c670b1fae0f0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40070482-8aea-4b8c-81a2-9770369ed6e7", "sighting_of_ref": "indicator--17661e4a-81cc-4c63-a258-c670b1fae0f0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c45376-27b5-4dda-a6a4-e9ad09e37352", "sighting_of_ref": "indicator--d33d90aa-2e57-44ea-b2b9-ce6ec67a11c9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d70cef6-ad80-4c76-a2fb-24077e70c3a7", "sighting_of_ref": "indicator--765428f9-c132-46f0-b5b8-c87d78e21093", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dffea68a-0674-475a-af64-b65bd61ba764", "sighting_of_ref": "indicator--5c413a0b-e0a6-4236-89d5-c739927d246f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae1a97c3-436c-42e5-b79d-6467b6597c3c", "sighting_of_ref": "indicator--8ebbed1a-845b-4cd5-8214-6e5afd2be739", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d3032b-9f38-4d12-b33a-5253f33ca82a", "sighting_of_ref": "indicator--8ebbed1a-845b-4cd5-8214-6e5afd2be739", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c1a8fd6-d7a7-4e1d-b287-a1c2c1fdc8ae", "sighting_of_ref": "indicator--8ebbed1a-845b-4cd5-8214-6e5afd2be739", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b4409ed-d64d-449d-b377-349e7f98cf30", "sighting_of_ref": "indicator--a24e5f31-1718-4e2d-b35d-f84f9ec85eb5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f05840-ce27-4cd6-8cde-33a0c57dd38a", "sighting_of_ref": "indicator--a24e5f31-1718-4e2d-b35d-f84f9ec85eb5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77daca27-ff80-49c1-9cfc-3aaea71c260c", "sighting_of_ref": "indicator--a24e5f31-1718-4e2d-b35d-f84f9ec85eb5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53154d4d-305e-468f-9cfc-c399d7678a14", "sighting_of_ref": "indicator--ee33ff12-edb5-48a3-8d10-4842b154e903", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ff357c5-d964-4683-b89d-1c34ba7ed6c0", "sighting_of_ref": "indicator--ee33ff12-edb5-48a3-8d10-4842b154e903", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b590d9d-5fe4-401b-9233-2cdd93393286", "sighting_of_ref": "indicator--ee33ff12-edb5-48a3-8d10-4842b154e903", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b5c4d7-5f96-4d71-87e5-161f65f7ecd1", "sighting_of_ref": "indicator--23c9d915-39d9-4f12-afba-24ec6a521f10", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55295b5f-5c8f-4df8-b104-a217cf882641", "sighting_of_ref": "indicator--23c9d915-39d9-4f12-afba-24ec6a521f10", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9389ee5-0339-44ba-a6cf-1a06b5a050ed", "sighting_of_ref": "indicator--23c9d915-39d9-4f12-afba-24ec6a521f10", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a81247-c6fb-48f1-9023-baa001653909", "sighting_of_ref": "indicator--52fe3ef6-3f7a-4774-8c26-0f97fbd491b6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4166e73a-087c-4cbf-9960-1f8cd57c4ee3", "sighting_of_ref": "indicator--52fe3ef6-3f7a-4774-8c26-0f97fbd491b6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6375075-3693-4a83-8c1a-e2a33539cbf2", "sighting_of_ref": "indicator--52fe3ef6-3f7a-4774-8c26-0f97fbd491b6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93457aa-e812-4568-a0a7-0fab248095a5", "sighting_of_ref": "indicator--ff5ebd65-e888-41f6-8b86-1574933a9a68", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a1a84b1-15bd-487c-8520-5ea1a0e3e8d2", "sighting_of_ref": "indicator--ff5ebd65-e888-41f6-8b86-1574933a9a68", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c521144-a60c-44ad-a6c0-1af7e40ca9f7", "sighting_of_ref": "indicator--ff5ebd65-e888-41f6-8b86-1574933a9a68", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70bec5e0-af38-4af8-b56f-625a0c9a5ba6", "sighting_of_ref": "indicator--492594aa-9794-4707-b3f2-18e38d60ee0d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a544b8-e889-4466-b469-ad2d25a0db26", "sighting_of_ref": "indicator--492594aa-9794-4707-b3f2-18e38d60ee0d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce0bede-13bf-425e-916a-d578c7b9f2a5", "sighting_of_ref": "indicator--492594aa-9794-4707-b3f2-18e38d60ee0d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16309f98-79e9-4d9f-adfd-48be3470eadd", "sighting_of_ref": "indicator--fb45bfe9-8744-4e48-ab67-aee39db53b20", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6fd42da-7d72-44d3-aeec-706a12643164", "sighting_of_ref": "indicator--fb45bfe9-8744-4e48-ab67-aee39db53b20", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b8472b-2d18-4b47-8ec9-78c809cece70", "sighting_of_ref": "indicator--fb45bfe9-8744-4e48-ab67-aee39db53b20", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6993507-011a-4c1c-b26a-dfb2c7e3efe9", "sighting_of_ref": "indicator--6a5961de-d900-47be-a6f1-bc472e25fe65", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d46d75-afa6-438a-9bf0-73a4fafe9895", "sighting_of_ref": "indicator--6a5961de-d900-47be-a6f1-bc472e25fe65", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae5b722-3003-465a-ba03-fde71fdcbf4f", "sighting_of_ref": "indicator--6a5961de-d900-47be-a6f1-bc472e25fe65", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--181ce0fb-faa3-454d-94cf-6b6829d55495", "sighting_of_ref": "indicator--9653bdb2-e25e-4a5b-9319-d93e3001773e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e17a032-3175-441e-bc05-b819a33b0eb0", "sighting_of_ref": "indicator--0aba091e-4c55-45d1-92d3-bbd89fd35106", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb26c20-3874-4708-8865-1e561cc7bd71", "sighting_of_ref": "indicator--0aba091e-4c55-45d1-92d3-bbd89fd35106", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f821812-cbb7-4b14-be09-6209736da08d", "sighting_of_ref": "indicator--0aba091e-4c55-45d1-92d3-bbd89fd35106", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d89fb91-bc18-4aba-9c4e-4ae27d153972", "sighting_of_ref": "indicator--d9a51160-2869-4e90-90d2-263fe047e45c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed31e6db-88c4-4e64-b3c8-c39dddcad27a", "sighting_of_ref": "indicator--d9a51160-2869-4e90-90d2-263fe047e45c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3321b681-a1b2-4911-a8df-90f5d233298d", "sighting_of_ref": "indicator--d9a51160-2869-4e90-90d2-263fe047e45c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8a5d9c-59c5-43e4-b26c-31f9ac362f84", "sighting_of_ref": "indicator--3e60a0b4-1fa4-43fe-b781-e57bfa4baecb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e6c8dc8-3064-42fc-aac6-932788820ec8", "sighting_of_ref": "indicator--3e60a0b4-1fa4-43fe-b781-e57bfa4baecb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ca95f3-abb6-42c9-bddd-f060de816382", "sighting_of_ref": "indicator--3e60a0b4-1fa4-43fe-b781-e57bfa4baecb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5dd4833-a0bd-43f9-b294-52b800ac7ec6", "sighting_of_ref": "indicator--76e06a5d-d92a-4409-9237-10fd5fedf7fc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27721f6e-0441-4583-88ac-59f58d2872d1", "sighting_of_ref": "indicator--76e06a5d-d92a-4409-9237-10fd5fedf7fc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a0630a6-41f0-4d8d-bb80-91eec9474d75", "sighting_of_ref": "indicator--76e06a5d-d92a-4409-9237-10fd5fedf7fc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c14bb846-ac1d-4bd3-9354-ac725e9715aa", "sighting_of_ref": "indicator--42f1a1ef-173c-47f8-ae74-7c8a6c37b9e6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3750cfd-acb7-44f7-8cfa-5995c918d924", "sighting_of_ref": "indicator--bea58b05-81b4-4269-b018-b7c9587f4856", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--466d4f91-2287-403b-9a41-c84047802faa", "sighting_of_ref": "indicator--bea58b05-81b4-4269-b018-b7c9587f4856", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c0a535-c042-4d57-8dd0-5d1eb36956cb", "sighting_of_ref": "indicator--bea58b05-81b4-4269-b018-b7c9587f4856", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a6c178-fb03-491b-8654-886e85a16f0c", "sighting_of_ref": "indicator--11284b33-943c-4aec-a6cd-0749b57f8994", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b923fb6-f54a-44cc-84b0-c3b3254ad5f9", "sighting_of_ref": "indicator--11284b33-943c-4aec-a6cd-0749b57f8994", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--871ef526-0980-44af-aeff-a949209038e8", "sighting_of_ref": "indicator--08f7ecf2-4326-4285-a085-2fdf1da6e5f0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6449db52-bac3-4ec1-bcc8-5ff47f34271c", "sighting_of_ref": "indicator--08f7ecf2-4326-4285-a085-2fdf1da6e5f0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc153a0-5818-4393-912e-75ebd02fbe1a", "sighting_of_ref": "indicator--08f7ecf2-4326-4285-a085-2fdf1da6e5f0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f49535-28c9-4a0c-8b96-9287d50dd497", "sighting_of_ref": "indicator--bc645cee-c4cb-4ab0-a486-02f3e202aa74", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb99a51d-cde9-40c3-a976-d0459e91c4e3", "sighting_of_ref": "indicator--bc645cee-c4cb-4ab0-a486-02f3e202aa74", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7b6ddd-cf26-444b-8b86-4baa6166c021", "sighting_of_ref": "indicator--fd3872d5-5095-4065-ad09-c81904fa54a1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c2a16c-a553-42ad-b89b-23f0968b0e49", "sighting_of_ref": "indicator--fd3872d5-5095-4065-ad09-c81904fa54a1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b93797-051f-4122-8582-2658ab70a4e2", "sighting_of_ref": "indicator--fd3872d5-5095-4065-ad09-c81904fa54a1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ca622f-e935-4272-8e98-0b6346a7c1df", "sighting_of_ref": "indicator--e86d423a-02d7-4231-bc02-16d40792d4ab", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1031e3fa-2f4a-4431-b9c9-ad0f8a4e2950", "sighting_of_ref": "indicator--e86d423a-02d7-4231-bc02-16d40792d4ab", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eecafaa7-22cd-4f47-86e8-577cccae63bd", "sighting_of_ref": "indicator--e86d423a-02d7-4231-bc02-16d40792d4ab", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b25f3d-654f-4f3d-88b3-49330dc86cc0", "sighting_of_ref": "indicator--87366957-baff-4144-9eda-05879c07faf4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e6988e-09db-4912-8822-dd2f48db3583", "sighting_of_ref": "indicator--87366957-baff-4144-9eda-05879c07faf4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c749efc2-dadf-4768-9164-b687b0b335a3", "sighting_of_ref": "indicator--87366957-baff-4144-9eda-05879c07faf4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b7e0e4-4d73-4733-b4cc-6650a1d52995", "sighting_of_ref": "indicator--c9bbb9fa-5989-4638-99bb-ce82f2d4508c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5986bde8-4f9d-403d-84b0-862efca157a3", "sighting_of_ref": "indicator--c9bbb9fa-5989-4638-99bb-ce82f2d4508c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7610da2-a9c8-487e-915e-8b84dc9b9e7d", "sighting_of_ref": "indicator--c9bbb9fa-5989-4638-99bb-ce82f2d4508c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe05165-f895-4dac-9b4b-edb2caa2977b", "sighting_of_ref": "indicator--6a539890-7bba-4302-8523-41f010fe9854", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da92e84c-75cf-4425-b054-3631260c70a4", "sighting_of_ref": "indicator--379faacd-e4e7-42d2-b186-f2252798e629", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb088f42-729a-4cbb-afb8-207ee0d30d3d", "sighting_of_ref": "indicator--379faacd-e4e7-42d2-b186-f2252798e629", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed9ecfd-3289-469b-8aae-5fc044c42ef9", "sighting_of_ref": "indicator--379faacd-e4e7-42d2-b186-f2252798e629", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d63b50a-d051-4e09-bcea-953a5d406525", "sighting_of_ref": "indicator--9641e5e6-a8bf-4321-8251-abe87bf59585", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00d5f25-7926-4e35-9525-64ee5dcb45f3", "sighting_of_ref": "indicator--9641e5e6-a8bf-4321-8251-abe87bf59585", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baffcb78-4682-431d-95ce-139526ffdf74", "sighting_of_ref": "indicator--9641e5e6-a8bf-4321-8251-abe87bf59585", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41480222-1ed5-4c0e-acfb-549b364dd828", "sighting_of_ref": "indicator--3b510732-5ef0-41b5-b194-d5b9dd2016d3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc6acb08-b9f5-40cd-9a83-87c6d6d26097", "sighting_of_ref": "indicator--3b510732-5ef0-41b5-b194-d5b9dd2016d3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20de48d9-8c2a-4cea-bef6-22a004c8a904", "sighting_of_ref": "indicator--3b510732-5ef0-41b5-b194-d5b9dd2016d3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab032510-bb40-48cf-91fd-222a4ef2fc9f", "sighting_of_ref": "indicator--814f2ae2-f37e-44e0-a7f6-e4f10f09559d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--616a13d6-b956-4675-8f36-50f6eecd76c8", "sighting_of_ref": "indicator--814f2ae2-f37e-44e0-a7f6-e4f10f09559d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--062db57d-8149-4bf5-9dab-566dae601f0d", "sighting_of_ref": "indicator--814f2ae2-f37e-44e0-a7f6-e4f10f09559d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71cf287-634d-4937-b1ce-777fbdfbebdb", "sighting_of_ref": "indicator--2483f3cb-3c8d-41e3-9160-db4e416c860f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb168c9f-33ac-48d1-9bb2-5b7150ef8ae9", "sighting_of_ref": "indicator--90a0b445-decf-423c-b6f9-20c486d3dcae", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d4a93ea-13a8-4d24-8dd9-80229e24a687", "sighting_of_ref": "indicator--90a0b445-decf-423c-b6f9-20c486d3dcae", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5750c10-91a5-434d-ba86-1601d5313169", "sighting_of_ref": "indicator--255c15a0-dad3-472c-b6f2-164ffb33f8d6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1030712c-c6c7-4bf7-b456-d56ea66688f5", "sighting_of_ref": "indicator--255c15a0-dad3-472c-b6f2-164ffb33f8d6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f1c359-3e71-43b6-b710-4c73ae625dfe", "sighting_of_ref": "indicator--255c15a0-dad3-472c-b6f2-164ffb33f8d6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6296bb32-2dfa-4448-83da-c8f9a49d763a", "sighting_of_ref": "indicator--53c4d66e-7c41-4431-86b6-d153be397190", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c939d0-a690-47ee-b2ea-1b6b22becb69", "sighting_of_ref": "indicator--53c4d66e-7c41-4431-86b6-d153be397190", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c76aeee7-3628-48b1-a63c-3f9388b2e52c", "sighting_of_ref": "indicator--53c4d66e-7c41-4431-86b6-d153be397190", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ceb949-0fff-4fc8-a16b-728040754920", "sighting_of_ref": "indicator--832f1e15-a5a1-41ef-9562-a8ad4ebc31c3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb88f75e-e77a-4fc1-971d-43e493501804", "sighting_of_ref": "indicator--832f1e15-a5a1-41ef-9562-a8ad4ebc31c3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--229d0f5e-60d5-461a-9d40-5a971690babe", "sighting_of_ref": "indicator--832f1e15-a5a1-41ef-9562-a8ad4ebc31c3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d2ccf5-7212-44f5-aa5c-2c39e51ea6c8", "sighting_of_ref": "indicator--b88c6517-504e-4f65-99fc-9dc2b85e591f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c03d3c-c5ca-4eeb-b1d4-0e64394631fb", "sighting_of_ref": "indicator--b88c6517-504e-4f65-99fc-9dc2b85e591f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a58af61-deca-4b86-9209-5a2974a5aa3c", "sighting_of_ref": "indicator--b88c6517-504e-4f65-99fc-9dc2b85e591f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0198f1-17ba-49bb-974e-45d7e2c9c6b7", "sighting_of_ref": "indicator--0f64deba-3f11-4651-bb07-c1b0f40a7854", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e58eed5-8412-4a70-be32-27cd64967e18", "sighting_of_ref": "indicator--99cec232-e79e-4e18-a402-1778efee97f0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--250fb5f9-54fa-4202-8f1a-2daee48089f5", "sighting_of_ref": "indicator--99cec232-e79e-4e18-a402-1778efee97f0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b772491-6ff2-4a38-a0ac-8ef2bb230efd", "sighting_of_ref": "indicator--99cec232-e79e-4e18-a402-1778efee97f0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8ae8d3-9fc2-4737-a138-a5b57a9f1192", "sighting_of_ref": "indicator--93262868-10b9-426e-893d-3b039861831f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a74761-a588-41db-967e-99e91c5522e8", "sighting_of_ref": "indicator--93262868-10b9-426e-893d-3b039861831f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--810aa60c-99a4-4d9b-8ff1-c95be42236a2", "sighting_of_ref": "indicator--93262868-10b9-426e-893d-3b039861831f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf2c4d7-d87a-4b09-9c80-02a8ae203954", "sighting_of_ref": "indicator--75922516-69a3-4e0c-a62b-e356790dc141", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--198bf71c-b820-4e8b-bdad-75e8435da483", "sighting_of_ref": "indicator--8acf65c9-00b3-419f-a634-0b6cb75652fd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f720af31-4646-4218-89ef-492503fbd175", "sighting_of_ref": "indicator--cdd7d9b5-7efb-497e-8b97-3a71d03bf9d1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb37b8a-5931-43e4-8d0a-f09c2ffd9571", "sighting_of_ref": "indicator--6601a8d2-6d84-4a27-bcc7-44d76ee8bb1d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f37dcc-5a4a-4bc3-a7c8-2048db736956", "sighting_of_ref": "indicator--8e40c69b-b6a9-43d4-9516-e7f68293ef60", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3fffcbe-a616-4e63-94bd-cd3c375e247e", "sighting_of_ref": "indicator--467d9490-f9d7-4940-a6aa-10c66978eab5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e639a7-c909-411a-93bf-f6bebcd5aa6c", "sighting_of_ref": "indicator--bb7f3444-61ba-4a69-8d5d-4a5a07738cd1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4531510d-085d-4cb2-b2c8-371347f8b163", "sighting_of_ref": "indicator--bb7f3444-61ba-4a69-8d5d-4a5a07738cd1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0487ce74-2c87-467d-b3d0-86f51870e225", "sighting_of_ref": "indicator--2becd59b-e816-4f83-b41f-fff96d85d067", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59119a89-eda6-4283-b80b-4f91a541a670", "sighting_of_ref": "indicator--f9f6de00-c6af-429b-be18-2bc745584334", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8f8a45-6b90-4837-a56f-39ff36ee9fae", "sighting_of_ref": "indicator--b08705cf-0141-4408-ab7d-8f5e17d05de9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61263c39-c54f-4813-8101-21ba86e54bc3", "sighting_of_ref": "indicator--25185014-869b-4b81-be7a-c10e288822a1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3707d6bb-f10b-4941-87d8-711f7dc7142c", "sighting_of_ref": "indicator--b8b80172-b97a-4607-9f30-53cc522f459a", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e310ad-2002-4ad4-96fc-9b6c967c7010", "sighting_of_ref": "indicator--d3a5bbc9-99cf-4ea3-b1a4-8057ea8c6e7b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--761bf2e7-6f5b-4f03-af42-70cd171f5f77", "sighting_of_ref": "indicator--f11ca6df-847a-46fd-8267-6d44c370f86e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--622472f6-4862-4de7-ba26-7645efb5f354", "sighting_of_ref": "indicator--f11ca6df-847a-46fd-8267-6d44c370f86e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aee3355-814a-49cc-8064-66f8e90599b2", "sighting_of_ref": "indicator--640b95a6-bb12-4815-af6f-d1f52925d3e7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2714a153-d47c-42e7-8a9e-8f6d9062fac8", "sighting_of_ref": "indicator--81c5573a-d8f7-4c76-99f6-e3daac461cc8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e73c21-372c-4ffe-bc9e-cb496636bf07", "sighting_of_ref": "indicator--8cb76b52-b953-4fc0-b37d-bbe22979c8be", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--190e8a61-8a5d-435d-8691-e9713f920c08", "sighting_of_ref": "indicator--8cb76b52-b953-4fc0-b37d-bbe22979c8be", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dcd936b-7702-4d5c-a0b4-6e058d009168", "sighting_of_ref": "indicator--8cb76b52-b953-4fc0-b37d-bbe22979c8be", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e04f70e-49b0-470d-80bf-61270682cd38", "sighting_of_ref": "indicator--6018fe84-be10-4558-92fe-2d5a30f9a0d2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4816a846-0b79-4890-8e66-1a62ceb2d04d", "sighting_of_ref": "indicator--f76c15db-53c1-47da-a261-761b5ab24463", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c263ef-c1fb-46b1-bbad-e384eb042a7c", "sighting_of_ref": "indicator--42731cff-a70c-420f-9129-c9345c55809f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09414ad4-8a68-41a2-bd38-4809c23e110e", "sighting_of_ref": "indicator--ef162199-2458-482b-9177-19b99f9e1de7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b9706f-8527-4b6a-8bdf-efac2108a1b8", "sighting_of_ref": "indicator--665b92e1-59ad-4955-9c5d-df14ea324531", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea1f1bb-62db-4e45-ba3b-67d4fc94f77f", "sighting_of_ref": "indicator--27d2c6bb-c066-4367-ac8b-ae90eaad7480", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e1a1439-f86a-424a-b836-0ce46e770315", "sighting_of_ref": "indicator--eff0bce1-8eb9-44bf-a977-a3b3c1b84f2e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b67752c-ddbf-488f-bc3d-079b9b2aa0d2", "sighting_of_ref": "indicator--15d40bac-4d4c-4d1d-a44a-4f233585f78c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8680e48f-9c21-4547-b9d2-1b651e39af21", "sighting_of_ref": "indicator--15d40bac-4d4c-4d1d-a44a-4f233585f78c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--415eb1ad-8b99-42ad-841f-aa4fe425d88b", "sighting_of_ref": "indicator--63826eb6-cc09-4187-ba71-87e6cab6b2b0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a39bd487-86fd-42f0-a7e2-9435db44906d", "sighting_of_ref": "indicator--d095bb3d-bd1a-4197-9b80-6e5be73765a6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e0be423-35b3-466f-9a3b-bed19026c703", "sighting_of_ref": "indicator--bba023e2-5c01-45b7-867a-1c16df977ff7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4e37fb-364f-43d7-86e1-ff3f5bb1e368", "sighting_of_ref": "indicator--a8d3174e-8167-453c-8009-33d32e4e51eb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1fee545-d088-4f80-88e0-2df422f09aaf", "sighting_of_ref": "indicator--654c1026-bf61-483f-ab14-d04e7fb713a5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1840be2-ca7c-427b-a361-bad9558790aa", "sighting_of_ref": "indicator--654c1026-bf61-483f-ab14-d04e7fb713a5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7144900c-87ae-4d5d-adf2-e9f4e5971375", "sighting_of_ref": "indicator--654c1026-bf61-483f-ab14-d04e7fb713a5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc8f9b1-a7c3-4b35-9f97-c960746f56ae", "sighting_of_ref": "indicator--fd73aaf3-7b96-4b24-894e-8f806921f01e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e6a1155-7bf4-4e3e-aa89-fac7c3c709a3", "sighting_of_ref": "indicator--fd73aaf3-7b96-4b24-894e-8f806921f01e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca44f65-a03f-40c1-818f-1f59837214e8", "sighting_of_ref": "indicator--fd73aaf3-7b96-4b24-894e-8f806921f01e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d65185bd-b6cb-4ad2-a717-9292fe944f67", "sighting_of_ref": "indicator--6e8d5d78-1f3d-491f-af17-9817bf0f2f2e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c0e461d-ccc5-446f-90c0-3e788fec4a97", "sighting_of_ref": "indicator--6e8d5d78-1f3d-491f-af17-9817bf0f2f2e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0607e57b-7b3e-4561-bf34-c25eb2a31589", "sighting_of_ref": "indicator--6e8d5d78-1f3d-491f-af17-9817bf0f2f2e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b4f3ac-29c4-44f1-b96a-21f1d9e037a3", "sighting_of_ref": "indicator--2b9ed5d7-62b7-4028-b130-26a2ded426da", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19760e3-61e4-4426-96f7-ccf2ef53fd5d", "sighting_of_ref": "indicator--3e853247-2a3b-40d9-81ea-48f42d6e2f7f", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5205bb5b-877d-4299-81f4-4f9dbdd5fb18", "sighting_of_ref": "indicator--558e488a-f833-44d2-bfbd-b20aefb54307", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9550e4a1-bb04-45e1-870b-77f5d8923ce3", "sighting_of_ref": "indicator--f6d24a69-334d-47d3-8d0f-0953dd7ea32a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f18eb8d-0047-4ac3-992f-2b965646af92", "sighting_of_ref": "indicator--9e2a6803-20ab-4afe-bb6d-447cbea7fe03", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c469b99-298a-4889-8565-6ea9cd856814", "sighting_of_ref": "indicator--b993bc22-3e55-45e2-b23d-67cfdabfb860", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a72187-e25f-4d16-aaf1-4c4c46d15ede", "sighting_of_ref": "indicator--607104b3-0a6a-4d2c-b46c-214567dc260d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0db2340-5760-4b07-98c2-0d0a1c55b8db", "sighting_of_ref": "indicator--3c89e722-75f8-4e84-97bf-13c9fda93d06", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a635ca9e-996e-4c2b-b922-5378f5f0ebae", "sighting_of_ref": "indicator--9c36ba42-d48e-4cc6-af70-810d35af7fee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ade373-5853-4ba4-a38a-86780dc25b08", "sighting_of_ref": "indicator--a394b553-5884-4a7d-98c2-7922ba56f76f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde66db4-4598-4d0a-9da5-9dc5c6a57f0a", "sighting_of_ref": "indicator--744800ee-bc89-4c47-a1fa-f1819a7a9cc2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e01fb12-dfeb-4c0f-939c-b106ccd50162", "sighting_of_ref": "indicator--17047a51-34f6-4203-bfa8-a7b1ec90a3c0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d28f604-5436-430c-8c5f-3d0b4ddbed5e", "sighting_of_ref": "indicator--24545635-35a4-4aec-bba8-47e8cd7fe646", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcac65f1-90a6-4a9d-8d39-caa79df803b4", "sighting_of_ref": "indicator--47a31109-6e9c-457c-ae04-495d17be51f9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c639d609-f1d3-4d85-8018-98eb89053128", "sighting_of_ref": "indicator--b86fdcfa-d723-4bd4-a1e9-d36817bc4012", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7982ecf3-bd59-4e0a-8c20-a3a6493d2e92", "sighting_of_ref": "indicator--0dfe82a9-df5f-4071-b763-9246bccafdba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd40cf7-2adb-479d-9384-b1aee3f43d4f", "sighting_of_ref": "indicator--948bec78-b282-459f-a87c-823c28714ac3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba7b292c-e220-48be-851a-2b502a591970", "sighting_of_ref": "indicator--3b41d2db-05ad-432b-bde6-296c1c5302b5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99b9bd7-8c8a-4ce3-abe7-c56f0b15af02", "sighting_of_ref": "indicator--6c6f07d5-9298-444d-b300-305f00341899", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d244d1da-7a5a-4c8f-b794-3780d490eeed", "sighting_of_ref": "indicator--d853cb6d-14ac-483d-99ac-b9cefda0f86c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7639d7-9ea4-44e3-ad97-b4b45db581a7", "sighting_of_ref": "indicator--5aacd0ae-9c54-43da-babd-8df24361d003", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe28c5ac-52f1-4d9f-b7f4-2ae356633a04", "sighting_of_ref": "indicator--96c2fbf4-42e6-4e40-aa86-eb200cf4e513", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--931e5827-41dd-43f6-80e9-2adc936f9f4f", "sighting_of_ref": "indicator--caa28f91-87a3-41b7-b130-1bbec2b65369", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc610083-7a5c-4a1f-9a23-ae916ff0a145", "sighting_of_ref": "indicator--8870e89f-960a-4cc9-80f8-4ebeb2d2f6c5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b9a15e-798f-4ff4-b4f4-83545e5af330", "sighting_of_ref": "indicator--da1e6ced-f9b5-4d58-9e3f-1e43b6037ed6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a155ff18-a57b-4033-87b5-ed61b63bd94b", "sighting_of_ref": "indicator--c97563a9-b991-4644-937e-f162b41ecc23", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af390cda-2f11-43c5-955b-258338e27145", "sighting_of_ref": "indicator--08fb1b59-5845-4818-b245-3e574aac6f4c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a78925-b922-415c-bd23-7a475b190686", "sighting_of_ref": "indicator--d477439b-b7fc-46cf-b174-600bc0f37cf1", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee3a5277-ed6e-4e03-96d0-862f37649234", "sighting_of_ref": "indicator--eff21b80-3ef0-44dc-b2bb-57e846f4af1f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8660c8-071d-4391-8bed-db839efe58d7", "sighting_of_ref": "indicator--eff21b80-3ef0-44dc-b2bb-57e846f4af1f", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d854ad-ded7-47e1-a4af-e3de1132c217", "sighting_of_ref": "indicator--865f8e19-088e-48c2-ad75-f4cf57fa5b6c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f62cdcc-a598-4ca2-88ba-1c5c6c72f957", "sighting_of_ref": "indicator--93493277-08e5-44ec-ac75-07754ad34eb5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9750ebb-34ca-4f42-b8af-06d6fc0cb732", "sighting_of_ref": "indicator--124a9a74-1492-41e7-aa98-8645829dbc88", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3de6470-8374-4e3c-898f-3150af0efbc5", "sighting_of_ref": "indicator--36ba9dc7-4111-41bc-a30c-46bb94168c8f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16197964-9cf7-4739-bcbe-4606e130d8e4", "sighting_of_ref": "indicator--34ea687e-defb-4c63-85b5-af0828f3ac75", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c752ac21-6c9e-4af1-8bb3-5fa2dcb4c25f", "sighting_of_ref": "indicator--6f7f6b89-321b-4af0-b206-c51765184d15", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd1dffd5-4a67-4acd-b248-40cbd9b3264e", "sighting_of_ref": "indicator--0d67d8a9-5d6d-4143-ad8d-ae11f01cbdc5", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bb8f60f-820b-4cdf-bb2a-1d0e8d9cf25a", "sighting_of_ref": "indicator--4c163d9e-ca17-463d-8f96-e9b0ee1b4525", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d172f51a-31ec-4c57-9e30-d5476f580d71", "sighting_of_ref": "indicator--4c163d9e-ca17-463d-8f96-e9b0ee1b4525", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70226d4-659c-49c8-ba8a-92dd6098858d", "sighting_of_ref": "indicator--4c163d9e-ca17-463d-8f96-e9b0ee1b4525", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14206e9d-fcee-46f9-adf3-9f0bab7cb18b", "sighting_of_ref": "indicator--4c163d9e-ca17-463d-8f96-e9b0ee1b4525", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--040b7be9-d25c-4de2-a83a-441942165cea", "sighting_of_ref": "indicator--ec6da9b0-5d98-4100-b0c3-c53b92e9a810", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778dbf80-ca84-4067-b17e-5cc820a6da08", "sighting_of_ref": "indicator--093a0c9f-c4c3-40db-8bce-20b4abe8eadc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--392f2804-173e-40db-b9d0-d7d66983950a", "sighting_of_ref": "indicator--66cbb53d-6261-4759-8391-32fdff8d1d93", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--658887a6-d253-4d0d-93e3-0ba8ce1e31f5", "sighting_of_ref": "indicator--66cbb53d-6261-4759-8391-32fdff8d1d93", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b64a75-6c04-45e4-8bb7-9127f883671d", "sighting_of_ref": "indicator--66cbb53d-6261-4759-8391-32fdff8d1d93", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16d03de-ed72-4881-8860-7a6d20a43c40", "sighting_of_ref": "indicator--d8ffc395-3a29-44ff-9b50-56d12d053c10", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070440ca-8cba-41f8-aeb8-461ce21838fe", "sighting_of_ref": "indicator--9bcd01bc-f59a-464c-b7ff-864b76163010", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a390a035-1381-45bd-9203-e0ad581b3854", "sighting_of_ref": "indicator--9bcd01bc-f59a-464c-b7ff-864b76163010", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f066826-9001-4fc8-9e36-8ebbfde02a9a", "sighting_of_ref": "indicator--c9b578fc-81f8-41cc-b4f7-09467d0da7a1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e9a418-fbfb-4390-aae4-365ae117c04a", "sighting_of_ref": "indicator--5cb53208-2468-4025-9ac0-97d8266061cf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--833397ae-ce2b-4a50-b9b7-a7679983005d", "sighting_of_ref": "indicator--5cb53208-2468-4025-9ac0-97d8266061cf", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fedb7e4-733e-4365-bb73-4f02615aa807", "sighting_of_ref": "indicator--005b1b85-716f-45d3-af05-8b7cf0f17f65", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8243a8c2-1117-4040-b86f-8cba5b2a48de", "sighting_of_ref": "indicator--005b1b85-716f-45d3-af05-8b7cf0f17f65", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2afcba1a-5a1d-40ac-ac42-df0f152acc4f", "sighting_of_ref": "indicator--005b1b85-716f-45d3-af05-8b7cf0f17f65", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21f8fd3-dd3b-4711-9f8d-7e9d4c8012c5", "sighting_of_ref": "indicator--a173e522-9d91-454a-b5fd-956735463e47", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c181aab9-aa9c-4117-b2cd-0e93bbdbf1b1", "sighting_of_ref": "indicator--a173e522-9d91-454a-b5fd-956735463e47", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8372fb81-028f-47f2-9111-4f4e06b7662b", "sighting_of_ref": "indicator--4087ef72-693e-4ebc-9569-e1c37690b211", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433eca65-19f6-41f8-b684-fc31a2febd92", "sighting_of_ref": "indicator--4087ef72-693e-4ebc-9569-e1c37690b211", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0bfdacb-8f82-4a3b-9d24-4c4d54dc87de", "sighting_of_ref": "indicator--4087ef72-693e-4ebc-9569-e1c37690b211", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c0e65c-d352-4d82-8f55-ba5f88f95843", "sighting_of_ref": "indicator--aebdb0dd-56c2-43f1-90ac-52754e1a3e5d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38fb48e5-001f-4f2e-a902-de1c766dd99f", "sighting_of_ref": "indicator--26d620bc-9583-4cc1-9f4e-b163f24f994d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c561cb11-1104-4988-88de-4bb43c201d51", "sighting_of_ref": "indicator--26d620bc-9583-4cc1-9f4e-b163f24f994d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dbfdabb-24d0-4c90-ac89-2bb46466cd5c", "sighting_of_ref": "indicator--26d620bc-9583-4cc1-9f4e-b163f24f994d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b7fddde-1172-42fa-a314-80f124588fa5", "sighting_of_ref": "indicator--5ba0067a-c80f-4048-8415-543619dacb09", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb4b0ab-5f86-47b4-a61b-871ae7c3b277", "sighting_of_ref": "indicator--abb980f1-0a76-49cf-b1c4-b411094a19da", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54371ecc-ec00-4627-9ae8-d827f11baa1d", "sighting_of_ref": "indicator--fc5b5e24-9c26-4205-b88c-7f436bfd30f7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9898267-5456-41b2-a18e-4edb878efb54", "sighting_of_ref": "indicator--992bc6f2-9a09-43ae-a738-7ce1b5772d71", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a84583-2287-4ee4-8524-edf53184734c", "sighting_of_ref": "indicator--e2dc1423-cb1d-468c-a5e9-c64d28557836", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634a159e-b78e-4ab2-b7a7-1d7cf4795e50", "sighting_of_ref": "indicator--d6e17ed7-cfda-4974-b111-a213e530412c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2bc3f49-46ab-48f9-8832-e2cd32087ca1", "sighting_of_ref": "indicator--6b9c1fb6-f169-457d-bdcb-ad2bbef1783c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb9ebaf-c11b-4db4-88d0-71acb6e0f637", "sighting_of_ref": "indicator--dad3262a-15ef-4334-b751-3a04732ba4d7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8175f0fe-531b-4a30-bcef-35ba6ddcecbf", "sighting_of_ref": "indicator--121461e4-8c63-4a9d-a256-2f940cccbd62", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f85eef-38f4-445e-b610-9ed1e03d4bc0", "sighting_of_ref": "indicator--88bde832-9c63-4b9c-9b38-0b6c54eec35b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b5c223-84e0-469a-b25d-84deb94de65d", "sighting_of_ref": "indicator--7356be27-1be0-4f1c-bdb5-bcda1fd6a888", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e3720e-9dc4-479d-b8da-d38177267325", "sighting_of_ref": "indicator--7356be27-1be0-4f1c-bdb5-bcda1fd6a888", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7c1967-f25c-4855-8cf8-210e233edace", "sighting_of_ref": "indicator--7356be27-1be0-4f1c-bdb5-bcda1fd6a888", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c66e66-c6f1-4982-bffa-8dce095b4613", "sighting_of_ref": "indicator--403a0bdb-27ab-4ada-920b-8032f6efa0f0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c4d5cc-b3b1-4fbe-8e87-6a8fc6cad371", "sighting_of_ref": "indicator--403a0bdb-27ab-4ada-920b-8032f6efa0f0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a23b8e9d-95a4-416a-817c-4b5f11df9129", "sighting_of_ref": "indicator--403a0bdb-27ab-4ada-920b-8032f6efa0f0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e769ad-0820-471d-ab98-772fd2327a46", "sighting_of_ref": "indicator--27f32964-9b27-4d2f-b498-5b5d55741290", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2240f8-77cc-461c-a58c-62b1b558c60c", "sighting_of_ref": "indicator--27f32964-9b27-4d2f-b498-5b5d55741290", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cdd1f8c-124c-47ff-a208-8710de0023b7", "sighting_of_ref": "indicator--27f32964-9b27-4d2f-b498-5b5d55741290", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a3b1c1-ca66-4df8-9051-4d494d99e698", "sighting_of_ref": "indicator--86058012-a229-4be8-9958-5606adac1721", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c91fb73-925f-4800-90b7-3db7c774f1c2", "sighting_of_ref": "indicator--86058012-a229-4be8-9958-5606adac1721", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e67586c-f6e2-44f7-8d0c-2c3bb547fded", "sighting_of_ref": "indicator--86058012-a229-4be8-9958-5606adac1721", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e641fe-7da7-4f86-ac65-786ed4f50810", "sighting_of_ref": "indicator--2f79e22e-a23b-47e1-adf8-8897751ede89", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50b2b29-aca5-4b91-be69-9e1a5abfdbb0", "sighting_of_ref": "indicator--2f79e22e-a23b-47e1-adf8-8897751ede89", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--754aab93-844c-46e9-9304-24f40cb1fbbe", "sighting_of_ref": "indicator--793bceaf-1c6f-4904-9321-d7c378e4dce6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eacd2eb8-7b87-42fe-bcc6-0c4733aca384", "sighting_of_ref": "indicator--793bceaf-1c6f-4904-9321-d7c378e4dce6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d110b229-d9d0-4ce4-9c59-f04abdc3b09a", "sighting_of_ref": "indicator--01b1c3b5-7aa9-4aad-a532-017fd3fd6c8c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa8c5c8-bd38-4b50-8fe6-c3fb8b9911ac", "sighting_of_ref": "indicator--2900a5b3-8a03-40c4-9944-2116bc56c465", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa60ea05-4c71-4ee0-883c-367f37278cf8", "sighting_of_ref": "indicator--2900a5b3-8a03-40c4-9944-2116bc56c465", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ebe3d70-407d-4fa8-a8a8-6a8336448deb", "sighting_of_ref": "indicator--2900a5b3-8a03-40c4-9944-2116bc56c465", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ffda60f-6a6e-4688-bfe7-5d392d8797f2", "sighting_of_ref": "indicator--e5681557-3d3c-466d-865b-2ebea86d57cd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d11faba-ae3d-4e1e-bdaa-59844dcc498a", "sighting_of_ref": "indicator--15a24518-b6f1-45bd-92ed-fbd877e13587", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c515eb5-0cf1-49cb-bf96-814e240f0ff5", "sighting_of_ref": "indicator--22fdb5cb-eb11-4ed0-b426-ef0326f536ac", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5ba401-c35a-466e-adb2-c507c051a6b7", "sighting_of_ref": "indicator--6d91762c-3841-4e80-9643-72001dfff958", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b40353-20af-4bc0-b3a5-48929915898f", "sighting_of_ref": "indicator--8abcc7fc-2013-4f40-b7ec-71ab251b225b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f5c5dbc-b282-4a71-b7b3-07697a57eea1", "sighting_of_ref": "indicator--31dec975-4cb9-4465-988f-65c00d9bcec5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--391e5282-2943-47bb-9949-54186b3f5e3d", "sighting_of_ref": "indicator--68cacb78-8fa1-4bd5-8f6e-97c63be55745", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48762a4f-c732-493e-bf40-36f11394b5e6", "sighting_of_ref": "indicator--bf7da546-0a73-4e39-900a-75edee03b1d4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94500c0-a502-4de6-950e-93ea9b35aa4a", "sighting_of_ref": "indicator--9b59c00c-300d-489a-a84b-72b9746bfe9e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917d2473-8b8f-4a03-aed3-bf0fee385b41", "sighting_of_ref": "indicator--9b59c00c-300d-489a-a84b-72b9746bfe9e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--663f1962-9e0c-4eda-a5b5-2b2fc33f61ba", "sighting_of_ref": "indicator--c6d5ad40-dd5d-472a-aa03-6b1bcd98bddb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3690e85b-cfa7-4e14-9c19-f41034660a4c", "sighting_of_ref": "indicator--c6d5ad40-dd5d-472a-aa03-6b1bcd98bddb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--300e3098-49e7-409e-b002-808bb1a67f3d", "sighting_of_ref": "indicator--69b97f0c-1cea-4c17-9a50-4549782f15bd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba595d6-4505-4033-aea7-0ee81d1119cc", "sighting_of_ref": "indicator--51587fa5-c1c3-495c-83d7-e6823b957794", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f5ffc2-d3ec-45da-9392-8794531c6d47", "sighting_of_ref": "indicator--8d0d9fb5-5512-4ef8-b59e-2a68e707a417", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5573a6a7-7b6d-4876-871d-1c8d23c9a2a8", "sighting_of_ref": "indicator--8d0d9fb5-5512-4ef8-b59e-2a68e707a417", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ce6364-20c1-44d6-acfa-698f9f5788dc", "sighting_of_ref": "indicator--d01206ae-a6f3-49cf-a476-1ac81dc896ab", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21257263-e52c-4e35-b697-dd5edb721d79", "sighting_of_ref": "indicator--b8fb9327-4d91-4193-9abc-6bde8a58a24a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e221cc27-687e-4211-9615-ec99b2b822c3", "sighting_of_ref": "indicator--b8fb9327-4d91-4193-9abc-6bde8a58a24a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e08106-e579-4090-870f-97aa2047763b", "sighting_of_ref": "indicator--2f9237f4-7656-4ac8-aa4c-0f8cdd7ec48b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa458cc9-4f72-4a9e-a5e7-fc9f60ed82d0", "sighting_of_ref": "indicator--b1ba6284-5b4d-45af-9488-1de0c8598f42", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523f3358-1d2a-45f2-8cc4-c30fc56f6844", "sighting_of_ref": "indicator--7e9a3512-67fa-4a7e-a11c-f93429c7f01b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9ddbc3-db68-4897-822d-b2678b01eb15", "sighting_of_ref": "indicator--890636f6-da67-48a2-ad82-e2b15615a3a4", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45d8a8e-1fd2-4cd2-ac37-05c4590ebc15", "sighting_of_ref": "indicator--7522bcf4-ae78-4aa8-8a1b-7e123a3ebf32", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b7cbf9-8419-43ea-88fc-38294ecd074b", "sighting_of_ref": "indicator--7522bcf4-ae78-4aa8-8a1b-7e123a3ebf32", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f8483f-003b-4e98-bc8e-a04439bba7c1", "sighting_of_ref": "indicator--7522bcf4-ae78-4aa8-8a1b-7e123a3ebf32", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c57d2c-0799-4a63-9151-6a2564e7fa14", "sighting_of_ref": "indicator--402c4a0a-aed0-49e6-b2ba-7a72a50cc37f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399a7933-a6a9-42c2-b39f-9c61f15a5772", "sighting_of_ref": "indicator--402c4a0a-aed0-49e6-b2ba-7a72a50cc37f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc827253-458e-4b04-b5a9-2bcd12274ed9", "sighting_of_ref": "indicator--402c4a0a-aed0-49e6-b2ba-7a72a50cc37f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39765291-d299-4b78-b41d-f1b5d5aecac8", "sighting_of_ref": "indicator--66b2264a-6bf5-4686-b29a-db297845b098", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4721650-20b7-46ac-bf94-ef2549160299", "sighting_of_ref": "indicator--66b2264a-6bf5-4686-b29a-db297845b098", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afcfb97e-fd93-44ed-9fc6-8a70b891afb2", "sighting_of_ref": "indicator--66b2264a-6bf5-4686-b29a-db297845b098", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e5730c8-8cca-4176-b2e2-2079f464cf72", "sighting_of_ref": "indicator--1295e8a2-6618-4810-971f-463c54186ea7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ee18f8-718a-4528-b18d-18bc99342817", "sighting_of_ref": "indicator--1295e8a2-6618-4810-971f-463c54186ea7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54118bb7-e9d6-44c1-9dc0-dc253f3f2f73", "sighting_of_ref": "indicator--1295e8a2-6618-4810-971f-463c54186ea7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e25d318a-b52c-44f7-b4ee-6d243a0ced93", "sighting_of_ref": "indicator--701c6fe0-8603-4248-a1fc-7669df1216b9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b00306b-3f9a-4f99-a221-e06f61381067", "sighting_of_ref": "indicator--701c6fe0-8603-4248-a1fc-7669df1216b9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1423c1c1-3447-483c-80d5-4c0692387919", "sighting_of_ref": "indicator--701c6fe0-8603-4248-a1fc-7669df1216b9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1e8386-c166-496b-91a9-c59232026bd8", "sighting_of_ref": "indicator--01cf9a84-b39e-4016-8a22-1683366be13d", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa42e8d-0637-447b-a459-f60a6c42577e", "sighting_of_ref": "indicator--01cf9a84-b39e-4016-8a22-1683366be13d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e49f1fd-9764-4509-a753-bf80aa14e5f3", "sighting_of_ref": "indicator--01cf9a84-b39e-4016-8a22-1683366be13d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f86db4-a274-4a34-ba3e-107dd1521b13", "sighting_of_ref": "indicator--ff112e4e-2563-4583-bbbc-ebb32c004fd6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28108bb3-28ab-4f94-9c64-f525b5ef98dd", "sighting_of_ref": "indicator--ff112e4e-2563-4583-bbbc-ebb32c004fd6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ff7eccf-57ed-43db-af62-23692252e383", "sighting_of_ref": "indicator--060d766b-07a5-433c-acfd-0458a10d90e3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1a6904-b1cd-4aab-ae8f-0a095b5c73a3", "sighting_of_ref": "indicator--060d766b-07a5-433c-acfd-0458a10d90e3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbfddc0d-5a66-456e-85e8-3cc1db76b3ad", "sighting_of_ref": "indicator--060d766b-07a5-433c-acfd-0458a10d90e3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad8ac11e-ae43-494f-8502-6a4cc5094140", "sighting_of_ref": "indicator--db095bf0-0d76-4eed-9198-82e55e3e01e0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c640459-7449-4e70-9b6b-4cd7e334c858", "sighting_of_ref": "indicator--db095bf0-0d76-4eed-9198-82e55e3e01e0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65f2d569-e19e-4a73-bc8c-c6c4784b48ea", "sighting_of_ref": "indicator--db095bf0-0d76-4eed-9198-82e55e3e01e0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95794999-6df3-43d6-81fa-04c6218f5e90", "sighting_of_ref": "indicator--72a09a14-ecd1-4549-955a-6824c6a93e93", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--808e943c-eebb-4354-8e49-1721dc68039e", "sighting_of_ref": "indicator--72a09a14-ecd1-4549-955a-6824c6a93e93", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40cdc0d4-569b-4419-83e9-fb43f112b204", "sighting_of_ref": "indicator--72a09a14-ecd1-4549-955a-6824c6a93e93", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f98d201-d97d-4b13-9cab-da74e4af89dd", "sighting_of_ref": "indicator--f9c94919-9284-4e7c-914b-4efc9e6c81fe", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6b8265-22c2-4503-b41b-cc693997ed18", "sighting_of_ref": "indicator--f9c94919-9284-4e7c-914b-4efc9e6c81fe", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--439ac145-40e6-4c9c-befe-2b3d77f44ff7", "sighting_of_ref": "indicator--f9c94919-9284-4e7c-914b-4efc9e6c81fe", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ff7ad9-18e1-4175-8868-3c3b8f72243e", "sighting_of_ref": "indicator--0eb244cd-11b3-4f1f-ba85-4cda767e03dd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d527ea-ff35-4ec6-98b9-004b7b7d3480", "sighting_of_ref": "indicator--0eb244cd-11b3-4f1f-ba85-4cda767e03dd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e81e27f-6b8a-436e-9f3c-a86865f553b0", "sighting_of_ref": "indicator--0eb244cd-11b3-4f1f-ba85-4cda767e03dd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33fbd472-dfc5-45f2-a49d-6735440edb24", "sighting_of_ref": "indicator--ab68ac54-a28a-4a1e-a582-dd2a616530cb", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6caae335-f5a7-4e76-b7a0-dfe39e76dd35", "sighting_of_ref": "indicator--ab68ac54-a28a-4a1e-a582-dd2a616530cb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d03933-a714-4e7c-a4a7-0653faed506b", "sighting_of_ref": "indicator--ab68ac54-a28a-4a1e-a582-dd2a616530cb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61af049f-5824-4351-96ef-8730231f1dd3", "sighting_of_ref": "indicator--6e9b3dc9-9a26-42e1-80a7-a5c6770e9f9f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29cd327d-8bf0-48b6-a924-96cc1057adbf", "sighting_of_ref": "indicator--6e9b3dc9-9a26-42e1-80a7-a5c6770e9f9f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564f36ae-05f6-4fe4-a8ae-349e0bf92072", "sighting_of_ref": "indicator--db598bc3-c03a-457a-a56c-63626fcdb3a6", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--474459cb-a5b8-4655-ac75-564c4306c66c", "sighting_of_ref": "indicator--db598bc3-c03a-457a-a56c-63626fcdb3a6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4041ff82-cada-414b-bc2c-482ab26cf598", "sighting_of_ref": "indicator--adeae893-b09d-4527-9b7c-d2f826b2d3ac", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a399ebc-07ad-4fde-aa46-7f4175a3d7e7", "sighting_of_ref": "indicator--adeae893-b09d-4527-9b7c-d2f826b2d3ac", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7ccf06-dbc8-4d42-8ee8-2bae22f0d636", "sighting_of_ref": "indicator--adeae893-b09d-4527-9b7c-d2f826b2d3ac", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929c0fdb-3f35-48e5-8643-b73619330df1", "sighting_of_ref": "indicator--538d3683-ebbc-4578-8399-27446be2e9f7", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462b04a4-89cb-4ac4-ac43-8ebca5524165", "sighting_of_ref": "indicator--538d3683-ebbc-4578-8399-27446be2e9f7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3cf504-2d70-45cc-8e89-1ae9d8a9b0c3", "sighting_of_ref": "indicator--538d3683-ebbc-4578-8399-27446be2e9f7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f29c63b-9918-4292-b150-840f641b8cb2", "sighting_of_ref": "indicator--e7d776cc-39c1-476e-84ba-e92f8ab7fc88", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a298b4-e1a1-464d-a278-66fa4a93c9f9", "sighting_of_ref": "indicator--e7d776cc-39c1-476e-84ba-e92f8ab7fc88", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b259a3-716c-488f-9e10-faf534e8cbb8", "sighting_of_ref": "indicator--e7d776cc-39c1-476e-84ba-e92f8ab7fc88", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--200f5c43-2490-4e0d-97c1-b377e10a8cb1", "sighting_of_ref": "indicator--801ae6a7-4e8b-438a-b892-d909ef4d475b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee4db6a-3386-433d-9bd7-ec5816d5c3fa", "sighting_of_ref": "indicator--801ae6a7-4e8b-438a-b892-d909ef4d475b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad1a5a9-f02d-4e2d-86ec-1c99e441c0a2", "sighting_of_ref": "indicator--8c674193-d359-48d9-98bd-630060f0b5c0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3ff4bb-e013-43c4-b9bb-f7c2b7c7a31e", "sighting_of_ref": "indicator--8c674193-d359-48d9-98bd-630060f0b5c0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56c2422-173c-41bb-85de-445d2b4e420c", "sighting_of_ref": "indicator--8c674193-d359-48d9-98bd-630060f0b5c0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee6aa54-b2c5-48db-8570-9064f33b9d2b", "sighting_of_ref": "indicator--882a1540-a24f-4b9f-93cd-7b178c32e7a0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b143b2c2-fa0a-490a-8b10-a9e66489080d", "sighting_of_ref": "indicator--882a1540-a24f-4b9f-93cd-7b178c32e7a0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f88a16b-6f6a-4268-8274-7bc5b10d9713", "sighting_of_ref": "indicator--882a1540-a24f-4b9f-93cd-7b178c32e7a0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6858b5fd-f62f-499a-b07a-fc9040edc8ac", "sighting_of_ref": "indicator--e437d47e-73d4-4da3-9510-aefa6e38a990", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da7e161-8003-4d4d-9251-3eaaa0a965e0", "sighting_of_ref": "indicator--e437d47e-73d4-4da3-9510-aefa6e38a990", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d4be30-a00f-4012-92a4-6cde0f147898", "sighting_of_ref": "indicator--e437d47e-73d4-4da3-9510-aefa6e38a990", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97cd7ac-d257-4672-8cd2-859014ddd7bf", "sighting_of_ref": "indicator--3235b4f8-15ab-40ae-b59c-044412c81922", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89f63110-ec06-4cd2-bca5-3a8b442cb2b0", "sighting_of_ref": "indicator--3235b4f8-15ab-40ae-b59c-044412c81922", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75bd36ed-1b88-4153-ab5e-b4fdfacc2ead", "sighting_of_ref": "indicator--3235b4f8-15ab-40ae-b59c-044412c81922", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--193545e1-f7b1-4aa0-8006-c4dbb0edf0d3", "sighting_of_ref": "indicator--50089b7e-2766-473b-8d0a-974fdda32c4a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a109ab40-e043-4d1e-bbf6-e1b09701f9c5", "sighting_of_ref": "indicator--50089b7e-2766-473b-8d0a-974fdda32c4a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ac1a48-29fd-407c-8c70-67101a9a27a1", "sighting_of_ref": "indicator--50089b7e-2766-473b-8d0a-974fdda32c4a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855b9188-1b02-4904-b6f2-eba9582614c2", "sighting_of_ref": "indicator--9f3092b5-1c5e-45ec-b9e8-63f9a1dac311", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29575153-b673-4cd0-afaa-58b3cb6fd912", "sighting_of_ref": "indicator--9f3092b5-1c5e-45ec-b9e8-63f9a1dac311", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db39974c-276e-496c-aa30-18473c70d9ab", "sighting_of_ref": "indicator--6d02e7af-a886-4857-953f-6dad5a1ab594", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f9687aa-f5d3-481d-9cb1-4305896bf9fe", "sighting_of_ref": "indicator--6d02e7af-a886-4857-953f-6dad5a1ab594", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29fee018-d334-4ee5-9e34-1a11d7c4d493", "sighting_of_ref": "indicator--6d02e7af-a886-4857-953f-6dad5a1ab594", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9a73f0-b94e-4261-8638-2fed8e9cd5a0", "sighting_of_ref": "indicator--749704f2-8044-4235-b7b4-68464a277284", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ef0dfa-8cc0-4e1b-942b-ecae8380fd2c", "sighting_of_ref": "indicator--749704f2-8044-4235-b7b4-68464a277284", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--011df776-0205-45ac-b582-e0afde8ec3ec", "sighting_of_ref": "indicator--749704f2-8044-4235-b7b4-68464a277284", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b74475-b7e6-4de6-b421-01cce91f400c", "sighting_of_ref": "indicator--69bd4d30-8702-4a2f-b9e2-8a921ef4eb34", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27b1748f-5437-419e-ac9d-714082da6053", "sighting_of_ref": "indicator--69bd4d30-8702-4a2f-b9e2-8a921ef4eb34", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7241262c-b27b-4a9a-b70e-665a7ef89a66", "sighting_of_ref": "indicator--69bd4d30-8702-4a2f-b9e2-8a921ef4eb34", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7623fecf-1327-490f-8f5c-91a85f60acc9", "sighting_of_ref": "indicator--3c49fbda-2522-4dd7-a737-ee0d0c19e786", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b930d259-45a1-4668-b078-5cc9ed877445", "sighting_of_ref": "indicator--3c49fbda-2522-4dd7-a737-ee0d0c19e786", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a24675-2e14-43a9-a317-262f75a37382", "sighting_of_ref": "indicator--3c49fbda-2522-4dd7-a737-ee0d0c19e786", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175b2008-4fe3-430a-8ec8-431c54764e03", "sighting_of_ref": "indicator--2f0f0d80-3932-4e4e-90aa-cb2f596acc06", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b8ee195-ee97-4dd0-9a05-411b9983755a", "sighting_of_ref": "indicator--2f0f0d80-3932-4e4e-90aa-cb2f596acc06", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12335887-42a8-48e3-b70c-7984514aee64", "sighting_of_ref": "indicator--2f0f0d80-3932-4e4e-90aa-cb2f596acc06", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f980ab76-5d4d-42df-b07f-405f140b410b", "sighting_of_ref": "indicator--ae437293-f126-47ea-a190-508965709837", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9471d88-8420-4e61-88ed-ca32e64e32c4", "sighting_of_ref": "indicator--ae437293-f126-47ea-a190-508965709837", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc5d237-9ab0-4c34-8afe-47c798f08092", "sighting_of_ref": "indicator--ae437293-f126-47ea-a190-508965709837", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb1b4d2-d9f3-49e9-a1be-ee9e65fc427c", "sighting_of_ref": "indicator--ba4cdd19-6dae-444d-ab73-02535664588a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7cf68d6-414a-4a4d-9611-f68f7b8f829e", "sighting_of_ref": "indicator--ba4cdd19-6dae-444d-ab73-02535664588a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331bac83-482e-44cb-ae12-e9daa7d7c6ae", "sighting_of_ref": "indicator--ba4cdd19-6dae-444d-ab73-02535664588a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e01cc2c-e18b-4282-8f76-62c142bd1eda", "sighting_of_ref": "indicator--b11bbff8-8b2d-406f-ab72-be82061b303f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a89e32e3-3b0a-47b0-bd27-5ad8da941621", "sighting_of_ref": "indicator--b11bbff8-8b2d-406f-ab72-be82061b303f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d58079d-b3aa-417a-a61e-30c254f87b8c", "sighting_of_ref": "indicator--b11bbff8-8b2d-406f-ab72-be82061b303f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d28a83-e9e9-4ab9-834e-a52d79aa8647", "sighting_of_ref": "indicator--37499e4d-ccda-4864-ab37-f1826bc82f32", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed8a81f-8f71-46bd-8d99-1a3b855975ec", "sighting_of_ref": "indicator--37499e4d-ccda-4864-ab37-f1826bc82f32", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be9c80e-a224-487f-bfcb-d65ff4fc5717", "sighting_of_ref": "indicator--37499e4d-ccda-4864-ab37-f1826bc82f32", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83dff1a-8bc0-4106-bbd5-435f63b5b7a2", "sighting_of_ref": "indicator--06798c51-e4c8-4653-b848-dc1f547dd05a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59398216-c680-4d9a-a2d8-9af5e4462b24", "sighting_of_ref": "indicator--06798c51-e4c8-4653-b848-dc1f547dd05a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f5d7c0-6ae8-4849-958d-3662df5d13f7", "sighting_of_ref": "indicator--9fe18773-799e-4f72-9e66-0adb7ab6a50a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c43fe36f-97a6-45c1-9fb8-ba2c96f21a50", "sighting_of_ref": "indicator--1636f1b7-ca89-47c4-a7c5-4cd8fa500f9f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d38ec03-90f0-4155-8343-14503941f039", "sighting_of_ref": "indicator--1636f1b7-ca89-47c4-a7c5-4cd8fa500f9f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0247035b-4924-4841-abb3-7afae21226e3", "sighting_of_ref": "indicator--1636f1b7-ca89-47c4-a7c5-4cd8fa500f9f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924c8e5c-1e3e-4ed9-89ad-ab7f3e2634b8", "sighting_of_ref": "indicator--042c4dcc-7c19-4040-994b-e427c4d87a48", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90e26a2-d8de-4525-9141-7d6737189eca", "sighting_of_ref": "indicator--042c4dcc-7c19-4040-994b-e427c4d87a48", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313ab6a2-68b3-418a-a0ca-5c98307ae3ff", "sighting_of_ref": "indicator--c21390f6-ea70-4437-b809-dce4cec29291", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a514ca0-7528-4253-99d8-0c260a99614d", "sighting_of_ref": "indicator--8f345699-4eb6-4927-9ac7-7c01e793cadc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2908b10d-6cf7-490c-af91-7041d864a9ea", "sighting_of_ref": "indicator--8f345699-4eb6-4927-9ac7-7c01e793cadc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599f3b91-6b75-4311-ab1b-7b0b60db1b29", "sighting_of_ref": "indicator--8f345699-4eb6-4927-9ac7-7c01e793cadc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c82a2a-5a8f-497c-96d5-551f3be0b552", "sighting_of_ref": "indicator--6c82cfdd-b5d5-4523-a8fb-f75078db23e2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ca1040-c9db-44bb-adb3-be22d6787fcf", "sighting_of_ref": "indicator--6c82cfdd-b5d5-4523-a8fb-f75078db23e2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c9e4a0a-30bc-4f41-9537-447fce41b77c", "sighting_of_ref": "indicator--c07da726-18c0-4586-8cf5-6b183db3c32c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f162d9e-2189-47e8-a2c4-7d05bbdd963e", "sighting_of_ref": "indicator--16255a11-5f3a-45ed-a35f-82bdc7410a05", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594cc271-0e36-42ea-8264-fe5b5dbb7986", "sighting_of_ref": "indicator--3bcdd102-4cb0-45f0-9d8c-f411abd9b952", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72fe251c-aa64-44e8-a775-4dc38fb9607b", "sighting_of_ref": "indicator--0a13d98c-8725-4f70-a9b1-8a7ce9448bab", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e120707-3bef-4979-a8f3-fdb0a2bf0c8b", "sighting_of_ref": "indicator--bd704a97-14c1-448b-8b73-fb307a30be53", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a28877-9600-40c8-92e7-8384b7941f69", "sighting_of_ref": "indicator--88d92321-8976-45a2-b63d-cf8d179dff00", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7840c7f7-304a-43bc-9c72-4f7043af6fb9", "sighting_of_ref": "indicator--cd5aaac5-6d1e-4d72-963f-56424f83816a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd72003d-c53f-4942-805e-9b5daaf7a9f0", "sighting_of_ref": "indicator--581e59c4-81f8-4c7a-86b5-8960f75d55c1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a850b33-d2d5-4553-9b9d-ddfb86aa9699", "sighting_of_ref": "indicator--66833a41-0402-48aa-9521-f9cad9faad03", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee32e82-d4a5-4586-87e4-d6d7f0fddf15", "sighting_of_ref": "indicator--9de59100-b0ec-4d76-bd8e-0f45d4074f37", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--732cc5cd-7d92-4bf2-8b8c-8d01c1c8aa4e", "sighting_of_ref": "indicator--aa5f5acc-89c0-4f10-8836-594627a83888", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20570d12-70c6-42f6-b005-bae5d1123a3b", "sighting_of_ref": "indicator--aa5f5acc-89c0-4f10-8836-594627a83888", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73314a07-1055-44e5-8ec5-d7d4c81f33d9", "sighting_of_ref": "indicator--aa5f5acc-89c0-4f10-8836-594627a83888", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e7369f5-6da9-4427-8105-27db8f293c7c", "sighting_of_ref": "indicator--4ac399d9-4bad-4a66-8293-2f8e5cc4bbef", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df5ca994-8f23-4e86-9333-24debcd2d6a6", "sighting_of_ref": "indicator--75c80772-654b-4bd2-89fe-ab9a762ee2d8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f004e1-f04e-401a-8dd7-9e50e2a325d8", "sighting_of_ref": "indicator--2c81aa82-f245-4d80-b30c-e9a66c539489", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2b03ff-5b26-49f3-bb5c-19ffcd2ad331", "sighting_of_ref": "indicator--47155fc0-f81b-47eb-bbf6-857909e0a43c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d021e4-0169-4ea5-acf0-76b80b708ac4", "sighting_of_ref": "indicator--aff8c355-2ab9-446f-83e6-d947b89ed6ba", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7962db27-d774-41ac-8934-309887595d30", "sighting_of_ref": "indicator--aff8c355-2ab9-446f-83e6-d947b89ed6ba", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3957de1a-0bf2-4b1c-aacf-c52f9bfeefcf", "sighting_of_ref": "indicator--aff8c355-2ab9-446f-83e6-d947b89ed6ba", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33eff0b-b3a2-4a9a-af66-26350195b019", "sighting_of_ref": "indicator--6e5fb6e3-79b5-4608-ab8e-a7ec630aa876", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2afb0257-abbd-450e-b384-b67ea333bb9a", "sighting_of_ref": "indicator--40b81b50-320e-453e-bf23-a7017ffbe666", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c2fe08-4ae3-4c4e-a1a6-b74efeb6518f", "sighting_of_ref": "indicator--40b81b50-320e-453e-bf23-a7017ffbe666", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac153fd-4471-4a68-afe5-8e6c49fac638", "sighting_of_ref": "indicator--40b81b50-320e-453e-bf23-a7017ffbe666", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2932421b-4ddf-4888-87e3-03a50e4fed8c", "sighting_of_ref": "indicator--5d8e543c-58d6-4828-979a-f9ec40baf94a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e80fd6b-24a9-434d-a7c2-17ed7a9394f3", "sighting_of_ref": "indicator--5d8e543c-58d6-4828-979a-f9ec40baf94a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb305ff-d599-4fb1-b546-386918bd1de9", "sighting_of_ref": "indicator--5d8e543c-58d6-4828-979a-f9ec40baf94a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f2ccb1-e4a6-4fae-a238-a3e6d61448dd", "sighting_of_ref": "indicator--824033b6-8ce1-42f4-ac9a-13de7104227e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b594df5-2483-405b-97f6-4f5b0ffd28a1", "sighting_of_ref": "indicator--824033b6-8ce1-42f4-ac9a-13de7104227e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--233239ba-9ddf-48bd-aa5a-097d1bd28854", "sighting_of_ref": "indicator--824033b6-8ce1-42f4-ac9a-13de7104227e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--460a71c8-b962-46d3-934a-c0e3367a4b5c", "sighting_of_ref": "indicator--accecc64-e436-434b-8f7a-83a50720f70f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b1c75a-1c95-439c-8daa-5a5160910f58", "sighting_of_ref": "indicator--d6c205b3-1ced-4610-9607-392f9208838d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8befa4d-75b2-4161-bd9e-af2ac5e306bb", "sighting_of_ref": "indicator--08840bfa-a2f3-4fff-b453-ebdce088993b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4176ac1a-2191-468b-9ed3-60c37f355b63", "sighting_of_ref": "indicator--256b6390-f5b2-4e85-9b5c-0ad29bb8e315", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13114a23-4fe9-40c2-9923-21b7208c288c", "sighting_of_ref": "indicator--9c258865-1732-41f6-9f68-db1f88083fdd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53bdb8d-685e-4d42-b401-68af1b38fa13", "sighting_of_ref": "indicator--f292400e-8a16-46ab-987f-7235385ec5cf", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd7a8212-be2d-4acd-b713-7de9185e98a9", "sighting_of_ref": "indicator--2e77c77b-f4c7-4ddd-84a9-45083d5c8830", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b4c6cd-3607-402d-bbbc-bcdf64d463dd", "sighting_of_ref": "indicator--2e77c77b-f4c7-4ddd-84a9-45083d5c8830", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4830a70b-1ec6-4c1f-9440-fe7b64d49f80", "sighting_of_ref": "indicator--6293c6bf-71d9-4aaa-96be-f02d567c972e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f8f026-2ded-4643-8a66-a3883c333a2f", "sighting_of_ref": "indicator--6293c6bf-71d9-4aaa-96be-f02d567c972e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fcb093f-0383-4848-8e87-dd3cabc47deb", "sighting_of_ref": "indicator--22144208-55c0-4913-9e70-794a2fb48d51", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6f46d6-12ce-43fc-866a-2573d4f375ec", "sighting_of_ref": "indicator--356f55b4-6a15-492f-a9ed-58484e2e29cc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45af6a1-74ce-49ab-9577-04cabb8392a7", "sighting_of_ref": "indicator--356f55b4-6a15-492f-a9ed-58484e2e29cc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268e4608-26fa-4c1e-87a4-b4198d358714", "sighting_of_ref": "indicator--938ecf75-7bd0-4ce3-8874-63af8d1fa078", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4d4f54-d28e-4573-a81e-cdf1f515dcf3", "sighting_of_ref": "indicator--938ecf75-7bd0-4ce3-8874-63af8d1fa078", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e49c2bda-fa1a-4f2d-bb9c-38b5602ab599", "sighting_of_ref": "indicator--6827f1b9-7414-4e33-bcb2-bd9dc4ff1f47", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3686f7d-7652-4872-8d6d-af21e3bbfc19", "sighting_of_ref": "indicator--6827f1b9-7414-4e33-bcb2-bd9dc4ff1f47", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf319d7a-f344-47d0-ad06-c40645004edb", "sighting_of_ref": "indicator--0a772f6b-c8b4-4b62-b2eb-ea476e2a9e67", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb77b561-2bf0-4fdb-8497-3eaafd1c8cb1", "sighting_of_ref": "indicator--0a772f6b-c8b4-4b62-b2eb-ea476e2a9e67", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce7b58e0-9c08-4c84-9c95-cbd7c8a04b03", "sighting_of_ref": "indicator--9a74b5da-2dd7-4ce3-abca-163906dda475", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f008282c-2788-45f5-9c8b-d46fbcc01082", "sighting_of_ref": "indicator--9a74b5da-2dd7-4ce3-abca-163906dda475", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b12dbd-152c-4dc2-845d-270aa5cf0450", "sighting_of_ref": "indicator--efe39830-9687-4d49-aee5-d8742bc7daf7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a45ae320-aa88-4dc2-96b5-c3dea3db38fc", "sighting_of_ref": "indicator--efe39830-9687-4d49-aee5-d8742bc7daf7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02052782-b2dc-450e-b74f-e4529412d3fa", "sighting_of_ref": "indicator--85ab7b6c-03ce-4f7a-87e7-76439eca0d77", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--715942f0-6412-4c6a-a9de-92e3f1aaf2cf", "sighting_of_ref": "indicator--85ab7b6c-03ce-4f7a-87e7-76439eca0d77", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f96e1a-dbca-4094-9ff4-9f0525ccfc95", "sighting_of_ref": "indicator--7b0d8124-2860-406c-8a6c-e493367a5d85", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c570f86b-df0f-4470-bc32-3c907fe824fc", "sighting_of_ref": "indicator--7b0d8124-2860-406c-8a6c-e493367a5d85", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90e4829-b00e-47dd-a930-c9ff27e84180", "sighting_of_ref": "indicator--6c575bb1-e42b-4087-827f-d49aa1ee0fb3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd80409-1ced-4724-b9eb-302f32aa9f73", "sighting_of_ref": "indicator--6c575bb1-e42b-4087-827f-d49aa1ee0fb3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a1ac113-dacb-4e93-a841-32d215eecdbb", "sighting_of_ref": "indicator--6779b89b-63d9-4a7a-879f-8ec93f4c435b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866167a9-a19b-406a-966d-e5cd8faf98c1", "sighting_of_ref": "indicator--2d90e0e0-19b5-4698-8a32-86df18380537", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd5d1d0f-165e-46f0-ac5c-1b17d552bd44", "sighting_of_ref": "indicator--2d90e0e0-19b5-4698-8a32-86df18380537", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862f980e-dd39-4869-953a-abe50b426568", "sighting_of_ref": "indicator--86c9918b-6b2d-4c26-a72f-b6180264e4d9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a269fe89-c884-46fd-891a-a470d24ea5f1", "sighting_of_ref": "indicator--86c9918b-6b2d-4c26-a72f-b6180264e4d9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f54f0f3-c041-4aa1-bc11-509cc50fde11", "sighting_of_ref": "indicator--b5f61103-9c87-4562-9f6b-8bd1fade52c7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--297ddecc-a87d-46db-a210-a6858fb7a998", "sighting_of_ref": "indicator--b5f61103-9c87-4562-9f6b-8bd1fade52c7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e9245d-fef8-4df9-96da-4b23e86afeb1", "sighting_of_ref": "indicator--d0840859-6e7b-4536-915c-45f702d49605", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ad2a10-3490-4d34-8e09-de28d1134951", "sighting_of_ref": "indicator--d0840859-6e7b-4536-915c-45f702d49605", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542158ed-8a15-4eea-ade6-2820880bd36f", "sighting_of_ref": "indicator--5fed4822-6d97-41c9-be7b-1e03ec08545b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c9a8f6-6b36-46cf-8008-228b1fab4c7f", "sighting_of_ref": "indicator--5fed4822-6d97-41c9-be7b-1e03ec08545b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b45ffa73-cadf-44cf-9c58-d8368547c75d", "sighting_of_ref": "indicator--b1cbd46b-3824-4260-a37b-4331310a195f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95be4e50-744f-4f3f-8b8a-128e6fb820c2", "sighting_of_ref": "indicator--b1cbd46b-3824-4260-a37b-4331310a195f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8564c420-dabd-4050-ae41-fb6950cc3bb4", "sighting_of_ref": "indicator--47ec7a84-91cd-4a35-a3d1-868ad5873c0a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa2b94db-edc0-43d3-93db-9df1ecbb3b04", "sighting_of_ref": "indicator--47ec7a84-91cd-4a35-a3d1-868ad5873c0a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678f7275-a9bc-4455-9766-ba35d21b0ac9", "sighting_of_ref": "indicator--0a81e675-b4f3-4844-9c32-43314ef3f5c9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f128b33-aad0-4d3d-a933-16163ec228c6", "sighting_of_ref": "indicator--0a81e675-b4f3-4844-9c32-43314ef3f5c9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6fb40c1-c112-4312-b20b-27ab89b68605", "sighting_of_ref": "indicator--7c16140c-b4b2-4c93-9272-a45a61bdff94", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f335ada2-7b01-414b-a982-7d390a04bdcc", "sighting_of_ref": "indicator--7c16140c-b4b2-4c93-9272-a45a61bdff94", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c519cda7-08d5-43ee-a5f2-ed082a9c5d23", "sighting_of_ref": "indicator--1a2a9d3e-beba-4b60-a237-e3932140a04f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--663330f2-c5cd-4e8d-8158-82926649229b", "sighting_of_ref": "indicator--2a383a53-ee0e-451d-87d1-ab5cd3e18b27", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09fbcf16-b3fe-4ba7-8dc9-9f3571b2f0d6", "sighting_of_ref": "indicator--095929a9-ddf4-4a90-9f60-ffc2dc578401", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5af0ac9-c7c0-4cb8-be2a-6c12166562e2", "sighting_of_ref": "indicator--095929a9-ddf4-4a90-9f60-ffc2dc578401", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e6003f1-a3f6-4a99-aca5-1354efe1c557", "sighting_of_ref": "indicator--37001750-ff9f-4c51-8e16-1b5d6ee770cd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77fa5cea-1654-4c77-823d-32265379a400", "sighting_of_ref": "indicator--37001750-ff9f-4c51-8e16-1b5d6ee770cd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c417a0-24d1-4e93-96b5-64eb7005e5aa", "sighting_of_ref": "indicator--a6638c87-284b-4e2c-a4ab-cd4d7d5ac148", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27fca949-4d8f-44bc-ae1c-3d47720e63fb", "sighting_of_ref": "indicator--a6638c87-284b-4e2c-a4ab-cd4d7d5ac148", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3566374-95f1-4f02-850c-2976eaf850a3", "sighting_of_ref": "indicator--5995d25b-afc2-4e42-8039-8a263fce1381", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d82bf68-4b2a-4bb5-b272-8a392300edbc", "sighting_of_ref": "indicator--5995d25b-afc2-4e42-8039-8a263fce1381", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adfa0434-079d-4483-8621-ee2fcd239d45", "sighting_of_ref": "indicator--191d66c8-adff-4970-89a7-5f22d4ba3398", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf924ff-fd65-455e-82bd-d1e934a5c4d7", "sighting_of_ref": "indicator--b7ca4cdb-7e1c-411c-916e-ee1bcfaa47a3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49248920-37f2-452a-aa95-1573b5b06e4a", "sighting_of_ref": "indicator--7fa1df26-61b2-4426-ae08-0031b2407ee1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3eb2fbc-cbba-4c9a-895b-66057475765f", "sighting_of_ref": "indicator--a97015dd-3461-43ca-95fc-ae478e136fc2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d2f1a7-d409-4d04-b0d1-ecb3d803ad21", "sighting_of_ref": "indicator--a97015dd-3461-43ca-95fc-ae478e136fc2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9681ee9b-841b-4993-b5dd-6fdbc39433a9", "sighting_of_ref": "indicator--a97015dd-3461-43ca-95fc-ae478e136fc2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5145067-516f-4590-a34a-98198e77f397", "sighting_of_ref": "indicator--e0fab7d6-7d8f-4548-aec6-7c4d2c234d46", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fdb9114-8108-4fa2-9a30-ee6d986e6e1a", "sighting_of_ref": "indicator--6f87cade-708d-45a0-9a0f-8947dd48ecd0", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4289b95b-ba66-4eed-99c7-c9702d1fb91c", "sighting_of_ref": "indicator--7086aaf3-1444-4790-9517-beea2677a012", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e01cc9f-ad5b-4e19-8e0c-9fd51586002a", "sighting_of_ref": "indicator--c3ded75c-1498-44c6-a6bf-d08c64a8f476", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd89108b-da2d-43df-a1fd-0f3aa08be9ba", "sighting_of_ref": "indicator--c3ded75c-1498-44c6-a6bf-d08c64a8f476", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf9890c-8fbb-44fd-b6c3-d6f1d0e999a0", "sighting_of_ref": "indicator--753e89c5-60ed-4368-8f6d-029d41a5cca9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e44fbd90-f8bb-4558-ba1c-f8061ecc9ec1", "sighting_of_ref": "indicator--753e89c5-60ed-4368-8f6d-029d41a5cca9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c84f4944-467d-45a7-bd8b-d8fe2b3e9b96", "sighting_of_ref": "indicator--753e89c5-60ed-4368-8f6d-029d41a5cca9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ae6118-657c-4d0d-8a65-a7a7eaae5d0a", "sighting_of_ref": "indicator--2cda9f81-272e-4c85-9042-fbd315586a9f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5204098-f784-41f7-a8fe-0e323e353333", "sighting_of_ref": "indicator--2cda9f81-272e-4c85-9042-fbd315586a9f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdfc598e-fd61-4802-9cb2-fb1981af6c57", "sighting_of_ref": "indicator--2cda9f81-272e-4c85-9042-fbd315586a9f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28040550-23ba-4b76-81d3-6abc9d216924", "sighting_of_ref": "indicator--6eafd183-fb23-498f-9528-0809bce41b27", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f25c51-1fec-4e76-a0fa-4d0eaae7ac19", "sighting_of_ref": "indicator--6eafd183-fb23-498f-9528-0809bce41b27", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a803a3b-1f5f-4c9b-a1ea-4b02a92ae1f1", "sighting_of_ref": "indicator--6eafd183-fb23-498f-9528-0809bce41b27", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9b2931-e1e6-4a52-a160-725f18072821", "sighting_of_ref": "indicator--de18d52e-0629-4d4e-ad99-45f8fad449d3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5090890-378b-4033-9d41-6d26b240b547", "sighting_of_ref": "indicator--de18d52e-0629-4d4e-ad99-45f8fad449d3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6e1462-e490-4537-b118-7fa6be55fdbe", "sighting_of_ref": "indicator--73a54aeb-db22-491e-92a1-f7153481f05f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f5696f-2d32-48a3-8665-1be4c5031637", "sighting_of_ref": "indicator--8eb3810d-90c6-4e78-b32c-43d952138afb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683e97b7-ffd2-486a-9ab8-be5ecba63bda", "sighting_of_ref": "indicator--8eb3810d-90c6-4e78-b32c-43d952138afb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c69b588-4d43-4375-bf2d-a6b6cda0a658", "sighting_of_ref": "indicator--2f579f69-5210-4cb0-8ee7-29c1beff78bd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36667bec-edea-477f-b0c6-e3a8e10428bb", "sighting_of_ref": "indicator--2f579f69-5210-4cb0-8ee7-29c1beff78bd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b396b5a-35d9-41e7-a76f-09136a2a41a0", "sighting_of_ref": "indicator--e4a7ca5c-60c6-4a2c-8673-a386c0627cd1", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e825abe-4672-4a1b-b106-b39163d062bb", "sighting_of_ref": "indicator--e4a7ca5c-60c6-4a2c-8673-a386c0627cd1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3683867-742a-4fda-a8ee-51433459b37c", "sighting_of_ref": "indicator--f23b7b48-d845-400e-bad0-a85d04d98dc4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c96815-0f3e-4189-ab6a-f46485a63cbf", "sighting_of_ref": "indicator--f23b7b48-d845-400e-bad0-a85d04d98dc4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55b4303-f744-40ba-9cfe-1a6701a73f2f", "sighting_of_ref": "indicator--e0c69953-4921-4d5b-ae3b-a9368f7d1b6c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd1bcba4-8eba-486d-952f-9e9d130bc107", "sighting_of_ref": "indicator--e0c69953-4921-4d5b-ae3b-a9368f7d1b6c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55499aab-0192-44a1-810a-17e029eacea3", "sighting_of_ref": "indicator--caa4ad8b-0220-4464-afc9-b11ac724e465", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b395b367-8120-43bc-bb7c-a9c1f01d68cf", "sighting_of_ref": "indicator--caa4ad8b-0220-4464-afc9-b11ac724e465", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a28adc6-5f8e-4b0d-83cc-79a2f2528995", "sighting_of_ref": "indicator--bf24e01c-7e51-4fe6-acd7-01c9f15c38f8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74cbfa73-ea62-4bb0-b8d6-dd43e8575965", "sighting_of_ref": "indicator--bf24e01c-7e51-4fe6-acd7-01c9f15c38f8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66963775-dfdc-4c5a-a625-96bae1305025", "sighting_of_ref": "indicator--1a1dec8c-2e86-48d7-ae9e-7666ebbaa285", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f293adc5-7aa1-496a-b196-20ba00077767", "sighting_of_ref": "indicator--1a1dec8c-2e86-48d7-ae9e-7666ebbaa285", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3da43c-3cdb-4800-b9a3-729696572bbb", "sighting_of_ref": "indicator--f18f6c97-d5e3-4dd1-b671-a85a5fbb11e0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d85b5ab-c7a4-4700-97b4-26dd6ccede1e", "sighting_of_ref": "indicator--f18f6c97-d5e3-4dd1-b671-a85a5fbb11e0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ae6d7a-60e3-4244-b857-97cde10cd175", "sighting_of_ref": "indicator--9cb0ae43-a6dc-497d-9b39-afc44ecc1080", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e3679f7-c108-4f80-a295-935c382a9b9d", "sighting_of_ref": "indicator--9cb0ae43-a6dc-497d-9b39-afc44ecc1080", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddafa1bf-0b82-4e0f-a339-dc9724887586", "sighting_of_ref": "indicator--21ddca4b-81a9-4aa6-9fb9-1ddad53892c7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90cdb80a-c44a-417b-9cfa-ffbaa63e11ef", "sighting_of_ref": "indicator--21ddca4b-81a9-4aa6-9fb9-1ddad53892c7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6fddfe6-8fd9-46b7-b9e4-ab192d06c705", "sighting_of_ref": "indicator--6ad039b0-2829-49a9-a6bd-c746e1f40761", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f2516b-e874-4190-a3c8-0714663bf5ba", "sighting_of_ref": "indicator--6ad039b0-2829-49a9-a6bd-c746e1f40761", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d9a0b3-7971-4b61-a4b4-a580e30d49ac", "sighting_of_ref": "indicator--c50997ce-cd26-406e-a49b-57720357ac45", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f514171-a929-4b4f-950d-69859cf2abec", "sighting_of_ref": "indicator--c50997ce-cd26-406e-a49b-57720357ac45", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c703b56-00f1-4df6-bf89-b0bb14307b2b", "sighting_of_ref": "indicator--f0add24e-62ca-4eab-8049-a1deaaed9ca5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dce3f490-5fd9-4044-b3e8-dc87e8e42308", "sighting_of_ref": "indicator--f0add24e-62ca-4eab-8049-a1deaaed9ca5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c80456-3f0e-4c4a-83ca-f4bfd97de46e", "sighting_of_ref": "indicator--90906d07-22aa-4453-b2e8-760bdf8cb0b1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce43b45e-ecd4-44d6-b57c-73d9d0d63eae", "sighting_of_ref": "indicator--efab81fd-b818-437c-ad29-b55e1613dc55", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67091148-e25d-4c55-9017-52569cf3f436", "sighting_of_ref": "indicator--5efb2dad-3533-47a5-9a70-2e6c2f921248", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed1e6fe-88de-4b1e-a908-60eb863c96fc", "sighting_of_ref": "indicator--5efb2dad-3533-47a5-9a70-2e6c2f921248", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f0500a-6101-4c5d-8fc3-a57d61fa5f81", "sighting_of_ref": "indicator--fe51dce7-0205-48a3-a4bb-58a5b5de82fc", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b9e177c-f71e-44dc-a74c-4e6a89a01202", "sighting_of_ref": "indicator--2ec67bef-1929-486b-a167-249abb757f25", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4510a169-72ed-4f53-baf5-919df5c83ab7", "sighting_of_ref": "indicator--7f398de0-997e-4f80-8638-b0058a6acf34", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd414ef-1883-410c-8425-7ce14bd378e9", "sighting_of_ref": "indicator--1fc9e6b1-d41e-473b-b006-182a05347f75", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6cef9ff-a876-4da4-8fa6-17616e193ba4", "sighting_of_ref": "indicator--59e01dfe-ce96-4830-b889-c08e28cbb2a3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46274269-8f78-49f6-a32a-f8d719b1c245", "sighting_of_ref": "indicator--1ae1121c-6143-4baf-86f8-f345f1316f04", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd10dcac-ad43-4ee4-8478-5d2a4309edb7", "sighting_of_ref": "indicator--1ae1121c-6143-4baf-86f8-f345f1316f04", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f80639-8f6f-44d0-9124-cf5f68c9d21b", "sighting_of_ref": "indicator--ab3f85db-f9a1-44cc-848a-2bd29e26365c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796f7181-c90e-4f7b-8362-ba26586b26e8", "sighting_of_ref": "indicator--76114172-cbb2-45bc-8eba-ff26a7102760", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf9c17a-e4f2-4134-9921-63ba80181410", "sighting_of_ref": "indicator--76114172-cbb2-45bc-8eba-ff26a7102760", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed31ca26-3946-4f48-8f02-0ae5fb9b834a", "sighting_of_ref": "indicator--cfe34a60-19c8-4720-ac17-51268174d2d3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141aa5d9-aa05-43d2-9bdc-fdbf388456ea", "sighting_of_ref": "indicator--5e543d47-dcad-4ee9-a7da-41726ba24386", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82106d69-487b-4379-b985-3ccc6e1e2554", "sighting_of_ref": "indicator--9d67be1b-a456-4447-b0de-6fb11849ee08", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00678c65-f57a-40fd-8243-329a07d40553", "sighting_of_ref": "indicator--77c7b9de-13e3-4d79-9d0d-8a91b390de37", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99db50ac-beae-421b-b4e1-cab751602626", "sighting_of_ref": "indicator--f5db46e4-938a-4645-b42b-27296668068d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--341b8d57-41ab-40ed-a762-09953ea323ed", "sighting_of_ref": "indicator--f5db46e4-938a-4645-b42b-27296668068d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b9c42d4-5d05-4088-8dbb-d064fb8c167c", "sighting_of_ref": "indicator--db4d9051-9f3b-44c3-9874-df674d257822", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d50309a2-20fd-4826-9914-d7201965cf4f", "sighting_of_ref": "indicator--db4d9051-9f3b-44c3-9874-df674d257822", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd6246c-d110-43d3-97a5-a4a1bc6c0347", "sighting_of_ref": "indicator--9dfb3630-36eb-4bd3-a1ed-dcabdce81313", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802427f9-f539-4a82-992a-be9642f2d43c", "sighting_of_ref": "indicator--9dfb3630-36eb-4bd3-a1ed-dcabdce81313", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1dc6fa-37a4-49ff-be0b-e3df9cd8adcb", "sighting_of_ref": "indicator--f68c26a5-9c58-43a8-a42d-b45cba557b71", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eedd573-754e-45cd-b584-9b9b76bfe7ac", "sighting_of_ref": "indicator--f68c26a5-9c58-43a8-a42d-b45cba557b71", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--341eb2f1-a284-41db-8a74-0ca8b59d86aa", "sighting_of_ref": "indicator--7a8da786-e93c-4eb6-933d-c1b53d3cdd1a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e68fdc84-9f70-4707-852f-73f95f645c59", "sighting_of_ref": "indicator--7a8da786-e93c-4eb6-933d-c1b53d3cdd1a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a88c14a1-5455-4d68-9f6f-2a4abc1a766d", "sighting_of_ref": "indicator--9b798da1-0239-4251-a9a2-9654db2915a4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc1e16d-0a9c-43eb-9e70-a4113015f4ee", "sighting_of_ref": "indicator--e067d435-d9be-4c3a-92a6-ea30f87594cb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9f3d58-d385-4766-b6c9-3a59c810fbd9", "sighting_of_ref": "indicator--09405a18-485a-45d8-92b2-3ac3f3bd7c4a", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee2ffb60-2c2e-43b7-8cc8-97218e4970a4", "sighting_of_ref": "indicator--047aa72e-f237-4ece-88f6-6afeba593019", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0bc88ba-34ed-48e5-9ddf-125a5fe1ae06", "sighting_of_ref": "indicator--047aa72e-f237-4ece-88f6-6afeba593019", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e50c5b-1015-4513-b90d-9b5cfce57cd2", "sighting_of_ref": "indicator--6fc23e55-b0ef-404a-ae92-d5a93c1724cd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be3381da-582d-4c14-993c-abf07e82c43d", "sighting_of_ref": "indicator--6fc23e55-b0ef-404a-ae92-d5a93c1724cd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7669f728-e79e-477a-bd51-a220bb157e69", "sighting_of_ref": "indicator--0a619f46-2be4-4d75-9e79-ecc08e65594c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46e65d6-e194-4467-ab18-f8cf67bd067f", "sighting_of_ref": "indicator--0a619f46-2be4-4d75-9e79-ecc08e65594c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--863091b4-f362-409c-b374-f6fc6ac4433a", "sighting_of_ref": "indicator--4549f80e-6fca-4a76-82a1-bde543acbe40", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1406f2c8-5ea8-42d6-a8d6-580e0fa53190", "sighting_of_ref": "indicator--4549f80e-6fca-4a76-82a1-bde543acbe40", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad3f111e-475d-4b2b-befa-2e8c03450580", "sighting_of_ref": "indicator--6830fe22-66cd-4951-bee9-3557adc8063c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--464679ac-fe31-48a3-bea0-5a49fbbeffdc", "sighting_of_ref": "indicator--6830fe22-66cd-4951-bee9-3557adc8063c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38131ae1-0a08-4141-a812-89fd0a00880f", "sighting_of_ref": "indicator--7560879a-5c9f-4dc1-9b21-37b52c726e64", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ab7420-33ac-4194-be87-3b08c5d0fea8", "sighting_of_ref": "indicator--b890c2f6-964b-4a3e-9bbf-fb6b5ff3cc88", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8d4404-633f-44a3-802e-8875397d5a49", "sighting_of_ref": "indicator--9c85df91-bec0-484f-8c3b-d20a1336d10d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39860d5e-6e85-4e02-9f5a-42f206ad9857", "sighting_of_ref": "indicator--9c85df91-bec0-484f-8c3b-d20a1336d10d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e043dd-c612-45c2-913b-e1f35963c399", "sighting_of_ref": "indicator--2124a864-1a4c-4410-b6d5-4375e3f1075d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcdae454-5e1e-4266-a78d-66bb2a33fe51", "sighting_of_ref": "indicator--2124a864-1a4c-4410-b6d5-4375e3f1075d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f7281ec-7085-4be8-905f-3a92c1145b2d", "sighting_of_ref": "indicator--718772e7-9aac-4803-9384-1dfe3ee00ae7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85126fc8-689d-4694-8c3e-d5f1ecd971bf", "sighting_of_ref": "indicator--718772e7-9aac-4803-9384-1dfe3ee00ae7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c26f4d7b-d56b-4b9e-8ce1-d3fddfff578a", "sighting_of_ref": "indicator--c5cd1c1e-33c7-4cff-b24e-ee622929234b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39fbd9b6-2089-40ee-880a-8b618a8a47b8", "sighting_of_ref": "indicator--c5cd1c1e-33c7-4cff-b24e-ee622929234b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a8db98-1180-43ed-9247-aa76b47ed50e", "sighting_of_ref": "indicator--efb00967-488e-413c-8e73-5a6735bb9aed", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c1a0ea-4478-4463-8698-1d116925b46a", "sighting_of_ref": "indicator--efb00967-488e-413c-8e73-5a6735bb9aed", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddecb1f7-ea2a-4ccc-aca2-a92e962b9d99", "sighting_of_ref": "indicator--17bbca69-8da3-47d8-9be8-7d6bf86b83d4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ad955e-e694-4c6e-ae85-88935f6da331", "sighting_of_ref": "indicator--ef39131e-9582-4f02-a835-fa65c89a2ddd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--876f92b0-b680-4277-989b-99b43c989bc7", "sighting_of_ref": "indicator--0eba8b68-269b-4c75-b891-fc0f9062a9e4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc71ba66-6e43-4604-b0c2-fee1638b7121", "sighting_of_ref": "indicator--0eba8b68-269b-4c75-b891-fc0f9062a9e4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594e0e7a-640b-4929-a694-6090e719833c", "sighting_of_ref": "indicator--8b10d99c-6e70-4e2b-8552-ad9d84b6b57e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2b01ed-f33a-419f-bcd6-3dbf5f884cab", "sighting_of_ref": "indicator--8b10d99c-6e70-4e2b-8552-ad9d84b6b57e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--889e8376-5113-49cf-b6a8-d57a6b6fb18e", "sighting_of_ref": "indicator--ee0fa4ef-a379-481c-bde4-565ffb6d5765", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e99ad88-d4cd-4fc8-9bf8-ad4b89db414c", "sighting_of_ref": "indicator--ee0fa4ef-a379-481c-bde4-565ffb6d5765", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a43f393d-c9d7-4463-8885-c4678c2c6f24", "sighting_of_ref": "indicator--d3e6fa18-7f7e-4e32-8c60-2c2579cca5e9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf39046-59a9-40be-9932-dba07810f34c", "sighting_of_ref": "indicator--d3e6fa18-7f7e-4e32-8c60-2c2579cca5e9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b702c8c-ee7f-4f9b-94e0-624ceb46aa4a", "sighting_of_ref": "indicator--51a4b739-e956-4518-95e7-3b146a5eb1e0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bccacfd-7f75-4179-b895-ccdd6a25809b", "sighting_of_ref": "indicator--51a4b739-e956-4518-95e7-3b146a5eb1e0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9847355-22e5-43f9-8e44-9a9f7290fa05", "sighting_of_ref": "indicator--e75d71de-32e8-4082-b879-d2d60e3f3c8d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9af3912-22e6-4050-8ec6-887788cca8c4", "sighting_of_ref": "indicator--e75d71de-32e8-4082-b879-d2d60e3f3c8d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--084c0c1e-cee2-4ee1-8ec5-9019785f5999", "sighting_of_ref": "indicator--ba9dc963-ebfe-414f-b96b-b6358b2124ae", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d345f0-b1b5-41ed-802c-30751da46899", "sighting_of_ref": "indicator--ba9dc963-ebfe-414f-b96b-b6358b2124ae", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56e1892-4261-4a03-aea3-459aec3e2dbc", "sighting_of_ref": "indicator--07513496-dcee-4967-ab18-6ed713fc5cc8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3779d0b9-b879-4b26-a55b-887166f77e6c", "sighting_of_ref": "indicator--07513496-dcee-4967-ab18-6ed713fc5cc8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73451277-27cb-45e0-add4-9b777ff2550c", "sighting_of_ref": "indicator--d54470d3-6b98-4004-80f5-beb95bca9c87", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebcf9b4e-7aad-48e2-85d4-aec7c18545e1", "sighting_of_ref": "indicator--d54470d3-6b98-4004-80f5-beb95bca9c87", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c053134-b9b3-4088-bb65-eb3756b45e63", "sighting_of_ref": "indicator--008fe50e-9ead-4d79-ade8-9444b9cd7c73", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c52e5f-9b96-4584-95aa-a4e58e3bb419", "sighting_of_ref": "indicator--df48759f-9530-4467-9ded-ad71e52340fc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631a01f1-1290-4c49-a1e1-ff9251ccf081", "sighting_of_ref": "indicator--6f58cc1e-8769-4c56-bda3-f0caf8938b7b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a7f57d-1388-4cbb-8538-f8a1f8f719a8", "sighting_of_ref": "indicator--6f58cc1e-8769-4c56-bda3-f0caf8938b7b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5b1b5d-551e-42e4-b5f4-a4ce4e5586d0", "sighting_of_ref": "indicator--9e2c81a4-094f-4253-a2a0-6fbbfb47e37e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9f86a9-5119-4c14-9603-e3f3b21a7ca0", "sighting_of_ref": "indicator--49e1510b-8346-4ee6-aef7-889063f25540", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e85a997-4e00-4bd7-b1cb-356b412feaac", "sighting_of_ref": "indicator--49e1510b-8346-4ee6-aef7-889063f25540", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5663153-0e24-4a71-aa07-8954fbe9501a", "sighting_of_ref": "indicator--367a6ce0-55a7-4f45-b2eb-2507e3e3f97d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d70fce-a1f5-474b-aa73-bd53a48dd432", "sighting_of_ref": "indicator--42beb3fc-e3d8-404f-b4a5-8a4fa9282f05", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebd14c6-282e-4fb5-b4b7-154a3342eee2", "sighting_of_ref": "indicator--0d54c987-73f6-427b-bd32-2c9f75d1c090", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f67ecd2-a71e-486c-ba9e-07908623eee5", "sighting_of_ref": "indicator--c576cbdd-8565-462d-aa0a-cf06ebe0f805", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18dccb7d-85d0-4c48-bafb-ccd3ff25cd9e", "sighting_of_ref": "indicator--c576cbdd-8565-462d-aa0a-cf06ebe0f805", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4116e078-ab60-4476-a722-583118181742", "sighting_of_ref": "indicator--739ec108-379c-44bc-a7e1-59581ae66a97", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587ec3e6-c8f2-432a-b2ec-41795bbd7dce", "sighting_of_ref": "indicator--5bd0e4cf-4462-42f7-9d49-c205de98b5d2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f87f09-8f30-4145-b6cc-820fdbe04171", "sighting_of_ref": "indicator--5bd0e4cf-4462-42f7-9d49-c205de98b5d2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b19111-b420-435b-a9b2-92fcccfc6061", "sighting_of_ref": "indicator--f9a9c0cf-c79c-482a-9b2e-b723b0421777", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4415e5f-dbfb-443c-9780-782bc7de0022", "sighting_of_ref": "indicator--f9a9c0cf-c79c-482a-9b2e-b723b0421777", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848adb5d-f043-46f1-838a-1bcf8ffc622f", "sighting_of_ref": "indicator--17a11b1a-8799-4e43-a3ae-2692e8872544", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c7429b-9a8e-4125-9301-1e94088a3f8b", "sighting_of_ref": "indicator--17a11b1a-8799-4e43-a3ae-2692e8872544", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55fbaad5-59a8-4cc9-b1c0-1df9dca63d8d", "sighting_of_ref": "indicator--166a104c-6152-44a4-bd86-cfc059ba401d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34706af-0e2d-4496-a926-c4ad0f5a3121", "sighting_of_ref": "indicator--f7a06cfa-0358-4d98-b610-a46664102445", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a149d9aa-b728-484c-aa1e-f785fadbee5c", "sighting_of_ref": "indicator--f7a06cfa-0358-4d98-b610-a46664102445", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f807eed-2804-43e8-8ef8-9021e01746e6", "sighting_of_ref": "indicator--4800729f-c5ca-42f1-ae91-7960147afee3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec483416-da1f-43e9-af8b-b8f151785262", "sighting_of_ref": "indicator--4800729f-c5ca-42f1-ae91-7960147afee3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27bd20bd-feb8-44a2-afd6-7d036de782e8", "sighting_of_ref": "indicator--713cfbc4-7d32-4c35-91c7-e54130dacf3a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb8d0f1-906a-4615-b485-3e9cf1fdabcf", "sighting_of_ref": "indicator--db705fd2-7f56-4b44-aaa1-0e33585c363a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae077a9c-5e6c-476f-b98f-1f8cef151b7d", "sighting_of_ref": "indicator--db705fd2-7f56-4b44-aaa1-0e33585c363a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d417fce2-d795-4876-a7f4-06cdf4b25783", "sighting_of_ref": "indicator--2a268970-74c2-413f-9fa1-9c021e2107b5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda0b0c2-7141-4648-b212-522671db40ef", "sighting_of_ref": "indicator--2a268970-74c2-413f-9fa1-9c021e2107b5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58e014e-f7c9-4975-82ec-af0272007c05", "sighting_of_ref": "indicator--bb8128a1-dfc6-4d70-a835-fd5f838f3391", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2259db-a61f-45dd-bdd0-5711dbbc788e", "sighting_of_ref": "indicator--bb8128a1-dfc6-4d70-a835-fd5f838f3391", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1d997f-98f2-47c7-8c97-a381c4adf78c", "sighting_of_ref": "indicator--e8da1f81-f671-4022-8693-9d80e3274ae6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea5d77ae-de7a-4f23-a02b-be841036d67e", "sighting_of_ref": "indicator--e8da1f81-f671-4022-8693-9d80e3274ae6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fccab3d-7790-4492-a98d-e0773b3b9897", "sighting_of_ref": "indicator--84271772-2ce7-4c55-a9e8-5c77cbdf8d92", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd52468-93f4-444c-af43-135a14c66743", "sighting_of_ref": "indicator--84271772-2ce7-4c55-a9e8-5c77cbdf8d92", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--926db0c2-ae70-41bb-bc10-7fec4c77e128", "sighting_of_ref": "indicator--3e03f72a-1b0b-4249-8b53-12aa125f7d5d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37b8b9b-782a-4eb9-924e-04997a10fec5", "sighting_of_ref": "indicator--3e03f72a-1b0b-4249-8b53-12aa125f7d5d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a4e21d2-81b6-42fc-ac3e-6cfb10a7c0fe", "sighting_of_ref": "indicator--8c74b920-e6a6-4468-af9d-5d5e2d7b3c27", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--223d8c4f-f720-46dc-af58-315c0ecb986d", "sighting_of_ref": "indicator--8c74b920-e6a6-4468-af9d-5d5e2d7b3c27", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db5d1f1-dfce-4cf8-a7bf-280ae777eec7", "sighting_of_ref": "indicator--d339610d-db28-4935-9062-2a1acdf2c616", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc3b7d2c-8bbf-40ea-8dfc-e8bf99011cfd", "sighting_of_ref": "indicator--d339610d-db28-4935-9062-2a1acdf2c616", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e54cdf-71d0-4454-b963-bde9b226667a", "sighting_of_ref": "indicator--5b0cc52f-8fdd-4a34-b8da-ad6746e1e428", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83819749-ea72-4e26-afa1-744ef958afc9", "sighting_of_ref": "indicator--5b0cc52f-8fdd-4a34-b8da-ad6746e1e428", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525639dd-64c2-468a-8923-0d4f25eae806", "sighting_of_ref": "indicator--d47b6647-8fda-4dca-b548-aaf88e760f6d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e87e754-c36b-40f8-a992-e8f584e770ed", "sighting_of_ref": "indicator--d47b6647-8fda-4dca-b548-aaf88e760f6d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24bc3e2e-0f95-4f84-a5e7-2079123ff34b", "sighting_of_ref": "indicator--a89d8cca-fba1-4d58-b4e6-267bd53e1d57", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed169df-c440-4e71-b995-5ca54892de37", "sighting_of_ref": "indicator--a89d8cca-fba1-4d58-b4e6-267bd53e1d57", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d702f5e1-fbb9-47ff-bf62-a1bf02dd77e6", "sighting_of_ref": "indicator--f77625fe-f33e-4f37-a4d9-fa15a9fdc520", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8905f4e8-df2e-4555-b57c-594d31e790c4", "sighting_of_ref": "indicator--f77625fe-f33e-4f37-a4d9-fa15a9fdc520", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5769c12a-9983-4d8e-bf06-b8509f4a01a2", "sighting_of_ref": "indicator--ca4399ff-66db-4e37-9942-c1eabf43b78f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dad2756-6beb-4b69-9bcd-ad1535cad3e8", "sighting_of_ref": "indicator--d01be5a5-c71f-40aa-99e7-05da58175e8b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e36f40-8c0b-4167-b085-4c7aac384ba2", "sighting_of_ref": "indicator--d01be5a5-c71f-40aa-99e7-05da58175e8b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f70c8b-d841-4871-8a39-ec88823625f5", "sighting_of_ref": "indicator--c1d3968a-9790-4a2f-824c-a743a2ebb078", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d01f67-0a35-42a0-9e9c-17743263e713", "sighting_of_ref": "indicator--c1d3968a-9790-4a2f-824c-a743a2ebb078", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e4f9f0-8a74-49ed-a1b8-d0df8cdb6690", "sighting_of_ref": "indicator--4a0976b3-c340-4168-867f-0780ea6e5c5a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a0a5cb8-33b4-46f9-b84b-29fa0a623218", "sighting_of_ref": "indicator--4a0976b3-c340-4168-867f-0780ea6e5c5a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205b6c8d-663d-4630-a585-27dfb385b4c2", "sighting_of_ref": "indicator--094d50a8-5946-4899-84fb-356ac7d589be", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239bffaa-8b6e-4016-8b09-f3f57941cb93", "sighting_of_ref": "indicator--094d50a8-5946-4899-84fb-356ac7d589be", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3123bccd-ba8e-4993-b9e7-e4921057d47c", "sighting_of_ref": "indicator--2c88daf0-334b-4551-b030-398fe0b65b4f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f2f715-156c-4e31-9ea5-02138b8d6a29", "sighting_of_ref": "indicator--2c88daf0-334b-4551-b030-398fe0b65b4f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f538de5-8308-4fca-a48d-c5dc28fee848", "sighting_of_ref": "indicator--e3f02f19-67be-4486-9114-f329c73782d4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc76c582-cc36-4025-b77d-1cd6865d3b1d", "sighting_of_ref": "indicator--e3f02f19-67be-4486-9114-f329c73782d4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce1aabc-6353-468b-9391-99a2cfe75673", "sighting_of_ref": "indicator--6a7f3093-c671-4715-b018-6e26548620d9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb975100-67e5-49c4-9b04-c0d13998cccb", "sighting_of_ref": "indicator--6a7f3093-c671-4715-b018-6e26548620d9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1adffd3e-1db6-4d33-9da9-674361a3000e", "sighting_of_ref": "indicator--6aa760a0-d044-4b57-b3aa-e9e756459c98", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbfa8ef9-eaca-4216-ad1e-ee0453332b21", "sighting_of_ref": "indicator--6aa760a0-d044-4b57-b3aa-e9e756459c98", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e10400-c957-4312-92e5-eccef236a072", "sighting_of_ref": "indicator--16061259-42cf-43f1-b238-12cd62f672ca", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af0dd08-752a-4dbc-bc68-cb414492e761", "sighting_of_ref": "indicator--16061259-42cf-43f1-b238-12cd62f672ca", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb52abd-ae6f-4721-ab06-a70f1b97c47d", "sighting_of_ref": "indicator--71efcef4-9d51-40ef-9873-51e47600e1c2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31696124-9d13-444c-b4c8-e0deacd6bb2a", "sighting_of_ref": "indicator--71efcef4-9d51-40ef-9873-51e47600e1c2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a3a9987-773f-448d-8cdc-998c5140ccbe", "sighting_of_ref": "indicator--7c8691d9-45e6-4feb-a963-4b3f8f7d0e86", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44b3a4d-c9c6-4038-ab05-434efc6bb8f0", "sighting_of_ref": "indicator--7c8691d9-45e6-4feb-a963-4b3f8f7d0e86", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00be5548-56e0-4562-a8bf-e7a4320986d2", "sighting_of_ref": "indicator--909e4e6d-a569-47d6-9e43-ac42f23a7452", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d95a4ea0-0b51-407f-b931-df8cf0a6d1ed", "sighting_of_ref": "indicator--909e4e6d-a569-47d6-9e43-ac42f23a7452", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0175742d-687c-40c9-9238-c1d060e419f1", "sighting_of_ref": "indicator--57f170b2-187f-45eb-8eb9-1e22fb494b8c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58960bb-cdb7-41e1-8ffe-8134f1754c1c", "sighting_of_ref": "indicator--57f170b2-187f-45eb-8eb9-1e22fb494b8c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf7b5d8-d547-44f6-8c92-f2942afe2e7d", "sighting_of_ref": "indicator--336534ba-4e8c-4bdd-8a39-c93abb541a1f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7445aba7-1160-4d9a-a619-358e5cb714a1", "sighting_of_ref": "indicator--336534ba-4e8c-4bdd-8a39-c93abb541a1f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2062b998-ad16-40e1-98fc-dab56834907c", "sighting_of_ref": "indicator--25f3f785-d7bf-4267-9c5b-3cbf95bdd16b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83776656-fc61-4ab9-aeb1-099eb2fc7587", "sighting_of_ref": "indicator--25f3f785-d7bf-4267-9c5b-3cbf95bdd16b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521e54bf-af32-41f7-9e84-a0af3552be23", "sighting_of_ref": "indicator--345661b5-1dca-4e17-8f1e-dc4288408ce0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c9243e-220a-46dd-b282-a059591642d1", "sighting_of_ref": "indicator--345661b5-1dca-4e17-8f1e-dc4288408ce0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34e17e5-7a1f-4924-aa71-94d7840e2080", "sighting_of_ref": "indicator--e7da257e-47b7-4f7f-9d16-dd68d8a74d22", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4a6ac8-2a22-46ef-9575-31cc43c57cce", "sighting_of_ref": "indicator--e7da257e-47b7-4f7f-9d16-dd68d8a74d22", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed4edae-851d-44e4-bba1-829914526b51", "sighting_of_ref": "indicator--26a2dac4-a7a9-4f85-aaaf-ab6926e9d7e5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a38a44b-4f89-4f8c-8b3b-3adb9787fbba", "sighting_of_ref": "indicator--26a2dac4-a7a9-4f85-aaaf-ab6926e9d7e5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98336602-2337-4765-96b0-24f09a3de96e", "sighting_of_ref": "indicator--e878cf9a-a87b-4b99-9b87-b0b23c832b05", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf9e38a7-8598-48de-9b15-815d8a9bb32c", "sighting_of_ref": "indicator--e878cf9a-a87b-4b99-9b87-b0b23c832b05", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a544f334-781a-46ba-b1dd-da423cf2f2f5", "sighting_of_ref": "indicator--814e2132-0794-417c-abb5-906ae6a1becb", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35482d54-7978-4754-9cf9-ad3e700e42bb", "sighting_of_ref": "indicator--814e2132-0794-417c-abb5-906ae6a1becb", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ac0445-7bf2-48bf-9f47-d2df2fb756a7", "sighting_of_ref": "indicator--c9dfcc3a-bf88-4b2c-89d8-7237afd102c5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a316d9cd-ba8c-4dc3-85fb-8c805404f09e", "sighting_of_ref": "indicator--02bf6aaf-06e0-4a67-bf97-e38d5228dc6c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572fbb14-c942-4375-9264-4ddff789d973", "sighting_of_ref": "indicator--e4e34e78-9b22-4957-af85-c70a373c57da", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7100e50-0695-4189-b7ee-fa50761035fe", "sighting_of_ref": "indicator--e15dee8f-a727-43cc-97b8-64b8601f1d5b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4c0113-18c0-4ebc-a202-df7256683931", "sighting_of_ref": "indicator--93ab70d7-d802-4a06-b772-df420d03ca1e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c6f3aa-50c5-4036-b0f2-1b463d8e3b34", "sighting_of_ref": "indicator--cbbf8361-3837-4839-b32b-a4f29c18efe9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b09c22b8-773c-41c6-95ff-ebad77839970", "sighting_of_ref": "indicator--cbbf8361-3837-4839-b32b-a4f29c18efe9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33fcbc93-78a0-4db2-b0a0-218f5636f346", "sighting_of_ref": "indicator--7f90bf8f-b79a-4839-80d2-8749e056a155", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2974bed-2acf-45cb-9c7c-45f6af931433", "sighting_of_ref": "indicator--7f90bf8f-b79a-4839-80d2-8749e056a155", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c79cd43-eb61-4ac2-8d0e-8f52d248326e", "sighting_of_ref": "indicator--38311db8-7196-459e-b108-590ff6d8a270", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b653531-7bde-466f-9a80-b6be98e318c3", "sighting_of_ref": "indicator--38311db8-7196-459e-b108-590ff6d8a270", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1187357-f8de-4a9e-b277-47983196eddd", "sighting_of_ref": "indicator--3ba56b75-b128-43d1-b246-9e16608f1dd4", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51f28cbc-9047-4d5e-8498-639137c6c9da", "sighting_of_ref": "indicator--3ba56b75-b128-43d1-b246-9e16608f1dd4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bdbced6-161e-4d0d-80e0-a472daae3191", "sighting_of_ref": "indicator--c0d30b13-c569-49fe-bda4-ec8fd9f5331a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d4bc00-f19a-4fd8-b3a9-9a44e9f0ccd6", "sighting_of_ref": "indicator--c0d30b13-c569-49fe-bda4-ec8fd9f5331a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e7729d-b585-4367-8748-dedbec837682", "sighting_of_ref": "indicator--b10a970d-fc16-4491-a681-6b9298c035f6", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dadfb985-d4f3-437f-aceb-8f196283c93e", "sighting_of_ref": "indicator--b10a970d-fc16-4491-a681-6b9298c035f6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7b3941-16a7-4b91-a594-75c9bd0ebb29", "sighting_of_ref": "indicator--3e8482b1-5440-40af-97e4-82e1b5d5dfd3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592ea76c-67cb-4814-9b48-f37d10ff2bcc", "sighting_of_ref": "indicator--3e8482b1-5440-40af-97e4-82e1b5d5dfd3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f86abfb7-0d4b-44ac-97c4-2c4e8dc7aede", "sighting_of_ref": "indicator--9eb54aa0-8d57-464f-a042-e1b71aa6340b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ef8dba-6c52-4e31-8ba8-b30231648750", "sighting_of_ref": "indicator--9eb54aa0-8d57-464f-a042-e1b71aa6340b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d9b0c63-a818-4bed-99d6-ebf166e21b48", "sighting_of_ref": "indicator--bebbda40-2905-4c2c-8179-d35d13e2996e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d3cbeec-8dc8-4392-aa14-a0a82452d66c", "sighting_of_ref": "indicator--9090ca1d-0838-4d9d-a7f2-32d1e943bd06", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a41ed7-a1a1-4f8d-ae53-63921475fbe2", "sighting_of_ref": "indicator--db4573c4-ddc3-4c76-8f07-201e8e3af30f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92bfabe8-f34c-421c-897d-eca1d1fb41ad", "sighting_of_ref": "indicator--db4573c4-ddc3-4c76-8f07-201e8e3af30f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c4ae63-9f7b-434f-9dd8-09b7cc6e0119", "sighting_of_ref": "indicator--c3c548fb-599f-4cca-a2fb-904b641fbfe5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b53b31-d798-4506-8974-11ca82f2d7a7", "sighting_of_ref": "indicator--c3c548fb-599f-4cca-a2fb-904b641fbfe5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2885d0e-d326-4c8c-908c-bfb763474e03", "sighting_of_ref": "indicator--8ed64f56-bac7-4809-9d9c-74de487b0a7a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c12450-2e07-4bd6-aaec-45bf6b1ac071", "sighting_of_ref": "indicator--8ed64f56-bac7-4809-9d9c-74de487b0a7a", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab939557-c878-4e96-8c71-22c091f9b1ad", "sighting_of_ref": "indicator--951f3a15-ef6c-4b3d-95d1-7b7a4c9e5d43", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e21d80-156b-49ce-bb47-36211afd565d", "sighting_of_ref": "indicator--951f3a15-ef6c-4b3d-95d1-7b7a4c9e5d43", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5b101f-ea54-4a96-ae19-d5896e1d3a53", "sighting_of_ref": "indicator--b75957c1-92c0-494c-b9a4-d628e4c483ec", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa8c4d2-6908-4f00-9457-9a8e1a4e5664", "sighting_of_ref": "indicator--b75957c1-92c0-494c-b9a4-d628e4c483ec", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af6a09e-9242-4f65-8a09-f01ce7b0815a", "sighting_of_ref": "indicator--903779da-9018-446f-81cf-0a47c12083d2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3302b41a-94dd-4644-827b-c4bf7d314e1d", "sighting_of_ref": "indicator--903779da-9018-446f-81cf-0a47c12083d2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f7ea32-b528-4bde-907b-d06d97843297", "sighting_of_ref": "indicator--1065a80c-3574-4aa9-be2d-fac6c9a484df", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec5cc29b-f39c-4bf6-97f0-208b0d86b43d", "sighting_of_ref": "indicator--1065a80c-3574-4aa9-be2d-fac6c9a484df", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc195822-028c-4fbc-9b87-53f37a3578ea", "sighting_of_ref": "indicator--98526d40-1d7e-4e11-8915-6182b12d3944", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--164b47ab-0fc2-4d72-a147-e0e2f694d9f8", "sighting_of_ref": "indicator--98526d40-1d7e-4e11-8915-6182b12d3944", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95675508-f674-4eea-8db4-c04ed2063b73", "sighting_of_ref": "indicator--044e8c59-9289-4721-a9e4-b52475e19961", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f19d57-f1dc-43ea-9c5e-f12679457f9d", "sighting_of_ref": "indicator--044e8c59-9289-4721-a9e4-b52475e19961", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a031c195-08e8-458d-a734-dc20a755d8e7", "sighting_of_ref": "indicator--85e45870-d305-4a6d-975d-3b7b0ac57f77", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88fcde38-3649-4d03-87e7-0de560f3a805", "sighting_of_ref": "indicator--85e45870-d305-4a6d-975d-3b7b0ac57f77", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814c3362-0082-475f-b5b6-4c6c4480d80d", "sighting_of_ref": "indicator--d8f369d9-af55-4eef-aeea-f346d838c96e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf67607-2f2e-48c7-8e74-e34f2afe6315", "sighting_of_ref": "indicator--d8f369d9-af55-4eef-aeea-f346d838c96e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb4474aa-749f-4a76-b9d6-7894c79efa7d", "sighting_of_ref": "indicator--c9ab9660-0cb5-48f5-afed-d1cb3e9c0043", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9711a663-3303-4069-bfa0-822316af74d1", "sighting_of_ref": "indicator--c9ab9660-0cb5-48f5-afed-d1cb3e9c0043", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e7dd33-6d94-45c6-9596-8d96b06d05b0", "sighting_of_ref": "indicator--31bd2dfc-1ab9-4f9d-9c86-acb61863bd54", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b541688-fc35-4aab-a9a7-9171b1f6e111", "sighting_of_ref": "indicator--31bd2dfc-1ab9-4f9d-9c86-acb61863bd54", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e47977a-38c7-4ec8-92ff-2496e3a02b51", "sighting_of_ref": "indicator--804f3cb4-c8c5-465f-8213-f37aae9c318b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1dc5d3-e1bb-40ae-bfd0-3c4464fc7a11", "sighting_of_ref": "indicator--804f3cb4-c8c5-465f-8213-f37aae9c318b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab4dd8b-b22e-49e0-9860-1cc1d0b0ba24", "sighting_of_ref": "indicator--9ea3a0f8-6e6b-4cc3-b492-6d7cd76a7991", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0f20cf-9b69-40a6-9ebb-7696effe5979", "sighting_of_ref": "indicator--9ea3a0f8-6e6b-4cc3-b492-6d7cd76a7991", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909deb2b-085b-4ff9-bfdc-c72c84c63350", "sighting_of_ref": "indicator--c1257326-fbd5-4e68-93bd-eba6757648ab", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c65d14-b204-48b2-bb92-a0522e3a29bf", "sighting_of_ref": "indicator--c1257326-fbd5-4e68-93bd-eba6757648ab", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ed825b-5308-445a-a82f-02df3d603f3b", "sighting_of_ref": "indicator--72715af1-1979-4876-b5ae-03ad7c8f09a2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--057f3d1a-c0ff-4078-8e04-b4fa3f941775", "sighting_of_ref": "indicator--55e8e64c-3dfe-4ed4-85fa-75a8b22c5900", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc90cb1b-eef4-468f-9f9b-5bbd9524129f", "sighting_of_ref": "indicator--55e8e64c-3dfe-4ed4-85fa-75a8b22c5900", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--793628c2-e751-4ce0-be5d-7a9c766ac9a2", "sighting_of_ref": "indicator--1b5e300a-17e4-4c74-a036-c1e440347aa1", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb40f59-bf1b-40ba-af41-3d41635a4229", "sighting_of_ref": "indicator--e5c21c7b-ec31-41ff-9212-0c91aa1b90f8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba959c0c-2997-4e04-8172-a4c091ac66a0", "sighting_of_ref": "indicator--25681cf8-82db-48cc-97fb-722bdadbc432", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf701884-acd9-4290-8d21-c3e998ed1566", "sighting_of_ref": "indicator--25681cf8-82db-48cc-97fb-722bdadbc432", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af7fab46-76c1-4159-b048-c83f140b0016", "sighting_of_ref": "indicator--e54a68da-cf1a-42fc-96a2-a88479474a32", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae336f5-ff2f-4255-ae38-4ece296761d9", "sighting_of_ref": "indicator--8984a802-4e7d-4b14-a9e0-482efe6efa88", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc1d0d0-545d-4041-98ee-b444c74c0652", "sighting_of_ref": "indicator--eb7b9db4-6ffc-4206-9e9e-c10617425b6b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b8e9b8-5083-4108-83b3-cafa85000ffe", "sighting_of_ref": "indicator--eb7b9db4-6ffc-4206-9e9e-c10617425b6b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ac8fab-34f7-4401-a58f-d8303dc3ba0f", "sighting_of_ref": "indicator--c6c2fdd7-1c1f-4776-aa44-4480b2f81bbd", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7704e832-3261-4c9f-930c-678e27de7439", "sighting_of_ref": "indicator--c6c2fdd7-1c1f-4776-aa44-4480b2f81bbd", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f0332f-b03f-40f9-93b8-590797a9514d", "sighting_of_ref": "indicator--97deb0e0-c17b-466f-a2db-993d6c023b13", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b60d9e2-b96b-48da-b64f-4ec509d0b58a", "sighting_of_ref": "indicator--97deb0e0-c17b-466f-a2db-993d6c023b13", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114a2b04-9161-4355-bd99-49af2931d375", "sighting_of_ref": "indicator--f11c6f14-8182-4855-8eb6-5606228bb0b7", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f39d2f8-eded-4434-baab-93509a2fe973", "sighting_of_ref": "indicator--f11c6f14-8182-4855-8eb6-5606228bb0b7", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93dd3d77-f34a-45a9-bf32-3f85b0698a14", "sighting_of_ref": "indicator--096c204a-0f91-4767-9b5b-275c6babe050", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d53b84f-c746-4c48-a1dc-cdbec3d81064", "sighting_of_ref": "indicator--096c204a-0f91-4767-9b5b-275c6babe050", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f7f9b2-efac-4b31-9f8c-03f73bf6acb2", "sighting_of_ref": "indicator--bbb1a523-2b0c-492e-8e8d-5db78fc0f6b5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb01d371-5d21-4f2b-b65f-e91b4a09e04a", "sighting_of_ref": "indicator--bbb1a523-2b0c-492e-8e8d-5db78fc0f6b5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80ecf4f-541f-41b2-8375-e9c861d67132", "sighting_of_ref": "indicator--7f6085fe-3f8f-4798-a571-30099f9909e5", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d61ec4-36e5-49ef-9f51-4417435a9cc9", "sighting_of_ref": "indicator--7f6085fe-3f8f-4798-a571-30099f9909e5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a4cffcb-0b12-4ef1-9d4d-bba95987d8a5", "sighting_of_ref": "indicator--f54b3077-8480-4682-b099-e4ebc3162d7b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d7c7f7-3f6f-43dc-887f-304a7f6f892b", "sighting_of_ref": "indicator--f54b3077-8480-4682-b099-e4ebc3162d7b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de76f965-8484-4297-b8c2-2be6c8daaf1b", "sighting_of_ref": "indicator--86fab4b6-0d63-4af8-9bdb-c9d096dceb88", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdfa22f0-dcc6-4088-b3cf-362dc4b03b07", "sighting_of_ref": "indicator--86fab4b6-0d63-4af8-9bdb-c9d096dceb88", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869ebf09-7892-4cff-a778-98587f0a3aef", "sighting_of_ref": "indicator--e30b3213-29df-40cb-9ec7-13404be6bcca", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e709a46-c15f-4a10-bf3b-b7978f886980", "sighting_of_ref": "indicator--e30b3213-29df-40cb-9ec7-13404be6bcca", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e58807b-c060-4e92-9944-16f9bb5ecfc6", "sighting_of_ref": "indicator--ccee47be-2ac0-4d4d-ba0d-79f030a57c01", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--078dad61-c2a5-4ad2-bbe6-e8c94d226d55", "sighting_of_ref": "indicator--ccee47be-2ac0-4d4d-ba0d-79f030a57c01", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a707c0-3082-4588-838b-f6d6f632c6f1", "sighting_of_ref": "indicator--84e97b02-1919-403b-8c8a-35ee6850d965", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6302119-a0e3-4d5d-9d3a-72ebc9e4a782", "sighting_of_ref": "indicator--84e97b02-1919-403b-8c8a-35ee6850d965", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba27a5d-2bb0-4ba5-b307-46d73937a94b", "sighting_of_ref": "indicator--1c7ffcec-6e80-4daf-9e88-44bd86847da3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff4b499-c4bd-48bc-908e-beb816ee17b7", "sighting_of_ref": "indicator--1c7ffcec-6e80-4daf-9e88-44bd86847da3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8fc7f45-2504-42a1-a69f-c7272bdf852f", "sighting_of_ref": "indicator--611354e4-60cf-4a0f-b3e6-2b9a2400103f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63406f96-2ff2-4a5e-899a-d1e82001c521", "sighting_of_ref": "indicator--611354e4-60cf-4a0f-b3e6-2b9a2400103f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce307165-adfd-46ac-93e6-734c7b80854d", "sighting_of_ref": "indicator--d04a7acf-e270-4a71-9c82-77bcfb28f8ec", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--312f4694-14e1-4ab2-b4f8-2c2f9d764a4f", "sighting_of_ref": "indicator--98760681-4d8a-4217-ba70-cffc76a6e0e5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a5641d-29fc-45f1-8530-dd8ada5a54ee", "sighting_of_ref": "indicator--66f2fd0c-651f-47cc-b1a9-a3c296b15e13", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ecd1266-b0cb-4cb5-a3e2-5ae44618db91", "sighting_of_ref": "indicator--e282649a-81ce-4594-aa7f-327bb214eacd", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97e04ecc-30c9-4b85-b0a6-6d88fef19f06", "sighting_of_ref": "indicator--eb5eab54-0576-4269-a33e-718ea9fd6d7b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a62faacd-a1af-4d62-a563-69ee9bfb5ae0", "sighting_of_ref": "indicator--eb5eab54-0576-4269-a33e-718ea9fd6d7b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0025c0a9-d467-4757-93bc-7e735581f060", "sighting_of_ref": "indicator--30b76356-88f8-4954-83c0-557a546585d8", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de6473f4-cede-4bea-8a4f-dc01213c862b", "sighting_of_ref": "indicator--30b76356-88f8-4954-83c0-557a546585d8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--077d77e9-fa45-4e2c-8076-eb25f7d5a291", "sighting_of_ref": "indicator--30b76356-88f8-4954-83c0-557a546585d8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7add11c2-ccac-443c-8819-ea52bef259aa", "sighting_of_ref": "indicator--a65c3de0-66c0-44ff-9e56-c1cbebf17e38", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dddf6e8-7470-4d23-9179-8fb4be1f4458", "sighting_of_ref": "indicator--a65c3de0-66c0-44ff-9e56-c1cbebf17e38", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6edc1c8a-29ad-4227-b09b-95925a0f87aa", "sighting_of_ref": "indicator--d1c0546a-bf42-48d6-80e7-2d5f7e6ac40d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15061854-cb86-49d7-8ba5-a7e05dd18069", "sighting_of_ref": "indicator--28c97f49-19f6-4335-bfd5-1c74073f550d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4e39a6-1ea7-4724-9dc3-cf79befc0869", "sighting_of_ref": "indicator--c0abfee3-013d-4b23-bf1b-76d3d78769a0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ce0617-1c25-4355-8f17-c8394a5d47df", "sighting_of_ref": "indicator--9f08ba04-1880-415a-adac-7dcb5df86ff3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69861272-354d-4332-ae7f-b8d61d2e5e2c", "sighting_of_ref": "indicator--9f08ba04-1880-415a-adac-7dcb5df86ff3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e958d77b-f3fa-40be-ba9a-4f3379ca626a", "sighting_of_ref": "indicator--9f08ba04-1880-415a-adac-7dcb5df86ff3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1689e1-9b1e-44da-9820-9a6861ed2557", "sighting_of_ref": "indicator--9f08ba04-1880-415a-adac-7dcb5df86ff3", "where_sighted_refs": ["location--18afede8-b872-4d67-bf5c-32735390026a"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f6f23aa-40ec-4924-af75-9f2b892571b5", "sighting_of_ref": "indicator--2600c967-5fd2-4f24-87f7-d0b4633400da", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b40cb88a-c79c-4f7f-8705-a135d27beceb", "sighting_of_ref": "indicator--2600c967-5fd2-4f24-87f7-d0b4633400da", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9646e0-5368-4fe0-a48e-82c3d1032bf3", "sighting_of_ref": "indicator--2600c967-5fd2-4f24-87f7-d0b4633400da", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f346f2-fadc-42e1-bf22-009f71ba039e", "sighting_of_ref": "indicator--56bd0d66-99e9-4dca-96d3-55eb9b037be8", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f1ebd5-7b36-4929-a2d1-4abb9d8439e6", "sighting_of_ref": "indicator--596ccad7-6639-40e9-8f3d-5de23772336d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb766baa-b6ce-48af-9434-b80374ded645", "sighting_of_ref": "indicator--596ccad7-6639-40e9-8f3d-5de23772336d", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97dfdc3f-3e16-4dae-a2a4-072b765a245e", "sighting_of_ref": "indicator--cb4bda38-3afe-415e-b350-debc9405a02f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8baba5c-c027-453e-95d8-f825ab586532", "sighting_of_ref": "indicator--11f918e9-e591-4a03-8e7f-73d55b6a592b", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a90700-ec2c-443a-82a4-468249323b34", "sighting_of_ref": "indicator--5a14bbe3-681d-4a13-9c21-4226a93aea81", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad25e500-5042-4b4a-be23-54c8f94c5f11", "sighting_of_ref": "indicator--5a14bbe3-681d-4a13-9c21-4226a93aea81", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f86ad87b-69f9-4234-9c8d-29b775e59e66", "sighting_of_ref": "indicator--5a14bbe3-681d-4a13-9c21-4226a93aea81", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--077ce403-627a-4ec9-a9c4-5bd18ecc74c9", "sighting_of_ref": "indicator--8105fc65-9b24-4e33-8bc6-6f198eb30676", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67628428-b955-43c0-af33-1b7363e2fd7d", "sighting_of_ref": "indicator--ca39c939-d8f6-4bb9-a960-813fe13d56fc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d11f9c3-0cfa-4c7d-aa19-fb5e278320ad", "sighting_of_ref": "indicator--1f7591a2-3152-4b50-9994-0c470cdca06c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b508ab-b5bf-417e-afd9-3c9e1c9981d0", "sighting_of_ref": "indicator--1f7591a2-3152-4b50-9994-0c470cdca06c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab858b84-92f5-49ad-89a1-f3618511b1c1", "sighting_of_ref": "indicator--1f7591a2-3152-4b50-9994-0c470cdca06c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b2a324e-db88-4a92-809a-dc1a81c310c7", "sighting_of_ref": "indicator--f39a3c8e-72db-43a3-af6d-07a399c039ea", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8513a7-b33a-49b1-9b08-6980719035e3", "sighting_of_ref": "indicator--f39a3c8e-72db-43a3-af6d-07a399c039ea", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29f9472-ee93-425a-adee-74b12d92a89c", "sighting_of_ref": "indicator--f39a3c8e-72db-43a3-af6d-07a399c039ea", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c3ca99-cbcc-4b18-bd64-317bc7180599", "sighting_of_ref": "indicator--22d5d085-77d6-4eea-9bf8-27d669288c6d", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d8dc313-5779-4481-8bcb-784aa9dd59f7", "sighting_of_ref": "indicator--e048e3f1-2f72-4e96-954a-046bf96a67c9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b214d3-bfce-436c-b691-927edf42d272", "sighting_of_ref": "indicator--babd9e3b-31b6-43ad-b50d-91995f7ae2d6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1039ddc2-ff2d-4665-9dca-ac899703716e", "sighting_of_ref": "indicator--443767b3-b9e2-41dd-be5b-e9dd5a07236c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba39ca82-6044-4ca8-b97d-246294d998f2", "sighting_of_ref": "indicator--443767b3-b9e2-41dd-be5b-e9dd5a07236c", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6f9dfca-f997-4980-96da-e7be4b7add7a", "sighting_of_ref": "indicator--443767b3-b9e2-41dd-be5b-e9dd5a07236c", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e6412f-2c52-4d41-a016-ab52ba656347", "sighting_of_ref": "indicator--ed250269-e2ec-4096-b837-282467051ed3", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50abf406-6ec2-4810-915e-22be65fadd26", "sighting_of_ref": "indicator--ed250269-e2ec-4096-b837-282467051ed3", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e854ef6-2c8d-4793-91ee-eaf0f26974da", "sighting_of_ref": "indicator--ed250269-e2ec-4096-b837-282467051ed3", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55eea4fd-2bd8-4661-9d30-ba89f5f9dcfc", "sighting_of_ref": "indicator--960e0b5b-7b3f-41ae-8a4f-540c72cfc373", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71c9526-6e17-4de3-97b1-19148dfc0d0f", "sighting_of_ref": "indicator--960e0b5b-7b3f-41ae-8a4f-540c72cfc373", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d8c938a-337d-41b4-961f-33f03d4c9672", "sighting_of_ref": "indicator--b48a8463-af23-4380-948a-b3018b14268b", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--470c1662-bbea-4fac-bfee-20833f441549", "sighting_of_ref": "indicator--91527e1b-308a-49fc-9c61-f4149b9917b9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a3d4bb-44b6-45c8-87ea-766108e134bb", "sighting_of_ref": "indicator--91527e1b-308a-49fc-9c61-f4149b9917b9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4aff8cb-453b-4e48-8e8c-968a1b0a6056", "sighting_of_ref": "indicator--5eff6a93-bfc0-467d-a19e-411514d79cc9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31970798-b3fa-4f0d-92fe-4689e559345a", "sighting_of_ref": "indicator--5eff6a93-bfc0-467d-a19e-411514d79cc9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--960f969a-95b8-490d-bfdd-20aa7754f41e", "sighting_of_ref": "indicator--c92444a7-d01f-41fa-87f6-e91f7ff687a6", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bfc3d94-9c24-4768-95b0-2ce82846bcc7", "sighting_of_ref": "indicator--afc8867e-6c70-47bf-9133-124532335d25", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b326d3-7101-4b4a-9b66-fd745928c410", "sighting_of_ref": "indicator--24e059a2-7ef0-44cb-bd5c-8c727b3cc148", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb6194f-9033-4dbb-b4e9-9d6dc2173a38", "sighting_of_ref": "indicator--aad8f739-1f84-4ab6-b293-17c1e9fecb84", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19e1a2d-6565-4a60-9f53-17f998e3191e", "sighting_of_ref": "indicator--d6513ec6-c77c-43c4-ad82-608e75c13b43", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d231e93b-020d-47e3-b19f-6eb03bb1c2b2", "sighting_of_ref": "indicator--f003a645-3e39-408d-a9ab-44acb66cce9f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf00e11-5d37-4f63-ad64-bfecdc56bd0f", "sighting_of_ref": "indicator--0b259513-866d-482c-8ded-cffa02c1d0b4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e8d2a99-dbf1-4ffe-8ce0-e4c1b44b8074", "sighting_of_ref": "indicator--fd1ed0a7-6ad8-4b81-87b7-3bf424b80d3f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca8e8dd-a013-4b7b-9402-8f8b178de947", "sighting_of_ref": "indicator--50edd5f6-f2f1-44d7-8f65-19853967de46", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ebb882f-9d86-4abe-b395-935ab09ee923", "sighting_of_ref": "indicator--9408a170-41c4-4b63-8944-3d64d11749e5", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db226cd-2c05-4385-a377-8af3af6ccec0", "sighting_of_ref": "indicator--8eca4702-786e-48ea-b9ed-5faa5453f318", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b1c3f80-e989-4894-b39f-a9da3700c3cb", "sighting_of_ref": "indicator--165c3821-7a50-435a-96d8-0a11188b9836", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4dc9070-bb8c-46b9-a7ce-335e385b68e5", "sighting_of_ref": "indicator--662dc8f7-e56f-4caa-b331-d935e9ee38e9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8dedb2-7206-43a6-8ce3-f9c7c1c40a0e", "sighting_of_ref": "indicator--f205e1e9-afd5-4e71-8a00-b9d2f9b7e281", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58200b3c-7687-4da5-a065-d95c2aea95a2", "sighting_of_ref": "indicator--b61e079f-5f5f-43ce-9c32-ce3794e3c37f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e46d71c-9079-4e0d-bf62-47156f060899", "sighting_of_ref": "indicator--c62fca2f-3eb2-4567-99b9-2a3098e61cfe", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881ff62d-59f6-4bbf-9751-5fbe3301cf0b", "sighting_of_ref": "indicator--c62fca2f-3eb2-4567-99b9-2a3098e61cfe", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f152149e-eda1-4d03-be9b-8f385f548829", "sighting_of_ref": "indicator--189cb311-778a-417b-85f3-2e36046acbec", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7300d51-1d39-4080-a5e6-bacfa0c7f025", "sighting_of_ref": "indicator--1e514fa9-4ecb-4bf3-aad8-67715005fb32", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--126f2978-fdc8-4001-93f4-8070f0c90f21", "sighting_of_ref": "indicator--72405ebc-3586-4507-882c-04272395fa2e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b111730-9681-4171-bec6-42e2cce4f921", "sighting_of_ref": "indicator--72405ebc-3586-4507-882c-04272395fa2e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48fd2b1-8478-4a55-bf00-26b8c53e1683", "sighting_of_ref": "indicator--72405ebc-3586-4507-882c-04272395fa2e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e1b150-d5ce-4be2-a8f3-6da1e8d75865", "sighting_of_ref": "indicator--563c2822-247a-4038-aad5-fed0fd9d2f32", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6165fba3-752f-4930-af37-eca250b5e359", "sighting_of_ref": "indicator--2a1b9fd1-678f-44b5-97b7-2f28cf2ccec3", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3628c35-ec05-46fa-a00b-b0317c9d8e92", "sighting_of_ref": "indicator--ed410830-e02f-4b82-b9d8-8ad14a69a2c6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2201f2c-8a85-42a7-871e-cb2820a5e8eb", "sighting_of_ref": "indicator--bb641d9d-8580-4668-a561-b895ae626828", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5072fb97-4fc5-4b56-b073-e568eaea01a3", "sighting_of_ref": "indicator--26bc6eb9-eede-4ada-bceb-f5d4985e40ab", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb955b4-c73a-4af4-99bd-5106d76883a7", "sighting_of_ref": "indicator--26bc6eb9-eede-4ada-bceb-f5d4985e40ab", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a737323-f7f5-4ea9-9b8e-d3fc795c740a", "sighting_of_ref": "indicator--cf2a1a6f-0197-49eb-80dc-d9837bd4a1de", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--899e9473-fd7f-40b4-a639-e668ea390932", "sighting_of_ref": "indicator--cf2a1a6f-0197-49eb-80dc-d9837bd4a1de", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a1a97c-f3bd-454e-b6ab-af5ddccc7247", "sighting_of_ref": "indicator--cf2a1a6f-0197-49eb-80dc-d9837bd4a1de", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7297012-9a09-4fe0-9bf3-06e0dd4d86ce", "sighting_of_ref": "indicator--01e372d5-8db3-4838-8bdc-afa0654c7c7e", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2949fd-b0b3-4ed2-b1e0-0587278ef85e", "sighting_of_ref": "indicator--01e372d5-8db3-4838-8bdc-afa0654c7c7e", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b94f146-af54-4188-9298-4abdc09f2d3d", "sighting_of_ref": "indicator--01e372d5-8db3-4838-8bdc-afa0654c7c7e", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b17152f0-380a-40a8-9f94-0bd9d25216db", "sighting_of_ref": "indicator--967c02da-e851-4f0d-911e-c4aefaa3d5c9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39257cf-669b-48af-b96f-721e5c95c3f8", "sighting_of_ref": "indicator--967c02da-e851-4f0d-911e-c4aefaa3d5c9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0368d07-5143-4c58-aa7d-b6d5aa0c0a64", "sighting_of_ref": "indicator--967c02da-e851-4f0d-911e-c4aefaa3d5c9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfac9c1a-b7dc-4aba-af8f-b406849a902c", "sighting_of_ref": "indicator--7a54d7f5-c85b-4d26-a077-c9a97816ac63", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d275b9f5-033c-4784-8d94-d385e9bf4546", "sighting_of_ref": "indicator--7a54d7f5-c85b-4d26-a077-c9a97816ac63", "where_sighted_refs": ["location--7d135ed3-e023-43fc-9741-90e973202fdc"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--188da9a3-105d-4b48-b086-fad9ef57359a", "sighting_of_ref": "indicator--7958b72f-8a09-482c-b229-bacf08727999", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84942bb-c817-43e3-89cc-91e2a05d3ab0", "sighting_of_ref": "indicator--da877b96-58b6-4480-b0d5-22817d82fea0", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe9c122-5359-47e4-bd45-1f05d62254d0", "sighting_of_ref": "indicator--f2bf4cae-edba-46ee-ae17-38d06bfd9470", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37591e1c-dcc9-4d81-9f5e-728d15aae079", "sighting_of_ref": "indicator--53db055d-66d6-4ec3-85d9-c78c145f1ef8", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2868298-db6e-48fa-b735-eded247d5b88", "sighting_of_ref": "indicator--7fa48791-8da9-4440-aefd-264e629382b0", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0208e383-45aa-4b7d-adc3-4e9a7b56eab9", "sighting_of_ref": "indicator--7afcd4e5-ecc5-4ead-9b38-401ecd616e9b", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48fe35e8-1fb4-41ea-ba9d-5ac1bdba6410", "sighting_of_ref": "indicator--d34f4f7e-29c3-4b5e-b10b-7df84f4b3e30", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4030c0-3f2f-4969-91ac-6868a346639f", "sighting_of_ref": "indicator--eb05cbcf-ca4a-4bd7-be52-4860558e36ad", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f385bdd0-d01b-4137-9e57-4af6f506b2ca", "sighting_of_ref": "indicator--eb05cbcf-ca4a-4bd7-be52-4860558e36ad", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b889c1-8e05-4b54-af82-857396fbce2f", "sighting_of_ref": "indicator--226e16b2-65d8-47b9-b99f-ef2eac37e9bf", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27173689-2583-4738-a8e5-5515740b6f49", "sighting_of_ref": "indicator--dfd174b0-8da8-41ba-a5f1-0557c546b00f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b4fa6f-f28c-471e-88fe-951c800c457e", "sighting_of_ref": "indicator--dfd174b0-8da8-41ba-a5f1-0557c546b00f", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d298534b-8ed4-4b49-920c-18ba597db2cd", "sighting_of_ref": "indicator--dfd174b0-8da8-41ba-a5f1-0557c546b00f", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3fee023-e2ad-49f9-963d-092f466417cc", "sighting_of_ref": "indicator--53508111-54ef-4237-85e9-61385a3fa748", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b2b234-db16-4b86-a38e-977cb78dccc4", "sighting_of_ref": "indicator--3e31a0d2-1864-43b8-8cb3-7f25ea08fcbc", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942f1dce-c8da-4694-838e-8e9148c175d8", "sighting_of_ref": "indicator--3e31a0d2-1864-43b8-8cb3-7f25ea08fcbc", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791d9a46-4145-4308-8fbb-cad182b60324", "sighting_of_ref": "indicator--46e705b7-9303-4681-9c8c-b2687d36c93a", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0dac93b-33f0-4a1f-82dd-01e489c34acf", "sighting_of_ref": "indicator--641326e0-d4dc-4537-ad1e-7f15ecb99da2", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d528492-3db3-4395-b406-72e98c62d91a", "sighting_of_ref": "indicator--641326e0-d4dc-4537-ad1e-7f15ecb99da2", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--999b94ba-0900-47de-a2ef-87a8bf563340", "sighting_of_ref": "indicator--641326e0-d4dc-4537-ad1e-7f15ecb99da2", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--371b2886-7de1-4579-be18-10d4a779ca2c", "sighting_of_ref": "indicator--fb41832d-691d-421c-aeed-6517c106667f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829a2515-6703-4c42-8acf-84b7b307dc2b", "sighting_of_ref": "indicator--7c4c9e49-5d92-4831-bd00-1f643a83704c", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351650c4-42eb-4dab-9449-b3434a98291a", "sighting_of_ref": "indicator--8718c0d1-7475-4de6-aae8-c7f362364346", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75360f31-6e21-4fd3-911a-83bc64ad998c", "sighting_of_ref": "indicator--6ee030c7-1731-4fca-a0e3-c65e1bffe9d9", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ef0d6d-3ab5-4152-b29a-561dabd678e9", "sighting_of_ref": "indicator--6ee030c7-1731-4fca-a0e3-c65e1bffe9d9", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f23639-4e5a-4adc-a9b1-3fe3d9b9c186", "sighting_of_ref": "indicator--6ee030c7-1731-4fca-a0e3-c65e1bffe9d9", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a18381-ec44-45d7-9c2b-1a9adb788a6a", "sighting_of_ref": "indicator--2b4dcb90-061c-4426-a7ca-56f2c0d8d4df", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--322ec31f-76c0-4ad0-a12d-44e9435fc0d7", "sighting_of_ref": "indicator--d4a4ee8a-5508-469d-be0b-226524327473", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc83d78-5c20-45de-bec7-7f9cb7eaae5a", "sighting_of_ref": "indicator--ed50823a-2b7e-4e54-aade-53dfe6f6536f", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63de8e3a-26bb-45f4-aa27-6be29e35b3f4", "sighting_of_ref": "indicator--2ddab630-b127-484a-a44e-54f0807b58ce", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3fee0df-0602-4fff-a4f4-5dde816d4cf7", "sighting_of_ref": "indicator--790ae8c0-455a-46cb-93bb-15820136cb34", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df0be5c1-d74c-4fd1-a832-fc76c1ae0f22", "sighting_of_ref": "indicator--43bf4727-0fc0-41fc-bf17-733eacadb788", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e3a930-f9e1-455b-978c-b664e571fd5b", "sighting_of_ref": "indicator--1f88243e-a562-4c83-934a-ca0afb2a4fce", "where_sighted_refs": ["location--96661552-0732-48f4-957b-2987950a9cb0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d2de431-5591-4cde-b3d7-bc42e7374254", "sighting_of_ref": "indicator--1f88243e-a562-4c83-934a-ca0afb2a4fce", "where_sighted_refs": ["location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f716110-29bb-4a65-8761-969d268baecd", "sighting_of_ref": "indicator--4bf0e852-1d1e-4090-bb2b-d6ad06124eb4", "where_sighted_refs": ["location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56"], "first_seen": "2026-06-04T00:00:00.000Z", "last_seen": "2026-06-04T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "report", "spec_version": "2.1", "id": "report--e3eb0bb4-f449-4f0e-a7f1-e085b7fc4095", "name": "Threat Report for 2026-06-04", "description": "Daily threat intelligence report — honeypot bruteforce, web exploit, and anonymous proxy detections.", "published": "2026-06-05T11:00:01.293Z", "report_types": ["threat-report"], "object_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "location--96661552-0732-48f4-957b-2987950a9cb0", "location--d064b9a2-13d0-4e49-aa72-a18b8c55fae0", "location--2fe2a4dc-5a71-4f78-a6b4-d61d87a61e56", "location--7d135ed3-e023-43fc-9741-90e973202fdc", "location--18afede8-b872-4d67-bf5c-32735390026a", "infrastructure--70a7b969-e591-41a0-bb47-ee0464e81cc4", "infrastructure--130c4cb9-11ca-4daf-a660-1eb07a36d588", "relationship--715aea1f-aa15-4009-b589-272e9312caf3", "infrastructure--66defaf4-a3d1-4dcc-8dcb-e55296e0f366", "relationship--c27b1109-4ab9-44bd-ad50-e5073f75d003", "infrastructure--aa96b260-ca56-4c55-8c2c-15fbf2b189fc", "infrastructure--a698bd1d-81cd-490a-8266-1889a605d66f", "relationship--4ba1f3c1-e308-40ac-a7ac-4e369b3cd459", "infrastructure--7df01783-5464-48c6-b089-43607d79028c", "relationship--4aa42533-85f4-46b6-bf00-6ace8f7bc449", "infrastructure--a636dc38-5a35-4c05-8546-bec3d5d760dd", "relationship--55bad961-4b3d-4a7b-b00d-ae3bdb05b95e", "vulnerability--eecf412e-646f-40f7-9301-1976d52e5cd2", "vulnerability--243f14d4-473a-4fc7-b86e-710ae7d9d752", "vulnerability--796d8b88-b105-435f-bec5-4410f0954067", "vulnerability--bcaa6e63-8d28-44f2-9dce-1753a0b3fbd6", "vulnerability--251356d3-ce40-44db-8086-e377a46c9bd6", "indicator--4472bb96-e12a-4864-b252-be2711650f12", "indicator--f449e8db-4464-4e56-8802-d2cbfbf7dbbf", "indicator--3d80e1dd-01ea-4b9a-9721-a55113e80544", "indicator--926171c8-6d9e-402c-8b9c-5ad737b5053b", "indicator--879a765d-1834-4211-a78d-df291e65d8f8", "indicator--14febcd1-6fb1-410e-86bc-4bb46091ffc7", "indicator--46467508-9238-4d88-a567-a52444356847", "indicator--e6eb4bf4-ccd9-4606-9272-a8b6dff3b324", "indicator--f928f252-3439-4136-b615-5ef886d55f95", "indicator--9b07b099-5a55-4415-b653-1e082b227f0e", "indicator--78b03749-a2c9-4a79-848e-5db189de3b17", "indicator--7a2094ac-c2c8-4ffe-b9fe-e383ba22c51a", "indicator--f98d4e4b-130d-4361-9c0d-6b942954d586", "indicator--d5c82e59-179f-481e-9e6c-52aa8266c858", "indicator--238642d7-a36e-4e2d-8c69-5d44391cf78a", "indicator--d54dd216-5a1f-4307-81ab-5f66bc53318e", "indicator--e5af01bc-78b6-491e-a2ca-b0cfebfd1e33", "indicator--f72c6f65-6522-4fab-bc58-08ac938a194c", "indicator--fcc385e5-9750-4741-a0d2-057a60067455", "indicator--b93b3ee8-dbab-4bb8-b4b8-5c9f15233879", "indicator--25864060-2df9-4b0e-916b-0c14b6690942", "indicator--28be8fc9-0549-4f94-8ee5-2c00c7286335", "indicator--9c8b3f44-392f-46ab-b1f9-5a310d3bfa3f", "indicator--b713f8f0-6a4e-43db-88a1-557e5181b3e6", "indicator--8c1b5720-8514-4146-a21e-16c176263e86", "indicator--7d2e8ba0-fb48-48e6-ae0d-7c53bf00482d", "indicator--daba67b4-626d-4a91-ab13-5b6755514d76", "indicator--12d2939b-3ff0-4127-bfca-1ee501696c2f", "indicator--0036266c-6d1e-4cef-8088-5944f0249e8d", "indicator--f1f13c27-6c35-4cf9-be2d-d4f5faeb2a17", "indicator--f356cebf-d549-4827-960a-b7065fb2edb1", "indicator--f433d694-c603-4cc0-80ed-cd2c6971f54f", "indicator--11b06752-1ff8-4cbf-bb33-19239007a489", "indicator--11f5d785-c03f-4323-b011-b4c7c4b5745e", "indicator--087e9c0a-2c0b-4016-bc79-e38a03bfe9ba", "indicator--e56ca3a2-7f9e-433c-b69f-dadfa6bc6333", "indicator--fed2f63c-2d17-4316-9722-b9c82166c2df", "indicator--f7754c5d-5c80-4594-a018-9c818d197fe8", "indicator--e6e0cbbc-826a-45c2-8394-1b5e432690db", "indicator--8fd7f54f-f3d9-4267-aa28-3755cf9b33c5", "indicator--be1a7d22-f227-457d-8cbd-9834191533aa", "indicator--6d991a74-4e9e-4ec2-89e3-0f47f0e75915", "indicator--201c25ec-3b7a-489f-a10f-25a508ca367f", "indicator--ed5d50c3-d13c-4e63-8b49-797ff6f77454", "indicator--d9235c63-4b75-4a2c-863a-6c6482c44512", "indicator--6cb65dd2-3430-4654-a543-d8dc9c56298c", "indicator--b3aea4ef-371e-43c8-a92a-2525d3a7b4e2", "indicator--bc2c1a4a-4cba-47a2-86b3-9fd48287de81", "indicator--781537da-e639-4377-87f3-90df592e3ee5", "indicator--6a27d5f6-46f1-4aca-9e2e-c24cd7cc51db", "indicator--7a45ddab-eba0-418b-9257-0c92ba0f16f2", "indicator--ee0b258d-4b69-40bf-a4b4-0601d8ff6584", "indicator--077354f4-285a-4e30-a88c-7f0eb9250a8a", "indicator--e732afdd-68ae-4cbc-93df-3f8ec51382be", "indicator--82bba8a7-3599-4a3f-a894-da1c6ce81e1c", "indicator--29a8d6c3-f5d2-4238-a10e-a625d611eb8f", "indicator--ae6e3301-83ed-49f2-a399-14887a0f8934", "indicator--480d6418-6821-42e1-8f18-17b452b75463", "indicator--ee5025b3-5be6-42fa-87c1-ef9d73f257c5", "indicator--0f456336-c794-4487-9688-b63082dad1b2", "indicator--78556831-f41e-46e6-8d71-c8a1ddb013e6", "indicator--7553808c-7b78-4d1a-bec9-162d61934b53", "indicator--62fb63d3-027c-4383-876f-96caf01c4960", "indicator--ded1ebd4-4430-4d22-91e1-7a725b5b1769", "indicator--dcc275f7-e206-4e12-99a3-0c3484fa07b8", "indicator--b76b0d89-3d24-4874-a509-5fd68eba75e3", "indicator--8b685c8c-7e94-4085-a947-6b64d0b01b02", "indicator--8b9b3145-b2da-4c7c-93c7-5fa52c8b2701", "indicator--f7e7c83b-91a8-49e7-aa7d-c75a28dadc75", "indicator--ea036b99-883b-4ec6-ba9d-4ea78f3bdbb6", "indicator--8d9b54a1-3d68-485a-84a7-7f236154f5b9", "indicator--c02b631d-431d-4796-9080-e833e17804c2", "indicator--12065e40-4ced-48c4-b615-b203e5d8917f", "indicator--8fccb47e-e8a9-4d68-ba3b-4c5e5206dccd", "indicator--61b883e6-6918-41dd-9287-c7a595f4a547", "indicator--139e0b66-aa4a-4cc3-9729-8c711ae5aa65", "indicator--525b0e28-3b45-4e82-9642-ebbb30e6cf45", "indicator--f2797e64-9082-4f5e-9981-d7fcbd86667c", "indicator--4e710207-7ad2-4c8a-8d3b-9d8d8fe2a27d", "indicator--55c76039-1873-40da-974f-978c5e183bbb", "indicator--9b55c447-f3cb-4b00-8bc7-cf8c20b4a258", "indicator--b3f6767b-afdc-4cf9-ad04-3b9c28d6d5a4", "indicator--e1fc37a5-f4c8-4617-9a7f-546248949758", "indicator--084c772b-b203-41ac-a2da-51af6b46085f", "indicator--e1652e42-5450-40f1-8b2f-8473474cd4aa", "indicator--34a3ff99-a481-43a3-9300-6b58adfe13a8", "indicator--f100d123-5935-47e7-ac0a-32cbb85a10c0", "indicator--ad2632cc-27c8-433f-a1c3-48ad6d8f1820", "indicator--b36a42b4-0705-4ede-9ac2-3332b8c79d72", "indicator--f7f0ce28-e5fd-49cc-a881-4e7a8a99c1f4", "indicator--3102c8e6-a797-4c71-b8bb-2fa1151ba4d7", "indicator--b4fe1d9b-5c52-40fc-a27d-14bf311b7031", "indicator--d957e777-9710-4cdc-b23c-fcbb418c2f0a", "indicator--d6adc76f-3ab8-4c8c-91b9-fdc19d4234f8", "indicator--5b25d390-c8e1-4284-9877-43b3ae098a56", "indicator--58d175ed-c583-4b4f-8287-a6916f13c1f1", "indicator--72911eed-d3a5-493f-a727-1167f42f44eb", "indicator--9288e39c-3336-41a9-b8c9-1e2e6bb6d2db", "indicator--fd4b6306-c10e-4927-a761-909a27aa92eb", "indicator--b4db2c78-ab0e-48cb-a27c-894349d96295", "indicator--72bb1f16-9e7e-403c-a6b1-fbf9b44e20f4", "indicator--fde0e3f5-b73e-4b3c-9aab-37a8ddc3e519", "indicator--33509b4e-1bfe-4ab7-8e93-42992ed9c1b6", "indicator--bc9cfc4d-495f-43a7-9090-d65bc3c6a52e", "indicator--d573afeb-0e4f-466a-9309-ac6be5160df6", "indicator--2c71b513-1137-4fc0-8256-5463b60fc0e0", "indicator--6dcc0260-59ba-4da9-a71d-f75622c6734c", "indicator--93d561f1-4bdb-4676-9e1c-63ca6d22c578", "indicator--40670f39-4b32-4848-9b93-3f1be07ef57b", "indicator--6abd7620-33c4-4dcf-a783-7e3daef16243", "indicator--f8f4c88b-0e01-4b23-bad1-17b5c087751c", "indicator--a2867243-1284-4344-9f1b-fbaf3cf78f3a", "indicator--566c556b-ae46-420a-ae22-66ac65e3afe4", "indicator--368f81c5-8d2a-470f-afaf-c69471b73070", "indicator--409a6bc3-6df7-4da6-9eb5-9299b62410c2", "indicator--75cc4e34-aab1-41c1-8c9b-7a896f7b3a4e", "indicator--c36eb4a1-fb72-4874-a908-ccb4d0c1f4b5", "indicator--8647da8a-39ab-4add-beb9-6c0a16a7ad7e", "indicator--302fa8b0-460a-48bb-9515-797529005da2", "indicator--0ff466ba-d46d-43c4-ad84-d760e51d2b42", "indicator--aa302b3e-8214-448a-ae06-71ddc8445783", "indicator--5214aa80-54c4-4f7b-87f0-8dc406a88fed", "indicator--16abbc8d-8597-4d5e-870d-11df4fcd6004", "indicator--6f397a77-72bc-4b97-87da-6f8ed96b80f9", "indicator--58a440b0-4086-434e-aa04-2650e368285b", "indicator--15e9793c-3134-4cd7-9e62-c02cfa60decc", "indicator--ac307d42-26a9-4e2a-8661-3a1bb76adea9", "indicator--9e5e87c8-abac-462b-90ee-afc5dcef94cd", "indicator--909f5ef2-a994-4633-9673-6ad8c864658e", "indicator--861b080a-2446-4e89-a425-5b140d938f0e", "indicator--3295972c-2bf5-4cae-8011-96d1a78a34dd", "indicator--f2cbd733-e9e9-4797-9e14-56d693dda66c", "indicator--8892e644-689a-4d09-b07a-a6d8b4f80df1", "indicator--5288a2f9-ee6e-490e-8496-c8d0b89822ba", "indicator--4e344e06-294e-4419-b6d2-14d642d00e29", "indicator--cb3216ba-a876-4dc3-b7ea-7eacf01ba0fd", "indicator--1863e84b-bee5-4097-9e44-4dd6c8161a3a", "indicator--3898ca66-c70c-4124-b969-45cb0017b747", "indicator--a16c26cd-2202-46ae-8483-4858ef03edf7", "indicator--279e1d87-0a92-49d9-870c-27cb8818df4f", "indicator--8d2a31bc-40d3-4bb0-9e7b-9c585b88d891", "indicator--ba171bc5-d383-43e7-bea4-d0c36921f1c2", "indicator--a95471a0-878b-45f5-9251-732944561dc2", "indicator--b6ea94e5-cad4-42b8-b197-e433d3320c0b", "indicator--699c82da-cc61-4794-91bf-67f8bd12d261", "indicator--7cce0af0-3cae-4a1a-958e-81449ea51c3d", "indicator--ad851f3a-3c9e-4315-af4c-500c61e8527f", "indicator--4132f361-5610-428d-b56a-d1c4aa21f020", "indicator--3ff6c8af-476a-4a08-9d54-7b9e63b3eb14", "indicator--2fceeeea-fabf-46b4-90d4-3592d856797f", "indicator--53cb5ecd-d228-4434-9a53-7cc9c87534a5", "indicator--1b9afc25-7aa5-41be-ba5a-2bf0dc96a23d", "indicator--be3c75dc-fa99-41ad-89de-1f23e5dec579", "indicator--29c2eb9e-bbc4-4c4f-8f7c-dda015e211aa", "indicator--8f0287c1-083c-4a95-89e5-5df9fc1f3e82", "indicator--279f3e29-f7c1-406e-bb6d-c7d53e5415d1", "indicator--67d0cce4-0b0e-465f-985f-10cdb797f3ce", "indicator--875aacd9-97b8-4625-bbd1-3a93f409ec38", "indicator--96b0290a-d8ce-4123-a38f-5c03ad826d09", "indicator--5bcac0d3-2d13-4415-afb2-096b583ffc23", "indicator--3d089c04-a802-4615-8e6c-a7f339627d03", "indicator--94edb223-aa80-4e85-bb84-de672adbf20f", "indicator--b02ab9aa-0c74-4fee-ae41-8d55cad355a3", "indicator--e161f1e3-46dd-463e-ad0d-a2d209d7b290", "indicator--d4454eef-f0d6-4b5d-bbc3-50ffbf5560cd", "indicator--7a4f3ac0-6d5e-4b0e-848c-d0efab54e5de", "indicator--8b07d737-3f2d-450c-bd81-937f46499dcf", "indicator--41123e97-f82b-4089-8ce4-d8d99d53e2f2", "indicator--c2891803-b7ee-4950-a134-111f1951e0ed", "indicator--1fcc8a24-b100-4b61-b089-b40a84225c68", "indicator--799d1af6-f63e-4761-9118-4dfd38114454", "indicator--451c1dbb-b4ef-421b-816b-5e8c4ff17e5e", "indicator--74ccca75-f077-4715-b390-00dfc2134901", "indicator--a2fed407-2e45-466a-8f01-893e06e538e3", "indicator--627e2b2b-11ef-449c-871b-87961af626d2", "indicator--90307bcc-6ebc-4dde-bdfb-07f0fe84a762", "indicator--b05c665f-12c4-4bf5-8479-b1efdcd39fd5", "indicator--3040f354-d907-465f-b02b-cbd1785a4742", "indicator--98111d1e-e91e-4378-b604-8de5a3b4b170", "indicator--f50dd90b-1369-44f1-a067-3b73a150c12d", "indicator--e8d0c92b-9ed1-4d40-bee3-f2492cd72d9f", "indicator--2f62b5a0-74f5-4bb7-9ffb-08c150bf1a54", "indicator--255b2e24-1f91-4b0c-8149-67e7d2748f5b", "indicator--2e0612a9-474e-42ac-a5b1-8b63ab22d857", "indicator--e673088a-5ed9-4c8b-9763-0c4cfe6b0050", "indicator--248f5a2b-9428-4f78-bc07-34467c636785", "indicator--351c8851-147f-4f54-8b05-eb910ca58eb7", "indicator--9a568429-61c1-4b90-9246-7da56c41fd5a", "indicator--1794352c-3e3d-4381-8190-30769c820f12", "indicator--1c681b04-ad09-4119-b46d-2661f4b1d26e", "indicator--3c069e4c-3450-40da-89a0-b8fc1ca186b5", "indicator--16a62320-71c4-4ac6-9ab7-eeabc79d7159", "indicator--9f395f44-be4b-4e30-b6df-5c11ea972802", "indicator--c5dcdb7d-f079-44d4-b3be-1b2df6598e62", "indicator--3ca9b837-5146-420d-a322-1e2305157ef9", "indicator--21eaf6c9-5a39-46a9-b0c2-4291b5029a23", "indicator--090a865c-9f3e-4c91-8f3a-d6b4e233dae3", "indicator--e1682b1b-9e31-4e7d-8019-93a4e981a30f", "indicator--1047ffd9-e85c-4eae-9f76-32979a5afc7b", "indicator--4e763692-cb1f-44ac-80b1-917c341ac735", "indicator--1f732305-c5a2-438c-82a0-700fb5726c58", "indicator--6a777b04-cfac-4c9f-b5fd-f01489946da4", "indicator--a7701ce1-074b-45fd-9e72-9386c82a3eff", "indicator--a611f994-5cb9-4563-b62e-3324cf56aef4", "indicator--a3738818-a28b-4fc8-9490-98270de9d278", "indicator--36433767-c35d-466a-b721-6b40fb4d7131", "indicator--93444352-34cb-479e-b255-c4bbbb05fe60", "indicator--19a405d7-a02f-40ff-a933-6da224c24595", "indicator--ccaa15a4-1b07-406c-8a82-e63a7a745217", "indicator--cee962ca-1d2f-49ea-b5fc-7ffafad85635", "indicator--b3155dec-3cbf-4e01-b0e9-787649a4e847", "indicator--cd631472-d8fe-4050-b58d-40aa3d78a435", "indicator--bdf5a219-0d55-432b-85a8-814c08493cf0", "indicator--93c39181-7209-41dd-a2b8-af0c8886aa6a", "indicator--7e67f175-116b-4539-b49b-a63829e37621", "indicator--4f6a774c-dd7b-4660-bdcf-cd4160746aaa", "indicator--c1f92dee-02e6-4aa0-962b-413bc3c3bb82", "indicator--09d21fa2-b9b2-43d3-bb28-ba31f0121eef", "indicator--60e373bf-f3c8-46aa-9102-98601919229e", "indicator--3bc4803f-6197-4b93-b962-6cb7b7b34b70", "indicator--a72e2ff6-663d-4057-bde9-29959e9504e0", "indicator--0a3e8d75-275c-4fc1-9697-7c1e13723510", "indicator--8bd8807e-3e2e-4899-b02e-eebceb1a5107", "indicator--1f666281-782b-4ad4-8881-4dfc739ae2a7", "indicator--2bea664c-d5bd-472a-a1f4-c1a79cd7ddad", "indicator--af7c75b6-b48e-408c-bd1f-3cc9bcf3da25", "indicator--ba5ad6db-dfc7-4b36-8f55-7e0da1931c10", "indicator--1c347907-4320-4069-bdf6-4754e6d8e84c", "indicator--0d9a5563-097e-4e03-9c7f-86ffc7e38318", "indicator--4fa1b394-812d-49d7-9d1f-586b97f730a8", "indicator--6bfb15e6-491f-4115-a307-2bd0c9bbedbc", "indicator--1e7108aa-fef4-4ec6-bcd4-a40167550860", "indicator--cb05ae7c-edfa-4f16-8e06-1e83a5d7a4a4", "indicator--718bea39-c275-4bc3-a6c6-28bad621edde", "indicator--4ecba469-7fde-4d2a-9408-385cda7caa86", "indicator--d4664aab-79a1-49cc-8837-03afb84ff1dc", "indicator--87045ba7-941f-470a-a5e8-81e771600ce5", "indicator--95e33d80-4229-410f-b435-19f693ddd3f9", "indicator--718018fb-8213-4920-9ae3-7fcac1bbb3a4", "indicator--7a988ce9-161c-4b27-88e8-4f6a2a913844", "indicator--8423c1ba-244f-4abb-98d2-86da977a5d7f", "indicator--8ffb0e11-dfab-4dfc-a045-4bd4fd3a7eb2", "indicator--559f0aa4-40c5-4149-80cf-fd5e45e166a1", "indicator--57b22ce1-ae62-485f-b42c-3c72b75b8173", "indicator--d18dbf7c-b360-4250-ab42-7fe68ab37d05", "indicator--9acf6b67-1806-43ca-998d-a68114adfe9f", "indicator--3bfeb0fa-fa15-4c4d-98b6-15adebaa4cd2", "indicator--c4fef7af-841b-46c7-ac6a-936bce5f3ac3", "indicator--ea3db5f4-d515-4306-89b0-52314b50f77a", "indicator--d36a8d81-1b62-49b8-b19c-679d51c2afad", "indicator--45a0a193-6d62-4ec9-8142-5fd2df99cc3b", "indicator--1d6b46f4-22a6-4c08-89a6-852291deaab5", "indicator--03f45421-29a8-428f-a0b9-94726bb22399", "indicator--c0b18a36-5697-47d2-aa1d-e38172948f37", "indicator--ba6ca4e0-8755-40b8-a9e1-cd5b5c845bcb", "indicator--009456ca-d5c0-4cb6-ade5-c102320355a7", "indicator--b13d0a2a-3271-44ca-b14a-297f3e719c55", "indicator--b9006fb9-f13d-4869-85e3-cf53bb942d46", "indicator--69a58c93-e8d8-4dc1-bd58-06f5aa7de132", "indicator--c7ac2466-eda1-45fc-bdb0-6e1e4f31fd63", "indicator--9fe825a1-87b1-40e5-8bad-60d4fa8b4989", "indicator--05b8f7b8-9d79-4e70-a07a-cae75271dfe2", "indicator--2e8c58ce-4e58-43d6-83b2-b32019c5f251", "indicator--308a9d93-2a92-4711-af0e-5f344fb57dbf", "indicator--ae23045e-f619-45b2-be01-88a13002b6fe", "indicator--2654ac70-c5f5-4890-a199-d7e59231780b", "indicator--4d3f0a20-8ee0-4a87-aec9-cbf9f838b470", "indicator--2e09afc8-c6a3-4010-a2b7-00915cb9efca", "indicator--557d2f93-9ef3-4e62-96d5-88281475456d", "indicator--021267fc-583f-4ebe-8bf1-b4ccde834fca", "indicator--279d681e-aa03-4ec2-ae0d-f7fef93824da", "indicator--9ddf7ddd-b12b-4d5a-bbf7-b4a70348baba", "indicator--9bae01c0-26dd-4980-82dd-851a1828db17", "indicator--f2533f40-bfae-4d6b-aa8f-e7c9e132210e", "indicator--ad006fcd-9501-4c42-b6a8-9795733cafe2", "indicator--ace862a9-c78f-4598-bbe8-e46520a8362e", "indicator--1f330233-a1b4-499b-aa5f-00c8e4438666", "indicator--57c2875d-4f20-4d0a-9668-697e5e33d32b", "indicator--f8b9a0ba-8400-49fe-801c-3c9b0edfcf7c", "indicator--dfe8166d-4253-411e-b71e-07b029fb41c5", "indicator--7ec63379-3334-4191-8a88-45465481004e", "indicator--69dfd687-6952-4070-8505-e44cd25267c8", "indicator--0f990db2-1ce7-4645-a0f8-170e5367c261", "indicator--f99287a9-a9a8-423e-b5a1-2508b123c1e8", "indicator--01cb1a9d-5609-4067-a817-699de1f24ffe", "indicator--4e0437df-16ee-4928-a2d7-aca6a60ad708", "indicator--6469ddc3-522c-4be8-81ef-6a1754a74e43", "indicator--2fc42b28-4794-40d7-b8c3-e2ffb2fdfac5", "indicator--a4a801ab-f558-4b82-bcfa-a65102838610", "indicator--46962e0f-5c81-4cff-885e-16b91710d36c", "indicator--5093775a-091e-4cbc-9c40-a795ef7d44b4", "indicator--c9c6d396-0af7-4fb9-936c-79387c60af3c", "indicator--073fff93-9409-418f-9e51-dc57ee71b6e3", "indicator--a05dc190-02b7-4dde-83bb-5501179a5416", "indicator--e7178a33-7869-4f63-b5d7-8f243236cb75", "indicator--c8da7ac0-d2cb-452c-b33e-c4971b88d456", "indicator--8e85d822-2429-4290-a75e-e7b39bcced3d", "indicator--e6888b3a-57c0-4d42-82e8-5813aeae3c3a", "indicator--a9e27a52-3f1c-4584-8f08-fdf00961983a", "indicator--e5d797b3-5e6e-494e-a461-bf7c1da3994b", "indicator--bfdeafbe-a38d-4309-b704-b4acf63992a0", "indicator--019bd78b-123a-4091-8f23-a915cb1b776a", "indicator--f30e192b-b1c6-4243-af82-d95c2fb4bc0f", "indicator--11f41d8f-7f69-4de7-87eb-eccd49a3bc19", "indicator--3376b52b-6a68-478f-a3df-e86bf1bba4bc", "indicator--7c21a3b1-22ed-4e0f-88f7-5a1a7d29a178", "indicator--1467d037-7297-4de8-bcd1-5808c9a27d66", "indicator--ae6253ba-86db-4be4-87f4-50dc3b51d90c", "indicator--cbd18224-4743-4508-8a4c-6257fbd6318b", "indicator--0eb779ee-429c-40e2-93e4-cd4a90184e6f", "indicator--01234e5d-780c-4fe9-ba29-642ff46bfeb6", "indicator--0af23f83-6f10-4702-b06b-f8b4c6616642", "indicator--25085faf-b2b8-4042-bc59-305d613308b5", "indicator--0e2f3685-101f-4c2f-a43f-467bfcac5b75", "indicator--bec6636f-144d-45cd-baf4-41c368dfff41", "indicator--1252f2f3-8de3-456b-8c43-6657f99a5150", "indicator--43ce746a-7147-414a-a5c6-1202ee187459", "indicator--5b9f5278-fd12-44f8-9ac0-d541db7033cd", "indicator--a1b83bd5-1aaa-4dda-a202-5535ee076eb6", "indicator--6fbd022f-0eb2-41cf-9421-22188bcbbd99", "indicator--35ae38dd-a4cd-4bff-b819-6cebc527ef4f", "indicator--0e7ea870-adc9-4bc5-8046-3503eea5e594", "indicator--99760409-bf57-40be-a492-688a813d87d9", "indicator--c0539c99-2ff7-4638-99ed-48d7da86fc25", "indicator--4a0d8066-6553-4564-8fa7-b37d1202cd05", "indicator--318c362f-d326-4796-80b6-a8f19fc1af77", "indicator--28d28827-2ce2-4322-ad17-6b838a8aa132", "indicator--f8dc2c4c-bcb2-4d8b-9aa6-d9e2ddec0e3e", "indicator--7754128b-da7d-4451-ac34-0cc4c1014620", "indicator--7e3f7cb9-5dad-448b-a7e1-c31a0ff98b6b", "indicator--dd0e1a6c-24e1-4f5e-b04f-3d1a3bcdd655", "indicator--3a3838cb-38fb-4710-8291-39af26f2511f", "indicator--0fca09e6-c1f0-4569-98f6-9ab6a64f5246", "indicator--573fb153-bb39-4ef1-81a5-afda3cd8cc75", "indicator--07e3029f-fa6c-4588-9373-027a7755c1c5", "indicator--9d24ad63-f2ae-4c25-9af7-d6d809cc1342", "indicator--cb4a68c3-6bde-43f8-b72b-d67a3434ed11", "indicator--373c6449-a69c-4757-9f9e-0b7cacf876a6", "indicator--ac5b1643-fb18-4ff2-a1d1-ca4427c0a46c", "indicator--3826fc4a-6fea-4274-80e8-bc1829b8ddf2", "indicator--9692504f-3b24-4871-81b8-a6ca15d9ca59", "indicator--65096188-f640-4bb8-be33-39bfacef4c26", "indicator--cbdf5423-b5dc-4ace-ab22-3eae3fa691d8", "indicator--cd8e797c-6cb4-4725-98db-af80b5e19cfc", "indicator--6c548c8a-a819-4b85-8eb4-50aae6346a7f", "indicator--4e8fe626-d491-46b8-b8a7-4e5e30b6bfd7", "indicator--feb4bd90-ec57-450c-9447-5413309be7d5", "indicator--2b314783-38bd-4086-a7fd-ab76f768eacf", "indicator--59c5b88b-452e-4252-8bed-805137b0c91c", "indicator--12629ab6-e4ce-4640-afff-d16859117bad", "indicator--aef1cf95-ab59-4dda-9349-419c400d43f1", "indicator--52817ced-c637-4c30-8f29-801df0edd7b0", "indicator--dc9b1fc8-16ae-4f09-b73f-96d7710226a8", "indicator--41196653-7986-4d35-affd-6f0126c81855", "indicator--5a1a1574-db8a-4aaa-b34a-1d5501b7c24a", "indicator--5e89ee7f-04dc-4060-8b9c-ee71776c3bb8", "indicator--23970bf8-1df8-4543-be65-287657931d9f", "indicator--95d2453a-6add-4562-8836-4099e1abde0f", "indicator--c13d857a-abfc-4b2e-9100-4b2b996c0e36", "indicator--b0248946-2afe-46f7-bc59-ad0994a46d2f", "indicator--9e4a928b-90e4-4324-8ffd-453dee9ec683", "indicator--8cda505a-39e8-400d-bbd0-9b1b8da42474", "indicator--8e11dce9-8f7a-4d5e-a5dc-716c14053cdb", "indicator--bd40c5fc-2282-45fc-b1ab-d8f803101001", "indicator--f304bcb3-80cc-4988-a160-3d0392e547fd", "indicator--208790fe-5451-4936-81b4-c83b7c11d094", "indicator--49cb5a10-35ce-4235-97c3-b2286c7d3dea", "indicator--06cf4661-a542-4658-a61e-3d4da8cfff5d", "indicator--215b5e42-b3a4-4dde-85a9-b1e193998d5b", "indicator--ff0e476a-7371-4071-9797-0fe50ea1ea40", "indicator--ba29b19f-f45b-4c33-b9bd-ba7ff56b4a3e", "indicator--cf923c56-ab2c-478d-9922-881d9be40740", "indicator--9e14e489-ed9b-4608-8808-35bc54a8cdf1", "indicator--ae95612c-232b-4d08-acc5-773f4ceeb0a4", "indicator--3187be78-72e8-4e29-89ee-be1c504b0f77", "indicator--e73bec8f-3655-4a6c-b5d9-c1786d9fbd8d", "indicator--895130fc-4e33-463b-96ae-e4bd8301e922", "indicator--e26f9dda-d15b-4dfa-b5ad-9c26e72dc869", "indicator--0c79b6d3-9c87-4fd6-a7c6-46386a46624f", "indicator--09e466de-0183-4a0b-92aa-53b103b03866", "indicator--5aee2daa-9204-4930-a584-9bced33b4d47", "indicator--188dce6e-c1dc-4f67-b722-3b10927cd6e8", "indicator--26c137c7-7251-44be-a932-06dc982aa814", "indicator--aa8c8979-0fa8-41b3-9197-bf28dd9ef22f", "indicator--fe9f43a0-aefa-439b-9466-125956620f53", "indicator--6e9817b6-813b-46b9-960e-e4641535595e", "indicator--4f755db6-f5d9-40d6-904b-864c576c9ea8", "indicator--6cad25b4-d3f4-43ca-bff1-1887835f00f1", "indicator--114a71d6-3328-436b-9c79-cb787674a72a", "indicator--86a090bf-1bd0-48db-95a0-f0fc770a3556", "indicator--c2e414ad-a5aa-4496-bee0-82ca1ad4c85e", "indicator--e84a751e-5752-48e0-a42c-42207220258a", "indicator--283842e7-19cb-40a3-a028-c489fcb2cdf3", "indicator--1ff220e9-6f80-4f5c-8cf6-83ec7f07224e", "indicator--6f472967-fd2d-4abf-9938-bb778e2ce8a1", "indicator--76f856e8-1606-469f-8679-b9c38c2ba8a1", "indicator--ac00b198-64fe-4fe8-a1b6-cbc9f6a2f71c", "indicator--bb631354-76dd-4c69-86fc-b16931ad1b85", "indicator--70c876f9-d1e1-4312-bc18-8c5696709249", "indicator--2b03dc32-0780-4328-af26-8e641841b860", "indicator--71499085-616b-4a57-9706-b0876377df83", "indicator--7a9dd18c-78cf-4247-b219-12a5571e70ef", "indicator--a75f1d57-e0f5-4704-888c-4608866cc3f5", "indicator--210947ea-cbc4-48c9-bf30-df9cb3c1523c", "indicator--f96867b9-41e0-4462-9c20-fc4741deb797", "indicator--b85b4b2a-a563-41b2-b9f0-294a2700f7de", "indicator--49c9e205-fd36-4a60-95d4-16fff0da8f12", "indicator--6d971520-1f6f-4e52-acf4-aaaeefa40cd7", "indicator--0627e13f-6e6c-45b3-ae8d-ef5beb13065d", "indicator--929d76a3-7a5d-4592-8167-a9346f0fcce0", "indicator--779d8a86-d132-45cc-9caa-8167656877a7", "indicator--ec83737a-fd9d-4def-a0cf-1ea2cb752387", "indicator--02eb65bb-8924-4209-a30d-a3871b760922", "indicator--81de64a3-ec2b-49bf-aa62-cd04bfc0faee", "indicator--f11e84df-b2f4-4a02-b071-86ac43086256", "indicator--74a9abd8-f4ce-4611-974a-9a4801d3089a", "indicator--f0cc09df-e1d8-4515-a371-5ba2568bfc2c", "indicator--dbf0cd95-1636-464a-b4bc-885e932016ba", "indicator--8e4e9870-ae27-407c-85f8-adfc735fb2ae", "indicator--c3947b35-58f8-4f8a-afc6-58bc3049ebdb", "indicator--1dde7e9b-4f09-4023-8297-ecaa8302298d", "indicator--b61affac-e1d7-4f7f-98f6-f52d825a2123", "indicator--ba4e1c11-e6f6-4ea2-b960-15f8cc554fe7", "indicator--08d8cb18-6c9f-48ad-a045-957d92d3ade4", "indicator--9e17dcda-d8e4-44ad-9a7b-8cd54b8558a6", "indicator--128119db-c4f0-4064-bf5a-a573ef2e2531", "indicator--c6601d64-3d70-4ea4-81d3-10cd72ff6964", "indicator--39f10b94-7baa-4be9-a226-2eddbaa85dda", "indicator--73839636-e7d2-466f-8e3b-04b9048a5727", "indicator--24dc5647-34d2-48c5-b9d5-20bd9c473efc", "indicator--d4d94092-6b23-4e51-8103-034e8671831a", "indicator--57d8a74b-59ab-43a7-b30f-b3615305f09e", "indicator--f6747a45-c6ef-45c8-9eb0-7273e46a2578", "indicator--b15b37b2-cb4b-480d-b351-5724d4091325", "indicator--28b635cb-d7d8-47e3-8199-576cc1ea1130", "indicator--11a6b73d-f131-40db-8116-f0dea97a9324", "indicator--1fe850f3-f015-45e6-a038-cf632da0e886", "indicator--515f3ec7-7cdc-4d06-b926-167c527a8cca", "indicator--d27fcf5f-f24e-40cc-93d8-a9b1a1136396", "indicator--73897a3f-3a59-451e-9d0d-71ddd0262f29", "indicator--0f8b425d-3c4a-4e24-920a-c16306f0b38b", "indicator--0901da6c-4fa2-4bbd-849c-131fedfa09c6", "indicator--9aaccc1f-a56f-4327-ab78-8342984ff6a9", "indicator--2e406f46-5f7c-4815-8cc4-48f972330c78", "indicator--6327759b-2601-4a6e-b2b7-09ada56b8e84", "indicator--b8773de0-c10f-4557-8bd2-f11d4bc66e95", "indicator--3ff55a2c-637b-4328-b0d5-917ae4765ead", "indicator--d294fa47-2900-49af-8e4b-ca91aa0c8723", "indicator--1b9e1034-daf4-4f7c-8d23-19a09b151f8c", "indicator--b03156c7-afd3-4e98-90a2-06eb4d8d5908", "indicator--511b4ca4-448f-41a2-a0d2-ac83f67be7cc", "indicator--c8aaa1d3-a2bf-42a9-9ae3-c196380570a9", "indicator--ba493d0d-ed4f-4475-8899-a614dbbaba16", "indicator--00eed4b3-675d-4a2c-bde8-6c872337317f", "indicator--be494564-55b7-449b-b37c-111cfeffec2b", "indicator--bb459366-4ee7-4d97-8d2b-c803fc0235ac", "indicator--4991d408-0ffb-4cff-b79a-f396f15863ab", "indicator--6c58fa4f-3f61-4b91-98d4-83b78c48d296", "indicator--865ce832-eb9d-4075-bb27-14089e63a145", "indicator--c9a1d5d2-0bda-436f-af97-8d8b89881154", "indicator--1db45b42-fd04-45fe-a065-ef6a9a984e4b", "indicator--8a15192b-1e27-48f3-9f53-56da054e97b2", "indicator--d6641b2a-dab3-46c0-8355-c8799c999f2c", "indicator--2850388a-f609-4bf5-8e1b-13390d401c4e", "indicator--858665db-195a-4caf-a955-215e2cbcb396", "indicator--bc46a4be-a733-4b52-908b-e42717686f68", "indicator--23637e26-8679-4388-97fd-4f7436a2a40b", "indicator--77d69403-a7e1-42e1-9408-de4e75f41d68", "indicator--2b9250c4-d1a1-482c-be23-69177703f993", "indicator--38a8bcc0-1307-4c6f-b83e-36519d3d8e46", "indicator--3305cdda-832b-4837-b03c-5b4e10757b7f", "indicator--0340e50c-eb2a-4253-8495-48718d7e1b89", "indicator--b5ea9b92-1f14-4560-b641-c25e86c1a706", "indicator--70189537-5e11-4f81-a160-fe5fd3295e51", "indicator--ba3656ec-471e-454b-ae96-514fcf7e1a86", "indicator--d7865397-9b8c-4404-8a35-ff84a6611867", "indicator--85351c46-6907-479a-b6a5-7ad035a17487", "indicator--cc92bbd4-0605-43a7-b6ab-97c1b4bb88d5", "indicator--c92146cf-1ade-402f-b201-42281a3d6d10", "indicator--7a711115-956a-407b-bce3-0b007022185b", "indicator--ef63e34b-fd7a-4c0b-9eda-8fe5658da78f", "indicator--96e6cb49-503c-4c49-80c8-ffc69ea38dca", "indicator--103f3f95-0f64-4561-99c7-97ed4dfb4142", "indicator--135881fa-3022-47ba-a67e-fa34ca1c33f3", "indicator--6fb466d0-a4cc-45ef-9dce-30ce71e5f1f5", "indicator--3289adcc-8317-4262-82a6-21d6fd052f76", "indicator--c9205e10-94d5-44d3-bf2c-f702130b869e", "indicator--cccd2ece-792b-40b6-8372-8e37948099c1", "indicator--3c89497f-3757-49b7-b9f3-64a492ffa4fc", "indicator--9a009b31-c5ef-448e-9816-8d4e995990f1", "indicator--134b2816-74ee-46aa-9691-866729c4e6cf", "indicator--fc9ecdb2-bfc1-4dc0-b21b-836508d90983", "indicator--465332f6-62dc-4937-95be-6f8c2df16efc", "indicator--5dc22d41-3415-4864-9d2c-d41b69905c65", "indicator--5b50206d-5db8-4312-a1f9-b87f14282d08", "indicator--165e4d96-006e-40d8-b581-9eb31e4f99dd", "indicator--ac24b681-0af9-42dc-993d-03172b3b6113", "indicator--d57d0893-6117-475c-9a0e-5b4643826157", "indicator--fb9aeded-584d-450a-8986-6693b50602c4", "indicator--efb86a8c-eaf8-46d7-8bb3-d60a2387e5df", "indicator--f437f8b5-eed6-423a-a107-30b4a87162bb", "indicator--dd55f3eb-b49e-459f-9f1d-46f78216744c", "indicator--df67f8b4-5077-431c-9fd1-0cdb81ce038a", "indicator--fcacf67b-f26b-4d4f-819f-bbc24c5faa70", "indicator--c4a03485-c348-42ef-a19b-e0ca13df751f", "indicator--264e1577-8eea-4f3c-af90-2fc17d990b10", "indicator--cb40274e-331f-4e62-9598-ef0feb8c263a", "indicator--3fcaa392-1894-4d3b-9d9f-9435e36a1eb7", "indicator--59d6be9c-06e4-4a18-8a95-4cb518fb8de8", "indicator--601f10af-e00c-4627-bcdf-25bcc554855d", "indicator--c2d512b7-ae3e-409a-8abe-9f236bcf69aa", "indicator--eafd7942-9448-43c3-9283-e8da9ce40556", "indicator--84a10061-e773-401c-9a6c-528d0fec0190", "indicator--b12300fd-6eda-43e7-a4ae-862f46342c04", "indicator--3dcfc730-c4af-43db-9eda-8d87ad46646c", "indicator--d4b7ab75-fd59-4605-b0e6-46de5dddfa62", "indicator--9a9390a1-3c43-48cd-8222-5cc122e91d26", "indicator--41727f57-f710-4186-afaa-eeda73dd3c44", "indicator--bc055442-fa6b-4493-9215-8139536daf88", "indicator--c1e87686-a055-4583-a36b-c80bea8399a1", "indicator--511aa3e1-0000-4567-9f0d-0f6407eed2ab", "indicator--722a219d-404d-48e1-beff-591d5430abc2", "indicator--fc539b77-db25-41d2-9395-2d2f276e453b", "indicator--07ea0433-d54f-45f9-8295-fc7f6fea7218", "indicator--f60d0be0-9b00-48bd-84b3-ae65099ee29a", "indicator--0ffaac3f-eaae-4fda-af28-09f4b0133eb8", "indicator--2ba0b3d6-bdc0-4212-a5e9-3ce32e4fff43", "indicator--084c5032-b9c6-4d4f-87c8-210bb17d0e7f", "indicator--ab0c3c5e-b42d-44ff-bc90-ca619f9228b0", "indicator--1f5e629a-4d93-4f25-8262-4320abc90699", "indicator--d5ee123f-0096-4802-be9a-34a280e650c6", "indicator--f411cd2f-3540-477a-9dcc-ea52a20a5990", "indicator--74406235-ff14-44f8-98e2-12e59ddb9e96", "indicator--f74444ab-865d-4200-b62e-49272ab1a459", "indicator--74d5e432-014c-446b-99ad-cc26c1477db8", "indicator--fcdc8e94-b231-4ba7-994f-4e465d59745b", "indicator--33526d32-d13f-4230-8568-d74a5d01e783", "indicator--908b31ab-543c-4a2d-b69b-66fffd30a935", "indicator--54e2bc37-163a-45ba-a0fa-a7b8806d9cb1", "indicator--2ab53992-86df-4411-a1ec-9da3973401cf", "indicator--f6daa12a-2bff-49c9-9ed8-498899b5e4fe", "indicator--3d7a8ea1-b383-4862-8da6-5b11638114c2", "indicator--75af47ef-4edd-4918-98a9-84acdc48199d", "indicator--a3a13fbd-51e2-4311-90c1-50761ff3e6fb", "indicator--8d2a0020-1bbe-4ce3-81f2-d48ee65e22d2", "indicator--6a16a25c-36e8-45f1-b2c0-6699b0140e29", "indicator--7742fecc-0f76-4bdf-a252-02af6a8d94e7", "indicator--960a4668-366b-407e-bb63-55039cc479e7", "indicator--9741d013-184d-43d0-b7fd-8c9665f9f695", "indicator--1ca56749-cef4-4316-941a-25a6826def2f", "indicator--e4b39735-5d84-4aae-9256-310e3c55bdf7", "indicator--2a90cbe2-5cdf-48a1-944a-be3a995683ee", "indicator--8677d2ab-544c-4dee-a1bd-0e10f5f3ff57", "indicator--d5e10781-a915-4c80-b981-805a68a04bb7", "indicator--35c2c3b6-ece2-4b5b-b2af-4e4e8adf247c", "indicator--d98c40b0-c586-4edd-b676-7e312248536f", "indicator--f4ae34b9-fb2b-410a-9a03-46319b971de9", "indicator--3039acce-def5-4332-ab01-bc314bcbbbc6", "indicator--81e23408-599e-4c0f-b6ab-4f07f4f460bd", "indicator--d12d944f-0b86-44f9-9d37-6acb6ab53d0d", "indicator--4fe4ab76-6383-46d4-96f3-5eee284d7f81", "indicator--868455b7-4ac8-44f8-8c4f-c285bebe9783", "indicator--a71588c3-19d4-4477-ba8c-84e212928da9", "indicator--d47253e1-3f52-460b-99b9-719c5fa8ac9e", "indicator--cf0fc82e-1e71-4b93-bba2-7d0ce05c9590", "indicator--f46d0ce7-93b5-4c4f-879e-464b4584a125", "indicator--c965b4db-2e2f-44bc-b451-b26bc3a214de", "indicator--0f278fce-6351-4bcd-a463-04c4c2dae9c6", "indicator--713edfe0-53b4-48d6-93f0-d01a00d97f86", "indicator--b6df843c-2e62-40bf-85da-0f80a3c4103e", "indicator--7bec1cad-ef44-4dde-818b-d47aed6a8423", "indicator--f1317487-40d9-47d8-97aa-4e485fd8011e", "indicator--1e62e2b7-cdf3-4865-8f77-1c0351d40162", "indicator--f36d20d7-9bfe-4ae6-bb24-de02441a99dd", "indicator--153c5674-ffc7-4f19-80eb-c6c8aeec2ddd", "indicator--5b85ea72-f8f4-4e0f-8ab4-8a10e8bb6d1d", "indicator--3817f2ff-8864-4473-9736-a63ec5f6c564", "indicator--7e5d02d6-6997-4ae3-89da-b21f75152744", "indicator--266dcb62-87d1-4973-8b91-8b20c01e2552", "indicator--c0500af3-cd89-49b0-8ad8-a9a59205b3ed", "indicator--1fb15f9a-0548-4569-b322-c240729c916f", "indicator--6d7607b4-5a6f-48a9-ae3b-90a84c57a6a7", "indicator--40c0793b-4a73-4d89-9b0c-8162cedd2c99", "indicator--54da81a4-2fb2-4ca1-8af6-c64bbac36dc0", "indicator--b1a811d3-afe8-4f40-a588-f816db627c5c", "indicator--9c4be643-595c-4991-b1e0-d9814afd67c9", "indicator--6674827e-217a-4a21-8a73-9e5a3c571a1c", "indicator--c20a6c61-0305-45d7-a087-c2b50007e860", "indicator--0cfdf28e-25d1-4293-9697-9221c4cc7a54", "indicator--55095bad-bf6a-4c28-ab5f-00080b99e05b", "indicator--4a2b341b-466a-418a-97a5-13c992b858e4", "indicator--3e9f6b96-6bbd-4797-bb85-40632de0184e", "indicator--6829d90b-f723-4118-b136-81fda8d5114e", "indicator--c59b9abb-e072-4438-9e85-058a63b6883c", "indicator--e05ec267-8128-4874-b02e-7c244aa7e392", "indicator--6f485416-59ec-4249-b42d-33ae6c8eba14", "indicator--e855d187-70f9-4bf9-876e-f2bb968242f3", "indicator--f9200f64-5e02-4047-8f09-d817202f24d4", "indicator--f9360188-a488-4612-943e-b07d6896a634", "indicator--357618cc-de5e-412c-9832-7e448ff7b1e5", "indicator--34fd378c-7eb0-4724-b935-3407033d9831", "indicator--fc332b7e-0c25-418f-bf08-4f6446cdde17", "indicator--698bbf0f-ac26-41b7-9152-0e300593af3d", "indicator--50934aea-b64f-4424-b724-03744a02f1c2", "indicator--2466c15d-b79a-4bac-880e-80b44f487a43", "indicator--73c08eea-1c95-4c1d-a053-917cbd4e0766", "indicator--fc9822a7-592e-4e6f-865f-0b8af1de8bf6", "indicator--e51b7f4b-0f65-4f0f-979b-f528a89d347d", "indicator--82fa3f3d-f3f1-4aec-b0ac-358525a096ae", "indicator--cdda4044-b26c-4c42-bafd-15a64b4e8dc6", "indicator--53bb9b86-a0ff-46cc-af65-b065a5f1a23a", "indicator--c663090c-6853-4f20-8597-fbdff3195637", "indicator--cecde680-37b0-498f-8a3f-33f4fe1445d2", "indicator--ad466c2e-e675-4a33-8f12-b360205fb53e", "indicator--ada25d40-ac8a-4e7d-801f-9c9c176f9bfd", "relationship--bf21d2d3-d430-4767-814f-a2b903393109", "relationship--23040ffe-d798-4c42-b22b-25cc9341c276", "indicator--906ac774-cb98-40e5-bcad-8d88a769ceb8", "indicator--aac6ffb1-b691-46fa-8fc4-16c7e8cf2085", "indicator--e81d9d7d-e194-4f78-a410-b9699d9dcefd", "indicator--7d691f33-ba3a-4aa4-b1e1-f21128b2969d", "indicator--db4b11b1-8879-41d3-bf44-44cb1b3b73c2", "indicator--a9fe59ae-fb53-46ae-b57b-f1415750d423", "indicator--5615863a-03f2-4ef8-8fb4-8f900660b68f", "indicator--b32d17ea-d685-47aa-a2fc-987cdb2ab2e1", "indicator--5d0e3268-fb64-4cad-87f3-37c58f57b40d", "indicator--b2e3125f-32da-491d-bbd5-cda20f2e6c64", "indicator--927d79ca-eac2-46d2-ba3c-66b22e0dff45", "indicator--4dce5d6a-8bee-47be-add1-064e5348f0e2", "indicator--b1b73b76-4c60-4d29-9072-645e9ce380f0", "indicator--320b1133-c23f-4317-a771-7f6a27b16d15", "indicator--7b7e086e-0075-4dc6-94cc-4c6a20517baf", "indicator--0077347a-2427-4bc8-97f2-bb6b3b70c8fa", "indicator--f1265d37-c13f-421e-a0e5-804c2a7bd5c0", "indicator--248b7797-3aba-47e6-aeed-e1c2afc435f1", "indicator--e27c9048-0f61-4fff-8a26-7f7f4270aa9f", "indicator--c6b4a0f7-dbdf-47a6-baa5-5123d8cb5289", "indicator--22ebe115-843a-4cf3-95b9-29c274993240", "indicator--20beaf4d-f313-4fde-a855-0d3fb65bacc6", "indicator--f20965b9-cf7f-42cb-97ea-444d2a50e3e8", "indicator--41baf088-a4cd-4b60-9d07-8053a190a5f5", "indicator--1e704080-0417-446c-941b-a38197779b95", "indicator--d6a3b447-e3f1-4386-b561-c95ef45d0c1e", "indicator--373d1c6f-3ccc-4dfe-a0fd-fb9e9f427344", "indicator--834a967a-a427-44cf-9ae8-c229576a4be5", "indicator--3c3e72c2-2e58-4316-8f92-945b2f997c3a", "indicator--ea8b590a-e5f0-40ce-b70f-d5187595beb1", "indicator--75b4c2eb-ac67-44aa-bbef-eccd28a6e8be", "indicator--23907e7a-86d4-4b28-930d-3bba00b70f0f", "indicator--fcf5bb49-760f-441c-be43-648a601c929f", "indicator--cb71fa6b-4cc6-4f57-bdcb-9272458dc136", "indicator--b52b7ad0-952c-47aa-a4f1-7f2c0cb58ad4", "indicator--a0710e7e-33f5-4473-8ead-eedbccb916a0", "indicator--bcf8f37a-74fb-4004-b767-6669da3cbdc6", "indicator--711c29fe-6917-48ed-b4af-02a09a2f3b19", "indicator--ecaabe8e-d76a-458e-9dc5-d2a5931c44c6", "indicator--0f45caad-8cb0-438c-99fc-a10d5ead37d4", "indicator--cbc85406-91a1-457b-ba13-c6296fe15343", "indicator--8f4e0123-bf24-43a9-97e1-aa564d7dabe1", "indicator--b2752cf1-86d6-4d9c-bac1-b82e8e4945a4", "indicator--35ee6147-a138-4a9d-b1f0-f929276a8813", "indicator--56a236d7-10c0-456d-a5ec-25ef409f8096", "indicator--5c39522b-3cfc-4b8f-9afe-6615e5111dcf", "indicator--70fba2e8-d0de-4b0f-bd83-4c15b8ed8f4d", "indicator--865a1933-73cc-47d1-a4ee-6b769a91b5ad", "indicator--8a10d3ba-d274-4f61-a45b-3a478eed4449", "indicator--d7914c98-cd39-49cb-9007-e59aebe61c17", "indicator--42b993e3-be06-4960-addf-4e770892fe8e", "indicator--acaf1f4d-e002-437d-b9b8-d898cfb826d7", "indicator--5e2f9a8e-0a6d-4e69-aa8a-31a2b572daa1", "indicator--8d0e65f6-8d78-4317-944c-fc22284d7e17", "indicator--df9e0a5a-4e19-4c53-8479-bf858109b49f", "indicator--2d692980-13ff-499d-9458-60bba2734489", "indicator--5dbf7657-cc4e-4de2-b5a0-384a07bd3306", "indicator--2e1e1159-2d8f-49b9-9b5f-ca3a5cc1d3ec", "indicator--dde5f687-99a8-46ca-9239-9c68f69997a3", "indicator--3779431c-9091-469b-86f6-503709082188", "indicator--780b8e2e-92b9-48f2-81bf-8b3e1c5c4f28", "indicator--9ab9c9a9-79e5-41d2-8d39-92962ec261d4", "indicator--a05d633e-3efb-4a32-91c6-4c88f33af472", "indicator--a25cf364-69c0-43d3-924c-16b5600d9a96", "indicator--5a4880d9-9914-4ac6-829c-64b0f1328989", "indicator--4ed660bc-3104-4fb4-84b5-76989669d304", "indicator--99a5e456-5dab-4a53-a08a-df04a5dd3d50", "indicator--63b0a079-9c34-454a-a88d-8fc7eca4f8c5", "indicator--3114ec4e-9b00-4405-b7a6-0ddaf7620b3a", "indicator--4bcd0e27-bfa8-4e34-878c-7967d2e49218", "indicator--fd2f0fd6-b700-4787-aac7-747c1a9b107f", "indicator--68d97833-9e72-4d91-9817-6168371f1ec3", "indicator--8f8da917-64b0-46bb-82c0-49be270aff42", "indicator--90fd4db4-bdd7-492e-9bcf-52ff5f57b89c", "indicator--91e0ce32-3849-493e-a2b8-cc60670fe92d", "indicator--80082eb4-7576-4981-b6c5-94a5d67e0adb", "indicator--b5527098-ee0f-4c6a-ac43-91daafe8b838", "indicator--a08e409f-35ff-4c6d-93af-9092b655ee3b", "indicator--16f0270c-172f-42a1-9e5d-983b06ceb7d1", "indicator--1191388e-0b3e-4243-a8d5-90b9ee82f219", "indicator--4eeb4718-e830-4604-959c-0c40ce1a7032", "indicator--09acbfa6-0ae8-483d-93f1-70abe98f763f", "indicator--6d030435-cfff-45b1-8f5e-ce1e27bfc0d8", "indicator--64f2042d-7364-445d-8db7-2d8bd3b12a83", "indicator--eab58c1e-0e42-4c7f-aafb-1ba768eaa85d", "indicator--4fb66674-a16d-4cd3-a68d-035583f41420", "indicator--5f36cd0c-5494-4c1e-a685-a347e4aa0a09", "indicator--e608597d-217d-440b-957f-934fe25d8aee", "indicator--0d8bc563-def2-4569-b63b-0b51985f984c", "indicator--a794085d-bda8-4b13-9dc0-8908816317e2", "indicator--b07d1180-96a4-41ae-bb58-055f3113b584", "indicator--fbbcc973-2057-4834-84cc-6d163192e983", "indicator--8e7d69a1-2b75-4697-a272-edeb6f67afd8", "indicator--e77c589f-98db-4e51-a2fc-b0fa87cb73a4", "indicator--0766a6a4-f9d6-4bc1-9a8f-3fdafbd039f3", "indicator--ad321873-5f1e-4c8e-8735-6e64d9623208", "indicator--2f6d66d9-e337-4e0d-b3f5-404be6f352bd", "indicator--3a043b72-21bc-417f-8552-907f7fc80511", "indicator--c59a3f35-35fb-4b04-8adf-f0b005ea6fe3", "indicator--6209d987-51b7-4c01-9f87-c0fcfa7e5266", "indicator--f49e8a77-ed70-4000-bd75-5dc7aed60b2a", "indicator--1b720eaf-64cd-4a17-93f6-c5bf9778e976", "indicator--40192b65-b8f6-4987-8a83-1f738bf4bb1e", "indicator--d519a617-fe7a-4f63-aa8b-e9a89fbc8fa1", "indicator--20afbdc0-907f-4380-8438-15a4330376ba", "indicator--0e84693b-da37-491e-b4b2-ea6e8e0e1b1c", "indicator--96653f90-32d7-473f-b0cb-07276a0826a9", "indicator--e59868e5-8d61-4679-8e3b-2f1ec444ef1b", "indicator--ca3c5655-6083-4bc8-8761-4a78c534a4de", "indicator--9cc52cd4-c61f-498a-bc0e-4087d1d7cc9f", "indicator--72d56b3d-aa0d-49ef-aefc-b68fc4d8c82c", "indicator--d486dc6f-7572-481d-a01f-d4afccbe90d7", "indicator--103fa9e3-cda3-4122-8338-7b60b4f556bf", "indicator--ab2e6a5f-b489-4e74-8904-f7e29d44c838", "indicator--7c95d1b1-67d1-4820-9073-3382734716b1", "indicator--fa32db3f-4e21-452c-a1ed-beb1e2c5b280", "indicator--00dad5a9-bbca-40d1-95c7-fc315c5910b7", "indicator--f60d31d3-1a93-42b1-a829-85dea0472cd6", "indicator--fe69a808-ba4e-4049-aab2-07d591ba2dfd", "indicator--78fa9e94-0501-49dd-8203-28788b5187df", "indicator--0020eb97-b6eb-4f30-bf7b-0dc1a9e6ca05", "indicator--a1ff0e72-eda2-49f8-9218-b44b1c4fe134", "indicator--9c61a77b-905e-495c-ab1f-e52da93e6bfb", "indicator--b082d014-1884-4a90-b27e-2bfce6203a32", "indicator--fd0c9e0b-388c-41cc-b9d8-0106142538ff", "indicator--c6a9df53-994e-4e58-be07-bcd1a6fa493e", "indicator--a11a18ae-bb92-4b27-94a5-5a01baf73dc7", "indicator--cee49e23-4e2e-4347-b291-c611439a9a87", "indicator--06b6deaa-a980-4d99-ac1b-6ef9d2b167d0", "indicator--30dc8c86-83f6-4a6a-b753-365e52964501", "indicator--839c428a-9bfe-424e-b27c-f56b146ae9d2", "indicator--a44e7c14-c099-45fe-badf-b37ac9e9972b", "indicator--bd0122dd-9046-47f9-abe8-33e23577f779", "indicator--e5ce0ee0-f3b4-47eb-8a5b-a84c22e800be", "indicator--edf67daa-996e-4433-a74e-88e0e774009f", "indicator--af1e89a7-da5d-427e-962b-7f7c3b4dbad3", "indicator--beb8b556-d091-40a2-a3f0-3d5968ef47fd", "indicator--04fbad5c-f170-484b-bf27-31ebed671b3a", "indicator--9f5b7421-297e-42ff-ae56-7a9989461623", "indicator--2202d6c5-1e40-411c-af03-48cf9bec37c8", "indicator--17200fad-ce59-49f6-b4d0-42327eb4f58e", "indicator--ff407d70-df1b-4fd3-8fed-1daf47a4c80e", "indicator--a06eec87-023e-46b3-b28a-2323661176f6", "indicator--eaa2a66c-169e-4e07-b441-097f2bba838f", "indicator--bd453179-ebbf-4b4b-91b7-6054c23a1224", "indicator--fdccc113-5ed6-4105-8a32-dccfb4b3f248", "indicator--d6ed60a4-e670-4b7c-bf80-fbe4fb4fa120", "indicator--c9f23502-7c26-4583-9caa-4d9f5a2cad0f", "indicator--cb59c73e-ff4b-4e8d-9d6a-576ac0c9892d", "indicator--b266190b-c5cc-4062-a084-9ffb2254a0d7", "indicator--4aede7cb-0f1c-4939-9a30-47d096f4fbb4", "indicator--bcf49a16-369c-4dfa-9a94-aa69f914410a", "indicator--862fd9b1-0f08-48d1-b654-d4ad13306e7a", "indicator--5d6a08b0-a3d1-438d-818c-aba5ed4dc535", "indicator--a022aadf-0f1b-489d-9432-2cb73aedf9af", "indicator--99a82b03-f373-49f2-af4d-e1ca50520fe6", "indicator--805355cf-9178-4dd0-9d78-8954a44c8674", "indicator--75479223-3ca8-4483-8873-8b805656f997", "indicator--f32dd085-9277-4437-97f0-214b5dcfdf84", "indicator--aad96954-b7fb-4e8c-a2c5-7bde76016957", "indicator--01537321-4e12-47d3-af91-cba533d80517", "indicator--bdd0d628-0e36-4994-a096-96c5fcacc7aa", "indicator--2a05b0ae-18c9-47f8-98f3-5d32fd4e0846", "indicator--c22e5138-1e14-4a66-b202-092171c885fe", "indicator--5602e114-ecb9-45a7-a1d2-820ae7338aec", "indicator--f57bbf94-1f6a-4ca6-955f-d8caeaf101ee", "indicator--2f30f90c-0166-470a-bbaf-5e5eaa45b5d8", "indicator--eb58b73d-a687-499e-a0e9-a97895934f86", "indicator--6f9fb9ac-efe9-44e3-ba05-40be989722da", "indicator--a23ab418-aeb0-463b-9fc3-93f100e017ff", "indicator--862a69c0-db4c-4b41-bfa2-0b6fa76bb53d", "indicator--4de7b2eb-fbbd-471d-9cda-4c7997587d77", "indicator--01306337-3b70-4bfe-afd8-f176238a6b61", "indicator--c4ccc427-22ee-4407-9feb-dcaa476d46eb", "indicator--56d24fbf-1387-422d-b813-619f17129608", "indicator--25f73ad3-f886-491a-8b86-d25b26cb8f23", "indicator--ad03912c-4e84-4829-be5e-72c03ddcef84", "indicator--f69b9d3f-c887-4477-901c-760410f3a20c", "indicator--31c50a6e-b560-4bd5-9e50-b9866b301d89", "indicator--5bbc45d7-c975-49d7-8ab2-10e6d9fe4842", "indicator--b10c9298-352b-441c-8134-54aab841dcbd", "indicator--51beafc6-89fd-43b0-9295-9872d8f5c6f9", "indicator--6a3dd87e-2407-4bcd-bcec-01fd820ae3bf", "indicator--a892795c-2d1d-4199-a297-71b104a1d2c9", "indicator--85bfac98-867c-415d-86c1-384f67761a1d", "indicator--aea1c39c-b5a3-4338-9a87-5aedec62ddb9", "indicator--ab85ad9a-7b51-484f-9d15-dd76cf377b05", "indicator--f7324ad7-d07f-4af5-8e97-d6cec66e4d4f", "indicator--d80b4370-05f2-4869-8d42-a9745169bb51", "indicator--750c970f-c0f8-4f8b-b03c-5e049ce2d003", "indicator--4e3a43c5-966f-4cf3-9880-b93eae335066", "indicator--4334514f-7ccb-4e69-8d70-61d4b10e11cc", "indicator--5f063d80-21eb-498c-a479-c2da274391d2", "indicator--55e2a88f-eeda-499f-8db4-56491202f215", "indicator--9982ecc5-dd48-4443-b00f-0def187d77d8", "indicator--6a162f0f-1273-4f53-ba19-951abd723fba", "indicator--509eae73-708b-4f5d-9fe4-59c0461afde7", "indicator--9e00ae10-5283-487e-bc07-6513d7072b64", "indicator--a88ad123-d81a-433f-9aac-cbe733c25b52", "indicator--49765a86-ed56-40c7-a5bf-69af07f9b0e3", "indicator--7a74015d-2334-4860-9219-e39e29adb49f", "indicator--bba4bae3-44e2-4324-b038-cf499831716d", "indicator--8c59b579-d85e-4042-a267-eefc4e2d7bd9", "indicator--f0524de1-f850-426f-b0df-0051a379ac6d", "indicator--6b22943e-c593-4acc-b898-7ef3998ea8f4", "indicator--9d8e34a3-51f9-4f51-9630-e183daee5321", "indicator--c385c327-17b5-4527-8431-d2742d66117e", "indicator--fbe8b3ca-3215-4f38-9eea-b57cae4fd9ac", "indicator--f4ff22dc-d94a-47a0-bf79-cce588c8bf4d", "indicator--52463672-abf8-4dc8-853f-195d5a49b56f", "indicator--2295b7b2-6c14-4229-8711-aaa1ed7cbcd3", "indicator--f9cef751-f4d2-4948-b76b-d6f8d197bcf0", "indicator--6ece02ab-3230-4ffb-9f2d-1d489fcd4100", "indicator--bee074ac-889a-4ae7-9c83-ba4900d0b44e", "indicator--b5ba6c83-53ef-49f1-9476-b28a5253fc1d", "indicator--e65f496c-5922-437f-ab3d-d6d2a222ea3d", "indicator--be0115d8-583d-4cfa-90b3-dd7504e70dd5", "indicator--0ad43e3d-1965-4f43-bbd5-79cb4d6f5f4b", "indicator--bc217ee4-5754-4963-b5b1-e8e9f5263095", "indicator--ff68c2ff-1230-4bee-b133-9902a81ef079", "indicator--9714109f-0030-43ba-80b1-3c600d4d5dff", "indicator--0386aa43-d74c-473f-b01e-81102ecbf611", "indicator--b7998875-0319-4b33-befb-a878cfc23eea", "indicator--73c9a731-9f6b-4040-aa5d-6c4b5546492c", "indicator--6a6f743a-79b3-4209-b1d0-91d88fcdbed6", "indicator--0b39f20c-6b7d-49df-83cc-22a1aec85713", "indicator--6b953236-98ab-4fe8-b693-45d3485743aa", "indicator--9e16403c-1e46-48a3-9868-b3dbb1151a05", "indicator--a55fd820-492e-4e26-9cc3-49a700cec04a", "indicator--73d1e618-d052-479a-ba54-59db5f45fee4", "indicator--0975112d-1106-4591-bcd1-6428eb84436d", "indicator--1cf82a8b-2764-4fce-b308-592429c0495a", "indicator--64d679d0-4e79-4207-9168-0083202c6d73", "indicator--902486c4-70e7-44ba-8281-e01b5c04fd66", "indicator--58a2074a-f5d2-409c-9065-7499674ca0da", "indicator--04c21d54-601e-4499-b667-0e536a17166d", "indicator--3092f86e-2d97-4e6a-96a7-5672d85d3ad5", "indicator--d490b1f3-b58f-4a31-94bc-616be98bf715", "indicator--2570d425-19e3-43ce-84ee-7e028918f9bf", "indicator--f8856f74-689b-4948-a8c6-7b0ef1b3472f", "indicator--b63e54c4-d64b-4626-b827-aa01967d1e33", "indicator--877ca6f8-83be-420b-a7d0-6c2e579af17f", "indicator--1311b4f2-36d9-44d2-9bac-ac1d100c6381", "indicator--40c77751-ea48-41a9-b953-ccea72d738c1", "indicator--0b3e6313-4a71-4dd2-b02e-5d08390eee83", "indicator--18e249bf-5942-4831-9283-985a36f2383d", "indicator--a20b41a6-a7b4-4616-a63e-9f6177a63049", "indicator--e8bad05c-1e2b-4114-b2f9-bff978b60067", "indicator--457f9637-477a-482b-934e-144f6f246415", "indicator--6102cc17-be73-41ad-acd0-477d9efc6dcc", "indicator--ad985cf5-6727-42cd-8686-5cb316ad09d7", "indicator--a82b713c-7793-4ad4-9238-9a14d6cdc59f", "indicator--16cd744a-5b80-463e-8c8c-56eb9c2d38ce", "indicator--655fcc91-bc24-4d20-8d98-baa5c0c5a055", "indicator--08a48b36-d433-4856-9133-011750ce2f89", "indicator--698ddcca-722a-46c3-ba35-b0d108fbd9b8", "indicator--91ca052c-b40a-4994-84f2-d44f25e23a52", "indicator--4804433f-a700-4149-be68-d464fc02d17b", "indicator--5e1cddb8-3d06-4e47-8f8f-89762eaa3c47", "indicator--e7f17760-d5da-448d-8610-c56d0ff3f010", "indicator--4527a3ab-10c5-4dbd-aebf-c0ebfeee0673", "indicator--71f7d7bd-212a-4f08-b7fe-9d057e4299c1", "indicator--73d969a0-60d1-4040-ba56-292a1b22e890", "indicator--495c615a-a537-44eb-99a5-4865d705b69c", "indicator--37568bd8-61cc-4dfc-b283-d5b9385034b9", "indicator--95ff63e2-594f-4c0b-bdf5-e6c0d949a25f", "indicator--f9cfceb6-e37b-463c-9541-f1cd68d187a4", "indicator--cebf7418-7b95-4a8c-9e5e-f9e5dd58ce8d", "indicator--924005bd-03fd-4c56-8c89-c3fb9537a2b9", "indicator--944d9428-d2e9-4945-ad69-ab8cc3704717", "indicator--e062e897-d053-42dd-93f7-a9538498558d", "indicator--84af459f-18ae-42d3-beb3-16aee67279af", "indicator--adfa6d1b-d138-4184-b321-b2ddb602af15", "indicator--241e2151-9d89-4dbf-96fa-9b7e2df55272", "indicator--207e8201-7da9-43db-b1ca-04a93dca634e", "indicator--cf3bcb43-9ec6-4293-9bd7-9e25a5fa6c9a", "indicator--11f0e6fb-ed5e-4ed5-890d-4719361f7121", "indicator--e57fda07-0e2b-429a-b48c-f30ef19cfa48", "indicator--c29abcc4-aeba-4c31-8007-3b213142bc4c", "indicator--ec79ecb8-9d9c-470b-b9dc-4afe3285a26c", "indicator--eb4a5bb6-4d4b-44c9-833e-5e1bc060e92d", "indicator--5fb388d9-a3ab-49bc-bd4b-b92d659551ae", "indicator--c0d84813-80c0-489b-8ea2-ad5b133c9205", "indicator--3ba658eb-3c23-447f-ad14-bdecb9660984", "indicator--377fa96c-8036-4bbf-b4d6-ebe91d86d1ba", "indicator--6cdb9a55-b63d-42d7-9e7d-44c3135e7ca9", "indicator--9e6b56c8-174a-4d19-9c54-22ebb469f318", "indicator--87650cdc-6a12-48d2-89ce-01180988b16f", "indicator--1d403298-02e8-464d-a152-7c9e3ece6f81", "indicator--76598f3f-c9ee-45a3-9834-9c70590238e9", "indicator--8745c97d-8c18-4967-918c-0c0a7b5e581e", "indicator--7bf7019f-53f0-4677-aa60-6485eaaaea9b", "indicator--c775003b-ba03-4fd2-a299-59e445eef58b", "indicator--6c0d8374-0948-4210-99d8-55dd340eea27", "indicator--37ecf797-bfb5-4ce9-b204-2126edb03a84", "indicator--20eb39b7-297e-4505-be19-9c89d8ba0ec4", "indicator--8fda1bab-c8fc-4b21-a8aa-7b1284247a5d", "indicator--71a790fd-8ad8-44e4-b0c5-365546c76219", "indicator--c04bff95-f39b-415d-bbb2-a05bd9fd6e77", "indicator--89543776-7b2e-411e-86e7-bb9173feddc1", "indicator--73ff99ec-0df5-4ce7-9cca-1601fbccd9c1", "indicator--9951d893-c0ac-4496-9687-198f8b21be46", "indicator--c540b49d-1c24-47c7-a1e1-18997b5818d9", "indicator--1f466cfa-4332-4fdc-a5f9-b26b6d636860", "indicator--e315cbaf-7f03-4415-8f66-8670c7198534", "indicator--e1ba9338-c70f-44a3-8e38-1a6a352f3adf", "indicator--e460fe7e-769a-4f54-a274-546cb81dcdf9", "indicator--48da60d9-fc4a-4839-87a8-814edc2e9624", "indicator--ae83b278-9137-4ce4-8574-eed942c27ecc", "indicator--39318b88-c64a-41db-834b-eb2982efa99d", "indicator--29c4a261-f233-4712-b03f-f4feb491a677", "indicator--eb52cd72-84cf-45e6-9e8e-1840492d23e1", "indicator--b3a4033d-2a07-4334-85df-36401fb283d4", "indicator--c08689b6-88d8-4a8b-a94f-a85f537dcdb4", "indicator--09a43698-c75a-480c-bfcd-206f64d5e2ce", "indicator--3ee452cb-35e3-4ec5-87f1-f7e97a02bec6", "indicator--7f0cfd19-9f59-476d-85c2-06fb9d784fc7", "indicator--123f1484-36e6-4af0-ac87-2421d98e1af2", "indicator--277eb2cb-2aa3-4d82-bde8-43e673c39f44", "indicator--4ec5f46e-9b23-4542-a540-031c152799dd", "indicator--2aeba6d8-a067-4a33-8a80-fc3d352a4399", "indicator--e6fc2a76-3619-48ea-9064-7f39f1125def", "indicator--4169bd22-3046-4261-b663-2019b577d02a", "indicator--bfe2cec8-667d-4409-a4e0-5446c380c50b", "indicator--90f705c6-d65e-44b8-9960-ba63ee8cec5b", "indicator--c3acbd79-4f2f-468e-a9c9-379b6f841f44", "indicator--06d94060-dd33-481c-8848-939e85f9b755", "indicator--4dc48dbe-e3da-4a04-93d0-2c8b84cf6288", "indicator--9ef630a6-55f2-4e66-9dc6-59ecfe13fa65", "indicator--c649b88b-7043-4ba0-932e-dc5c299f7c3c", "indicator--2ef6cfc5-b1ad-429b-9a98-799d4e67998e", "indicator--c21a5b15-1228-45c8-a840-a1d1f9d3eda7", "indicator--43b9527e-e449-4082-b635-57fb8e2f6020", "indicator--9a16451c-a4ee-47c9-82d0-653bb89c6c05", "indicator--dd90174f-1a0d-41b1-bfc6-0e954b63a77c", "indicator--1108c923-a39a-4e24-a75e-692ecf9674a5", "indicator--b89a965a-4ccd-4612-a2e8-c803f86a89a7", "indicator--7889bf2b-ea79-449b-bd42-fdba2fb15715", "indicator--c9bf4279-43b2-4a7a-a557-09c3598a9f27", "indicator--cb777780-0c0b-4ba0-b6d7-ba4086f18356", "indicator--4d0fd9f7-f488-49f8-bc96-a1fe251a5d8f", "indicator--65cc8245-0bde-4857-9b1c-0e962145d9f9", "indicator--1ec886d9-cb70-42e4-b055-cb9aca318507", "indicator--b04d4919-8a75-4cf9-aafc-956d82b61db9", "indicator--b01f039c-1e18-4158-967d-eb32373b0df0", "indicator--f5bf4f16-ad5c-4aef-b453-f6a25478c67e", "indicator--bbf7f4dd-0dfb-40b8-a935-6e1b6e5097d5", "indicator--9d0035b3-5e7d-4e52-ae6b-85b91db9de24", "indicator--983b3b0d-addf-4b7a-bd33-4cdca650cf6c", "indicator--79fc8307-08b3-4fd1-9f9c-201b8e097882", "indicator--12188743-47f3-45ab-a0fb-fe721490e7ee", "indicator--090e10e6-622a-4d1d-ac07-7ecf69a01fd0", "indicator--f47ff082-da1a-4d2b-b630-7952272e021a", "indicator--cd69eeac-b574-4635-baf7-449e206739d7", "indicator--f8bf5334-8cbb-4c3b-a9bb-c0f8240892b3", "indicator--0f91d96b-88f1-4b22-a7d8-51d6155527fd", "indicator--2a2a8766-8ba7-4e9f-b670-62450aca2667", "indicator--0ff5ddbb-21e6-414e-a403-240d6d906732", "indicator--56b11937-6052-4ce4-be91-db42640908a8", "indicator--e6ceb161-8ffa-4e29-b2b9-033d1b082a09", "indicator--8f2486e0-4488-418c-b438-863eb35c20c5", "indicator--d8c4b76c-d646-44b3-9d59-9988cb63b9cc", "indicator--bdde3172-cc44-4606-856a-51ecb8d15482", "indicator--e23be8cf-4594-44fc-b8e9-02d42790d1cc", "indicator--3dd4f35e-fe87-453d-82cd-307df869aba2", "indicator--eb0257ca-0ee9-4ef5-b2d0-89fcce59b792", "indicator--4bf7f717-828d-40e6-8aef-c4d8c32a3fe0", "indicator--89ad1569-f859-4739-a21d-98b74b459fb1", "indicator--2432ff0f-9ba9-4917-a997-99d6b4a86615", "indicator--33ea97e2-14be-42e5-aacc-38765a8e8add", "indicator--efb75584-6401-4cf2-8205-62023737e6b1", "indicator--0969d8d2-5fb2-4bc0-bc8a-b2b5920d7e08", "indicator--7955d79b-f645-4c47-b42a-6ddf41f3eb13", "indicator--cbd34c7a-a55d-45b0-bff3-29c621abc784", "indicator--dacb355f-577b-4ad3-aa1c-18775b371aef", "indicator--a39e1bf6-9ca3-4c0a-bada-e3ec4b8207c8", "indicator--a563bc53-f031-497e-a3b8-abc5c6afde46", "indicator--61dd76a3-5e9d-404b-af90-b285bbec4f42", "indicator--dae15e42-3e63-450d-93a8-2cc0c29f345a", "indicator--c1d099ee-4d74-446a-9a67-6c4503743b3b", "indicator--a41f68c7-eedf-44a1-8450-56c7b67ba390", "indicator--84ab0c4e-09dd-40b9-890c-8136721dab4e", "indicator--79e04671-9d27-4c74-872e-97aa1ccb2287", "indicator--c6aaa406-d087-4598-969b-cf7140af6454", "indicator--b10b2b83-8a54-4704-8e8e-3753233f2d14", "indicator--0b5d242d-a8ed-43ef-8370-e8929be0cccc", "indicator--0790651e-a68f-4a3c-a0a0-ef47d4ce97a1", "indicator--5721bce5-a6d2-4c0b-add5-4f83724d1a99", "indicator--a75f2283-c49e-455e-aca7-2febb747a430", "indicator--848d1b2c-369a-4570-a6db-83cb6a5b74ca", "indicator--329a4d3c-d494-4a36-8d22-1246ed685d2d", "indicator--90d471c0-10f5-4eae-922f-5592373b751d", "indicator--7c88e9a1-4703-49d1-9be0-9fdfd105279f", "indicator--2ecfff05-a892-4c5c-ba16-64a4a31aa0a3", "indicator--fd36c839-8269-4677-a383-93640ffc30f7", "indicator--4b1e1877-7fa6-4e06-8729-edc13afb7429", "indicator--b43603ab-4dd8-4b27-8ab4-29d7c8c77770", "indicator--30db3d22-5dcd-40b8-a870-ea5ee0e51995", "indicator--f349d8ff-1261-44ea-980f-82f43ad61f8d", "indicator--500a1e77-8d5b-440a-8b77-45307db79c7e", "indicator--16d516ad-49ea-42bf-84ba-71a76020ff0b", "indicator--c21d74a4-b5ba-4ab5-a4d6-f5ee5907c572", "indicator--46d745bc-22cd-42ca-a891-aa2b4e463017", "indicator--b6da9328-81c0-4beb-a1bf-1fe43bc321f4", "indicator--ebcabdfe-1864-4b12-bd54-2c126797d498", "indicator--5cf20f13-5e0b-408f-a3f6-758c9ec14b6c", "indicator--b211f5f1-3f60-4b10-8488-ef92daa9a224", "indicator--c91537f6-ceb8-4661-9615-eb0acb9c1065", "indicator--d14d4969-a90b-4382-81ed-aee8a4b6743d", "indicator--66f2f95a-8a5b-4866-9819-49c788c360b7", "indicator--8e4c2997-eabb-4283-839e-1a229b76e3dc", "indicator--5caeca45-18b9-4e92-9649-bd2911a960e7", "indicator--2c046eb6-b29c-41ef-96af-b875d2775d34", "indicator--ba541eac-dec6-47bf-b8c9-b9283d4bc031", "indicator--8dbcf4ed-0c75-41af-9fed-8db057353376", "indicator--8dc447af-dada-48a6-b609-887fdb9591ea", "indicator--ccc2bff3-7ecd-46a7-8fbe-3f1e27ecfa00", "indicator--7d6a13e3-8a02-48bc-93e3-055f6e1ed553", "indicator--8080df48-3808-4745-9a94-b9874b8aba4c", "indicator--cd8ac125-b941-4177-a866-fb0713bb5270", "indicator--3e9ba252-6d82-4a7b-9ad3-8614dad73d38", "indicator--d420ffed-cd37-48bd-baa6-68852b39c866", "indicator--c714c2a0-f9d4-4df6-a474-ba194becdbec", "indicator--8ebff431-f524-4d93-afec-9c7ff4fad622", "indicator--e776409d-f81d-4247-8297-ead626f4b992", "indicator--2cfe5f3b-7cf6-4fdb-b13f-e28b2683700d", "indicator--acf06c49-0cab-4077-a8d3-9167c4592e7c", "indicator--10402c0c-e713-4cbf-9389-b6ce01a17661", "indicator--1ae66794-0822-4ce7-8e7d-f6dfa47c96ad", "indicator--58f1cd3c-a16f-4379-9e4e-f4e980cd37b5", "indicator--4963218f-c6f6-4747-bdd3-f9b408bed367", "indicator--0a54377f-040f-4344-941e-3a0ab86ec01d", "indicator--298630f1-ef60-42b7-9c63-0b801141fa5f", "indicator--a13a80c6-ec4f-46b2-8d8b-449796d885fe", "indicator--a102ca1d-6fba-4d76-b1ca-3edbdb5a4e1e", "indicator--6319df2e-bca4-4035-8dd4-46e7375cfa53", "indicator--777217ed-3cb5-4fef-b0de-66ab59b03845", "indicator--5c3b3b03-06d6-4801-a8a0-4e87953225b0", "indicator--c836b376-9237-457e-8c9f-f14ddf4f1115", "indicator--779db754-a1ed-46c9-9944-8bcaf5452010", "indicator--3a45b68f-45de-4607-92cc-25398be1f07a", "indicator--dbdab9a7-5a19-488a-be46-a2ec1ac3b12c", "indicator--1d37574b-1acf-4656-b537-d40eb60772d8", "indicator--8402618a-a141-423f-9201-7b953a1c411a", "indicator--e608fd10-e20d-4fed-8c47-a43a12902b89", "indicator--89f9c70c-cfde-4ba3-8f06-d8b0a49ef77b", "indicator--c10fe286-a75e-4d7e-8f00-afedecb13a46", "indicator--2fe10f4b-fe2e-42bf-8898-8b307bfdc86a", "indicator--cdb71a52-3847-4b5d-9b8f-f1726d8f0b14", "indicator--d83c1364-b9b0-4d80-83ec-d8170187a711", "indicator--cd6fb14f-7148-4e6a-95da-782367879182", "indicator--bbc9ca24-560b-4041-a30d-fd8b6a50d10e", "indicator--03a0551b-a7c5-403d-a228-f42480e45fce", "indicator--528b4d5f-35ea-40c5-91cb-26d6e3b41fa9", "indicator--2745126b-9bb3-4edb-a302-3bbc50dc3e3f", "indicator--ff20a521-dbac-476b-9615-8dcd1337f7aa", "indicator--032794b1-f58e-41c3-b70b-e3b335c17fe8", "indicator--15791bb7-8396-4d6a-9fda-84e67ff3f5f2", "indicator--b48a5cfb-53d3-4b4e-8dd8-532339fb4b94", "indicator--d11dfc85-7ebe-4cb8-954c-454b7cd92c75", "indicator--e6327d2f-5891-459d-ab8e-0113fbee9ad4", "indicator--5625707e-06d9-4cb0-9dbb-bdb514e4f890", "indicator--bd73e485-14a3-452a-aac4-fa2ddde4e33e", "indicator--c61e5333-99ff-473c-9980-a4da7c56a8e6", "indicator--29f6ab6d-2226-48df-8b1a-9db22084dd18", "indicator--6ba5063d-bd75-4c65-a178-72a46813aefa", "indicator--4a61309a-b9c9-4244-91f7-b4e53b9b1fd1", "indicator--34b78316-ac23-4b39-b2ed-7c7f5f6c7b5d", "indicator--9ac78ed8-16ee-4bec-9b3c-2481dd8a1080", "indicator--b3b4fc19-c2f2-4b7f-a1dc-deb709bd5ad6", "indicator--62d49df1-1171-4142-8d8a-e771e2f14f9f", "indicator--244e1892-42eb-43da-a11b-083d66ced3b6", "indicator--29b8a6f1-2ee1-4bad-9a3a-7a6631cf25ad", "indicator--311ecc5e-a4b7-483d-afa9-183821fbef29", "indicator--35f5f150-ed7e-4422-907e-d60a66a55ad1", "indicator--ff8c6ef6-237c-4d7a-8be2-56053b3558f1", "indicator--8e269e94-bdd0-41e5-ac94-95fe51ab9fb3", "indicator--012e37a2-78ac-4977-a17c-be3fa9c47059", "indicator--b00dab99-74db-41a9-88e1-9a2572684f7f", "indicator--4e11f05e-d192-469b-83cb-09f715b74ecd", "indicator--9dcde660-029e-4b48-9bb5-917b513a41ea", "indicator--c5d85506-3c4f-4e1d-a2c1-8a46df811f14", "indicator--1e70325f-94fd-4994-94e7-ad0b3ae91f0f", "indicator--f06fc643-1ed3-4ea4-9525-46765b18780b", "indicator--e6b6d517-f62a-4212-b4df-682546b721f9", "indicator--df8277db-028f-4171-b7a9-164f05754d8f", "indicator--635a1b59-fa22-42b6-97eb-07befbb66f56", "indicator--2fb6005e-378f-4404-aa88-4d43d49dde04", "indicator--8a099bce-2c8a-42e2-86d5-ece0721740b0", "indicator--2cb1e655-3ff4-48cb-a240-4866de48c0c6", "indicator--004082be-4b20-4d92-995e-e21f0462f80d", "indicator--375936dc-c8b7-4ff7-bf51-a53098625134", "indicator--02255c94-bd08-43ab-99cf-ae5f0c7e83c9", "indicator--c20fb284-dfa4-4f1a-abca-a6cbd36c213a", "indicator--98c5cbf2-6e16-4d76-af32-f50142f54758", "indicator--dd423e6e-8371-4cb4-a241-3af941e4319b", "indicator--8e110f35-f655-4768-a651-1ad83380eb7c", "indicator--bdf7ae46-aafc-4a18-8735-f534b9249419", "indicator--fb21f94d-4343-431b-b248-c684a80f9295", "indicator--ea7fa2c1-79f8-41b5-a731-60099f5bd388", "indicator--84e1455a-d208-4e7b-8bd1-1e4eeaae740a", "indicator--8c2959f3-185d-4075-8301-a064ce657e5a", "indicator--3af41f8e-c026-4811-8ced-e0ca0875b7d1", "indicator--f183674d-d471-4ba4-ac1a-84059be94d68", "indicator--a3440ed2-a64c-49db-930e-b428f0104006", "indicator--b1794d66-38f9-4b46-9f2d-7fbf3b9702ff", "indicator--e26eb517-e366-4123-af88-5ad8aab027f3", "indicator--4f9baf38-e8c6-41f1-a58d-c0cec921b809", "indicator--f55e80e5-d609-4f3c-b5d0-ef5e7fbc64b1", "indicator--a8d62e4e-8076-489f-8fc2-c5ae34a58b1b", "indicator--bbcc05db-531c-43f3-9963-2d36e538996e", "indicator--f4d0513f-effe-4f39-9ff7-3f8b8dfc6b78", "indicator--45fe5b2d-a5d2-48ea-8d52-5f28a1883b7a", "indicator--df275826-133d-4518-b0fb-9d7e2c91b081", "indicator--aac0f189-a7eb-43b9-bfc3-2559db02615d", "indicator--f6c6435e-c779-4082-b7b4-96d089f297c5", "indicator--b8384d93-7cc7-4f23-a188-6aa8f0b9460d", "indicator--fe1ba7f7-3ebd-44f7-8957-bc1674e6f3a9", "indicator--504c0117-0859-4e5b-883b-5a0f51d6b3bc", "indicator--40048171-3279-4e2c-826f-4f862a74c3b8", "indicator--80b86c5d-4836-4263-a0b1-5780b3671386", "indicator--511c19e8-f297-44fb-8e12-3e15611d985a", "indicator--f0967e82-cad6-48c7-9695-d23c6dd40b96", "indicator--fd1d716d-2e21-41db-ad5a-561b56574abf", "indicator--3d0c0aa1-1364-4ab9-8664-88a25db51a09", "indicator--71110a0e-c5a2-46db-b01f-6dc2dddda4df", "indicator--41f53ba6-2c5c-4066-b66c-f939f5e1f3d2", "indicator--2e6398a7-edfb-4a02-8576-d82047504073", "indicator--9689c64c-8497-44b9-b782-f0004329a120", "indicator--2f9be9fc-b4d6-4b77-8242-6caa347da4fa", "indicator--386880a6-b90a-4d84-b181-bf25207f7165", "indicator--6dbb5172-9a9f-47a0-89e3-1ff8060fcdb8", "indicator--e92230ee-e43a-4519-bee8-ae69ea0b7a3b", "indicator--aff7bb2b-81a1-4685-8023-b6a43189566c", "indicator--2f9c8111-c5f6-4358-a4f3-303bd42b6a02", "indicator--ff074867-5297-4eee-b5d2-58b9d2723b04", "indicator--212e8587-13d0-46ae-9f58-082454317254", "indicator--74715b3f-e580-4294-906d-9f0e1b06db78", "indicator--0e57a6ee-4f34-4696-8d47-63cbe0589803", "indicator--68311bbb-6d4c-4bef-b4bb-72a727fb9318", "indicator--f95df14a-8e3b-4518-b3d2-996fe0d1e703", "indicator--dc5ccb8e-565c-4b14-aa41-ddf81f2669f7", "indicator--221d24f5-8fea-4a05-a1d5-e43220767077", "indicator--e2d04566-ebe3-4f12-950d-b393d20c5db7", "indicator--36db9145-df31-4abf-8ad8-74282d47d00b", "indicator--9e6da3ca-b65f-4814-b018-96b85a4fdfad", "indicator--e48927f7-c6a6-48b1-a902-9d19fd28af50", "indicator--8a3f79b4-225e-4fc7-afbe-3ea50ea6a298", "indicator--88d74c63-2caa-444f-963c-c56b0ffd759b", "indicator--fe53fb65-27cd-4d56-bbe8-8d6aa0ddbfd1", "indicator--4cbc2755-f781-47ad-8ece-50eabb23c1ed", "indicator--8f0c3814-a566-48d0-a91e-e7b8d8137a8b", "indicator--022449c0-c0bf-4fd3-9450-863430e2c9b6", "indicator--d9320171-8ed4-4bda-9caa-8ac1ae5bf29f", "indicator--2b28ed61-2f96-4042-b7a4-e85e67ef3379", "indicator--fa4fba7b-e83e-4551-b690-a368d4ecc3a9", "indicator--ce708bcf-1590-432a-a12b-4e5e6f45100b", "indicator--85a6101f-6a10-4f27-8b4e-9a70a07f5b0d", "indicator--fa19d88c-f45e-4e3b-baaf-26e8a398c95d", "indicator--debac202-ed51-4e30-bed7-f45f921297e9", "indicator--1b6eecb0-e4f5-4650-9112-f27b27a632d8", "indicator--6cd54bd5-bbe5-4625-9b4c-396f64b7e306", "indicator--5d881936-47fd-49d7-ab43-3895648e9976", "indicator--9fd3067e-81a0-4179-ba93-223fc623a18a", "indicator--6604347b-6113-4bdd-8070-cd20bb5da581", "indicator--6630089e-15d0-411c-8a2f-cfe5d2e18e70", "indicator--221178dd-7d61-4c93-8e12-8c3fef1d3718", "indicator--c4a57be6-0be9-4919-b9a8-324e73770c18", "indicator--92c0c78c-df0b-41a0-b1eb-3cb4f6b0c257", "indicator--9c422af6-c9f1-4477-bed4-d66e95d289c2", "indicator--b2205974-1de6-4a48-9ea5-5d4a22c19aec", "indicator--16f16c9e-b5dd-4beb-97cd-b7c5ff353668", "indicator--8f240092-7d8a-43d3-860e-1768b8766845", "indicator--1b8a49d4-fdaa-4c3c-b220-b13ba3995df2", "indicator--02381b80-fa2a-4e56-a43f-9ffe06b74efe", "indicator--2c568300-9371-4383-917a-7bc54ce6d07b", "indicator--728c61f2-6dfb-4757-8bb1-3f3a60f2f7d6", "indicator--484fb4ed-641a-4c53-8cce-e702f611f212", "indicator--ff9ae686-4fee-43a8-9e8a-4fe48a48ef82", "indicator--428277a3-8c88-4f63-a219-bf86ff995146", "indicator--0a31a3da-ec90-46ee-a26c-d9b128e90630", "indicator--bf35b74a-f03c-41a2-b249-ee15d4e72116", "indicator--c259a9e4-438a-4f1c-8244-43c4d4052765", "indicator--a99cfefb-0e15-4dd0-a072-ee2ae6100447", "indicator--44315e20-9130-46fc-9f48-b11cea36f8db", "indicator--42e5b69a-9c3f-4a83-908d-dd0b9c54ade7", "indicator--cb909128-2ec2-4c85-b547-4b38e37bfc6f", "indicator--fa914452-7287-4e29-bc69-89ce84900997", "indicator--f5fa515f-cd77-4916-9850-69be81659fe4", "indicator--d7ae946c-bb2e-4c88-9fc0-1562b4f875fe", "indicator--a12bc69a-7284-4e29-978a-f375a52f9cb6", "indicator--c9915824-2726-4e4d-a9c6-383dddc16e34", "indicator--c45917ac-a255-4d66-855e-ff7ea310def1", "indicator--1be149cd-3cde-4534-a9c8-1c34e32b46e1", "indicator--4bfc325f-0269-4354-af43-40bb04768ca0", "indicator--9a0b186c-22c6-41c3-965c-c1fdc1822970", "indicator--6a8f2565-4ed8-48e2-8673-ec21064e74ea", "indicator--2ae78696-2a29-42e5-9f54-10de23abffdc", "indicator--b1c75859-a73f-4a6c-8ef8-b378b49b9b1d", "indicator--9f0e2680-21bd-429e-8eec-70406e70edc8", "indicator--279433e2-9884-4f6f-918c-da298d584dc4", "indicator--e069d5cc-cae7-48b5-b662-f24005b62f59", "indicator--166c9c98-b423-404d-94a8-d5fa3c894301", "indicator--c42c1c29-614b-4fa7-8be5-a9c493beb36d", "indicator--33356df4-5c2b-4e2c-bea0-3ea12f980555", "indicator--29110daf-91a9-418e-ac24-f36916681f39", "indicator--373979b4-c0cb-4dd1-a1d2-755dc7d27ee3", "indicator--3421311d-2792-41da-a458-25b1e973cfde", "indicator--e04bac74-273d-455b-a0b7-28386fbe59b8", "indicator--814c2248-6683-4e8a-ad8b-abb6eb7ac652", "indicator--34cecbbb-4517-4dc5-baa3-02ff152f638a", "indicator--7650a7d3-2c16-4190-8add-3281247f6719", "indicator--af505955-c205-4cb3-87d3-e5088270ffe1", "indicator--e70901d2-271e-4606-84c5-763e82a33eb0", "indicator--822d6f06-bd2f-4d62-bcf7-8b92870ee088", "indicator--2c7305a6-756a-4ce7-935f-a12a13207b07", "indicator--0c00741a-c2dc-4acd-b85c-7032cb1a7266", "indicator--175c56ce-fc61-4c07-8d95-2e379d6d41bd", "indicator--739c84be-7b25-4f78-8e5f-64ed7bbee9d2", "indicator--d19c9af1-0aef-459d-a709-e6eb099ce113", "indicator--172e559c-a6bd-460a-88fd-07fde4b170be", "indicator--7953ea79-b3de-4c23-b415-25f1f2f788e4", "indicator--b37d37d6-8128-45f3-9448-853ebcb87ca4", "indicator--0aac8bdb-3d7c-4edb-b726-902ee2113a2c", "indicator--a7a8eedb-9c12-4e54-b134-8cfa91c023ec", "indicator--2bbb9b23-401b-41a4-996d-3a737ee925f7", "indicator--6fd5bab3-f5d9-461f-9663-9bca32288f54", "indicator--66f3a593-96bd-4bcd-bb64-ca247ede4b5a", "indicator--1c5b95c0-fcfc-42c8-9141-0e4d269330d9", "indicator--7ed89a86-da77-4cf2-817a-b124016d1a23", "indicator--a23f43ff-a1dc-4e97-aca5-9ad8ed696cce", "indicator--1fe93e13-8ab1-45a9-9425-6ef1aba82309", "indicator--81832378-4712-42ef-98cd-dbdb591e61b6", "indicator--7a2dd310-078d-4e12-aafe-2ae23ce01e06", "indicator--1da3c1f4-dc01-4451-a647-7dcf379137cd", "indicator--346f84fe-9d3a-42ef-a674-6d6b3178f99c", "indicator--be464bcf-276d-4563-9627-15694a1794f4", "indicator--7da1ff5e-0ba7-446e-8238-2dbc7d0d5ce8", "indicator--7537d4ab-fa29-4b74-95a6-a269f0b42fd8", "indicator--77b5e913-02e4-47db-8238-3ca6cd4eea1b", "indicator--cad22c3f-8d50-4bb0-9b0d-0168f11a970d", "indicator--bb3eec8e-30f8-45cb-8735-63989021dc20", "indicator--7509da13-816a-484d-b347-1dc3f9f8d323", "indicator--6e8a543b-d14d-44c8-8183-e81b1b1a4b9e", "indicator--42d7aa22-395b-4646-9009-cc19511aa759", "indicator--4a064129-ee96-4353-9455-e234b541b6b0", "indicator--1d6447dc-df8a-4c21-8346-db138be03b7d", "indicator--f193e8ac-091f-4b49-9e6a-87788c8d13cd", "indicator--a9d45c3b-5ea7-45c8-86ca-9c09b8df0b01", "indicator--8ebfdc16-4ff5-439c-88f1-61854dfaffd6", "indicator--db9837b0-4d72-436f-86f9-1675b5845e40", "indicator--b70f5d54-a8fd-4990-b3ce-0768779972c4", "indicator--07fc7ba1-e860-4e93-aa75-7e091422a86c", "indicator--177afba9-1719-49cf-bb4a-a4d729b6fb7d", "indicator--3f4dd990-9fb9-43f8-95cf-0b28c0e91f78", "indicator--01548647-f38c-4fe6-a9c6-3a693f2391a9", "indicator--8f73ca06-35de-453b-965b-5c8be4f8d1dd", "indicator--5cb0b2ee-0b2e-45df-b7b8-a1240c0c5e0a", "indicator--87b63582-ad74-47e7-9819-43b7f5128244", "indicator--f4fd8fc6-2a1b-4fff-96ad-5111648dbb6f", "indicator--bd9d5157-47ed-47ea-bc07-0fed001846cd", "indicator--8cd479f4-5869-452b-9f8e-1f42b5605eed", "indicator--92a9aef2-3b66-4afb-ae25-dbd85211a6d9", "indicator--1a5f1a89-fb38-4288-99e1-338d48a31169", "indicator--444f0a3e-307a-416a-8c2e-68e43a4a08e8", "indicator--a5c112ca-2a6d-4ab1-aafa-b0721a53a8c4", "indicator--a612fd1f-b145-4597-9eec-45d61f506962", "indicator--507cfe34-fed1-46b1-84d4-2e779839e7fe", "indicator--495e44f2-ff03-4cd0-8ac9-7c79ad8a02d8", "indicator--f75e9a3c-415a-491f-b3b7-76ff5f7f7fd5", "indicator--a5357c43-6bf0-4c74-b1dc-314a5ceeee81", "indicator--aaa9a04f-24c8-42e4-8c90-4a6df67b9c87", "indicator--d4f55843-c1ed-47c6-94c8-c0c0343e0217", "indicator--72ece50d-18b2-4e98-8a1d-294aaba91f07", "indicator--c1234d70-49ee-447b-8158-3810b8e49ed0", "indicator--24b27c9d-58ca-4b3a-a76b-7f7d68054464", "indicator--0fe67db8-2f83-48ec-ad1e-bf9e30c49112", "indicator--eca7829b-6c32-4117-a763-3f8e5c09e4e8", "indicator--28117350-3b12-4e49-a2d7-eb76855673bd", "indicator--0d827977-1481-45ed-99ec-a4f96a76fdf8", "indicator--ddba5cc1-83a6-436f-81a4-f1f7a8ff34c3", "indicator--1f1e869f-f242-4310-94df-85a9565978ab", "indicator--bd7e9983-007c-43c6-8783-051d1d00c215", "indicator--048b7792-842f-4d31-a9bb-41b1624789a4", "indicator--b4d82a0d-0a44-4231-8342-ba6304195c2c", "indicator--27090e9a-e2a4-4e44-8d54-dcafafc68ea4", "indicator--765b6260-6b8d-4d92-b8b0-cafbce41f66e", "indicator--9f5b3a4b-aaa3-493d-95ca-062bbaf67d4c", "indicator--0ce93da6-b02a-4983-9fcc-6796a9113722", "indicator--3a10245d-281f-439f-8cbc-158c56008b37", "indicator--e7f7e7ac-08d7-4c0d-a320-3fbc6255e234", "indicator--fe719169-92b4-439f-b14a-6a13a01f6241", "indicator--4a4fd90e-ee70-4295-82d6-2e23341cbdae", "indicator--438af783-e0e0-4909-94c8-731f2bf31128", "indicator--6217579f-a317-4b28-9b01-a38e48021cdb", "indicator--9a432dbf-fa4a-49d2-858d-e4c90597dca6", "indicator--f866cfda-7cfd-444d-921b-54a2e5ce420c", "indicator--b0463fe3-3aac-447d-b342-64d150eb9d76", "indicator--9cd6edd3-562d-44f9-bf04-284c676aa110", "indicator--5eb40aa3-cab5-4d17-8741-fc7117601a7b", "indicator--e4a6fb7c-7145-476a-adcb-da2df4345779", "indicator--930127d1-739b-448a-a496-d787424a66e6", "indicator--d97d5b48-acac-495d-8c0f-cd8c28b1c43e", "indicator--ec71e075-2af2-4f34-a149-e1fc55a51b64", "indicator--9ba726be-7462-4eb5-b3a0-e4ad21c32622", "indicator--69cf24fe-50fc-4c3f-9737-52e38e148830", "indicator--8a65717d-82cc-457e-9ebc-5b33e77b5d38", "indicator--ceb9c63d-fc12-4dba-8bee-5fc7034843ef", "indicator--6d0a0565-0be2-4792-b744-2ca4bda92a40", "indicator--62e97f53-2709-4144-954d-d6c571b180d9", "indicator--c349b293-51eb-4383-8630-2dd354e1c7a4", "indicator--6a3d2388-accb-44a6-bfb7-0c27b29ce34b", "indicator--23f45959-f117-4a38-8d4d-80825082c87b", "indicator--e4187e43-ce2e-462d-8151-2a9e42fa317e", "indicator--649a80d6-9536-44fa-85d6-3ad5266fb5d1", "indicator--6d18512a-038a-474e-a244-db09709cb13e", "indicator--0587be8d-5191-4f77-a6a5-fcd918ec3151", "indicator--bd1d3ce8-8d32-43ef-ba53-67ade39521d0", "indicator--01cf16f5-8e7b-4b49-9f7d-b4715abdacaf", "indicator--702dedff-8020-4719-ad07-cc8b1678e376", "indicator--7f816c75-3af4-42a6-8f87-4c134ceb6cbc", "indicator--fe887116-3566-437f-bf0f-4ee1a2b752ac", "indicator--c8789fb9-19fd-412a-9f9f-8a26c04bf6c4", "indicator--dec1dfe4-327e-418e-8b57-91741051507f", "indicator--356e8ca7-f659-4241-88aa-c1ff32e66f8a", "indicator--80e25c12-b577-433b-a165-8f7141c0077c", "indicator--b3474e28-a99e-491d-ad6e-f5e1857dea45", "indicator--53c05af6-28ae-4556-a6d6-b8010f7fb75f", "indicator--9eaff77a-6e76-4077-a844-3997b6cd2d69", "indicator--49cac457-67bf-4ec6-924c-bc2a1ced9ecc", "indicator--28c21790-cfa2-4a61-8b70-227cbdb08113", "indicator--172581d2-405b-43fc-9f8b-4112b5c568af", "indicator--b6bc617d-6ea2-4895-81d9-634a490dbb4f", "indicator--74dc2025-86e8-47ef-9989-855bd878abba", "indicator--7e7c158f-eced-4690-91bb-cca73122bc82", "indicator--d49a7bc7-3092-4a52-91c9-f537d56cd1a0", "indicator--233ff513-d834-470f-809c-eee86f28b2bf", "indicator--62c93fa4-1dbc-43b3-97cc-cda445c6ec77", "indicator--2f4424eb-3f84-4a7d-ae8b-2683d6c07276", "indicator--1f9354dd-bec7-4bef-ac7a-45d2112afdae", "indicator--228b3570-0dc1-42b9-a983-149b508a2499", "indicator--1129aba9-da69-4530-864b-04b9ff90938f", "indicator--78d4f34b-8c51-4b33-890c-2d53670ee9a7", "indicator--cd031318-4d60-48e4-8aa3-9f75e0ff6d1e", "indicator--b5b56ff4-119b-4229-af37-f17d182f02bb", "indicator--686876c0-0806-4b9b-b052-30f20e17c540", "indicator--be840fcc-7ac4-4c81-b80f-271f0aa25663", "indicator--dc67cc1e-4365-4dc2-8b55-77bfdcb4d0f7", "indicator--3bc14233-1f9f-4908-852c-429285415307", "indicator--334e81a0-b46b-42fd-ae8c-20fc0fcac125", "indicator--82b71edc-e6c8-40ef-a886-1c2fbb32188b", "indicator--ce786ceb-7593-4e50-bee8-b24127851159", "indicator--fedef0b0-efde-4025-b508-76829e213c39", "indicator--d660ff05-3213-4f5a-8a6a-4a30ba8fa5d3", "indicator--50702e45-c63e-4154-9354-0d6f65ce1f13", "indicator--0577203b-5297-4d49-8e45-978d86cdfbac", "indicator--f329af21-6c69-4a01-883c-ece6c067c2c2", "indicator--c0ebb22c-7d34-48d2-8bbf-08ea2af25634", "indicator--ab634689-faad-48be-b261-d5e3354f3101", "indicator--7ef6ed3b-edfa-4cd7-a532-acd8a040a1f5", "indicator--9206e729-cb77-4964-b88d-760334376433", "indicator--312f9a87-518b-497b-8fef-03eccf8f5ee2", "indicator--2058e848-4b4f-4715-8103-85de3c0d47ce", "indicator--31f37306-0e9d-427a-a661-947b008ba702", "indicator--f3e7a60d-6f76-4389-8d53-3ff303c9cb43", "indicator--a177e814-de02-4da1-a359-72650dc64812", "indicator--0a94c58f-0f7a-4abf-9255-4851c8d3c004", "indicator--0d7ce5e6-b6e6-492d-95f1-1d5abe522c24", "indicator--427fe815-3992-4a55-9a10-214012ace5bd", "indicator--0aa6c883-5fa1-4351-9d38-9af5343fe836", "indicator--2a6f42e1-4662-4cbb-8e33-0dba3396adcb", "indicator--6ffc1ca2-171f-44c4-bfd1-1f64a9541e4e", "indicator--aa935ba9-2090-441e-904d-05ad256441c7", "indicator--760d6a20-fd1b-453a-a856-56ad3baa354f", "indicator--76ce5e09-3fb1-4ab8-969d-ae18d501e67a", "indicator--58106f67-6a26-4eeb-948f-4c838ae5f88b", "indicator--6100ec6f-3369-468d-b3a2-195261001959", "indicator--678fcd44-f6b3-49db-96b0-9087637363a1", "indicator--dca90b58-c45e-448b-8839-bfbf1f1042de", "indicator--d770def5-e0a8-45f6-a4ad-6e82b5357cb2", "indicator--bc6a7d18-3800-4ec3-92d8-83e0df410c41", "indicator--841487e8-559b-4ef7-b693-491ced11f921", "indicator--1a608a7a-f115-4aa4-b34a-4f24b8b049eb", "indicator--60c76cab-d43d-4f8c-be1e-dfa4e3a971d1", "indicator--d3293c19-926c-4444-a0c7-ea6957338da7", "indicator--3c96e7b0-dfb4-41d2-a724-8133561b0254", "indicator--4fe6567e-1355-4906-80a0-719335e739fe", "indicator--b0c6b9e7-d257-4ae9-9e05-15d8f2dfb404", "indicator--c290ca51-8dac-4cbc-962f-812ca6a796f5", "indicator--cf9c9c1c-f560-42f7-96b5-d37faaf1b221", "indicator--a0e6aa69-1582-443a-9273-53a71197fd96", "indicator--fac060d3-7573-450a-8683-024e65541803", "indicator--b4456908-03ac-4e6a-88dd-71c33f4e9afc", "indicator--a08a61d9-2da7-4067-88df-8a68aefd4483", "indicator--7cf1080f-f897-4951-8a8c-bde2be786495", "indicator--41da5415-5c2b-4b96-ad1f-4df8d75ce866", "indicator--8cb36bfb-96dc-4f8b-b522-8d7a0f1c4b3b", "indicator--4b2c05ef-d447-48e9-bdc3-284a3e3ba1ed", "indicator--4da7209c-a30d-44f1-a47d-0e6199d30fcf", "indicator--175df841-4aca-43b8-b18c-0e92eb4c4c16", "indicator--4adbf638-d0f1-4e69-b5d1-e65f4cea9a57", "indicator--2eb8e29a-b9fe-4d51-913f-898a97c68a23", "indicator--d2934edd-4a42-4f3c-a07f-f8a57696cf16", "indicator--2a4b690f-a1f3-466e-9138-92aeeb8897a7", "indicator--eeda246e-75f0-4d7e-a1e0-fdbfd7994bc2", "indicator--220fa65d-febf-4f74-b211-01c7585209d3", "indicator--770de3d6-4a9b-4520-8a51-dbfbff520b0c", "indicator--8e1d1e95-13e9-408d-b78c-1688d055d603", "indicator--2b5a8a53-3f06-4f66-8a43-c0ec36a0ba60", "indicator--7b614e0f-e8fa-4193-8566-74ccd542d244", "indicator--d360f231-2b05-40ef-9bc4-f2b8dc854859", "indicator--5c6a1358-83eb-4a5f-9fa8-49412f40d5c6", "indicator--48a65dcf-356b-4cce-b64b-543a6b79e408", "indicator--91910a05-45db-4d27-b026-b0522fd5bc7a", "indicator--4f1d3993-04ee-4355-ae66-4360d4c74b64", "indicator--0f595e41-3f84-4ff8-a1da-bf505945732c", "indicator--b057eea5-7181-44ca-b1cd-1735037eb22f", "indicator--a07d26a6-8042-4c4d-a046-6069dbce7b63", "indicator--10f70092-3ef6-4e1c-b73b-a3087eb7cb0a", "indicator--ab1618f2-72d2-49ab-81ce-16bb34ca5bd6", "indicator--319d6148-8784-4c34-8f1f-56c21830a081", "indicator--ae95ac43-01ed-48c8-a087-4238b7927c0e", "indicator--41822af5-8e8e-4996-9d85-22040802fa7a", "indicator--d3ac9b4b-ab85-4ae8-af7d-9842d4bb5944", "indicator--1392fde4-dfe4-4f31-a627-35b6431e693a", "indicator--74f60985-02a4-4b6b-aedc-33ac8bff6505", "indicator--994cac3a-b154-4ce0-9a5c-c47f4316a975", "indicator--a0871b0e-37dd-4d6f-88df-06bdf4dbf1e7", "indicator--d7fef8ce-470b-43d5-a286-4cf6a7dba308", "indicator--d7a9659d-04cc-4b6a-b923-310dbaf3bdb3", "indicator--7168d1f2-a761-4eee-a04b-2991e215c074", "indicator--5a2232ae-91c4-426c-9fde-746e3c291bce", "indicator--a3eb4a9d-5462-4573-9898-8789cf250a27", "indicator--0f2ac45c-7cfa-4e01-9fc0-b419a310afb4", "indicator--d00414df-7ea2-453d-9d7a-8b2bfef5761b", "indicator--8a4f3139-6c7b-47e4-bb0f-adc59ba540ca", "indicator--575b3d02-9383-43c2-99e9-7a1660111ef9", "indicator--1694f406-81c4-4a31-b79f-511bc8433055", "indicator--6b414002-970b-4fe6-974d-ec9ff849ccab", "indicator--648c25b5-8eee-4613-a7a3-6ac1b55946f2", "indicator--ce87c2ba-8cb0-42c5-a556-c0618b83467f", "indicator--45c83bc0-c3dc-4ac9-ac26-42f070d5c53c", "indicator--11b645fd-b188-45b5-86ca-d4a5a9c7f003", "indicator--6872b8df-4a4d-49c5-9f9b-2261a9880149", "indicator--66719692-de90-4410-a922-0eb757359eb2", "indicator--8f57c566-52e2-488b-ac07-14c21db912a5", "indicator--35008ac8-8a52-4c6f-ad5c-4956cd4c3503", "indicator--73bbd676-fdad-4ec1-8192-64a3b4c92140", "indicator--f59471b6-180a-4ed0-ac5e-d35e0e88ae35", "indicator--0fce971a-63bf-4f6b-9d3d-be301a1bd98f", "indicator--580e2c7b-ad3d-42c3-83e7-dea7df6d4164", "indicator--824fc463-7ebf-4437-b84a-b84e255b38ea", "indicator--1f2e428b-b30b-4b5b-a8d6-111b8fb49d0e", "indicator--0af57014-82a6-4e89-8090-3aa12e807c71", "indicator--3b2bb4d1-3169-47eb-894f-fd39aa9a1727", "indicator--58671460-3fa1-4352-9dee-a111f07fa695", "indicator--163d8cb8-22ea-4a07-b909-7e9f2701736e", "indicator--c5700f3c-811b-48e2-a041-e25943d1f8d3", "indicator--87acd229-97d3-4488-8bc2-b12e38bfbf57", "indicator--0cd88722-2c9e-4fe8-bf44-803e12a30c75", "indicator--6058c714-bf73-4a74-a679-6dc3d95214a9", "indicator--6d5b2edd-96ee-4d1e-8f17-b2f247de6027", "indicator--826832c1-0c76-428d-b0af-1f179bd2aa7b", "indicator--d4f9ab78-a0fa-4b75-b29c-bcecb28ce356", "indicator--26192c65-4420-4342-8080-d425c18507be", "indicator--993604c1-1a31-44ee-a8a7-31c18f431d0e", "indicator--9a244a2a-7349-49f4-a955-dfecfc47af89", "indicator--46f922d3-4507-40f7-b019-e765032de16f", "indicator--546c5955-d911-4d8b-b650-37deab5dad99", "indicator--94616e73-57cd-4e3b-8612-441734cb6243", "indicator--655d89b3-1606-4b70-bf97-765e485f1d7f", "indicator--cebc6699-c58d-4cc7-aa4e-f20ec798581f", "indicator--00084eda-ecc9-47c8-be15-e629beb4f90a", "indicator--82d4b15e-5580-4dc5-b9cc-45fecbfe88d9", "indicator--b969db78-a09a-4e08-93c1-7c63f5c60b90", "indicator--ab050869-dbf3-4941-99d3-9250205af573", "indicator--c00ff51c-eae3-4d8e-9d56-807aab00c847", "indicator--9676de09-3e13-465e-a50c-b69f038b4615", "indicator--ae151501-0a24-49bb-933b-1bfc20b44f5e", "indicator--e8ef52ef-de91-4480-b2f7-4d6c0edc7c53", "indicator--4ac16a19-3941-49ea-ab65-f3e7b554e64e", "indicator--7a2186da-20ab-4e3e-9cef-749bd268ce1c", "indicator--c1c8c52b-b1e1-4c41-a8dc-22a4b8b6834f", "indicator--81850397-ace2-4cce-b760-6e28678d43bb", "indicator--4f77bf6a-285c-4f5e-951b-36e41bd3e3a8", "indicator--017bf43a-ea33-4e55-81fa-067c6969543b", "indicator--5ca474be-136d-4d05-b2a0-766f9f8c5916", "indicator--c6e1ec23-b315-47f5-bb57-b7c4203bcdfd", "indicator--4e831bd1-01b8-46bb-b559-c563f72c7801", "indicator--773df016-6e40-4638-ab17-42a562192cc4", "indicator--69fe66d3-42a1-4ff8-99d4-aa2480997ac1", "indicator--fd3cfd1d-1ebd-4538-918b-22f02fc86fe7", "indicator--28d5dac0-b012-4fd7-9b4d-de3b8b69d9c9", "indicator--c8af7db1-6deb-4fe7-bee1-87f8ccd101c0", "indicator--898ae340-45e0-4fcc-9895-5ca5cbaadfb6", "indicator--06a949b6-9e6e-4313-9e77-c28e2e6bbee0", "indicator--efc7e059-45ef-4917-8b0f-f87c5e5641d3", "indicator--69385a09-374a-49c9-a77c-72db71e3a4bf", "indicator--7f1306f9-a76b-481c-837c-87ed514e98f6", "indicator--585fec24-7c2f-4d22-a1b3-4f0a0ddbf403", "indicator--0293f816-c2af-422d-a2db-5fbaa192d7eb", "indicator--55454b69-3a65-4e22-9921-66c3e7e8db62", "indicator--ddf66d97-1fd7-4370-83ee-f65c92460c1b", "indicator--ffc94b0a-ecde-4efa-829d-4cd03ea98fd9", "indicator--c11c780e-db8e-4bc5-9c57-8c7ced0f0591", "indicator--9f1f2202-38f1-451f-8805-1aa120f040f8", "indicator--f5ff5a01-6897-4e84-8c4c-a34112206dd1", "indicator--e4738cbf-7cab-4cde-8a20-79588cf4f554", "indicator--11d3f29d-4a8d-4d47-b1ae-343e70b3f5c4", "indicator--ebefd154-4283-4c7c-be8f-63ac2484e7a5", "indicator--af82e0d9-0c43-4113-9a02-061a1529d6f0", "indicator--f46da84b-346b-41f6-a206-0978230fa4ab", "indicator--443d1769-cb73-470f-ba64-c9c376fa8739", "indicator--40e625c8-c653-4b5a-8022-d474ec55a1c9", "indicator--63625e37-39a7-4180-bc3f-5872df309177", "indicator--a257e075-40fe-4e41-938f-a882330cad54", "indicator--33a70513-2b0d-4beb-a10a-7594b99576a3", "indicator--275b3d78-ea79-4595-b3c3-3266da851e11", "indicator--9b4b88ff-7e0d-4937-b952-c986aee39997", "indicator--af36f918-3d56-45ec-8ffe-6f3b998f1a7a", "indicator--dce2547e-1454-4c54-86ca-dfad99ba9806", "indicator--7293d72c-10fa-4974-9499-c43fc3c7925d", "indicator--74cc44ab-9b82-492e-9d93-23caf0e01d2b", "indicator--faffaa20-fb00-4552-8a17-a72cd8d31e88", "indicator--e63eb209-b60e-43a1-be19-7ce82ff94c08", "indicator--775f8dae-beb1-4fef-8966-ded0b8d08ace", "indicator--a90075e9-f8a7-42f1-9813-82ca895f812b", "indicator--8fc23c70-193d-4278-80e3-9309e0880c37", "indicator--6d0307a6-9312-4ac6-a58f-b058e1dc7470", "indicator--30dd1043-5ffa-46ef-aa8e-4d0e62a78cb6", "indicator--ce14b049-99e0-4ce5-9082-ca5f3877c654", "indicator--57284f8b-9414-4013-ad38-07bfbfe03661", "indicator--2a251a52-a2d4-4a2f-a1c9-4c506e6a8c1c", "indicator--93b64161-b0ca-4646-b4c1-a6fa4ee71738", "indicator--1e3b0b65-483c-4ba3-aa10-5b2c38525d61", "indicator--b11035e5-0b72-410a-87a2-7f251213cf88", "indicator--38de8274-2728-4f5f-8027-b74c09f02648", "indicator--1e80a3f1-5e06-4ca4-8449-fc124d54c751", "indicator--a7cb16d1-98be-462a-9577-54700636c82a", "indicator--23824e7e-160e-452f-ad89-46a2200259d0", "indicator--2793e8aa-ce3f-4a8c-8cfe-ad57e5cb51b9", "indicator--07f42124-5d3e-4079-837c-f4f5d7fa6758", "indicator--ad5fa5aa-db8f-4e5b-9dd5-6f822503c96a", "indicator--45aaabbd-ada9-4dc5-a5b9-f1ea71157c97", "indicator--c039ef9a-bc80-418e-8cd7-ec29baf38f17", "indicator--562ef766-6fce-49a7-8bc3-a768d827c4ed", "indicator--943b37db-2500-4efe-a112-2531f4872cad", "indicator--506de894-02bf-4b0a-aa7e-7acec9ee9f9a", "indicator--8cceb74c-5e2a-4b16-b0fd-bab849c4a4e2", "indicator--2aee7fe7-4881-472c-bed4-a46d65a3a72c", "indicator--3b62e23d-4651-4b9c-9bcc-7d1030676d2d", "indicator--3588187f-ddef-46d7-8364-fe5ff56d0775", "indicator--9d14b292-f6b0-4fd5-b4f3-4092a186ad07", "indicator--29aa480f-abae-43f3-959a-bb23dfeb5439", "indicator--b076e67d-9d95-4b56-8df6-fe7ca73d8c16", "indicator--2bb5f95a-b3cf-4fcd-b021-5015a2f89142", "indicator--7851c110-fb2d-434d-ad04-d54ee56ac2c6", "indicator--aaf30948-7c46-4b31-98bd-c6cf1c26540d", "indicator--f9da35b7-2235-4802-a3cd-a27c80627140", "indicator--bc83b6c6-1917-495a-8ccf-eb6ca4955c14", "indicator--dcc09a3d-2c2a-47e3-a592-44ed72b681ba", "indicator--f37b0c06-339f-49f4-88d7-01dabba297b1", "indicator--6cc39373-277d-4f97-9c98-fb8bea83ee14", "indicator--f3209c3d-5a47-4379-b943-761e259af809", "indicator--c8e22049-e87b-43a0-9dc1-0559ceb8aed8", "indicator--6e9b73cb-2a76-449e-a8b3-19def2486ed4", "indicator--fde5a52f-54a4-444e-9400-906e74d6a4ff", "indicator--e91d54d1-2539-4df0-a3d5-e0d31db25cd6", "indicator--ed45f108-bbba-4a34-ba02-b2022b601369", "indicator--997c52d8-c566-4d96-ac19-5cfc2dd093cb", "indicator--5ed55be1-289f-4c63-8618-176797fe7662", "indicator--2ffdfe4a-3f9b-43f6-97eb-9c4bc4e7fcd8", "indicator--4c9cd053-6b96-4691-aa76-4b8c4bff5ef9", "indicator--9e076fb2-cd72-40d6-b119-f2ffbad73ca1", "indicator--b6ada0cc-aec7-4c25-8998-f71c7bbb639d", "indicator--2d2ff99a-7075-4885-9a69-b055a34b3d4e", "indicator--4cc19d9e-9e58-4cad-b60d-48d48dfda376", "indicator--43b4967a-896f-40b5-a325-90114d8f1753", "indicator--5ee9ac36-f39a-4bbb-81e3-8a3d082d8fce", "indicator--c83b734d-9c7c-459b-90f4-b7c9caf8dfba", "indicator--2b7751a6-6c9b-4e88-a24a-5c25209cc725", "indicator--50916eb5-183a-4d71-a3ce-593b479d8757", "indicator--566017ec-79ac-49b9-9915-9cd13d7f815e", "indicator--3284bc08-5138-4ef6-b285-4a9a6071ac1c", "indicator--4606401a-9d2b-43b1-a010-1d0ba3f5c83e", "indicator--056d65c6-966e-4013-affa-3faf4127eede", "indicator--044aab60-1298-4d67-a9a9-a448e861c300", "indicator--541c8231-7cf3-4b0d-a48e-2b8151cbbe8f", "indicator--df68dab8-f102-4423-b914-1f2fe58092e5", "indicator--7242ffc2-7fcb-4b0c-87dc-10ee89537449", "indicator--bb178407-e318-4ce9-92e3-79c53c7104a4", "indicator--26ffc86f-51c6-458b-b030-448ca13304e4", "indicator--9564e6ee-9d45-4d47-bea0-876efd56ca12", "indicator--6eaf0ff7-375c-4409-8329-932fec67528f", "indicator--9eaddcc1-f01b-4c9a-a344-0a96a8775f68", "indicator--6f75831c-55c7-4a25-ad81-2776af19ec9a", "indicator--a1a2f6d3-dc3f-4a27-9a01-bbbf3adf5a10", "indicator--67431269-2710-41c4-b884-e6c78f7f74e6", "indicator--57603c5e-6631-44d1-a4e8-58454cf52240", "indicator--34e0ad97-be4c-4405-bc31-06ddc4f1a273", "indicator--b1ab8287-4601-4e33-859f-dda9204deb3f", "indicator--71376a87-8c0c-42e3-ae24-5a6c9c0162f6", "indicator--1b4f2269-1910-43c5-a181-b3634ac396e6", "indicator--915372ad-0776-4fb0-97e0-26edb8d781d4", "indicator--8881221d-a6de-4e8b-b1e5-c4a9d760ea06", "indicator--b8bcba34-c50c-4b6c-9384-0b11795eec3a", "indicator--19611dd7-309a-4b8c-98fc-eaceeeba0ab9", "indicator--4411eab1-773c-4721-a7ee-7ef2588f16c5", "indicator--f40d92cd-8cb3-4159-80e5-22efd2a7a16e", "indicator--cd01f7fa-2ecf-4b11-aa91-44236fd91696", "indicator--ad25f59c-71b3-4ed4-8dc4-1fc3126f9272", "indicator--7f7f560a-893d-4b78-a1da-9ff662d8fbcc", "indicator--de4e93bd-6c8d-4d2e-8216-36575c6a42cf", "indicator--7e39d7f3-4588-4cf2-b915-36e00408a5f1", "indicator--ad167c1e-9466-4551-86ca-361d48394598", "indicator--e7703a17-8310-4a80-a52e-8b37b756543e", "indicator--e3802cec-d0b3-4498-8ea7-5fc6b0e425ff", "indicator--eff07fae-0545-422a-910b-42baad6f7fb9", "indicator--ce2f9b84-44b6-43d5-9aee-ad87cbac4e68", "indicator--1b9b35f9-5020-412a-bfa6-df2481c1df02", "indicator--2c8fd881-7543-4065-bcac-7d36c919765e", "indicator--323d70fe-bdba-4dfb-9c91-16f8d04f285f", "indicator--b2340ab9-68e6-4a9f-a665-0fe7278d335c", "indicator--b3e24536-970e-45cc-aadf-52da8f9a98b4", "indicator--e8cbc556-3d40-49fb-8f29-c8f2cb112c9e", "indicator--a980274f-29f4-409e-9244-33cefe1f05df", "indicator--b2177c83-5135-434d-af2e-09216e62c58d", "indicator--f09da9f1-b2a0-4f0c-89c5-94a47097fefd", "indicator--7e3bbc37-9862-42a2-bb66-18a9770eff1d", "indicator--0687e78a-49cc-432c-9ca1-d92c8fd60f65", "indicator--a63b2c4f-6781-413f-999b-4444e184acf9", "indicator--01f35f04-07ad-47df-abf6-ac40febf428f", "indicator--f92764fe-9330-4561-af80-f26b01d2f3fc", "indicator--45846158-f745-4687-acf4-a89a23fb3e20", "indicator--33e40dba-e76e-4eb3-9194-da2d7739df18", "indicator--268df560-6d1b-414f-9992-8835f85d71ea", "indicator--fe465aa6-d69f-4c26-99f0-d534afd94e4c", "indicator--22ba8e04-408f-47fa-8ae9-72a44af64d4e", "indicator--7304df5b-6d97-4a18-9607-7f869315f52c", "indicator--34b743ac-ac40-4ab5-9d74-52aea1acb138", "indicator--da6319ef-401a-4cde-8218-bffddb16d6fc", "indicator--5cbbcb32-1a6f-4166-8c45-9134028de013", "indicator--78130b31-66f8-40b1-ae32-d3b999cd170b", "indicator--9183cc0c-bad1-403e-a3ec-85a01a99f229", "indicator--1461636c-bad6-4ed8-abe9-22ca438f2482", "indicator--e3ac3fcb-b38d-4cf9-b37b-cffa87b4f45a", "indicator--ab9e6f6a-90e7-45f7-b9bb-7a61322d5bb1", "indicator--9faafb82-0358-46a2-8b1f-d539f36f1030", "indicator--62d8ed6a-b6a0-49c5-9701-60ea627bd3e3", "indicator--5f064cf1-84b8-4fa7-a308-6f93961d378f", "indicator--12d218ce-7f25-4308-b9b0-0e1b567cc437", "indicator--8c9d2404-55d6-4449-a1e1-f9b7bb1a0a38", "indicator--6cf788af-452b-44bf-b7f5-e2be4a4093b9", "indicator--d07c543f-52a6-4b58-9ce1-9a6f91d242ac", "indicator--0e33b5fd-b99f-45ec-94c8-4514f41e54df", "indicator--91db0617-ac5d-42e8-aa69-6946a90a73bd", "indicator--31122160-6a48-4e79-a0c6-99dbb7c20280", "indicator--6007cef9-c595-432c-9e94-35b80aa93541", "indicator--85b1ecca-6b3a-4e9f-89e3-9ed24177b9aa", "indicator--a5258c19-6050-4477-89dd-66c3c75add72", "indicator--08115141-940b-44ba-922d-775ff7e55ffa", "indicator--8d1bbf0c-b1e6-4c60-acee-9cf6a7c7752c", "indicator--7865e9bf-9ae6-4b3f-b950-1c3d144660be", "indicator--44094e7c-cb66-48f2-82ef-7077e6f90e3c", "indicator--a4e64d1e-3267-4f40-9374-19da924f80aa", "indicator--1c9a5a67-7478-4fe6-9c42-0488a803a4ce", "indicator--af12230e-fcf5-4ee3-8a38-daa59965d4f4", "indicator--755a25a2-7269-47b2-ba37-f7c8225f3660", "indicator--46a93a54-a845-4797-9739-b30823f9a9f5", "indicator--052eac13-4c75-44ff-a407-99f5084f0d25", "indicator--a95be5c2-5f3c-4d05-9505-cb87960426cc", "indicator--2f52c38e-7d25-4302-9d29-b93922d7bc95", "indicator--488cfd1e-b036-41a5-ac7b-ce8d35424602", "indicator--1e48a477-ad2f-4793-ad08-104b5369435e", "indicator--906a4c82-898b-4ccc-9507-8631dae2e598", "indicator--1b2c1660-aa7c-4aa1-a9e6-e40d8c2a66ca", "indicator--4c852733-0c6e-49fc-8864-65da4a482636", "indicator--0a35bbe4-c79f-4450-8238-892bd42fd311", "indicator--79be464d-ad2b-412e-89de-622da92ee8b9", "indicator--684711b9-d652-463f-ad14-e36c6cd3e0c8", "indicator--3c60f060-8bf4-4693-8970-e749a670d92c", "indicator--19befd5e-35ef-46f9-9ab5-f24f6e46ace8", "indicator--614b5183-a9ec-477f-ae10-43e2ed50d8dd", "indicator--742c8ed3-9961-4d48-bb33-f835b883741e", "indicator--99cd0d59-7d8c-46bf-b294-bfe23c661e71", "indicator--bfcc68f1-68bb-4693-856d-a08b97a1a1b5", "indicator--42245738-0ca5-45bf-95c1-722a9cb3fb9d", "indicator--91dae04b-5494-4a83-892c-b83260438433", "indicator--a47cc48c-0b52-4835-a973-35e25ec193ed", "indicator--8f518a70-8d3d-4136-9393-55e94ad14195", "indicator--42c75007-ff04-4594-9dff-9154b8b50ed4", "indicator--1bb7d622-61b4-47c6-a81f-56d2b6804826", "indicator--5b05e2a7-236c-4831-b927-c8d4a3fe25ab", "indicator--af85a6d4-b511-4685-875f-85b7d4aa1cc5", "indicator--fa8b9c77-35a5-4760-b224-874ccb43ea48", "indicator--f1cbb5da-5d13-4ad6-8a3f-86b250cfd344", "indicator--e3e074de-bd30-41f2-835d-480e73dc1872", "indicator--e1020e2f-eda9-4b5b-a5bf-d396a4d521bc", "indicator--b9556ed5-eb13-42e3-88bf-fce1c830caeb", "indicator--e8ddee7c-5bf9-43cb-bd59-4fa2135dfdc7", "indicator--a523f35f-beef-4603-899d-ac798d493af5", "indicator--80a3b49b-7d1d-43a5-8bef-a4d0f026ba02", "indicator--c5d341b8-dd4b-456a-9d79-49e94b92b68a", "indicator--306eb9ec-239f-4779-a544-53a0d8211c7b", "indicator--ab0599cc-3058-4c11-9f28-b626c397c240", "indicator--0ef58690-0619-4704-baa7-e27df683838e", "indicator--bc28324c-1bcb-4c04-8136-f7c342a185c3", "indicator--7c7102c8-77a4-4f34-a088-150c8549aed6", "indicator--eec1d636-d400-40a9-9d22-af92c1a5eb78", "indicator--4d5b511d-8f06-41cc-adfd-3f58dcd38dba", "indicator--30924984-c383-46cb-82e7-cb96adba42b6", "indicator--eaf14492-f137-4bcb-bef2-f3cb3fe9abc6", "indicator--379073f6-74a3-4839-89f8-942b3dca6262", "indicator--afcb29a0-fd82-4aaa-aa50-67343567ef5d", "indicator--05994315-63dd-4b8b-859d-71239877c412", "indicator--44583a76-40e7-4bf8-92b6-9f03532facd3", "indicator--9e87cd01-c3b9-4738-bf02-f4e3ef5ba00e", "indicator--d327f7a7-c186-4b5b-821b-1aa9a722fa7b", "indicator--85f49429-1d6c-45bc-a5ae-d89ce1b6e2e2", "indicator--bd7e61aa-1ee3-418a-a63a-9a58bd96678b", "indicator--e218072d-0123-4216-a868-c4c94966157b", "indicator--9825c922-2fd8-40ef-a852-fbaca82979fb", "indicator--664b4570-9a97-473b-ad30-7b3cd7f75ff3", "indicator--3d46bad2-407e-445a-86a5-6d809c39cb6f", "indicator--3e027e57-3aae-4ef4-ad9a-7069bc9ad7a1", "indicator--bf46742f-6d4c-4275-9fe4-cfb3e677f5b5", "indicator--4f28ea23-3fb9-4aba-b49f-1d7bea8db78e", "indicator--b470c155-adb8-479b-b829-75187c285ce3", "indicator--64023d15-621c-4718-8fc1-f837df3fba4b", "indicator--9f2ea0a9-5a7a-46ef-8c9a-07af54df0201", "indicator--8c316277-88e8-482e-9eaf-6932a9b124eb", "indicator--b23e918e-1dad-4853-b57f-637420c81ef2", "indicator--e9aebf5a-1027-41f7-910c-716f30154686", "indicator--ca7687b3-5d2e-4a24-be15-00110b07cd0d", "indicator--bc7f03a1-cf8e-4afe-b5f9-facf20315d31", "indicator--0c2b3c1d-e296-4f25-82d2-9a3b176c4e62", "indicator--887d7d35-a47a-4423-92f9-4caad084a10f", "indicator--896cb3d5-8ae1-428a-8c8a-79a021c9685a", "indicator--2689ef87-7aa4-44cf-9ed4-bcec1d6ec5a1", "indicator--8dd219ae-8c50-4623-9f82-9a98bda37092", "indicator--433c08df-c0a5-4811-a3c5-8b8bbb9496a5", "indicator--0a110a6d-0f79-486f-8151-37b24199466d", "indicator--a56ef779-1674-43db-9567-4438cef6aa0e", "indicator--a23ea9d1-3d3f-4783-8ce0-e1d748cf8d58", "indicator--5cd339be-3fb3-43e8-9657-53cb8afa148b", "indicator--bef626cc-0fa6-4918-88ce-9be77442d34f", "indicator--e03b603a-de6b-4480-b161-8f93ced5ea12", "indicator--2544ed2c-d946-472d-8d77-607e666d5a86", "indicator--17a2a684-1aef-4ce8-b24b-135e8d50f7cf", "indicator--1b3b7cf0-5466-4832-a50c-210e9026d24b", "indicator--51a3cc6a-dcc9-486b-8ccf-b67d76a0f9c3", "indicator--72b7692a-0489-4188-b99c-1ca79004d96f", "indicator--3c9d0fb2-ad51-489f-a825-e568da367ea5", "indicator--86fd1217-5dcc-49ea-b85b-3b47015ffe36", "indicator--7b8dac1a-d805-4f1f-9758-4bc2f17efcc5", "indicator--c1b8369c-f9fb-4427-a676-38f0ecdb6f57", "indicator--e20a91ce-07a2-48ba-9ed4-7691b70fe084", "indicator--70ce7509-22f7-4711-8cb3-2aca075e96b8", "indicator--58cb81ef-fb49-4e99-93c1-afd27e2b89a6", "indicator--f98630c6-7f27-4f7d-87c3-ef8486298805", "indicator--cdd8d2ff-95bb-4130-a7ff-6e2b49a54bec", "indicator--4eb7bf7a-0f22-4c73-85aa-a89dc23446e6", "indicator--597e4bb3-6507-48d9-b934-1d1c01449040", "indicator--00fcc2e7-3419-4099-961b-e7a2022d18ed", "indicator--ea628891-5c60-4e1e-b526-175894027a24", "indicator--3d5df67f-57cf-43a5-9144-8571e60a770b", "indicator--4fa5851e-f98d-4fd9-aa92-d19cdbfda268", "indicator--eaafa55f-b7a3-4b94-bde9-d3dd22e4d853", "indicator--0779bbff-cc40-47ac-97e3-05c76733cd9f", "indicator--6cf7be62-6176-45ec-bb33-222110659902", "indicator--682c7db5-49df-4b12-9a3e-3f25bb949946", "indicator--7730559b-e40f-4f5f-8fde-82902e636c00", "indicator--89c29d9e-962d-4e32-b777-aa4d91d68ae2", "indicator--9a64241d-39a1-442d-a496-658932a37c83", "indicator--ed143835-9431-4393-b392-e6309c2c6f83", "indicator--91ad0950-da72-479b-8acd-53eb40d0427e", "indicator--3c47820a-7dc1-4bdd-b426-852de9e7533a", "indicator--03589d62-814e-4141-8695-347279228cf7", "indicator--8bd4183c-6b0c-442d-b784-320341823e71", "indicator--37f20fec-2451-43d4-9ba5-393a6cd61ffa", "indicator--541f5c50-7ccc-4400-8490-7ec4b8c5f07f", "indicator--16d58782-2380-426f-a2d5-af7372e2238c", "indicator--8b8098e9-cabb-4215-9f8a-15dc463c3dce", "indicator--d5e43437-1c73-469f-9e71-d59b66f23f66", "indicator--29b1626d-644f-40ac-9921-7d3981edf519", "indicator--a9c0a62d-beb2-4577-aee2-01cdeb2ab12d", "indicator--b754f6d5-4e7f-4a63-a7a1-bcc54437a9ac", "indicator--ed885f96-ff43-473c-a8d3-561f2769c52b", "indicator--792d4f43-b9ac-4314-9258-3032ca379d6e", "indicator--147147f0-6265-4e5f-a51d-563046dc610f", "indicator--7e18d5ee-4591-4610-8c5b-6f111c378f37", "indicator--31163e7a-4ab6-4046-b361-947dc9ab254d", "indicator--5c416378-b836-4c5e-8aca-ab88ff5b783c", "indicator--bffe3d15-f52c-4065-b19e-7eb6cd7a1ae6", "indicator--cfc5ac47-f2a7-4913-a3ab-04cabef96266", "indicator--3ab41c3b-bdb2-4b66-9ef6-44e908e425fe", "indicator--89d263c0-93a3-4add-b8aa-fc9c6901235a", "indicator--e1bcf288-4287-4b77-888f-054c5bae1a3c", "indicator--53ab3db7-cb1f-4e9e-80e0-2801abef04b2", "indicator--65b57b5f-43e6-4f9b-8c2a-7bb5106286be", "indicator--a364ee18-7b26-4333-af5a-45fb9657de09", "indicator--d80f14b3-b748-46a8-8c3c-5f418c2d6210", "indicator--753c19a2-c132-412c-80db-a2b1ad326825", "indicator--9b4ae539-4e41-433b-9479-dabb4e3124a4", "indicator--a7e6d008-7927-42f7-9398-31c13b59b2b7", "indicator--e76a26e9-221e-4e3e-a239-7ce6d7c9eab9", "indicator--a2481796-aa2c-462d-a0fe-07bfdd51dc7e", "indicator--b7b9b334-8c00-4ba5-a918-0020ad6a76b7", "indicator--969c089b-d0db-4b7d-9a97-f1e913750fcf", "indicator--0ae4767c-b465-44a1-b59f-5e354025a26d", "indicator--cc7e4297-d751-43e3-87c0-193b34a5307d", "indicator--99dfb8d8-a670-4052-b90e-e92cce9bd4b1", "indicator--40463d11-21ad-471f-89ae-9a7ca27855f2", "indicator--e7852896-c5a9-47a1-88d8-5df405760219", "indicator--6d11f2da-2816-4c94-b6f9-81acae4d68ef", "indicator--a336d71a-0973-496c-9896-32505f12ba6c", "indicator--5aa4f8b6-6a5b-41b6-9c6e-13409db09d85", "indicator--3a18e9ec-de19-4a22-9a9c-15707e9370b2", "indicator--79135fc7-58c5-4f77-a936-5f4e652ddd42", "indicator--349f0d80-fae4-414d-8a3f-d48c31a0e840", "indicator--5b2de52d-7e58-4d61-a94d-6cfbc93717e3", "indicator--a8ba5234-77d9-44ea-9c49-0d814956ad78", "indicator--a473a26b-1d35-4248-bee2-0cc6ff29da39", "indicator--0bfc36e2-fcdf-4009-ae6b-cd918b9097b5", "indicator--d7a46086-a929-413a-8c2b-7db73f58bf74", "indicator--4787a1b2-b603-4147-ac31-e1e4c3d5ffd7", "indicator--418bebe1-f8e2-46d3-9741-df699e10ac3f", "indicator--f9b502e8-ec05-41ac-955b-b5eb47fc7b39", "indicator--0a82fada-c6ee-42fc-bd5c-0ff7b9c383bc", "indicator--ff1d9b0c-bbca-40f1-aad1-ad5ca56fa810", "indicator--65ebcab6-a6a1-4cf2-b0da-61c7ac30fd64", "indicator--7327950e-9bcd-41c8-ad6b-9b10f587348b", "indicator--396392af-0a46-47c0-be54-e972f727f088", "indicator--36005686-1668-4c09-ae45-58a2e440b907", "indicator--b110ca39-1710-4364-9afd-e5daf3e7d0b2", "indicator--eef5f050-facf-4ef4-8849-c6d633785e72", "indicator--efc08ba7-02ad-4a97-bfa8-904e7da644f9", "indicator--01e8d3e1-8a3e-475d-a5bb-350422218e4b", "indicator--8c84aa83-140c-4408-9c7c-73dde9ac7deb", "indicator--8bf4a857-4ddf-4902-b711-b1b96a9102b0", "indicator--e1fe14a5-58c6-440b-b7f7-b6dc1686ead8", "indicator--35164766-e831-44b4-8b57-9303f233b6bb", "indicator--a02b486d-7948-4d85-964d-bf6ee8047f60", "indicator--4ba7f654-fa4f-41ab-9bdb-06bed9b7f4ff", "indicator--b94faea5-7cc0-4040-84b0-e181c6cc86c9", "indicator--00a267cf-77bf-4ed5-b6df-8fe470fff893", "indicator--d4fff623-f4e2-4412-86c8-767da72d972c", "indicator--f54100b2-0f38-492a-a387-d0a1654f16f9", "indicator--dd53b7f9-0c78-496d-8eef-18acaa069180", "indicator--f1c73218-fcec-474b-8b5b-a7a157f80091", "indicator--c19a36f7-8355-4af0-b6c5-ee1939890233", "indicator--7788690d-ef72-431d-9896-9d7208ef5892", "indicator--bde1c0bc-4394-4e65-9821-83c58d6a2748", "indicator--b3dc5bee-0a1a-4e9a-8e74-584c2e88992e", "indicator--41b4fd1f-f43f-43da-8dc5-1f4a2b11367f", "indicator--c3f0240b-d077-4e45-b292-74908dd8c32a", "indicator--6b1907ff-5298-4025-8e6f-08156424f436", "indicator--0875a4af-a96e-4dd3-91b4-929a034767c1", "indicator--8074b17f-bb70-441d-9447-6685a8d90222", "indicator--c3fbec08-e7d9-472e-84b3-6308095ef8a0", "indicator--6433381f-c765-4311-95ed-66136a45c8ec", "indicator--d8cf1742-55b3-4c47-b65a-087d252cb08d", "indicator--f3fb3c27-d9a2-44b8-be23-2df42a9a3684", "indicator--8ecb8039-72d3-4fea-b6ec-259a5fda9cc1", "indicator--9b3c0909-e79f-403e-bb53-d6f09f9ed5cd", "indicator--a8794bd5-f7aa-4483-8901-4a5f0e60e2b0", "indicator--27bd6ae6-f36a-40e2-a8df-57dd4ef66d10", "indicator--b9e8e59d-9d81-48e5-8235-6fadcf83cc25", "indicator--316a30c2-c642-4047-81ce-58c8bec4a68c", "indicator--64b5afd3-f344-4030-99a2-156fcdc959b8", "indicator--54cf8810-7082-450b-b87c-8cd4ab48960a", "indicator--e6ec41ba-304d-44f4-a608-a6bd54ee63e7", "indicator--04a3ad56-cae3-4b59-b9c3-0bfb62938344", "indicator--66a9655c-a01f-491c-9bd7-a43252381a49", "indicator--62ea5eb9-7864-44b5-ada7-8aed6139a715", "indicator--2c31aaea-8ea9-4d66-8b7d-d08f8e50f5c6", "indicator--be1c3ce4-489d-48ee-8dd1-f56606b2a090", "indicator--a3851435-d8f7-4e70-bd32-bf635614cd9c", "indicator--bc2ccca6-c9af-4b88-89b0-4f979b429c75", "indicator--ade3ce73-37fe-4a10-8cac-0ac4ea9dc143", "indicator--ca319c5a-c33c-40fc-b0f4-dfbb575db295", "indicator--2d62defe-bd50-4db8-a137-00eba87b45ce", "indicator--ac82a433-b2ff-45ed-8b65-b8ae14c3db70", "indicator--99d9a498-7c2f-4190-84d2-7464fe410640", "indicator--d15ac951-3dfa-4fc6-afd6-b6e1f5bf21cd", "indicator--4ba74db3-df71-41b7-8705-95d1d32bfe9b", "indicator--2699027a-27cd-4d94-9db1-77f9701dae5d", "indicator--c4addf30-cb0e-47cc-84ef-e27e013ed76b", "indicator--eed464f3-88f5-4104-9a10-29ec83b29573", "indicator--e1a500e5-c946-4dab-a2c4-738479755d01", "indicator--46c7d9ab-22ae-439e-a01f-31752eaac2f1", "indicator--e83d38b1-2ecd-4ce9-aa72-e74c913e6a04", "indicator--df2db165-61ad-44de-b4a1-4f3062399177", "indicator--73d9900d-ba8e-4e9c-8e72-174e5bc45822", "indicator--b049aff4-db61-4064-918e-ae79ddfe5ee1", "indicator--e188ce74-3d6d-47d6-aefe-cb8b38f5c803", "indicator--663758df-adc3-47c2-97c5-979713db5e66", "indicator--adf4c98b-2d46-4de4-9743-3dedf3193ba7", "indicator--f1af3e1b-96de-4e75-831b-9a2eeffb943e", "indicator--2d8371bc-e3d4-45df-aada-5d311c18fe42", "indicator--58674465-4534-4a5f-a334-dace89aa030b", "indicator--c9467292-e5cd-48a6-952c-b503b6b2045d", "indicator--3f303af9-4b0b-4468-af41-5d693a08b85a", "indicator--c3591946-68af-4e4e-9ba4-0b6e211cee3d", "indicator--6ab3c413-1c90-440d-8926-a6a7d7cbf1bc", "indicator--3a6acdba-155f-4487-887d-e839e5adaf63", "indicator--70dc0ed4-ec37-4ccb-bb2d-91fe8afbe8a9", "indicator--5cb9d60b-4e87-431f-9028-1884ff69c1db", "indicator--8a079fba-6822-4d70-92a0-07682c8aabbc", "indicator--e0f01d2e-c425-4f7a-a2ce-0b2612bb298c", "indicator--0146c058-48ab-4409-a07d-a239d9302ab0", "indicator--0dace035-966b-4626-b120-caf0069cabbf", "indicator--b08cfd26-43c3-411b-bcae-adbc0e1ff4fa", "indicator--ee40cedf-5199-429a-b7bc-38cbc8b0962a", "indicator--f516103c-e7c9-4f4d-8b41-64925cdd07b2", "indicator--0ce0610d-e6b7-49ed-a888-dc181673850c", "indicator--35d3c1c2-d796-430b-8255-72f6410aaa36", "indicator--3fae84a8-73e6-4b3d-a1bc-bce38d1a855a", "indicator--d1c9333a-b3da-435e-a941-0325102d2cf0", "indicator--ae1ecc88-3da4-48e2-8b07-fe9146dd8bf2", "indicator--be0180a0-d435-493a-8737-6a3f721031b3", "indicator--7e26ca0e-3a12-4fa3-ba1d-f6c9bb8b0895", "indicator--fa8cd27b-ee4c-429e-8277-e58df4e25281", "indicator--653eeca5-189e-4e90-991c-9f2fcfe36f74", "indicator--e58cd184-8156-4e04-bb91-6e6a44f8116e", "indicator--03d28bde-591c-4628-9784-85af31607fcc", "indicator--702d5535-65be-439a-a332-f45f244c36f5", "indicator--ed735336-bd13-456f-9865-815c8f65b20b", "indicator--672996bc-9d35-4c6f-9681-21fca7f04538", "indicator--f328f00e-4100-4d6c-846d-dddb2a3f6662", "indicator--5b56836a-65e9-4a33-b42e-150f94f9cbff", "indicator--eefcd8d5-32d1-4460-b429-fe688afe0c8b", "indicator--703dfa03-61ff-4678-907d-5537821037b8", "indicator--aaf45494-a0bb-486e-b072-8de127d24d0f", "indicator--a0179bad-8c81-49cc-b3a7-8fed09473d0e", "indicator--62e1f562-4c46-4174-b629-0e9a0f45d27e", "indicator--15ca1d95-accc-4e25-881f-ca1e17561957", "indicator--8cd1fe5f-c323-4c69-8618-c700e699dc69", "indicator--8a9d9c9b-fb20-44e0-957c-dba1ad6af8c8", "indicator--1163d50d-30ef-440c-81e4-4b3cba3d7227", "indicator--018ee9c0-12e5-4fbd-8535-3b215cead98c", "indicator--ac77201f-aa8b-4dd2-bc56-12fac9d2574e", "indicator--003d04bf-e954-482f-bd4f-a15e44049ac3", "indicator--82d773f2-96fd-4eef-ad52-39f1fb2096d2", "indicator--3704bb8c-5087-45bd-a9e3-6e7d97ba647f", "indicator--c8df69f4-a505-4c27-8e00-5069d312246d", "indicator--bf5d0245-ce95-44f9-8eff-ad05bf2350f5", "indicator--61036960-d6a0-431e-805a-19ed519d6316", "indicator--e098d262-dfa4-44fc-ba80-5d48b004e915", "indicator--7dda5bea-c390-4511-bf3a-122520075e7a", "indicator--9019efe1-f2a6-44b8-930d-ed9d6ffd6295", "indicator--433c8532-6576-4f8a-bdb1-f748add7dbf9", "indicator--c6feca58-1f15-4d02-b503-a3679c4e7fb8", "indicator--91be8804-955c-49a0-b3fd-861951e610a8", "indicator--603ed87f-2d52-44db-af42-26532030e44c", "indicator--b1f24b7a-692c-4a46-8317-7dc8b08443bc", "indicator--2b078f24-58b3-4740-b7f8-dc214300f08e", "indicator--f98261d2-0c29-43e2-8209-428748740d06", "indicator--0cc6d363-ba5b-4d6e-adde-aa34ffd4f8a8", "indicator--02d02c34-7502-493e-ae84-342739d54553", "indicator--089e2e1e-3814-49af-b38c-2c5e4c2e3f05", "indicator--503b4f92-b83b-4651-9099-ef69b57ee896", "indicator--40c76344-6669-4f97-b9b3-2c55abf28795", "indicator--f38ad61a-e914-4831-9931-77a221289f0a", "indicator--f58866f3-43e8-445b-b6fd-c2a89825c628", "indicator--e7d87bd7-f9c4-476f-96c0-afea3fbdf705", "indicator--1b3effbd-0341-43a8-a978-4ff9a78fd624", "indicator--90403eb7-46b6-4f0a-9d67-1e9607853f8b", "indicator--9e68b5e9-1f21-48dd-86e2-10348f4f38d8", "indicator--91cfb7f5-0ca8-48d4-a749-e6ce0623d0c5", "indicator--5782832c-535d-4dd5-8269-e756a5229cd8", "indicator--d21a0b8a-f118-4d3b-8856-c1baeb955006", "indicator--b8af6323-fd36-4f8c-ac45-f5d78d9e0389", "indicator--b855d474-aceb-4d91-8c81-de568ee05674", "indicator--12c7dac6-f055-4d3f-8042-25a2046f37cd", "indicator--f006bf12-fd1f-46d1-b7c8-6bdd3156845c", "indicator--9ae09e37-0acf-4a36-9a55-1db3eae59690", "indicator--2ab42336-87c1-47ef-8f95-b6a28ef9d77a", "indicator--afb2eb4a-ddef-4a62-958e-71419fe185e0", "indicator--edd84265-1b21-4089-a220-f35e4d572f1f", "indicator--57a861f3-4896-4b15-ac94-15b0f96be691", "indicator--e0842201-739b-4281-9408-b1a3101748c4", "indicator--8aa3d1c0-8fdc-4aeb-b987-1587616755c0", "indicator--0e781a54-e709-4be8-903d-f16a7f5d1a8e", "indicator--21804636-9404-4029-a7fb-bf9ccc9bad13", "indicator--a37f8142-1d72-4bee-b0a1-43c51cbf283a", "indicator--c0627301-6036-4919-b35f-24f1c7c753e1", "indicator--eebe84f1-67d8-4616-a0bc-c8cee0fcc534", "indicator--179cc602-1ba0-4b5a-8806-49a32a78bb75", "indicator--cd35c995-36f0-4366-b16f-3b16abe4eec1", "indicator--3dcc83f6-a0e0-47b5-a932-2434385a46a2", "indicator--f2c81cde-7b1b-4db9-9e05-9f82be47f982", "indicator--8067f468-7199-45fd-af3f-ec39fcf810c6", "indicator--ccc7bc51-f361-4d29-a682-8dac07d08aba", "indicator--fc33f269-5ea7-48be-a47a-7b0b6c0b9e13", "indicator--9f51e990-d846-467d-a1d9-953dcad630ed", "indicator--4be9a7f1-83be-4499-b2e8-414ae4efecdc", "indicator--d7361df1-628c-45ac-8677-24b089023add", "indicator--58288f24-32e7-4910-9d2e-aa0a5ea7b103", "indicator--c3c0cbe7-d34e-42ce-bde5-cbfc065788eb", "indicator--53642a4a-6115-48a4-a5c5-0e23c19d609b", "indicator--b36e25bb-7065-451c-8d76-6cb54182645e", "indicator--3f7b0d62-053d-447c-874b-b48f667179e7", "indicator--2b1d33fe-6f6b-4bdb-bfc4-ab5e3693708c", "indicator--8e5060fe-007c-4e9b-b305-a5d03d8a390a", "indicator--d260e793-4f1a-4e6b-8cfd-b2bed0ffd2dd", "indicator--7bc9e658-9153-4c12-b1fc-4a3593522133", "indicator--e629eb3c-8668-4059-9895-18eae20c94f8", "indicator--3946331d-6952-42ff-9148-44fccdb1dd8a", "indicator--a3d077c3-c088-44fa-8881-9ee2542f5ec2", "indicator--810991ab-9341-4da9-a26c-b05e050d4ec6", "indicator--0ec5fd6b-f452-4106-89fd-11404f5ae4d4", "indicator--d518c1aa-712a-4af4-8023-9d16ca5dca94", "indicator--573da8ab-eb11-4385-abf1-a7210b726e87", "indicator--d2c4c0c5-43cc-44de-9687-0c198cef64b7", "indicator--d4d5789a-4662-4f93-8576-6b9c8ef6ce92", "indicator--54349c94-dd7d-4e17-89c6-845eec47d740", "indicator--471c629c-f8cb-4c48-b423-d0a4e7a3dc49", "indicator--512c41ce-cb3e-4f84-967f-a660c05e7d76", "indicator--7c3633ad-2c32-45cc-8c3e-17bf60beecb0", "indicator--0801105c-24cc-4808-beb4-63c9382923af", "indicator--05a35857-4032-41d7-b223-05b9a66e7082", "indicator--26aad55e-b5ee-41ce-bb2e-7ad0d236610f", "indicator--7176a89a-dbb5-4c62-8cb3-8ec371154a02", "indicator--77c07c65-6b3c-464a-826b-a69d6f461ab2", "indicator--0fb3ff7d-25e9-477d-99de-d14aa27177fa", "indicator--91d33826-1b62-4d4f-b54e-aac7f053081a", "indicator--15cf4fbb-649d-456d-ba3d-ef1f02a33b1e", "indicator--3ee1bc7c-de07-4695-abc8-86747afb9fa6", "indicator--361e443d-4506-46ba-8bbd-aa8197c6a79e", "indicator--39505c38-b9ee-47b6-96d8-426feef7437e", "indicator--b6dee27d-279a-4de9-a78d-53f64b9343aa", "indicator--84c64707-3b01-41d5-88f2-a4a536b4d1e8", "indicator--f482acab-3317-40ee-972a-5bcee5dfedb8", "indicator--af53cf33-798e-40aa-ae5c-913d56fa9010", "indicator--5509cc81-8992-40c0-8146-b4e6e8ca336f", "indicator--0c196553-8689-42ea-8065-fd693049c915", "indicator--22b9e3e1-b815-4f6e-88fa-511bbd7967f1", "indicator--f4d7524e-e949-42f8-b75e-15a67ae82819", "indicator--756ee8f1-1aff-4d97-9a12-971e1a12c474", "indicator--ce1d31c7-b885-48c5-b3a0-4e08013dc678", "indicator--7d4a29b0-fde2-4353-a95c-49e963655aa7", "indicator--b665227b-9e32-48e5-af2b-b6382b42b129", "indicator--bf29e5ba-52e8-445c-a576-5338a387b07d", "indicator--9814f65b-c967-4393-a2ef-5342cc2d6104", "indicator--ebb23e80-28de-4b46-9d3b-bb20b2c413a7", "indicator--918a46b1-b174-4063-85fb-d0f8587b7544", "indicator--c46e5d6f-63fc-499a-a543-1b27e10edd13", "indicator--f616e027-6b0e-4ba0-8824-24d4316d39d1", "indicator--b8659575-5c98-4c01-afc3-390ebefb1c71", "indicator--24b6d9f5-c442-485c-854d-49836ec8733e", "indicator--9e0c25d8-e96d-430b-a7ac-f9132c1c524c", "indicator--3386f6f9-5483-46b3-81fc-0840014c3027", "indicator--88e7797c-9317-4d4e-9566-ca76b961d57d", "indicator--6220bd71-4fb3-465c-8429-39e5543d0f62", "indicator--8a876d58-ced8-4542-aa46-9af884c51f97", "indicator--80a4ae82-24a5-44ef-9a00-5af8e1586700", "indicator--af82a4b5-e325-4cfe-abfa-2706966bfbd1", "indicator--a16cf19a-fc6c-4a12-9f80-8322161f269c", "indicator--3bbd8248-d782-4a51-943a-46917a81fd44", "indicator--761f39a8-bdfe-4001-85c0-36a3063b5315", "indicator--ef20faff-6248-40c3-a980-651103691ace", "indicator--fd64c015-5de2-4dea-a3c7-4278a92b41f7", "indicator--d9ab86e5-aac4-493d-8b94-fa869dcf6383", "indicator--04a37f48-444f-45c9-824a-8425b5cda117", "indicator--e7042c7a-d59f-417d-aff9-46b8670f9de8", "indicator--309b2b2c-beff-40c5-af28-39394a7570a0", "indicator--89f19f06-157d-406e-b2af-61b25d120e82", "indicator--07319128-4d9e-4b2d-b369-e99bd85beb9b", "indicator--2ec7da4f-5dba-458d-83ad-72b74d99c43d", "indicator--0f9d7658-4cd3-4b69-ad01-b51cf5e890e8", "indicator--c37b2f32-e7cd-4c79-abeb-147b567518ed", "indicator--1cee282f-b703-4aef-b3d2-4c77fe8b7acc", "indicator--06469282-05c5-472d-bf28-a6ac8b447886", "indicator--0a7295ce-ed4d-4371-9297-a176cc7b673e", "indicator--f4bc6d5c-de91-4d0d-b691-647269690c35", "indicator--bb6376d7-d0e5-4de9-908c-7608ddc19840", "indicator--9cd28d0c-81e0-47cb-8480-f233f05e9f70", "indicator--a745bfe5-5bd6-4fbb-87e8-a20ced56a619", "indicator--9bf2bc06-8d2a-4716-b2d7-707fb6de2e08", "indicator--d9a70f2b-8291-45fe-a465-80ecd76f12bf", "indicator--cd2bf981-c9e5-4d10-8b75-56a7d585b650", "indicator--2e648e88-dc62-41a3-8ea6-c212c999a4b4", "indicator--6b36ae7f-f3a0-49f2-8a74-e7b2897fefdf", "indicator--7c00f4ae-adf4-455b-806b-668b84bdea80", "indicator--3353aeec-02ce-479f-83ce-aa3910b7a251", "indicator--363bdc22-318d-436b-ac28-2dccca2b7c0d", "indicator--2d1ad282-fbd0-4bc3-980b-674a3c436c76", "indicator--84151804-6909-4731-b52e-85fc68d9af09", "indicator--6a8a3b64-520e-4b07-8690-27776f2caf9b", "indicator--8c58a07a-5150-4165-b41b-b84a2ecca276", "indicator--db5d75c0-f26e-41d4-9d9c-3c008175a25e", "indicator--eee01ea2-7d3c-433a-8f16-4fbe3e207864", "indicator--78916a50-0c63-4845-82c3-b18f8215ff64", "indicator--d1d3354c-c033-45db-968b-513fabdb24f5", "indicator--13c27f9f-2232-4e35-8f06-9c3494cf9d24", "indicator--25549779-a8b9-4f63-9859-81bf8f2a9e69", "indicator--477eebd5-1c63-463e-b641-df9f1d37b707", "indicator--bb016ee5-7c16-4777-8988-5051e25e12ae", "indicator--abc0df76-c8cd-4ac2-b504-d14425ff050e", "indicator--8a5c70d8-a717-4a11-8c2b-d02c89e555d8", "indicator--ece17f4a-147c-4bec-924a-b7337626cd78", "indicator--ce30e847-57c2-40a7-8d35-6607eda875c9", "indicator--615dce5d-e7dc-4c49-a3fb-87cc716428ad", "indicator--849b80b1-4307-4908-a185-049f47dfb87b", "indicator--e47e9c60-b581-4059-ae9d-094026d7399e", "indicator--74470f77-920c-4775-aace-62af5a7e9b96", "indicator--d45195c9-89ac-4d5c-9b69-f11b107a4c3a", "indicator--307d1856-0c48-41f2-859d-1032eafc0dc3", "indicator--c7ba8987-ac02-4ece-9033-0e2001e245ea", "indicator--b12ba566-e4f7-4bd3-982f-37c0447d9085", "indicator--eca96126-e619-4ae1-9a5b-c624555e91df", "indicator--47c678dc-d0e2-4d94-aff5-27b5ca9f1a89", "indicator--0a554c9a-1273-459b-a830-c2f907f87f40", "indicator--b7d9efdd-2826-4154-8033-2bcc627795ae", "indicator--625df109-2ba7-4a61-b582-29349e426286", "indicator--07c9f654-b8e1-4b33-9aa3-4f4d9bb52b6e", "indicator--7e699407-d9ec-4cec-93a7-a1fc164d583b", "indicator--062c3e70-c162-4c22-9bf2-e443c0f8afda", "indicator--0d905517-02e9-45c9-a0a0-82f85dfa9c8f", "indicator--6596b040-a68f-420d-b2f6-318f0b5ff4d4", "indicator--7d691096-35b9-4a8a-b376-c6a4b6bcd462", "indicator--175f4101-f2cb-4ef8-9d85-a9751c34aab4", "indicator--a2ef57ec-ec41-417b-ad47-c64d0abc5f68", "indicator--626f229a-2685-4d21-9a00-808c141b43b0", "indicator--e3b3ac99-358f-463f-9945-1f6a74e35423", "indicator--aabf8e57-01bf-4656-9d07-5c33ee5fbac7", "indicator--76045ce1-a621-468d-94c5-b9169dee08ad", "indicator--fb7b6d07-aa0f-4f1e-b7e7-f4d185ed0e85", "indicator--48125a63-3496-4e56-81a9-2ac173c35728", "indicator--c6176dbf-78d8-4aac-ab5e-55fef9bb0ed5", "indicator--5843f7de-02b4-410f-8ca5-cec562335952", "indicator--3ab84a5f-9ddc-4050-9cf8-cc4cd1ac50f6", "indicator--284fbc79-24b6-46b9-982c-79bdf5c8727d", "indicator--48e41d41-1e84-4af5-b53c-60e349206711", "indicator--11bbab91-b0ff-423c-9445-007396ad32a1", "indicator--9a525b0d-6495-4422-9064-3095d4ac9ee6", "indicator--0c605852-18c5-494d-830d-0e76a14b33e7", "indicator--fb4ea300-6cd6-4095-bdf6-b2065cf9c05a", "indicator--1da54878-87c2-4efb-bc56-bc17305565ba", "indicator--106ebe25-e5c4-4033-a190-67a1c59e8e56", "indicator--539582b3-f295-439f-9903-4ce905c25b83", "indicator--10b84361-b939-417f-a1e9-4c29ab978920", "indicator--9abc26c0-8718-49b4-94ea-7aa840f6c7de", "indicator--36d34bf5-805e-42fd-a1d1-77c6f1c97d39", "indicator--99745b55-e5b8-485e-89a4-1ded2262495f", "indicator--3b3d0634-5d40-4bb0-a312-8174261dc39a", "indicator--d9576bc4-52af-4de4-95e4-4aa4d73f5259", "indicator--a4684d70-0012-4504-bb04-b9836906e93e", "indicator--b0bb8713-ac90-4ac4-9ff5-017a0e607f82", "indicator--2c716336-df93-432c-891c-aae1920d6353", "indicator--c8c33044-e067-409f-92a3-99620e5bbaeb", "indicator--e3c64af9-c386-42a9-960c-2bfac10c7d34", "indicator--024bb3aa-7eda-4ba0-8d9f-5b67bf8b7b48", "indicator--f7ac93d9-4132-48ac-b584-a6a107d4841e", "indicator--6e81cb4a-7ee2-4db1-85c0-ac5750416ed5", "indicator--943fcacb-b1a6-429f-82bf-dd55966a7b6c", "indicator--2fb5b133-8c94-498c-ad58-a78bf457c32d", "indicator--cafa3400-b9a2-43f3-8ab3-dffbaa7ae07c", "indicator--2f42de6f-e3bf-463f-a394-5e43f0a360b1", "indicator--fa169232-ce6b-4eb5-a245-b3843677947e", "indicator--ab74f625-f96e-42f0-8596-25c47feaf417", "indicator--c22e5498-5db1-43ad-ab4f-25c2748e6123", "indicator--bae198de-463d-4411-bc1c-40e20057e7ce", "indicator--8a21d263-a8b8-47c9-8b21-32e2ee9ffa95", "indicator--48db9fd8-032f-4362-9c90-bf2485dc1a00", "indicator--8b47b326-a001-4367-a8a0-c6acf8e92567", "indicator--9fa790c7-7dc2-40d0-8686-2813af21d7aa", "indicator--5b76520c-0245-491f-9786-cdb9f12afc3c", "indicator--ddc1dbc7-6a13-4624-b2cd-797fadc9c0b4", "indicator--ab6b32d8-3289-4ec2-b6ea-3afb0a3a0052", "indicator--f96d2fd0-7f0f-4bdc-9b41-d509ed043e03", "indicator--79c1fd31-9fae-40d9-bce3-09b82fc58be5", "indicator--0f0ee4ff-cb51-4bc2-b7bb-4ecc06ea0870", "indicator--5bd1c452-f5b7-4d66-80c8-219594aa2534", "indicator--e7d79eee-0149-452a-b0d9-9652a7c38d76", "indicator--bd2424c0-965c-40de-bde3-f4443a58a6b6", "indicator--6cc52170-d6bf-44a4-8501-8f4fac867520", "indicator--24a9487f-80bf-4009-9777-a27cc62e3ab1", "indicator--ae9c1b55-4d31-4b40-8381-15dc94a8fd3e", "indicator--a954a828-e4fd-47ed-8fab-4bd04643efa0", "indicator--68a9812f-796f-4780-bb6d-45069a7473fa", "indicator--ce7a2181-2d81-4f0e-a7c6-4d89b0875262", "indicator--27258b55-9766-4893-9cfd-e6e7e46163c1", "indicator--24057516-fca5-4b7b-9466-f7ebfe1d2653", "indicator--8c5f70cc-a5ca-4c58-a7b5-dc6ea2deb603", "indicator--f3fdef5d-2b6c-401c-a108-bf8cdf8fea1e", "indicator--8a109a5c-6ebf-4cf6-98bc-68d8686021eb", "indicator--d24e6342-bc5f-412e-9bc4-a684dbc336e0", "indicator--ad7e1713-e1de-46ac-b618-090de3b4c1de", "indicator--31e2a51a-c69b-4908-ba21-ac2d601bd43a", "indicator--f00f378e-88e6-41cc-bd75-97b371379d01", "indicator--1096bab4-72f5-400b-b92f-ad8e2d119d8b", "indicator--9c5c16af-c835-40d9-ba67-cfefcdc53bf9", "indicator--33256028-a653-4968-89c5-9be957c52e15", "indicator--91026d7a-0b2f-4bf3-9a4d-56eec8c87169", "indicator--ddeaefb7-dbcb-4e43-a69f-faf54ac6eb0b", "indicator--2a4d1963-6b00-4bba-a88b-6646dc46ec4d", "indicator--ffe1b8ea-a173-4443-9472-3a2765dcb444", "indicator--ca2c8f8a-aad6-4903-bdf6-fc41d52da57e", "indicator--29e80520-d154-4657-8a47-836063aa8abf", "indicator--2f4e4ddf-affb-47fb-b742-c35f6ece818a", "indicator--8009eb0b-80d4-446f-a35c-a30826d40b00", "indicator--603ec8ab-9b3b-4c9c-9894-a705b9b9ec84", "indicator--d84c7603-e120-4ea9-812c-bf854d01c6c0", "indicator--a825c1ac-e1a0-4e32-bbbe-2227dce8caea", "indicator--5aa5c6ea-2abe-443b-9053-4d0a2f002630", "indicator--76826730-7cd2-40aa-ac5c-e5a1132b5804", "indicator--e763d92e-db91-469c-afa5-e2e404812d25", "indicator--d3fdf29c-2ce2-4d6d-a116-ad36d0625daf", "indicator--82a8124c-e3df-495f-93b8-d8f458cd9a58", "indicator--0ff952d6-3c5f-4f76-9f8e-978a0d46a4e8", "indicator--53e0ed4c-a668-4e4e-9278-17e8e390e912", "indicator--8df8ad0e-ff3c-4a31-9a00-1d92542ef0c6", "indicator--0927e8d7-e743-417f-898d-c6ffd23e2b62", "indicator--905529e1-df3c-442d-b817-1a2508f9c27d", "indicator--756c8cfe-2106-44ec-b69d-5127ebcc50d5", "indicator--cb3b96a2-4968-4cfa-8e29-b4641fb0d5d3", "indicator--285c0033-673e-4466-bbe4-6d0f951d3e8e", "indicator--baa5ce41-6597-4bb7-bf96-28cc081f1970", "indicator--fbd096c3-ba2f-444d-9e62-fbf2dc8f6c99", "indicator--67a8336d-4e21-49d3-966f-58daddb14071", "indicator--b6313868-5836-4508-a19b-32541be33d62", "indicator--e7b07c61-2db4-4da3-9329-d8db451d7666", "indicator--08c6a870-acc3-4700-b90d-1e20e503efdc", "indicator--5e968edd-42c5-4ceb-83e0-41cba1134c4c", "indicator--aa60b366-fef9-40c3-9a27-c433dbe3b269", "indicator--a56d710b-1c1b-4a4f-b430-d19ded255596", "indicator--7dfb5425-d8a1-4930-87c0-062b9e46d08f", "indicator--ff70e714-c66e-42d8-9331-8371a8ff0fc3", "indicator--05803bc3-436f-4c0f-979c-e4c56ed29a06", "indicator--6b3fdf4f-a58f-4698-83ca-f6116620c169", "indicator--99ed03bb-e6e4-4a5a-9835-cb7b1e942c69", "indicator--f11ecf8d-6af4-4ae7-939d-997c0aaae800", "indicator--53467a8a-0f12-471d-bbd1-b8007e3ee811", "indicator--04861f87-9ae6-46c8-b376-696cbcf1b62c", "indicator--c737ff43-1186-4c51-bb27-71bc3f1c6bde", "indicator--88ccf4b8-c260-4885-a8ed-227d58e943a0", "indicator--57143553-535b-473d-96d7-203b491ea3bc", "indicator--13e3f091-e91e-46e5-8481-8250f130b4f9", "indicator--9785eb02-5e98-49b0-bc8c-8b5ff21d7eaa", "indicator--6086d5e5-c806-4c1e-8581-d548bdc80978", "indicator--081a5f7f-3866-4ce6-b60a-b7e575efd35d", "indicator--ef7c7e32-73e5-4d89-b4ad-4d34e5e69cf3", "indicator--c3033ff9-c5e5-4005-a7cd-c47f83ab6147", "indicator--ad4683ff-cb4d-42d4-a242-58763ba0637d", "indicator--e492c29e-01f9-4d68-9ee8-bf858f281e70", "indicator--2fd795a5-688c-4155-8d64-d8f6a8ebe041", "indicator--0488f617-e8fe-4347-96b0-38bb228e0fc9", "indicator--0897d389-7c75-4a14-a2a3-275f84b99899", "indicator--b57d0529-b0eb-42c5-91a1-4dad9a7c0dc1", "indicator--1b0ba29d-af2a-42c0-be44-ddc05fc2431e", "indicator--25750ec2-800c-464a-bcb5-ef5b396dee75", "indicator--7109c74d-5be2-4d5d-b0ad-c175636b7156", "indicator--ddd6e982-f140-4431-8ce6-e12c02ba7e91", "indicator--d344dd6b-4e7e-492d-b209-93625991f39b", "indicator--2312b341-f790-4353-88a2-062b74a47c29", "indicator--cd63d912-5526-4c05-abfe-ac5827471a7e", "indicator--d5e8ef75-1890-4786-b90a-14efaba10e2a", "indicator--6caa89aa-4aec-4503-a5a7-c03525bc9088", "indicator--7c1d21bc-31e7-4d1d-9a69-df1d384dd79b", "indicator--7977286b-5908-490a-826a-46860daceddf", "indicator--35021da1-c810-4531-bafb-b324e279dceb", "indicator--7f86cd70-d5ba-4ec6-806f-8bfe053d6300", "indicator--86e27ed9-83c9-4ec4-9178-a1e520cdcc20", "indicator--f032cad3-210f-4a45-8253-c5bbc576616d", "indicator--326e23a7-f76f-4fa7-bfc5-cd8c44286b47", "indicator--c52f4f2a-bca4-478d-a4eb-ded8dfe5d693", "indicator--41650203-80f4-4343-8901-d46b317be662", "indicator--25ae7521-ab7c-4c5b-846e-3ccb1170d723", "indicator--360b4f32-8850-4e52-8cd7-7ffb73475be6", "indicator--26522790-e5e0-40f9-b430-d30e8069952b", "indicator--ea8d4419-8a35-4761-8193-f41f8dae14be", "indicator--c436c8f9-83f7-4879-81f3-d7f1b0fbfdfb", "indicator--6c0f7b90-418a-480c-a2cd-10081e73f5cc", "indicator--8d274f6c-854e-48d5-9da1-50329a7aa93c", "indicator--c2b23fca-7edd-435d-89d4-e6e11464f6f3", "indicator--026a7a22-e91e-4be0-89c5-6cecf93b0caf", "indicator--27ffbb65-43db-41b1-bef2-d5ab12c7e982", "indicator--f962d272-4b71-4930-9644-5a6c50da4bd1", "indicator--719b00a9-a353-4702-a8b1-bfe2b03d3856", "indicator--b8f214e2-1b9c-4124-91af-9ae056f6b151", "indicator--1da5d1ff-8e47-4475-9c83-de1e97ba926a", "indicator--e57cd856-f777-4b76-b6ae-60e28dde78fe", "indicator--73970457-ce69-49d2-9735-e04d64057f2b", "indicator--0a5a7558-9e83-4776-8d91-eb21fbc200e0", "indicator--05ea8bd5-5ae2-423e-8b80-b8ac9e225718", "indicator--3ffef4e4-2965-41d0-bafb-7ca8b3a9ee10", "indicator--d90c066c-c889-4796-b5ce-45f1a0bca725", "indicator--ace6ae59-6849-47cf-ba0d-17ea012f2567", "indicator--6d553fcf-e520-45dc-b2b9-f2b4479679b0", "indicator--f0ac46cc-0aa2-47c2-938f-4430b574475f", "indicator--629dd2fd-3466-4324-8b91-ae1be675dc10", "indicator--6a8c5a3a-c449-48dd-9d9f-3a41ec75bdb2", "indicator--bec8b965-aa72-4724-92da-e69f52e98e0d", "indicator--6359fa32-d9af-493f-9a43-2c6d1a8212e6", "indicator--c02bd96f-1356-4cdf-ba8a-069d7153b6a5", "indicator--b7dccfc3-5d9d-4804-b4d0-9b6b6fcb89a5", "indicator--99b03057-796d-4a96-a9ff-cdc2f3e97255", "indicator--34f500ae-5f8b-46ea-ab10-46197f032942", "indicator--74c1411f-75b2-4ea3-81c2-543d5afb4e2d", "indicator--302b9530-b091-4716-acac-349012304800", "indicator--2d5aee96-b739-4c46-84e0-3d5c1b8366a7", "indicator--bd37b70a-01a2-430f-9222-8a655a188abb", "indicator--d3b8f8ec-aa25-4f78-9d82-d4a4680c7c60", "indicator--e36b01a7-1a64-40c1-8b75-3b507eb8d543", "indicator--bff9febc-7f95-4fad-bab0-dcd6094163f1", "indicator--18219dc9-1899-4e95-a5df-361f43186660", "indicator--a798f675-8dcd-46bc-8d4a-f094050eab6b", "indicator--0061feea-f6af-46a0-95b0-74615936ed73", "indicator--8bc5d7eb-78c3-414d-bff1-d3e736ea8048", "indicator--78024c56-0329-40f9-9c45-2ef61d4291b1", "indicator--0c7cd57b-a2e6-4afe-b866-7bf8b18a9851", "indicator--de4e441e-fb8f-47ba-a969-78d17b60faa4", "indicator--82b5a33d-5bb5-45f9-ba16-abcb4d85efec", "indicator--99aa47f8-ebae-49e4-8627-a7cce7449a2c", "indicator--000cc0b1-7303-4566-a4ff-2c439846295a", "indicator--d58767b7-41d2-479b-ae0f-84accad8d5ef", "indicator--1f31605d-b47d-4e41-abb0-30c4b6130244", "indicator--9240c05c-bdba-42cf-b7c4-fcfc9310f5a5", "indicator--ac132b08-9ed2-4637-8d34-d6683f320fe2", "indicator--b4043ab6-4e59-48a3-9894-42d862c60a56", "indicator--8b096eb8-31ac-4a30-8ee8-f413b2428a71", "indicator--ea86f917-f1fb-4ff9-89bd-9428248a8a0b", "indicator--fe4d16cb-8155-4d7f-9535-7069b5c6bab9", "indicator--6487f6d9-273d-4a53-9897-c60c0d0c389a", "indicator--44e3b0c2-a4ea-4152-8c0d-0fd3064b72f0", "indicator--7738aadc-f052-4719-9435-74202b0aebc2", "indicator--7da7fcc6-bb85-476e-a73b-f020154c1227", "indicator--5d7c05f8-b371-4942-bf28-c09a31012897", "indicator--e9941b4a-5c4c-405f-840b-bf0e062fcc8f", "indicator--03629f5e-cae1-4244-8d1b-436fe16784e6", "indicator--c0bc47ab-a7ea-42d3-83f0-4eda801ad9cf", "indicator--7fc81def-0c35-4562-80c0-0bcbddd1ef71", "indicator--5bc31b12-5119-4f75-91db-f7244831050b", "indicator--e1c6d9cb-48e1-4733-a11a-c3299889d73a", "indicator--cb5f3c98-fcf1-4ebf-955d-5fcab8274181", "indicator--13321b5c-ed63-4ac5-ae6e-4c05a4b56524", "indicator--20c682e9-b475-4d49-aa21-f0b88cb4daa1", "indicator--0e45338c-58ed-444a-a55c-ebb72a14dfec", "indicator--4e1e105d-e6b9-4bb1-a303-44418b6af49c", "indicator--af401505-85ba-4a49-b4ef-b412b09c4e30", "indicator--6d241571-9930-4934-8dac-4fd04c2690a6", "indicator--1727fcbb-a426-47d4-9e81-a3ea7e6e40a6", "indicator--e8edcc8e-d9ba-4812-8f87-01144ecb7239", "indicator--82567b81-78fd-4fbd-8eac-ea3000c8a1de", "indicator--d20f80e7-4424-4e02-a852-7914b7748498", "indicator--76828707-3637-49e5-811f-a1ffd3cc13e8", "indicator--d3848858-8ee9-474d-b260-4f118d55e76c", "indicator--eee34dde-8d7b-4fe8-9356-b7e378d601c8", "indicator--26e1ee6a-3ad6-4c37-9c1c-cdfed589c499", "indicator--f6b14964-dae8-4208-9653-4bfdeaa4b458", "indicator--5eb33486-ed5c-4101-9f07-491752e3aa43", "indicator--84aa5943-5c7f-4772-ae90-ff3f9ba1c966", "indicator--2cc59938-d558-4e70-b4c0-b319a612ca83", "indicator--c036ba7d-f5ac-4930-9d99-e3d687e362af", "indicator--3dbd9070-63aa-44cf-acc7-57d543e5c619", "indicator--01f41d1a-9c8d-4814-a08e-19e99359e623", "indicator--68a0a1b4-81ab-430d-845d-5a21b5c88ea8", "indicator--0eaa9f06-0e20-4980-8e8e-3373718ac829", "indicator--42a004ef-cf3e-47da-8086-2f66d650ea10", "indicator--55e6a8ad-1976-404f-9012-e9cf17085d94", "indicator--27aeebdb-2ca3-48d3-ba6a-ed919feff40d", "indicator--c711eef9-6d9c-4d9b-bcf9-87236a9659db", "indicator--da9ebcf1-6023-451d-a3b1-bed4de247816", "indicator--466c0a17-8f8a-4a4b-a694-e3fe8f960c0f", "indicator--72b0ef07-d332-40ea-bd99-3d9aa501b998", "indicator--f958ea66-d749-42e2-be42-8795d3cd4243", "indicator--3820c043-540e-427d-93d6-5e06993cf9fa", "indicator--f69e324d-9720-4786-a0c9-13d74faa745b", "indicator--f70f7bd2-e68b-437a-bb84-427ee993c39c", "indicator--19e727eb-2a2b-4fa4-b8b4-db09daf24496", "indicator--7f8684ae-3f1c-409a-8e72-7c3f248169c0", "indicator--9500d903-8215-4c3b-b3c6-ac8275d1369e", "indicator--976ec348-01e2-414f-97da-ce86f5cde07c", "indicator--2d2033b0-2be1-4394-a99e-5aa6cf755c8e", "indicator--35277236-e749-49a6-8377-eabcb8578407", "indicator--7da3b738-9318-4c8d-8d18-c753ae5d8d79", "indicator--0057dacb-9cd2-4274-8380-87fd5e6e7379", "indicator--13ca5593-479b-4a7d-8ba6-3787468e603e", "indicator--065433b8-3196-4929-9b5b-e0e3862db9aa", "indicator--a5d67e57-3e07-40cb-a6a9-fe5f0c262e76", "indicator--6896e398-a0f7-40b0-bf81-b385324eef1e", "indicator--6e5c0961-ea6d-49b9-ae83-82d52401aa6e", "indicator--4da256af-d644-4713-bb40-1060b5a0e5e1", "indicator--3f9bf2a8-4da3-45d6-bb8c-215a63cc7f97", "indicator--a5bb9b36-26d8-4bde-9d75-4a1e5246d58a", "indicator--8db9e709-7f3f-44fb-9d78-87ae1192983c", "indicator--0f0a49e7-277a-49b8-bda4-eabe54a38cb4", "indicator--30e1652f-10d4-4114-b3fb-6397a46bc297", "indicator--e9a23090-09c8-4fcf-a827-90f43e550a7b", "indicator--8ec5d72d-9c7b-4780-aef9-c1306b40741d", "indicator--9aeb21db-ad6e-498b-b7cf-819ec5c5f22d", "indicator--6a85709b-e1dd-4f39-906d-f39d8066e7e3", "indicator--c2af8581-be24-41b1-8318-50c433af730c", "indicator--bbbb555b-ec47-4a41-ab0a-0d95b3f19f7c", "indicator--b313fb13-2d53-4b72-9cb7-0e1c53e94be9", "indicator--2a0bc419-c34f-45b2-bad5-97fe41512852", "indicator--41790478-4fa6-4a77-a6e9-db1cc362d61b", "indicator--d450ae6f-90a9-4158-af51-f786cd586188", "indicator--ac7c59d1-3033-476f-96ed-917e4cf492c6", "indicator--ab9853e0-7e16-4704-a843-acd61294cdb5", "indicator--bd32ed0f-ee73-486e-9e9c-18432015cc8e", "indicator--d87f8cad-9be0-45c2-ac4a-931caf7d497e", "indicator--fc2ae624-7234-46fc-b0bd-cd127ff7549a", "indicator--da9abdbe-a272-49d0-bea4-eb7e64a942b5", "indicator--e10290f4-1e3d-48b6-811b-66d55baea6a6", "indicator--08b90215-faf6-47b9-a3c0-04366135febe", "indicator--d9b0a9ae-e017-4b33-a9f6-cc5b6278a57b", "indicator--394b8a52-1128-42dd-9a26-c02f26ae77ac", "indicator--fc80de1b-7767-4d90-8e97-b361f3a319fe", "indicator--f3ea6970-b0aa-41e7-92b6-57175c1747e4", "indicator--9aa2aaa8-c19f-41be-b41e-2be2a0b910c7", "indicator--3d76fca5-fd20-494f-8222-9b5d583bef28", "indicator--9d428c98-667c-460d-b1b7-0253eaa85486", "indicator--22af89d7-60bd-4737-aeeb-c5cf89f9045c", "indicator--608d95f3-451d-42af-a00c-9b6d3eb80cde", "indicator--09675a89-fdc7-44e8-99a3-9b963ada8d08", "indicator--983ff496-5156-44f4-ae1f-9260f368f643", "indicator--d112510a-17db-47f7-997e-9e6c9c9bbf1f", "indicator--a5a73e85-9ccf-45ab-a23a-f1a637699efb", "indicator--e79b1929-4b6a-41f9-bf2c-8c18f87a3cc7", "indicator--3846757c-1546-42ff-a383-6360a90414c5", "indicator--465839f6-0b5a-4e42-b2f9-7f07d16c46a0", "indicator--8bd5fbbe-7263-4e85-a806-3dc0088766ce", "indicator--34a61e48-3f66-4f51-9c87-b5388fc71974", "indicator--89136d26-ce18-49f5-a11c-bf9674d9d39e", "indicator--5f779de4-4837-42f2-8ead-e3aa78532e0e", "indicator--d546d0b9-45c6-43cc-9131-45ab67b5ebcb", "indicator--dc670f7f-d409-436d-8e2b-b3a771e3791b", "indicator--a209b52d-d07b-4309-aea6-7dd913516ee5", "indicator--aaac89e4-cffa-4fe8-97ad-b54e8121977b", "indicator--26d0f859-cea3-4268-b72c-9918fb2df3ca", "indicator--0c1c84cc-0d1c-43a4-a4ce-c36a58682eb2", "indicator--ce3f2295-5fa5-40b5-80df-9fff9a355c44", "indicator--1108d42d-f274-4ef2-908f-445675544885", "indicator--ffd2bac0-0206-43c8-a14b-7f1fe28cff86", "indicator--1cfa2102-30e4-4df6-a6a6-59888981dcd4", "indicator--d5a6ef1c-fd4c-48b6-8faf-752d61e78a19", "indicator--c269cc81-3196-4ccc-87d8-0fe156d5810d", "indicator--af0dd9ff-8757-4038-8afd-6651145f5dfe", "indicator--f3734e71-2718-4ef5-9d43-84fdab8682dd", "indicator--94aea6d5-0487-4437-a6a2-c0cbb3e8fa3a", "indicator--c8f4640f-e22d-4658-bd90-d5ddee209db1", "indicator--754716d8-98f5-43e5-8c50-009cba527bd6", "indicator--a41da0a4-5148-41e5-ac46-00048f4a207d", "indicator--54c01bae-1276-4f28-8dab-d8707f1668d3", "indicator--0f64c62f-6df4-430d-9e64-4e05c86b66b2", "indicator--145b3d12-ac87-44ea-ae75-5f249f079e22", "indicator--7ac43dbc-e332-4889-ae96-5364a08e7fde", "indicator--8ad610c4-9315-4d1a-8183-7ac227add4c1", "indicator--1508edbd-fba5-45df-ab70-9cc96b660892", "indicator--f5a89f5a-ab4d-4f24-b2a8-f3a9ee57e9a7", "indicator--28d17196-387a-4485-807f-0720cf90f935", "indicator--07de01ba-53d5-42be-bd15-fe23a182a5e1", "indicator--8e52a61e-3043-4c15-bcda-d670ec10f876", "indicator--62605567-97f9-430f-a116-ba0a76e73b4c", "indicator--23d6aa13-1c61-4374-89f1-051e094cf95b", "indicator--0986ca37-56d7-4c22-acf3-43bb5df5dc4d", "indicator--5155ae72-cb7d-4a82-8705-58176f48cc1a", "indicator--205244ae-9966-4bc2-8f8e-93b527bb9250", "indicator--238ad3f2-6b5d-4a6f-be18-265a0080a4e5", "indicator--ba1f8219-e591-4efa-ae99-5076fba38d37", "indicator--81a90275-6580-4832-861a-06c6b79ab0dd", "indicator--26736054-f913-4200-805f-33da68d44f64", "indicator--5a9550b2-9723-41dd-895d-6b87e8dbc486", "indicator--588de066-c04c-408b-bf41-a9420c72dae8", "indicator--398e577e-7337-48cf-8a57-3b12e683b428", "indicator--d12071ca-e1b8-48da-aa2b-68632f44e2e7", "indicator--9f1bd91d-e8c8-4379-b61d-063f9a07b971", "indicator--e2953386-065e-4dbf-97eb-0ceb8c8578b9", "indicator--64f2785a-a9ff-4ec9-b216-629b385803a8", "indicator--64384ab0-0e5c-4b09-b476-8edd944b4570", "indicator--547def22-3ce8-49dc-8ce6-99012aeceb29", "indicator--f9b63922-5b2d-4a32-87c1-e3c51daf55f3", "indicator--4f0d5847-0649-46e5-b43b-d2184cf97036", "indicator--63d39c07-7017-4c0b-abf8-fd5cfd29e05a", "indicator--e92b9a56-7840-4aa4-a519-b84a44fb9092", "indicator--6637f053-dd5b-42ea-9c26-581be08bbea8", "indicator--b07460b4-1a7c-4426-82cc-79b177279e54", "indicator--98bbb8f0-3bce-400d-a513-17e2e5ad0243", "indicator--ff494ed1-dc88-45b7-a383-6be1163a18ec", "indicator--f0dc940a-19f9-4dca-a62d-82704c49a4bf", "indicator--fef3835f-818b-4e5d-a167-7bec754bb847", "indicator--e4555d64-ee1f-411d-87ae-25d4c620d318", "indicator--c87e64f3-377c-470a-b927-f3e06a5f3ce3", "indicator--31c5ef26-0ec9-4002-88de-b9f58774f82e", "indicator--47b42405-622d-484d-a165-e8f2592f4718", "indicator--776183ef-386a-41bd-ad58-5a5ba96ccf51", "indicator--f2570a9b-dfed-446c-a405-ad8947ed9e21", "indicator--e3f0c525-ddc4-40f1-aa72-28adc587a1f0", "indicator--a454448b-c3b2-4b62-85a8-767e2688b22d", "indicator--c325f37e-1868-428d-a0a4-03928d096017", "indicator--4adc8537-7e74-45bd-90b1-726653ed73ef", "indicator--fef647cb-7f69-4a86-a2b0-a761b79db743", "indicator--6851a358-c359-4be8-8c59-9531099ad0e1", "indicator--fdb7235e-c7e9-4480-9eee-776d00993ea7", "indicator--1ec3399c-1ac2-497a-babb-98d9cc48c39a", "indicator--01323e09-964f-49ed-adb6-a81dfcab11d5", "indicator--143ff51f-3629-41ad-abb9-e40d5f6697d1", "indicator--760ddaf5-3470-4c54-ab81-8c53c111931c", "indicator--46a0d98c-9645-40ec-ba73-afeb9d70fb16", "indicator--51a75256-75a7-4a38-ab0b-2402a3cdd34e", "indicator--fea5396a-186a-447b-b67e-db191818a703", "indicator--2974cf34-4755-4d43-85c4-e57c66498751", "indicator--afa5994a-8c54-4e2f-9fe6-92c0e1ebcc56", "indicator--11a6c0f0-b488-412e-acf5-8104e14dc52d", "indicator--3159f431-23b1-442e-8752-06d04861993f", "indicator--6851baa5-db09-40fb-a9f7-1d93d27076a9", "indicator--563de1e4-5880-499a-875e-261dbf5b3590", "indicator--224eec2b-7c66-431b-b5cf-a06cdc8cfe53", "indicator--61366144-18ef-4954-8e9e-de94c92a89a7", "indicator--5a3d94f7-7037-451b-a3cb-89d15bd85b7b", "indicator--fc1a0779-b813-4217-84f7-d3db8ef1ceb2", "indicator--128b971d-a82e-49c9-b407-3373a43d805c", "indicator--23e34b3c-3942-4833-9eef-0cc1d0b3444c", "indicator--fe62d7b7-344e-43e8-8ccc-a958c93960e0", "indicator--a280e251-43cd-4783-9240-e7411b767c49", "indicator--19d1fcd7-5b12-4ffb-84cb-da6492af9dc1", "indicator--b767a630-45a6-4dc8-8e02-7e6a7e465585", "indicator--79b4f7ee-d0b4-4d37-924a-d25d3e27bfa9", "indicator--db5a3e94-0888-430b-80d6-a1bad1f61c62", "indicator--47a5294d-2b07-4506-b6e9-5c2cb71f1eb4", "indicator--7bdd539b-867c-4cf8-b3ef-ffcbaab094c8", "indicator--519d5e0f-ada5-4c04-b4e0-fd4d2214d2f7", "indicator--871b9b12-5e25-4706-a9e7-80368942e3d3", "indicator--0c8973dd-9e0e-44e1-a118-7f91c3a78cae", "indicator--37badd5c-d83c-46ae-bad2-77d68ce7a409", "indicator--d04c94af-c2a3-40f2-8bbe-71fc709d2337", "indicator--1639fb8f-ce2b-4a84-af01-e7803b1b5d5c", "indicator--67245763-7cf4-474f-baa6-ec4bf809957f", "indicator--2d98cf82-61f5-4492-83f1-5b4586ac2f34", "indicator--8412218f-87e5-4a7f-a777-dd4c16b467cf", "indicator--da9e9e79-353b-4a63-a53c-74f909136d52", "indicator--66939798-0d68-491f-be31-b275ad8e76b5", "indicator--8b873c9c-348f-4abe-9375-6de5ab840de8", "indicator--602a0cf2-76ae-48cb-a478-8b7f3a163663", "indicator--803d4481-00ef-4ce6-943d-27c2094b1954", "indicator--f2acdbd9-0895-4546-b4cf-1a6007d9dbdb", "indicator--40214087-0043-4634-9cb1-42c63bd5b4c1", "indicator--0d335309-99c4-49a0-ab39-5afbcda35d28", "indicator--293f4d5e-d347-4869-9dc0-796f6141042a", "indicator--0af5df65-fbb0-4701-9f4d-023d7bc1447a", "indicator--92b39032-6f34-4a15-bdc2-df3b5744ed93", "indicator--9a548d8c-3a46-49a4-81b0-2aa71f09dd5f", "indicator--01c5c6f8-4203-42a7-b1f0-528a58d5732b", "indicator--6d812ac8-8c5e-431a-84e4-326da373fcc0", "indicator--727816a9-7700-49ea-a504-4d1a6ae65cc5", "indicator--b7185899-ed35-4d99-9427-be620fd47ee8", "indicator--a80917ed-8e9f-49bd-b856-c7c8afe1beb7", "indicator--772158eb-a240-4c38-94ab-32348deeb21d", "indicator--9ac0ed53-6420-4b54-910e-d0490ba4214a", "indicator--50a86d21-570d-4c2b-925d-6a2a9c9faed9", "indicator--75702d21-9daa-40d1-85c3-7ee437542580", "indicator--aa32cd0d-067a-4736-9d8c-9c7e76344247", "indicator--0713bdb9-791d-4b6a-8aa8-09cd6082f776", "indicator--c1bab4f3-e2ed-41f6-8573-5e6fe71a3dff", "indicator--f749339f-2030-4bb5-8560-2212a49cb47a", "indicator--9f802f88-b3c9-40c2-a4ab-bf8a2e835e00", "indicator--84b21473-794d-442b-9c1e-078ca0e01adb", "indicator--111076cf-1e5d-4e0c-b199-c8d3df7b9b20", "indicator--1dcc0531-f02c-48e6-89b0-bfb0ef480702", "indicator--85b8482f-fd8c-4a2f-95d1-aea0209e3c7a", "indicator--d268b9d6-bf5e-4e2b-a5aa-f4096030802b", "indicator--4f5ed8b2-29b3-4f17-9ace-292b002e1feb", "indicator--98080499-d95d-46c8-89e7-d147259c566d", "indicator--607933ba-1bda-4d6f-afeb-0da196ff2ef6", "indicator--56058235-99f3-4a0c-a45a-4ba82c3f562b", "indicator--db71943b-6f5a-4bfe-885a-4426deeff7c7", "indicator--6f82c40b-fcff-4860-81e8-ffd2bf35f67f", "indicator--41c4f303-b783-43f6-8266-bfe63e9619a5", "indicator--7f6fc3bc-b05c-4a55-a832-377ca2dd3761", "indicator--6f2a47bf-e6cd-4468-b620-84d5327d17a4", "indicator--c059fa39-a9ed-4ea3-b5cf-59000f2ecc8c", "indicator--efa0cba5-afa1-496a-b967-456c75db5c90", "indicator--c4e902f4-84c9-491a-8e3d-bf770ceba2a5", "indicator--eeb1e94c-40cc-4241-9d62-5af472c9fde3", "indicator--30eafc58-3938-4f36-a326-4b552cfca5f3", "indicator--01d91dc9-7437-411b-93a2-ea70972d1b21", "indicator--307984a4-93d8-464d-ade2-294668cfccda", "indicator--f5f3741e-dac8-4bad-8847-183167d4ae5a", "indicator--af35c75e-38a7-4f63-af4d-89cf4b705f10", "indicator--0eb088e1-8590-4c88-961f-22c0f88a5701", "indicator--eebeb0c2-ae43-4df4-8e75-888fe353cb83", "indicator--b5affee8-976f-405d-a256-7705d4d1acd8", "indicator--6c9453d6-348a-41a0-bf82-1f7245ac91a6", "indicator--29ab8466-1720-42e9-941a-25e27c563931", "indicator--54c1c66c-33af-4d7c-9d33-9cffc1f39be1", "indicator--853dd729-843f-4e78-a549-e46d96787a4a", "indicator--7fdae60e-cd72-4819-9fc7-0a5c700da1f4", "indicator--98598de5-a63e-4400-bbd4-28fe322ff987", "indicator--ff04a99a-b819-447b-b39f-d11fba0275e0", "indicator--2e5a1bd1-d77d-4c59-9a44-74f0ad759e42", "indicator--ae9268db-3f8e-42f2-907a-7ca159dcb2eb", "indicator--27c6c7f2-19b3-4ce3-b787-193ff72677a1", "indicator--5492da96-8c8f-4783-907d-2dad315b16f0", "indicator--1d3b14d6-b374-48cf-8690-145edbd3299e", "indicator--5cabff62-7053-4337-a27e-f4dcb535e288", "indicator--bc6d42ed-8ec6-4868-aa5c-09c385f0482b", "indicator--7171616a-fe31-4e38-9a22-ed884332d807", "indicator--e61d1cba-cf42-4a9d-a0fa-f54dadb7e8f9", "indicator--e13c00e6-4829-44b6-a18b-1e7228874c51", "indicator--be11fd1b-35c0-4283-84e5-c748306c46d9", "indicator--ab4c30f4-d9fc-49b9-b0e3-0c3a89d4ae0d", "indicator--d60cc984-5624-4c12-a124-ae7f161b38b2", "indicator--2c890f6d-a2d3-4ee8-bac4-3c0862bee58d", "indicator--047e7528-d528-4d0d-9e3f-d135c78a7edf", "indicator--046e5e72-9f97-4735-9789-2f26e0631779", "indicator--d30501d3-e8f1-4158-a58d-364db264f3fe", "indicator--27740089-2b96-465e-8a9c-a4f86f795666", "indicator--64169d46-ab19-48cc-add7-190fe1d8cb59", "indicator--5cc91a89-bb6a-4a95-a52b-19693914a9e9", "indicator--0988e114-33a3-47b8-81ac-d3747380f273", "indicator--f5f1aec2-93c2-462b-a23a-fd70802e7de2", "indicator--1756c089-04c5-4fcf-b676-ef04cbafd77f", "indicator--5029f934-d5a9-45b1-94c2-50416f4b8b31", "indicator--2debe698-6c14-4149-8610-1844400c1833", "indicator--9ff8dd15-132c-46a7-b7cc-0a43d0d906d5", "indicator--a1937e4e-3a0e-4916-b26e-5029264c4c4e", "indicator--1b40e789-75a1-45a6-bada-ede3e7f34a06", "indicator--3afde6f3-8255-4614-972f-0b1149933423", "indicator--808e55ab-c31e-4e03-aab7-9e3660448e2c", "indicator--375021ab-5f58-453b-8813-779a0c1cc29a", "indicator--6a6d47ec-bfff-436a-8945-c48ed3171b97", "indicator--2ca90fa8-17c0-4ed1-88db-23bd68f1f7ad", "indicator--cb9d4cfc-ee1c-4544-a7a5-66c3d934ad96", "indicator--82810e8e-0699-4da5-a68c-c1449d63c86a", "indicator--4e02df50-a454-4d27-b246-2ff82d0c9987", "indicator--0d84ffd1-31ed-431c-b3cd-916528b61ff4", "indicator--82252152-387d-4f1c-986d-b926c5a93bb1", "indicator--4fea33ae-dd24-4011-aab4-0881c4530964", "indicator--e1405d8b-618a-462e-8d4a-0a3081b3938e", "indicator--39851a0f-ead4-4194-88d9-1041c98b932b", "indicator--1fe7000b-4dd4-46d6-acac-b08174812620", "indicator--4b6060cc-bd8f-40c8-9afc-725d454881c5", "indicator--365a19b9-d471-4372-9582-6aeb215c7e9f", "indicator--672b25b5-a79a-4aeb-8ccc-bd74aeeb00a6", "indicator--1559ac4a-f0de-490d-9887-5fc7948a6e8d", "indicator--72dfe556-94f8-42fd-8e40-391eb44e9675", "indicator--3ee184cd-30e3-475f-ae56-119032c3cb11", "indicator--bfdb53ba-706b-48a8-8257-1659138f77c9", "indicator--f1d49653-b092-4cfb-bef0-906b73a8b498", "indicator--c661f5f1-305c-456a-99b6-175f535a577d", "indicator--782fbb2c-c528-497d-b0ec-6d4636e8e3f8", "indicator--bc0633b6-ed9c-46ef-ae32-2f782e11fd60", "indicator--aeca8ebd-c526-4101-b4bf-2f4eb99400b7", "indicator--33c475a2-0b35-4552-b822-4a1b77ebcf23", "indicator--0a075f96-0ba3-4b3c-b4bb-a1c5bc622b5b", "indicator--700a4b1c-8423-47ab-9002-291b6fdeb8db", "indicator--ce943ed9-d7b2-421a-8b05-e7f48fdea3c9", "indicator--e49357a4-b864-4eda-a2a3-3583d595f3b1", "indicator--6b3cb793-de87-4cbc-a2c1-82860f0b3586", "indicator--cd0ea61d-4e9e-4a63-bb49-c809f0f7d035", "indicator--946cb724-4eae-4b54-bca8-5bf73f015a90", "indicator--07fc0fb2-e69c-4590-b25f-c1893ad512d7", "indicator--2d73812e-d9bf-4524-aa3b-e70bc21a2e77", "indicator--d2baa06e-99da-42f6-940c-32ecb8fdd2df", "indicator--18e8ce11-0e53-47dd-8269-a9e098bd6c41", "indicator--448276a2-e796-4e9f-b004-e7cd91bdefe8", "indicator--d193d0f9-d26a-41f9-9a57-08a5b9d8d16f", "indicator--70a6ffc0-84b5-4870-a3e8-ab81eda006d8", "indicator--88378ed8-7e9d-4dd0-b165-1159bf76f7cb", "indicator--3e2525ad-6722-4d8b-86b1-e3548e29a365", "indicator--ee94c4a3-3335-433a-bac9-a325d71ce2d0", "indicator--a1da0122-bc86-4d49-a2b0-35001a1cc242", "indicator--4e5a6ac6-77b6-4727-b499-6726c538b565", "indicator--929833b2-6754-4e6c-9e12-dc6cbc99b0c0", "indicator--2809e4b3-2223-40d2-8443-93cb099100e4", "indicator--31ae4a20-6747-4d71-bc17-f3b2334ed4f0", "indicator--8ac155f5-3094-466b-b976-262301fc2528", "indicator--4fd7567e-6a6d-45f0-bf55-a19c073dcd14", "indicator--1bf16efb-85ad-47ea-b5f9-5cdf1166a189", "indicator--235ee68a-846d-4a09-a42e-2015fe72b1f8", "indicator--538a4ccb-ce67-4ea4-9c6c-51389da01fff", "indicator--7e95e73a-8061-4448-bf74-3aed9ae8572c", "indicator--d3956506-cf3f-4ead-8b6b-acdc827e3a5f", "indicator--493827b2-3e13-40ef-9f31-a88f1784ad27", "indicator--a2393ce1-3cb3-43c9-83b8-b4c7b8f20b9a", "indicator--12658dec-6aca-488f-8a7a-2300c175ee52", "indicator--c8fa3d52-c1d7-46c7-9e24-4f1b7f933262", "indicator--515385f6-149d-4389-bc87-7f16b610eaed", "indicator--0d58b9b9-ab13-4e3e-8b4e-2f48e658e559", "indicator--897d634a-211e-45c1-a00d-e7811ca8d3c4", "indicator--4d64f280-c047-41e6-adb8-a2875ad73d19", "indicator--d93e1b9c-9c30-442b-952a-fc765dc1b825", "indicator--52540a3a-66dc-4b57-98d3-025eb2bf9340", "indicator--b9f56965-5ab3-4c10-80cb-c48b75f0c880", "indicator--5d7ec735-6f1e-4644-928c-426317cb55a3", "indicator--937470ef-b6fc-4425-b707-de07604d7882", "indicator--50017bd0-fe78-4d30-8d4e-30de85f28128", "indicator--47eb78e8-5f1c-439c-ba99-93e2e85ae1c8", "indicator--d404287a-4a01-4f04-aefa-63f45d22d526", "indicator--2413d71d-0961-4680-be2e-486cefcc1779", "indicator--c644a659-7962-4279-923a-52e208be38f2", "indicator--9eec7266-10ae-4ba6-b06b-ed873a7674f0", "indicator--55de2bca-42ff-43dd-a0f3-e2e48b59b4be", "indicator--94ccacfd-80c3-46e7-9b9b-c7c118f63d9e", "indicator--42ee03a4-bc4a-4969-a50c-bb0f9847a35b", "indicator--a682162b-2e74-4188-95f6-aea04a842df2", "indicator--de97b10a-2a34-4631-af40-90388c122a35", "indicator--908c368b-5e38-4958-88d2-86eb8dfc9b37", "indicator--8e990c62-4ee5-4f99-906b-cf2ecf2251fa", "indicator--89e40f5c-e297-43ba-9c0c-7d17bdabe560", "indicator--7a3b904f-7243-4e13-9ac6-5b43bb61c361", "indicator--0f049b0d-7f55-4c01-9357-9c43ad7956e0", "indicator--cc0a2a80-e990-4996-8751-fab1de87a316", "indicator--b9dcbf84-62de-4ad2-ba0a-000519a73304", "indicator--0315669a-467e-4989-9edb-524cac61c12a", "indicator--cc03e137-f765-4048-8e47-a934a15a15d9", "indicator--6637dc4e-b0a4-4d0f-806b-a11c3d51ef1c", "indicator--591a0030-6722-428e-9c22-8302650bdc9d", "indicator--c2da2700-16ec-4424-b29c-551774c1585c", "indicator--99117b9b-99c0-4c2a-ba73-fcf947e7f416", "indicator--026ede7b-350e-4157-93c4-e6ace66b31b4", "indicator--7e023fed-a07f-4d3d-8618-10cfef2c4dca", "indicator--d4e6dbe9-3617-44d7-b1d0-8dcf66240a40", "indicator--6dbcf724-699a-42fd-b743-ad6671b80d67", "indicator--7052c902-f8d1-47f4-a600-306c7ca036ff", "indicator--5377b096-6b75-49a8-9f7a-20ec5c4f3148", "indicator--b3721cdd-0115-4429-b53c-0b36e58a849e", "indicator--1c68c1c6-aec5-430f-b010-f4445015dab3", "indicator--bf15f742-cd4e-46fe-a9fe-4e302ad2a8e4", "indicator--6544411b-e047-4d2a-a62c-625fdb6796d2", "indicator--40576d84-3e44-4a80-8752-759d4ac2257d", "indicator--608f5a37-7c6b-49ff-aa43-342d2277c9eb", "indicator--3278a0d0-9e70-49d6-8d09-94cbb074406d", "indicator--01574063-489b-41ae-a8ab-28ad0fc87542", "indicator--5ba5dd7e-95d9-4def-a8b4-e6f783a3c500", "indicator--a113f87d-7434-469d-9734-bbe7b2cf39f7", "indicator--f28371d7-bcab-49f2-ab5f-2d7e0618fd82", "indicator--871a0bd1-34dd-4785-86a5-fc6a799010de", "indicator--3de75ecd-9ef0-436c-9cb8-749ba4027bb4", "indicator--661d24e2-f979-478d-83d4-56bf8e50401c", "indicator--6136131a-3c7f-4d7a-af59-8d93b1115661", "indicator--161222b6-670a-45aa-86d4-d6a219a9d290", "indicator--bdc3b16e-7742-4449-a8a7-c3ebaec0f061", "indicator--d5c2dbde-f677-424a-9aa6-77cc4fe25fa4", "indicator--266d1105-a349-4528-bafd-6731c700fbbe", "indicator--444bcb09-034d-42ff-87a1-fcefcffd2185", "indicator--3bde80bd-6ad9-4a33-9f3d-9ad6de6fa7ba", "indicator--3266556b-cb5f-4e9d-99ac-4631462fd591", "indicator--2983f986-0e01-4f5e-ae91-a2e661cf3786", "indicator--f036120e-510b-40cd-9cf7-218fdb9dc104", "indicator--a41628ab-afa9-4696-bdeb-2f2c1bdd5d50", "indicator--067978e2-1736-46a1-a6a6-f6e13e71ee9f", "indicator--e59e45c9-afca-4aa1-9e80-12ab5a6d2aa8", "indicator--e7c72971-1fdd-4b73-8c4f-58dee35b9dc5", "indicator--367605ab-0593-45d6-9ccb-9fe77d70f0e4", "indicator--d3827664-bdf0-4b25-a690-00e628488bc7", "indicator--6c64af5a-5f0d-4ac9-b944-2bc8c2b8edd7", "indicator--80778850-630d-4692-87e9-017b9b188674", "indicator--5efa63d1-f9cc-4a27-9949-42eeefca1df8", "indicator--a3956c93-aca0-4d77-b84b-064f2f192c72", "indicator--44ed4d9c-9f2c-4bfa-b486-3d7dcf7cc3ef", "indicator--8f5c1240-28b2-47bf-a262-835e9027297a", "indicator--d1db2a94-5cc2-4ff7-a4fb-3802916f8527", "indicator--c39a501f-c250-41fb-ad93-f8f9163dc929", "indicator--a0e50605-ca22-4192-9e55-0568b55eac08", "indicator--03e2165e-c968-46c7-b09b-4399436260f2", "indicator--925e7cc5-3883-44a7-aa30-397ffe2b104d", "indicator--15ed7481-a4b7-4bf3-af7e-878c09c93f16", "indicator--7ce01613-ce17-47ef-bb1b-7d4bffb2b7e1", "indicator--57b6882d-5e2e-4491-b2db-828a29cb680c", "indicator--dac3da29-5741-4831-97ec-4482b3ef4166", "indicator--c0999eac-93ea-4393-8b31-6d0e2754e889", "indicator--5d3f15e2-1208-4512-8264-ce164a7738a5", "indicator--cb7153f2-3c97-4c26-aec7-21957abf0067", "indicator--cf2311c5-9e16-4e13-b401-a3528cc1db31", "indicator--ae55c4bf-5744-4d2c-a88d-d7444afb0019", "indicator--dc657ae3-2c7c-4788-bc63-55bae1e1aa54", "indicator--10ac33d4-b70e-430a-ad7e-bb13cc5be200", "indicator--aeaeb4ae-7e36-40e5-bbf4-eb253c26315d", "indicator--3a997b84-09f7-48a9-866e-358b9e9d8d0d", "indicator--c7ea797c-4596-4580-bd65-e98fd94f95de", "indicator--726222d2-421a-4b00-8749-114ca65cae93", "indicator--a53a8bcb-47cc-4a17-bf6e-05f506955360", "indicator--c42ad724-e18d-4856-a7cc-c8867030be06", "indicator--1753e7db-a49f-4891-9528-66c53ff24bbe", "indicator--8c7de54d-f4d8-49eb-88e3-211f6f0481a8", "indicator--667d451b-38e0-407a-a17e-db2aa10876e6", "indicator--4b929ec0-abff-4dc9-84b0-5c57c9d705c3", "indicator--d1924090-9f89-47e4-9daa-3b31d54fabbf", "indicator--bb70ae2e-cab5-40a6-9dfb-a3183998f935", "indicator--ad13b0c9-6f43-40d8-8c35-542b7cad6dde", "indicator--7f88d621-694c-4a73-b1a4-82100e87f7c8", "indicator--b6161617-d588-4825-9f7d-1f24d0de1cc6", "indicator--742f1f7f-c14b-458b-99d8-8b77902bde12", "indicator--1e2b3c6b-71a3-4677-9159-d7a649edc2e4", "indicator--d3c18f7f-0de1-47bd-ab52-ee031b0fd5f5", "indicator--de2e1af0-137a-410f-bb64-5b2476e4ff8c", "indicator--bb51f6af-d2a7-49b5-a5c8-d34077d7f645", "indicator--43098ac0-be63-4f2a-b273-3e35a6f5b108", "indicator--5084cddc-4771-4124-b2f8-daf7775fb75a", "indicator--9dccf527-796f-4b79-84e6-4201183374a6", "indicator--3d0c68ae-9feb-4ad1-b771-88edd7adaa33", "indicator--db68f65b-072e-47fb-b07e-eb4a397eebcd", "indicator--c5384633-6580-4731-9e3c-620880222ac7", "indicator--e211d43a-ab95-4777-b6cc-545e06c40cd1", "indicator--60f62538-7c5a-4276-851e-dd9cc8a69fa7", "indicator--1464cc29-7794-429c-bef5-f20edf0a8a11", "indicator--5b49e9df-4436-4b05-9dd2-2aae2adc1004", "indicator--6e75a592-e1be-42aa-bbe7-af63b9696fcd", "indicator--0fdabe85-d1f5-4ec4-bc22-7bb1a836b740", "indicator--ac89c32d-544d-4763-9fa3-f8090392629a", "indicator--afb46960-bcb1-4400-a17e-048df2865795", "indicator--45f95723-02a4-491a-8ee7-7de2e57db473", "indicator--5c5e23b5-8810-4c3f-b991-c9afb14c4f94", "indicator--5a567f17-8a58-4a38-a22e-2daffaef2f1a", "indicator--d6885cd9-1df2-40cf-8219-af99ddc9405e", "indicator--0361b216-fb3d-4f0a-9c69-f9fb82630cbd", "indicator--8414eea5-6873-45cc-9693-568a50268152", "indicator--aa002fa0-f874-442e-8334-3e017c365050", "indicator--6a972c55-66f0-4174-95e2-c825d44990d3", "indicator--469561dd-a023-4e93-85a3-d532dae32a91", "indicator--cc4b5b29-d313-4fd9-a722-32a23225db48", "indicator--630a7146-f423-4421-b9de-31d99a43fa19", "indicator--e89d2d68-574b-4437-b3de-203c5c9001f6", "indicator--d4898aff-59ab-4785-9b10-822a3988ac4f", "indicator--a8b0d120-82a7-49ba-80db-698d071cc832", "indicator--af442489-1e60-4487-b756-f9ed6efeb6dd", "indicator--a7e29f92-eb8a-4e14-b3f1-d2bf68692861", "indicator--db206cd5-ff5b-42d1-9de3-94e0519bccf2", "indicator--7e1aef47-1290-4c30-abcb-d8d187420443", "indicator--2683848c-4ce0-48e5-a233-bd53774c6fc6", "indicator--557b267f-1d3d-4d72-8f8f-6b3fecf32bf1", "indicator--2e181fcf-3031-4406-acd6-ad375b229808", "indicator--0b6a437e-2d79-4b07-8cf7-8f39fd57e77b", "indicator--ddb7c792-e999-450d-8129-5180c11788dd", "indicator--699104c4-af9f-4f31-a8f4-b25f16600d02", "indicator--77d6d385-d757-4e8f-a4af-377e2300f615", "indicator--47106c03-d957-4570-aab5-5b9ddd146b46", "indicator--f332a45f-48be-4273-a361-c28484a0c087", "indicator--70069370-a7d4-4e77-9d29-fec5b434ac8c", "indicator--eba9f305-186b-47f8-a37e-371a8e63b4a1", "indicator--e8469f9a-d1f5-4452-8adc-10e63eebfe21", "indicator--422ad70f-d25a-4050-a2ac-93fb16e756db", "indicator--64d8d093-cacf-41aa-8807-e1e0a00ee63c", "indicator--aa497c50-c4b3-4df7-9069-a00d10db11f7", "indicator--9144217f-7ed3-48d7-84d6-c40c28745391", "indicator--037ea5c2-3fbc-4c8e-94ab-09e1622eca56", "indicator--6f57e88f-04db-4977-b701-8f5b0a65a000", "indicator--be8953a2-2c0d-4995-ad7b-5ece49d2c8df", "indicator--deef18f1-e1bb-42de-8ab6-a2558d984484", "indicator--9f5dbfa2-9ac4-427b-b513-df18052d02da", "indicator--d1e6f9b6-93c2-4397-bf94-b8d1449faa53", "indicator--497ae860-5b64-46f6-97f3-e15596b3da6e", "indicator--ecb3105e-71d2-4313-ae26-9b283b12e4af", "indicator--0af4ece2-0613-4eb2-ade4-516496acc03a", "indicator--9abc0bd7-6346-4f4b-b33f-a61c3c82890b", "indicator--717c6d26-33a7-4f6c-a15a-24c1e457ab46", "indicator--ec8089a7-7412-4784-9dc0-1d98808e788d", "indicator--6cb4732f-88b6-47ea-ad18-2dd2f9e795da", "indicator--303b9c8d-f5b4-4005-a56b-4c4860e58190", "indicator--2af5e113-8c3a-4902-83b3-139acbedc8be", "indicator--fe1d727f-456e-4550-9057-bc36022d5137", "indicator--3574bd97-defa-4d82-815a-5bc15e3499b4", "indicator--0113e420-6f68-4134-9851-cb834ebd52cb", "indicator--3ec92178-2e42-4147-a047-a6e628ca3d53", "indicator--c6cc3670-fbfa-4a9c-967c-f6c1485d0f2a", "indicator--0ac61133-8d6c-420e-9dae-490a40645e9a", "indicator--fd64c0eb-d9d2-41d5-9fea-7a5a08a626e1", "indicator--7ba53467-4a16-414a-bb4f-edc08d3baf51", "indicator--733a7e25-81ce-40f8-970c-f0c0781131d2", "indicator--9d5b23d2-44f3-44dd-8e46-408386b18771", "indicator--75bba04d-9a92-4541-9b27-ba02b765a535", "indicator--9baa85a2-beeb-4c26-93b8-e52fff012763", "indicator--ac08c541-64d4-4f54-9bce-605f809cc898", "indicator--dbb8d3e5-6b2e-42b1-ac28-724259f10959", "indicator--64864fc5-b222-4ac5-ac75-4b75dcdf9d07", "indicator--90cdc056-3726-4a84-be16-d337c584b3a7", "indicator--07035ba6-d4c1-4451-b4f8-c29cb5b5d16c", "indicator--5f1bdfb3-bc07-4811-93b1-371748d4a410", "indicator--3f5b250f-fa0f-4e49-8fd6-90105fdba81b", "indicator--1667801c-1dd4-49ab-89b9-c1b4d67227d7", "indicator--cc3ce091-55e0-4029-8b06-67c1b9802567", "indicator--1c81fdd2-229d-4bcc-82e0-cc3bbe5949cc", "indicator--b5227c9d-d914-4dbd-ab81-d10dfec20504", "indicator--4478e2fe-347b-453d-aaf9-2609a3e05aa9", "indicator--2ce7aac7-9f7a-4477-a18d-06712f2ddc8e", "indicator--13c09b94-161b-4723-a054-ab8ba4270d3c", "indicator--403a2542-6b56-4d13-8a78-141eecc061b0", "indicator--3277ed8a-6048-489c-84ae-447b513bfd7a", "indicator--07e352f9-abf4-4074-b9d6-20183704d43d", "indicator--53c95740-ddac-483d-8768-3e7de6241b73", "indicator--8a519b0e-da44-4ff1-addf-51bdf96ecce1", "indicator--a41d7be5-9d3c-477c-9264-a0370d29cff9", "indicator--333efd3d-94fb-4fab-88e8-e2b57e86b62e", "indicator--24e7a3a3-28b3-4a7f-afcf-b214ca8208dc", "indicator--8272c964-a1e3-48fc-909c-cee4b797ce23", "indicator--954a71db-3239-426a-86bc-c6cd4f467c6a", "indicator--b067c18d-0952-4c6a-86ff-cc5cd5b9c9f0", "indicator--1622a1e2-9e7c-465e-a811-6899a3aa0d11", "indicator--fab3650f-1d18-4b98-b5cf-e059459007be", "indicator--0e7548f0-7c17-41b3-9016-6ef8bf501b28", "indicator--df8f7cad-b710-4b79-9cd1-103d58e96d8f", "indicator--0b977cab-4a5f-42ce-ba40-56aa342b18a8", "indicator--86d4b8c7-2a7d-4859-9684-d050fd15d186", "indicator--ed42a65e-38a2-4ca5-980a-44e731040fd8", "indicator--29962536-0fd1-4394-9423-f268d9088eee", "indicator--04ffbde2-ba7f-40f1-bbe5-b579571a9d92", "indicator--54e98972-696e-485e-8a29-32b007c9f30a", "indicator--bbbed504-e311-41a7-b315-791cbfa42254", "indicator--3975f6bb-e282-4c3c-a7c2-973dbcc7990d", "indicator--576defc6-69b3-4358-865e-b1d8c433b37a", "indicator--60942a5f-82da-4566-bd96-1f2e3432e584", "indicator--6c8de5ee-c793-4498-ae0a-ff9c85b9d7b7", "indicator--09cfeaf8-17a0-4cab-8a2e-e1015d95e322", "indicator--56fbff11-4617-4e6b-b09c-1ebe75488609", "indicator--6c47dcb4-256a-4d3f-9df0-cb14b6dddc35", "indicator--08c417d5-d953-4b2a-b63d-ac31532560a2", "indicator--c98c66c8-75ad-4e06-8bfd-478620b3795b", "indicator--87cda4e7-e874-4917-b5b8-f4e60ccbf3f5", "indicator--5b1fd744-6a42-43fd-8802-7314934a72fa", "indicator--c44c7f48-f565-4e62-8dea-15b5ab286346", "indicator--e1c31eee-a5c0-4baf-bb40-1c2c2a67d07c", "indicator--d2a2ed3a-61b0-4272-b528-cb52d870764e", "indicator--910baa89-1b91-439d-9417-57d9b5665263", "indicator--b24f5956-ae91-4319-a3d0-cade194f9310", "indicator--ed840bb4-77fc-4d4e-b222-3b859b6dc6af", "indicator--5f110557-e31b-421d-a835-e1a598e2e66e", "indicator--4df249f6-7df8-4214-ab9a-f10be26781e1", "indicator--614513b7-892c-4e5a-947b-9f844d4bee1a", "indicator--d92277b4-1820-4f0b-8648-8575b86e9a32", "indicator--1e52a993-9a96-4673-8218-3a7d4a1e71c0", "indicator--6737f203-8aed-42b1-b8d5-887dafe2acd5", "indicator--2b446399-0fc3-4219-951a-6427e1dca3e0", "indicator--1aabdd62-5f68-405c-82eb-a974b02e810e", "indicator--8d507b95-6824-46b6-abf0-87512590f0e3", "indicator--9f87dea0-d998-4d27-aab1-cb70af2c854b", "indicator--3d4d8280-64e5-444a-b199-29f8e9569c1f", "indicator--c697d574-791b-40d6-b616-c799f06064bd", "indicator--4701fa71-d4fb-412d-8644-9a55d0e5860a", "indicator--f231c572-6e55-4adb-8c6f-7f007588bb2f", "indicator--cf7004a1-7d66-4441-82f4-7c0f7f7e5d8e", "indicator--a1b61fa4-781a-4ef0-9b4f-70c20891fe9b", "indicator--f7f64140-a72b-4bbe-98df-57af6ea4d8de", "indicator--60978f87-b3ed-474d-8f0e-0e2774e7d35e", "indicator--868971aa-2466-45d1-9354-729e17fa28ea", "indicator--f04c02b8-c0c6-4692-aa81-5282bae27177", "indicator--60435276-9955-4930-a27f-88c906c1077f", "indicator--ceff3722-d6de-4bbf-8419-7643ecbe0bce", "indicator--874f3acb-f2bd-4dfe-b2de-9ac00b227e26", "indicator--c39e0911-972e-4bdf-a3c0-133c3f310ac1", "indicator--43bec406-d036-434c-b04b-03bc63c021c9", "indicator--40e40a27-eb61-4989-929f-496a4d16316b", "indicator--be4bcaf6-1ada-4ece-91ae-fcb63f87909e", "indicator--b013bbde-fe8d-4f1e-9f44-a6fc7ab0b7b0", "indicator--6bd390bb-6e9b-4267-a432-65d6efbb079c", "indicator--5c7724f5-0358-44fa-8b46-a4ce90456a1b", "indicator--21fd93e0-7ade-42e0-9eb6-d624c75a04cb", "indicator--55e51d5b-c9bb-4a91-b0af-25c003bd6c1a", "indicator--b72a271d-2dc1-4e92-8bcf-03125d758d7b", "indicator--99c437f7-8b64-44ff-b033-93f3f9fdf3c7", "indicator--cd53e3fd-0ba8-4187-b9ed-94f4c563ce8a", "indicator--9bcbcf4c-06d3-46ac-955d-6fb610d94f9c", "indicator--98fcd2f6-6ea7-422a-bc76-40a2f65d02a8", "indicator--89370fcc-785e-48a2-bcad-b391bc88b1ed", "indicator--2a20e950-67a9-4394-8f56-56c776f29df2", "indicator--a24badb8-4a86-41c2-89d7-df67f4934719", "indicator--226a17c1-3e07-4c59-b163-ad8392a7356a", "indicator--a55afbe3-698e-4c55-8f72-8798078a1716", "indicator--c054524c-a2bc-46c7-94d6-a41f5196d4a0", "indicator--25bc2083-b800-49f6-bade-68fea5657e48", "indicator--c410060a-2d4e-4875-9181-2c94331b11d2", "indicator--e6c8e179-905c-49f7-8dfc-78286f02818b", "indicator--f3abd5c8-0e46-4e9d-bf20-ce0f89874075", "indicator--d49edd35-92f1-4f4c-8d39-711a67683372", "indicator--77045e82-4b99-49c1-85f2-5610638a720c", "indicator--d6c25e00-3ab6-4466-b14e-6f555a88db87", "indicator--f86fad21-cbe6-4f05-bd5b-30642417c4f0", "indicator--98c00761-c2ea-4ec7-b793-5cfcdf5ff6ae", "indicator--23131823-6a59-4519-ae73-ca21b7c95c8b", "indicator--31f7dd05-aa81-4a5b-8fe6-e4b8b40c7651", "indicator--e6d7e8a1-f017-47f9-9b86-b6fc25cda535", "indicator--7fa3c49e-e5bf-4a6c-a74b-92610cbb57bb", "indicator--68fa8585-af2a-46d0-b40a-2df2e8f4b0d0", "indicator--7933cf85-e96a-419b-a946-5a2bbd0eb97f", "indicator--ef3f2cf5-53fb-415c-8a1b-fcda52448894", "indicator--1cfebb67-247c-4af0-a384-c112fc3babb9", "indicator--00189da9-cfb4-48f5-900d-442326e3390b", "indicator--bdb3d07b-0da7-488f-a0c9-ba589664e3e9", "indicator--b32f139f-5817-4e5d-afa4-eacb61515120", "indicator--9d71b3b0-5c85-46db-b6a3-4addb7282626", "indicator--1b934736-d9ea-4b19-832d-43629af8960b", "indicator--86528673-76a2-483b-8ecf-cb6526df518a", "indicator--5a63f62d-a5ce-49f4-ba1d-472ff2be8de6", "indicator--f8497be5-0c9d-4446-98ac-c2ed76fec9fa", "indicator--9d4da202-8ede-48e2-92f8-bf61701fc7fe", "indicator--ecbde677-ab1f-465c-b8ae-50076c0c42d6", "indicator--fca97f22-3601-48af-bb74-ab15cb3e34ed", "indicator--83f663b7-3479-42c7-93e1-d1f7119ea107", "indicator--bcdd2252-a167-4fad-a95e-00534fb8d8ae", "indicator--59829e5b-f373-443a-a95f-5bba20275a81", "indicator--f253a1af-40d6-4e48-8eeb-172fa4a866f5", "indicator--beb545ff-a6fe-4143-888f-07f364d2dc17", "indicator--5ac06299-9726-46dc-b4d5-35ae9513048a", "indicator--62a94072-e63b-467b-892f-85d921ad20d4", "indicator--cfe6cbdf-265d-43f5-a9d8-c9298feca22f", "indicator--d9c9a3ce-cdae-4b41-899a-4e94cf1ac33b", "indicator--ce7a8397-a9af-491b-9ed0-79d4b0d381c6", "indicator--89a56691-192d-4c98-a76c-e5802262727f", "indicator--a8139285-383d-4d3c-9f79-b25d88da0d7b", "indicator--25fbaa7b-a0a2-4c79-b643-a199d3a32522", "indicator--0b1b0593-7abe-4767-8bb0-c9dedb1ea022", "indicator--0a129b41-9881-49b8-bdd9-ab6efcbb2efa", "indicator--66e0be00-4467-472c-81b2-e910ad157c34", "indicator--d40ed5bd-f17d-485f-9c1e-1751b57dfaec", "indicator--c309105d-ff9b-4512-8345-2b8fe0cd0620", "indicator--19780c89-4fe9-454c-8ca9-6654efc646c8", "indicator--95153514-b532-498c-b03a-b13ce5c51964", "indicator--dcff4689-54d3-44fa-a008-fe1ad3fa617b", "indicator--c407dedc-aeaa-4086-b2e5-ba0ec4cb6a4b", "indicator--545b0b8c-1419-4f75-b25f-b068fe7a504c", "indicator--54455008-c987-48ee-8a93-a43be2e1ebd6", "indicator--f2bc441b-dfb5-43b5-b4c1-ef52717c711e", "indicator--497741ea-885b-4bdc-9e86-a1aa994812a2", "indicator--2cd6ad27-7f86-43ee-a17a-f9303b9ed065", "indicator--58bc5853-f386-4993-b926-62540e8a064f", "indicator--b2c3fbb4-e827-4fa8-83e1-0df87e51ed7d", "indicator--4c05e757-e9e7-4671-ba92-9059e0f3faa7", "indicator--b1ec8a86-210a-4078-9808-1b1818633c94", "indicator--ecb5bf72-eb50-4ac2-9f7b-58e9a78049e3", "indicator--4ced25e5-22b5-43b5-8c06-ceaf14c39ab6", "indicator--7e8e37a0-791b-407f-86ef-22f4bf712dde", "indicator--4758387b-27cc-4bbe-86e7-b014e6d089d9", "indicator--41626620-21fd-4d22-ac20-3d7d4fa57584", "indicator--a2c1674d-5d34-410e-822c-43952bad7b20", "indicator--4fc1aaff-ace9-4146-8ef5-0534bcb235ed", "indicator--10e40afd-c9df-4359-916b-c0e7b758f2b1", "indicator--9beff63e-a60e-4fa2-8d58-fb6fcda9ae68", "indicator--9a3f9b1c-bdad-4668-9a7a-589dd40e5d7e", "indicator--6d33d0f2-365f-4044-a19b-1779d07842a5", "indicator--17c43bb9-78d3-4be6-b660-7c72a06e2a8e", "indicator--003e7e82-d514-4926-a1d7-48d490ad9850", "indicator--adda86fe-b628-4bd0-bba4-f6ac8352a2c5", "indicator--43a9e915-287a-4846-a2a5-bc095e12297d", "indicator--1259b808-8e1d-4ce5-82d5-edec878a9bfa", "indicator--e85391f5-3829-4350-92be-37b4aac92e4c", "indicator--03f4c6f1-a14c-4579-be5b-56c660e9997f", "indicator--87e52263-a690-4e19-807f-329e78b5b91d", "indicator--67ee7e10-b2d1-4467-b314-30020a5d7d51", "indicator--7d113965-546b-4fea-a65b-9bea86fd2e82", "indicator--5f8a1dae-4eaf-466d-9806-4f2825218a06", "indicator--41439f0d-a40a-411b-9cd0-3d382412591a", "indicator--47f4c29f-5b27-4ede-a906-2ca1660c912f", "indicator--73ea6de1-74e5-45ce-a1dd-0b4a1653cc94", "indicator--0416bc6e-672b-47c9-bdc2-6acc224da9d7", "indicator--a286c3b9-2335-445b-9eb0-187ae0dd95d8", "indicator--59012a2d-2bce-4a43-bfc5-4027da19a0b1", "indicator--66759dee-6d10-406c-94ef-87ce59a20fc8", "indicator--517bf1c4-59f4-45a1-8d7f-a0c91192b155", "indicator--96a594a4-119c-4449-bcd8-9ed9b98aaf3d", "indicator--c352f6da-4d1e-4e19-924c-3bc6b79abaea", "indicator--6f18f229-e268-4f41-a8e8-0b392285331f", "indicator--45848672-d6db-49e8-8345-67ed9383f9fe", "indicator--a2d42a28-70be-4431-975b-5f4ecd55a5ed", "indicator--f61721f8-3002-4d32-8c3d-221dd725c44c", "indicator--6a20b390-06b2-43d4-b0f7-f2d704395cac", "indicator--88f16d67-bb00-4594-84da-ceb51319bf1a", "indicator--dae80cde-1c25-4849-8a77-bb8de0eb1ca9", "indicator--0f932e80-ca62-4369-bf5a-ced4774e8cf5", "indicator--9354349a-c603-4530-a478-5d1b3f55d837", "indicator--b00b56d2-e02f-4177-8ff3-851d18aa4142", "indicator--5c1d74dd-69c8-4a9c-9c07-10cc97a9dabd", "indicator--72fb09b7-0d31-4339-8d14-b6046732a7a5", "indicator--b93140c9-2871-40c5-acb1-2629086bd409", "indicator--7569957c-ea66-4321-a597-693f625a856b", "indicator--73f0b447-3741-4e97-9e7c-2ebeb02b1806", "indicator--9c08ee08-e7b5-4579-b265-56594ed77ae3", "indicator--d1598c9a-ad8d-4a7e-8639-2015d099d31b", "indicator--ea2d7c1a-4252-43cc-a590-ea1c58d14100", "indicator--c20b3ef9-afdb-4f39-9d1e-d0253a1c4431", "indicator--84eabd99-10be-4f91-a819-3b3b9e180397", "indicator--408ecff7-d464-433f-bbf8-5b7b2efe0e44", "indicator--acc180cc-6f19-40a6-bcd5-77c0e1408722", "indicator--6e77db4b-fc0b-4e6f-a403-dea372e2d9f7", "indicator--8117d07b-5d78-45e2-bb43-51ece18c294e", "indicator--0c9c5545-26ac-4a9a-86a3-c1feba28cf31", "indicator--f4dce080-0d45-429c-a83e-0d3d0a90060d", "indicator--89948940-e4c7-4353-9f18-27af4110ee95", "indicator--a63a5e1d-bf8c-4146-9a4d-0bcda32346a8", "indicator--5cf6b0cc-6230-4619-81f7-b330bcbdf308", "indicator--1337d551-1311-42b3-b9a7-ebc05342a144", "indicator--eb600105-56e3-4e9a-abf6-976b20f9659b", "indicator--d05cc7fc-b3f6-4722-8253-a4485153d1bd", "indicator--8a9c5532-a676-4387-86ae-5963737f6f4f", "indicator--88f545c5-4c71-4f56-8ff6-e14de2844603", "indicator--57658946-abb7-4cbf-85aa-7f32964207b7", "indicator--d9110298-8bb9-4185-8c66-fe98bd3c2aa9", "indicator--4717de93-808a-4a3b-8aad-2118712ff1d6", "indicator--ec9ef632-60de-4798-82f9-e1ff81b30be9", "indicator--8367e6d3-74b9-4e01-81ba-374239b51969", "indicator--497742e1-96ab-4d71-9e3d-1fa893150a10", "indicator--78e89fe0-f4a5-4e2f-bc4b-7d6f5d9abbc6", "indicator--3148f5c9-8e1b-4253-b946-5fdeb35925e7", "indicator--6e9061c8-082a-4d3d-9aea-fc786c42b8ea", "indicator--f3547b0b-82c1-44bb-a1ad-7856654a74e2", "indicator--67c5827b-2ab4-481c-b10e-766d069d847d", "indicator--74dc61d7-ca63-4f09-af4f-0ca070de1a98", "indicator--a961be9d-7778-41ba-8c12-0545da2ef826", "indicator--22ca5326-e359-44b4-acf0-80b4fc434bac", "indicator--aa94df3c-2301-4bea-a5e5-06830ffa2e52", "indicator--6e3e0483-d9ff-4702-8d53-7705e78e50ae", "indicator--3753de2d-88b1-490b-aa33-2ab3be4abe4b", "indicator--13f0cca7-5c8e-4f98-af1b-35cf888ce86e", "indicator--36a75af2-604c-4ab7-9492-d0a973c88de2", "indicator--d77356bb-f0bc-44b3-be61-ac82418f827a", "indicator--76e355de-14db-47f2-a10d-bb6084c59b4b", "indicator--c8d38383-a184-460e-9a31-c70b7d4e1320", "indicator--88e6b0a8-1d74-48f7-af50-789b4968a27c", "indicator--9f0e1986-6375-4bff-b905-1406e32a9d3c", "indicator--fac90cb3-1537-489e-b68f-4b6e67a5e9d8", "indicator--565cca10-1ce6-4108-84a3-2f0e2e42117a", "indicator--397c606d-46bf-4ce9-b1e8-4b997df292c9", "indicator--af3593b6-738c-4b29-9203-70eb5a31a9f1", "indicator--47801c7f-4824-47e0-bec7-62ba362baea5", "indicator--16dd1c5c-54c3-483e-8ef5-106ebe1b1aeb", "indicator--29389bc8-026a-43a8-864f-9c0fb287e1cd", "indicator--a2f0de84-306c-4263-a8f8-1b2b2a0fd9d2", "indicator--dc4e267f-c4b2-41af-b391-f2e3e9ff9c32", "indicator--cddd1ca9-f191-4125-833e-6823202a7159", "indicator--2275e0d4-48b5-40db-be38-16b69439a49d", "indicator--40627d3e-5f2f-4313-99d2-3b50517b4e1c", "indicator--e359aea8-8dce-43ec-9af0-f8a98ee3a74f", "indicator--573cb6a1-883e-4946-ae24-2d88e44de273", "indicator--e3f25a4c-06de-41fd-bde6-ec24e3ebab9e", "indicator--7e152e84-9191-44d0-abee-e21ce9da019e", "indicator--7d9a16bb-fd0b-4a7e-812f-0a31b10bedc3", "indicator--c5e5c774-48ec-4303-961d-290fb7e61634", "indicator--b40b53ee-f5f4-4684-a2ab-83e8700ac8b3", "indicator--6495ca24-0227-41fb-a4b1-85da0c5d013f", "indicator--41e52e4b-028e-431a-936a-af60e699e2d3", "indicator--f015d39b-f4eb-4b0d-92a7-987af71495df", "indicator--96a64194-83eb-42b8-969a-a31037fa15df", "indicator--35a75ef9-23ba-4b93-ae64-4406c1f22fbc", "indicator--c04a349c-fb76-4479-bc4c-7f7ff404d95b", "indicator--e8cd222a-882e-458f-af8a-913f8839ac80", "indicator--199db10e-377d-4dc5-a5a9-3b6437166642", "indicator--cf03c139-be59-4e1e-a23c-2a9cd32f1380", "indicator--4194a257-1227-4a9b-bc74-8f7d1194cd3a", "indicator--1928ff65-0234-4fe8-b5af-0269e07b2491", "indicator--d7f3709c-b899-47a0-bcb9-737adba727e1", "indicator--957bff8b-55f5-48ba-80a6-0e88ac6c5ac5", "indicator--2f736066-584d-44a9-8b27-9da1e5a29555", "indicator--b72b16a5-4cd1-43bb-b117-e914a4f54779", "indicator--03ced77c-bae3-4f88-8460-154b1219b1e2", "indicator--9ba410aa-927f-4b11-be94-25525cc48f75", "indicator--bfe05c6e-f5d2-4e26-972a-b443a300008d", "indicator--2691367e-96b3-4deb-a1cd-29e1a932e817", "indicator--ebc9d9af-5157-44c3-968e-641711e5d767", "indicator--f0efee62-6168-4562-9a6a-f33aa174bdba", "indicator--820376df-ba59-43b2-b070-ba2705a78cdb", "indicator--dc1f4f8b-9cb0-46c0-a6dc-525283f567be", "indicator--aa439850-f5df-4a68-a285-115d5795f3a8", "indicator--26542124-b22f-40ce-a30e-f91c5cc7ce94", "indicator--9a6b866b-8c97-41c6-89b0-2e01511c360e", "indicator--3351d971-135e-4cce-b521-a13043771d03", "indicator--f7426acf-aa42-440a-84ad-92d6f150901e", "indicator--f2bea9bd-9b5c-492c-a7ce-2c858ddfd5db", "indicator--69498111-40f3-452b-be1f-35c5228e1168", "indicator--fa7fb313-5dc5-4d94-bcd1-b50d40d14757", "indicator--a0278166-2cd1-4544-9f2d-0955eaaf9ca4", "indicator--a34c3aa3-2eba-48ad-817f-9ae90ec02c52", "indicator--afc939ac-c069-4073-bf50-5762c63b1bae", "indicator--401cabdc-c1da-44a7-b23e-d449590dae90", "indicator--d2c3590a-b91c-4e9e-bbec-f847dfe1ac4a", "indicator--3aed61ee-3a89-4e0a-98c0-bb8653504480", "indicator--a558b6ba-96d1-4f13-8acc-89befa5b6639", "indicator--af9e82e6-3429-4448-8d36-0d389e745f8e", "indicator--1fad48d4-775b-4328-a847-e8cb3f955e4a", "indicator--93093adf-6831-4f2a-a528-addc17d6f8a6", "indicator--1791e7fd-eb3f-49a3-9a4a-51f626790a22", "indicator--3047d836-9653-45b1-8198-a19a39f93094", "indicator--49c3c232-cc52-4a1c-a32a-113bbab34ae8", "indicator--ae9da0f3-e8d0-48f8-a4ee-cc2b2319f62d", "indicator--635f4bdd-aac0-4fd6-a7d2-db2de35483ed", "indicator--729fa043-e26a-4f4f-8468-ba879490b24e", "indicator--8e43f483-84cb-4146-b86d-75aaf9bb8988", "indicator--5e199721-a547-4436-9026-8918f9e5170e", "indicator--447301fb-ef31-4694-8eae-5706a76b13eb", "indicator--f9e691e1-4413-410d-a029-565925be97e8", "indicator--b61c1169-530e-4ecf-9733-3a4710f6931e", "indicator--bee3b353-3975-4c81-9b5b-ca79ee1c495d", "indicator--8e3e65be-7fff-44de-ac7a-654ee5c36a19", "indicator--24373112-ea69-4d3a-9a82-c3f42be53b38", "indicator--e65ed528-b079-481d-9a22-ec936613e50b", "indicator--3ded546c-5568-40e7-89c9-7111a30bb1fc", "indicator--8bed0852-3b7a-4f96-99d0-6e36dda54fd9", "indicator--fa6fbf44-8981-4267-92c8-6d04c17c6d28", "indicator--dda6f328-c8c6-45e2-be32-a2eda24923bb", "indicator--0fcecf0f-8b24-4b6a-9a1d-b3eea0f47b00", "indicator--4f35099d-cac0-42ff-990a-7b531ebb4078", "indicator--d5785cc9-6ed0-4656-aeb0-1f5bb007bc25", "indicator--0b3ecc20-27b3-4b27-89e2-5175677c582f", "indicator--b7b164f2-ad58-4b3f-94ce-5581a1ee128d", "indicator--d44b7771-110e-4b75-9e4c-d6b177e903da", "indicator--f28f77ed-6866-4f21-bbe7-2bcc9f1650a1", "indicator--0f4cd1ad-c11b-420a-a0ca-cf2759814ced", "indicator--03478443-d859-4d7e-818c-91ff45be067f", "indicator--e572f7d7-2264-435f-8b3b-057f9ba1d5ec", "indicator--d0888c8e-2811-4f6b-b24b-c8eba777c149", "indicator--e9b62d16-2088-4b69-92e7-62dc8d0134c8", "indicator--2d787cc7-35b4-4967-aa31-cd6137f11835", "indicator--df31f86e-6f05-4884-be11-9070738a764b", "indicator--5dd58a37-ce2a-4291-8cd7-936681006e9a", "indicator--6df516f9-a15c-46f7-965c-a54bbd9ef569", "indicator--01c26ab8-26f9-4d51-9bde-411eb3decb71", "indicator--80b633d3-1e36-4b04-b980-419f404cbef1", "indicator--b9fc5780-6e3e-4ee6-aa56-48df2fbb770e", "indicator--c5fcf4bd-fbfa-459c-8227-8b5decbc32c6", "indicator--2c83da5a-a309-4298-9b48-f16cdd4f3e76", "indicator--a028c5e4-34c4-40ab-9fe4-1ba131fccbbc", "indicator--fd2d16b0-a7a1-495f-b2b1-c7ec0a7b6f98", "indicator--88c80db6-a4d6-4929-88bb-ac75ab96e8fb", "indicator--983588d2-e199-4f96-909a-bc00f13e2a45", "indicator--4a37f09d-f3c6-4f92-b872-841577ae13e6", "indicator--c0ab573c-236c-4a5c-80ac-a603b78b4cc2", "indicator--271ed0b9-1af8-4c2f-94c0-8b323c130a2f", "indicator--ff3fbc33-de18-412d-a369-e00cdf5c0ec5", "indicator--ecb01fba-96e9-4918-a986-6cb05c518ec2", "indicator--c66bff4b-92fa-428d-a4e0-34201527a105", "indicator--fb0bd916-5206-497e-a220-b357c276b8ea", "indicator--3fa151c7-3fa4-4052-9b34-dd1ff8390b33", "indicator--ef3df9fc-2b27-4772-8bd0-5aef0220615b", "indicator--345ba3d0-a199-4c31-951a-1cd054d27473", "indicator--a1b356b7-43e0-477a-88aa-3e39d4ab3283", "indicator--b5946ac5-ac90-43ed-9337-63d1e1dc4ae6", "indicator--ce52fab4-651a-4351-b314-5b2180f22d22", "indicator--d4dedcea-1480-45bb-aa17-7a4445f2861a", "indicator--9e73a0e2-0b3f-4f22-afcd-57db9071b0f8", "indicator--bafa2276-117a-41ec-ac6c-93628f1492e8", "indicator--70bff06a-58d6-4eea-8315-5061a4994c0e", "indicator--52ee3f0c-e72a-4886-814d-0b2c86d5444b", "indicator--7219f51e-2d9e-4d65-9f15-aaa47c46e2be", "indicator--47904cca-afd9-45f6-9f99-a6e0a1d1ed60", "indicator--d52b8e26-98d0-4e0c-8239-54924c71b07f", "indicator--7037dae9-933c-42fd-add9-b4a23a147178", "indicator--724a417b-69b7-4887-bbd5-fac7a3aea532", "indicator--67720080-1e14-4c10-8ca1-66a503e8533a", "indicator--8f5fdc14-2c9c-468e-8d05-36dd2f3ef362", "indicator--4130e664-d8f1-4a8f-9051-e8f1e83cb9ed", "indicator--6940b611-d4d0-481f-a443-b1245e725554", "indicator--88d4d7ce-9f39-4ae9-9362-e2579f350d01", "indicator--b77545ae-2f85-47d9-b4d4-ff8cb9abc5b1", "indicator--eded6d4a-d1a9-46ab-abde-616aad9c1bcd", "indicator--10010e93-fe36-4a17-8916-8b0c4b4a5ff6", "indicator--3029862d-d975-45e3-817e-af38ac81223d", "indicator--b04cdd25-c180-41e6-8449-98f25df6cab1", "indicator--f6dd33e8-ae85-416c-be67-e07fca0febc6", "indicator--b0e5cc3b-de6e-4e33-af96-dad2828df2fd", "indicator--22e6719f-3281-4198-b95a-ca3a8ac997e4", "indicator--4c476516-e453-4184-bbe3-c0fe5830db51", "indicator--35d97945-9ea2-4e55-b76f-687de5aefefa", "indicator--e194772b-9cd2-4559-be57-9e962bbfdbbf", "indicator--63b680b5-9631-4915-9f97-07059fe1604f", "indicator--6d83912c-221d-4241-ab1d-d537ac096eeb", "indicator--34ac4ba3-52f8-4139-b170-ec2b4f50bca4", "indicator--0bdddfb5-f729-4a01-969b-c9cb992c6c68", "indicator--1c609e14-338d-4d23-a265-652a71616d9d", "indicator--02d23d54-046e-4b7d-b658-e519bb716a13", "indicator--3484e46c-c7ac-4bff-9077-86676e046402", "indicator--c0d24541-fc7a-4313-88e2-7be225eca04f", "indicator--d70d3aee-4bdd-46e6-87b9-c9c672512c66", "indicator--b4880c81-3317-4e58-a709-9166e243bd30", "indicator--f5b4c42e-4c53-4d9e-9d1b-d144a7c6e9a3", "indicator--e60e6e94-f1c8-4e8f-83e3-70c1b1fe3ea4", "indicator--3ebf9bad-4dea-40c7-9b2c-5e7b587918d3", "indicator--91260854-d121-495c-852b-269737935ce6", "indicator--f9b1f56f-1583-4d04-a0bd-060b92348807", "indicator--84902204-3382-4460-8119-5f457e1eb122", "indicator--d8fdd3b7-63e6-481f-8560-b4867ef9deba", "indicator--19dba423-7a11-4152-a4c8-818cbe6d257d", "indicator--cc0f8e30-3501-4f44-ad2a-4eeb32c6802d", "indicator--d77e4284-81aa-4608-9005-845dce6a8dbe", "indicator--e76b40ae-110d-44e5-b59a-8553e38ef9e0", "indicator--ed96cd26-3b99-4b52-98c7-70b833a87bfd", "indicator--07d40933-b4be-4fc6-86b6-63745590ea62", "indicator--f9ed5cff-35be-4b38-a1c4-c34a45f3e3ef", "indicator--6c95391c-10f0-41fd-a5f8-9dabd78ca5de", "indicator--7bec7900-154d-406a-8ded-60d44ed8a59c", "indicator--d2871ea4-c071-4bf6-8ca5-cf2a31922b96", "indicator--f02fc850-6f5a-47bf-9029-fa1722ca940d", "indicator--6b05397b-b3b4-416b-b854-111a119d54cf", "indicator--3504e427-84b6-40bb-8e22-f15f1adc3153", "indicator--42dc98ab-a46b-4678-901b-b39c1128e480", "indicator--8c837594-1b22-4298-9f74-c7a3b6ad1ebc", "indicator--0230ef8a-a658-4ceb-af5a-22473f1ab3b1", "indicator--ed957fe5-02c8-43ee-a254-d96042ab767a", "indicator--03c7dea1-49a0-4417-95b2-4ee695b2d6d2", "indicator--a97f7b7c-72ee-4974-ad4d-eb5a058ffe0c", "indicator--61123290-7cf1-461f-af71-62fd085fca52", "indicator--d4ea09cf-e724-43e7-ba47-74e112785a30", "indicator--43ac270f-ec1c-48dc-9c66-604cd96b7965", "indicator--0eb3b17c-a7bb-4290-9f8c-76dee08d9db3", "indicator--b5a3516f-d56b-458e-8336-607857ba7261", "indicator--02074b75-c860-4e37-899b-7f485769ad8e", "indicator--ce8ec790-7634-4bb0-8de5-ec33bf684dc3", "indicator--c1a45d91-44c6-4128-b103-8bb80ce971ab", "indicator--a4db1cf6-890e-41bb-a427-ad318b9ce62c", "indicator--c6566da3-abfc-43f9-b11a-c26966fefede", "indicator--3888589c-98b8-400a-a713-9377132ff0e6", "indicator--1fa2bfdb-abd3-4fd4-a985-5dca93e19db1", "indicator--95fea76d-e134-4979-82c1-23abc9adbd93", "indicator--f31140e0-1972-4da0-a89c-9f421e66ebcb", "indicator--279b90f3-f93b-4f12-8e81-191d3149dbb6", "indicator--1864cb56-d154-4159-b2c9-3d4a1a05b6de", "indicator--26531f46-140d-4c8d-a747-b5f90e51cf68", "indicator--5b5e6d6b-4aed-410a-9cf6-650520b25b07", "indicator--4f598fa7-a5f7-4f24-ad70-96a7490c3c20", "indicator--175e963e-8d59-4fba-abf7-42012c5d163d", "indicator--8d4f25e0-c140-4ff9-92d5-45c1a32aa2eb", "indicator--06ef55b9-2cb6-418a-8818-6ab4555009f4", "indicator--6da5a1fe-c087-4859-b8e7-9921b9f33eec", "indicator--def04c3e-4a02-4109-83bd-64bdc71bed81", "indicator--23ee50ec-fdc8-4b95-b85a-ecaa7e1b642c", "indicator--1595206d-a98a-4f58-a489-2078f8e3c2d9", "indicator--6e14dd45-142f-4b23-b944-8a1aafa405ff", "indicator--cb077d87-7bd5-4e58-928e-db2a7547c221", "indicator--b1ed6fe1-6abf-4666-8550-390e9957c078", "indicator--b571aa99-a6f6-49ab-b5a2-e9fbf2a130f2", "indicator--abb51773-bfda-4551-a430-ac41395517c8", "indicator--42b612e0-96d6-4757-a34f-5c7de62f9b0a", "indicator--2056475d-ff46-434e-ac0d-0dbcf8796f38", "indicator--bcee71db-4afd-4ab5-ba25-d24c15e5de37", "indicator--3ee0a787-a0a3-4981-b226-231e4fdcf14f", "indicator--6548c166-bc21-456a-ade0-5806c3c127c6", "indicator--3f78f0c9-7d7c-4e5e-af69-9faa022a0eb2", "indicator--f143a3a7-4a77-4e65-a7d1-8610a9e2e327", "indicator--b5cd519a-8619-42d4-ae03-f16d60dc0aa2", "indicator--0e2ad4db-8cfe-4cd9-8880-24b16eea418f", "indicator--9e87493d-e097-4ce7-9d60-24931374f10c", "indicator--a809d91c-abef-4730-b59b-eb9ff30a338b", "indicator--135b2efb-eadf-46b4-be26-4208fb382c00", "indicator--3557a3ef-1cb3-47b4-a45a-c157f98c24ca", "indicator--1b4f0e5d-3510-49f8-90fe-41175231dab0", "indicator--9e822623-81db-4a95-9d13-3d2258195ceb", "indicator--c5782358-895e-48fc-ab67-3cdf57e86174", "indicator--1cf84cd9-9e66-49f7-ae44-3fc47885768b", "indicator--e8dbde85-2fda-4fb8-b8e7-753107c39157", "indicator--0aa9220d-27ca-4dee-9522-e7bf8f88108b", "indicator--de81fa4d-de3f-4b17-ba9a-e45867c0925e", "indicator--9dbc7df2-6536-45ad-9dd0-c430cfbeb849", "indicator--d493817b-c7c1-4986-821e-c3f29dc6e690", "indicator--422f016a-da7f-4f57-91b4-834dfcd3f61c", "indicator--ffe71b46-170d-4c67-bf29-092654edba7a", "indicator--953a42f1-9d96-4bde-b7e4-40f7d17796b0", "indicator--e420e6f9-5125-496a-96fa-e7268e72b339", "indicator--fb4ec33a-099e-4528-b412-69aacae6324b", "indicator--8f024636-212a-49e5-b4e6-4cafd7e5eed8", "indicator--ca227912-abab-40f3-af37-6b87c05dc976", "indicator--1c1420fe-e9f5-4dfa-8a70-9ad90746457f", "indicator--986fca86-6b03-4593-b5ac-507c8516c946", "indicator--87ab3b64-986f-4f63-85d3-8e60c4d119fb", "indicator--9185cabb-6a22-4d7b-a956-149a4c1eb83b", "indicator--6bc1774e-89fd-4f77-8634-cdcbb80f7a33", "indicator--f0d08597-2e44-479d-9b06-0536791f20c0", "indicator--00bcf2fb-6cb3-4d2b-9e38-b885547cd060", "indicator--7b0e7ec7-227a-4534-ae3e-bafe14f0d445", "indicator--c7801181-04b3-4e7c-bd55-587c84c7b4c4", "indicator--6b0f41ea-cc2d-460e-b23c-40e9adb20453", "indicator--d19dfef8-366f-4f99-b676-08e088aca3cc", "indicator--6f104393-aa9b-445d-8458-9a6e3b599995", "indicator--25914b71-0343-469a-9700-5fe4591d10b7", "indicator--acc319aa-c5d9-47ef-ad20-385716e2c08b", "indicator--947f2d12-4006-4509-8565-312817830a07", "indicator--3f243b29-8391-4276-b9ef-eca8fd40e17e", "indicator--1413b66d-d0f1-464a-8801-c4e3eb772b31", "indicator--8ca32c26-f00e-4652-92b1-5d9f6de4623e", "indicator--0f8e6cc4-00e3-4df0-b094-6d1b23aaca4b", "indicator--b47eefa9-ceb0-4dc6-b39f-1d725fcf2647", "indicator--f6a3dfc9-f4ed-4131-bfe8-efbc8d139b4f", "indicator--85e7c484-7478-4ef8-8046-a21982541e41", "indicator--fd2bc6e6-4a73-4a62-9704-504965103fd4", "indicator--2f027714-346d-412a-a4be-88c395aba464", "indicator--aee658e3-36d0-4a35-9500-c8d609303185", "indicator--2c28a301-5dd5-4ea4-9a31-701f10036cf4", "indicator--540cd86d-0a8c-4993-80b3-73e1d4474238", "indicator--a361505a-5b68-4949-9343-768d41dd7720", "indicator--1225a97a-0f50-49bd-902c-97b2f8ae15cb", "indicator--c4f2b3fe-00af-413a-bb30-d10a8832f1cb", "indicator--c996fe02-1d7d-49f6-97f5-9532ecab302f", "indicator--0782e9f0-c867-4949-9f81-1874ce20a4f9", "indicator--de6fff3a-3457-46b2-99f2-d73869ea9599", "indicator--f6acb94b-7261-4a5e-a9ac-96f732f96fb8", "indicator--fcf4839d-5eea-48b0-8492-56eac90cf8df", "indicator--fa436887-d9dd-4026-a1b3-17d1a588b50b", "indicator--9073191b-5512-4ea2-9c32-a4e366eb2603", "indicator--72e23b45-b094-4ab6-b94f-4c83a505f685", "indicator--497a58b2-e5af-43e5-aec9-0c90c1b22c2e", "indicator--2ee8baef-14b0-4b4e-a14c-fa568f29c1d2", "indicator--9be06416-c8a3-4daf-9520-37b09843b2ab", "indicator--07191bdc-2ce8-467a-b8aa-1989c8815d34", "indicator--0ff3babf-5f2d-441d-8e5a-4c9ecccd1ae7", "indicator--e27185a7-feba-474f-b2e2-143952423a43", "indicator--5d011f41-4904-4645-8ecc-0994b68133b6", "indicator--3699e98f-3c69-499d-be02-f3b4ed5b9bfe", "indicator--c52a59a2-a850-49f3-9ac2-492044899335", "indicator--e08bc79b-1d37-4629-9c27-67bb9a79faf5", "indicator--5633b79d-db32-4d4d-b76b-1b45448a5fa2", "indicator--eb3128bf-eb65-4cd8-9cb6-ad3dd2a81656", "indicator--b65ece55-2122-4672-9af6-0468c138892f", "indicator--81ac2865-6268-4074-869f-7d505c7bec29", "indicator--674fa109-1e98-477a-86bb-f476079b2eab", "indicator--a3dfa19a-0ff4-49c8-a951-8771a8d5f5f7", "indicator--d36d6bde-37e8-47c4-8d24-36d151d21395", "indicator--0d782c59-416b-475c-85cb-d21a4d903d2f", "indicator--e97e3319-280a-420f-a808-c056802f3b85", "indicator--14959677-1d92-4cd3-add4-320f2edb07f1", "indicator--69031490-ab3d-436f-88c7-a039d672203b", "indicator--b528149c-9015-4cd8-846f-1110b105f5a3", "indicator--87b13619-0735-453a-84b4-5fde401ec758", "indicator--8c1a402c-a5eb-4c9d-b907-f953dc99fb49", "indicator--d101f58b-102b-414e-804c-ad381a9844e4", "indicator--5c4122da-32d4-47e6-93e5-b554266b2168", "indicator--e89c6878-0718-4462-89cd-46263f949d1a", "indicator--75dafa61-c0a6-4b7a-9fe6-323d3a8212e6", "indicator--9c88571c-c204-402c-9056-29410912653d", "indicator--ba545943-7cda-428c-b9f8-13e6fe7b7ef7", "indicator--c61f8384-5941-4531-b49c-4151fb198bcc", "indicator--4b669de8-3991-4232-9311-b236113334ec", "indicator--65427616-e779-4f2b-a731-c9b2e1aee8ba", "indicator--a2b58664-4f14-4a94-8b29-c3559235141e", "indicator--1542cc05-aa5e-4577-94fd-e52f8ecc82bd", "indicator--ab6ddfb2-61f4-4541-a52d-d87c13be0437", "indicator--499361d9-4e87-4814-84c7-f05ef7d87291", "indicator--0d6be5e9-5f87-4c21-aed9-84d40a413515", "indicator--d546deae-f595-45aa-8f88-f7925bb36351", "indicator--8214dc92-e7e4-49bc-8768-8e4fd30b2cf6", "indicator--59a276c8-9f1b-4125-9231-4ccf6f4852c7", "indicator--4f1d8c9e-e67a-4228-859d-e3bb4fbafb2d", "indicator--ef0d3aa9-d3a7-4b72-8451-97ecd8280797", "indicator--bf2852dd-dc32-4745-a648-5818fd105af3", "indicator--cfa457d1-9a1e-4c83-af11-5ff90b19c9c6", "indicator--25291cef-6292-43b1-b496-100b66efd7d6", "indicator--07c9521b-73bd-43cc-86ea-28f32b733c14", "indicator--4ac21f06-9209-470c-b31b-ab556baaaa35", "indicator--140336b3-45ec-4be1-9a97-8cdc83ae025a", "indicator--8cc9b7b9-63b5-42f5-81a8-8613c401e9de", "indicator--c4c34fa6-3e53-44f1-b7db-83ace5293b90", "indicator--98e27c60-b942-4315-ad29-7326c1ece8f9", "indicator--7148e06e-804f-4d9c-9088-e7dbcd25ff1d", "indicator--d4dac2cc-be9c-4c72-aff6-6e27922a39d6", "indicator--06c15d81-52c4-4f77-9ce6-c2cbfb0907ab", "indicator--aa1d9559-67ca-41dd-b309-e088470e9d13", "indicator--fa38b823-71c0-4191-90d5-a37eccbf86c6", "indicator--a1c11552-5696-4570-957e-e168398ebb34", "indicator--76be67b0-699c-45fc-b33e-6849c8ea439c", "indicator--1f41419e-3feb-4183-b8a2-2957686126a4", "indicator--4e2a7814-cc67-4233-94cc-062a05e4f64f", "indicator--bc7e10bd-b1e9-441d-b9ca-09718a143d48", "indicator--86c0897b-3759-4a37-ba93-f278cf6b379a", "indicator--88bb0f30-c269-4250-8500-d6ca9c573c81", "indicator--039d07d0-b601-43b8-9b9f-dfb3f047fa7d", "indicator--ce622014-435d-496c-a341-191c461f16f3", "indicator--06557e2a-ab6d-4fa2-bbd9-e05698add508", "indicator--82fc7abf-5cb6-413b-b95b-72bf0f2455b2", "indicator--cd034668-71a4-411a-8e95-45aa45041f33", "indicator--9e11d902-7273-4cdc-a535-7a58cd48d236", "indicator--023a4d8b-978c-4fdd-ab16-4f19cd86e1c1", "indicator--7f17c86d-a3f5-47c6-a73b-df1c2081d350", "indicator--9dddd5a0-eb9d-4c14-aa4d-f87808a9ed0e", "indicator--ecc63290-2aa5-4ff2-8ad5-d56e143a462c", "indicator--d21b967b-961c-4614-ba00-f633365383a2", "indicator--9d53ffd9-e867-4514-a764-758f13d30d27", "indicator--53ff4054-a814-4a9f-bf41-972f90b7c3ef", "indicator--844241c1-6cff-4d65-b0ba-b447b6ab65ed", "indicator--4252061c-84bd-42de-8936-4193e32349ab", "indicator--ca9bca55-28fc-4cb5-b130-bc8fbc29878d", "indicator--bc17b2bc-bd0a-4059-8296-a463c15d4679", "indicator--29dfd0ed-1e3e-456a-85ab-aecd15031efa", "indicator--d2345660-ddc9-486c-a108-863cbc41f23f", "indicator--0b29c59f-0dce-4a55-bc4f-4e561b6705c8", "indicator--2f59930c-4959-4a60-8dde-5f9cff378efb", "indicator--347fb907-9336-44d9-a2fe-de54507c8e28", "indicator--a011a231-bdbc-4304-853c-33bc60e8010d", "indicator--a99351d3-3dfd-4d20-a15e-3c8b138e55fd", "indicator--d55b7057-034f-4f61-affb-959aa21957ae", "indicator--c8a43c22-398d-4591-b33c-249eaead11bd", "indicator--e54d7d87-c4e9-4a5f-85e5-42b29fc9a893", "indicator--7e2f8b41-cdb3-41c6-8e0a-8d219df62128", "indicator--77180689-35f7-4588-8357-694f6fc7ec01", "indicator--05ebffb9-7e99-4f80-aa7a-0f576e23e86c", "indicator--09f19130-6830-499e-a3d7-7abcd471d70e", "indicator--b59e93b7-a35b-447a-9da7-94db5fcac98c", "indicator--df5fe55c-ee43-482e-a499-f0e3ce1be50f", "indicator--c74b0c6c-5995-4667-bb44-9d4344204fb7", "indicator--ab02e69a-a30a-43fb-ad1e-639d7f9bd9d6", "indicator--35c0a43f-4ada-4690-9d11-c67cfba80ed5", "indicator--93a41fce-20b0-480d-829b-72bb400b39b2", "indicator--b25f0e52-379b-4e7d-aead-dafd4edf561e", "indicator--4ddd0644-ead5-44ea-ba4e-ae0caffe8d47", "indicator--23e7ef88-ad91-436d-86f4-3d36fa17461a", "indicator--aa154faa-5b39-4fed-9eb4-b7eb5105dee2", "indicator--ef935043-30e0-47ff-b369-a7c76dc9414a", "indicator--590bdbb0-1ee6-47d0-b463-ebb7b80a97aa", "indicator--9b2f1371-8a80-4d4a-83b2-b8bfb2a708af", "indicator--6c7014d1-47ca-49e2-8d5e-bda12cc8f1b1", "indicator--103531b3-09c3-42fe-afe4-cbc5286bafb6", "indicator--c0f38eb6-ab54-4314-b868-6961105326c8", "indicator--f4d14cca-4648-473d-9837-b23eaae4f781", "indicator--381236e8-9942-48a7-8cd8-fc6139a2a8f5", "indicator--bc983fee-2125-4964-9d28-6cd1e436d16a", "indicator--870f2a5b-63d7-4c45-b44f-7d44f27a1894", "indicator--44b84d40-1e86-4b72-bbfb-8131def23c5e", "indicator--8c3a3c63-9498-454f-a520-1f0356c75ebc", "indicator--52795826-bb90-4dc3-a62b-e5592d3ff5d7", "indicator--2abd0bd1-4134-46d7-b31d-008934fe02ee", "indicator--f2fbb28f-c549-47cf-81ea-9bd8a5853032", "indicator--738375b4-5be3-4f1b-8db2-59caf24a7679", "indicator--6893459f-77d5-496b-aeae-75629d7e22ae", "indicator--ac1799ed-f47b-4505-b070-f41249b87eff", "indicator--6c8f5b04-2ffd-4252-b3cd-dcadc83b1e36", "indicator--6eb5989e-f482-47df-8c84-6f5dae0b56fe", "indicator--fe0acc3d-aca1-436d-b2b3-ecb6b7653301", "indicator--8c8b86c5-7b62-4064-ab2c-119ec3998da6", "indicator--460ded37-1e83-4859-80e6-2ed4a9e97b22", "indicator--cdae4746-3ad6-4b1b-b992-8381fc7613f2", "indicator--f22fcd69-befd-4689-a10c-19de3ff02b39", "indicator--640e40b9-a507-4afb-b9b2-c1f173bab4f3", "indicator--3d05391a-c253-40a4-9782-eb0e44576329", "indicator--8278110a-7db8-4631-b413-64a81b1a7998", "indicator--37f5f2b7-b5c6-4e5a-bab0-22a938c5bbb2", "indicator--13c6f251-98aa-420e-9697-347f01df5f7c", "indicator--296fd5e8-1669-419b-8130-14c53a14e3a7", "indicator--34b175b0-5743-4d9f-8595-629e5c5d9911", "indicator--da226bc5-95d7-497f-b48f-6d31915bf25a", "indicator--4ada35f1-2b6d-430c-9b46-80e4aa81109e", "indicator--cecd0a44-f9e5-4abf-aa02-966e01132224", "indicator--6db3b490-bdc8-4cb0-aeb2-2e75dd5cea82", "indicator--e5635c4e-3ff7-44df-86b9-c5e44fbf5e5e", "indicator--2cd2e8d6-7d45-470b-bef5-9623984883ad", "indicator--7f36c225-5d85-4683-a402-b25f42e85b82", "indicator--0e97a33b-c50b-47bd-9047-3b3eb4a1daed", "indicator--30928350-7af7-4ec9-850f-9ea73d07861d", "indicator--067347b1-1660-443d-8c3d-55e7328c2a34", "indicator--f9c0f151-af40-476d-a55f-1e4febf2682a", "indicator--7f6f9ca2-49bf-43c9-9ac3-edd177f98a7f", "indicator--93121caf-e7df-420c-9a8d-fd3a2c5b8c6d", "indicator--e12fa539-3a44-410a-b2ee-09113c298dae", "indicator--44deecb7-fcdc-4269-a579-94c91229d4b2", "indicator--ffcf6a3b-b168-4443-879c-22b3959a6bd5", "indicator--80683ec2-c85c-44c4-a8d8-ffe1d32d1df4", "indicator--9d617d45-0d04-43a0-8c16-55b943506c54", "indicator--8d06ecc8-1f84-4333-8dac-30378a657f7e", "indicator--85904f46-3427-41c7-b048-7c8f9e949016", "indicator--6b6d1774-92ce-49f6-ab50-54d26db69e36", "indicator--ed440919-bd5a-4d7d-8e5e-3e933ff80877", "indicator--ec8840bf-b4a6-497e-ac15-2b049e1030dd", "indicator--908eff66-00e3-45d2-a75d-cb44534c1472", "indicator--da05f4ef-cc36-4217-a7ea-ca695e21c752", "indicator--76ec6709-9b7a-476d-b1ae-ba418cd682ac", "indicator--113844be-be10-464e-b43a-00129f6dad4e", "indicator--2e94e96a-8ec8-493b-aa80-2546525520ac", "indicator--def1469c-8c38-43e2-b81a-b8de6446bb6b", "indicator--220bd068-a39a-4057-8e4d-aa5c070dc8e9", "indicator--642455e2-faf0-4504-b31d-13dc624c83af", "indicator--83733ada-e1fb-4bf9-9f3a-121c02662a69", "indicator--fb8195c5-67bb-4cc4-8dab-b706558ced3d", "indicator--21dcef00-37bd-482f-9f38-7bd8e2979d32", "indicator--631cadf0-f13a-40e8-8da9-830c304031f1", "indicator--11a7d95e-9eab-4fef-9da4-c4b86121c7dd", "indicator--13fa00b5-ef9d-4ba2-becb-d011c9fc2828", "indicator--c9aabfee-ab2f-49f9-ade6-a96838b0b994", "indicator--c8ece520-31ef-4217-af61-294865f55847", "indicator--40a22141-0bbc-4461-a348-dedb25007f68", "indicator--d1fb0d24-6239-4c07-9b7c-5bc0165c0d82", "indicator--6ee86f7c-aabf-4580-a08d-58cad67fa63b", "indicator--53cc769f-5310-45ff-a626-809139fc958b", "indicator--99c07b63-a43d-412a-840f-7b0ecce6745f", "indicator--fdebe81b-0005-4d56-8a47-832f17853376", "indicator--ebf77161-a723-4dc4-bba9-d96f59171cf6", "indicator--d3f48951-4190-4d3d-a1db-ac964f61adb1", "indicator--455919cf-c6ba-45fc-ab18-7e5855ec1447", "indicator--b8e703b3-3e5f-4fb3-b59d-e33500402535", "indicator--cb86a874-71e8-4d5f-bd8e-72d1694472ae", "indicator--3ba6aabc-4be0-4bc8-82ac-cc3e07bfa595", "indicator--903b5a8a-7bcd-46b2-b4dd-7cf38d11bd3e", "indicator--52277e4e-c3e8-435d-9809-e9f04ef4586a", "indicator--222a29a4-5bb2-4bcf-8445-827611fd5e95", "indicator--d3a24f9f-d988-4019-a7f9-53315361384b", "indicator--68e68e61-9c94-4d0d-8ebf-2ec5a2f8dd68", "indicator--80aaf873-1f6c-4487-ad1c-df6a2636a4ee", "indicator--910444b2-694c-4a9d-b762-7d832289079c", "indicator--4bc89fb4-f70f-4364-92d8-649e433a277b", "indicator--336be9dd-41ee-4e24-bec7-0f7e4b4b4c00", "indicator--d80cde59-2f0a-4ce9-b5d3-f066103e24c1", "indicator--02504559-9fa9-4c9b-a719-54990a7d6da2", "indicator--f08aa8ee-a0a8-4384-91a4-878c6802b34c", "indicator--b3590152-6659-4f5b-bf23-80daa412a6de", "indicator--140ff98e-714d-49b4-8a8d-d5b0ba8c6b42", "indicator--38c8a574-1216-4793-85b7-e5d85bd72cb4", "indicator--8ca86fcf-473a-49a1-9b8b-91580a36ce95", "indicator--1c61ad61-ce21-49a4-81ec-1b42111447c5", "indicator--49db019e-3259-4178-9309-92eed918c6d5", "indicator--ca5fb9da-c83e-4356-88f5-3a18fcfaa6fa", "indicator--06f5f88a-b701-4138-a222-4595c455d892", "indicator--f863ba3d-d85d-4766-8efd-6a21b306bb3c", "indicator--36c33177-2e7f-4101-bc98-6076b3789d89", "indicator--a72f6333-d0e2-4aad-9562-af5268741ce7", "indicator--b4728b95-0091-45ca-905d-ddc9c1373efd", "indicator--04d7a98e-9e43-4319-9163-741535b09a24", "indicator--832cbaee-a225-4e11-aab4-f44ef0b64d21", "indicator--263a3cd7-1719-420a-acc7-e8a912a4787f", "indicator--1eeb565b-d20a-4738-acd5-365780b5257c", "indicator--3d5b9e83-f100-4bfd-bedb-fdf312378fe0", "indicator--1bcad6e7-1b28-4a46-a266-803c3e0c7d7c", "indicator--8548e9a7-00dd-4873-b73f-63b32c76180e", "indicator--66335d5c-1b3c-4577-89f1-73194dad4df0", "indicator--c823b91b-7e8d-433a-a89c-f6cec107be36", "indicator--7750a327-c78f-474d-8743-a499ae8f9dda", "indicator--9ea9f945-6960-416e-b6e0-3cea2b928456", "indicator--be7fb587-ef84-4565-8877-b02f0d697a9c", "indicator--81147236-289c-4673-9057-711a1fa4bf03", "indicator--53f85516-bd6f-4425-b378-ab68f2485d2c", "indicator--0c860fa9-5d98-4933-880e-319c6149b210", "indicator--e7c85f04-0df7-4a96-ba47-7fe0a0706f51", "indicator--609e1382-9c86-4758-ae97-1caacc18e4ef", "indicator--78126e09-3d1f-4523-80fe-6efbf5267493", "indicator--04ced2c6-5466-4dab-86ca-771a8eea0f03", "indicator--070da997-f505-4b86-8978-8ffd886d9be3", "indicator--e32821c3-44bf-4b12-86f2-683e2076011a", "indicator--ea90cd6c-9161-4594-a9c6-8ce835930665", "indicator--f6ba18df-8116-41d4-a979-b5ca4e5b1b81", "indicator--c09cfce2-9b13-4af4-a630-62fd32da815b", "indicator--f5312878-2caa-4f8f-a19f-70114e1a4868", "indicator--fea47643-f662-4f49-913c-403af43ad89d", "indicator--3edc7673-a740-48ae-b66f-8f874b35e8d6", "indicator--965d778e-8173-4512-8bce-f5c61472172b", "indicator--5cf9d58a-feb1-471d-9396-146f9ac3d778", "indicator--3c4303f1-315c-49ca-8031-00f040a0f36b", "indicator--35daf7dc-2db7-4897-bb6e-3b2910f653f5", "indicator--2f87a009-6ecd-4fa9-a179-6e347ef97dae", "indicator--c1581ec9-84e2-4c28-bff2-0b7ee89a9b57", "indicator--19f8e691-45d4-4437-995f-4d9f0348f8eb", "indicator--d7cc1d2c-c6fd-45c5-944f-d10df6d684f4", "indicator--0aca1af8-a80c-44bd-9e58-1e06628f8b8c", "indicator--93e64fce-071e-4714-bca9-f7a6a8b3dccd", "indicator--ca6f8ce7-2aa1-4776-8fa8-0e90c917a164", "indicator--cb0ba997-c932-4a0a-b6c0-4a7b4e1a213e", "indicator--9f5205b7-babf-4f08-ab98-e21a8f2a3f84", "indicator--72611d75-938b-474a-8167-6142e1266d61", "indicator--6530eae5-6cdb-44eb-94d0-1656fad7b4f5", "indicator--c947a8c9-88be-4208-8a3b-ad24af527e4f", "indicator--9df36c97-f2c6-4e40-81b9-1ce7e4575bb8", "indicator--d49c11d0-dd3d-4f83-b97f-83021eab856b", "indicator--bd4e04ff-91d3-47f3-a883-33dfe7cd314a", "indicator--f06da7b4-01ec-47ed-9e24-26f7c1a2dd6b", "indicator--72e96642-24dc-4c4b-9bac-304a3d9e3071", "indicator--b4410ca7-bc43-4ebd-9266-24e7ffcc8523", "indicator--34303e12-19c7-4063-977b-94424c8c8d33", "indicator--bb8c9d9c-3788-4db8-a644-2950b5a5c866", "indicator--4a860e2e-a710-4f44-9e2a-e69674358287", "indicator--cb5feaa6-56ba-4113-96c9-8fdd42c75c3f", "indicator--e3a48d09-b949-4947-9c7d-4ff0fcb183b2", "indicator--3413a3cd-3a16-4ff4-9a62-be8d91e21a73", "indicator--dd1e9c12-4cf7-473a-8a13-ef19e1df89ad", "indicator--67211ad5-f5d7-4ad7-8a73-7a88cc20a41c", "indicator--eed04b79-2bdf-4799-a715-11f2e17ca27b", "indicator--3fe84d53-5f16-48f6-ad06-e6f71de84b5a", "indicator--a61782a1-b7a6-43a7-a5c1-544c53bfcc7f", "indicator--9622fcdd-71ae-4c0a-9141-67a90383c002", "indicator--1c8b3f0c-f432-4aaa-9651-6d1a773a55e6", "indicator--33c3d6f9-5ae2-48be-8053-536be09a8df6", "indicator--4870b93f-d7a0-4bdf-a10d-01e331cb7ee4", "indicator--5743e30b-5a5b-4cff-af3f-5274f514dca4", "indicator--25d19080-7573-4ac1-ae16-9d885cd181bd", "indicator--e069709f-3aab-4574-baf6-5404d88f337f", "indicator--1bbdf109-1b49-4e2e-9371-7b42f35251ea", "indicator--47375d26-faef-472b-a259-45c8ae9a2a2f", "indicator--d4e20be3-8592-47fa-aedc-e02531fa7f93", "indicator--9a966c7f-4c73-4013-8656-f26ec3106af0", "indicator--9c52ef40-a322-47a7-9815-e39360adac81", "indicator--54458f86-2a7f-427f-9a2f-4ea3cc1ec753", "indicator--ffa6dd30-9acb-4a76-95f3-3315c4e46206", "indicator--7ca74280-4469-42d5-8476-ce0c7cfb79a6", "indicator--62722682-01a2-4c84-84ac-bf82601566ba", "indicator--65c57689-fbaa-4c7a-9dd3-f3b4ac2dbfff", "indicator--0970810c-6fee-4f21-91a8-db6188884f0b", "indicator--c50866f6-d3bf-4a3a-a83a-fbe165f96389", "indicator--093a61f5-c750-44fe-928a-8eaf55915390", "indicator--700a86d6-746b-4890-8d6a-9a9876813784", "indicator--8e5f45dd-e3b8-4e95-a104-b1d27aa90b65", "indicator--4caea199-77d2-40e5-bbfb-a5f6cde8006c", "indicator--043040ee-6f09-4f51-a515-e170dc53d4bb", "indicator--a2d6b455-8cd0-4e7c-92f8-1d7c7cf4a03d", "indicator--70be7796-60ad-4ce7-bb34-b0a87eeda74c", "indicator--7e338011-0746-4fe5-b503-e83f556d727e", "indicator--bc203941-2cd1-4e39-84be-896abb4f4301", "indicator--c191de48-7985-4e3e-802c-da0aaedfd578", "indicator--a2953c47-7286-4abe-a64e-d49102e8165a", "indicator--e9fdf4ec-8d2f-4ef2-80c8-28bb9982b578", "indicator--ed61f680-6a4c-4cd1-a30e-9c2509e61793", "indicator--2ba3da3e-c3ef-44a2-89fa-c333c64d7f57", "indicator--158fe94e-cab3-474f-961d-7e4bb9286c94", "indicator--edc97bb9-336a-4540-8d1c-a4227afc9449", "indicator--810d3870-61b0-4891-9965-85d8803bb197", "indicator--23db0874-67ff-41ce-861a-38bdac57e558", "indicator--bf49fae0-90a9-4a4e-a29e-82c8b74bfdab", "indicator--54218037-014e-4376-874d-450ab6cb7a5c", "indicator--27292609-7afa-443d-9e97-05e10ee0f1e4", "indicator--c4673efb-49b5-435a-923e-199dc59577e1", "indicator--b789b416-4b50-4f72-b845-17b5704eda6c", "indicator--8212e173-b250-469b-a0f8-310e0ca8e92e", "indicator--6ea0b153-ec42-499a-9b19-07fa8b38f189", "indicator--10b67767-04e8-4582-8938-bb62859cb07e", "indicator--2e5ab9cc-5574-4feb-87e9-5684d359627a", "indicator--eafb70ee-55ae-4c13-943b-272bc6642903", "indicator--9d457a24-9710-41c7-bda3-7388759503d9", "indicator--c330f30a-91c6-4a72-be3d-4db08cdf7bd1", "indicator--59002348-a49a-447b-9243-f9597c3e4f7b", "indicator--c3bcac11-c253-47d4-852d-23ddf502e369", "indicator--8bddce00-9861-47f9-8e31-91c19f8e9a18", "indicator--058cd50c-0349-4497-94fb-af438cd6a442", "indicator--601f528f-6716-4a29-80e7-cc463ffbbcfa", "indicator--d8b7d52e-51a8-4639-b90e-1a01a7654bb7", "indicator--53fc70cd-b28c-459f-8e24-88da2f98da4e", "indicator--cc4b7810-d23a-4523-a58e-ac32ce44c332", "indicator--5f3c1c99-7401-424a-9f5f-875ee3bc0133", "indicator--19a0d863-936f-43f4-a373-ebda3c043e35", "indicator--de9e8077-3876-4b4e-872b-6e6974bc34d0", "indicator--8454cd2a-8978-4484-a378-ce327eb2ca9b", "indicator--792fa1ca-8e6b-4a5d-9075-9be1dd39e213", "indicator--820fbc43-dd9d-493d-9d64-506657563411", "indicator--ca6f0bbf-c9ed-4304-9b50-b48230a3bd39", "indicator--087462d8-b3f2-41fa-89dd-78f653bda089", "indicator--eb44604d-3eed-4e64-8e57-5ce9e1ffb0bf", "indicator--481bf287-3941-4664-b089-81c895c32379", "indicator--86e9c189-d85d-4bec-a523-b24d833a5761", "indicator--2c92a256-7fb0-4eee-97dc-274714f848f8", "indicator--1269b666-e048-4a10-90a6-9fde58177a46", "indicator--0249dd26-6c6b-4206-a8e5-87e92953701b", "indicator--4fa7434e-c24a-4ef9-9867-ff8a045e4f0b", "indicator--0ff76ee7-e71f-41a2-8df8-b93c62d70eba", "indicator--ed03454d-7769-4f62-821e-f7b1ec058511", "indicator--d187dbfa-fe42-4e45-9e87-82b9375de094", "indicator--fedd674a-5a15-45e0-8b8d-945d4f949b4c", "indicator--f001fcbc-44e9-442e-a91b-437a0e2023b2", "indicator--edca65ba-3719-408c-9325-b4a16ae4a160", "indicator--8c9b70d5-b33c-4e40-b734-30a08ef657e6", "indicator--3c70e226-df8b-4cb6-8c14-1c75bfe90004", "indicator--8f32c27f-ae56-4744-b0a3-8158ab0f414f", "indicator--b15f1132-bfdc-4c2c-9a49-846727d88249", "indicator--99e2a4fb-25bb-4a76-8496-7bdb2847f05f", "indicator--b1a28829-44e2-4d27-a006-be7f74e616e6", "indicator--daa7dc04-8f3d-4011-a88f-4c2b43c6d13a", "indicator--265dcd26-4fcc-487c-b93e-520145843317", "indicator--97cbc6e3-4084-4344-8ff8-afb032e45b21", "indicator--114a68d1-2313-4ddc-86c2-1eeffc6ab09e", "indicator--232530d6-da36-4b6e-84e7-9f258e961143", "indicator--77cef7ce-0410-452f-894c-4faca25387d0", "indicator--c575fc14-128a-4504-9815-4d1e1bd7d09e", "indicator--cf77839f-e9c8-4f18-83d5-8586120393a2", "indicator--6147b90c-4d45-471c-ab29-9b28b658ca0d", "indicator--ba6e0bf5-7750-4f93-8035-24f6e1f829bf", "indicator--a60f5b70-6d35-4ede-a9f5-7212099a18cd", "indicator--80f4b518-ba0c-45a4-9356-431c3c732f65", "indicator--36ee3abb-8d17-4041-8a1c-7e38f7692199", "indicator--657c319f-6494-4460-abfd-07d2569d3559", "indicator--f7100dca-7000-4c2e-944e-f0678a643d2c", "indicator--eb98ac11-8702-4720-a691-355389ef44f8", "indicator--f112dfc1-17be-4ad9-a91e-93ee599bb392", "indicator--c9838130-308b-4382-8b8b-68601c071e73", "indicator--db3dfd46-93a6-46ea-8fd0-239c522ede58", "indicator--8aa94c82-4ad7-4e12-8047-a46e17bd1a44", "indicator--7875899f-9e53-4360-8bc9-36a72a5327dc", "indicator--b8c586b6-31ef-44ea-9e7e-1296e6ac8212", "indicator--005454a9-c0e8-4c7f-9cc8-9a1172ebc2bd", "indicator--88ac5c2e-08a4-4c14-b594-dc7b26dfbc9e", "indicator--6ad0082a-afdb-4868-89e8-f410790acb66", "indicator--59187a30-e79b-45ef-8b3a-979d598e4936", "indicator--68e1a97c-7f34-470d-a19e-46d1178ee661", "indicator--99fc6ee5-af6d-4795-8786-e568c8d62b83", "indicator--4bb45adf-de44-40f0-b841-00d8c112e937", "indicator--aa717750-2ca7-42c5-8a46-417b5941e0b2", "indicator--c119cc5e-2812-4306-a31b-5e6d65d8def6", "indicator--dad69531-9bb6-4ea2-b788-268f6cc40992", "indicator--e002d4b6-6de2-4904-a4f7-a0ef0b342f94", "indicator--e90bdef6-2c85-4528-bdf6-fb63a679b8e7", "indicator--88b82a37-e18d-436f-855e-bfef47af9c94", "indicator--cde0c5cf-0649-44c6-938e-3e57b8afe6eb", "indicator--5a1cf684-0b67-4172-a468-b67c2a5a66b3", "indicator--3e1a4700-edd6-4ebf-8df4-2d247ad5dda6", "indicator--10a0e80f-068e-4b92-a184-996d021eed62", "indicator--a64c0eb5-f6e9-48d6-a015-5d34e164a5d1", "indicator--431a6f53-0228-443e-980f-16812a5326a6", "indicator--1f170ed3-2125-4830-8d0f-18a883fc56f6", "indicator--77b461dd-237d-4371-af67-0d831671502e", "indicator--6afbb5ca-358a-44df-879f-570b1dec8dc6", "indicator--15f3f7b5-5fe7-423f-8e81-9d21d65be799", "indicator--84d8d582-6c7f-40ee-b924-f8693f35941f", "indicator--9e1cd4f3-d36a-482c-9d67-7c9c5d25704d", "indicator--b9fc3c3b-7241-463a-b7b9-3dd28f754076", "indicator--f9beb597-4b95-4c8f-91ef-6d40cc84d645", "indicator--edbd82fd-adfc-4b2e-a151-53b9f4d24134", "indicator--0258c847-8ef6-4e60-8223-2d21e2e851ac", "indicator--0435c3b3-29be-4906-82ec-6129094f7a68", "indicator--b7ef40af-8021-4c52-96b0-e2a1ad7a5047", "indicator--d5debf5f-9edc-4f09-b1aa-eda29c1a3a4b", "indicator--87aecf0c-89a3-4764-a242-8c7232a05fcd", "indicator--d62b8fbb-05e3-4b25-a60e-5f039868cc84", "indicator--d98d4c84-30fa-4465-86df-b03d256b6e55", "indicator--1f2f2e7c-dbc4-4405-9eff-54bde598508f", "indicator--e55fdf2f-ae0f-4c26-a73c-e150deb614b1", "indicator--26d35a1f-18a6-40d5-9d8d-2e4d1479ceaa", "indicator--c8464741-d765-4dfd-ab9b-6635a6929b15", "indicator--3ecb84eb-c6b1-4106-ba45-7f0dea82b069", "indicator--ea320f3b-3d43-41f5-8a03-46660714f32f", "indicator--595e9217-e396-42a1-9964-a62de47cdcbe", "indicator--8e568daa-b620-4007-a550-52c46ae6e4d1", "indicator--37623175-a7f0-414c-a7b9-e65ab46bf312", "indicator--e369c9c7-528d-4f6b-aa5e-40fbba2a275d", "indicator--db2c01fb-b007-47a5-af72-3df700ad2be3", "indicator--96a3d8af-fd41-4da1-8270-a0bfa258c8dd", "indicator--9fe00a7c-8fdf-4566-b920-1f67f0273a85", "indicator--6e4de464-6b77-47fb-80ce-8a2c9b6c51a7", "indicator--a094e2c8-bb5f-4a9e-adbd-60d60d5342c6", "indicator--2142abbd-9cef-4529-bb74-16a4cb6f8864", "indicator--e9d3cfe9-86fd-4585-bd1d-36e2f987412d", "indicator--4f1432ad-658f-4527-b333-3808f1ca57cf", "indicator--127d1b79-ad33-4115-bb8a-56835b4650b5", "indicator--5a5fb5bd-fd98-4fc0-94c5-fbf0c73b7101", "indicator--36239c61-5052-4b25-84e7-edd7887a02d2", "indicator--5f421cb9-fe5b-4a4b-aa2a-2eedfcdee068", "indicator--f0585a36-d1c9-41e7-86c3-b58837374f29", "indicator--3f11e623-1ba0-4b44-b317-2ceca28a95cd", "indicator--8cdf68b5-3750-43a8-9ef1-ad7eb9a92d76", "indicator--d492af01-46fa-4903-8c19-988f3bebf809", "indicator--69608ef6-de49-4017-ac72-934b42baf22a", "indicator--4b889c67-97e7-4f4c-a162-e5d763f80ba7", "indicator--4695eeeb-7359-4ccb-ab93-37cbd56fb68f", "indicator--d2ecb047-02f6-401c-bbd2-9693755ce6ff", "indicator--3233f7a1-872d-4331-8cc2-4e63f4275a8d", "indicator--419b3ea8-086f-4fe8-be96-357e78c1e13a", "indicator--9ea337e8-fcaf-4b5e-8605-a5d02f2cd45e", "indicator--fe0e77bf-d7b3-49ea-bde5-18d252eb4ea5", "indicator--e06cbdc9-aad1-4176-86df-15ad2295aba8", "indicator--b647aed8-5e14-4c03-a008-bc612d9862ad", "indicator--9e902398-5bd7-4796-abd2-77faaef42349", "indicator--9dab0b69-dab5-46fd-942a-e5cc926440dc", "indicator--993cfccd-f23c-4863-bbbb-2e42e59c2596", "indicator--d80e93e0-3957-468a-b780-ad4cc8f56fdb", "indicator--a7020b57-20f3-498f-8355-c9427dd36fa0", "indicator--c731f302-2261-4771-99c6-8b1c66bf95d8", "indicator--afff3765-bf42-4ca6-9b9d-9fe9a0555217", "indicator--15b43cfa-c5e8-48fc-978c-d3afd237f77c", "indicator--dcab03c9-2067-40b4-a924-916711b46026", "indicator--098a7016-9a9e-4a4d-83d4-1d15999f3cd8", "indicator--fc3248a1-6d8c-46a8-aba1-39c4169b77fd", "indicator--bbf272bf-f3e3-4edf-9520-bbebf1c7c833", "indicator--3213673a-8195-40b8-9d13-1a2e81ddbe02", "indicator--e558d6c7-996e-43ee-9303-c4e8b8d0e4db", "indicator--0aac156a-4993-4d79-80d5-5633447615db", "indicator--fe735223-59c6-4a2e-a89b-9682efad156a", "indicator--ba3512ee-78a6-4acc-880e-9db53fc4e44f", "indicator--820d8d56-c81e-4b00-9882-f151f8ecdf40", "indicator--abdb0eb7-8cc4-45fc-bf13-9f1270b2f840", "indicator--5702687f-3418-4741-9b56-83356d6f03d2", "indicator--33430580-2f51-47ce-afe1-0369720559a4", "indicator--0e1e1807-67c9-4de6-95fd-a01e98ebd616", "indicator--68477e64-fc6b-47ca-a604-7b8ad866cfbc", "indicator--f847b81a-712c-429d-9dc8-d75008201958", "indicator--def68c8a-f663-4e76-80c2-e600f7332956", "indicator--4bef64cc-e7a6-491f-a938-c27b7a1f3b36", "indicator--46788652-e0ab-4919-bc02-91f7773c29cf", "indicator--4fe47bfa-e28f-4c06-bb0a-606258359a36", "indicator--21363892-f438-4467-be0a-ec97f20f2bae", "indicator--39da482d-d5ed-40bc-afe3-16000561c9ef", "indicator--a87cc9a6-0a9a-4da0-a6cb-4a7f0094a9a0", "indicator--ba97a8a6-6312-4031-be70-58d0825a62a9", "indicator--b8d558d7-fe04-48f8-84a7-d0bbc032a92c", "indicator--e15e6f4f-33f2-446c-9b7d-071cb79a72f3", "indicator--ba2f6a70-8b74-4e88-bbf6-40786b3c4afd", "indicator--4699af5d-6656-4eee-a25e-d01d09ce9d89", "indicator--bc2ffe23-a0ec-40c0-8e43-61c0f79bcfbf", "indicator--8c69c84f-a2cd-4fd6-a957-8a9236aab77b", "indicator--716e4cf6-89e0-413f-a1cf-4d04cee5c9c9", "indicator--1835670b-c033-4afa-8829-9b3f93ad94f6", "indicator--cc64ec96-792a-423d-b491-7876b721bc5f", "indicator--39886693-8962-4e7d-8746-773c54900e6e", "indicator--d915ff67-5ae1-4dbf-8fa3-697c056fa0ef", "indicator--f6f4d219-4ba5-4a44-a1e2-195a94d50207", "indicator--1f71e895-c8f1-493c-8117-4ff5737de16f", "indicator--1f5ead6b-2d41-4139-b98f-99284004c09b", "indicator--71d65d63-91ab-4da4-8f06-725c424bd1d6", "indicator--b7f9636a-cdc2-4faf-9736-2832505a37c2", "indicator--aae82a9d-706a-430e-bf06-16928f83977f", "indicator--302b46e2-8d6d-44e3-91a6-3006421d4111", "indicator--3df862a2-586b-453a-a17d-3b61a7b7a6d2", "indicator--37fca769-e2ca-4810-baa5-1b9d8398cd8e", "indicator--3273e848-f277-40fb-997f-9c3e65d2a8e1", "indicator--246d7b4c-fd19-40cf-b163-6af3cb9ae1ba", "indicator--032f41d4-3d8f-4d10-a41a-e164cea2a402", "indicator--fbc2b21a-faf2-4402-9be5-c3459ae98377", "indicator--521f96b1-e764-4fe8-ade8-d69c7409bba4", "indicator--4d12e4e1-7fa5-46dd-aaa1-6c6120b8213c", "indicator--cda5f2ae-4081-4d7d-bd80-4144bfb644f6", "indicator--9a90312e-0c12-4198-b8db-4a0cae7137d5", "indicator--47c8c932-3fc7-48f3-9105-7d69a709d9f5", "indicator--805b05d9-99d2-4a72-82a8-04a559cc703d", "indicator--dc31d150-b28b-40ae-ba7f-0ce3b07991f7", "indicator--d7fc5ee9-5980-41ad-8fee-c5aa4be27b31", "indicator--13b36ebc-59a3-4e52-9bf0-5eac46f32e6d", "indicator--be5ecdd4-34e2-4562-95f3-804aecd6751f", "indicator--f874631c-ecd3-4e8c-99d1-cdfde017aff1", "indicator--f85d9175-3642-4344-9508-f2b55c18c728", "indicator--fe4a5d1d-0f5b-4ea9-9455-8a564367291b", "indicator--516884ea-8d1f-4d02-aa04-ca010bdbfe44", "indicator--fb0d95fc-aebc-433c-8448-7e59b04e79f2", "indicator--5bad782d-a1ad-4719-804e-d59db2e884ba", "indicator--da4bffb9-38e6-4f0c-90d7-48c3d656ce13", "indicator--2666999c-bbec-4835-9965-825d151961e7", "indicator--4bebcd60-3a06-4f16-a14f-c074f562ebbd", "indicator--244f4b17-1310-458a-a4c7-d59683b7fb8a", "indicator--42d836ca-2a4e-4eb8-a208-c4b62c47bc14", "indicator--90db9454-ea18-47d8-957c-6802f51e5a6a", "indicator--b6bd3858-9e4b-428e-9a7b-c9df2da62548", "indicator--8cf65db2-ecad-40fe-9ed4-fe12090010d6", "indicator--6e1be0b1-9fb5-4941-a9ea-3b60a92facb3", "indicator--c864a7ed-822f-4282-8c34-364b5072252c", "indicator--866c028d-57e1-4db4-b441-f6ef1166df24", "indicator--61d10ff0-e87b-4fce-a6e0-05efd4c74235", "indicator--bde40e42-1f56-412c-8779-3c4186252ed8", "indicator--457a29c2-613f-4a53-9ad8-5b3aa34cdacb", "indicator--e32b6d10-2e98-4069-a973-7c7403d200f5", "indicator--03e7be89-4b82-442d-bf40-285d69a65590", "indicator--6a23e6cc-71da-4517-8f63-bc9099ccc807", "indicator--0100a0ad-de0f-4a62-8f34-d60946934df6", "indicator--f0b46562-55f9-48a6-a1c3-a2d833fa7bba", "indicator--2f461f33-3c1a-4c89-a089-12188320100a", "indicator--7d5f1431-bd38-4686-be52-b69dd80a394a", "indicator--babb6954-7935-4889-9d40-538960a0060d", "indicator--4d46aaae-a3e5-466e-adc5-55388d498cce", "indicator--1daeb9e1-159b-4830-ae48-8dab473fcabe", "indicator--1030724c-0cb7-4d94-8501-24277f5219eb", "indicator--f8d95493-f0bb-4aac-84bf-43768388b601", "indicator--f4bb0d3e-d73c-4ca6-bab7-3eb41da2dd74", "indicator--4351f121-eaac-4098-ab86-64b5af8acd5d", "indicator--b4a539e7-a414-472f-8d81-0368a5da6045", "indicator--7495e260-9923-458d-86d3-274c172ceeff", "indicator--467e98fc-8ab3-479f-bb65-c51a0b178411", "indicator--ed00d71f-b01a-40e7-93d9-38cdc4eaef02", "indicator--5dd34a87-caf2-4ee2-9488-6d8e8004ef50", "indicator--6663f48b-2999-40d8-9855-2cd9f67782e0", "indicator--b31d3c23-5a05-48b1-a1d1-2c4abce7ce4f", "indicator--05bd2d2c-d4ad-4c7c-a8a5-18b1e3fcd01a", "indicator--6ecdeb1f-53fc-4b60-835b-8ebbbba08851", "indicator--f65d8b0e-badc-467b-b777-3fbf3f82dbe9", "indicator--06fdd2f4-4112-40da-abc0-6ec2f4e90497", "indicator--7dd8004a-54b4-4ce2-b1f2-3fbd9b3c0255", "indicator--e228fb57-9114-4d05-a9b9-417e09eb4ac8", "indicator--6c9be4ea-1398-40d7-b6d1-9f25d07152b1", "indicator--25258afe-5c57-4796-879e-d73f79781dfc", "indicator--77266aa9-bb76-4210-a041-c3b873add33b", "indicator--b3f2c3bf-4025-4612-89b8-8b4a66bbe3a2", "indicator--66411679-6110-4de2-b5b2-d33f761d2950", "indicator--2fe5a9f4-6bc4-4381-8671-4b54302920fe", "indicator--315e5236-1eb2-436e-881a-f2edee40c284", "indicator--c64b234b-5e96-4612-9b52-beeee8df79e6", "indicator--155cd754-1ee8-4117-95e0-a3287d6173c5", "indicator--afe0a7be-c8ff-431a-86ce-b6fed6b8c084", "indicator--c9005753-42b9-428c-8f17-913093a6a2a7", "indicator--b08e4b33-472f-4532-b95d-8abeebca73ab", "indicator--7bc7a242-590f-4721-ad27-21dfe01820fe", "indicator--d696fa0a-47f0-47ef-a8be-ae9c9785b3ce", "indicator--56b4548c-5ab6-4a8e-9f59-c8b7b0511183", "indicator--588d0080-402f-4bb9-a217-3e789027f086", "indicator--dfddb7a7-8566-4f2c-9d26-fcada07d3db3", "indicator--6e2428fc-9174-411b-992e-71413be8a027", "indicator--298eec55-7c0b-4ce8-85e0-7561bb81863d", "indicator--e222422a-40ed-4959-a06f-4b427e204c55", "indicator--25da74a6-ae10-4220-ba4d-c961a28e836f", "indicator--7dd3a138-c65e-4ff5-98b7-1efc83ebb7a8", "indicator--ae7e4e12-9e24-4e8c-b416-a73a98f7d6f7", "indicator--29b1ed74-e6e1-4692-8ce2-cb9c7afcc222", "indicator--928b3ec7-3228-4be5-9474-474b7c955988", "indicator--5c263a03-c213-4277-9af0-0c84a5f7b81e", "indicator--5fdd42f0-17fc-4a29-b760-84b3e97b798b", "indicator--63bad692-49d8-4f18-8f4d-6ca55b6f11cd", "indicator--c5f1e613-6bff-4688-8d7c-3a766b1d6f49", "indicator--f51e99ed-e656-48f5-b8d4-019fa034cf19", "indicator--82b63e2f-0fb4-4497-9f77-537d4803db9a", "indicator--d191ea23-9dbf-4ae2-b61e-50249680ea7f", "indicator--ffb08a30-6a8d-45bc-81ef-e88d1f773f02", "indicator--c1276bf9-c8a7-4b17-82b5-92490f9111d2", "indicator--90debe77-f9a4-4c46-9382-cc3d294a78c7", "indicator--fc598021-32b8-4af2-b413-a5819f0ec22a", "indicator--dd527244-f411-4d9c-b9cb-0e157382aa52", "indicator--a4d6d229-c9f0-4a1e-a966-545ede018564", "indicator--08dcdf78-5440-418e-b849-8323a4fe80b4", "indicator--72d16f37-12f1-4e4b-9ce0-9769f47d16e0", "indicator--dd18f286-c7fd-4dde-a913-99d87fa7062d", "indicator--17e3e953-7a26-4e08-9630-0d567fb68849", "indicator--78c8d938-071b-4063-9e0d-a28cfd34c881", "indicator--7cb464d5-ca0b-4e5c-a36e-094b05a9fe56", "indicator--8972c28b-fdfd-4e77-a5f5-d4c055fe4c4f", "indicator--60b9ff30-2bc6-4ca2-a4d5-8eae08e17ee7", "indicator--4368b2bc-ee44-4126-ae27-1e1e4fbff099", "indicator--b9fb669c-1faf-4fe0-a239-1865c18ec0e3", "indicator--a258ed97-8bdd-447f-b81e-fb6c780119e8", "indicator--a5e92cdd-6dd5-4098-b9e6-9b829cef0b72", "indicator--62e1ea55-f595-46bc-a510-f6402bdbd240", "indicator--9071e4bc-11f4-407a-a264-79bf453793e0", "indicator--297d2bbc-3f6b-4e22-8e60-21e3727021a3", "indicator--e96e45a5-2742-4255-8390-4ad523cda38e", "indicator--061e2886-2362-49c3-ad7d-b12570c96c86", "indicator--c17dd27f-0e7c-4a0b-bfcc-86a36a1f54f7", "indicator--6afd05c2-f275-484b-aa30-1bf864b92bef", "indicator--e9d7e5a7-2bb7-4273-942e-923d1527e444", "indicator--ae603d0c-8817-4565-acc3-98e0c8ab7fb3", "indicator--62014071-0751-4ce3-9b32-5298e75ef958", "indicator--6a929b47-a038-461f-a063-a0444c014b00", "indicator--664023cd-f875-488f-a60a-586ed7604761", "indicator--8943a410-02b7-4e58-8738-d723af14a9e6", "indicator--87314cf0-d096-4e04-9da2-e5025b7c4361", "indicator--149a1d38-b617-4332-bb64-4790cdcc1638", "indicator--790179ae-6fae-4148-a8c0-97cdf11f0f18", "indicator--3cffb865-ee8f-4e7a-85d8-e1a707f3455c", "indicator--9ec2c771-f356-4377-83bd-9168a7f7010a", "indicator--602602c7-5691-4152-986a-73ec36fa63b3", "indicator--2124b546-d00b-4cec-8b6c-8634d53debf2", "indicator--22ffe772-7fe6-4828-9363-af501b3cbd84", "indicator--da94726e-5cd9-42ed-a458-566180f26536", "indicator--6ff18179-379f-4698-9c4a-8c10750b5e49", "indicator--0eedb086-f92d-48eb-a5ba-3e847d88f215", "indicator--c24dceff-8c24-47d5-9537-bedad2eebe12", "indicator--e17ae613-699b-41ad-87f7-2e7a362b6a2d", "indicator--7edee255-2203-46e2-875d-84a1eb677475", "indicator--deeaab7d-eef2-4e7e-87cf-d5c5bff67ec6", "indicator--8d80b782-a80f-415a-8faa-5f3009d0ba49", "indicator--efee0d56-00f8-4010-837b-13c12b41ab0d", "indicator--0426868b-79a2-4ec0-bebf-21f811de3338", "indicator--808a8480-1553-401f-8118-9460c79b027a", "indicator--ef5af69c-3f21-44a6-adec-f95691713a5c", "indicator--d8da2b82-5bfe-49c6-94dd-201e3f0d59eb", "indicator--fa6cce0f-fc0b-46f4-b1da-2b51f06309d2", "indicator--b4ffae96-0fb7-4250-9956-d981905e9de2", "indicator--f7f43052-3daf-4302-a0a7-2433ea28907f", "indicator--4f3da311-df50-43b0-bd41-f9eb3dff6d55", "indicator--fe8de0a4-fc35-4089-9380-1dbb3e05416f", "indicator--15ab06a6-d451-4095-801c-11e485f5be18", "indicator--60126f11-65e3-40a1-ac20-10969d0be85a", "indicator--0ca6301a-d00f-4782-808b-031afa66d9c1", "indicator--d2074130-3637-46b4-b36f-d41d1f9c93fd", "indicator--b02f834b-d02f-4950-bfaf-4b59b36ccb59", "indicator--56c12e64-25eb-4ee4-844e-f29217b36eff", "indicator--bcaa7072-a254-4331-8f84-7239d201ffab", "indicator--c6d9a562-a9c5-4878-8d47-f125c6f7d343", "indicator--1a37f797-5c0b-44c8-bac9-0f4275819885", "indicator--4fdae1c6-a478-4c79-b441-fcc3a879a0cc", "indicator--5f0f96a4-144d-40c2-a95c-86a705fa2e2f", "indicator--2f657d5b-25f7-435e-89fe-edf25b4b1aa2", "indicator--d20cd623-8b98-4a7c-a960-f562962decab", "indicator--e711cf14-ef97-4c85-85bb-848c621ef5a7", "indicator--28d98cc7-d4af-49c1-a8f3-7bcfe6eef653", "indicator--ebdf3cec-2be3-4e2e-92d8-5ff3c1a4bf40", "indicator--4538fafc-a693-4abe-956c-66b106ee3b87", "indicator--5ccd3c76-218e-476d-a64c-50fa8466075b", "indicator--6d447d17-8724-4d5c-b435-7d8b8b43e88c", "indicator--c957e26a-da9f-4f52-a159-5e0c4199287b", "indicator--2eb7bc5f-3d9e-49e2-b97d-af583e5d547c", "indicator--e006cca7-3028-48db-bfe1-659a1001a33c", "indicator--31599e28-f73c-4fca-89f8-23a11dadca4b", "indicator--46efb294-63cf-45cb-a496-5220217329f9", "indicator--1ea03043-3d4c-480f-8c1f-3192c0c02e30", "indicator--c2c5087a-366f-4b43-8713-251a9609ec70", "indicator--7a4d04dd-e238-46b5-9d07-a3627ec4b961", "indicator--292e8467-595d-42c6-96e3-e4613cac537b", "indicator--f93b8578-4256-46f3-b43c-e281234163e8", "indicator--c3caf229-bb18-4dee-b48c-2e2678c911b0", "indicator--ddfa547e-a16a-4535-a66c-e3ced8ee5f03", "indicator--0be8e78c-1d47-4786-92b2-c2882bea19f5", "indicator--5c1265cf-f45b-4f4a-bafe-f865f49aef61", "indicator--1c44bc58-15a8-4877-a593-8191a5c2146a", "indicator--79ccd6b4-5bbe-4c7b-b252-5f65e356cbf0", "indicator--47188129-c981-4b12-89be-018f9df4e5f7", "indicator--92af1833-b829-43f0-8ba6-cacb2b9d742d", "indicator--aff799c3-95fe-4c4d-a711-16609f041f81", "indicator--d6e4dbfe-7338-4807-82e0-380ebaa33358", "indicator--a0f61610-d0fb-4e78-b922-0266d4c3f7a2", "indicator--c40abc86-1abe-43e7-811b-92abab89b553", "indicator--754d993a-bd9d-4c69-b56f-54387e2e23a0", "indicator--e82981a7-8c37-4991-89bc-fba07e8c8651", "indicator--6794b418-5096-4dba-83e6-0f1164fb5b2c", "indicator--e480d157-29e0-466c-b381-7c8f7b26e015", "indicator--62fa39e6-916b-4853-8e19-8aaf40da3266", "indicator--dd6fa52c-ccfc-40ee-bbea-01f92870f225", "indicator--5c0b8bf2-6d4c-4eef-ac86-e28dd7bd88a2", "indicator--4c3c91f0-62b2-47fd-bb47-610cfe6c42ee", "indicator--16928320-d1c6-488c-adea-efdb22ba0ab5", "indicator--b7f6a982-3f8c-4c48-bde4-802b579a8180", "indicator--3b64ea5a-fc57-4ef8-b02a-04a342459ed4", "indicator--fdb1b143-9399-462b-b33f-09f293a9ec61", "indicator--36c5f112-5221-41bf-a3e3-e7643e5c8ed3", "indicator--605658c6-74dd-49c1-bb03-82cbe389404a", "indicator--2ab2aded-086a-4449-835c-9f0752871648", "indicator--d9cd047d-a242-43f5-bbf2-ef2250d419b3", "indicator--54d1a804-fe5b-41ba-bdab-85fe633a13c9", "indicator--c54299e1-d6e9-4b22-bd2d-e79969466d05", "indicator--e6990b04-4ae8-430e-9312-bb546ec09ccd", "indicator--34d9db45-7383-46a3-a308-73909d84a791", "indicator--1580af70-4b92-406b-88e1-53e106486f4f", "indicator--1a4ae355-39e6-4bcc-afd7-aa72032582a9", "indicator--42a57678-8bcc-41f5-ad03-12b613555fff", "indicator--470098b0-ecd2-4e09-a770-7f6601d57fcb", "indicator--916d1b7c-a716-40b5-a412-03ada48be896", "indicator--d74dce88-f357-4bb9-8485-d0e0bb75022d", "indicator--a3e0895c-a760-40b8-8ec2-2125764ea6a9", "indicator--f0acd15b-4085-44b8-829b-51cf106d9d32", "indicator--bd8a63b5-4a22-4f85-b2ec-06f5f331e73e", "indicator--ce51ef6d-a91f-4fbb-8877-8a66ab872413", "indicator--39e06f3b-e729-4646-b88b-2771a135f696", "indicator--50a95118-f7c0-4e83-aeb3-53f0e29e1f7f", "indicator--f97d4781-45ca-46c3-b72d-1004060fabf4", "indicator--9f1e5232-a07f-4146-b3f2-4e20dc86b365", "indicator--98da21d3-1970-4700-902a-1cad73830397", "indicator--b36bf473-7ba6-4e15-8767-ea0ab4c830b7", "indicator--f7b40961-fbbc-4be6-8bad-6a762b53bebd", "indicator--85c54aa6-f021-45b5-b2a2-894fa4d88980", "indicator--36f0b605-c7b9-415d-8b61-a9c33f8d954c", "indicator--a21dfa77-decd-43f2-9ece-588949bb4970", "indicator--4fa7e64b-c94e-4a67-858e-e0cfafef45ba", "indicator--2df583f6-eb52-40c1-9af1-af933595ceab", "indicator--080d67a2-f2d5-4bec-a7cc-6c9eb8e9d5d1", "indicator--ca577547-3eea-4119-af8a-c3135d67f336", "indicator--824b92e6-616c-403e-9555-10c2e8196ef9", "indicator--71351461-bab2-4872-8a97-4733d12345b7", "indicator--6922114c-5abb-437c-b7ad-0e760436cd53", "indicator--60dc5625-c0a0-42aa-b085-165b05005e85", "indicator--7f2607a4-c265-40c8-887f-9aa03f301a69", "indicator--a7ceb0fc-b0a0-420c-82e2-7a2ceaff8651", "indicator--dc6da9cb-c82b-40cd-9f3f-e22a0ff1c38f", "indicator--8f67ad27-a282-4c0f-84e6-34798f2b968e", "indicator--65ae998e-42c9-4df6-873c-c56bea8c859e", "indicator--e96e89fa-ead2-480f-ac3c-34b9c2b4faad", "indicator--f13f6d3d-edf4-4d7a-b703-6ee24bebfcda", "indicator--10f4d138-ff72-446e-90c1-861cf46dd262", "indicator--0cd8a8fa-ff17-4978-8a9b-5c08c925015c", "indicator--7e8676ff-34bb-4aaa-90e4-7afa63cb9364", "indicator--9c4138a8-19d2-4b44-a3a6-4e5b1ddb24c8", "indicator--f4cfa0c7-7704-4d13-b016-32f9878ec0b7", "indicator--f334b292-53a8-4548-a934-61802afb63b3", "indicator--e73477ce-c063-491d-a881-ae8f0153e258", "indicator--8dd9d905-e4d1-42f5-b903-3dff2b2852a4", "indicator--2a26d528-814c-454c-adb9-b154d787db45", "indicator--309859e6-bd4b-4e1d-b289-d6c2aae01954", "indicator--14837dbc-c7df-4e71-8ccc-8405e730b47c", "indicator--cd62ccef-2b2b-41ee-a9fd-edc02685528d", "indicator--743ac8f5-9c4e-4442-8b87-6f40edc1a5d7", "indicator--4c0ed200-2198-4433-a444-79fe2ca87226", "indicator--466e7696-7dbb-4280-b09b-1c67d6f3b946", "indicator--0a4a7110-6a1a-4d03-b429-0f938bcbfff2", "indicator--d6662b28-f840-428d-bd8a-d148b27163f7", "indicator--fdde9417-4c93-47c1-ae9e-9f5719b94830", "indicator--1471d5b9-1093-4798-9960-0cd3bafab029", "indicator--8cd7dcdd-ae4a-43ff-8663-82552cd58203", "indicator--42a3047e-8675-4dd7-b601-b2524ae09c19", "indicator--ecd7bac5-46f7-4e54-b3a9-e2cc68c17b82", "indicator--7a32627d-baeb-4218-b6a7-6b51d0d0a875", "indicator--67af3cbc-f697-4b48-9b95-447b7a5c58da", "indicator--e800d110-d1de-4908-8064-43fc5660af18", "indicator--d5618e2e-71c1-4ddf-9ba1-23979a6c4b86", "indicator--aec62e42-eb2b-493d-85c3-1f8fb6f16eb4", "indicator--182107c7-036a-4adf-9781-73f9de3fac5c", "indicator--2cde5292-919a-4b0c-8252-17a9d619dfb3", "indicator--d4003001-378a-4475-915f-ba8d920a2ac4", "indicator--ca904861-d6b3-49d9-827a-b85ef1a78f42", "indicator--48414965-1477-4321-8b37-f34d293d9d43", "indicator--4235f2dc-0a22-47ab-8395-63b90fb01f9e", "indicator--beff750d-8a8a-4b10-a36a-20dd48b725a4", "indicator--61a9c967-1154-47a8-8670-4f8fcc69c257", "indicator--190cdfae-ed8f-44b9-aee3-c73f620c712d", "indicator--feeb5f70-15c3-48ad-a1f7-1a23921b151f", "indicator--3e2f6608-c927-499e-b3fb-dd23676155ff", "indicator--ed63e844-392b-42c9-8806-4435d9b5dd90", "indicator--04eab904-a9b9-471a-94f4-3a4b95517ba5", "indicator--72501c6e-ac28-401c-8d74-4118d7b00163", "indicator--07af04a0-cf24-46bd-b954-5d9c37c92b60", "indicator--e2545399-74ab-4d6f-8acd-855acfa697e3", "indicator--7515a472-1330-43e1-b9d8-a1aa94152877", "indicator--0161b5d3-adb7-4cd7-827a-9a71b0acbc5e", "indicator--04ab6781-ef40-4fc0-b73e-b804b33ef486", "indicator--9863e310-3301-4194-b8ad-0bcde762d8eb", "indicator--9f0dd152-0c37-4a9f-bfa6-8fc955eeb3b5", "indicator--f4f904c9-1059-4323-8b5f-6a6c509bb48e", "indicator--d62ac916-d821-4b2e-8e31-4fa829076044", "indicator--c326961a-6766-467a-9859-ae83d17aa8e9", "indicator--7056b8fa-4f9e-4bd8-80d5-84f1e97120e5", "indicator--869678ac-ffc7-4ebf-817b-066da02bec15", "indicator--0825ba1f-13ac-490b-aa38-f215a447a6cf", "indicator--c920b1f6-f52f-4c7c-9351-d87b7e57aaf1", "indicator--9d2a5259-4886-457c-a9eb-f963a15d6d78", "indicator--4e720afd-d1b4-42e6-87cb-7d63e562c49f", "indicator--5116df47-5c62-43d7-9b2c-13780e115602", "indicator--737733b7-96bf-40a9-bf4e-b39cecf961bd", "indicator--79e3121c-6106-44bf-ba2b-d64cdc05f26f", "indicator--36d8c235-f43c-47da-acfc-1f0e88ac9f84", "indicator--349bc052-bc75-43f7-9606-6a85fde571f0", "indicator--5119bdac-f1b3-4b26-8f68-12c8f40c3ca2", "indicator--8cbdf53c-60a9-4300-8685-aabea990c1b4", "indicator--260b598d-b1c6-478d-bf3a-5ecc4998076c", "indicator--3d9d7bf0-b65e-4206-b039-26e19c051cec", "indicator--da58c5e1-1488-45b3-8938-b6ee779f4d8d", "indicator--f82149c3-d1c6-4f48-8192-736461305626", "indicator--5f07497a-0e66-4431-8721-c4d33b9ed26a", "indicator--1945855c-4caa-4e8b-aaad-7314c279fd39", "indicator--6fb8359f-48d0-4ba3-bf61-c247ad0215f5", "indicator--0726e022-069c-4ed4-8378-7a0d2db8f0c2", "indicator--d4df111d-b705-4b33-a2f5-50e506745100", "indicator--d3c048ba-6fc3-4824-9e6c-94a695d77318", "indicator--aaf217fc-982e-44aa-be7b-68bb3c7a216f", "indicator--ae480e75-3634-4eeb-bac4-c7a6a8ea2bc7", "indicator--b5e23cc6-9022-4557-b60f-42a1e624b507", "indicator--7482ae78-a2a4-4096-aac7-a26eb771439f", "indicator--ebf38344-7030-4455-9238-e4976e573ca9", "indicator--1ed6ff63-6b60-456f-8264-805741bf320a", "indicator--2eb71aa5-5394-4d0f-94a6-6004fb714924", "indicator--0d3c6ab5-b232-48b4-9b8e-322ddd3ad73e", "indicator--0128a73a-588a-46da-b265-85f892a04b17", "indicator--abf8ab81-a81e-468e-891c-eaeb4bf1aba6", "indicator--9f1bbd0b-3f47-4a68-a786-2ab90ab6ea77", "indicator--ebfd30c9-7563-403f-b8b4-3e3b1115c4c4", "indicator--cecbf9c5-ae09-4cd6-bfb7-066426d299fd", "indicator--a6110c50-6bc7-4a81-9061-1c749e7f9378", "indicator--8153db15-eb9c-4256-9d72-15f1b48d0fd0", "indicator--c034e16d-d314-487e-9764-db8f30d2b8eb", "indicator--bab5fefb-f3da-4ad9-b213-52271d675ae9", "indicator--8255ae78-9f21-45d3-bb93-151981a8ecdc", "indicator--b1c0d4ab-c701-469d-8786-0dcd742d8da0", "indicator--aca084b3-f9dd-4533-9085-5ddbe21e3d44", "indicator--c107472e-f53d-46fd-9b86-0be888c8118f", "indicator--4d1f2ea2-c11a-4239-809a-d52230df9335", "indicator--0e9034b9-0f5e-4f96-b375-92096b29b73e", "indicator--a81854b7-e94d-41fe-96fd-69ca0a7d985b", "indicator--71d53c57-4589-4821-8861-e7746259dc64", "indicator--358b0447-2ccd-4ef4-92b4-46dd669278a6", "indicator--6651000f-c922-4644-90e0-d9e8400a9bc0", "indicator--144d3450-2314-4c2b-90ef-95a516c3ef85", "indicator--050a42a3-3d82-4a3e-890e-2edfc9d381b3", "indicator--08771c91-e845-48d5-9c42-dd4e228b60b9", "indicator--a1c29be8-90b7-4c78-b288-91bd9781813c", "indicator--62f653e2-e5f2-4cdb-9622-2f3ef13f619f", "indicator--1e3064f4-a9e8-4d5b-aa75-e9acca673761", "indicator--3f0afc24-2b56-4a1b-abf8-9545954714eb", "indicator--7e8845a5-6fce-4786-aa26-62ff4df65e1b", "indicator--dca1b16a-7f53-4136-b014-77aa62530a3c", "indicator--e1ef3537-08db-4ad6-8775-da4d36d9ba11", "indicator--3fbf7bd3-1555-453c-9c6a-fdd7c71807a7", "indicator--bb4de3fb-64d8-4774-85ca-0f67c7498966", "indicator--7ed77446-64cb-4e5e-bed2-691a56da63cd", "indicator--945dbf26-905b-4cc1-aaa6-b8e256a42a63", "indicator--79a15668-b807-422b-bb3b-42d31eabf29d", "indicator--d09d0983-a614-4eae-b3fc-a7c0d8e64029", "indicator--dcaa5e33-a4ec-4e2d-b4fd-fce1f77c8ca1", "indicator--89fe910c-358e-495b-a126-3b1eaa56edfa", "indicator--735c42bc-e38b-45b2-adb9-689e26f7fc82", "indicator--7d29972f-1a08-44a6-8918-0c5bedc41570", "indicator--3ad7de79-2e35-48cc-9974-ab81832e2ca7", "indicator--3a652a79-39fc-4d6a-99ad-652c849b66c6", "indicator--d729f752-2b8a-4742-9191-47ab0eac6b79", "indicator--6d11c9c1-6072-42ee-a681-e34749f80f09", "indicator--d1733f2c-7936-430d-9605-b27f4cc476a0", "indicator--0f7bf75c-9e41-476e-8b97-77116030585e", "indicator--e72edd55-9276-4a99-a7bd-960d3829b882", "indicator--371a2a15-2bea-4442-a1c2-db33ccd853da", "indicator--2989fdcf-2347-4401-989c-e924371bb956", "indicator--29549dc4-a5eb-4109-8680-709202c4fa23", "indicator--d9b6500a-4600-49d9-adab-0215780bea68", "indicator--0c2cefbc-1d9c-40c7-bdad-aae1f85ce629", "indicator--24a4e5f7-623b-45a7-b84e-336321b9029a", "indicator--9d023144-b2b2-43fa-8cb2-1da296c3ad35", "indicator--4c79f453-dd67-4b65-9e09-b2c644fc3802", "indicator--01be3912-cbc7-4e6f-bb2f-affa0ac9986b", "indicator--c42a5afb-2cb3-49fe-8eec-de8622bfcb8d", "indicator--12295c9d-37d7-47b8-9eb5-a9ff03f2ad89", "indicator--ade7baa3-fb56-47d1-b9b6-4ef07bc9695e", "indicator--ffcc9bac-aee1-4d27-baa3-e37a6344ee23", "indicator--eb042117-34af-4fc5-87c9-df67d698d3d0", "indicator--0d446e42-8ff0-42d2-85c0-f7fe027bb6ce", "indicator--ea3dde42-2882-4819-ae6e-24bc5e481883", "indicator--b7979abe-35b8-4f34-a558-eb1c2571b150", "indicator--98dcdc13-f999-4f59-b07f-3cbc93b6b31c", "indicator--e998971b-5b79-4aa4-9593-c010ae3cee12", "indicator--22ebd4aa-25e5-4481-8a24-409b21acbd26", "indicator--11ba748a-1e32-45b4-a92b-271ce23c3b10", "indicator--a9615a75-90d3-4ee5-9d04-936a1aa6c7e5", "indicator--8dae3f48-3b8b-4f49-8975-ce1993e0e0f1", "indicator--3908f065-1fc3-49d8-8a80-e4a9fefa4e84", "indicator--d7a1c6ed-ca1b-4207-8ead-ca57c280a118", "indicator--a1a26c28-0aa0-4b0a-80de-0f5e73bec191", "indicator--8c7df83b-4bfc-4d16-a17e-8951530d4a5f", "indicator--2ec761de-8b38-408a-9875-2e840b71f415", "indicator--7710915d-2894-4a48-888d-d955b18d572e", "indicator--14b77748-4d60-4485-afff-225f53f3b796", "indicator--5ab85b92-ca31-4a26-9bfa-1a7aa23bf121", "indicator--6cfd90d2-ec28-4ace-9672-a12c62daf482", "indicator--c62f434a-2c3b-4273-af0b-4e2307b4aa80", "indicator--6d1511d1-42c2-45f0-8c81-1ff144e64613", "indicator--6ec186ff-1767-421f-b9f4-ecbe6387d87c", "indicator--05fc1641-1382-43c1-a0af-6314aac1a5c6", "indicator--d765b570-58e3-4259-aa4a-2ae286bddff8", "indicator--8febf4b0-e0ab-4139-b7cc-1fda53b929d2", "indicator--fac20288-5e51-447b-9c66-3c48ff65b919", "indicator--b13add1a-c546-4c30-ad3b-14a434af7dee", "indicator--abe60350-aac3-4d87-bc23-85232fa069a7", "indicator--31f8bcc2-93aa-40fb-973d-a6ed9b0f4a1e", "indicator--5ec3d4d6-4f10-4172-92d0-986da78129e4", "indicator--aa730ecb-72d6-40dc-a4a2-8081f87f9639", "indicator--b66c55af-1ebb-4e48-8da8-5e88687f2dab", "indicator--7583f2cb-fede-4078-b166-cb926a83aa6e", "indicator--f3d7b621-fdb2-4cf6-a85b-1858229d0b58", "indicator--aff72092-a715-462a-80b7-85f0713fa6f0", "indicator--39a090a5-028b-45eb-8519-d0247045def5", "indicator--aa9a553a-c0b3-497a-b712-4b6545a10900", "indicator--2f9c55fb-645b-4826-8c75-ff4ee86e3d6b", "indicator--c0f3a212-69bc-4a2f-8ed2-2b4a7993a0d7", "indicator--4f92a7c7-cd9f-4540-8a8e-dac2c878d29b", "indicator--bd3e2ab9-4981-4a06-87a5-5e7cd661323b", "indicator--d14a9743-3ec1-4e34-bc82-457528534d9a", "indicator--47f91610-8562-4ae8-9639-36fb5785e608", "indicator--ac3acc42-8e97-4f8f-9e07-3b24029be626", "indicator--d396f322-55ed-415a-9d34-61c94a228842", "indicator--92622462-542a-48f5-85c9-9c89a1eb6f14", "indicator--cefcd1d4-ba30-4cda-824d-e461fd4b5ff5", "indicator--b1867044-c4c6-458a-9af3-bdab580c57c9", "indicator--66a5b847-7599-4556-a98b-ec53a797942e", "indicator--2e4c5740-1fd3-4651-9089-86358959021d", "indicator--c1bc57fe-9993-4989-b69a-2bf2c1e11525", "indicator--15b9eb89-e8d3-4c05-86c2-80aa3266f797", "indicator--69a03678-aaae-4ae1-bfc4-a67cad579765", "indicator--3d6c8edc-340b-4705-9cf3-5b11352ba952", "indicator--fc778f07-2071-4b5f-b651-643390a456d0", "indicator--4e6e6853-9f8f-412b-a45d-3e5c70994e22", "indicator--7607716b-fa9c-4fe5-ab79-0d43dae06d66", "indicator--d43b7e00-77d3-4b21-bda9-4a745dcb23ef", "indicator--b53de4da-d421-471c-af64-30f15bb4dd13", "indicator--f9265978-30a0-476a-b3e0-0e5ea17d21e3", "indicator--37e4b15f-797c-4d1a-9183-41416ad7a700", "indicator--ee458209-bd3c-4264-8a52-b3d605d97ce2", "indicator--793104a2-01c5-4eb8-bd13-ef8e75260902", "indicator--f2425cf1-2fd2-4ec9-aecf-f013eec950c6", "indicator--249ef2da-5d6d-4dc8-9059-0c5e4d1016ec", "indicator--8733d1a2-c53d-4c00-9f98-991351dcf169", "indicator--ec06d52a-bc51-4845-8989-9c5d7f61cc2e", "indicator--a03b739e-bff3-4f64-a323-ad7a80ac951f", "indicator--33cd0dd5-4588-4307-b34c-332bd46d2d75", "indicator--736fcf92-7746-4b0b-b2a8-cae99b51138e", "indicator--9b5acbaf-5c2d-45a8-9c76-35057403f9ed", "indicator--99911489-c0a9-42d7-b2e3-ada4390a36d6", "indicator--7f484370-1b24-4e11-9d96-dbc979cc33fb", "indicator--383aca78-a045-4574-9d15-9517e533ebfe", "indicator--28960268-eec8-4a3f-a874-7b9f24e72ea7", "indicator--66ecd1eb-332c-4a51-87cc-fa82a18c24ad", "indicator--b660be67-c23b-4bcf-8b36-5ad4bd4788d6", "indicator--5687e6a8-42f5-46e2-ab55-ffc40859ffd7", "indicator--975112fa-8c03-47db-b34b-3a999bcfd19d", "indicator--3f82b539-490c-4bd8-888d-423100f8ac2c", "indicator--d5630e87-401b-4c8d-a8af-b6806a382dab", "indicator--8701759d-40e7-43fd-9b75-c0d1653e3784", "indicator--1b109e0f-4256-435e-b870-a73356a44d7f", "indicator--88d530c3-06d3-442c-b59e-d57f18c776ad", "indicator--18662e10-bb50-42e2-b149-98ed035c7b9e", "indicator--1a7df22f-afd8-465d-ae1b-6bb59ffe8845", "indicator--ca22c091-b507-401b-8c68-de00db0afeaa", "indicator--672ca9e7-8f8e-4de5-98e2-98ca401bd58b", "indicator--c4c0d371-9ba7-4f73-a503-13f3489debd2", "indicator--4621b4a9-1a6c-4f36-ad43-a22e1d6a2f37", "indicator--166b1261-080a-4544-85b3-e71e09752784", "indicator--e22bd0fa-f74a-4bd8-b032-8cedbe1cbea8", "indicator--294a9f06-14a5-4a0b-8e62-14dae54854ac", "indicator--69c9a028-e211-43fd-abc7-505e32a2948c", "indicator--37199393-c7d6-4186-942e-1dcf4a2ec3c9", "indicator--adf615dc-8137-400b-95d9-8ec897bca761", "indicator--a30f1e8a-f1e7-4887-99c4-7ddcbad0242e", "indicator--f1ef8e19-72f8-4a20-b7b1-c5df46d4bc55", "indicator--899382c2-7c90-4bef-aed6-3d16b853cc07", "indicator--699a91e8-1efa-481e-98c4-7b33ed8b5427", "indicator--dace14ef-845e-400f-9033-76c4a344fb1e", "indicator--68cef43a-fac4-43b3-9ab4-76c5e26f82e1", "indicator--907b109d-8d56-4794-9053-ad7ecdd0efbf", "indicator--312c08ae-bb8d-4aee-bcdf-143d63ef8f6b", "indicator--c292b843-e949-4ee6-a51c-65d426e25187", "indicator--9fc307f8-9d5d-4d27-ade5-a5bdbd3cb635", "indicator--48f246d0-5a12-4e34-8bdb-4f2de6a2c220", "indicator--071713ea-5541-47b3-9f4b-c46f845ed136", "indicator--4d0e599b-a089-4d09-9d05-e18d65d60e5b", "indicator--b1f70e59-fbfe-4991-953f-3ff8a0173b37", "indicator--4cccdd9b-c159-49e2-9bd0-ef8abe03ce79", "indicator--faf6b515-7801-487a-b159-728c0e2134ea", "indicator--ae6f600e-b2bd-4625-a232-a40389470e8f", "indicator--3c77b45b-57d1-4078-bc68-ca6a2cb46a2a", "indicator--339ac44b-2f03-4c82-be0d-cecdb5ef180d", "indicator--872705da-498f-4b88-b32f-f02ab8f081fb", "indicator--dd59b8b6-f638-4417-8905-fa9e9156db97", "indicator--912cff23-421b-4c5f-b0d9-f7da95553ca2", "indicator--9a814652-4ca1-411d-974d-15aa20a52976", "indicator--9c735fd9-ea73-4235-a415-0a0acff0d104", "indicator--a5e40648-b3af-44b0-9a5b-017a44d0a8af", "indicator--9f7f00a8-9d52-4b22-89aa-1bebc910bb8a", "indicator--12ff4495-95c3-4a62-9b8f-4a0f48768e90", "indicator--d1d2738e-5856-44fc-b392-c1f5bd07eacf", "indicator--c8ae5bd1-4184-446b-8731-20ea1dbc0dea", "indicator--89373530-e65c-4d18-857e-bab5a9204234", "indicator--b2e095d6-6651-4d1e-8e3f-70fa979934e4", "indicator--12f24ec9-11ea-453a-af0a-a2729b21caef", "indicator--ed0a40db-92f7-4e7d-9106-d23c6c3acfbe", "indicator--499f4b2b-c6c1-44be-b2b8-b41662131d65", "indicator--1690cf12-8787-4c4a-9604-24da548e42d7", "indicator--69e472dc-ab94-44c7-a6fb-d3088466e177", "indicator--f97788f7-5189-449e-bb5a-4002d9a71582", "indicator--ec6b2f6f-c77a-41d8-96b2-62c78dea4b54", "indicator--f6ead20d-5d03-4c5f-8ecc-dbb6167fa60f", "indicator--b81e1564-d8bc-428f-9c15-4dc88db87585", "indicator--27f319ce-9d87-4cac-8278-d6dc9b1ff84d", "indicator--64745908-dd9a-4218-b2a9-bfc5ac922a8c", "indicator--f8e6b3c4-e60b-4da4-834b-d6531474381b", "indicator--0691341d-ac05-4054-8588-ca697c993cea", "indicator--b7633c4b-a6ca-4219-9fa0-5f74c2c1a751", "indicator--611c8501-7dd8-43e6-9b95-2e9a74be866e", "indicator--8e7231cd-d14d-4def-a07c-edf3acec85db", "indicator--7ca9f918-22a4-4838-a9ad-0c81e4204476", "indicator--fe1b5e7b-12c8-40f4-bcd0-54194c93edf2", "indicator--199cb6fa-ccf0-45a4-bbe7-4d6eec6cf04f", "indicator--1156b96e-501f-4eba-b370-a4508b1f48df", "indicator--3f8d87e3-3960-4f40-8f82-c1009558c639", "indicator--7dde3d77-c9de-4e64-baff-11f092a3eb97", "indicator--6001c07d-ccec-4eab-9a8f-d0a7531f26c6", "indicator--08323a5e-0adb-4145-903a-41c61f06008b", "indicator--f2f61eef-6e8b-44ed-ba68-7c6bca80bf39", "indicator--f9119ee2-e69e-4621-b0c8-9bdb63bdc6aa", "indicator--53de5b84-838c-497c-9c08-85fe13a222b9", "indicator--7ef4ae1b-af06-4b8f-b3ae-d7b8549cb2c7", "indicator--f7c614f1-9793-4570-a3c3-97f0a25318da", "indicator--5c9a0f58-0a7b-4d24-b378-369661b32400", "indicator--995e5a8a-843c-4e13-8717-ad8a1ea48573", "indicator--32aa5975-6ac4-4dec-8586-bebf66498b04", "indicator--0f43e641-bcec-4ffd-bfcd-b73490baa4e3", "indicator--c4048427-c447-4687-8a10-b5d311d15006", "indicator--8530aa69-ad3c-46e3-8ab5-2cde32bff6af", "indicator--e9a90aa4-9ac8-44d8-b26d-92bc17cb5e5d", "indicator--ff5d8162-81a9-4818-8b0a-f2bf167725ba", "indicator--b7810792-f17e-45ae-af79-ee4fbcf3ea95", "indicator--e3609b9b-8907-4b90-a79b-daf74f39cb78", "indicator--fe3cccd8-40f7-45fa-b4dd-cd2afc271f62", "indicator--0ede7111-29fc-43a5-92bd-7d503ee6900e", "indicator--5c3c7e21-7be9-4c67-a9ab-d4ac6d1eb39f", "indicator--756dd8d9-d3a2-49eb-a3f3-bb8d14765392", "indicator--6684a22a-6bda-414a-ac9d-6b1fc43cb173", "indicator--b28beaa3-5fdc-4fd7-ac5a-762081358b53", "indicator--84ff90dc-6a14-45c9-b25a-e77b15b55496", "indicator--ae8d8384-3464-4438-8bd3-6230e799753e", "indicator--b9943a50-ce55-4387-bbe9-5ef7e6a8c7a9", "indicator--fac0a65a-03c6-4b55-bc63-eab66e104091", "indicator--aa40ed3c-6aaf-4886-bd11-2f8f26b95424", "indicator--20248396-becf-438f-85db-c6989bb9a817", "indicator--3ee6837a-4e95-4590-a846-dde83d1da216", "indicator--ea697d01-17af-4068-a9ee-63703bfbee4e", "indicator--dd9e9534-5581-4e9b-b7dc-a55f5b8ad69f", "indicator--3dfcd4e1-047b-4ecc-a316-0283d2916946", "indicator--b4e503ae-e1aa-47b2-92f0-c674af1e51b8", "indicator--ca27343b-556e-4c8c-b054-7ede9e4cf7f1", "indicator--4d47eb52-7367-464e-b366-063ff8cc111a", "indicator--9644ad12-06e3-4a73-800f-71fa099cf528", "indicator--3febc8de-1597-4342-9ac4-4189e2e17a5b", "indicator--f1f59c11-e59a-491f-963c-30e8f1324249", "indicator--86fd754d-3475-4dee-a27f-dcf6e3009f70", "indicator--525c198b-31ba-41d9-adcf-3ef33f31fd1f", "indicator--d7523412-c6af-4c08-982d-134351198c8c", "indicator--37847b52-8e6a-4653-84e6-ad93172bdd70", "indicator--9f019608-1a92-4f98-a81c-f9e3277eaad8", "indicator--b40d5318-96a4-4ab1-b9e8-3056f64a9d68", "indicator--fbc8c851-353b-43cf-82e1-37dcab411e5d", "indicator--2b8b5b8b-b4fb-4743-9a1c-d44a0197b7e9", "indicator--ebcdf147-9825-4265-b647-33224e126082", "indicator--29265594-82e1-4791-8bf6-fc585e715284", "indicator--4dc09b48-1ba2-449d-b662-ec4813ce7972", "indicator--f5545696-18d1-4492-b35e-8374e8f751d5", "indicator--637e6df8-cab8-4643-b577-97750fa7d09e", "indicator--b8d2c22a-fc16-4c66-b823-26b4565c864a", "indicator--9d49b39e-d805-4153-8640-a2aa929c44eb", "indicator--64139875-d728-402e-a6d7-4bf973288277", "indicator--8f2aed4d-018f-44f2-b778-16fe55d86792", "indicator--6dfb8d22-85c7-4647-abce-c9197727cd42", "indicator--3e156069-2601-4f49-8faa-40ebdd44fd65", "indicator--ea6fbbc6-9487-4d21-b300-3fdf42946d67", "indicator--302064a3-3407-4c4d-9459-aa827eb05d5c", "indicator--4c065c9c-9324-4965-84d8-c2418c7062e1", "indicator--c508a706-3a27-49b4-a901-286d2178143a", "indicator--3477bf3d-4ee1-4db8-a3e1-fb0e8545129a", "indicator--ecea6e67-b895-49e5-aa02-de78236424b3", "indicator--6864c088-c2c7-45d0-a890-b49fe42a2068", "indicator--5a7badec-1701-4b45-b14f-8b6acc68b305", "indicator--ac79c91e-2ad9-46ef-88e6-9242f5e26c2a", "indicator--52a42a68-c787-4f77-bd5d-04be5dda03a9", "indicator--5a446c93-c931-45e2-a425-36c2a67aca00", "indicator--85f3184a-0bad-4033-b11e-590aad9901ed", "indicator--a4019571-c624-4cb3-a79a-4e9fadc12880", "indicator--e5af41c9-6acf-43e3-8a8f-bc6474545326", "indicator--2fc152fc-c287-459b-aa47-0ddcc574a5b1", "indicator--c8d424f6-ca34-4ff3-ad69-bd101d5d268a", "indicator--f1962d2b-819a-465a-b95b-676b2698f3b2", "indicator--e9b99165-5358-4fd1-8a41-dc50174f0b6c", "indicator--bfc99ae1-6e7c-4bc8-af1e-6a0b7ce6eb85", "indicator--f9e184f5-8eee-403e-b1a9-e33b89de72b4", "indicator--a2e6cf60-ef2a-41d0-af98-f02247137b40", "indicator--78f61b31-9ad9-489f-a097-0a975e0b7fb9", "indicator--00ffea56-c8b8-4255-a8b6-dc45e95079d5", "indicator--bfa21b86-e3b9-434d-8c29-501bb4c1d66d", "indicator--e2b1a970-5855-4390-8202-763b74e0acc9", "indicator--71f02550-4622-4d79-94b7-61e460b915d2", "indicator--7186c74a-87c0-442c-884c-fe854613e222", "indicator--c0cebf48-56d1-4fc9-b9fd-c602133b3ce1", "indicator--95294cdb-cc07-4b2d-a018-6a9df8445ddc", "indicator--8fbf5082-86cc-4a83-b5e8-1e33cc166d9b", "indicator--1b7cb38b-eb50-41bd-b7e6-b0118a622078", "indicator--cec55452-795d-453b-9fdb-48363ab65e5a", "indicator--9f2c4c2b-e9e7-489c-88d2-259a26f3ff02", "indicator--761b24ff-10d8-41d5-bf0f-642eb4f303a9", "indicator--ae9764fa-daa9-48e6-9268-005973122c2e", "indicator--c228bd21-2ab9-4113-bece-81f5c9445e0a", "indicator--f82f0135-8bae-47e1-abdc-084880ef2939", "indicator--c31d2258-b277-437d-9852-c5c143ed7854", "indicator--d120c48d-6fd0-4075-8c27-ec05e5e2f273", "indicator--d043367f-7458-4d63-8cbc-b96924d9d214", "indicator--e1275938-408a-4d07-8172-dbb79d23ea54", "indicator--40cfb9bb-6bd2-42d4-a1a0-d10be934b34f", "indicator--c96f7fa6-bc35-4168-aed8-3d9ee2642ef6", "indicator--740b64ea-4b8e-428d-b6d1-886416701d47", "indicator--d78a6508-9ba8-4e38-85c0-d6cf1d506108", "indicator--9a337d5e-dc1f-4e63-8bf4-00536f021207", "indicator--5b435712-022d-4ce6-b74c-4b048802d110", "indicator--d14dcd3c-9edc-4f3d-b55d-14ab789b6a28", "indicator--3bb82d73-b103-44b1-aa66-06156147da85", "indicator--37d0acb4-96ce-40c0-87c2-e7612ea7a00f", "indicator--ae88bb0f-8934-4b04-8e66-797dcb872667", "indicator--0bbb31ed-f6bb-4e23-ab5c-a69d18c30bb4", "indicator--beed60e6-34ff-482e-ad87-776f0e574626", "indicator--f0e131cd-73d3-4004-b24b-65ba48539ad2", "indicator--6d45c773-00bd-4493-b267-e3db673b1c1a", "indicator--2a2feda1-c875-412c-94d5-d197e42464d3", "indicator--d54f6597-8949-47ba-a087-ab73bebff851", "indicator--77b72478-25ec-41a8-ac1f-6bdf0449eefc", "indicator--27b4d5a7-c493-4f34-a200-e15626cea69d", "indicator--8d88f8ec-c5b9-4078-862a-0253071a8559", "indicator--c94633df-5f92-40b9-80ec-537d0f993fc1", "indicator--6e321f66-6756-415d-bd60-3059bc8df988", "indicator--c7abaa9b-6b7f-4534-8c32-1dc85033c2cc", "indicator--8d439fd5-5b32-49a2-8575-797b34008d49", "indicator--ddcf28e1-3f3b-43b7-9291-9ec403cd3777", "indicator--a8cfcaee-b7bf-44c9-9dab-abb113efb6e3", "indicator--950227c5-a470-4297-a1d4-75a17bea6929", "indicator--33c9f76b-0ff5-4a2b-a603-58758245b01a", "indicator--a8247e2a-73d6-4fc8-8159-3b227f691c0d", "indicator--4b3116b6-e608-4fa0-82ab-47f4577fd684", "indicator--c5aa2ff2-a775-40e3-86b8-d27df8d599eb", "indicator--0301b4ef-d080-4ca5-8f8d-e8532adcffcc", "indicator--d54f9a18-fada-4e40-b972-ca20cd167d9c", "indicator--a3c4fe2d-9069-49a8-9a90-21bede33d561", "indicator--c54efb46-881c-4771-b3d3-b15aadb3ddad", "indicator--4be2354f-fffc-4753-9e51-d22d6a7d897a", "indicator--6bac225f-50c9-4889-9b91-f4c3736b40f1", "indicator--ff0e3c5d-8699-4e16-880e-e280e72d2242", "indicator--436ff204-2327-48f2-9b39-4dd7193d5804", "indicator--ca826fed-cc42-4cbc-8183-a3658c33daf0", "indicator--9f86e73d-5c3d-4454-8045-36b1b67bbc13", "indicator--9e575a83-6561-41e1-b1c3-a95a4ace0b96", "indicator--eaeab466-88d5-4af7-81f1-51f9b0fa1879", "indicator--440eb3fc-70b6-4b0b-a88d-2c5016c776bf", "indicator--c024e514-6595-42bf-aaff-37ddf371c1f0", "indicator--33332398-a9bc-4d5e-b060-00ab2d970345", "indicator--c4738918-5ea4-44f6-99a6-3d54c403c1f3", "indicator--23964b30-4124-45d5-b343-24bb855854be", "indicator--4c579765-3e94-49e3-b481-287cd014a531", "indicator--c7abaa11-d2f7-4a81-a373-466891ca468b", "indicator--f18e0ebf-8ace-4eef-9adc-240e52ba2c3f", "indicator--4f770602-d7ca-41e8-bdfd-8ea32569bd97", "indicator--22d7c31c-10a5-4787-ad32-3b5992c1d702", "indicator--5f3e291a-0b43-4cb6-834a-fe355478fd64", "indicator--8d13bac8-dafe-421a-a20c-f0b91b131110", "indicator--4973123e-be32-4f1f-a17b-72139deadc81", "indicator--4bb52d56-5ee0-420b-9ec8-9c9928f67b2f", "indicator--e0bc63ba-6167-4615-a272-bde21275a309", "indicator--5480c57a-f496-4423-8805-414c4a35d7da", "indicator--504e81ef-3aa3-4f9b-92e6-9414c4f65ea2", "indicator--195b9fcf-f71b-4d5d-ad38-aa43ee94d71b", "indicator--b59cb440-1eda-4a0a-9143-cfd019a06198", "indicator--a6402089-6abe-4296-b334-edeabde4d4f6", "indicator--0804e688-510c-4cac-8958-feb7b326f192", "indicator--f92e5357-ece9-4028-9d13-0653fb9f8568", "indicator--3e187520-a480-4d0a-a674-a44171850dab", "indicator--5aa254d6-a2be-417b-9e26-3427bbebf259", "indicator--e96b20bc-5a84-4a13-b61c-6ed06282436b", "indicator--f7fc44c9-b413-4e24-84f5-8484962e7c09", "indicator--ccef9f79-0876-4eeb-b54f-4eb901681b31", "indicator--7a4027de-49fb-4a22-896c-6dc1d8899e59", "indicator--fbcc0230-8cb3-4937-90fd-db6f27fbdae1", "indicator--523f14c5-511d-4f72-bfae-d09435b171f3", "indicator--6e19f5ef-e43d-4bf3-afbd-755133f438e7", "indicator--69f3231e-b0ae-43c9-ae1e-a22b67230abc", "indicator--53096d0f-c3a8-4db3-ac18-a4a920de45ba", "indicator--fc087317-d44e-4df8-b748-66fef987c270", "indicator--43af21f6-003b-4f32-ad95-1fb68f5a49b6", "indicator--6a358c9f-f656-41ef-8882-f7d7ab3deb5f", "indicator--1c1fd245-4422-4526-986c-e597938f79b5", "indicator--06e054c2-58c9-4366-a7f4-a1e01b0ba2ef", "indicator--1ca60b51-23a7-427a-bd57-8846f4c30687", "indicator--fc4f61df-40c6-460d-bb98-4c3fc9a96d6d", "indicator--e73ec0eb-d3ad-4a1e-a6dd-a95b907b2adc", "indicator--6c3fce1a-74dd-4c87-9d45-e7cf70873167", "indicator--d4667cfa-4f05-4bac-95e7-a4e7526475a5", "indicator--3233f5d9-de35-4d88-9571-7a7d73a12a29", "indicator--45a67e90-6cc1-493a-b7c6-04bc3f2d3ce6", "indicator--af5cbd38-99b3-479d-b007-d3f083b31e68", "indicator--766d37f1-0153-4db9-981f-2f48e44d1311", "indicator--7136d182-b2b7-4522-a620-aee216799a28", "indicator--eb5ccf67-1e41-43af-ba06-f3c07558b25b", "indicator--b2cdc70a-e592-4b44-a44f-34850f921c86", "indicator--ceb8418c-ea75-4a74-a16f-c5e5b7223bfd", "indicator--247770ab-313c-40b1-8a95-62faa757292c", "indicator--dcdd99a1-8935-432f-b9b3-ae9b746925c2", "indicator--2f026c31-f302-4773-be96-f942ba2e69f7", "indicator--a74a7497-d12f-4e9f-bd43-dda55582c246", "indicator--f700cbad-8bef-4b3e-8558-a024b40930cc", "indicator--3089d5b1-aeb9-4c98-b7ec-a1adb2081e77", "indicator--1e4ed350-ba7f-46db-86e8-f4701d88317d", "indicator--b3262afa-d300-4279-8fbd-89f9272b28dd", "indicator--6732ee39-5d09-4fe7-be7a-9635781d4659", "indicator--ee229b3c-54ff-4245-9c59-f517da1db364", "indicator--a04b1703-f1f8-406f-bc58-b3224dc68909", "indicator--2c19734a-ca64-44b2-bb03-a86c421c9399", "indicator--7d7381df-ec1c-4fdf-9877-3444cdbd1939", "indicator--9b680a96-7646-4790-935d-cb5173a6fcbb", "indicator--0e62632f-957c-474b-a81e-dd0397087ee6", "indicator--d14169be-d5e0-4868-8a80-4d1f6ca8a865", "indicator--8f01bf21-cfe3-4b52-b2ce-2bdc14fa522f", "indicator--dc454b09-accf-4db5-a169-d2882f37112a", "indicator--4b018ef7-5ca2-46de-a796-347ee194416f", "indicator--777bf39e-cffc-4f43-86e8-3f8851fa438f", "indicator--5bcb6ddb-a885-4a42-9503-ce1263fda6d2", "indicator--854de94e-bddf-402e-a236-2f8cbf3d9857", "indicator--83169fa3-9bad-43d1-9b1b-566d81685ef7", "indicator--fac686af-c589-46ff-9a6a-ed062f04a94a", "indicator--8e0e67ab-01b6-41c8-bff7-4c87fd883c92", "indicator--882083c2-f788-48e8-8c12-5f31a9c78be1", "indicator--7d8686ef-06f2-41a7-a003-9081407a0d2e", "indicator--f99e0a36-8ed7-4974-8976-8c8b75e5dd33", "indicator--75691ac1-6157-4656-98bf-ec2497b3c09b", "indicator--21426e39-20df-4219-b3f9-afa4eaedab43", "indicator--7222ec71-a79c-4804-8733-f25af3e6a3b5", "indicator--fd6f00c4-3348-415f-b693-090ce7012766", "indicator--fd101e39-4e8b-460e-9dfd-70c5d5f1dabe", "indicator--b930003b-9446-4009-8ac0-402015e232bc", "indicator--7e5fe916-33cb-49dc-819c-950929c6b703", "indicator--e1005558-ece9-4113-8616-d4e0a9f0e4a5", "indicator--f553eeec-dc78-4e55-bc4e-22e1eee9ac23", "indicator--6febbc1c-ebbd-4be1-8bc9-77c3df216a88", "indicator--218dffbf-b5d2-4853-87fe-2eb3c6b6df70", "indicator--1c742c36-688a-4ebf-8631-3a6a99ba3dc2", "indicator--0df2907e-62c8-47e0-a4aa-b5e9ec0bfbdd", "indicator--d85462f1-a2af-4d4d-9779-75265303b54b", "indicator--dc38f977-02b3-4381-a194-52a6a325bd38", "indicator--5579a374-e293-48e0-904d-450106ab4f91", "indicator--2b5fb802-3c6f-4ba8-ae03-45078150108d", "indicator--1bea5a89-55d7-421f-983a-05960076187c", "indicator--d01134a3-c65a-4889-a550-f68425f79e16", "indicator--27a49cb8-b837-4358-a748-beac2696068f", "indicator--e99bb263-66ed-4937-8bd1-df2d3c503ef8", "indicator--452af418-fe45-4a39-8b31-1864a5bcea74", "indicator--74b59e58-11a1-4f3c-a2ca-220764b0d664", "indicator--1f3b6046-f6fc-457f-8eec-766d1d0bddbc", "indicator--a1d3092d-7f1d-4aa8-a735-0bbc382c3fd8", "indicator--d87bc6d5-f996-4ef0-90b6-eb121975abe8", "indicator--b4e1eba5-212c-4551-b222-ea1f449bbc0f", "indicator--5e28a608-06c5-4584-a36a-954d769a6bce", "indicator--e1b20828-326a-4219-bee9-0c87ed8ef6fc", "indicator--d8bb4def-2c14-4cbd-b656-0e4542f35d29", "indicator--ae4ac78e-e7d9-4736-b1c1-fb6df0caa4fe", "indicator--bc81a60f-7522-486b-af5d-83b1b4491174", "indicator--1096e754-5fc4-4fbb-b3b5-64daacadc112", "indicator--da077dd4-b570-41ee-94db-ce1abfad2b5f", "indicator--861db50f-25a0-4bd7-a5be-26a8da0ee8bf", "indicator--2260e60f-17b8-41e5-a301-60582c39bfeb", "indicator--b8f14c9d-30e5-4b36-b2f2-44070e2f57eb", "indicator--4aac744b-5a9c-4e1a-af70-da12d0f46a14", "indicator--f01a53df-16fc-42eb-a42a-66a4e3af0163", "indicator--8daab9b2-2d94-4ff9-984f-32acd83692d0", "indicator--76a7a92c-e4bc-4274-ba37-1ff19618d8cb", "indicator--1348d22d-e591-4a8d-899e-1fee81121320", "indicator--aeabf6f3-ae9c-4bbc-8a86-e0cd95300688", "indicator--9bbe9047-3ece-4c83-85b6-20c27284f32a", "indicator--6a7f5d10-8099-46ec-900b-1c5b2f10514d", "indicator--a93d789e-9579-44e0-87a2-ae3df72e49bb", "indicator--91a5acd3-a035-42fa-af73-020eaf068498", "indicator--a6fb89e4-48df-4a6d-b005-d7393b311ebc", "indicator--5a67f305-f142-463f-b841-c0b3b5ae0466", "indicator--70e32b6e-fd32-4c11-9bf4-83233ba08bf6", "indicator--30f6aee4-9f7a-43dc-adb2-9d82f68ba8b2", "indicator--29493221-fcf7-4c8f-b8b9-733dd055392b", "indicator--faf1f24c-2854-4685-be9e-729931387adf", "indicator--904eac5a-f5e5-4143-b039-fc2a4ad421e7", "indicator--8d0945de-9544-4486-8742-e51a19c54595", "indicator--5e8e7a68-7586-4582-897a-93aff7fc436d", "indicator--3733d5f4-a17f-415c-bf61-7c3cded2ff3c", "indicator--ccf25431-da56-4459-8501-e7f90973d255", "indicator--43a34e12-0ac7-4225-a378-b7c4ea810dc1", "indicator--a5e5ed19-1c5a-43a8-ba14-3b8329b945c2", "indicator--51a5391a-627f-4710-b5c9-d48dfc3b48d1", "indicator--7423d2de-6052-477f-bd58-a4d554c0b24a", "indicator--c140321b-0449-497e-83f9-e14b54af75e5", "indicator--fc6a4aaf-077d-47ab-a1c9-545dc09b8ec7", "indicator--09a78e15-9743-43e2-a746-37b18ea5c07f", "indicator--bcebd57e-9e2f-4d0e-8474-27486ab78f02", "indicator--f184d576-4d0f-432e-b171-c1822a3f03d2", "indicator--adf0aa43-2a05-49cf-bbab-19f1431b28fd", "indicator--6ea6a7e5-0676-4b3a-9a22-62d425c50e66", "indicator--3d4ff46d-24f6-4f97-af9d-5d94a254f048", "indicator--a2cc5787-f4aa-46f8-b6a2-3a64cf6a3fae", "indicator--a4ea639d-fb29-47bb-889e-4c54a6570c1b", "indicator--cdfccec9-482a-4c64-9c22-f46696124d51", "indicator--ea85a914-9b7c-4ff6-844c-a9061acd620a", "indicator--bb340073-3132-40b2-8be3-c32aceaa5263", "indicator--0c5de092-636c-4ce7-8275-f834de2f0086", "indicator--1239ae00-1780-4099-a9f3-87ef1102ad91", "indicator--a4fd3ab2-6ac4-4349-9c51-61423c530f8a", "indicator--3571c123-f349-45b5-b8e4-23b6698b25c6", "indicator--03e7896f-11c1-4413-a645-34807e7c0a70", "indicator--1a0f0a8f-f304-4d80-a273-dc5d7524e6eb", "indicator--6de632ed-581d-4bd1-8309-291088b8d96e", "indicator--2699029b-b9bf-463a-99bc-85a51299a743", "indicator--dda607a4-d7fc-4c72-94ce-3e8b44bd9078", "indicator--d9fcc0f4-e869-48d4-ab80-72fd507c7b18", "indicator--a17213d4-f94c-4147-b568-acfbc0cb1979", "indicator--5905cec1-b766-4e54-834d-7ce48df35959", "indicator--12ed0a4d-039f-441f-840a-d80ddaacbe31", "indicator--86195f49-035c-403a-ba57-2a72b682c6ab", "indicator--eeef37b8-c8de-4bcc-8714-0dc85f4fd517", "indicator--7be1fdf8-702e-45d4-bab1-0e0100ebbb87", "indicator--92178868-d77c-441f-a8f3-42bd264c8179", "indicator--27b99f73-a085-445f-b01f-b7e7ac26c507", "indicator--b152c69f-ec92-4370-bd15-e37be0eba5a1", "indicator--ae117e44-8089-4cf7-ad51-e93dfd3b2e9f", "indicator--9103d87c-02b8-4424-856a-3e50a28b4c95", "indicator--b0d5946c-3994-439e-85e9-5ca59b57f144", "indicator--73233000-e36a-4500-90b0-db2457afe177", "indicator--7a37d87b-3fb1-4f6b-bc9d-5ec1b03db39f", "indicator--6b85926a-df1e-4561-b983-5a1234624c80", "indicator--657ab1d6-a09f-4f44-ba7f-c6f6a68b7ba5", "indicator--2a0ec000-9995-4565-9cac-95003eb3288a", "indicator--c4c82251-bcac-444b-9b29-8cc62ada4a6c", "indicator--f79bcab4-c90d-4e3d-b11b-79e2b7f1f66b", "indicator--68621169-a06c-4609-b0f0-0be41e14c6b9", "indicator--f732df60-5388-407a-b079-e3c28da88f8c", "indicator--932dc9b1-0688-471d-a18e-697e7eeadd14", "indicator--0446ab35-3f1e-4ed0-ab06-68c6635b1620", "indicator--6a20ff7a-9ad8-4ce2-a270-5c74991746bd", "indicator--bcefa481-8f74-4881-b893-4296cd826cac", "indicator--a2b6455e-14fb-416e-a62d-07a7e757a2a5", "indicator--20008b30-3041-492a-b8a8-de95955fddd5", "indicator--b6608655-bba6-451d-9b59-7bd610cca6ab", "indicator--1d540e5e-7358-44f4-926e-697e50c1b486", "indicator--cc2ef86a-e08b-4f0a-946b-47a22fbd6719", "indicator--392b051e-3c5f-42d5-aa68-049efbc2f9ff", "indicator--8eb66c01-4efb-415f-b8a6-1fa61567c327", "indicator--55cf99f6-b892-42d9-aba4-9dcbe5c92de7", "indicator--c1432cbc-fb0c-4f15-9513-98a27264f129", "indicator--c671cf4c-4868-428a-9812-136c3b4b5dec", "indicator--e79c4607-96ae-4008-b152-b83d7908c912", "indicator--b0fbdbfc-42cb-4642-9cbc-84774847eaf5", "indicator--5fe51331-617a-4ca8-bbab-3805c2c60189", "indicator--ea89cdf5-9439-4a46-ad8f-d70c11a8d1e0", "indicator--f662eefd-6e2b-4527-b773-14bdabdc72ca", "indicator--3a037777-5360-4968-bb1d-b00cf0d4c3c4", "indicator--90d2c2f1-b8e1-4fd0-93da-a1ead612e37e", "indicator--474236f8-0764-49e3-a3fd-819a398f9b9d", "indicator--9c822490-15c3-4496-8982-386646d437e6", "indicator--c07c4176-00e3-492f-825a-e73ca6ecf8a4", "indicator--0a564910-3f52-4f57-8b76-472bf0a36a1e", "indicator--cc077a85-0bef-4be6-9f2b-055590ae7489", "indicator--2d7c5fa1-1631-4edc-a341-02443f7d518e", "indicator--be65c5fe-f5e5-487a-bab0-e159d89d594b", "indicator--3aafd619-fa07-4c41-b14c-2cf45e4c0431", "indicator--dace5bb3-b3ba-4541-b94f-9ef587cf4aa5", "indicator--654d4837-aa35-4c37-a1c6-459b0ab5164f", "indicator--260a059a-cc2c-49b8-ac76-13a2265b3140", "indicator--9df07e16-0998-4bd6-b345-123fc1ad0074", "indicator--67948d5b-3997-43ed-b9b3-2e93b7281297", "indicator--adf55ec0-b310-4024-addf-66357f9431b6", "indicator--8c25c512-c0eb-45e9-85bc-2aa5fd321410", "indicator--3a3b4de0-b88a-4639-a148-47f12d0e8a91", "indicator--85bbc677-2d56-4659-83c3-c422550beb70", "indicator--0f72d205-908d-4af7-aaf1-9062d2def7a4", "indicator--c5592973-4cc3-460f-ad1a-22a458fe75e9", "indicator--58b4f6f7-4b8b-4d7d-9d72-767c3d591fea", "indicator--46d54854-b073-4044-8b1e-afdd9d9d9a72", "indicator--57e2e19f-4d39-4684-a493-98bb3720f202", "indicator--7aa8e4ed-451e-49da-b695-f467fd1dd34f", "indicator--ec89cb9b-9503-4efe-b1b3-f9636f3ca5fc", "indicator--ace7703c-f440-48e7-8b2c-9a1a4bd951ca", "indicator--f38e4800-25e3-40d9-8bb8-31d09d6bdb0e", "indicator--9aaf13c9-4298-4ea8-9ca9-532ec9f5df35", "indicator--806bfd97-fad5-4a93-9a95-48fdd38ac93c", "indicator--57c2e3d0-3dc1-47cd-89eb-1bd7c37cc176", "indicator--a408b160-3506-4176-828d-e360eb44e77f", "indicator--4e8a6896-9b67-474e-a01b-19e5139580c0", "indicator--129ce49a-a63f-4111-ba82-e7a2346edc21", "indicator--5a1d5a95-85e3-4199-bc44-14cc8910b9a0", "indicator--8de7bd3e-b6b1-4bab-afc0-5087f91b5ee9", "indicator--5507d900-444f-4157-a9a5-7532b0697db9", "indicator--2bdc8f5f-e976-4e46-81e6-a2025cdf2e3d", "indicator--bf2fc92a-f484-4a53-b0f8-1e3d04ed25dc", "indicator--3689aa26-ea50-4b98-afc8-e029b5d6c88b", "indicator--c48bf909-26a5-4a3b-9fe7-a05592fabfd1", "indicator--b6578ca5-4228-4bfb-bc2d-d35bbeda2d0e", "indicator--d0978148-3105-4a32-a80c-02ef928b386d", "indicator--8d1448c8-75e2-4b48-a8bb-d120103e6b3d", "indicator--22a26365-178b-49bf-8f90-cb94ffa6daee", "indicator--a6c7c90d-1b36-4d42-a5ad-6d05843ce3b7", "indicator--5a783f55-167d-4202-93df-49094ade9273", "indicator--378e665f-2bb9-4dd6-99e1-5f6bd5ee60fa", "indicator--1ca291f4-e080-4ca9-b427-731e18b31e82", "indicator--7acc0347-e0e2-4c1b-9b80-96ad08f2e5ff", "indicator--989f7f23-fcfb-4383-afde-3c5f6385f22d", "indicator--7a6ee092-7313-4f44-8493-2ef0d3439e74", "indicator--1ff1a165-8e76-4c95-83eb-c09b3070f6fe", "indicator--6753eb5f-a042-4536-9273-946b03a3eca6", "indicator--c7bee40b-f220-4ef1-8194-7728bedb3b7f", "indicator--0766d6fb-4da5-4a5d-bd9d-73b27b3dbb42", "indicator--006da60c-5e25-4334-9b45-acd3d677d2ad", "indicator--1ef79a6c-f473-45cb-bcdf-d899391b9af8", "indicator--725674f6-8323-4633-9e97-d461b6c17427", "indicator--874f0bed-c492-45c2-b5e9-1257c668302c", "indicator--6def19a1-8311-4376-be46-de744b1ba4f1", "indicator--d2c5dc6f-219c-45e9-bdd0-18a9416c3d52", "indicator--5963123a-33f9-4bd2-a114-aec514d64574", "indicator--e9136266-d3b3-4ccd-9fe0-2cea5eacf52b", "indicator--101e85a4-c1c8-42f3-b77c-7f73b4c934d5", "indicator--17a2c6b9-d797-4122-a24e-b3e4ec3da096", "indicator--ac9b9c34-fda0-442f-873a-838a95c0241a", "indicator--1062f957-4f49-43f5-91b1-5feeae2f531b", "indicator--f8a2e009-cfed-4f01-8391-945a54fba3fa", "indicator--87a698e0-040a-4362-8805-8bbc521ca7d0", "indicator--ec0a774e-f088-4889-a48e-be3f5b3ebdec", "indicator--15d8253b-8515-4fd1-9b5e-e4daaafeda16", "indicator--a8d08889-6011-496e-9d0a-d88555839d26", "indicator--e4471e08-4ecd-4f56-a4c0-ce7ac51fee5b", "indicator--e209b87d-98ad-4453-bd78-a878e05262d5", "indicator--51b16760-68a6-4775-b947-05dba9ba4034", "indicator--c0d83a8b-d08c-444c-9ac5-56555c44603f", "indicator--693cbe31-b574-474e-b997-cd38f6d7ecaf", "indicator--6817ea1d-58b8-4236-a590-5c0f8da5618b", "indicator--86c51e96-dac0-4d79-a4a4-1736a666a2e1", "indicator--59a0899e-eed5-4ef0-86c9-1cc4be03c49f", "indicator--394333b4-fb80-465c-b06c-7379b6ec75c5", "indicator--d6dbb6d9-5ead-4111-a23c-0b9535b8f2a5", "indicator--0d9de8c1-5b56-49b0-bcc9-193d9dcd2c7b", "indicator--549e8024-cda7-49ac-b3bb-10ba9cdea5e4", "indicator--dd31c8ea-1160-4cee-aa95-a6032854fa24", "indicator--b9c40bc3-80ef-4085-a4a3-f28a097dcbaf", "indicator--11e49610-2c64-4df9-b48b-0869b3bc2203", "indicator--f2a42e2d-1fc0-41fb-b671-90958d610015", "indicator--909e8190-df3b-4c2b-bfc7-45e0f3490f6a", "indicator--04de2ace-a82c-4d14-9ad2-2bd6e05fd953", "indicator--5fd93635-aaf9-483d-a764-5d8756e9c792", "indicator--0cf29d8e-5e71-4ab4-9e62-770341624298", "indicator--70809dbe-d815-4b8d-8e7f-711d8ddbb500", "indicator--05635276-28bf-4f5a-b6d5-23198e437839", "indicator--7fbf188d-ddac-4e46-a3e5-9f132987190a", "indicator--e1703d23-2f11-48c4-8ff9-ac396c93229c", "indicator--89531006-b793-4ebc-92dd-27bdb65b12b0", "indicator--6034ad2b-d133-4cbd-9069-a1baab030aaf", "indicator--24739737-553f-48e4-8e10-861dc2b40aaa", "indicator--4735affd-9dc2-40ff-a530-1213f580e708", "indicator--270da02b-9cc8-418c-957a-42dd54fc94fc", "indicator--4e94a3d2-e767-44aa-9709-dfdddc34feac", "indicator--724f5a1d-1133-46f1-ba09-9449d4901938", "indicator--23aa3e8f-537a-445c-ad23-166752cc96c7", "indicator--bf10721a-6e77-497f-8ef6-60805b8dc45e", "indicator--b1b45aab-09b0-4240-a63d-671cb9448068", "indicator--9cd8bc5b-b84e-4756-a498-96287c2f0b7c", "indicator--b19a6b20-c8bf-443d-90ff-a16cf23c3d0a", "indicator--b70a48f7-04fd-4993-8c95-6687d309068e", "indicator--cac22717-2563-41f7-8824-a49562938a3a", "indicator--81428f56-6b9b-4519-a06f-41b46b127ad8", "indicator--aeef56e2-6ce7-45d7-9511-b3b15647f52c", "indicator--2e57a33a-4f38-454c-ab05-982c36512a1e", "indicator--93b0fdff-bc11-4441-a35e-f8a754097141", "indicator--abbb83dd-5ee3-49ea-b711-66967a367ffe", "indicator--19335e83-36e0-4c6d-ac0f-6735ae084e86", "indicator--523b98cd-c7e9-4644-8fdc-885749bf8575", "indicator--20296dd5-d42b-4223-b31d-7d62bb1590a3", "indicator--6fafc55e-15f7-49fa-8050-44143dc2823c", "indicator--ed0450a6-d3b7-4d6b-84c9-61d05c58700c", "indicator--9ae08348-8066-4604-b1c1-baf85971a61f", "indicator--2d9b10d6-fa12-4a8c-9ac0-5995deb6b31f", "indicator--28ad2a92-658d-45ed-9a52-e0dbeaa2dbca", "indicator--e3bec956-378a-414a-a9e9-72cf26501491", "indicator--925676d6-e6bf-440c-8296-b2b3fec1f042", "indicator--8c58da63-248d-4529-b0c3-4a709b71b15b", "indicator--0372dd23-3bd6-4856-9606-2b89ee9d6de4", "indicator--ac90063b-6154-4dea-a5ae-dbef83ec898b", "indicator--df696312-b979-49ec-a47c-c74b94abe735", "indicator--3332bc06-9641-427a-b652-fd1fc53bdc1d", "indicator--175cc151-2524-41c5-891f-39f61407b131", "indicator--bdee07a8-6b66-4f7c-9905-7a4bfcd424e1", "indicator--ac608e6f-eb86-40db-bf4d-8540b9ac7a1f", "indicator--852ca7c8-802c-4f9a-bb28-21fde46072cb", "indicator--7670cc8a-e57a-45f9-9c52-6adad82ddcda", "indicator--d4985b68-d256-47d3-a66b-7d5d3efc18ec", "indicator--0a5e6a90-818a-4931-a9cf-e6b5933bafab", "indicator--163ebc57-65e2-4624-aca9-d85cf74cbcb8", "indicator--3db45d42-b672-4ad9-968c-7bb54480f963", "indicator--1cbb939a-9b2c-4734-a595-adcf149a9d35", "indicator--238a457b-a5ae-4cb3-bf99-e21c4ba89dfb", "indicator--a389d24d-5c8c-4447-a039-2c52bd4b39cf", "indicator--bf86a471-ef67-4209-940c-4a6a000e6044", "indicator--3adec3a4-5fa9-4cb8-b2ae-59ed3f92a280", "indicator--2f266c05-d2eb-40f3-b8a5-88fe0e237cbf", "indicator--87ff504f-72cd-4d6a-ade8-d90ef926179c", "indicator--1998ce71-239d-4011-96ff-04d549e6b59e", "indicator--713be812-094f-4218-81b6-016838181972", "indicator--46bf7162-6e80-459f-aa72-26ae07f24750", "indicator--aaf9af37-cdd7-4154-9a27-4496e41e5c90", "indicator--e668420e-0325-4d5f-9275-63db17321988", "indicator--3a8875eb-7586-4a5f-90ea-0f511eba9547", "indicator--4a13e997-476d-4a0e-adcf-4f1a8ff5dd99", "indicator--bff4b125-ef5b-4021-b69f-ffa31f1badec", "indicator--d8c97602-462e-4aa5-859d-54d0ab6626d0", "indicator--8ff2cc84-7012-4a23-af07-2d59bf1d4bb4", "indicator--1ec83207-46ca-4721-9f53-731dd167ad5b", "indicator--8791356a-5b79-4111-a8ab-2928b4c606c5", "indicator--6d682e9c-ea0e-4577-9709-943d0edc43c6", "indicator--7cfa2a3b-570a-4a46-805e-ccbf2bea7b64", "indicator--513634f5-dc7a-4088-8795-fbb8f76b8c04", "indicator--0ee13615-e4a7-4561-b507-32bbac3abf54", "indicator--75a07627-1a77-469b-baba-b4af8abdfbfa", "indicator--e487791a-da3d-4f15-a6f2-afd23663b1cf", "indicator--eb8ca4a0-3bef-44e6-b024-89f3350feb61", "indicator--abf4b8b2-1bb5-442d-a982-fd1b9cfeb382", "indicator--612b5fed-9914-45c6-98a3-4a46d37302bc", "indicator--b0682aa6-bbc9-40dc-94ec-61ac22049fa2", "indicator--cb9b21a5-5296-4496-8889-3512e3691330", "indicator--03b7d42c-bbd2-4573-a3bd-1da5f89bc26b", "indicator--5a8c41cb-5e76-4858-99b5-934b6b28cb6f", "indicator--d2c909e9-af8e-4569-ae3c-0996e18c4492", "indicator--c9f42649-1b68-45d3-ae27-cff27f0d725b", "indicator--942fd9a8-0375-40c9-8e73-e1dddaadad8e", "indicator--1e45c036-bb4a-406a-92b2-89e6b6df55fc", "indicator--3b66b205-b1c6-4789-ad02-ce08ade099ea", "indicator--e8060b1c-c7e2-4e61-bafc-12aaa030b482", "indicator--070a556a-45ee-46d0-b8d4-050ee2bea6b8", "indicator--400b0c1e-5cb1-4989-9a10-21dacaf101e2", "indicator--d2c8275b-580e-4fab-b060-750aa2378c0e", "indicator--afd642b7-adaa-4879-8282-252969cf3134", "indicator--fa688578-2c5c-4d71-b6ab-ccf59526023c", "indicator--9cb540c1-69d9-4bf2-9e56-40f807948daf", "indicator--20cb5f82-a61a-4b7e-abbc-eec629f5b432", "indicator--e58e6acd-5a2a-4204-b21a-8737dd5800ff", "indicator--e960c905-c67d-4bb6-89be-0ff81e14d1d7", "indicator--35b08357-bab0-49c6-9af1-a5a2a3970957", "indicator--1133829c-96b6-474c-85c0-b3c4fc206e11", "indicator--eed92744-e8a3-43c4-8a5e-f34976246879", "indicator--9158bc46-0259-4aa0-bbfe-ea0caaef1bd8", "indicator--58aefacc-7ddd-474c-a3be-d5424b80c314", "indicator--a03f2efa-0452-461a-a827-6717e5533501", "indicator--873b1724-60c3-4cad-9e73-fe2a4a97096a", "indicator--627c89fb-3f53-4fe9-af7e-29034c367dcd", "indicator--8eb4103e-07cc-4b86-8d6b-632303a8e199", "indicator--9aff6c7d-9b3a-4015-a127-2eb63f95cda1", "indicator--35635617-2354-4efb-8b22-9fc3d46706e1", "indicator--34edb5e8-0dac-485d-9c58-f104a1b08255", "indicator--a5c8ffe5-9650-49bc-ad67-beff5460e223", "indicator--c3b097ae-383a-4259-a8c6-c3c199de5fd4", "indicator--1cdb2f80-24a2-4042-9481-335d5d98ddbb", "indicator--523e9aa4-f3a5-4c39-b32f-e7dbf5d35093", "indicator--824efefa-ec9e-409d-8f3f-d7fedf15e0da", "indicator--67a65cf9-e72a-41b0-812c-ba2d42a2ef08", "indicator--b1a51c18-5d25-4442-a71a-325e522e0018", "indicator--9e10478a-10ea-4671-8ef1-fdc1670defa5", "indicator--7d8ae154-9fca-4b20-877c-ee928dee2657", "indicator--42e862e8-aa43-4d73-b087-3dba5c3d0ed4", "indicator--3c722450-6261-4ecc-a083-3727fdc001f9", "indicator--6a5a7c15-2f9a-40a0-99e2-2ef2f4f3b72e", "indicator--ceb93e51-6ed3-4880-88ae-f3d204944f3b", "indicator--2e426bcf-bd77-4d09-961b-fc377d837cb5", "indicator--ac334f6c-d051-4ca2-8d3b-eedb442057fc", "indicator--ef914853-5e72-4793-91b5-ac25d8b34665", "indicator--f91ebe3d-bdbe-4a1e-a559-983395582f82", "indicator--a4368cb5-1d76-43a3-9dc5-a3e019ff1119", "indicator--4df15b8b-9535-4d0b-9aa4-de926414cd6a", "indicator--3dfcb564-4477-44b9-bd00-74b8cdf391c3", "indicator--3cf0c3b4-c7e1-4029-9305-68b17962e0df", "indicator--02568947-33e6-4892-966f-2241654fe699", "indicator--77c389b1-ab0c-4e4d-9cec-5b17301ca50c", "indicator--5c1dbff1-a99d-41e5-8102-813617a99bdf", "indicator--256f0e94-614b-47b8-8de8-6d131c034420", "indicator--fbf86dd4-0319-4343-afb7-45c1f02e4981", "indicator--79e0310d-876d-479c-9c97-e85b0f94b7df", "indicator--d7e6b3d2-3d68-45dc-86f5-0be69c5380f0", "indicator--96ff0748-24e8-4b1d-a710-af2375715da0", "indicator--7566fbcd-149a-48e3-bd87-a2587b8d2124", "indicator--8389562e-9cda-480e-8b80-ab697c05601a", "indicator--aa3fd458-5dd6-4de6-aaf4-f568be6a2348", "indicator--28494a86-a605-4c10-b0c5-44339ea04e31", "indicator--28883bcf-5f2c-4943-a3f6-d7cdd1000b2d", "indicator--6a9069c8-dee9-4045-82ad-4b14075704e0", "indicator--2344f89c-e452-4d5c-95b3-b58083722c52", "indicator--a13276a7-8f01-4391-aa72-8b01835c5fce", "indicator--47d17ec2-0de3-4eaf-a8db-65367ad9ddd1", "indicator--7fafbc7f-2157-40e8-919a-68d3ac1848f9", "indicator--499c8c69-7597-403f-898a-bbfdf5e8438d", "indicator--fef0ee8c-03e1-4c0d-b047-b4329aba1f02", "indicator--6b2b704d-8246-4640-a10e-1f854fc31615", "indicator--e5dee451-5f0f-4a61-bed7-ffd96aab60c1", "indicator--44c2e213-9e1e-48cb-b3aa-9d5e1763325d", "indicator--795394bb-99e4-4a33-a2b5-3b7b6538ff8e", "indicator--fbf60d07-085d-473f-abf2-865abe2eb708", "indicator--ded08777-fe16-436f-9d5f-e3ba2b787c2c", "indicator--1a36bbeb-dd13-40d6-a732-b2dfd6e5ada5", "indicator--d079b72c-b901-4f49-8b69-eac6b450bba5", "indicator--1d230211-8a8c-42bc-82eb-8839ee76ce68", "indicator--48ca9003-c896-4cbb-bb2d-9c5dbf2a4566", "indicator--5dc12760-b9c2-458a-bed6-72ff7fb2aa03", "indicator--8d9151ea-ee81-4523-8b6f-ff0ef3520fcb", "indicator--172b8eeb-0dce-4b5e-8bdd-4bfe28f5a244", "indicator--e0bfe9d0-c4ec-429a-a3c7-e931d7c54d98", "indicator--996f68e3-7367-450f-9278-5abc487bf10c", "indicator--175533f7-51b6-447e-bee5-76384f57bb27", "indicator--e38bdc2c-c799-424d-9043-d62ffe2ccc43", "indicator--661395ef-6fe8-4127-8bdf-90a844e87db0", "indicator--5629036c-9e19-45ce-b1d7-ccd1810c768c", "indicator--4a5a4f69-1f92-4199-8252-6d6acee07108", "indicator--0d7c032d-e0e5-45a0-8d9c-79dc993d927b", "indicator--d982a5de-4b6f-4bca-b78e-4ee2285ad66f", "indicator--441e8821-aa12-4e4e-a8ba-50b574a6b4b2", "indicator--ebb4f5ae-65d4-4eca-9ac4-2cfe71825851", "indicator--55c431f4-ff36-4735-87fd-9c58f182348e", "indicator--1e685b17-5103-4258-bce6-6938323df58a", "indicator--0e2ddca8-d804-43f2-97e6-bb1ca17892d2", "indicator--25d185b6-0600-4270-82f3-36cc29bff613", "indicator--8f57ff3d-ff99-403c-8445-ff74de8f618d", "indicator--9507740e-d8f8-445c-8122-4da360b34291", "indicator--4e5ecb70-2eac-430b-ae24-fff181e6d3a0", "indicator--55368885-8417-471d-b85d-efe7a84fd218", "indicator--a64c15ec-48d5-4e8a-b7fe-42d00471c857", "indicator--6ed1ae2c-04f2-463a-b3d7-3a22af8746aa", "indicator--e92837a1-33ce-4e05-9798-b05adff00b2d", "indicator--aca5aad7-9350-48ce-bbdc-e0b269c8e7e0", "indicator--682efbec-6bf6-42e3-bd8a-8f33132ed95a", "indicator--dae6b1c3-ca99-4427-a575-35b0fa12761b", "indicator--8acabc9d-243a-4f1e-9bb9-792dee8007da", "indicator--988df15e-8e4b-450a-9e9d-402044f0abc8", "indicator--aa6216c5-b46b-4a20-96d8-19599a237561", "indicator--f1bc1833-8d36-48bb-8ea8-70d3e269c596", "indicator--057d0991-664f-412b-afbd-fd6e5c454cff", "indicator--5c1cf854-367f-4981-a079-2bfe428f723d", "indicator--ad7dd1ec-da04-4f1c-95ba-23640c4da208", "indicator--97f677bb-885a-41df-b6ac-0533368fd917", "indicator--655f620b-a86d-48dd-ba89-d79a2dd0dd1a", "indicator--9e226049-512d-480d-86b2-4f538ff7bac5", "indicator--6ae0308d-2ad6-407a-a6fd-189b71335555", "indicator--e1c5d950-c572-4db6-8c0e-196062303556", "indicator--4c3f1c5c-06bd-41d7-b35d-7ef53aa2ce01", "indicator--8742d569-7957-4fea-9067-16ffd1a75705", "indicator--79c356fb-7e7c-41b7-8ed8-65567ed70708", "indicator--070c83ae-e223-43e6-a2a4-dac63617fb40", "indicator--8b3a6530-d70d-40a4-aa92-810266e233ec", "indicator--853f610f-cfba-4ec0-8109-1904aded97d6", "indicator--106afa4a-2c4d-48d1-a501-905404a6adcc", "indicator--421f2d02-c2c2-4bf7-bf8e-72f3416fb513", "indicator--9d86375c-2c38-4ffc-84ec-784a084c5bd7", "indicator--453bf747-2542-4ab8-ad6f-267015a7305d", "indicator--0e390b7d-1c2e-4a8c-87b1-022084f653cc", "indicator--77151e11-930b-4e89-b7fc-1dd90292dd20", "indicator--6e144390-bec8-4e23-86d9-dd90ea456c05", "indicator--7bce0c9f-0994-4be8-aafa-a163877ca031", "indicator--041d32c5-cca2-4474-991c-9a8fc49fb1be", "indicator--77603455-ba35-4db0-8c25-5ae812c1cd49", "indicator--a0272daa-32d6-4512-bd1e-0dc92f32f1d0", "indicator--b866c79b-a3b8-4303-9df5-9a05b8ffe066", "indicator--b4dca15e-819d-4510-a9c7-9e2fd61e0e33", "indicator--f351d18a-598a-4414-acc6-5dd03a8adc28", "indicator--d387c4f8-8334-47d1-9c3a-4f123fab5aad", "indicator--83b9a5e8-f970-4987-9c5d-b4764468797c", "indicator--59f92afe-0348-423b-a449-f7ff03b8bd89", "indicator--1174a302-5e59-4a31-9aeb-612caf4df8ae", "indicator--10f51b5a-2834-4c1f-b3d7-c0f270759eae", "indicator--8b4553dd-dfdf-4fcd-bb12-f691214c8236", "indicator--968b7762-29b9-4a51-8c4e-d795979d5e02", "indicator--4411a3e9-d54e-407d-bd22-e7e804eb752b", "indicator--0e85a7a6-3816-4db2-b943-a50a5c914b00", "indicator--b323a126-d1b4-44b9-8974-e6b33d33775f", "indicator--02085d59-d36e-4f22-a61f-26f1a81d3e20", "indicator--7c8ee5d5-3186-49ab-bd43-2168ce986f12", "indicator--b6f1eb53-7623-4b42-ab40-3a3c1f964dbd", "indicator--b99c43a8-0af7-484c-9066-ecaa59fa7028", "indicator--c8c30e51-14cd-4d6c-a0f9-367306a48e48", "indicator--84759fa8-6fa8-4917-99ca-32b07d220259", "indicator--de22bbe0-fceb-4ad2-9e41-7d704b6bd3fb", "indicator--d0774165-0c9c-4b1d-baf6-53d7a728d62b", "indicator--9157de78-830a-4c3f-a02b-de4d6119235d", "indicator--991fabad-2c55-4ec2-b1b5-abb8d2230297", "indicator--14504291-1e4a-4111-a086-a1813e5d8dc7", "indicator--d405dd48-6c45-46c0-8ae0-5b8fb6bff68b", "indicator--553d2583-e33e-4b5a-8209-f4b46bac3fc0", "indicator--e1a39983-d4b7-487f-adb1-f2ac3e3e6d81", "indicator--3e6c019d-9080-48d3-be69-f38ad6a6049f", "indicator--b7719cc5-dc21-41d6-9da0-90a39aff43b1", "indicator--6c6cd84e-6677-4717-9b8c-113152852922", "indicator--1f410f19-7ecc-4c56-8978-c0f4a21c3f9e", "indicator--2791562d-48c6-4c30-95c7-7834658a922b", "indicator--4dde8b00-b14f-4f0a-886b-e3e60e7a3f43", "indicator--551276e2-eec1-4710-b844-cd2b309ea901", "indicator--28a34816-ff9c-4b1e-b483-c98c8c8bd33b", "indicator--bd0536ca-873d-4bd5-a994-c31951dfa167", "indicator--d96ccbda-2455-440a-b3b8-660049b05449", "indicator--a71462ed-c10a-4006-bc3a-85d9f7ef472d", "indicator--cbf18da0-a8fa-4e52-a93a-5bddf3d79ea3", "indicator--a9b5de4f-43b0-41d6-9ce3-665674e56dbb", "indicator--44d06b89-a225-4f75-aece-d10374125a9f", "indicator--cd5c8ca7-756a-4c72-b18f-0cc8c83d7813", "indicator--b6ca1dad-47f2-45d2-8501-50c62566a570", "indicator--649675a6-e7ee-45a6-a68a-6121f2e91e01", "indicator--6b84a4f0-5e9b-4a6f-a3c5-f7cfee0095c7", "indicator--c979bced-354b-4bbf-be77-2a244df946f7", "indicator--1e3f2cfc-f98c-4dde-9468-f491927b868e", "indicator--2bae096d-2a71-47b3-bd14-dc8e173ba6df", "indicator--e0408ab6-3ed2-492a-9e8b-a720fc5fe5d2", "indicator--e8d027d6-76be-4672-90ae-71e9373336e0", "indicator--d9575b2e-516e-4d3e-852f-87175e45564b", "indicator--27fbd4f6-6dd5-46f8-88ae-6e9be4924930", "indicator--89e4bb71-8201-42ba-8f17-496768f2dd60", "indicator--80abe351-9209-4c82-a9b1-e951cf1c8157", "indicator--d1032c22-682c-42a7-8bfa-d05499a29234", "indicator--1b15faad-48e2-4992-9f4c-8f7ed6383807", "indicator--a4bc23d9-fe11-4311-98ed-63903155ecb1", "indicator--7d3a707e-2e97-4a25-9d49-55a2d7ede17f", "indicator--6b2db0a9-2f9f-4988-ae2e-c89a9ea45ced", "indicator--8975c1b6-a8ad-4ebd-a03a-8d6622ca8f43", "indicator--fba00a76-e485-45ef-92db-f8d37754ca4d", "indicator--51d24b42-11af-4c21-a1a1-66dae2d97b6a", "indicator--93fcc9cf-c939-485b-9591-0865a118bce5", "indicator--993318c9-d3d3-4f7f-93ee-43898fb1ee82", "indicator--7929827b-5afc-4f72-ab80-63a3eec8edc5", "indicator--e152f3be-ac40-4417-8a94-f54c0b3d79db", "indicator--756bd051-0bc7-41fb-8004-da60700c066b", "indicator--16ca25b4-c0c2-4c46-9ad4-a088e225444e", "indicator--65606c64-a78a-4970-9e9e-f11711d45a1a", "indicator--de1494dd-b3bd-40b3-be6f-d84ff5978881", "indicator--cbdc934d-39d7-4748-92e1-da0b5c17d373", "indicator--e080fd6f-a46c-46b1-99ca-f15b238e872c", "indicator--ac29d6d4-6d12-4db1-ac98-d2f18ca42038", "indicator--13997a7d-ff27-4520-84cd-4ace52ab43b0", "indicator--fac2c00b-f9c2-4430-82d7-c2f1852d7013", "indicator--da91210f-5c57-4be4-b09d-33b5ac534a34", "indicator--2c87c71e-7d55-46f8-bfa5-4759ecc2d468", "indicator--ed94d125-ff92-4565-831b-8feee1c6260f", "indicator--c1745b34-54af-48fd-97ea-60318cb43fb9", "indicator--9a21d81a-ec18-497c-8d8c-3b435f457e46", "indicator--7f72ab58-025e-4229-a0b6-4c75984d0564", "indicator--456f7cbc-10ac-4686-9c9f-2e5063c8bf48", "indicator--fe3b6d0f-0353-46be-8335-c5a973f03626", "indicator--e43e2a6d-f4cc-4dd4-926a-a538f5fd96bb", "indicator--dda8fa5c-ffd0-45d8-ba74-d0e7a4f1e2e9", "indicator--b6a6515b-ecdf-4e67-91d4-a14a51576777", "indicator--5caf3343-d91c-4f9c-a814-89bd9cfcf6bf", "indicator--2f3aa846-45f5-4059-b7c1-31bea451753a", "indicator--306fcd06-35df-48aa-ba2a-a3f58363114a", "indicator--f45882da-c8d5-4fd0-8ec9-a96cb258a743", "indicator--7a52a953-d113-4091-883e-13b2e2de4805", "indicator--76a9991b-a6ad-476a-bf54-73f38da0da1f", "indicator--18b8e81b-6473-419a-af25-ec78bc9ab17c", "indicator--9cc87834-dd50-4e04-99b9-0c1be285b3c6", "indicator--37d8a384-61d1-4036-ace9-02b6c9c070a2", "indicator--6d88a1de-aae7-4862-8643-0eb83373c4b9", "indicator--d7355d4c-b971-4375-99e2-9b6a672b7151", "indicator--de838f6f-f16d-448c-a55e-c9b7f6e33d92", "indicator--9c781d58-2812-4dd9-a6b4-17831043eeb1", "indicator--b6266ddb-9014-46ca-9487-394aaec5b48a", "indicator--e715895c-bb20-4143-9e71-de280c5fc2e1", "indicator--a1d182b7-2ac0-4895-ba81-6bf9140ef883", "indicator--ad6cbcf0-3b8d-46ce-901d-552c72213535", "indicator--5791d8cd-710d-412c-bfec-0d55fb4e3d53", "indicator--597a370a-6e6f-43d4-ad0a-7e7cfa55937c", "indicator--c32e526c-0cd9-4cae-830e-520e48dd240e", "indicator--42ba8ec0-bbe6-4e2c-83a5-47279250494e", "indicator--0a9be0c5-3b33-4eb2-90b7-00d4a749e689", "indicator--cfa21b6b-1bba-4fb6-8c2a-273c5c2decc6", "indicator--a8b66359-b0a4-4b86-bfe1-8502384c12d0", "indicator--34ac427e-43b4-4c62-8c87-936b2b8ce044", "indicator--732f7083-edbb-4107-866f-3dd89624f051", "indicator--5f717ebc-4317-462c-bd85-23f6eb2c322f", "indicator--89fbe79e-0c69-4ec3-b387-14bfa4f85b21", "indicator--b295c77b-edba-4012-bb53-cd1e04886d8d", "indicator--8b55418f-1aa4-42cd-8091-b93533c9e2d9", "indicator--3dfe38fa-0501-4d2e-9cf7-53656307f10f", "indicator--79fe1804-bd71-460b-8d32-3422e2d55d53", "indicator--dbef3050-2f2b-4532-8caa-98f823a87585", "indicator--1ff26524-fddc-4a9e-a9c4-befbe42c46c4", "indicator--0c544b8e-3963-41fb-9342-6c6fa6ead8b0", "indicator--9dc0d47b-719c-475b-88ee-b9aa058bff24", "indicator--183c0d16-15b7-4ec1-b032-7ffdddb8302e", "indicator--5ebcd65d-1c3d-4f98-9dfa-51c8cacd7b16", "indicator--d9b11a37-c3ea-462b-b098-623b073a0fc3", "indicator--fe643761-8dfa-47f3-bacd-ec178b446256", "indicator--9198ad82-8cd1-483e-a930-12fc9353ff84", "indicator--cc20fa0a-2c3e-42a5-be90-5fdf0a186527", "indicator--b7f4b808-bb0c-4149-acc9-64818259eaa9", "indicator--e68f82ce-9a39-4515-b4da-61dbfbb963aa", "indicator--9f9051f9-3a5c-4394-9b5e-e36c1ac692d3", "indicator--97fef12e-18e6-47c9-9a02-33520e653b06", "indicator--971f25c9-dc22-458c-bfdb-ddd66bc564ac", "indicator--01f4045d-7a49-4a12-ad00-f26849b8f26d", "indicator--63144407-9f89-4286-b43d-b48ca407105e", "indicator--e59e7a69-33de-4ab3-966c-197beed1dfcb", "indicator--dc9c5776-7516-49af-ae95-8d4f3931654e", "indicator--7c6e5eb4-7939-4061-9055-fe8ba804f27b", "indicator--1dfc3676-ec17-4b29-b44b-3392146d461c", "indicator--6857f63d-d7a4-4610-b729-697464dd713e", "indicator--1200a563-a26f-4118-8014-b50ccf7f4b29", "indicator--b9ff9bab-b6d7-45cc-82f8-6345d104c7b2", "indicator--0f9723a0-3112-4ddf-9ce9-f29856bf23b8", "indicator--12da1f61-8837-4afd-89fb-c7e829a67b00", "indicator--4a9c734b-41f7-4615-96b5-42bff4c3a62f", "indicator--6659e308-9795-4897-af6f-0f7497bf8289", "indicator--f425968f-6f99-49a8-a40e-ad85400b14c8", "indicator--2c214d58-eda3-49c4-8d11-a7b02a48feb0", "indicator--b37c823f-4735-43ca-b69a-01b92887a9cd", "indicator--e7dd2510-8997-4446-a852-881cb2bfc0f7", "indicator--99cf0880-e892-4add-b037-e13b1cd31b6f", "indicator--cbd58190-66da-4945-992e-709b55406d18", "indicator--fc9dd5d9-daa3-4769-9b8b-a69ac7fa40fc", "indicator--03dd29a1-f762-4af1-8c23-36f87fb02a4b", "indicator--3f92c58b-f52a-4122-972b-59b656862e13", "indicator--aa7f5aa8-2534-4686-8c4e-0532715955bd", "indicator--db45d7a7-0582-4368-abcb-d13568313c72", "indicator--635294a9-5750-45db-bb5c-6937baaa8088", "indicator--834cf8f4-e2c0-4a7a-9367-fcf46662af50", "indicator--b8e51045-d357-4d0b-ac63-f2937a290e18", "indicator--8d748989-7bcc-4e54-9d0c-88c2407920d2", "indicator--6cd6fe17-3db0-47f4-92f4-396777dce732", "indicator--088d2cb7-2352-40cc-8868-b947d8a9225b", "indicator--f7e0d3d2-d16d-478f-bd4d-e0923baab7e4", "indicator--c63c2720-a36f-44f3-8350-f656a88471fc", "indicator--5253cb6d-1460-4b4d-a509-1cf1a18bccab", "indicator--63a5676e-09d8-40f1-8904-b69c139159ed", "indicator--d525956d-1388-4255-bbfa-bc601bdbfe8b", "indicator--b72086b4-da1a-406f-939a-903a4952020e", "indicator--0dec9af7-9bc3-4b38-aee0-91ba2976735f", "indicator--825d8f01-ff81-461f-858f-6a5e12636655", "indicator--a855a6ba-9f2c-4a13-812e-8a9a89f30158", "indicator--1d0e32ba-b987-4176-a599-f14e6851a836", "indicator--d171b08a-1dbb-407f-bb76-9f7d99d3ebbd", "indicator--aa33e19a-49e2-4db5-b7dd-bf92bf9d5095", "indicator--9bed4be4-16fa-42ca-9b8d-4cec9269ebee", "indicator--9cc3f0f8-7890-4722-9d73-8d96345749bc", "indicator--f9227fa4-09d1-415d-b6d5-2ef67539e90a", "indicator--594a02f3-5402-4d3b-83b7-873c7679b545", "indicator--90ac1d4f-3aa1-4568-aa46-5125cb0627f8", "indicator--72a587e6-acef-42a2-bad2-fe1d8c64c058", "indicator--ff14e7dc-20da-4ea0-a95b-5f5f4e0b2fb7", "indicator--6622ac38-d90d-4672-b7da-20c7d04ad2db", "indicator--09af7049-cdac-42e8-b884-2d1fabfd502f", "indicator--b72176c0-2d4c-4f6a-894b-dcf273d9213b", "indicator--c39d7d10-9c71-45a0-ba80-26a7bb62f78e", "indicator--9939f2e4-a542-46d5-aa51-5a65ddcef604", "indicator--84f94eaa-c9c7-4714-8aca-beb1884e6b1d", "indicator--9b614d44-3231-48cc-94a1-88afa84c7c66", "indicator--f2f602d0-c320-44ce-9b6c-1b70df47f456", "indicator--4aadc236-01bf-4814-8336-28904b606b34", "indicator--7ee8748c-5ad7-4cd9-8a66-af7e70f91bd4", "indicator--3b6921fa-7c15-4fb6-9f58-e7174ca49842", "indicator--8c6335ce-fdf0-4cd1-b3a5-4281a5cf36cb", "indicator--d6f6276d-13fa-4c06-8565-340232c16a05", "indicator--a4919178-bac5-4659-b872-b31c5695dbd0", "indicator--280817ee-7bbd-4eb4-8ee6-dab70aea0c51", "indicator--f1786659-4ba7-4952-a529-8fa65fbf7ee3", "indicator--8576a659-38c6-4fd7-9cff-902a12fecb0a", "indicator--dfa84797-e111-4de3-90e9-8e50c3eaa8ca", "indicator--5a1e3b74-d373-4a91-977e-b72f846c3334", "indicator--f7ecf753-9199-4939-b901-593ce91d80a6", "indicator--d62f1b24-54e0-4c4c-994d-962694843d16", "indicator--f5978f11-1cac-4110-b67b-8d817a906d23", "indicator--d658e959-45f0-4ccd-b4cd-e7704358602d", "indicator--32bf612d-ffd8-4b6b-b85f-07f636962101", "indicator--404f4ef5-e098-4ae5-ad3b-00de55f8a8e9", "indicator--92e4a2b0-60be-4ba9-9847-8d46a899ce3f", "indicator--a2de4044-908d-44be-9c18-215f9b0e83c3", "indicator--65b9dfc3-4e89-48cc-8a08-d8c0172cf80c", "indicator--b598cd8a-2a1f-4fa3-b56c-1c85f60d08a5", "indicator--c76b92fe-90b5-432f-aff5-ff7ab76e2d4e", "indicator--e3af9243-ed93-4f28-a389-eab782ca07b3", "indicator--56571a2d-e37f-4085-b0c2-2cc25f97fca0", "indicator--d31c30bc-7fc4-4a53-a771-c55be17ea345", "indicator--659a243f-f95e-493a-9c1d-6884ff3afd19", "indicator--2ae4f1db-6954-4174-a1f5-7caea708f00d", "indicator--52da7d5b-ea96-42e7-97fc-0e306c54074f", "indicator--928f5152-43c1-45c4-a336-f5dd087967e2", "indicator--41dca21b-35b5-4598-b570-029397665247", "indicator--7b399d72-7cf1-433d-a55e-4b459ae63244", "indicator--55b68890-d142-4eef-af69-07d44a636409", "indicator--2b9c3bbd-4455-4e4f-8edf-08cf9bb85999", "indicator--04e12c91-6df1-4810-990f-2f8e36338313", "indicator--d14eedb8-786b-4115-8616-ccf9a12cdc92", "indicator--5b378a38-f5cf-4337-aeff-2a24bb20db05", "indicator--7b7d9472-fe9f-400e-88f2-f6c5c830ca92", "indicator--a4f26bf0-97c7-4916-9480-1f4f992784e3", "indicator--a3dafca6-5136-4059-947a-8a293af484e1", "indicator--dd528d38-ae5e-4c57-aa26-d1409f04612d", "indicator--3dbc7efe-4f6b-4c70-9d34-5517a49db15d", "indicator--f77eaf91-05be-4843-b2ae-e770c779bd15", "indicator--10609045-9843-42e7-849f-101594331f75", "indicator--a29285e0-190b-4245-b9f0-d81f0d4fd3bd", "indicator--100140f0-8955-4904-87f7-fba031bf508d", "indicator--2e1b76ed-9767-4223-b4fe-c54958838a79", "indicator--5b2403ae-db84-48ca-9086-15ce31fbb6d7", "indicator--6c68f36b-c73b-4ef5-b332-103f98089e4a", "indicator--c49fd245-55cd-4aba-b48d-b32d1b3559af", "indicator--b9522bda-f0b7-4667-b4fe-3c8443b38cd5", "indicator--d2f8610f-f22f-4718-848c-c81159785572", "indicator--eb1f60d4-f37f-4a62-883f-a21212ebd0a5", "indicator--e994ff1c-4c48-48ff-b56f-e3568c73d470", "indicator--eb864ee9-2151-4d2a-9708-89c0d6f32b04", "indicator--adbb5ef9-250b-46b5-9ca8-092b90db3d37", "indicator--0077cc90-7784-4587-bdfa-81ec29b20691", "indicator--80111074-c760-4936-8793-ee010ff55694", "indicator--9bf527d9-e7fe-41ed-8850-81d89a2753fa", "indicator--1abe53e5-0b34-4ec5-aefe-de4e6b0bbc4c", "indicator--7a68b6ff-643a-4b2f-b513-dbb4fccdc428", "indicator--648961d2-fb5b-4525-a235-2057c45bc525", "indicator--f4ab9346-acf4-42e7-ab81-7b9ca0511712", "indicator--7029ea6d-b766-4cb9-a2d6-b22c59eaf2da", "indicator--2098270a-5379-4e27-8b76-de80e3b7a9ba", "indicator--d49aab07-c14e-4bd1-9eb0-3ff9e8301055", "indicator--10c57d0f-6d45-4eff-a524-a2079bc33f3c", "indicator--e5308e57-3d0b-4e61-a53d-90bce35ef82d", "indicator--08480835-abb6-42c5-ac85-64ea5f9b017b", "indicator--54d7e604-8c21-4abb-83b5-3622abb2dad2", "indicator--7a3e6b9c-045f-4c68-a4fa-9efa4b45df51", "indicator--86287d94-e96a-46e4-84c4-647515c4e2ce", "indicator--b5444d89-84b5-402b-8c45-eb981db5cff0", "indicator--e5a5026e-fcd2-48c6-b09b-bb1a340159f2", "indicator--1941201d-0218-4d03-a796-df49e3160e07", "indicator--cda343bd-8ac7-4f6d-82bf-3c4190c90a29", "indicator--cd461fda-0666-4265-9ae9-fc036c4f4a72", "indicator--bbdd474d-2c91-448a-9f9f-0a76ae1a3fbd", "indicator--ef1d3307-8fa8-492d-88b3-3dc8d84f68db", "indicator--f69d2448-b664-485f-acc5-9b908dcad878", "indicator--2f3963e0-d3f9-408e-abd0-b75df8201ed4", "indicator--39b5a317-457e-4d8f-a0b9-a12b4b57c7c0", "indicator--f0e0a5b0-1db4-4beb-8e21-6af9f0feb7b8", "indicator--4c24068e-8c43-426b-a3a4-75f46e52ce87", "indicator--646e0081-b4fd-4b44-a365-013fa3966fc3", "indicator--8f0c4d31-4712-4a45-8bdf-0d862ed1a0bd", "indicator--97566421-a8eb-438c-8677-8ec9622d5460", "indicator--22bbab97-20a7-4fe8-840d-e9b8c86380bc", "indicator--81d6a3b7-44b1-4e9a-aca7-a048226e9a0b", "indicator--cae4c0cf-bf6b-46a6-8a47-e7551cb617ff", "indicator--fcc4c9ee-c71e-45ea-9be6-c17ea84cf1f5", "indicator--9aebd57f-d914-43f4-9272-cd0019aa54da", "indicator--feadaae1-71fe-4758-b3b6-e9f8b392a96a", "indicator--cfd0d638-d25c-4c95-b65b-691fb04c2cf3", "indicator--5fb67a31-2329-4acf-895a-8b97d2b1826a", "indicator--dd93b6a5-0254-4a71-8244-9e50ad4efa9a", "indicator--f7b4072c-c1bb-4515-9a38-a32d6d553b29", "indicator--f3dc69f6-c241-4816-99fc-74911d7e615b", "indicator--b0b5d6ef-3e9a-4581-879b-3b299d40cac3", "indicator--a2dc4b0d-e145-4a3f-aeb5-e771bd1bccaf", "indicator--532edc3a-6f0f-40a9-8ef6-aefb6bd2b6a4", "indicator--ac1426d2-2ee9-4222-b2fe-e32eb7b2af02", "indicator--ee9f449f-ef05-430b-8c20-9645186db603", "indicator--d93e74ef-79ef-4f3c-9cf6-e7dd43b4bdf9", "indicator--bcd34a08-0bfb-424c-87b9-d5238347e47f", "indicator--0b0445bb-1f51-4900-9caa-723e8e5c371f", "indicator--5b6ab221-c84d-4fc3-8e88-38b8abe09fdd", "indicator--9134f673-dcec-4668-b051-8d0e9ff0fdc8", "indicator--dfc2888a-b69b-4dd4-a323-c81bac58665f", "indicator--c7db71a6-c9ae-45c6-b4c9-04230c7600a5", "indicator--fd340ecf-e09a-4cf5-8545-0a0a0bead24b", "indicator--377da00c-bda9-4268-b18a-640d139ba3a4", "indicator--2d1b831b-c1b4-444a-bed6-a833da2e7869", "indicator--4ca5ebb5-9e13-4eb6-8635-233562591a31", "indicator--f5abfc09-423f-4b72-a0c0-edfc0405456a", "indicator--eb36dcf2-1770-4d4c-b267-08bf12333b23", "indicator--08f401e3-2424-48e4-96eb-8dbd28dfdce8", "indicator--694c6900-c8c7-4265-9e14-456620849502", "indicator--5b0a2aeb-bf24-4a34-bd9b-4afd224552c9", "indicator--f20c33b8-e6d9-4d74-b9f4-f27ff8565169", "indicator--c7298a47-0baa-4b81-8404-d485eedd8f3c", "indicator--5d2287d6-c2fa-4d88-88e1-a380855253e6", "indicator--16101129-42dc-4823-a069-6836158c7d76", "indicator--db6de9bc-f92f-4ea3-82fc-d96d01d550ab", "indicator--c53810b3-2186-47a0-89f1-14cd034d0db5", "indicator--b428c787-12d9-4e92-9e30-44229910b55e", "indicator--34a214ee-e3f5-4edf-bae2-c7e9f69fe757", "indicator--9bd5c86e-a52d-4f81-b7dd-821a00ada4a2", "indicator--1a006ec2-3ac0-431c-97c4-d77a7cce00b3", "indicator--a8b14086-2dca-4104-b862-44fd9b16519b", "indicator--582e9aa5-76e9-4dab-a7e0-f8575d2cdba5", "indicator--9904125c-78e9-41df-bb48-1d40f266f007", "indicator--395b8fc5-efab-4899-a2c9-d31f4765285f", "indicator--0a172ba6-5e89-437e-b7cb-8bcd4666f6fa", "indicator--7314a215-1193-4a41-95fb-02cdd740fbb4", "indicator--c4045556-1356-4a83-b4c9-f0210a0f2276", "indicator--bc395070-5000-406a-9791-20a43e740ea7", "indicator--f51dd282-b9ce-4e00-b04e-0fb199b74384", "indicator--a8375a7c-15b4-4870-84b0-d9125cfac3b9", "indicator--7069d490-04d8-4da9-a239-45202401a81d", "indicator--ae66328c-90ba-49f5-bf9f-e4a0860fcc73", "indicator--45cff2cf-d118-4592-8066-7c5cb8494a3c", "indicator--5aa4c052-e070-4c09-af40-bebd5fd3d356", "indicator--45a4030a-9e21-45e4-ab52-1b15d5cd8579", "indicator--8383c3cd-b148-4898-aba9-a6f072520ae4", "indicator--7cd1b0df-2e1b-475c-9a24-ceae480b526d", "indicator--baf2392e-3116-426f-8c72-ec7c437de789", "indicator--7dacbee5-aa87-4864-b6b0-efaf0658f94e", "indicator--a064f243-faf2-48ff-bf97-595b83bf3ca5", "indicator--a79d7c8c-b804-42b5-9cb0-540a463799ee", "indicator--574630a2-05a4-4227-9ed7-937708fd9024", "indicator--ed3ec8c7-044f-46b7-9fcc-02687209e1b6", "indicator--be8ec232-0b97-41c4-8879-5b1bb5161170", "indicator--ed6f96a5-fe47-4726-8c38-a9c2d9d96c32", "indicator--a7ad6432-b060-46af-82f5-47ee6dfe33de", "indicator--9de1fe5d-ed2c-4ecd-b070-92278207a6ab", "indicator--2620fc13-7f30-4e11-a419-8f776767146f", "indicator--7747acc0-00d4-4ba3-b492-fef58b37bcff", "indicator--58689b70-ce73-4ba5-ad97-fa3ef552b24a", "indicator--6b7bd337-873b-4b2d-a088-84ff412991f9", "indicator--2f5c4027-4888-4c2b-ab78-81d50dea203a", "indicator--95e2ff5d-443d-4959-94f7-80fbaf0b1732", "indicator--d97d70ea-0733-4074-92ab-ad7cca198102", "indicator--694b4d37-d9f2-4dc3-b456-088d09247046", "indicator--8d7f9de4-108c-4d22-9c60-f2b35a35b0ee", "indicator--16b24a4d-dc50-4058-abab-e0e24a9680f6", "indicator--d967953d-5578-423d-adce-4c5257eeb425", "indicator--f5278fb8-ae87-48ea-a4fd-cb8cbfcab04f", "indicator--2c9086df-e182-4e3a-b60f-e34c42ddc488", "indicator--002f5bef-b3f3-43b0-b442-3d2753c10c41", "indicator--e58acbe6-4641-4d48-8728-3f6cabc0803f", "indicator--1981291a-c724-4d95-8c1a-03e69c99972b", "indicator--cf057cbf-68e3-417a-b437-6a15d1cd0b21", "indicator--0cf6fb06-9838-42b5-bd16-5a203bed2e79", "indicator--94b1b559-8436-4422-b375-08736e6821fd", "indicator--eea71e55-27cf-4383-be56-814d40610637", "indicator--bd612343-3304-4683-8168-1c1ed794426c", "indicator--4c7e37ca-2c30-40c8-aeaf-ffa2e0f40443", "indicator--9895f61f-666a-475c-b12f-e4924d006d7e", "indicator--5864f71d-f2db-4900-a4c0-d2dd991bf057", "indicator--baa4c179-29ae-482b-b74b-70cad0d7f0be", "indicator--e3949864-10d3-42df-a4df-283e3efc04cd", "indicator--541e296f-1b04-4e53-8859-0989ce57ad92", "indicator--3ba58813-56a9-4871-bd95-fd4d90e718c9", "indicator--45dc2600-bdbc-4344-bc26-029737441c3b", "indicator--cf9d7788-95f5-4c36-bcb5-0fade41dda74", "indicator--5ee81544-b087-48fe-9ca3-5a00b95000b5", "indicator--16a12a3d-7064-4ea1-ba49-7e36acbd36d1", "indicator--bc8d94ab-eeb9-467a-ac6f-7b19977e5404", "indicator--929e70d9-cf06-4fec-8eac-c2dfb188344e", "indicator--d2d80262-20c1-4ca2-b0cb-5cd859d8a4c7", "indicator--3ea96b4b-a9b9-458f-b2fd-bf64e3fecff5", "indicator--01ebf6b9-8fe2-4324-9e95-5c2bbf13716f", "indicator--6068b3c4-a9b8-4d6e-9d4a-29d3cebb451f", "indicator--300ef2db-50c9-4ada-844f-d3870eefbae9", "indicator--5179c77b-5497-4a39-8e6c-4567c44c8f4c", "indicator--f7169b15-281f-4bfd-ab4f-85ff58c93c34", "indicator--e40c3bbb-9e3d-4d28-a3ce-01e708945a5e", "indicator--2d810576-7f05-4fe7-ad75-e66949add4d8", "indicator--08084016-e7d1-4b4c-8a56-e1580ce7a147", "indicator--adde6c6e-a32b-438e-b68f-c90913b562c7", "indicator--f53a761e-aa0c-4de9-9a5e-4fe4cf4ea429", "indicator--9725f04d-a1e9-451a-939d-d68f33578409", "indicator--ce77d9ab-79bf-4fe5-a356-43f673b445cd", "indicator--96720798-2fa5-4dd2-a04b-7a0eecb61a88", "indicator--c6424311-4007-4661-a730-84f48fac2149", "indicator--143db8b2-cde1-4dbc-a568-96ea4a7d03ab", "indicator--fb1fe4ea-1390-4e64-800f-6fe9b3e6334b", "indicator--081b78d9-9b5e-4043-8794-15e634478c51", "indicator--440a5589-45ca-434e-b8ea-42d3890eaab0", "indicator--79f48d27-2f59-4d24-bc97-a86b590d3313", "indicator--2d3e8497-5ae6-4a83-86a6-acd7d0fb6ec8", "indicator--28d0c501-001a-47ff-94eb-1dc741521941", "indicator--488ffbfe-f796-4b59-9a55-0d15d44e0b23", "indicator--4f675c4f-3a61-4947-b3be-e1ee672c5caa", "indicator--344085c3-6e7d-4994-b104-dc95f3a229ae", "indicator--78f524c1-ce6f-45c4-aaa3-b161f3122114", "indicator--165dea4a-5c17-4716-9984-2c82e924f883", "indicator--664512fd-a953-456d-9642-a1c61eca8ce8", "indicator--434a9789-2943-4332-b539-2d0fc3db3c43", "indicator--12954ae6-31a7-48c1-940b-e922083daed8", "indicator--6fba4186-2458-4254-8431-487e1937d82c", "indicator--e5e64653-8b10-42a2-b7d2-fc5498c362f6", "indicator--30f203f5-6b4a-4f9d-8233-0c9cd95c849e", "indicator--afb3dd2b-40ba-4bdd-9c44-90651ea89930", "indicator--eb0c07ef-0310-45ba-b0a3-0daf7d8a6904", "indicator--5caaa55c-e7ff-4971-92eb-b97a6bf797db", "indicator--34a6ee7d-f9e6-4916-af77-699bf534769b", "indicator--cd7bda57-c011-4e23-b11a-361120f3932d", "indicator--b04f6c42-ba70-461f-ae5d-d6e52851b4b2", "indicator--a258b6c0-3ced-4504-b757-8a9f839718a7", "indicator--75d46559-4c0a-4661-8354-8e5c7ace06b6", "indicator--64e822de-b293-454d-8fae-a352c04f1fbd", "indicator--0be5a7f4-b09f-4e6a-a9ab-0c9f8e9f82ec", "indicator--9f44c7d5-a930-42c6-9bff-7b29dac81e18", "indicator--6eb250da-1a3c-4a0c-b4e8-a2632362effe", "indicator--131f0eb3-05e7-4dec-8072-65615bab2f9f", "indicator--ac7b366e-86dc-4d22-aa40-bfe3e9fbbfc6", "indicator--71b5bc69-9730-4df5-afcf-1a4238f219a0", "indicator--4b4f73be-6ec1-4f58-a7a8-05f5b23c34ac", "indicator--a2c0f1cb-833a-4711-9eef-663215aed33b", "indicator--8b0d6881-9d2a-4813-a356-67589d50beb6", "indicator--42ac385b-42ac-4adb-860a-789df07f136b", "indicator--4078ae2f-97a4-4a15-bffd-e7ab99eaade2", "indicator--8e03ec53-1f2b-4437-82c3-86b4713d2e9c", "indicator--03131122-662d-4282-8742-a2d85e4daffb", "indicator--9f8e63c2-a412-4ae3-8b63-a78f60eedbdf", "indicator--c8f853a9-c488-450c-ab82-7187827ba507", "indicator--8a9d84e6-b1b1-4a15-a86e-17cb417eb506", "indicator--b947bb57-315c-4bc1-a5c7-03383af2839f", "indicator--deeb6a4b-d5c2-4114-8fbe-96585de34db8", "indicator--c287df2d-e7c5-4da3-b79e-a63862cb6df4", "indicator--f5f25caa-0481-404c-ba40-912c0d145779", "indicator--291a2375-e860-4a8e-8509-8ac10dbabb90", "indicator--9ed2e57a-08ad-4828-b526-c7a24d532345", "indicator--db8638b5-914d-4df1-b52d-787acf376490", "indicator--23caf80f-c65a-42a7-a79d-65cdf2a0eb44", "indicator--bd282269-06bb-46cd-8598-76040e2890a8", "indicator--633e1bdb-8a5e-4179-a952-3f2328798b11", "indicator--54c18194-9db0-4b5b-ac2c-7ddfe7c9a656", "indicator--e2795851-1177-4428-ac5c-66f585f52ef8", "indicator--c373eeed-76ba-4c49-99a7-0c7cd372a94e", "indicator--bb61c5f5-822c-47d3-b63a-6b5dfe5bbbea", "indicator--a8be783f-1891-45d0-8bbf-3554b5e87e48", "indicator--c02966e7-5605-4d84-b105-f5882c293ab6", "indicator--f4e42a5c-6504-49d7-aa6c-1e77ab9724b4", "indicator--23e24a36-865c-43b1-afa0-bf5735cfe903", "indicator--c2da476d-aa70-4c18-bc34-792a4e036f39", "indicator--b7f35b46-75df-4b59-b15d-bfa9509170dd", "indicator--3b1300d4-9d5a-491f-a41b-b834193b17d7", "indicator--a6aab4ba-18ff-4647-8b6b-8486c9310827", "indicator--c2e0b39e-0919-4bdb-bd3f-495a6308455d", "indicator--286050db-8f81-4e40-87bf-9f3bb336f0ae", "indicator--2364ade5-457e-4252-95cf-b8d5208b28e1", "indicator--fc4ce610-3f3d-42ef-89c4-ce5b73cb085a", "indicator--e5df8ff3-5926-42f0-a5c2-ec65d53c49a2", "indicator--59f52c72-19b7-480b-8f74-cbbe2d873ca3", "indicator--3ef7767b-e587-47c9-aca2-bcc45fb639e5", "indicator--01db5e39-8c6c-4cdd-9445-9bed4c9f64e4", "indicator--43db5462-797b-474a-a4c2-430758c66eea", "indicator--a37e018a-904e-4515-a68d-5d90f708989c", "indicator--783e691d-07fb-4aa2-a810-3437785d346e", "indicator--50c871c3-113f-4e23-952f-ffbcdb55f8ce", "indicator--3b9ed5e7-9c2f-4ee4-81cb-dfff89e09636", "indicator--48d0c332-1282-4c3a-bc85-8a656b35654e", "indicator--4db02161-263a-48ba-9b35-2f302ef7c0be", "indicator--d501f8f9-0c95-495d-b5dd-800a4c6e0b82", "indicator--4cc425cb-5ffd-449a-966c-a0c7f478cb0b", "indicator--55811809-470c-4f4c-b95f-e1ce40d39c1d", "indicator--44432c07-05ed-4b5e-a8df-c2082fddf3b3", "indicator--8843141a-0ec3-4e29-b58e-2518e6d4b145", "indicator--821fcd99-5121-4710-824f-f2eae3600b5f", "indicator--8b81cde4-d013-4799-85d3-ec6ac699e9b2", "indicator--adee30ba-bfcc-4cc9-9ff3-c7c7184f8f1b", "indicator--b1781add-160f-447d-b25e-6252d0d7ad1d", "indicator--b0cb14e0-f4ca-4322-b5ec-2bdf88aed53e", "indicator--36a30390-4449-4102-a995-00f7f0ac9dff", "indicator--53f1e39f-69db-44ad-abb7-5021810527d3", "indicator--acbd2d1f-84f3-4fcf-9ea8-5bdd5e585a2d", "indicator--c73777d7-364e-46a4-8bd8-47982b8906e6", "indicator--9b8dac47-a664-456c-a346-28230609415c", "indicator--3d733645-6751-4200-8b79-e27ae6cee469", "indicator--ce93555a-18e5-4610-a340-2543f66e9e11", "indicator--f94954b9-973c-435a-abd4-44333340b68f", "indicator--126f6ba0-9f1d-4ea3-89dc-377f5e5ff9aa", "indicator--c0790ed4-f785-4259-9904-ff410648d460", "indicator--3c68aa26-e483-4068-b8f1-788e28948c74", "indicator--65e9c2b6-9d5e-45c8-8ddc-48dfb0320b36", "indicator--7ff83c20-1902-4e16-8119-145da37ea96d", "indicator--4a80b42f-4a57-460d-a7df-20206dc83687", "indicator--22fea4f5-ed79-4cc9-badf-42e055f3c164", "indicator--69497de4-a745-4fa8-ba9e-83248c6e9d12", "indicator--f72c06f8-9e08-474c-b015-066dc445e2aa", "indicator--94fd12f1-6e24-4702-ad10-e89d9ac8d6d2", "indicator--7d2affe4-df7d-4779-ab3b-3ea44137307f", "indicator--aac94d72-6537-47d4-9466-8ed2b7a2536c", "indicator--b00d381d-665f-44ab-a56f-f158104574c1", "indicator--c81dc555-321f-412a-8a7e-e670d075ca96", "indicator--73bcc7be-008e-4c5c-8a46-14213c77d7f9", "indicator--3367096a-72a7-4664-82c4-d37a0ea8fca5", "indicator--b7409692-397e-4b05-8b50-030f63a3a1ae", "indicator--3fcfa0d6-60b2-4268-ba36-190019865114", "indicator--9157a742-7c50-48db-9ff3-549c1c2d01c7", "indicator--b79e814e-55d5-46b7-a848-3729a8c07452", "indicator--beded559-322c-4624-b633-22ac731fdd7b", "indicator--bf58f7f7-f0a2-4882-822c-bd53f3c503d7", "indicator--c57954f9-db43-4acc-8bed-8ceb17b85944", "indicator--09ea1fa2-bd89-4423-aa14-30b659dda8d8", "indicator--d34900fe-51a5-475b-8a63-df16ae3b9451", "indicator--f57866ff-4020-4d2a-89fd-f442b4c6e655", "indicator--1402b0b8-c7c6-4e1d-94d3-5e33c9b2e814", "indicator--fd6497a4-e211-4e10-8734-68b06e245870", "indicator--a9bbef1f-4757-4c97-a724-8cbc40350617", "indicator--b5721958-1f00-438a-ae39-50cf35af9326", "relationship--1957dce3-2727-4e64-8d7b-ed0e09aee77b", "indicator--cc32dbde-5c0d-4ccb-83b6-8c116086fb24", "indicator--d26a8105-e93f-4d87-9da8-9599fb389249", "indicator--c9938366-ddf7-4c1c-a4aa-795a34b0c4c4", "indicator--cf14ac71-62ed-4881-8079-74d8064411e0", "indicator--0b2f6f0a-629e-4b1d-9ef9-9d689ded1d0d", "indicator--a8d9c777-258a-402c-9b18-dd066b0468e1", "indicator--e565cce8-ac57-4460-bd89-f49470a82655", "indicator--aab4fbf9-b56b-45ee-962e-870056634250", "indicator--1f6adb05-80ed-416a-ac03-44ed872ceff9", "indicator--1bfe01ca-8879-467a-80ef-6f4053445d60", "indicator--a45609bc-c865-4bd0-8744-33987a2c47cb", "indicator--e873865e-ace7-46f1-8ce7-c01800901e1e", "indicator--86b9b7a4-3e11-478c-9666-00aea79af8d6", "indicator--b2d9c06d-ebdc-4a0a-ab42-91d08f77b4ce", "indicator--151e8de3-b778-41b3-aa7b-7d40d1703dcd", "indicator--7930970c-a2c4-4e15-9b8c-8efd3e7fbc1b", "indicator--78b82ec0-2a54-44ff-a816-e16c43d8e6b2", "indicator--e56c4571-f180-4b4d-9380-d4c124e6490a", "indicator--f3a069be-c8a6-4a8e-952d-55014f9ec773", "indicator--0083b005-ae33-4739-ac1f-b152eb9358ef", "indicator--6ab30850-dc96-4765-8f4a-5d64e2a724e6", "indicator--e152f593-8fa8-45bb-98e7-774eb2f6253d", "indicator--98e47647-d9bc-482a-b8fa-dd39e48f4589", "indicator--186dc30d-f20f-49af-9fc6-45416fb90c54", "indicator--04bcbfad-2700-48a3-83fc-6e897590fcfa", "indicator--0d48b4f9-9aa5-4dc3-bb92-da61add59e1b", "indicator--19900fe3-303f-4419-86a8-acf101af03fc", "indicator--c25bc89a-066a-484b-96fd-d8d90e7db78d", "indicator--78cf79dc-2aea-4b8b-9584-c93bdf9c2e22", "indicator--cb025e69-eb2d-4b1e-abf4-157e6ae186c5", "indicator--99ec2e94-c95b-48dc-8608-c317a88f11ef", "indicator--5e5087f0-1854-4626-906b-8490afb53e3e", "indicator--01d3b9f3-25fe-4034-9dc5-8c7c4e6dc18f", "indicator--efc03d8a-2091-4589-beeb-f699de6d5d77", "indicator--a38744fb-6e69-4768-90c0-61e473c92a7c", "indicator--2e14c7f7-add7-4668-bf13-1869c4367128", "indicator--54b83967-8947-4371-9624-b95a7b29c0c6", "indicator--0e9806cb-206f-4591-8775-f4ef14022c11", "indicator--71dbb45c-1c51-4174-9b06-bac648fdcf24", "indicator--076d7fe9-a47e-4761-a2eb-be6fad88acf5", "indicator--371c4b85-3a0e-419f-9227-23c2c3d59794", "indicator--7003ab28-cfaa-4fee-a9ea-3a3c088487ba", "indicator--10423a18-f971-4961-980e-3aae73a446e1", "indicator--16e4db48-abf9-40a8-b4a4-e9d49a0076a0", "indicator--115cfbad-4d15-4a37-b778-8dd8aeb81604", "indicator--2589203f-b9d6-4138-bbbe-48869cdc28fb", "indicator--460767d9-2447-4c12-aa42-a2f08216ec72", "indicator--8527a3cb-a09f-4024-8075-d6559f45e18d", "indicator--c22e7133-b040-44e7-9c81-cfc4dba3b074", "indicator--de5c4190-f1a5-4677-b0f7-fa351f0c7cc6", "indicator--8b2ee971-21db-4710-88e6-4b373bc24b24", "indicator--33502b0f-1dc3-4515-982e-3afb68505bac", "indicator--f76aa741-afe8-4c85-b5d6-db0e5fbadc98", "indicator--a8728a53-915a-4a99-a8a5-af36bb31999a", "indicator--b92c8337-446d-4f44-b704-4bef4ea500fd", "indicator--5f8f69b7-487d-46cb-9eba-c32f42f37bd6", "indicator--6733bf10-aaa7-4e26-ae48-70f6d6914398", "indicator--d74c9ac6-486b-4098-ba54-c86db23cd645", "indicator--20cef956-e1b8-40ac-86b3-92b43e75ee26", "indicator--451438e6-93de-49e5-bbe5-53147ee5dde7", "indicator--1c3410b1-75f5-4139-8f3e-bbb90173f32d", "indicator--95e64261-a0e1-4135-9edf-7ffa2e5fbee8", "indicator--9e096c75-19c3-4051-95b5-2aab12267e04", "indicator--99b5ca52-e9e7-487c-829e-265de3e5b7c9", "indicator--a83dae05-2aee-4be7-9edc-41b569a125eb", "indicator--01cb4b19-7bef-4d6f-8944-9302c75431b3", "indicator--4c1044ae-4610-4a68-8cc9-25c8f9081af0", "indicator--e58f4276-8aed-4dbd-8337-747379586453", "indicator--7b974829-9ff2-411f-b707-29f585455c95", "indicator--940c18c5-2dff-477e-9d71-b97b544c59b8", "indicator--9a4a9375-3aca-4e39-9c34-bf784a0f939e", "indicator--2fc2552e-849a-43ab-8904-03046a6e8877", "indicator--f5b8e6d3-b855-4720-9a16-b5ac5ea798fb", "indicator--8af20b20-8b4b-4fd3-83be-8b0e50ed4bc2", "indicator--17629c1d-a0a3-424c-8fb3-d50d82741d84", "indicator--1b0ff145-b8a5-4921-bdb7-992547a03f91", "indicator--c9590744-fabf-4a38-9e04-59729fc43f6f", "indicator--6d4acdaf-4f7f-4387-a770-df099b102e02", "indicator--d4e6bfe4-828e-46ef-bbd9-f287ab3f5628", "indicator--4da66643-b6f3-496d-b26a-79b94109b5d7", "indicator--0c9aad92-9c04-4c00-9ccc-f0203b13fae4", "indicator--885c8704-566a-4b33-a4c1-cdcdf63a8f86", "indicator--d28cc7bf-2eb3-4a2f-b81a-6aa1cf6bbeab", "indicator--7e1e65a5-d014-4bc8-9873-34d22418e52c", "indicator--89512341-2b87-4d16-b2c7-6c161c104392", "indicator--1699976e-9a01-41e9-bb1a-ae380fd8726f", "indicator--bebfb2b6-8043-45ac-bdce-7e13d696f40d", "indicator--b9f65220-66ef-431c-abd9-8960ecca6c22", "indicator--924e9656-5e15-433a-8794-839a73b2e15f", "indicator--e2816f6e-c6f4-41ec-b61c-a69166b6cc87", "indicator--18ab6bec-f349-4347-88d3-8b6efae50248", "indicator--b50c2c91-5bd4-4b83-b149-3bb9dc81ad2f", "indicator--c03c2627-a54d-475a-9b59-d91e7f78470b", "indicator--09617486-1932-4c07-ba68-7ebd0e40892a", "indicator--41b701e2-9075-4969-9e2c-92b58dbae51d", "indicator--1e761ade-71e1-4316-b549-fe9edfea2a2d", "indicator--4a09653d-b3ef-4647-9dbc-81020a34bd30", "indicator--294ed43c-91f9-4fcb-bc51-617c478e5f64", "indicator--d6345b79-3495-4e2a-9830-2e7409535799", "indicator--61ef0455-f96e-436a-83e5-5a431dcd0883", "indicator--cdee9f89-a060-472c-b28d-2b317af9c805", "indicator--83d86700-ef83-488f-a5a1-7405f3b6b6d7", "indicator--fc28627e-8e95-4535-8fe3-b8be2f36409e", "indicator--9871093e-4761-4c9f-9039-d3fd6d71099e", "indicator--163a7266-625c-4536-9963-17f4c0a78d84", "indicator--6e6454eb-0875-43bf-b8f4-5a56d3e5b63a", "indicator--05da8fd9-99ff-440a-9f31-9918ea6c12c2", "indicator--a0af8da3-6764-4cb9-9f1a-688421950e3a", "indicator--93da73bd-1b4f-46ea-81c0-29603dec073f", "indicator--9124ecf0-ed46-473f-a351-a9cd9f300091", "indicator--d8f3f438-9b98-4c7a-b97c-eef00dc8e8b5", "indicator--16d3e06b-66b2-4803-b5b3-8491acf08252", "indicator--d695667f-8efa-4742-b2c0-b804f7d1172b", "indicator--eb1b0677-8009-4137-9d75-987e59e5d57f", "indicator--4f185ed6-e89a-4d6d-908a-ebf98717aa0c", "indicator--72502d0e-1187-4e67-a628-f2e20a7540e5", "indicator--25f5510f-a0f5-42c7-96be-2c2dd79444be", "indicator--69a65bab-0245-40bb-b9bb-850d7f4b4b7b", "indicator--02d4b256-4723-4962-81f3-23bd84a63213", "indicator--d1a5005a-7b61-4509-a321-e4f192cd2d2c", "indicator--25b3a730-5061-40fb-b9e8-ffd7f6fda55a", "indicator--c2292c0b-af1a-4cda-bc74-0bf6818af3fa", "indicator--78279d44-87f0-4056-9190-4e6eaa85062b", "indicator--1ab3208c-cc5d-430c-b813-aced3af434ee", "indicator--8978e4f0-949a-4e5a-8441-aa7a61489302", "indicator--9f259c33-8829-4d91-b9da-247880c22e0b", "indicator--a76fa491-e817-4ba8-a53a-3e451a620f42", "indicator--6f01d851-0c53-4d92-8db2-5538f8f7f193", "indicator--4d97d2af-276e-46f4-8ef6-fc762ccf1e22", "indicator--2063283b-82ac-45fb-ad2b-6d836319d16d", "indicator--ac18f4ec-fb1f-42e5-8c31-07a1ea14fd79", "indicator--f1ae7220-3b6f-4b3e-be04-d70649a14859", "indicator--92929865-7685-4734-86ad-742cf0cfdff2", "indicator--0e0ad87f-6203-4eb1-9439-7542c3df9994", "indicator--ca5014b9-4084-49cd-b2db-fc3e0e2876ed", "indicator--d1d41d04-3421-4af5-bf7c-7be77e6ec26f", "indicator--0649fa07-32c6-474f-a064-df2f4a84eb60", "indicator--cfd5111f-da76-4e2b-8cbb-58ebddfe4043", "indicator--aca8741a-45f4-415f-a43f-fad641e21e31", "indicator--98f6586e-9af2-44f7-9ff0-9b8a178ed586", "indicator--6a436067-670c-443c-89cf-d459117e281e", "indicator--79462a88-60cb-4478-8bb1-0e264ae866f9", "indicator--fbeeda8b-5c8f-430f-8cd3-8fdbeb280e08", "indicator--963b18eb-679d-43ff-ad44-5c1c788cd226", "indicator--5bdaf8ed-597d-43f4-b09f-524d00cff91f", "indicator--33aa69df-9185-4d2d-9490-4b78d8d0ee65", "indicator--d7a15f2f-73ab-434e-9779-291820118292", "indicator--4d3a8d39-b8fb-4576-a812-db63af70bf26", "indicator--9bf33f71-386a-4fb4-a6a6-9b38dbff60a9", "indicator--335fbd8d-9be9-4b49-9102-a6646de0fa1a", "indicator--88d8aa98-e0e8-457b-82b3-0c21e9354ebb", "indicator--d99dc122-f7a0-4475-bcf9-291f8b958013", "indicator--ba91c0bc-b6d7-4b7a-a594-04f890aacd83", "indicator--2941240d-acd9-49d6-933a-b0cec3774596", "indicator--84497851-1506-445f-939d-f9599bc80474", "indicator--af48a528-b07e-413e-be59-86cdd7242432", "indicator--159cc11a-ea54-4616-9c33-f53f8503ad45", "indicator--a044b823-89b4-4553-b298-246a9e72aee2", "indicator--a6e5af11-ad19-4eff-a8fa-deb15938342e", "indicator--1d102270-8a05-493e-b495-216f43eb9e29", "indicator--5fe2fe18-93a1-4a6b-b10c-76ee6bea6969", "indicator--a888418a-bc54-4c1b-9ff2-2c4cd0e1a17a", "indicator--6a3e7a9a-2e91-4deb-a609-ece7929a8fb2", "indicator--557ea6a2-507d-440c-bf72-cae7d66ce28d", "indicator--bd644e10-e8d0-45ea-9bb7-9edab13b29be", "indicator--1009fac2-bd82-4891-82ff-8f690bdcdf6d", "indicator--13ec1a8e-09e7-4bf1-a551-278fa2182eb8", "indicator--d41cf9e6-5557-4d60-9522-c9b9e3b61d3c", "indicator--7ae8e654-fa41-41fa-952c-fd80cd21911b", "indicator--b64b75c3-ae73-4ee5-bd5a-10b821b2ba16", "indicator--a779e9a2-c1aa-4761-9c0e-be10f33bb45d", "indicator--07e94522-b20d-4db0-9054-a7673319b4b0", "indicator--a1b52c7b-7685-425c-9aef-a0ae5fd51265", "indicator--16a92da6-cf7b-47ff-9ec8-fe77e570cd82", "indicator--87ba5f8a-6739-43a2-9ab6-97b842ad8067", "indicator--81a0b0cd-47ef-40d1-8e75-b43ccb8cd96c", "indicator--ca27093c-179a-492b-af79-3c2b7da7007e", "indicator--18d17617-b04e-4297-82a5-d89184451463", "indicator--9f101143-7905-47f4-b503-e9cee28707f7", "indicator--6c025d33-87ab-4da9-990f-e89c6d3d0928", "indicator--dd7798f7-fcc7-4875-ade6-9edbc7341daa", "indicator--f0e8c90a-e475-4b44-8a51-53029a8f9cb8", "indicator--2730948a-3b59-4af0-91c0-d877dd564b58", "indicator--9bbfd394-1889-4d2c-a40b-4d64a9b9d00b", "indicator--18e4b756-3a53-4127-a29c-b83b27707336", "indicator--e2a3515a-2ae6-4c75-8af8-cb36dc6b462b", "indicator--9c2fa6d0-8885-4fab-85ef-5c6a94a4430a", "indicator--b0c0df8b-dea7-42b0-be09-e04cd6fb2465", "indicator--ae972c17-2d6c-4fd9-a786-fb536afff2bb", "indicator--19b44160-dd7c-4cfb-a72c-0db23cdb17cd", "indicator--f3eefdff-9cb8-4671-91b0-47cd9faeacbd", "indicator--6d3e0af7-6c3f-4990-aa52-1f590a2c88b1", "indicator--8506a7a3-67df-472b-a223-2f6302394edc", "indicator--a795cb5d-0d08-4659-9774-5a14f41bc6ae", "indicator--185baf43-8c7f-478b-a6cd-69621ab85ac3", "indicator--e5aa2f6b-b88a-4161-8776-bbcb3affef82", "indicator--7809e0cb-33c0-414c-beb8-fc44aa5d4fbb", "indicator--c25e639b-4284-4e9c-be99-562dfd7d93af", "indicator--dd62ab09-e740-4b2c-a138-fc7b29fbce10", "indicator--76ca9018-e9d1-4c11-8528-fb6662bc9ba2", "indicator--32733c11-f5c8-497f-bc80-40839853ac5c", "indicator--183e7569-7a9e-4287-91c1-9b3f1ace5f8b", "indicator--0a3b60c7-077f-4a09-b707-cbd6f52ae0ca", "indicator--b8fdc8c4-87ea-4803-9ae7-5aadda9ef394", "indicator--b1507c6f-5043-4faf-951b-b5568f3765d5", "indicator--8a36bef6-8be5-4d7b-b429-c45fe2a9f048", "indicator--6cb40e20-d09d-4194-b605-8755856e32f2", "indicator--3b1663d5-ce89-4f38-879b-218f633d2dc9", "indicator--4658166e-b775-4fc8-a61a-f6db528c2152", "indicator--6f5d99c1-5ef9-4320-8927-affc4045ce21", "indicator--d151fd98-2490-40b0-9019-65017d25d2f5", "indicator--efeecaf2-ab89-49fb-a9ab-ec152b81fe02", "indicator--bd499531-3e88-43a1-b7b7-e7f3d074185f", "indicator--dd71bd3e-03a2-4a06-863d-b657d30bbf56", "indicator--c3f87bda-36ca-4b44-9f5d-3730fc5513ea", "indicator--0e740878-f837-46a3-9976-e764d5342212", "indicator--28adc29b-322a-4d68-8ce1-4abe219cfeb5", "indicator--bf35f60a-8477-43dd-950e-71a084e380fc", "indicator--294c4899-2763-4e8f-a686-043d9cead325", "indicator--f81c947a-79ba-4b21-b41f-2871a4b9af95", "indicator--4e062626-1372-49d9-8c51-4a5e1342b57a", "indicator--dd4b5781-502c-453f-93a1-6e8eed05ff83", "indicator--734f74bd-4336-42df-8403-2b3b7942e7fa", "indicator--e8780f15-c2c9-4489-88a7-7aaf78cc9e34", "indicator--4ad6488d-a61e-4e11-a384-1b3fc5fcfc12", "indicator--91024566-ce9e-4206-8450-7ef93965d903", "indicator--59130999-86c2-4f32-b251-7b64211b9a1a", "indicator--98a823c4-c5d1-4c28-a1f1-7c07b40b81f1", "indicator--b16f9de7-eb4f-4175-832f-549f8101bddb", "indicator--ea913b1b-e896-45eb-b4b6-341d166ab7ad", "indicator--1acf80ab-b5f1-4bce-844f-3e8a099060a1", "indicator--0facaf05-135b-4e84-8ee7-71c772a2f373", "indicator--56ae6bee-583e-4eee-86d3-466fd9ee6d73", "indicator--ff844042-f478-420f-ae0e-496e1b0951b8", "indicator--b8e525ea-dfb8-4f5e-9abe-b708594e9bd3", "indicator--14452aed-583e-448a-bf93-72f6e107e6f6", "indicator--138e6e2f-1170-4e6d-98b6-02368169ab41", "indicator--121a29c2-8fcf-4abf-8d9b-0426903e3c93", "indicator--55d1e3bc-0794-4a0e-bb93-df735cce6829", "indicator--1bea15b1-6e26-4d83-9205-42d25907adc1", "indicator--b56d257f-182f-4a21-be2a-0820c8f4c9b4", "indicator--76e59225-01e4-42ae-8c9a-d46aa7948367", "indicator--532e2a99-27b0-48aa-afa3-2f7bc0af36bf", "indicator--77116f55-d9bb-4757-a275-d3ed08615216", "indicator--5e71120d-c70e-44ad-9a92-2b91c9ba211d", "indicator--b72a9fbd-015c-445f-bda1-9103616e4cce", "indicator--9bba1005-8335-4cd4-8cec-f7a242cdc852", "indicator--ad686d9c-3bc6-40f6-8d0e-6c563108dfe4", "indicator--c33a357d-7736-43d6-aa2a-891a1c383ea9", "indicator--54448ba0-0d48-4648-a3f1-c77e826d8dac", "indicator--ca29cd56-ed66-4c51-b3db-0db5b37e0dab", "indicator--15f82547-2789-4621-a466-a6f219b06a03", "indicator--165b5b75-715b-46ee-a5ad-6da204b82052", "indicator--0fc5917b-3eb9-4462-be09-ab92dafd9bbc", "indicator--88c2d514-5177-44c9-90af-5c07fb78cc29", "indicator--12965c33-a058-4d3c-a76b-3750f7d5d7f8", "indicator--c4441dbe-4aa8-465a-a52f-d6bb8aeb9928", "indicator--a37e5e41-61dc-4921-b0a5-c20903af6613", "indicator--7930d18c-b928-45c1-9197-cf1a8c707c28", "indicator--15fc6e3a-ebac-493b-814d-99a99993c61e", "indicator--bc2926f9-a21e-492f-ac6d-c0cb59bf11d6", "indicator--1622d589-382c-4a01-9d66-bdd1b0a1993c", "indicator--2d197704-2394-4853-8c93-933b7a9c7ec2", "indicator--3ddbef22-726c-495a-aacb-ec24512ca4dd", "indicator--05d86b54-e666-4e3f-96ba-db5916cbe702", "indicator--1bd76b5f-ae75-49ad-a88f-b3687e1b7036", "indicator--e351f5fa-6def-464a-8c6f-0d15ba4a1381", "indicator--ab1fa0f8-f129-4fee-a9f0-3f7f3aa79552", "indicator--6a417443-40af-4d0b-9421-bbcca41935fd", "indicator--d6c31cf2-f1be-48e9-bbaf-a45df0731d7d", "indicator--54689fd5-2801-4af3-acd8-e8bcf2701aff", "indicator--0d34ed9f-526c-45dd-899c-f41b00170ee5", "indicator--afa714ac-4dcf-4fc3-ba30-5211fde71b03", "indicator--7e1e1521-47fb-48d2-81a1-5ee18ab759c2", "indicator--c46b06d4-b847-4d32-a4bf-10ff7cccd6f1", "indicator--edd3374a-fb2e-4eea-be4a-45ed0bfb408d", "indicator--167ebfc8-ece9-4340-9a36-ea01eb566be9", "indicator--defb5c85-2e9a-461a-a062-a9d170434790", "indicator--4c434dd0-4465-4f92-8e76-cccbd3adf100", "indicator--4311f16b-13ae-4c79-8a37-2da18b0b7181", "indicator--41210acc-a145-4e6c-a94a-1e823942c31d", "indicator--d44d1baf-7013-462e-a81f-b4067d7f9923", "indicator--76789035-b326-4c26-a65d-6649e6f126c3", "indicator--f96ea1a7-d31d-460f-8ba1-f2af4c0858f6", "indicator--b9a4737d-81c6-441d-b7d2-2f7dff9be089", "indicator--2510b98f-54f1-4ddb-b30f-3033e5c6b68e", "indicator--f7a49d0f-7493-4528-90e7-85b6e8603bca", "indicator--7b7cc4ff-cc00-47b6-bb5f-47f3625bac31", "indicator--3a763962-9138-4bea-9c00-d1b7c4443719", "indicator--ca543480-c060-4142-b83e-8fc39d8c7a34", "indicator--7cadb5be-f20d-4c30-b071-44b2d23d92f6", "indicator--d84e97ec-488c-403d-aec8-21dfdb587959", "indicator--5c92f56f-daec-4b9f-a2ae-11cdbd49e36b", "indicator--c0e24cec-6c49-4f2b-ba75-0253c191740a", "indicator--8e677616-30a6-4fec-8a16-2a2e8ff02b0a", "indicator--5e380825-c0d9-4b27-b6ac-7c6958d6fb45", "indicator--32acdbf8-1c5a-482b-b671-362d2d989d42", "indicator--2f52ce9a-0614-4795-ae73-728849077436", "indicator--b3ccf997-663a-458f-9773-ee6d087e821b", "indicator--69073da4-70a6-468b-bc06-69ee07b7bc76", "indicator--9e358f12-95c9-480f-b43c-064e0626a601", "indicator--ef8a035e-d9b1-4c7e-8823-4c8c76ade362", "indicator--fd87ac70-2ea0-43d9-ba21-399fae69d795", "indicator--1eefcc33-6379-4baf-bc3d-64c6e08613bb", "indicator--f289f445-080c-48c6-a3ea-44ef768199c9", "indicator--dde4eb33-19c4-4665-9101-c529654ff277", "indicator--f749e060-e357-49c4-a04b-14dd1f17ba4d", "indicator--90cc29bb-44a0-44ed-a4b8-51a78b9e4ce4", "indicator--9b571dd2-7835-4728-8400-e2d1f02bce2d", "indicator--57591da2-2adb-48f8-bf59-c00c3c1d0760", "indicator--b28cb623-04f4-4c8c-a2bb-6e14d3de19e3", "indicator--34b8a75c-a517-4530-b053-58163b0e0937", "indicator--3aeef7b5-2319-4b34-8ec1-7427e4f080d9", "indicator--885e1ed1-4bfc-4a0e-bdec-1f69f8302596", "indicator--ad09e08a-5fc9-4924-9e7b-d63fded5498f", "indicator--94d23d1a-88d2-416e-b74b-d660d93265be", "indicator--c3705c28-ff67-435d-986d-d94446224d38", "indicator--bc73afa9-7fcf-43fe-8eea-bb3ab98b6c97", "indicator--0204b0cb-ab8c-46bb-960a-f691cc8238e4", "indicator--f2ce99db-a884-4f18-9eb7-f5bb6671a60d", "indicator--0f855b32-027b-4a51-8947-a2e3d51e7198", "indicator--85c5977e-e16b-487a-9a49-0f5326b2736c", "indicator--45bd0a42-575b-48db-b892-3ea9e6fba10d", "indicator--d65e95e9-4b7e-427a-8b97-1ce15bf0df97", "indicator--8f434328-3afd-419f-b28c-37b2b2979fad", "indicator--5c1022d3-1050-4cca-b365-082f5829afa7", "indicator--6a6a8f19-5560-49a2-82c5-ea409ed131a0", "indicator--27f39016-d1b5-4836-b1e6-baf43f15c0e8", "indicator--ad2c8997-ed74-4360-937f-8e06233ba749", "indicator--0dcbe6b2-f190-4a40-b309-c9f739908b95", "indicator--94099638-bc76-49f1-838d-0b61fa7c71a1", "indicator--65a0f4ec-8e9f-4c0d-b7a5-497c26162d26", "indicator--9a64ee72-3b3d-4ab9-8abd-90b9395dd2d5", "indicator--07098cb8-f1d0-4de2-8f0a-364ff7112930", "indicator--fc51d055-7da4-4fff-a3a0-39cfd3904a63", "indicator--2704e970-54c8-42e7-8d56-21e7ba7251e3", "indicator--113ffa54-b001-4aa0-ba04-7ebc0dc8e60d", "indicator--b19e8d3c-94bc-4a21-87f5-15c3f7a08cac", "indicator--17b433d8-cc3f-4488-ab71-a62f7492ada9", "indicator--d1c9c7d2-b02b-4389-96fa-ba9e986d3fc5", "indicator--0a120b22-6535-474e-8d8a-7098761c1fde", "indicator--4bb482cb-08b1-4ec2-b276-8fd0175da759", "indicator--343c9fb8-d086-448b-b5cd-fd6a8a3f0cb1", "indicator--4654093c-49a9-49ef-8345-58662fc66572", "indicator--e6fa8f53-7aa7-4adf-8b35-629a86069837", "indicator--5098311a-8c4a-4393-912e-1d3a8c338d2e", "indicator--568d5945-ed97-4549-b465-15eebf88e370", "indicator--a5acdc01-d7ad-4171-b27d-daae095f378b", "indicator--4917a3ed-cf62-4a40-bdb7-5213a88b271f", "indicator--368dda8e-0113-4622-baf4-c7de2f44cb28", "indicator--605bfe78-882e-4dbb-a346-4deb2d83ad13", "indicator--1a69349b-91c8-4cc1-8bdc-3cfddbe60370", "indicator--4f8fdbd7-a67f-4f7b-99bf-f11658f99cb4", "indicator--aa9c1210-9161-455d-a0fa-0258582dc891", "indicator--7072781a-27a2-4b91-95f7-767ad8b05dfa", "indicator--6184076d-a067-477a-8a85-6f03a91a62ae", "indicator--93ec32a0-0f31-4758-92ec-8121b299e83d", "indicator--78e5d710-c81d-4ce9-b16a-dc338c30088a", "indicator--db03b9e5-758f-471d-9ce0-fb63adc8b794", "indicator--444c7498-45df-42bd-84b9-fea843408e8d", "indicator--3e23c974-64e8-48e3-a1b5-ceaaaab1cfac", "indicator--254cd13b-a42c-43d5-adc6-591d2d0ab7ab", "indicator--53c3aed2-0bc7-423e-9977-50aee121ef94", "indicator--6b739515-57cf-4d74-95a3-7903ffd1e35e", "indicator--0981d49d-d413-45da-98f5-ffb193176f7b", "indicator--7635b3b8-1804-4dbb-a749-697d80c33742", "indicator--f1112af5-2c0a-413f-9385-48020f1babd0", "indicator--a72665b3-7dc4-4f70-b8b8-f82acc53588d", "indicator--717b2a29-7386-4966-b669-57dae4c3c701", "indicator--835abb19-8588-4d73-9a6e-589c8784d0c5", "indicator--118f9fec-d538-4515-8e60-26c7ce0f3c75", "indicator--3042153a-af14-4429-bb77-9ab092e3f752", "indicator--e119aa4d-c498-424b-952a-81c2e0db6f4c", "indicator--66452000-cfd1-486e-bff7-cf04c758c7c5", "indicator--e45369e1-6b44-458b-a675-809ec89f084d", "indicator--a659381e-61e0-4b87-854e-29f55f4ed83f", "indicator--f05e770c-635c-4fa7-9008-c5c043f2f8a7", "indicator--379460e7-9103-4f86-8bf5-b57d426ccaf1", "indicator--d06cb0ef-9bc5-4af9-802a-0f2209515f82", "indicator--528b769e-87ee-480b-8fa7-fd500ecca63d", "indicator--a2227492-6e0c-489b-a57c-10c580a3253e", "indicator--35dfc883-0855-4623-a5a6-23cdf9f36611", "indicator--5b4c29ea-209f-48a4-a0c9-658c5276e135", "indicator--15a85e1e-e277-4095-a3c2-d11912972512", "indicator--6533c9ec-46e7-4642-8d23-7e492f82f303", "indicator--5c0c8ffb-5a0b-4855-9dd1-20838a79bec2", "indicator--1559749f-b056-4e45-b53e-486aafecb40f", "indicator--fede8bc0-ea08-4a32-ae70-4624b177c542", "indicator--21d6d467-04ea-45de-97a2-f353fe1bfabb", "indicator--b3ba1f1b-599a-483b-9d07-a045c51fe0b4", "indicator--243e4066-ed96-459d-8f4a-50e8b8b191b9", "indicator--ec8eaf83-d3b7-4733-98ea-aa16db7a0365", "indicator--e929e271-8d47-4851-adae-69710db32f2e", "indicator--0cbd06f1-6459-46b0-b2ae-7e85b0cd54ba", "indicator--24d55739-f192-43fe-adad-5b1dcd6971d0", "indicator--8757bd1e-60e1-4877-a5aa-dce083ee0b76", "indicator--5d7c202f-c949-4b8e-ab62-85abfd4f607c", "indicator--e7875a32-a425-4885-b1e7-4475f60dd6de", "indicator--316676bf-3527-41a0-b89d-af135943ac83", "indicator--0a4e2915-d556-4359-8114-75d7efc99e5d", "indicator--37f7b17a-b2dd-4c63-9278-966e074fc0a6", "indicator--32c5bdbb-45b1-4da2-98f2-577992611f8e", "indicator--8a89daca-f832-4898-9c49-9b58008830e1", "indicator--6cabc401-89ac-4a53-b4f0-8322478fd00c", "indicator--299a510b-85c6-4a93-927d-58e8515ea826", "indicator--0937ddb2-c40c-4b8d-a165-622d0a72da64", "indicator--ae12d8b0-35dd-4ee8-b270-76fe144e9a29", "indicator--e2ee3714-8e82-4638-8ce7-49d73ebc64bf", "indicator--49ef6e0e-82b3-4afb-b46d-7ac2a8f2ab61", "indicator--407d700d-6e47-4176-84df-58de60d5f2c6", "indicator--53dd03ea-514c-4ff4-9b39-e60689a385f6", "indicator--390f4c64-322b-4c05-8cdd-b262fc32a1a5", "indicator--3f99ac18-c8bc-42f1-9989-d85a9bd17f2b", "indicator--50d5d72e-d967-44c9-939e-c94413f51dfd", "indicator--1f8d6e00-a014-494d-979a-b63510af2c69", "indicator--84485143-6964-43fd-98ae-2dc4a6e948c6", "indicator--45bbaaa9-e51c-4384-8401-9a8600316d7b", "indicator--5d0cef0f-6dca-4751-910d-ac046d041d6f", "indicator--f3757dbb-488b-4b7d-9b89-c0a6799e7ae7", "indicator--41229793-406e-44d4-96cb-4e43b01476a5", "indicator--c3fd009d-19a9-456c-8663-ca892b38a732", "indicator--867d3526-b0e9-4cfa-9cb9-e5b97b57bece", "indicator--1205374f-b85d-4c66-9782-885d0285fd82", "indicator--28601964-c68a-4a97-b687-0c9a06731fb4", "indicator--9fbeab56-5777-4653-802a-385bfe6920e3", "indicator--b893fa02-99e0-4cb2-b416-be8f90ad5adb", "indicator--ff96f5f8-d907-475f-a7b9-9cf2fc94f9ab", "indicator--bf21076e-84b1-49e4-a603-d53ca893ea0f", "indicator--eeaa7e7d-8ffc-4c2e-80b6-11510e895827", "indicator--20399f8a-2c2f-4adb-90fa-371e1009b54d", "indicator--cb104d75-d8cd-434e-8214-10118ea9e4b7", "indicator--70833b1c-a823-466c-858c-9ce85dedf83c", "indicator--725e1413-c97d-4022-936a-da78d7912513", "indicator--5f194518-0178-410c-9b82-72aa5abd2b0f", "indicator--ae26cd1b-3405-4b2b-9274-6742c2760cb5", "indicator--9dacfdf8-9512-4f5c-89c3-7931a91eebbc", "indicator--9d06f189-ac1c-445c-af99-e973540dc389", "indicator--2540cf86-0673-40e8-a97c-3e52092bf65e", "indicator--6b380b4c-3446-42ca-96fb-7c4c5c71ff9f", "indicator--b8d2753c-5812-479e-a2d4-2d5df19f5fcf", "indicator--f39ab0f3-4fd6-4c53-a3a0-4e1bfe25ae45", "indicator--e6a71f2a-2601-467f-b135-5afa6f78a6e2", "indicator--8b51e4bd-0180-4193-a5d6-4ed23fb3527d", "indicator--7ac324cc-d74d-41c8-ab1b-dd17cccc0e79", "indicator--fa5b8aa5-c0ea-4d47-80e3-b9e03b2043b9", "indicator--dac92f0e-8f8c-4af5-bc15-c8fe86d72a15", "indicator--6cd336dd-722e-4af2-a328-234416ba9cb4", "indicator--e3a8b89c-8eff-4acc-815e-e8c331c7f0ff", "indicator--b0a4ad6f-de8d-465f-89d4-7019432cb8ea", "indicator--b0e9e3cf-9699-4f46-b7de-9ee9c614c08a", "indicator--1e9d25a7-38a7-46a0-b9c9-0875eb0ba080", "indicator--9a7a1678-96a6-4c6b-a5d8-7e6635aae612", "indicator--b16fa0e6-46d1-42cd-a86a-4d58c8c12230", "indicator--888eb514-7d73-460e-b589-8414455327ee", "indicator--b0f5ccf0-b1a8-4deb-95f7-9ed8ad122977", "indicator--a23fcaaf-14e7-4e92-8eb8-fb8ae6b7ffc8", "indicator--ecd675a4-975c-4042-b1e5-5ec5e64cdef5", "indicator--b874fcf4-955d-4147-945b-2771fada18e9", "indicator--d075bbdb-57a0-49ea-98ff-50edb351d256", "indicator--7e169b8c-ee56-46b5-bd39-750c1128ea88", "indicator--a707f8ac-0880-4515-a3bf-2c531a75ab20", "indicator--1af585d5-4720-432e-bcb4-dd98edab8e8c", "indicator--dea345ed-1c5a-415b-a5e6-2b97de3470c1", "indicator--da130a4b-24b7-44d5-9b6e-e73ab6ca451d", "indicator--1e1cb4bd-7079-4a94-96e0-30534183df6b", "indicator--ae78315e-597b-44b0-b75c-e8ccb9ef3b3b", "indicator--d320768f-0ceb-4c8f-9fee-4c13b52ad6d6", "indicator--f320cef2-eed2-4894-89ca-ae62ecb9d148", "indicator--de9325c8-2657-4f2a-9573-d95b11709ad0", "indicator--cfb7ab2e-de82-48de-8e24-08f45176030a", "indicator--1798c151-e93f-4678-8162-e15e6f614e20", "indicator--118b24b4-e573-4eb2-8774-337f8e903363", "indicator--23781c66-9b7e-41c9-ab75-2839d9052bf9", "indicator--bf8b8b43-5ddc-4dae-8061-ce82997384e2", "indicator--4e694a46-5152-48f3-b2ba-b0eb7e0ff902", "indicator--aab28685-60a8-4871-9045-bd36b7ca8e51", "indicator--2512b64c-0faf-4c67-afec-f0b12129c5b9", "indicator--c7c0603d-239f-4db6-b9bc-305e452cd4d8", "indicator--bd5fe6ad-68f9-49b0-9389-02e27773de39", "indicator--2e407d42-19f9-4212-826b-d8a72a93bb09", "indicator--53f8b3e6-a6f8-4d76-b77a-9345fb188096", "indicator--5df70821-6422-4e26-8bd4-90517bb417c2", "indicator--b1f8540b-a095-45bf-81fd-6a930dedba91", "indicator--5c63e59f-7ef0-48d8-a1bf-a6cbd9fe28c9", "indicator--258541be-a8ff-46db-8647-004246326d92", "indicator--f04a752a-d495-4d79-8f9a-ef2809e040d0", "indicator--73e3b4ce-2082-42a4-b39e-238ec502f76b", "indicator--b26e2014-22cc-4ab3-bba1-5000f261d67f", "indicator--89ba1d14-26dd-4e65-8334-de761ad7743d", "indicator--7dae0cfd-9713-4cb4-ad55-905140e3ca9f", "indicator--00666c13-46dc-4355-a56f-ac3c4669dc6a", "indicator--e15bdf4c-1762-45ab-9aed-cdfe70b63333", "indicator--4ccc33ee-8fe9-449f-82e7-1f06e1cd0518", "indicator--3ba411d2-6f61-429b-975e-37aa6a9ef576", "indicator--c9ec8265-ea6d-468a-94ba-330f4b68c813", "indicator--e5574b88-77cf-4a75-9ae8-69352ac1287b", "indicator--e570d798-8010-409a-8c3e-f93788c2e6de", "indicator--b75a71b9-8958-42ac-896c-fd3153890da3", "indicator--81c79c7e-1061-4816-b8d4-37a414e3f382", "indicator--4be2814a-0ac3-47d0-b6e2-757a051a6419", "indicator--3fd94fd5-8e6d-4c09-a426-40ac957f985c", "indicator--9997e18b-cacf-4ae9-a17c-b1a1079f4259", "indicator--53de415f-d90e-4555-b27c-9134ead2cd13", "indicator--12ff8257-30d6-45c2-bc8d-24286824f668", "indicator--dc5057fb-b173-40c6-82d5-1e612d0b91a4", "indicator--35b448a7-5221-4165-9c73-355692132c85", "indicator--69261af3-d842-43c4-984f-49c85542d723", "indicator--71cb91fc-398f-4e78-ab5b-341058197a83", "indicator--96e1ec74-cb98-4fb1-9832-719cf25ca15d", "indicator--a5c53e82-f857-47d6-a427-2380dd740374", "indicator--063b4f91-f4d0-48ee-a247-ee249274f2b1", "indicator--b2467a46-99ff-482d-b736-26c0d27adff5", "indicator--b5ab3720-f61d-4be0-9cdf-58c817c0f41d", "indicator--2a400822-2093-45d4-8673-3f768a71573f", "indicator--85f9bb83-dd1e-4100-a3e0-c0f82d60004d", "indicator--e2e94ed7-bdc6-4373-b64d-20e34c126e67", "indicator--62b66d29-b50f-4c0b-8956-82b4f6d4cc82", "indicator--6af9f70b-cf73-42c6-aba4-20295ca052e6", "indicator--c8663115-ed82-4c4a-90dc-28701578e759", "indicator--bf0cf516-70d8-488c-aeb5-659baa5d95cb", "indicator--775d66b7-7d00-4a84-a68b-611e03e518e5", "indicator--d28098a3-0949-4370-bfe3-bafe1c10c246", "indicator--bd5aab0d-e227-4e02-8aa1-5d5da3104727", "indicator--04741e70-3839-4a5f-9dc7-17c2df0701aa", "indicator--9bf64383-6671-48bf-9076-ef99c1b28417", "indicator--7a2ead0b-abb3-42ad-971d-ba1b0d413891", "indicator--4e1c5614-50bc-460f-bc75-fd138d35357a", "indicator--d2086e2a-d5b6-4bd5-bb06-2bf1d45324bb", "indicator--8d03453d-9d63-49ca-ab71-0bc74230d541", "indicator--b8da75ff-906f-4e85-9b46-5875b47bf09d", "indicator--d59f07d7-9102-4d85-b9bd-8218a09ac3b6", "indicator--9b5114c3-89d8-47ee-9b89-14a14fd338a5", "indicator--d7cfc4c3-b566-48f0-945f-ed53056631b9", "indicator--b1cf26f7-60e2-416d-99a5-0da97e121cdf", "indicator--125e0b29-c640-4fba-b940-0f994596674c", "indicator--99a4b68f-41a2-48bc-afea-65cbff6e7304", "indicator--cdee73fa-616a-48ee-a43c-057bd690c797", "indicator--81675b26-4e2b-4d67-9c4e-5ac3ea57ed55", "indicator--f00d7e18-93cf-462f-b637-4c51040fab1e", "indicator--be2c80ee-60cb-4f71-b778-00f7bd55fa1b", "indicator--b02dbd6e-f691-4332-802f-d5cf618d68c1", "indicator--178eeb2c-e89d-4d69-8099-bec436f4741d", "indicator--aed8e016-78d7-4a7c-a8d4-c61493499b9c", "indicator--5bf106be-ee2e-48fd-b4d8-d95a204a7c6e", "indicator--ee8557a1-28b5-43ec-ac3f-90d066046323", "indicator--d1e726f1-9d94-43c9-81c2-ff044096f626", "indicator--e51b0f35-e745-4546-83ea-a442f9ec13f5", "indicator--8b9416d6-61ca-4924-9951-be4d305c0baf", "indicator--3e31bc6b-aa06-4513-9668-45bfd1d53c58", "indicator--202cff93-cd7a-4dda-8143-5255232944b7", "indicator--772d385d-1b0d-46b4-8bcc-98107223a4e5", "indicator--e2a496b5-0725-41aa-bc7c-7ea2d189d2c9", "indicator--54f22ac8-351b-47a1-aa89-072c1a6265f9", "indicator--6f29965e-2165-4000-9916-3a942ec94288", "indicator--037b3469-07d0-45c6-84fd-4221577dabf7", "indicator--fbd72b1d-6705-428c-b871-63a961094899", "indicator--cdb763b7-40de-4a79-b2b8-33f0a60fb462", "indicator--ff4650e2-a25a-4ddd-957b-c066950ec204", "indicator--2a752d79-27f6-495e-964a-4c3ae6310188", "indicator--0ed3c95c-f683-4ca3-8b4d-9f0b0c8e9623", "indicator--924b22d6-a53b-4c80-b1cd-619ee2051aec", "indicator--d8f9bd23-5025-483a-9f86-471a4e88d159", "indicator--2abf6f0f-9ad5-4b03-90dd-0707298c18b1", "indicator--e4a07746-6e61-4574-896c-25d784ff13e7", "indicator--547398a4-eab4-4b8e-89d7-84a6509f0cd4", "indicator--f6ebb6d2-b5ba-438f-9a8f-2ac49cbd0e2a", "indicator--f51e1320-f4a9-4c34-bdd7-3106398f4d79", "indicator--6a5eda62-9a0e-49c6-85e8-0816f503b0fa", "indicator--6d14070b-fa5b-4e30-8aa4-0f0f14d68b67", "indicator--def3a32a-9446-45ed-a81f-511bc9ac2ae9", "indicator--235ca053-9ad7-4ebb-91ed-755e35367df8", "indicator--f48d1606-d7d4-4047-ab0f-56921dc0ab00", "indicator--82eb728d-b93e-411a-aa0c-93b78721ebce", "indicator--070b9e29-3cab-4386-8048-2f54a57dc2dc", "indicator--83ad4a27-1023-4241-8cc0-5dc3eff8aa02", "indicator--3ca0a6d0-3ba1-4fe1-9fd9-2b89d561f1ec", "indicator--467be044-6a8e-4498-a2c2-7e2072b2f764", "indicator--9a606829-f3d5-4700-bbd4-9d10aa46f6a4", "indicator--ea5a4dd1-4db5-47e4-a1f5-7cc89a493c6f", "indicator--9ffff65d-fcb8-4423-9383-d920b8330812", "indicator--c1a3da2c-fe29-4eaa-a2bd-5ee298903b9b", "indicator--39b4c2d9-b812-4cbd-bb6a-c4b227c938b2", "indicator--6dfa7632-01cb-418e-850c-b35677981cd5", "indicator--eb625cb5-2892-4148-8b47-0906057021a4", "indicator--f7da9af9-feb3-4657-b3e2-bff128730789", "indicator--17df3c39-ef2a-42f9-9599-0a6da712639b", "indicator--7494a1d5-56fd-46b3-9eee-e29cba2bc233", "indicator--966fa0fb-376e-47cf-9353-7e181c478ae6", "indicator--c1b669d1-62b6-4acd-8830-386505087f1a", "indicator--acceadb3-312c-40d6-bb11-f563a25269e0", "indicator--198ddd6e-4db7-4890-8bc5-c0f60d9123ed", "indicator--55c65942-0e98-4e8e-96f8-283aedc6dbd7", "indicator--5a5b8e3d-6616-4473-a0b3-bb84381b7950", "indicator--5bf4225f-6a57-4913-8b9d-74a33d739dd7", "indicator--39053435-1522-4070-8966-fed42b5714d8", "indicator--adf1230a-3fb1-4994-8758-0f39489ba600", "indicator--dc1bd639-5e01-4d5a-815d-2ec8e6b48783", "indicator--b4493f02-d59e-4009-979e-8d011c024ac7", "indicator--340638af-e4cc-447e-b980-97732dbd76da", "indicator--2de95d0f-cd77-49c4-ac72-47636ed3c80e", "indicator--b8e99aa6-a6b5-408b-bda1-f8ebb7b64434", "indicator--651c106b-ef9e-48e4-b768-44bc538c1948", "indicator--35a4310e-197d-4316-abec-90d7b43fd89f", "indicator--8ab0c46f-108e-4871-9782-968e33378aa7", "indicator--1bee6162-ecf1-4209-ae9d-81a5e200744b", "indicator--f14ec2f5-5828-421c-b05a-f84a4b760415", "indicator--25e99ded-eebd-4322-a58e-494993dba811", "indicator--5ab111ef-b248-40a3-ba6b-189a5493214d", "indicator--bde34cd5-7a44-4ef4-b71b-ad5087e5ea36", "indicator--9c29cb75-13db-424b-8676-cadbaea900c7", "indicator--0dd38951-af73-4f4b-9f85-7de1550425d0", "indicator--ca9c5c85-5e6c-4ee1-b97e-2adae422c7a6", "indicator--2ca59e74-a51c-4a8d-8b4e-dbe0004bed20", "indicator--45b53c5b-b6ec-49e4-9c9c-30f34dcd57fc", "indicator--12516d6f-1d45-4940-a299-865f9d1853dd", "indicator--5fa94f11-fadf-4d88-a0bd-550243ebb3dc", "indicator--fd7c7422-ed1f-471c-a0d1-79a36852a623", "indicator--7056d148-80d7-4aab-9e20-410fc013293b", "indicator--0fc56854-e3a7-4346-9a39-fb7d53eb3511", "indicator--0d11341d-71ba-463e-afe8-645c27b2b5cb", "indicator--eb922d0b-d3ae-4a6d-b4d9-c4e99345d473", "indicator--38831360-57d8-4cf8-9271-ec050e09c804", "indicator--a95248d7-7fa0-47b3-966c-a5d322209a79", "indicator--f778ddb7-d9f9-4145-bded-d07269743c95", "indicator--5378bc39-450a-4a97-87e4-84f329f757c8", "indicator--1a3a294e-66f9-4514-bea8-aafd955a1b9a", "indicator--d280f823-51cb-4793-9eb9-a9a7044cd755", "indicator--624195a9-4c26-43c2-9a71-45fdc0a429a6", "indicator--a6532cda-0bc8-4768-9070-9bfa34351e4e", "indicator--ea3984b0-8e78-4f0b-9532-bdaaad71adcb", "indicator--056e5f4c-527b-4f0f-acc4-295ea4f08027", "indicator--6dce8fac-8181-4d18-a995-ebb0c643ff99", "indicator--cebc4d60-e7b0-4366-ab61-51eb6e4ff43a", "indicator--b9b54979-7e76-4f8b-96f0-2b834f7491c0", "indicator--bb1c766e-6b0c-4066-b403-c6ceb2276f77", "indicator--34fad481-8f47-4c47-aba6-67e846797d4e", "indicator--5883d787-d7db-4902-99da-a369e1ae7182", "indicator--a95ad31c-e552-4cd4-840e-b254a16e5b85", "indicator--f951b334-c79c-4ed6-ba15-ba561238f1be", "indicator--85293185-c98a-47c9-913e-8729c4883b50", "indicator--74e9ff9b-391d-49b7-ae6d-117a0f9a5a23", "indicator--03500ff5-127d-4917-8377-6b589da4b99f", "indicator--6e6744b0-248b-4883-bb29-d0d0a883f7ef", "indicator--deb0c5fb-77a3-4a63-8d3d-dbf6cf058cd6", "indicator--b3236d55-bd13-4afe-9e6e-4a4feb36e0ab", "indicator--b2c09572-2367-4865-b835-e352667d5404", "indicator--a19ec58e-2c99-4aec-b0e0-6bdc2a53510b", "indicator--6b09ec42-17ae-4254-9077-330fb4888fee", "indicator--ba3215c6-5746-40cb-a7ab-4f51e170c740", "indicator--90f96248-eb57-45d5-a17c-ced1ae9a5636", "indicator--fb3145ea-38db-426a-88cc-33c36e46f52d", "indicator--22a72547-5654-4042-ae85-98a62da2b096", "indicator--2300745d-b916-40c3-80b5-2183bd4c2b39", "indicator--37ca5789-6d1d-41aa-abb6-656fe7575f31", "indicator--a8c70983-28fb-4336-a970-5f5b7730c66f", "indicator--100ca52a-f678-4247-a6f6-d41a639b0bed", "indicator--bd7657d6-ea75-41fc-b6d1-01baacecf457", "indicator--51e9f54d-85c1-4177-9e4f-2bd35f5679e4", "indicator--85d01ea8-3793-4399-b3bc-1081cb75fa6b", "indicator--c1966586-2f8b-49f6-aa80-18c126291d92", "indicator--b5964ee8-b4a2-4cf1-bdc0-e3b788a906f7", "indicator--c40900c4-ff85-493b-a8b1-1082f73dd5a3", "indicator--7e467111-ee12-4a74-a10d-20e0e66be98b", "indicator--912205e2-0a4b-4ead-8e2a-5180d956bcc8", "indicator--1b2dfc29-e98c-4d84-917e-c4d808bce8fc", "indicator--2b2a5d56-2369-4a32-a007-f137fa0a7b84", "indicator--64d07f6c-bc9a-4b9c-ba87-864985177d9b", "indicator--496cbadd-80b7-4ab5-9277-0d0a03d03e7e", "indicator--79e46c95-2209-4a92-b05a-ec296ab05dbd", "indicator--13f37197-ae13-41bf-9ce1-6e146760ea42", "indicator--fc962c5a-b765-40d8-99aa-fa60ff02927b", "indicator--279e96da-f3f5-4a13-82d8-252bc5208890", "indicator--ef0d756e-2ff0-401a-9594-1e5bdb3f572c", "indicator--a87bf97b-b98c-464b-999d-68b7d5451c46", "indicator--197939dd-5cba-417d-a062-686f52c2de5e", "indicator--659dd440-c3d2-4e9c-858f-c3c127da919b", "indicator--a56c2c04-8664-4797-b82e-1dd00dcb2acf", "indicator--17ca6da0-3cd6-4ee6-a5bb-ffdf3b2f9e13", "indicator--5fb20cf3-8a24-43c6-a273-6b65206e9bce", "indicator--09445aca-9cbd-4e9e-8f11-1f6b3f75f584", "indicator--35ed7dd7-1773-4479-b245-192ce76e1d42", "indicator--978ccb80-3090-4ad2-a1c7-f0df784b4da7", "indicator--f13d4388-b5e6-4484-bdcb-4789d37ec4dc", "indicator--d8f70972-64a8-48d6-a171-1bd0f2f806aa", "indicator--010366f0-863f-47ea-b6bf-0dc4c0a99133", "indicator--0bc502fd-76fe-4ba2-944f-aa0e7520b966", "indicator--f0da7d39-7f2b-4971-8751-039bfab927c2", "indicator--d110db83-ddf5-4b57-b257-2981138e92ee", "indicator--525ec90b-85dd-4df0-bba0-386e298362c2", "indicator--ec0f8fd6-7ac2-4109-92ab-d0f57a3a62f4", "indicator--3b90eda3-f197-4623-845e-bdc1a134db44", "indicator--ef7fce0f-11df-4755-94a3-6acf4ab34347", "indicator--f9c5b43b-6e60-474e-b829-b28e859624b0", "indicator--038e03ac-41b3-4c33-b323-5ec415fdeb19", "indicator--a6d0d759-b4ba-4907-b76c-a46b63f8153a", "indicator--680ec136-be41-4e54-9e02-68a61bf530bd", "indicator--18184728-2d0f-43d1-8f28-4f4a6e954afb", "indicator--3e63b4e8-31e5-46b7-8557-d098359012c7", "indicator--cb7347e0-bf16-4031-9470-e7abc8063489", "indicator--fee13b06-4499-4fa6-966d-4abd251a3021", "indicator--afe89e98-f434-4fea-9a51-5a23fbb1268a", "indicator--39efe9dd-e12b-4c50-aa63-21a605525641", "indicator--dec6f242-ff90-4870-a3ba-e5286424adcd", "indicator--d2ea8566-4d65-4d3c-981a-38e71f1387ba", "indicator--27cb6a4b-e69f-468d-ac63-5b16e3facdc8", "indicator--cce436e2-ba1e-42fa-8adf-f0a72b2f975b", "indicator--432c963a-25be-406a-987c-696e9ddb8b26", "indicator--903a4573-15ae-41de-b769-64c276d1da83", "indicator--27823ac2-8dd0-4360-a89e-a903fa03fede", "indicator--c3c407ee-486f-4fbd-b887-8c9a319c2942", "indicator--470d6aa2-00d9-40ca-b467-fd80962c3f4d", "indicator--8490416b-5c52-4d0c-b04c-04ae80a84419", "indicator--a458adce-d380-4d3d-b968-b2a577ddd41f", "indicator--eb01b24c-118b-448e-b293-cdd924817831", "indicator--c1538aa5-ccc8-4bf2-99ef-f22129775c3d", "indicator--4ed27766-70dd-4ae4-add2-490b0524c564", "indicator--de349e2d-717a-4d61-9c6a-4ea261b80bdc", "indicator--dba1f2b2-d975-48be-b0e8-bb3f43ba0fdb", "indicator--f535e0a2-d1ac-438b-91dd-d17888e4f22f", "indicator--f9b9dab6-3628-447e-863c-f38e5662fa73", "indicator--687f1f3b-c0c8-4243-8b3d-69cecb16b859", "indicator--6ea60ea9-bd06-4d8e-8d56-ae61e72c3d30", "indicator--1e4a9152-aecb-40ab-a657-4efaa97cf854", "indicator--59e0f280-7750-4c6a-9ebb-14ed3a337c72", "indicator--2e52652e-51c8-45b4-ad3b-94ce3d6c705b", "indicator--100dae50-302f-4e12-9d66-8a9f75c4da38", "indicator--d803369c-0008-46d1-ac83-5a242b80b445", "indicator--54d01c25-392b-430c-a234-9aedcdb4722f", "indicator--0c3e583f-fc58-4864-a160-67ae0c74a44e", "indicator--5215dad5-49e7-4b2f-949b-e8214833ac4a", "indicator--ac6b1c1a-f17b-47fb-8e9d-d7068e270049", "indicator--383baaed-dc32-48d3-8c59-3a63b23e21be", "indicator--cb0e390e-a752-4bde-9f1e-cf7bb5a46e1b", "indicator--22eac6ce-e884-402d-a8ae-a204488f80b4", "indicator--c034bab7-e253-472e-a4a6-19886f1c4dea", "indicator--16408478-a915-4733-a75e-1ed124c69ba6", "indicator--010bd205-e2c9-4ae4-9c26-6fe431cd1a64", "indicator--a357aacd-c7f5-490f-8ddb-ebbdb3745a54", "indicator--b4893322-a587-4809-8fe4-15922631572e", "indicator--0ad8efd4-4853-49a1-a8d0-a5586af9873c", "indicator--af4c4f0b-a02e-4ff9-959c-81b614263506", "indicator--e6475c1a-f065-4405-a1da-0d771e41d20a", "indicator--038a32f6-db0b-4a7c-8149-a9fcb5cffcad", "indicator--0a200be5-32fb-4c2b-a3f6-0b1f5b7415da", "indicator--09c10d0c-71bc-4048-8e7f-64b7db1e8ecc", "indicator--3a338555-e888-4775-be99-8db150512b73", "indicator--bdac0f61-e001-4057-bfc5-3d0956bf5c56", "indicator--b7be6143-5ae9-4a5e-b5cd-12fe6ca24e11", "indicator--3e71776e-c627-41d5-91bb-ddd974fd1553", "indicator--fec93ba4-0a86-480b-a508-d4bdac3b3ab1", "indicator--5498fe35-57b5-4d85-b45a-c6b343359ca6", "indicator--737e33f6-ee15-4f65-86e0-f1cfb63c760f", "indicator--eec9efb4-6053-4533-9cd5-23b9628f014e", "indicator--2597d0ac-865a-4efc-9268-87dcecbcbb90", "indicator--d95d0616-feea-4014-af83-b6a83c0b8905", "indicator--5e60f3c5-b529-483e-9346-f333d23f1063", "indicator--54ee4fc5-2b87-4cc0-bd8f-859955207cdc", "indicator--f4a8494b-4a58-4152-982f-5e6970e9ece7", "indicator--ca94952f-5d7c-4df8-9f4f-9d9a1e86282d", "indicator--487e2e8e-a46f-4680-a408-e7ca995e2547", "indicator--bf2825bb-5884-4d15-9990-dceaca37f317", "indicator--36b66c86-ba04-402e-b99e-47d05c3eded9", "indicator--d2e6d67b-130b-4c9f-a480-82589d2c6e4c", "indicator--79eb9520-dfbb-4fed-827d-86d42565d2a2", "indicator--629d5d9b-81bf-4848-a642-88284ab56804", "indicator--fa82dc01-e49c-4f29-988c-a236579b945c", "indicator--8dd79b3a-1ac1-4e24-a147-7deaa6fe0b73", "indicator--590bd611-d3ad-4971-85e4-ecd573b82c03", "indicator--b759254c-4a7e-460a-a08c-3166d38633b1", "indicator--2ceeff82-ab43-4c95-8541-1b2989b5fdaf", "indicator--6d28959f-896b-44ae-958a-486c29813458", "indicator--e442ed11-f61b-48d7-ae0c-81c5f82b94da", "indicator--330da5f1-07b5-425d-9b49-74f031ede9c4", "indicator--5f56006e-b71e-4271-9fca-17e317af8c48", "indicator--b4cbfc12-2e54-4a83-94b6-3fb1cc3d5bb9", "indicator--305b4692-1000-4317-a91f-9ccd7c28031b", "indicator--a60fe73d-3908-4bff-946b-7c31c8dbdeaf", "indicator--d1685507-54cd-4139-aaf3-ce5eba6e874f", "indicator--cb22a2e8-9177-4a12-9ad2-c7e974134537", "indicator--ba358147-0e67-4882-852d-47f5144a87da", "indicator--aebae829-60b6-4de2-8b89-f6b1fedb3e11", "indicator--4a76314e-c0c0-4955-a535-f62ac5f62387", "indicator--f3ec8298-81a7-4366-973d-c2045a835cdc", "indicator--4d92627a-51e8-495f-9b5c-10aa8efb40df", "indicator--3c3ea032-aaf1-4633-89d6-1043968f5bb3", "indicator--5a9820a8-6b62-4f7c-a4ba-d32d77bccb05", "indicator--3688c018-3260-43c1-be43-d8ab38e407d3", "indicator--d54c93f6-8b15-4d55-b20e-79924a8693ca", "indicator--06a60d8d-16e5-40da-8ede-9f6f1ab42848", "indicator--3fcbf3ca-46c2-4844-9297-703080bb0dce", "indicator--4a3a3f03-838f-46fb-b65e-4f9edf1cbbd7", "indicator--987ee020-9762-4c38-8793-89c2564f992e", "indicator--eea7a71c-883d-4789-a2a7-c6e5bab11558", "indicator--c8b86755-301c-45da-af87-11262fe6a4a7", "indicator--dc107a4a-df68-49cf-a75f-e9eb9e52a7f4", "indicator--5b6cc73f-cd1f-4cf2-94ba-0e15123f6746", "indicator--c75448d5-009f-41b0-8d42-0992a9744fc6", "indicator--4beb3525-e7c4-4c07-9f8c-8e60ba758631", "indicator--c7da6957-6d65-4c5e-83a0-bc6c5bacbaa3", "indicator--80c98e5a-7559-43af-a657-1dc0c1490c27", "indicator--945c5ff6-5a8a-4aeb-bdc6-621faf1e976a", "indicator--2bb8337c-cd53-4ec4-b426-9ce470749592", "indicator--1fee3a98-a298-42de-af4f-55dda610491f", "indicator--8e1e1ad1-2388-4e07-8cc4-0a2a6211dc5d", "indicator--229bb897-580a-4582-afdc-8ac185b62dbb", "indicator--fd94fd16-2eeb-4d12-b873-9da43804f992", "indicator--6b4b38de-5220-4d51-b217-8cfa9bd28d43", "indicator--95ab1410-a511-419e-9ec9-3af4dc6a3762", "indicator--1def1632-4aa3-48ef-9a00-69464034562c", "indicator--cae0e66e-dae3-4f06-89a3-8e1a3a248429", "indicator--46e2ec61-9f25-4b13-8e3b-3386ea5ba5bd", "indicator--bd31a9d8-01c9-4d0c-9f60-a250b1155635", "indicator--f7a7af37-dfad-4dd5-aa52-f0a6a7c2e62a", "indicator--49717bce-82b7-444e-97e4-948a8453c526", "indicator--cf1372e1-a7ad-48cb-8123-29c99e335328", "indicator--12b23636-ecbd-473f-b79c-3e5238714a7e", "indicator--d322bba4-a032-47a6-b810-b5daec0e128e", "indicator--287f3380-d1b1-4418-bec4-0cb4c52ad4cf", "indicator--1e0cf1a5-69e0-4a4f-b31a-f60567727df5", "indicator--463e3858-137c-4957-bce7-ef41cb4e9a22", "indicator--3d9b1f75-1bd1-453b-a0b2-007b75f4e8d9", "indicator--89d29d18-4951-4dbf-9a79-453951f7fb48", "indicator--8c5a88f6-bf73-47ed-85ed-51ab11cea767", "indicator--c65d1d4b-c3f1-454b-bd27-bc6d1176062e", "indicator--1f019e6b-95cb-4025-a816-e29836064ef8", "indicator--2eeb5288-50f4-4ecd-a36b-f3a6d484ec6b", "indicator--5016ccdc-2812-4e47-966f-e75f668cac60", "indicator--f115365c-842d-42ff-8457-075c05f5cd6d", "indicator--e0a575b9-8b50-4afa-a481-df3e56d1b2ad", "indicator--d7495058-5abd-4144-8eca-0ac854d8099d", "indicator--3b16e700-78da-4337-bcc6-98e86b9f72ee", "indicator--b8c45d1b-c3aa-4ba2-99e2-1cafcadcadac", "indicator--077d8a8c-22e8-4422-bedd-a7d628c6893b", "indicator--5b3d774b-163b-40b7-974b-b75e7b95fc76", "indicator--bb2fd62a-005e-46c0-8d50-2885361625c8", "indicator--a42ff2f0-1761-4946-afc5-db7ce0e4a454", "indicator--f95500e3-96e7-4da9-8cc7-eb424e23349e", "indicator--b5786064-94c0-491e-98f6-8bc4b1ef0c7c", "indicator--976af87c-7ea6-46b5-b478-d4f8155edcf4", "indicator--80425b66-26d3-4c98-a331-eda30c6e7af4", "indicator--a3313ff3-4faa-4c5e-a200-04716e5c636a", "indicator--21959c3a-8e5a-4460-9698-8d48d88d7530", "indicator--92ec466e-986c-4b7c-939b-e109663a62d4", "indicator--e0a31515-91ff-4ad1-9e31-ce7b356d5a06", "indicator--efb752ed-7a32-461f-af1d-bde71ae41d2b", "indicator--41f7bc23-ebf1-45d7-9e75-0a70cba39a66", "indicator--8c42cd70-94c0-4dc2-ab7a-f5f2c4b87c5b", "indicator--4733ac3e-d182-4001-94f9-a72407f70b9d", "indicator--0f9d8065-b571-43d4-8e78-c1ac12c5be2f", "indicator--1e3c39d0-793e-4228-8018-933ac2b53001", "indicator--32b4e14b-13d0-484e-8cc4-e66038de2c23", "indicator--b39659bb-7d12-4ab4-962e-7c32e3052307", "indicator--8e0480a6-64e1-44dd-9172-12a96ced93cb", "indicator--7a9d7b5f-f682-479e-9fe9-2f3a788281b1", "indicator--90670fed-84b8-4f5a-8593-346358edf1e9", "indicator--e3e17141-4102-4a0e-86d9-53e5e11d856b", "indicator--a742d467-bad3-4741-aee9-eb75a28f96e8", "indicator--645a8d0c-5205-412d-9d63-dc100565efd4", "indicator--00cbc332-defc-41d7-b3c0-fb799889d117", "indicator--0dd88095-4a82-48a3-93f8-9f66ef65d1a1", "indicator--762ffcc0-071a-4ce4-90f0-798d859d045d", "indicator--d051ee3b-dd28-4d3e-a46b-dd7629b8e200", "indicator--42e3b02b-8206-4c1c-9826-bc1c86cdb185", "indicator--e976fe88-661b-45f3-9aa3-33d976f6b3a1", "indicator--437507b2-8bce-4525-a309-7a99c2a03050", "indicator--4af7deee-f36e-429d-9b6c-abf06d573e5d", "indicator--14002023-0f9b-4709-bf00-652390e67f57", "indicator--f7e09122-91f1-436f-b133-409cf87e4ebc", "indicator--3c689720-8060-4ccc-b2db-b22673077c47", "indicator--baf72f88-0c63-4b31-a64d-155698a90139", "indicator--663a4b57-40fb-4436-bc80-faff1a2dc886", "indicator--33885a1e-15ab-4b17-94bc-67f07e984e7d", "indicator--c0318d9c-360a-4ef7-b204-f767c69355ff", "indicator--628611ec-6e8f-465b-9db5-3deb6dc3f2e8", "indicator--25d6518a-d67c-478e-95dc-a349df912119", "indicator--f071e46f-3500-4911-b136-271de8919cf7", "indicator--9fe43063-17ed-4918-bc0d-b788b8d3ca9f", "indicator--985f353d-342f-45a2-be87-4d948c600b9e", "indicator--96696a4c-94e9-491c-a9aa-0e516c5296da", "indicator--9ded1726-893b-49aa-a017-6d15a4fb4921", "indicator--8f034fb7-688a-4f84-9faf-3c36d7f0df4b", "indicator--7b0e3134-84e7-44cf-81cf-4f2109c70b53", "indicator--c4bbf2d4-55b0-498a-b41d-64dcff822588", "indicator--a5edf16d-1149-432f-8c2a-601ecab67923", "indicator--7eb0bdda-4e70-464d-b0ba-104d67866169", "indicator--f8eb7cd3-2472-49f7-964f-2f5833ecbae2", "indicator--b3ceebaa-2764-409e-81cf-d3f0c705867f", "indicator--ecd1ee77-9cc3-41ed-af95-0c92957e6b85", "indicator--114a77d8-30dc-4db1-b03a-158778e6eab4", "indicator--c744909b-4aa8-44f3-a98a-a40eac10e807", "indicator--df3c5f98-6a65-448f-b44b-6d590ec3039c", "indicator--375a4317-97f8-436d-a52c-817d9c41f2b3", "indicator--214a8db7-7204-4403-9522-c4834e8894a4", "indicator--9ae2e6fa-6e53-491c-a277-b435b7a3ff79", "indicator--438c455e-bdf6-4b0b-9041-a1ee826576eb", "indicator--070f58fd-e1e7-4957-b473-e7911825063e", "indicator--7b143c4b-d570-4a62-9ef8-30e934208526", "indicator--f71544e0-21c8-47eb-8594-f5ffb8e48a38", "indicator--97f21871-4aaf-4533-ac87-3c82aa84465d", "indicator--b4b2b03f-21a1-4d23-ba4f-3f976602c109", "indicator--43f3ae28-ea1d-48bf-868a-36d85c830fa6", "indicator--23135e40-dfc6-4735-8198-23b16d06bc01", "indicator--e68f6ebf-1431-4b22-937f-0488f5207b4a", "indicator--16c9fbaa-67cf-4765-992b-76698a109b12", "indicator--301379e9-ca06-4c19-9ab2-4b3601899d91", "indicator--732af402-6c2a-478e-be1a-d1faf9f72b3c", "indicator--a86dda33-dd78-4704-adcb-c5abd1291ef4", "indicator--45a86708-0aad-4906-a2c1-fd57060a00ab", "indicator--36335fb5-fa33-48bc-887d-f6ef7b16e2ce", "indicator--dc6b5c61-e9d2-4ac8-bae3-2001a59dea87", "indicator--86c948d3-a0f3-40d4-9ee2-3c5d7baa8dbd", "indicator--a166b704-bfa8-4352-bc15-df2f75055a00", "indicator--a6cb4cd1-7add-480c-b6f0-39af1d03c99b", "indicator--fd787381-7082-4ce1-9f01-c640760b19e9", "indicator--b4c53444-02f6-4052-bd60-462cc9e4ecd7", "indicator--75122a10-4aa3-42ce-a01f-68846b020bcb", "indicator--96ea9721-df16-4735-80d9-971b7c321776", "indicator--402567fe-f897-4834-a68f-8b1afe678f68", "indicator--4efeb222-1a2f-4573-a359-f45810908da6", "indicator--522fd781-ebd8-45a6-8f28-dbf671fe2490", "indicator--76f72123-d8a9-4272-a1ed-9977079accc2", "indicator--f291e7c3-5c24-46fa-b154-4cbda0116627", "indicator--e9403b28-c6fe-42b1-80c8-be8af4e9ffa8", "indicator--07c5fd7a-6d78-4c39-b326-a1df7a23b759", "indicator--42d813b0-f1dc-48e9-97ba-2ff2b92d06b5", "indicator--85759002-cdbb-46a3-8e44-b059d8f16be9", "indicator--e843d430-0b87-4582-8615-47d39515da00", "indicator--f5a8eef4-905b-4788-a261-2f0726e5ddd6", "indicator--c7c88b41-0e57-423d-babe-ef2b4dfcfee1", "indicator--7d5fbf20-80a4-48c9-83ba-d89109920956", "indicator--2ff5ef60-e653-4b91-a532-2d4f029eb3a8", "indicator--7dc144bd-6072-4999-91bd-d8cc6a014183", "indicator--25ff687b-9fce-47ce-81e9-f78565701c83", "indicator--2c1417ac-9ca1-43ee-b3e5-78e76fd12b11", "indicator--e36ccf6e-6305-48da-b2e8-2f9134fd72f4", "indicator--849a31a3-c26f-428d-9764-5fc7d98eb8ca", "indicator--c5224777-37ca-4542-ab4f-fbcd49c8ee9b", "indicator--6d9aaeef-0f8f-4a38-a03e-c87d79632d9e", "indicator--67eeafc1-56d0-4144-abab-cb7ecd3489b8", "indicator--9f00fadf-5874-4ed4-80ad-65cf290ea57d", "indicator--2d549b15-f318-4eb6-83ae-dfba6390fe6b", "indicator--58c54573-bb6a-4e78-8300-f1d4c502b747", "indicator--0167da2d-b9ab-4513-9d61-51798574210f", "indicator--a0e3c1c8-1f0c-4b4a-81f3-96cfdfc8f955", "indicator--24d0a61c-4b62-460b-8e41-411203a621cf", "indicator--55b457c8-b0e6-486f-a030-79bf0a0fc584", "indicator--c6f9e323-c5d1-4757-924e-3c0b6d452766", "indicator--c8c9166c-6804-4160-8ddf-bd401ccdf9fc", "indicator--3057b68b-b53a-4293-be41-a594670e94af", "indicator--ecf626ae-54b2-4e24-a41f-4cd3c5493122", "indicator--c563b249-5f7f-4569-8c93-efdc6a066f8b", "indicator--48f40aa8-fd71-4d1e-b7b9-4f8d23d9e531", "indicator--9b0b20be-de94-46fe-aeef-535f3d1eb8a3", "indicator--328f75a5-e174-4036-aa04-48e5fe26913a", "indicator--15aeff3e-b1d0-4a70-9801-976387a3bc9e", "indicator--f48ab2ff-0be1-4c99-a033-7f9d7322d4f0", "indicator--c011b6a1-f54c-4954-89aa-9ddf699e0f28", "indicator--7138d489-d848-4abb-9546-202cd3d995f8", "indicator--04d3a782-2711-4782-9d7f-3b9c84007daf", "indicator--22361d51-f78d-4f90-97da-0f83f9e16e74", "indicator--5e0f2e9d-bc32-474b-b5d6-0decc8fa6b87", "indicator--374da096-ce63-4a55-b0e4-4fcc2922a9e0", "indicator--aed6c214-dbd5-4c47-a3b2-8ce94932a0c9", "indicator--752dd2a7-5195-4473-9e06-a3cf1004b312", "indicator--cab8f0d3-0e4e-4c73-8968-faa0b51011b0", "indicator--6025f03b-5fae-42d2-a898-8768a6c98f57", "indicator--84bced41-c9b2-4e82-9ec4-93d29ae30b86", "indicator--036f1f3a-28ce-47eb-814b-fb6346fc42d0", "indicator--90a70651-65d5-4bab-a0dc-fec77e0bd0ee", "indicator--3068d155-7196-42fd-ac17-9a505c65dbc5", "indicator--8afd3130-b769-4642-a97c-2b397fc00a1a", "indicator--b74e0f18-f5cb-4737-9e3b-1de29d6abceb", "indicator--77a2c8e7-aeb5-4638-a542-1cc8c83fb71c", "indicator--49a86e92-7ff0-43ef-9cbc-746d0b3c91d7", "indicator--f152fba8-518a-48e5-9f8a-2b708084372e", "indicator--1bb51101-178a-4ece-9958-03c0ab1e1e78", "indicator--20204be5-1242-4a6f-9e06-3eee9e25b7e8", "indicator--14dadfa3-ddf5-4fb8-98d4-33b0b225262a", "indicator--a8446d86-a93e-42c8-a037-26b552c0a1c2", "indicator--0bbf3795-fa1d-49d1-ad54-dad941969ae0", "indicator--db4582c3-bad5-4321-9c22-4f0ccd527a39", "indicator--cc39fe18-a26b-4e19-8129-7dd639396eb3", "indicator--48d03256-ec93-4ae2-8ee6-d3b8b3ee5116", "indicator--92cc8053-7c16-4e38-871c-67d11d91dad7", "indicator--6d77a20f-ec0c-44ae-b878-392db14910fb", "indicator--34bb62ae-4c59-4c1d-971e-865c99f315c2", "indicator--3a37c74e-6914-4779-a4cc-f8da3f3788fa", "indicator--a1066e5f-be00-4f6c-8697-50f14ff43e5a", "indicator--82acf69e-d2d3-4946-bd13-2d4d2b8d214e", "indicator--c06a3198-c960-4bd7-8c5a-e8a784bc14f4", "indicator--13c463ae-d68c-4e99-8fff-2cd43667739e", "indicator--636bad6c-858b-4060-b390-7eeefe6b695c", "indicator--5169b76a-624c-4feb-aca1-1be79ee02983", "indicator--df256069-2b04-4663-839d-b935a1ecf75f", "indicator--112aaae0-02d6-4ff1-997e-5f9217be5c23", "indicator--9989cc04-96d6-4054-a640-0ef27c32826b", "indicator--b0d3918e-d28c-492e-a706-8e44ab42cab0", "indicator--04c89393-56dc-44de-8f9e-c3a5264ebe36", "indicator--44ee7880-880c-4910-8b9d-f384e21c6055", "indicator--7b0b9c4b-63cc-41ac-86a5-6abbf22864ef", "indicator--ced2ac58-98fa-4cd2-a37d-f533500d9fc9", "indicator--7cffdab4-7bb9-444f-9fbc-366058cb0b89", "indicator--de4fd179-43ff-4b0f-93d7-602fb9d1f73d", "indicator--c082b75a-164b-44b1-996b-2c9e050f4874", "indicator--2e20a551-b098-4151-b8ca-6a3ece97affc", "indicator--e45e25fa-a5e4-4991-9f09-9e24d877497b", "indicator--8472cbf6-df16-4719-bf6b-c93dda78d3c4", "indicator--8fbc8695-d267-4821-a708-44af7fbec29e", "indicator--b0385efd-ac87-4bce-9dab-54b5906e6e38", "indicator--6da2dd41-3941-4b48-9b4c-6a6ffbb2275c", "indicator--f4fc2fe9-f715-4dc9-b5b2-8e074fe39fb8", "indicator--18abecbe-a108-40d2-b1a1-2cc3743e69cb", "indicator--1e353264-2c41-4c15-9f02-54f1b524754d", "indicator--f2f85cd8-1513-429a-8888-ce0000ab8cd3", "indicator--6d3ab950-2bf1-473f-af9b-1dbc5850f450", "indicator--db59610a-6ae5-4ca3-94fe-0f4b00763284", "indicator--7657b9ba-5400-4510-a620-8992b5032d9d", "indicator--2f6eb457-2934-415b-b514-4c43cd0ccc85", "indicator--cac6998d-b7bf-49ec-8809-f160282d4419", "indicator--b4e517df-9f94-4e13-8b7f-05282a93ad66", "indicator--80575b81-0b02-4b52-9e15-8707c6790fc2", "indicator--c8989f69-f3b6-443e-8e84-3d358d5638f5", "indicator--d4a35197-ad5d-4875-a89f-5949abc93e9d", "indicator--75d1294a-65c5-4582-b9ff-3d674b0682ff", "indicator--0876fc95-b3fb-45c2-9ea0-ba10cf56b922", "indicator--e7a8b5b7-66c0-4b8b-b88b-8ddcab2f2879", "indicator--0fbe019e-6b57-46c9-9b95-93cd823b54d1", "indicator--37bb17a7-8ca2-48eb-a7a2-81e3241f0e87", "indicator--b99f9da8-5b1b-43a2-8631-fff133ca0aa7", "indicator--ae7607ba-8436-439f-be93-423f95e877dd", "indicator--86d5ad70-e3a5-4ea6-a70b-6787f522f053", "indicator--7d371c64-fde2-4e43-b6a3-1ebfcfe0d425", "indicator--369e2d16-6534-401a-8f59-0b375d940949", "indicator--e3a9ddfd-71d8-4858-906d-77293f70a332", "indicator--0ede1bbd-7b46-4632-ba8c-09c01755cf42", "indicator--35b7e82c-35ac-4b6e-8461-cd590558a7e2", "indicator--5d2373d1-bf11-4cba-82a7-e5bab2eee9cb", "indicator--dac24b9d-4738-470c-8bbf-bfcc59546a5b", "indicator--f418fd5f-e356-4e01-b839-8a0408515563", "indicator--056cb09a-eccc-4c29-b643-efbbc8291f0f", "indicator--dac7916b-4a26-486b-8115-57b0c899b1bb", "indicator--c362265b-7c83-4a32-a95d-ea908bb41ed9", "indicator--4ff88ea5-916d-49ac-971f-a1b73d76f061", "indicator--e1d7e072-eb0f-4825-8d50-c36ee24b24fa", "indicator--727f3075-a744-48e3-bf59-7ef27d8bc7f8", "indicator--937069a1-ed0d-448a-a07b-175c64823bae", "indicator--1d7fe3f9-15a9-42e7-bafc-46d0c66bdd29", "indicator--b36e0f23-78aa-4ed2-afd2-a3334e8f30c0", "indicator--39157ec6-84ed-4aaa-beda-4d7d8431c3ff", "indicator--b3b807d7-375a-434f-839e-0a367dec33e0", "indicator--16361379-bd25-4586-a89f-124f4f80bf1d", "indicator--497a8829-2d2d-4019-8882-5fb50f7fdfb2", "indicator--a0c71157-ca17-40b5-abb6-55038f6b2699", "indicator--e10a62a8-cbb6-40ed-a419-c521cb72dee0", "indicator--817f4317-61a1-46a6-85da-4fc96f58fb15", "indicator--6aa409bc-b7ea-46dd-b740-5eeb085d60b0", "indicator--01b9121e-27df-4970-9706-39975a6a7cb1", "indicator--969354d8-3077-4005-a2ad-e9233bbff864", "indicator--7121cd52-f329-4349-9d3c-f7a67b424eb4", "indicator--70e4cdba-00e7-4b4b-a1e4-5964f6accd53", "indicator--0da050d3-80e7-4419-8eea-ad279feb66e4", "indicator--dac08be1-da49-4415-9f52-ae344aa91c3b", "indicator--7632b23e-7845-469d-bf20-a56fb7cba478", "indicator--1e668635-9a08-42c5-a45f-fb3e70a6f802", "indicator--cdbca0ef-685d-4782-8eba-3a0231b26e64", "indicator--f6985ba5-883e-4255-b70f-d1e0bdf6920a", "indicator--c41f3cdf-a493-4ec0-ae5c-d30733ad40ab", "indicator--3abe9224-3a2e-4cef-9f91-82197b0d08aa", "indicator--4f38d550-26c5-434c-9998-6c408e58643d", "indicator--b1c1702c-4c71-480b-ae22-ea1f7ca57cbf", "indicator--beb82d40-3197-4b8e-91ff-64fe37878639", "indicator--67198a99-7e21-4fb0-86e6-84720baef52b", "indicator--5ad17186-f5da-4526-a93c-ca74f524ebf6", "indicator--fa22f6c4-9efc-4275-81e6-b242a4c1faf5", "indicator--d8e8f2a6-ffc3-4b07-9eb0-9afb8e839299", "indicator--b1c83b65-ff26-4433-aa1c-bda473bbcc78", "indicator--12c755ee-bc54-4433-894d-11e775f8454d", "indicator--81331551-ef7f-4501-bf49-f145f0815c7d", "indicator--74b305ec-6a20-4728-b1d2-5588625bb902", "indicator--fd432612-4978-4e9e-a708-7cdc252854df", "indicator--13761873-4faa-4532-8769-700c04044980", "indicator--906d34b3-a5ec-49c1-a9cb-7b05b555942a", "indicator--e573f606-df05-4592-8365-6f826b4bcbed", "indicator--37a6ed23-9c5e-46e7-807a-394687b6a506", "indicator--03de6f45-54d7-436a-a840-21f55b12bb12", "indicator--2c1ab0f6-de14-40ed-9cf4-13d90ea02f3b", "indicator--f42240df-b3bf-4d9b-a5e0-e3fecf853b6b", "indicator--aafd2857-1f06-4773-a732-7469964f3c95", "indicator--b23aa30c-aa63-4d29-8c13-6c8372f02dbb", "indicator--e243bda6-fac8-4fd7-9283-e1b9112d1cda", "indicator--d0bd321d-7945-458f-9797-6ee0c6029fa7", "indicator--e263141b-ed27-474c-95c7-1077691d81ea", "indicator--6998fdf9-c91a-4f43-891e-93db4958b025", "indicator--bdc81b04-dc58-401a-ad5e-8ec840295b9c", "indicator--d3f48b2c-4479-47d1-b384-a6be246a8ab6", "indicator--506aa0a4-9947-4e47-bfda-08d56bf6499b", "indicator--7a63201f-4aef-4ee1-ae9c-56cd3db4d242", "indicator--6922f189-656d-47a3-b9ba-c6f10fb2706d", "indicator--b7de604d-6a0f-45cb-8439-bb3be725bc20", "indicator--ad7c25b0-706f-4c9c-b4ac-44b4838a25b0", "indicator--11cb3cb6-3a88-4c55-b7ee-f0053fb23728", "indicator--e56b24db-5f40-4313-968f-9f030bc28110", "indicator--c1003699-d2e6-4f1c-b9ce-d270827eb0ea", "indicator--15dbe348-ed83-470c-9744-1aa464543261", "indicator--249a1471-4d9a-4032-8f92-c414110dd1f5", "indicator--572b1563-1e9f-4815-9cd6-ffd35caf010f", "indicator--e0f5460b-4420-46e0-9197-64004943a6d5", "indicator--ce9b2bfd-c9ba-4336-9dee-8c340ef0a642", "indicator--32555213-eb26-4118-b22c-25b435ffbde3", "indicator--9ef4b942-143a-497e-a2cf-e8565e9f4bd6", "indicator--8c20dbbf-ce62-401d-908f-4683e6740799", "indicator--94887720-c671-4848-8550-e6108a04a7f5", "indicator--9aeb4a73-7402-4489-ab46-68f6e7d2b91d", "indicator--eceec770-07e6-46e2-8f90-c5b428b36983", "indicator--111e44a2-35a9-421f-88dd-2fe44aac1363", "indicator--dd06e668-e519-4416-8e78-e2925f831f28", "indicator--0171f7c2-8f33-47d4-9f22-0dfba4c959dd", "indicator--672b97c4-ab65-49a4-9613-92a555cba099", "indicator--9ac0d628-53e3-4274-a664-a1b20b770923", "indicator--ec6ac8e8-a0f0-410e-a03e-0fc0d985c227", "indicator--980aa33b-ef98-4de6-a91f-d3003b24ae8b", "indicator--bb0c838a-e0a0-44be-8ad2-eb8760e4ca79", "indicator--0330c543-9281-48aa-a57b-5c56f7b2199b", "indicator--d349c348-ad46-47cd-801f-c9cd57b266d1", "indicator--eaf49771-ff71-4aa8-b4c9-3927bff3a0fb", "indicator--a056775f-ccfa-4543-80ef-94cb11aea876", "indicator--7d9a9dc9-5066-4a89-838f-43ce919330da", "indicator--ebea3e0b-d419-482a-ad7f-d14ace1eb313", "indicator--ec14682b-3e21-4e65-b400-279f196c5738", "indicator--d3f865d3-2d39-4463-ac38-d3b921b8065e", "indicator--7081f613-bd22-4bec-a66e-dcddf0ee7880", "indicator--f9d66482-5902-45bb-9b62-3b83409dd00c", "indicator--b398ba92-0efa-46cb-862e-f8084a018276", "indicator--d68db27f-72d4-4761-b074-99dba8b3ee32", "indicator--eaab7f68-5eba-40c6-8be5-d95922ce0724", "indicator--0de6c350-c18b-486d-8611-7c73d6d68389", "indicator--c2e00bf5-1752-4025-b984-c57af9307164", "indicator--e3a8ee9b-688e-4dbf-879a-4ae847f87c13", "indicator--aaa3fc6c-98fa-46bc-a246-012f5684943d", "indicator--afde1d35-001a-4aa7-91cd-1d0f794185c8", "indicator--da73f08b-8014-4daf-bdc9-9d58cb236c31", "indicator--aab45cac-e120-4b04-8895-a2840079a030", "indicator--752804fe-0697-4007-9a4e-555c7e34d53e", "indicator--37b314f8-87eb-4437-b0f7-59244b30598c", "indicator--b8ea7f63-4c16-462e-9119-cd8b27fc412b", "indicator--659dae25-ed0c-4956-8a96-ca54fc54353a", "indicator--0044cac8-194b-48dd-85a9-5f77696035c7", "indicator--474aad39-db02-45ec-b927-35dfcd816c57", "indicator--90e53083-a7a5-48e6-a10e-2dc0d630689c", "indicator--5b72498d-5cbd-495f-aab2-4b49d193f062", "indicator--9b142f87-3a44-4658-add4-53c00676c49d", "indicator--23956d4e-c1b9-4fb4-9167-0d060d059ccd", "indicator--c049709b-7dbc-4ea4-bd01-c53d2adf1b19", "indicator--5cdd23f3-0cb8-4e7c-ba5d-6b6578f5adb6", "indicator--8d3c7a69-bf1c-478b-8769-8894c21befbb", "indicator--9c4f412c-a48b-4bbb-9a8f-7b3dfe5b7dbd", "indicator--fca52bc5-1dca-4452-888d-6e6bbce458ba", "indicator--73661952-8082-43be-aea9-28064b73c502", "indicator--9b47c285-992b-4aa0-a194-5e125f1c361f", "indicator--a1b98963-8fc4-45a9-bcfd-90d2b11175c1", "indicator--6fab34a4-dc67-4065-b612-086fbd090584", "indicator--4e58340e-b72d-4b90-a310-6f298ca18ca7", "indicator--ebc14fb4-baac-429a-a898-b0ba1cd318ab", "indicator--d5564b3e-0c24-4eba-acbf-e83abe10fbd8", "indicator--9f99f112-6e54-4844-b199-fc2c951ff89e", "indicator--dbd5b44b-20fd-4a08-9e6a-8382fc30b993", "indicator--1fbe3c01-9aea-44ea-928a-4eb728a53949", "indicator--0a7bfee2-f124-4bed-af2f-4fae262ba7f5", "indicator--c39cae88-f0f4-458f-beeb-da5fb8dfaa15", "indicator--3e88b7cd-fbb8-40c3-95e2-88effffed0af", "indicator--8b65fe21-895f-4f0a-b6dd-920bfb7f1dc3", "indicator--3c475600-d40d-4324-850d-36584f281f42", "indicator--c2b08052-3275-4ddb-bb6e-143817ecf389", "indicator--6007b40e-573c-4ce9-83e6-2bf24969ec06", "indicator--3b8d9ecf-d546-4bfd-938e-217558ff4879", "indicator--bce279c2-3836-4181-ada4-46072d26aae3", "indicator--ae12f845-22a5-49fb-b185-06794b9adb07", "indicator--51f828da-8008-4d02-9b64-862475f6811a", "indicator--6c241330-7c15-422d-a3e9-e815e673002c", "indicator--9472e34a-4306-4ecc-a22a-e742d9f5562f", "indicator--13982136-5bcc-48ab-8294-07aa95d70874", "indicator--5c391e9f-a659-49ad-a932-91f94dc6dd39", "indicator--4b74ced1-08c7-4ea5-89a4-120526e3f84c", "indicator--cf357c50-6c6e-47b4-ba3b-7a5b4cd18889", "indicator--c930328c-4638-450c-9601-456b7cb27042", "indicator--cc4f48d8-c6f8-4857-9db9-31b9efad8da8", "indicator--9f72fa14-2a97-43f0-9b79-18553684308d", "indicator--ffebaaef-9469-4065-ac7e-e45adcb3e76f", "indicator--edfd892a-eaec-41b4-9c7d-c02ade0c03d1", "indicator--198447fa-3885-48b9-bf29-cb5f85a1c1c1", "indicator--6d3b0f08-3bbb-479e-a515-3b2ee1b94375", "indicator--603fb68c-c967-47da-bc54-6e9e15b401e2", "indicator--32112cd5-6e2f-4c8e-8439-3c0ed9b67bd9", "indicator--a02b6adb-1877-486f-b6b9-b61d34b134d7", "indicator--6521202e-e07d-4c3f-9542-eacd17c8680b", "indicator--52f7d78b-06a1-453e-82f6-f3e30ee9222c", "indicator--608bde01-d4d4-484e-a36b-44c024a9802a", "indicator--96b4e108-daf0-485f-ac77-ee75a2af4738", "indicator--4497a068-3e3e-4f61-a557-3cd79eb3c388", "indicator--8bb99928-562c-40e6-a235-7ba092e74194", "indicator--e07ec38b-7107-40ab-9f8b-6dbb625bf2f4", "indicator--ecdda0f9-0b5c-4eb0-a55a-c1268d1edc31", "indicator--64a192bc-18c0-48d2-9a2f-9379d427b200", "indicator--abbbda55-1780-49ef-b131-bd84e878bbba", "indicator--53e655fc-b12d-4034-b6c8-f5b130885684", "indicator--0fee1913-773a-4422-a9d9-a1e2c54e5612", "indicator--69cbbcce-d6a5-4a6b-8bcf-b4000890ef43", "indicator--2acdd77b-8bbd-45f5-a9f3-980651311460", "indicator--2d04b7cb-c70b-480d-8251-ecb5e64bbae3", "indicator--60271119-0a11-4352-b22b-e2e940203143", "indicator--f42ce193-76d6-4c8a-93c5-57b52c5b37ee", "indicator--a3b6b481-8059-4201-a8d6-da4bfc9ac847", "indicator--c8b27c89-2889-40d5-bbd4-4d0633cc0267", "indicator--c371cb33-1e7d-4208-9c24-67118af5a3a1", "indicator--0f980640-cd1a-484c-b38d-3287f637048a", "indicator--7ae8ad36-3a5b-405a-a6f7-16c631050e9a", "indicator--b4398764-c972-4092-9192-bc82c2a7c7d1", "indicator--af3835bf-a81d-4512-a78e-8842fc765716", "indicator--c2f2246c-eb51-463f-b66b-42efb8976356", "indicator--e802d359-1918-4a90-8368-e95dbd8c1be4", "indicator--1c3fd4d3-4dc5-4764-82a9-7ad68e427e1b", "indicator--84675936-c9db-4a26-bfc1-01a1ff951177", "indicator--edc7befe-692e-48bf-8ff6-485c91df52c8", "indicator--9d2ddbb7-8be3-406b-8d2f-58636cef3347", "indicator--5185d2a4-4085-48bc-bacf-977d4e78a99f", "indicator--f76e3da3-0348-4ea7-9470-4a863016f447", "indicator--66c92852-f9d9-4306-81d7-91169979c7c5", "indicator--ad72b77b-5f51-4bf4-84d2-ada906cbe54c", "indicator--ebf80304-f5c6-45ef-ba94-31b4226ac274", "indicator--027c3baa-002d-4cea-be2b-150b397d29aa", "indicator--0cc1ddca-3c7f-478f-9ebb-dbfd1c55128d", "indicator--40fb1b7f-577b-47e3-a151-ec810cdc9feb", "indicator--ac50e6c3-7ce7-4740-9dda-ece28c9c0610", "indicator--b11f3e07-4c1b-4cee-aae6-2d7244cf6a06", "indicator--ca205a77-91c3-4412-a23b-7c34802a692c", "indicator--1f476f8d-f726-41a4-b342-3a2080c63444", "indicator--1637dd61-6d87-4c68-8c79-64705bb6a323", "indicator--91c95e1e-c317-4101-9b7c-a0cc295741f8", "indicator--749fa2c8-0598-41b5-8ebc-117c74c34a31", "indicator--57a5e57b-0a45-4ada-87fd-c45cc15dedcd", "indicator--d04a658c-eceb-49a5-839a-2d3f71f11b21", "indicator--6d3246a9-99f5-4b43-8ad4-a0b92c82b999", "indicator--0c9577f5-57c6-45ae-a98c-1e10931a88dc", "indicator--b9e1f4a7-79a9-47cd-8b38-7d91c696047c", "indicator--d3cbc653-6a9b-4403-aefc-783aa3cd7fec", "indicator--9ca94d57-0d05-4c3c-88c8-f9741ce10dc5", "indicator--e78b2d41-7c69-47e7-8f5f-fca5698d71e1", "indicator--4b6f68e4-91ab-4868-aea8-e3e9ec6ef26e", "indicator--eafab26c-4178-4fe1-a614-fa802fd66dd1", "indicator--4db2dd31-6fd0-4723-8c96-63fd0a6722d0", "indicator--6b19d3e6-58f2-4e52-979b-5dcbb122e715", "indicator--50362d89-7bd7-4112-a0ec-c6c1a010810d", "indicator--abefec45-ae4a-4174-8624-e5d51d86e49c", "indicator--8389b483-a7b1-4ef9-bbe8-2f95f280d904", "indicator--30e5e249-c579-4cd0-864f-7f3cdc5730e8", "indicator--98d81e15-2836-459f-b9bd-bae3994656af", "indicator--cea6e5d4-fd1d-4d14-a237-6cd3f1468b2e", "indicator--e0d9aee2-9037-4984-ad79-051cdcee649c", "indicator--1d3131cd-fbb1-43aa-87d3-857067a91358", "indicator--acd34396-052d-4108-b435-887e112d448e", "indicator--4d32f6df-fef5-41dc-8171-8558d44413a3", "indicator--f2e35c0b-6a50-48d0-81a7-6ba74a3f9af3", "indicator--1433060a-c830-406b-93e5-b2c62f6fa621", "indicator--37e63b1b-8652-4c60-83fb-6694ac20230b", "indicator--5adade9e-162f-42bb-aef3-fcf3f260e84c", "indicator--27f62d4c-88f3-49fc-a967-d38fb4d4f304", "indicator--b835e666-36e7-40f5-b0f9-b0377fc1ba5a", "indicator--e05466f2-c707-48ee-bbb4-65bced24d482", "indicator--9ccb16ac-570f-4398-97c6-3be5c1dac5f8", "indicator--1d01a498-cbf0-45bc-af48-7738df6ad697", "indicator--a7b89dab-c3b6-4a72-bdb3-ca2cd921c594", "indicator--372ee0c6-5cae-4164-8e76-adddcd78bf99", "indicator--8923a3bd-9488-4f23-8de6-4995936d2deb", "indicator--12ec174e-ab46-4521-9304-de534d499bff", "indicator--562dd71f-912e-4f77-a8d5-cbc27548e68e", "indicator--b1ddabb7-0263-4160-8a0e-036007c2e294", "indicator--73cec2cc-962f-4701-86c0-67a7e383a30d", "indicator--cc3ae4e2-9550-4414-9d7c-ca978642d90d", "indicator--210916ad-de2e-421d-87fa-94858e82214b", "indicator--66ba9c07-b016-486e-9db4-1f1247818fe7", "indicator--6a01ec2d-30f8-4824-9a5c-b9a04f9ac0da", "indicator--1b5fe6a1-ed39-4627-883b-d4abb043c916", "indicator--1f5e07e1-0722-42b7-9d65-9e6d9aaf0183", "indicator--6d1bad2c-ff9a-4c8a-96bd-7b172afa1aae", "indicator--efca596a-7c77-4ccf-8f32-5220e9d88b04", "indicator--d2cca21b-0430-4197-b438-ea08120df8cd", "indicator--ba5ccea4-e323-4e55-9e12-dc0b62241522", "indicator--8ec256fa-b846-4b75-96ba-c61aebf5f3a3", "indicator--61a0c179-6c7b-4cb4-a5db-86f786673986", "indicator--1e9ec54a-4bcb-4f53-ae14-97b4bc854f3e", "indicator--960b798a-d7f3-4e1d-8a85-6b48b227c060", "indicator--2551f1ea-c0ed-4a23-9531-7c6ef2829a44", "indicator--5b82e23e-2a2b-4371-af6d-25aa7022d1d1", "indicator--8d13d2bf-686f-4c4d-bba9-d914659f71dc", "indicator--42aea973-8b93-48f5-af71-1ceb255c0a56", "indicator--88940e0a-8853-4245-bd2b-b77de301d03e", "indicator--dbdf3a05-e992-4c11-a6f7-a315b57f6bff", "indicator--2e5376b0-b29e-4435-964f-33be7d9c84b0", "indicator--1972bd8f-d575-4918-86c0-19b14fd0c3cf", "indicator--0dc19d63-6620-4f9b-8b9c-e0933e8f2751", "indicator--ac9be95e-16ba-404b-b08d-a0d0300d5cf0", "indicator--4073fc77-adfd-4298-a2b5-a4610a2e7da7", "indicator--e28d247f-0832-4286-85ea-19c15ed9c8b4", "indicator--f8540945-7d53-421b-97a0-5cb427623e29", "indicator--4ec1147c-e91a-4200-a369-2cd58d393a01", "indicator--fb9eccfb-cbd9-416f-96a6-86210f05cb6e", "indicator--21b0b643-cc50-4176-9e44-d5a1eb3aa4a8", "indicator--e7b8c81d-a790-4bd4-83fe-35f8bfd1a177", "indicator--93a9530a-28fa-4b28-b0b2-0af0eff08025", "indicator--58cf2593-c343-4db1-a955-eb0b9c8bac70", "indicator--e264fded-958c-4183-9c08-0367d271ccec", "indicator--c062bac3-5023-44dc-94c7-bb054ed5b17e", "indicator--f89494d1-13cb-4aef-b6b4-c14007b09bd0", "indicator--ed5e7209-98ee-4810-8947-bd83095cd043", "indicator--56df6547-0015-42f7-aa6f-04f3359e196c", "indicator--18c94649-6b18-4383-a77d-17560ec48dcb", "indicator--b83a82a3-ba58-4b81-9dd6-a1095ecf8e79", "indicator--48cf5d50-75bc-4be5-aae5-f435904e68b1", "indicator--175feab3-bc4c-4bf8-8749-f67f135ab5ea", "indicator--f2162c51-ef01-4a08-a0df-b2911c25ec23", "indicator--0ef56408-b57c-412b-b0b9-0c45fc794a6e", "indicator--081d1a82-ee91-459b-b7b4-cdabbe3075fd", "indicator--524227b1-cd27-4be4-b2e1-07b7240d810c", "indicator--cbfe9fc4-1aac-4062-92b8-d98063b6012d", "indicator--83fe01e8-f024-4f6b-9219-014cb540d385", "indicator--148052e5-a79f-45a4-9ebc-c7c386384b9a", "indicator--3d1aa80f-3b30-4c99-9024-7e443ffcdde7", "indicator--32933cb6-d151-49fb-bedf-f01ee7375e27", "indicator--9ed12462-aebb-48b4-bf35-082f8128c978", "indicator--bff38b21-58a9-451d-831e-59cbea2970fe", "indicator--d318bca8-81b0-48c9-8c11-6aedf658837b", "indicator--a2cc2473-ac14-4288-a60e-596344163d86", "indicator--d3f8dbef-cc5f-4ef3-a9bc-dccc23cb1ad7", "indicator--d448e8c0-1c1d-4c6e-9574-a3a877769108", "indicator--cbb7b437-bbd4-4395-b51d-95dc2f91ab4f", "indicator--d6b23940-9309-4f4d-a622-68d7a8794ccd", "indicator--2362ade1-a1f5-4be7-863b-b1ab62ee6e6e", "indicator--ceb27547-898d-4851-a2f4-f1a460d75ef9", "indicator--824b62f9-e2d8-4d68-8cac-0972a521de96", "indicator--4d6cb99b-b4cd-406a-a626-9d453fd14116", "indicator--f9d1df1b-2c72-4329-9287-514c98cd6227", "indicator--1fd305fa-73d3-4d9e-9e55-4d0ca1012c09", "indicator--33541a19-2389-48a0-bda0-f5487c85ad55", "indicator--be630338-d231-4110-9e45-e674d473bfc1", "indicator--dc736a2b-bebf-45ee-a9c4-3c4631b679cf", "indicator--570de263-aa3d-4abc-b0d1-341885dd2036", "indicator--74e183ed-f6b1-4400-bc48-8591cde76423", "indicator--21eedfd4-a5ae-446a-a63c-d15b7f0ac399", "indicator--300478db-79a3-47bd-bc57-e6331a882c92", "indicator--fe628e05-3f39-4a3b-ab71-00791544ed9b", "indicator--ec70cfde-8827-4afe-96f5-988d640f38d4", "indicator--8ad7359f-0e62-4fad-8b7a-088a71e34a4a", "indicator--91187176-151e-4c66-970e-4f6ccc5ee876", "indicator--489c6ff2-b4f7-477d-90ad-876d597fdf51", "indicator--542e331e-c0a7-46ba-8f5d-d8f36cf2cde5", "indicator--d2350307-084d-4ea1-bd77-c300a47dcc29", "indicator--0bd62b1f-212b-43b7-a2fb-d39eb3d25fb2", "indicator--525318e3-afe4-46c3-aa53-9af53a8fae94", "indicator--b9fcfecf-1bf3-450b-8f10-1ebbfaca28d2", "indicator--83df7759-15aa-442e-a800-2d5ed696bb98", "indicator--3251c21e-ffb3-4b21-a74c-d620f2941b87", "indicator--89b55798-c3f4-431e-b07d-28ecac1c5e85", "indicator--892e8500-a9a8-4ce5-9a7f-caaf5714aa66", "indicator--04f20b0f-449d-44b7-8eea-cf59302275af", "indicator--0c431fde-dfe2-4ee0-b0bf-816c889d3a80", "indicator--d26ade00-2084-4e7f-a656-0c078149fab7", "indicator--93ab5f15-1d4d-453b-8105-e1eb222365d8", "indicator--77120f6c-4191-4253-b2fe-0a65746f3f05", "indicator--f6fec57f-0e03-4c35-8bac-e6f8744933ba", "indicator--ad27363f-f085-4d6e-bf98-ed0e54f3be59", "indicator--c3ecddc4-0926-4885-ad54-f6ddfc278e67", "indicator--bf4a54be-fdc7-4048-9306-f42ab292ef46", "indicator--88eaa0e0-afb9-4113-b17f-8c92d0bfefec", "indicator--4df6f997-891d-453f-9a5c-c69e6c5e39f3", "indicator--6a3595ce-1193-4728-98e4-62ef1ac0812a", "indicator--3aaaf6ff-a328-46eb-bbb0-f752aacae357", "indicator--e1607f10-e6be-45f4-a93b-dd4623caf3be", "indicator--12451562-a9cf-4529-9ede-8de0c7926754", "indicator--23fd1b09-f9fb-479f-95ad-779feee5de2f", "indicator--6387bc29-1067-4677-8295-a655d1e037f7", "indicator--1240b927-cdba-4f5c-a94f-f543bca0bd03", "indicator--168241b0-f322-4bb7-bb7b-119964fa504f", "indicator--776aab1b-f4bb-40ff-84c4-dd6cf0480fcf", "indicator--84252f74-9afa-41c6-88ce-2e9757947ae0", "indicator--30f9e9a8-37ad-4ff8-b79b-78c39d57d88c", "indicator--6781b325-c97a-40db-b079-2f25b9730318", "indicator--4a9a2976-831f-46ca-a0c9-e88c1df1e8c4", "indicator--3cae41f6-fea4-46eb-b09d-3033d6473af8", "indicator--2e733e11-298c-4350-b89f-a95969131f73", "indicator--b957eb41-1093-4987-8efe-409bacfe6226", "indicator--1cf978b6-ab4c-4412-b009-c22f6b8072e6", "indicator--e00a66d0-ccbb-4cb9-9533-0b1ce8f24f34", "indicator--9651123f-1cac-40df-aac1-3c8de1f883b7", "indicator--b79c6545-5a11-4c13-8049-acad55c734c0", "indicator--02345d3d-0116-4f8b-93db-f37de3c78269", "indicator--af6d6844-b903-4998-b7af-704cf3d8d505", "indicator--f77f3a7d-6726-4bbf-b19f-064e5b9dc2fd", "indicator--3dffcfdb-fc4c-42a6-9dcc-24807c1d9aa5", "indicator--5284c43d-7d89-4293-90a2-5b8543acd2fa", "indicator--34ecd1bf-64ea-4ea9-8924-5b66137863d0", "indicator--d8508f66-de50-469c-9e4a-fac12bac9b93", "indicator--6fdbf19a-e5bc-49c2-b36d-1b9ba4310681", "indicator--1b7af4be-a812-4c0c-b5e8-b2d4aa2f8872", "indicator--c497f1ed-2572-4c82-8657-8008d3a168fe", "indicator--43939111-17d4-4a29-8aa9-763bfaa3cc3b", "indicator--aab28fbc-20d2-49fd-ac22-0f3d7eb2690a", "indicator--d0d478d4-6d2a-4ad9-a3a1-751e07e69ed6", "indicator--d92425cd-347f-4ee6-994f-2b61372972a3", "indicator--41805212-2e04-490b-b3ca-e6f031cd8222", "indicator--258faf3b-8b9d-435f-b03d-d2fa4b994181", "indicator--b9026e0d-072f-49f0-823f-b7e4b90b9617", "indicator--491bee70-6d8f-48a3-a6fa-ffc74f24eea9", "indicator--1f4368e7-29bf-4d27-a4c4-8b884b91d6bc", "indicator--cf9fe0f3-6079-4892-a4a3-ef352eeae2eb", "indicator--88a43e1c-b593-4d49-947b-36214a57ee69", "indicator--faef106a-6953-405f-9d52-37facaace5a2", "indicator--155fc65f-ea57-4681-8c06-6aabaaf296ef", "indicator--28edc11e-3e56-47d7-bd61-74f86472cba1", "indicator--d72b29a6-2366-4608-b4de-5d96596ba2ee", "indicator--c69c861d-c0b9-4372-a599-8791068198e4", "indicator--32a5cb83-85ea-4ffc-b731-d194760448bb", "indicator--05c56f93-4c60-4667-8830-278bd294225b", "indicator--48250952-e8a0-4939-be55-48bfa5932b22", "indicator--314a878d-40af-4ab5-b594-49f7a45672f9", "indicator--139e619f-98a1-4841-a69b-6a7d3580f0b5", "indicator--5ee947f8-92f6-4cfc-b985-6b9830348c95", "indicator--30bbd1cc-e2b6-4b28-9cd8-22ea388d8ead", "indicator--8fd8fdad-0fe8-4a31-ac28-95b010b068b6", "indicator--b26cf81a-ea1d-4bf5-ae1c-4ecc1f613f7a", "indicator--f098fe4f-2f00-4bc6-9454-9fb6204635db", "indicator--eecab3cc-3e03-4c4a-93c4-1f916c443906", "indicator--832afab8-e738-47f6-ad41-ce0fa420c3ea", "indicator--dc182a0d-b617-4ff5-8eae-04347904f38e", "indicator--a83749cb-973f-4e0c-be4d-2fca823566f7", "indicator--a2d12056-819e-4502-b7e6-d0cd6a4a4628", "indicator--14b8d9e9-34b1-4c7c-b939-9f6cab380f26", "indicator--6415f6cd-b1be-4b1d-aa49-49eae1e43a53", "indicator--30ad981b-83e5-4a48-80ee-15ad37378440", "indicator--daf651d4-db07-499d-a831-7153eed03130", "indicator--21cfcc53-6330-4e38-89f8-bab6faaedac6", "indicator--5830f94c-e85e-4470-9d2e-3f242f8c3069", "indicator--706f9d92-54cd-4e18-8640-bab23c91ccbd", "indicator--b5de7a8f-f8b7-4d6a-80dc-167068ea5283", "indicator--617812cb-1fbf-428f-b8b2-fa90e3e75176", "indicator--bcd77e7d-1755-4aca-a364-ee5bf46c8576", "indicator--d4412a02-4b1a-44d5-84bb-a975fac1754e", "indicator--8ab06fae-22f3-4a95-9736-d02d3157af7d", "indicator--962e1668-46a2-43fc-8205-2b8300247ad7", "indicator--e060d3a3-3c8b-416e-8775-192a4fa7be54", "indicator--8f727e1c-3b72-4c99-b808-c52c6812dbe8", "indicator--1b74157d-7e88-47bf-85b5-32dd795f618d", "indicator--93cec63b-f360-4e5f-9608-64c943291daa", "indicator--489421bc-05f7-4e08-9300-cdcb547dcdc3", "indicator--6da2d402-0295-455b-9579-b01d0349ec34", "indicator--9c4d7ab9-7d2d-41a7-9c37-b7a7323927bf", "indicator--46807ff3-b218-4912-8c4a-d60efc3f4ae9", "indicator--77727458-421d-450b-b0ec-9c58309a6e5d", "indicator--e42cd4f3-dbd4-4088-8cd0-fc9a233604f4", "indicator--748dec31-ecd3-4c6e-a85d-08e42bb52e2d", "indicator--6327e090-9e94-4bc6-b574-5929dd19209f", "indicator--47b67951-64e2-4ea1-a3dd-c1d531fa5140", "indicator--fc31bca8-f245-4b61-a2de-7c6465d3bba5", "indicator--997c5692-df2d-48e4-be32-e91ba45fa19e", "indicator--623bda54-e155-4709-b70e-570438bdbb3c", "indicator--dac11e0d-a40e-48b5-88b4-966d18fd7b06", "indicator--f575fd75-5fe1-4598-8164-4751a84e6a0d", "indicator--ee082b57-7790-4a90-86c6-211716d0a33b", "indicator--5c2ab505-98eb-4d61-a73f-ae294a5e9e69", "indicator--cc485509-6983-44f4-8a4b-66ba258ed73d", "indicator--ea43ae40-a1c1-4e7e-ac75-14e76297f76c", "indicator--719705f4-2c53-437c-ac5a-b67a9f10eff2", "indicator--b7b46661-3c88-4e2e-953f-d86a29af007b", "indicator--99e5f0ef-37a3-43e9-9f76-e3bc5331ebcf", "indicator--7395d2e1-7862-4828-8932-2965815767c8", "indicator--f145ba71-ae65-433e-a27b-44ac47175fbd", "indicator--65f74e67-12be-429e-bcf4-5e6a6c730280", "indicator--02ef4f5a-afa1-4aae-af21-a0ca4fd43a18", "indicator--8ba64983-151f-49cc-bc19-a1c0aeea7e4b", "indicator--cc38e507-2373-4bf1-8508-095cbf2ffba8", "indicator--6c3c40d1-7c91-4b81-a8ec-be8020b81ecb", "indicator--0feefdb3-f6c5-4e03-8ece-4cd2cb90f922", "indicator--6d3d3f83-7fc8-497d-a3c5-3f489a14ef02", "indicator--ecd78126-ff85-4104-bea5-5a825fd092a5", "indicator--c8dcbb94-8310-464f-9c8c-03d4e2dcc295", "indicator--190ab2dc-cdd4-42d4-80c3-04748724bece", "indicator--8cb25e85-8c61-44e6-a3ca-86aa747d5935", "indicator--f23b480a-4cc8-40d2-83be-fb4f8d8da88f", "indicator--9c9fd446-70f8-4181-98b1-40757072e9c9", "indicator--04b46cef-a725-4685-a4ef-2040326bdf8c", "indicator--b12c9b94-d93b-450b-83ec-467da69c6c7c", "indicator--ae61708c-da23-4fbc-97c1-e022b9fb8c2d", "indicator--33d539e7-3e8a-46b2-862c-632ace30fe0f", "indicator--b61558e8-3826-42f9-9aca-e0d970ea6dc0", "indicator--02bf4896-391f-4bd7-ac9e-63771d04198d", "indicator--5b2b58ee-a01b-435d-980e-8ac4a70f5163", "indicator--70d33874-c7c2-4d37-883f-ee56ce906a5d", "indicator--1000c013-1c03-4aba-bfee-4ccf02be4494", "indicator--b8113266-3736-42a6-94a0-68faf95e8b9c", "indicator--bd6057c4-0346-45e4-9fb3-657bba960e4b", "indicator--bcd5cb66-c9b9-401e-8e20-507bf1287382", "indicator--117d4435-599e-4503-8367-c6792210ccc6", "indicator--cd28ebe6-a580-4cda-8c3f-b80a56a373e0", "indicator--37fdf10d-9873-4120-8333-e3befbd275e2", "indicator--16c5ee6e-b957-457f-adc1-64293563bad0", "indicator--9677f696-bfd3-460f-8104-e60dc4e8ae1b", "indicator--0040c302-5640-4ad3-bf7b-7f439a8c200d", "indicator--5218b701-1550-4ec0-a8fe-05d969b86459", "indicator--863ca295-877d-4d04-88c6-fd0ebf27f3e0", "indicator--54a956ce-0531-467d-a7af-0f9f076652cf", "indicator--0edfa03d-5e7d-4d2a-9df2-198f00b79ac6", "indicator--72136c99-aa28-466f-a14d-92a4b224ccc9", "indicator--cb251ffa-8870-45ae-8815-20518deb7fe0", "indicator--658dd5ef-3922-437c-86dc-32dd1cbbb92a", "indicator--9832da73-c2a1-4e5e-aa16-16230f173972", "indicator--5e563edc-e9fb-47ec-a68e-8a8a36ce5036", "indicator--d5b31354-a78c-4c53-aaf0-9179a7dbc897", "indicator--c7fcf383-e9f9-4c54-b483-d361fc310e92", "indicator--82706eed-d3d4-4101-862a-da71d6a88047", "indicator--bb32f00d-d5a5-4cb6-9959-191ffc897de3", "indicator--23494584-f484-4bfe-9004-2567b2b4d1e0", "indicator--3ae2f355-fece-4e9d-a06a-a512006b4798", "indicator--026a66da-6260-4072-8ad6-1d6a2b827c68", "indicator--06ef602d-1010-4f7f-9114-86230a1d947f", "indicator--0357f5bf-aea6-438a-8554-8a682b7dbf2e", "indicator--0b7bbeb4-852e-4631-82df-5d3f9f8d65a4", "indicator--2c7733ba-f5b3-4412-b605-e61d5312b023", "indicator--e7acb24e-5ddc-4590-9b4c-e5ea42d89f82", "indicator--f0239653-eb8e-474d-8c96-64d01ffdbba3", "indicator--8cd9962a-2e31-44bf-a359-d9b28639dccc", "indicator--80a430b3-2985-4111-a748-21c9036b520d", "indicator--20bac942-9b35-44bf-82ed-cf42e276499c", "indicator--e3edac58-49ee-4e5d-82a5-816b6282c3ab", "indicator--61b6421a-b45b-41f9-bc07-463c18ad603b", "indicator--59b0f042-0695-46fe-8519-1c37edf23849", "indicator--a291e8d4-2a41-4f15-866e-d2190705ea8c", "indicator--3663a2e4-2889-4874-8d75-a90916e4c609", "indicator--49ceb14d-b884-445e-ab5f-93b72c497631", "indicator--78d6bff0-0cdc-4a57-bdc4-1054f69f9607", "indicator--66a8bf02-bb97-4f7b-bebc-2ea046906897", "indicator--9f8fb0fa-bc1c-42f3-aafb-ebe8ce67996d", "indicator--5a3bddda-6562-4622-9cce-93df05569291", "indicator--f8386260-2cf0-4aa0-be99-3d2eefa4583e", "indicator--4dd36fca-8ae7-460a-872c-fff6248b0141", "indicator--ebd66084-b656-43d8-94c8-4d0afa75636b", "indicator--4b8428ce-c273-46fb-b881-3d622950375d", "indicator--7a24b457-fd35-4700-a19b-22a2b609c4aa", "indicator--9e9c9a2e-3f55-491a-9c31-b5036838af86", "relationship--ef895d31-9972-4b39-b30e-6f87a8361cff", "indicator--e2f3bc05-0828-4881-8ab6-de4dd75d7f49", "indicator--270dd562-0f98-4081-bf37-2a8898c1d9d5", "indicator--4ab5fd20-faf2-4306-9f0a-e8b4178f75cb", "indicator--9117a90b-6383-49d3-899c-062fb00c2e2f", "indicator--c8578b07-5bfc-471e-8525-d88333a8b673", "indicator--bb0258d7-fd2a-4dd4-9426-1af84ba048f0", "indicator--d33ea488-8646-4cc2-8e18-7c3cfc23a4a0", "indicator--691a3d28-16d3-4abe-82d5-959845cc3c80", "indicator--4e90436a-3a5c-4c97-b120-bbdb5b3d17f7", "indicator--d699b14f-561f-4b3c-928f-5eb141c8dfb0", "indicator--8d484fea-f574-4b1c-9462-25e9fe998ee1", "indicator--4e62375d-6a30-4e7e-aa66-f3d71cbe4847", "indicator--47ac5d92-ae6f-4993-bc46-a9d9c44e32cc", "indicator--7705af6b-18e1-4d9c-a6da-391e7a89ff0c", "indicator--0045d1be-b3e3-4405-892c-a5f4eeafec1b", "indicator--eea80efe-4e49-47c4-b88a-e5cf0c6b5ebf", "indicator--329e09c3-a168-4d00-a906-fdb441d33747", "indicator--ff07139d-6330-4c90-85ba-a30ec83bc42a", "indicator--eb8c28ec-c9e6-4134-a3be-c8042a3e2726", "indicator--f13afe32-dcf0-4f0d-8a6a-02c1e6a5d883", "indicator--7edb26a9-28c9-4894-aa90-403b2c3ed87a", "indicator--414bdd0d-cb98-41fe-b4fd-7dcf7294e1f1", "indicator--f61b6b8f-74a3-476c-929e-18b9a0bcf26d", "indicator--d9306a7f-0675-47bc-859a-79e8998d3856", "indicator--bb714636-fa15-4969-96e1-d6132ab3258f", "indicator--776f4096-f3a3-4e9e-8d6a-17fa6f352fc1", "indicator--57911987-2276-4544-a416-fdadbd50e02f", "indicator--2ffc5f08-6353-4905-b86b-60ec80122af0", "indicator--46915cbd-6d30-4125-86ad-ed30ad6df069", "indicator--17ace56c-f646-4c2b-afae-3a6acccfb56b", "indicator--7b6b899d-12fb-458c-a9e8-3e870aac5b54", "indicator--7a048076-ca0e-4b69-a2f8-1e2f0afba02b", "indicator--ff11c405-e94d-4ba1-b9b6-16a6e075d281", "indicator--b9dcd2cd-ba5c-4819-8574-5969e88a24e4", "indicator--559168f4-dd7d-40af-bea7-cc18eee8c9ef", "indicator--a2ad1b9b-6413-4c17-b963-0b5f40579f37", "indicator--8255688d-2183-4b21-95f1-6949919a80a8", "indicator--36626185-67dc-4581-bd98-e2fefbcfa272", "indicator--1539be78-40c0-4aeb-b65c-7a692addbd6f", "indicator--0922c172-18b6-4eaa-9377-a42c13ce611a", "indicator--9ceda434-744f-43de-9761-c452ec5f7c7e", "indicator--64bb779a-ecb3-421f-b8c9-6c3e99c2f167", "indicator--4dafc365-7666-470a-83d0-f8c5a8884b0f", "indicator--521469e1-bb8f-4291-9e45-42b0f9582e95", "indicator--19a0179b-cb82-4b0f-bd82-f828ad347b72", "indicator--c658a70e-64c7-47ed-8053-c7687ce9574b", "indicator--cc577053-b165-4509-a440-a62ad23c2b7d", "indicator--2f58d7fd-f3aa-4d1b-805b-4b2379601d77", "indicator--24e73239-6fcc-442e-b1dc-bc1f7723dbef", "indicator--ceacf6b7-10a8-4f52-8e1b-31f1004c4ccb", "indicator--08dd67c5-948c-4e9c-a36e-af12b731ad30", "indicator--1ebddd18-7c11-4745-9a10-752eed3ae2ac", "indicator--070a7080-e968-417d-9e7d-8447ca2013a7", "indicator--d02bacb3-b920-42a7-88a0-11956a12c3a8", "indicator--cb8b7fd1-c4bb-476f-9f24-c0680db5af69", "indicator--f4875425-fef6-4141-bf0c-8287ccedc0c0", "indicator--8d5102af-8e7d-4bf8-87dd-b2c87c73f32b", "indicator--10597009-0963-4027-ad81-2f3466af7bc0", "indicator--e41b9ed1-e409-4cb3-800b-e6cc8feee7a2", "indicator--b9cd32f2-abc6-4a7b-8d2a-773657897a6f", "indicator--51631725-2e77-4231-b087-0d87f1f36591", "indicator--f9e940c0-4b91-4304-8721-40519f05f4e9", "indicator--9916c7ac-3766-4460-a37c-69d2013bb9f7", "indicator--81882783-c04b-43c2-b5dc-43764efb0c94", "indicator--40c16368-99f2-4034-a97b-de8f3d94ca4a", "indicator--0c39d445-ec4b-47e1-9939-3361e93f030c", "indicator--434ca339-d79a-43d3-8c1f-21bfce7117fd", "indicator--8e29e266-8843-4943-8702-495882edab1d", "indicator--4bf73b85-3684-46e4-832a-7cb4e76f887b", "indicator--12ef55e1-fbee-4caa-b4b9-859c448baf2c", "indicator--e4567835-da4d-411f-9105-cad2d85b8987", "indicator--ab5bfc78-72eb-4629-a1a5-9783f07d71eb", "indicator--4bc15a62-fb50-4b66-916e-b6dcb591a732", "indicator--c7d15d6e-3b2f-4ebb-bb59-6b92d877286d", "indicator--342a2762-7fdc-4bda-b3d7-19c8bf9b6e6b", "indicator--fb739234-1a0e-4ec2-b765-ae8bbdd43fcd", "indicator--d6bbcf00-4101-4220-8e4f-e1f971640be6", "indicator--206f6a91-8987-4b08-b155-c214a3bf0ca5", "indicator--f3273ec5-109c-4410-99b3-3be05dd8d8cd", "indicator--f6df97cd-76d9-4f30-9b13-4b05acf984cf", "indicator--7a891171-81b2-4289-9573-f06d8cf70b1c", "indicator--f83bca25-f967-4412-a1cf-2152d80eba4c", "indicator--a0cbb4ce-a120-4794-b1c5-8d66f2d0937d", "indicator--bf3675a1-9740-4019-ab8b-ec5b9e485b20", "indicator--684c032e-b348-4768-bf5b-7353f847fa4e", "indicator--93b76832-06b0-4597-ae83-22d06269ac0e", "indicator--62a29339-b5c4-4944-ac18-321889b19fd2", "indicator--a2fc0ab8-8c85-4afe-9296-80e63bbb77c5", "indicator--896aa168-5c3b-4bee-b1ed-372822f977d4", "indicator--cdac0656-4c46-4596-bf40-d533dec4d5ea", "indicator--8b4c8f54-f898-4ab9-913f-8dc6bddb3a42", "indicator--d90e63db-fc5b-492d-b547-1b7c927043b5", "indicator--50eb5f2b-d5d5-47b7-891b-47ef25270777", "indicator--4e444b8c-734c-4f3f-a28a-dc72537f27db", "indicator--f16c0b54-0dc4-4213-add7-e478d79a54d0", "indicator--e8e8ea86-dde6-4fd7-a294-fb19ec9a7f32", "indicator--a202e910-6d77-4699-ae03-dd39133d35af", "indicator--fc459513-2dac-4679-beb8-70e94bcf76a7", "indicator--ec0d3fd9-60bb-4d3f-968f-5c5996dffc10", "indicator--b318febd-6949-4444-9cb8-2a645f6d5b4c", "indicator--bec8da5e-2480-45a4-9cff-231876a607b0", "indicator--8464007c-fafa-4b93-85a7-a94846fbf475", "indicator--dbfb1844-3e00-4599-82e3-899e652d7c0c", "indicator--8bb9d73f-c021-430f-96e1-77fb3a9b90e8", "indicator--96e79898-e0e7-4ca3-ada6-fcbe6ccd7eed", "indicator--c3912eff-1a24-4a94-af3d-5885068bd948", "indicator--525e3b06-84e1-425d-8f8d-48e8db2cf013", "indicator--60c87e82-08fe-46dc-bfa6-8ef87ef87547", "indicator--931452bb-57ad-4a74-a50c-7d079345e070", "indicator--1be14506-d663-4d07-91ce-c28101c8f5e1", "indicator--316dda36-d470-46af-8a05-68d07e0e138a", "indicator--a086f25f-24fe-43ba-a258-db2daae777e4", "indicator--fa7bbb82-943b-464c-94a3-092e54f8d53a", "indicator--12c0c340-449b-484e-8e74-253bad44aec3", "indicator--3e6d4ed9-1faf-4f2b-8ab4-775605131363", "indicator--73fc8440-8329-4176-815d-8506e8ba7efb", "indicator--05d178c3-3528-4f7b-af6e-e532adc81222", "indicator--2ff1c143-d0e6-47e0-9738-2ee6cad32ebe", "indicator--ebd610be-3635-4fd3-93ff-795d9f762ea8", "indicator--993619cb-9094-492b-b58c-a0615fe6a53d", "indicator--4c5430e4-4f99-4742-8b91-52a4bb95b17c", "indicator--defd48f8-945c-4927-8e53-f38003d46e6e", "indicator--93ef8473-4a0a-43ab-b93f-c669805a6957", "indicator--c77dc22b-07d6-4750-b2e5-7b1f503a469a", "indicator--4e19e767-aaa8-42bb-a0ef-2e1ec4b8ab67", "indicator--ad1f1394-e4ca-421f-be06-6b3493144245", "indicator--1fbdbd50-2c4e-48b8-b5ee-4d576b66c0fd", "indicator--f66c4c08-8d0f-45c0-ba1d-cf5eb5dec135", "indicator--f594dd04-0173-4721-9d5e-03059ab49326", "indicator--3c779191-42b5-4add-a85f-dfe1d459e25a", "indicator--44fe4fea-40f5-495d-89c2-7db5b20abf7a", "indicator--3a5d87fc-8dd1-4079-bce1-93853838c1ed", "indicator--952c47d2-1523-4ff9-8f23-d94304849bec", "indicator--02e82718-390e-421e-bed9-e90c503b251c", "indicator--c899ebb3-0a95-4df1-9a1c-acc2d7348ef7", "indicator--ff6aabbc-a19d-4c7c-b423-92ab591c1f76", "indicator--c7a5aa1e-f959-4240-8a31-c09406795586", "indicator--88199f1a-16b9-42dd-bd22-2b5c0b92b083", "indicator--ceae60e7-a3da-46fe-b4f2-9b73d550d306", "indicator--232b1723-7cc1-41d6-9236-f0d4d251610a", "indicator--b61afe39-806a-4850-a095-ff1f17fca3c3", "indicator--49552281-a861-43f2-97a5-156a066fd6ea", "indicator--2059fe04-3dbf-4d7b-860b-7217cede1a35", "indicator--f914b140-63f2-465e-a76e-a4d62192a93c", "indicator--a86fc389-74b0-419c-9aa9-11b2c97a54b0", "indicator--c44abad4-7880-4388-a2dd-adc629e4a0fd", "indicator--fb27b282-82e0-4011-9e99-76bdf9f1d10f", "indicator--e16f3f96-0281-45e4-875f-6756018773f6", "indicator--21fdf966-4677-4c17-a587-d755e39627d0", "indicator--de8543f3-96bb-4838-977b-d3d20a6705c6", "indicator--5104d5ab-ea85-4eb0-a225-d7ad0e35a448", "indicator--696768d8-d27d-4754-a3be-83530ca67975", "indicator--fe450813-5918-45cc-b084-bb2843082f01", "indicator--3f783c31-9029-43f4-a03d-ed387fc402c6", "indicator--065834c1-8394-459c-9e7f-fb20671168ad", "indicator--d0dbd826-a98d-4065-a720-5a0f20e2a6c1", "indicator--30998382-1118-49b3-bce4-4fb76f3e6375", "indicator--ef78472d-2a51-4ea0-be8a-546382aae453", "indicator--cdc0ff31-4bf5-4307-a5b4-548c4030d77a", "indicator--51086458-5f2b-4adb-baf4-aa18aea12a2a", "indicator--1e5e1550-2269-4a7d-9367-9128bbba492b", "indicator--74710d3e-4164-444f-8f90-10fc09e425b4", "indicator--90e44f94-b04e-4288-9bcb-c110e627b427", "indicator--31e2ea27-6cff-46be-9030-ef29156d6a33", "indicator--67560bd5-afe5-416d-9e4b-7bd1f849c138", "indicator--d96f9bb0-270a-4324-ab67-ac77e2b9c4ab", "indicator--46722e68-ccda-45cf-bc67-1ddf04687eb6", "indicator--e9971acb-70c8-46a0-85da-cc6af2e09c0c", "indicator--539e734b-2776-4e78-aa18-27c2fbda093f", "indicator--2f26beea-e7b3-4085-a356-16d89cb41a9e", "indicator--53d6576d-f248-4b33-b2ec-539a0968e6f7", "indicator--6213ff70-7cf9-4ab3-904d-7368bd626162", "indicator--10eefd25-cd48-4646-b3f3-00a7a25af0a2", "indicator--9417a156-814d-4296-83c4-19dd3c33b64a", "indicator--a0f35ce4-1903-4050-8cbe-2078bc16281c", "indicator--bbd5df23-281d-4e59-ad00-a08fe9b4acdf", "indicator--d834c2a3-99ce-48b3-99c0-c66fda62987e", "indicator--f561062b-7991-4e52-8381-230f5b7c5311", "indicator--b0622864-92e6-45f8-a03f-a96bbb2a3fac", "indicator--bf11d62e-88cb-482e-a53c-fe353210f0aa", "indicator--3a92d7fc-f41e-486f-b6f9-e60b2eff12c5", "indicator--8417bb0f-ba0d-4dd9-879c-738e599d2636", "indicator--dd87869c-e31b-4762-8918-cc54ad7de63b", "indicator--6d01c0ff-47e8-4e89-b9ce-1964c57554c3", "indicator--be83c7c5-6282-4933-ac52-c67697aa6ee2", "indicator--dd3f6db8-5d56-434f-a6ef-d438119c89d5", "indicator--9d9c858c-9084-430e-baec-10f2bd63a9c0", "indicator--76d5115e-d156-43e4-a183-9aac7e9ff609", "indicator--f2fd3814-4fb5-4dd5-b144-77d5889d8abb", "indicator--2f0020d4-0dab-4f10-8e1b-546c4708c1be", "indicator--05ed0ebf-26e1-40f5-a539-459da804881c", "indicator--a6239b69-8491-4a6e-8ab6-29b4d4ae7bdc", "indicator--9f67ed0f-8b79-4e98-8c01-c23ed1667890", "indicator--1fdeeff5-8f3d-45b9-a8a5-bc5aab45d0f3", "indicator--20c8175a-5b7b-49f6-b786-4f99867f20a4", "indicator--62dd29ec-b045-42cd-9f9f-ce17f54a4723", "indicator--c471a92e-c4fe-4553-a03b-d40923fe2cda", "indicator--9e566aa2-b25c-454e-a7a2-1df6c63b529b", "indicator--a243820f-e0ab-4ee7-b997-2f169d0e4ae7", "indicator--eff24d29-97ed-4a49-ba3a-f1ec4cca208d", "indicator--a68f715e-f041-471e-86f2-4963e1bdffa7", "indicator--b8a3c385-be6f-43c6-bc46-680b5d266a9a", "indicator--f37da44c-7903-4322-a655-6849a4b48617", "indicator--2f162490-ff64-4e71-b0e9-999edfd84b05", "indicator--f9333879-fa00-42c6-b94c-9b5d1ace2f02", "indicator--d8add1e2-1061-43c5-a470-7c277fc8d176", "indicator--41428a87-baf7-4e19-8200-4f121a2a24e1", "indicator--52b58006-abda-49a7-8e5e-c22562a25ecf", "indicator--7a961131-56d4-41e5-9ef7-a491e2413a66", "indicator--377a2034-a3d0-4fbb-9624-be9f20058c97", "indicator--115fd0ca-dc6c-4674-baa6-b9776b828d63", "indicator--26912c8b-e240-4f16-85b3-dbb5968e7a50", "indicator--4c80d941-73fb-4a48-a1b3-eee4c8f5d518", "indicator--181047b1-7851-4e54-ab4c-e6293e09fa03", "indicator--22c44e17-cd67-43f7-8229-4a9db42b2c61", "indicator--5b1e0887-80a9-47f4-9198-4f8804f3d037", "indicator--4c80035f-5e12-425f-8b04-fb7b59d4c8ba", "indicator--a1edf4e3-408f-4161-90b2-b9347fdbd96d", "indicator--24149242-8176-49d6-8244-0ff70e019ddd", "indicator--6de56f5b-dbb3-4b07-9bd1-c2493756e9d6", "indicator--381caff8-1409-46df-9085-2b8b63259161", "indicator--ec23c9c3-43a3-45f5-a3fb-c10b59a75a95", "indicator--d28d7f4a-e695-43ef-bb1e-0412c04bf16e", "indicator--6e13b183-0bc2-4f7e-b927-c130f8f65153", "indicator--0ab7af2c-4f8a-4138-b153-1e656cf09a75", "indicator--8091db2d-c70c-4bcf-9d42-247bbc61ef63", "indicator--716dfb37-3a3f-49d5-86fc-2383959ee1ac", "indicator--dcb13ee7-73fe-44a8-99bc-0d2592783a71", "indicator--f1956627-8ebc-4fa3-ac8d-d7a55b38e868", "indicator--dd076ebb-9553-47ae-9acf-93c1af0758b5", "indicator--54fe8916-bda0-465a-a9ca-87eda04bc9fb", "indicator--c146e3e4-a60b-4d87-b78a-4376c4bd1f86", "indicator--d107fee1-bceb-4228-910a-358b8e80c880", "indicator--f2f1f7b3-c4b5-4c63-9112-f84823bd1605", "indicator--37394b67-da56-4173-ab39-83c915d5649f", "indicator--ab1aa2f7-9d18-41e7-92d7-034c7b148549", "indicator--a8a43fe0-af7b-404f-940c-a265e8b9d922", "indicator--524f1ad8-7134-46f0-9bb9-b10bc5f4b0d9", "indicator--8c7d8f6f-5840-4e8c-a90c-88940bc3e3b2", "indicator--587c7bf2-65cb-4bc2-95e2-c468195a2e2f", "indicator--8ce2f03f-a355-45c2-9a2a-6689d7cfaa01", "indicator--575233ee-9e7e-4dfa-8229-e2ca4480da37", "indicator--14360f4a-fafb-4244-bcb3-3435672c523f", "indicator--6367e290-2f4e-4358-ad5d-5424fcbc650f", "indicator--0b48acd2-c368-424d-889b-cc745d241e75", "indicator--c2c666aa-fa57-40d8-8d2d-cd1eb25a3b2a", "indicator--fb07754a-7f26-4676-a9d9-04277d9216ba", "indicator--a5fb66b7-e87e-450b-b860-263ffaada4d3", "indicator--f189a113-82ad-44be-8369-6e1d45de0b43", "indicator--e5ba7ab8-3f98-406d-abe5-e2519b00b2a5", "indicator--a21bddc7-7333-45f5-b977-c8a223dbfbb9", "indicator--7e2144b2-f8c8-4dd2-9acf-b3872cc9b25a", "indicator--50d2dbf3-372b-4759-9851-a9f1d3796293", "indicator--4932a87f-1c99-42b7-b94a-511fcfbe7c73", "indicator--e5cc7593-ac53-42ab-9173-f7a1772b849d", "indicator--c4132727-20f0-4caf-b294-c4ffb636ab77", "indicator--5d6fc32f-a6f4-46bb-8c8c-3ec6dc13313c", "indicator--7882c06c-1e4d-4895-9440-246b38d60f48", "indicator--9c63049d-b08c-44f7-be49-0044975e277d", "indicator--d29e5725-c9a7-4887-8538-b73c4ff3c6c6", "indicator--25301559-4fdd-424b-a5a1-4b392bdbf13e", "indicator--9458e35d-07b2-4170-9a70-23b4c46fe3ec", "indicator--742d6b10-a14a-4a26-8935-fd2c030d38f7", "indicator--c7bc7209-6fae-426d-9f98-9bb7592912dd", "indicator--811d27b5-b302-47e0-a56e-eeb47e279b42", "indicator--38423841-60ea-45e9-8d0a-d25fba314296", "indicator--16dbf928-8109-44e0-8e80-c81a3cccfabe", "indicator--85ae16a0-59a8-4ac2-926d-4c1a9bcf3259", "indicator--4159fbeb-fe5e-4bde-a229-bbe8d4419f13", "indicator--9fd5d280-4402-4d6f-b606-b4317dffa5bc", "indicator--eec19a43-f025-4231-aa76-436158910725", "indicator--246be7bf-ac5d-439d-bb63-6387e0797eee", "indicator--2f93052f-9972-4a64-914f-6ac035ab6e09", "indicator--1d0e0e05-3c04-4f8c-b46e-15b673987e26", "indicator--218a9728-b596-4e3c-9b70-1e5546a89327", "indicator--6cdb169e-3959-474f-aab6-84111ed2131f", "indicator--6ce347c2-ce7c-4e36-a6b3-46f819516fd5", "indicator--322ea85e-73c1-4ec8-a3cc-58d2aafe7686", "indicator--2d858303-7deb-49e2-8a19-f5d8a95119fe", "indicator--3d489c0d-b8a1-4359-a8ca-4f72d2d8d40a", "indicator--40adcf78-3539-43b5-9c99-cdeaa7cc03eb", "indicator--d8e897fb-eacf-47ae-b148-4a6ecd0cd3c9", "indicator--f730f5b7-a6f8-4b2a-9dba-7f23a575a5f5", "indicator--c81710ac-ad12-47be-8f9b-b4b62b9c4028", "indicator--b8a8308d-a27c-4cd4-ae79-d4ac7d7c4ec7", "indicator--0c191e87-26f6-40e6-ab9f-4c5d8bf4eed4", "indicator--442c966a-0a50-4546-b2c8-216ebf1e9959", "indicator--aeb149dc-146d-4d67-b8bc-09d1b2de1d70", "indicator--c6fbf1f1-494c-498d-9043-b0a806d842c5", "indicator--ece0a62b-6ce1-4729-9fd7-10d38e64423a", "indicator--d637a170-3a2d-44e4-a8e9-aa85493b3b41", "indicator--8e00f33a-577b-477c-b0ac-39f75b11d33b", "indicator--15c0876a-6296-49cd-9b9f-e463098968ca", "indicator--0f04ffa7-e021-454f-9f5c-ca4d4be57f06", "indicator--b20a5774-21b3-4c23-bb13-b729698077a2", "indicator--16561f3d-6713-454f-930d-6e8b84f9ccdd", "indicator--29b2377d-3811-483f-953b-aa7fbdc87bd3", "indicator--72bc984a-b3eb-480a-b0d6-4de29d2d43ae", "indicator--28926501-44fa-4b9e-be16-baf020cf398b", "indicator--3c87a1b4-7051-4370-aaf0-6bd7fec9a127", "indicator--7502c124-dcb0-446b-967f-cafc93766e53", "indicator--dae0d6ad-698a-4707-a477-5961b22e1701", "indicator--3e6ae7da-8b2d-4fb4-b316-91dfb9293a40", "indicator--4db0eba5-d978-419b-88e0-d32435e34fed", "indicator--338e41ac-3a27-4daf-b694-56f5d5fc375a", "indicator--96437b6e-3e37-4da4-a53c-5eed5ae258a1", "indicator--d761f5a1-2512-4024-b86f-9b8bbc53b66a", "indicator--5377e8b9-2764-4ee9-8b35-7fc9844f504f", "indicator--da14fd49-d9cd-4aaf-be45-476c6744b69c", "indicator--5a450f41-e15e-4928-843e-8ddc4910b76d", "indicator--21fbc0ed-9a5b-4c24-8bb8-8842e5843c63", "indicator--cb83704b-1952-4d79-9a4a-d7837c33fe37", "indicator--28868bbb-0613-4554-83b4-faaff81c2b40", "indicator--fe2867a2-5dfb-495a-b9b5-269bed254e7f", "indicator--dd34ebf8-bf32-4d1c-962c-edad6d8ad761", "indicator--57380a0e-55c2-4812-8876-e8492118558a", "indicator--2126f6ee-46a6-4c54-b7e6-50ca117d2e51", "indicator--26b07076-6abb-4a8a-8022-974e52ca8d10", "indicator--210e43fb-9ef1-45a0-8445-f14a955ca19c", "indicator--b1654979-dadb-4230-a076-598c7fac8474", "indicator--00f8bace-a8e8-4b3a-ba89-e7fd9d565cdd", "indicator--0ff296a8-4de8-4e24-a866-5fca4a8a778d", "indicator--7b30f0d4-72a5-4edf-8db7-e4da81ed300b", "indicator--4cefd796-153c-495b-95ac-e1e50b1f996b", "indicator--23add353-3cb8-4bbc-be10-27a2f1ab7e79", "indicator--d365610e-9e73-4863-b314-d1002b8a1ddb", "indicator--02d7eb2e-8e3b-4c3b-ae69-061a4718d528", "indicator--57cfbc0b-4544-42e1-8aee-f6b894242ce9", "indicator--2d846cdc-b6bf-4e8b-9e4e-b4df953ebc0b", "indicator--2d4cf471-4c71-49f7-9b1c-bbd9f8009eaf", "indicator--d6e65d9b-7553-4e9b-b199-a082236d941a", "indicator--8f10cacf-776b-4ec2-b33e-afb164cfba56", "indicator--7a5a0b29-5975-4003-bdcc-34e951c53980", "indicator--9839914e-57e6-4168-98eb-ca12716eb2e4", "indicator--9c597669-9774-4323-933a-c82edd727679", "indicator--1e1be7fa-aa04-4a45-9ae9-c4b713cc3a64", "indicator--1773a529-5f3b-469f-b9f7-8a337e161f29", "indicator--26c4ad41-39b7-4619-850f-db095ddd0446", "indicator--5d6964ff-fb3a-4ad6-b645-924e78cc29dd", "indicator--f31dec32-0b44-467c-9264-ac9da498f809", "indicator--c083b44d-1f9d-47c7-a912-6d22159a721f", "indicator--86e7c5c4-749d-4983-a4bc-32e888507ff5", "indicator--a72b1167-c710-4d6f-9e5b-008d6084d623", "indicator--6e75292a-00d5-47d3-be4d-4d55fa322db2", "indicator--700ac9c3-63fd-44ca-89e4-73c84703c2da", "indicator--593f62ed-e103-4b9f-9438-44f9e5afaa71", "indicator--0b8babca-bf58-49cf-86fb-de9169087060", "indicator--9bc0f4be-9445-4088-b74b-f8a40597120b", "indicator--ef6f1cba-b014-4f60-a3f1-a3f59764201c", "indicator--d2a36c8c-1060-4150-84be-142ee72ec93e", "indicator--6550d4c9-ee82-4a9e-803b-7dc5579e43ad", "indicator--2666cd6b-c1bb-44ba-9a1f-297404658b7d", "indicator--8670e5fc-e4bd-4cad-a3ef-eb52855bcda9", "indicator--38ef3fa1-1de9-4391-b33a-50d10afaaa31", "indicator--f2c52120-5eac-4024-baf3-34fe9e541d68", "indicator--e0c05aa0-06e4-4a4f-b238-af536695d8ad", "indicator--f54df4eb-6f86-4459-8ff2-f2bd0758681d", "indicator--5bb9f65a-21d0-499f-ad33-fdfde756c3fc", "indicator--3076f289-4351-4411-8f22-758c05ce6d79", "indicator--5745b252-1038-4124-a53f-f5f3f1be7674", "indicator--58c664cd-6aba-485c-bc2f-91ca204b8a8e", "indicator--6d3650ce-fdfd-4792-ae24-caf4692319ba", "indicator--0d21b56a-ee9a-4ec7-aaea-a43561d8ab12", "indicator--6c9489af-6444-486b-94f5-5984914e0d19", "indicator--d2ffa3ef-16d6-4368-bd32-db1a4a7b8286", "indicator--8837da47-b9e8-40de-8ccb-c7ed051870b0", "indicator--592f8fbc-83fa-4a99-bad6-cb4739e49a70", "indicator--8fabb7d9-5fe1-438a-8845-2963673cc9e7", "indicator--99af5f64-97a8-42cd-9ed5-a8e4de468a9c", "indicator--e1c3ccce-bcb2-41c1-88e5-268ecc815772", "indicator--b067d5c7-fff0-480e-b841-35b660a867df", "indicator--8653baff-f397-4b3b-9c8a-786c9419f8ec", "indicator--5aa1c665-9334-417c-8345-c82611508321", "indicator--924d391d-2f99-45cd-9d70-76287cce38dc", "indicator--3de0c4ee-56ec-4e3a-98f1-81e2137a5136", "indicator--73317aaa-c3e8-47cd-a2da-b67938f5c502", "indicator--04f59c08-6f9f-475c-ba7f-e1222c5de5fa", "indicator--f0da2dba-f554-44fb-bbb9-16d621d74732", "indicator--46125f80-603d-4c37-8ba7-ba4fdbe87fe8", "indicator--14453550-6ecc-4c1c-92dd-764edddf577a", "indicator--b1beab7b-516e-42b5-8218-040391d689d2", "indicator--4771e624-655b-4ac1-8153-ee1668ebfaec", "indicator--25eb8302-cd3f-4969-91e8-1fe84f9618f6", "indicator--3bfa6d31-e02c-44a9-af40-eb2297d7ab61", "indicator--50621328-40ff-4df4-9725-0362d1388961", "indicator--bb4577f3-1b86-4c32-8a4a-5fdcd474dd9d", "indicator--1ff0914c-93b3-4795-83e1-5b0f71f66600", "indicator--dde2541f-14ed-4d5c-871f-f9b221f1038e", "indicator--a5a7c0b5-7aff-4ce1-96a9-d3b6252bd654", "indicator--cf8c6763-4c00-4345-a5ef-89ffbef353b0", "indicator--b62ea7f2-0efb-491b-b76d-57466151a17e", "indicator--61e12f5b-b0e6-4770-820c-256bb612d9a4", "indicator--f63ae3fa-2ee5-47d1-bc8f-edb769e9bf67", "indicator--67bdc59b-6650-436a-a0d7-b58f7fea9906", "indicator--d18daf09-c253-4b48-b0cd-ccbae71e9bf9", "indicator--70f9e2df-4ba3-4f19-be64-213c08301c3d", "indicator--bfca90cc-c9e3-41cd-9941-d51d6aa81851", "indicator--a5e3b191-480e-48c1-b5e5-51698f5e50f6", "indicator--e5aa9dfd-b67a-4400-8d00-e5abbb8c4e18", "indicator--45ec0500-00b4-4e09-a458-4d6b0c8b303c", "indicator--1909eb3d-b8a6-4830-b842-d611bbc30b82", "indicator--6fcc1e01-fd57-4fe3-8c3e-655284a76e57", "indicator--90d0b6c8-4ebb-40ed-b77a-df7753ee8cff", "indicator--25b68208-1a7b-42a0-a5d6-ab8ce623e4f8", "indicator--132b4999-b253-4890-b399-1ec9b295fb33", "indicator--9ae614f7-efc9-429c-82ca-c4d04aa8b7c2", "indicator--6ece4a6f-a70a-4980-93b4-98076da20a17", "indicator--cc04d41b-c24e-4dd7-8c1c-ca4bc9be5277", "indicator--5d4cbc0e-5617-4ba3-8378-fbf801121817", "indicator--0c5c1a9c-8e26-4a30-a95a-90cb0f8cdc64", "indicator--5fabbe95-4be6-4282-8484-38b151621737", "indicator--b8e7ae35-438b-43f9-a80d-b20db468c17d", "indicator--c1d58889-47f8-48da-b799-f3911373d714", "indicator--708f8da6-cc8b-472c-9002-13bef26f5970", "indicator--ab85d76f-470c-4461-8364-826a3b175eca", "indicator--cd36940c-5201-4e74-b6e6-8617bf4dae92", "indicator--e18b1170-70b9-40bf-8f55-cf9ce5ffe3e4", "indicator--5cc892cb-d5a7-4e08-a909-05adb1131889", "indicator--8718bd56-ce56-4f6a-ab0d-2e6264e39990", "indicator--852cc020-2659-4f62-bff9-fad02ab0aa0c", "indicator--56a3a444-6b63-47f2-96c4-76ac5ca967ac", "indicator--028d079d-44bc-43d9-9cbd-d68ee673a7c5", "indicator--659a4f2e-76d9-4190-a68a-1d1d574c4292", "indicator--976eba9e-7c8e-4488-89a3-abd80774face", "indicator--b1f767ae-0cf9-4024-8b2f-de4f9812c47b", "indicator--977dcb8b-c9d8-46dd-8ea4-8bcd63fac83f", "indicator--437ce2f8-ac6b-47ae-a81e-33c370e70e9c", "indicator--e35ed449-f0f4-41b6-bbdb-8ce921e50929", "indicator--d6844569-c71b-4ee4-9712-de41ff27ee6d", "indicator--33daea04-0674-4e9a-afc4-8014046a742e", "indicator--345a8fff-2e94-42b5-b03b-84b2476ef792", "indicator--d9fade75-1b88-4263-b0c1-34a73891ba47", "indicator--0edcd8c2-6985-480d-b908-d1e7e9640caa", "indicator--d10da8fb-e4de-455c-95b1-b655f36f389d", "indicator--e5e6a933-b196-4c8c-8c90-716e5f255f6f", "indicator--6939764f-e703-4dd4-a6a2-6130b4516a50", "indicator--575fac59-f1dd-4af3-8d1e-90bf558ab20f", "indicator--0cb652f7-a245-4db2-8ff5-fdcb350685af", "indicator--33aef7ec-1f2f-49f9-961f-7f1e0a9c67ba", "indicator--76cf3327-1c26-4006-8f5a-e550b7a305f7", "indicator--1cd2a3d2-45da-484a-b7e7-7e58460f89ea", "indicator--60d7fdd6-caa9-4dc6-a282-97f485ee3546", "indicator--5bf03d57-44cf-4efd-9b57-ca1d96776b4a", "indicator--1cfd5098-0344-423d-9144-2d8a16fb445c", "indicator--fda4f4c3-1323-4957-91bc-a2d04b6f7caf", "indicator--e5583cf6-03dc-4d42-bca8-0ace835257dc", "indicator--33f80d5f-ba9f-412f-a2b7-ece5bdb49feb", "indicator--8f8a1aa3-5cfa-48c2-ac2f-c1b531e2e2f7", "indicator--b3fc853f-c89a-4c58-9986-b2eb745928c0", "indicator--b8e0a338-80e4-4ab1-a521-16e1ff5a49e2", "indicator--ab4be314-d8f7-41f4-a978-ae87a554bf86", "indicator--fefb4836-245d-436b-a954-67bfa40d4761", "indicator--8f3fa1bd-caf2-463f-8a06-56eca23edbb1", "indicator--f60cc6b9-fbb5-4615-ac02-5e12d07b2041", "indicator--6897008f-f6b9-4acb-9abf-2740f9fc0405", "indicator--d3786b10-3c75-4936-b78d-f9d8500286d7", "indicator--b438dbae-ee0d-41ee-9af4-3f8e709fbf79", "indicator--b34f1a42-3cfe-4510-a8e7-a576d6571ab0", "indicator--78132efb-465c-448b-b882-352792b05f8e", "indicator--11f70423-b70d-465e-9af2-f332f0fbdf0f", "indicator--6447acd5-0598-4960-8fad-e82b96649ead", "indicator--23cc11cf-d66e-4372-8d8d-98691ec37142", "indicator--95df3efc-2226-4b68-902d-3ee6a9005ea8", "indicator--949224bf-15d0-4bf8-8223-e8be9533318e", "indicator--5708190e-ec39-4c17-aabd-61edc543587e", "indicator--7e858418-abf0-4473-92da-db4190979a60", "indicator--047c11ad-8400-4aeb-a82e-7d1021aa598a", "indicator--b6e8c5a4-8215-4b0a-8261-937a5a386835", "indicator--2c2814a9-03b6-43b4-ac28-2b7153d908dd", "indicator--07a8845a-137f-482b-8537-cdc84e0dca74", "indicator--bec5ca1d-f967-42ae-9d1e-1526cd293381", "indicator--c2d5313a-dc81-4509-ab56-ed1702c987ab", "indicator--f916cf20-96aa-4509-9677-ca6a99543999", "indicator--71fb849c-3d00-49f0-934b-46e81c87a995", "indicator--181a97fb-28fe-4f9b-aa94-514fc84525ee", "indicator--f6a50bae-5f74-425b-9c43-17b667fece38", "indicator--9d001879-efa7-45d7-b7b9-31c0b451ca75", "indicator--ae1cc86e-bead-4383-a7e0-f464d457ab47", "indicator--ae0fb76d-ef98-472f-aae5-35cb5a7eee08", "indicator--311f230f-9bfd-45d6-8e82-4e49f291d95b", "indicator--3fdc95b9-39f7-4b43-ad0f-ddba3b8206b8", "indicator--ba8b802d-d9f1-4f83-b7fd-29817c9c24ad", "indicator--0bff94c6-90f3-49e4-a5e5-7ada16704c20", "indicator--d9208cb2-fefd-40b9-a77f-cb12c01261c2", "indicator--e997f48b-aeb9-48d8-8370-62f8b2101416", "indicator--fb1ecc40-743c-4d5c-87b0-934c8d73a577", "indicator--4b129527-9523-47de-b2c4-2a5cb669441a", "indicator--301a3e78-3917-43a0-b353-69dbb829c46b", "indicator--7f6dc908-7bcf-47c2-9759-9c29bf790ea0", "indicator--467a6c5c-50b7-4623-b940-bf9f0e7c4164", "indicator--f4d9239f-bf8f-4ecc-a488-0eaef8ccda6c", "indicator--f572ef5f-99a2-4399-ae88-f02c2b62ced9", "indicator--9045ad0b-5150-4784-adc8-75d023f48d4a", "indicator--dfc49f22-241e-4f4e-90f5-2a981e43443e", "indicator--53ecc710-c103-46b0-8075-49903c4061c0", "indicator--0d0a2d06-72ed-4eb6-bc7e-728142692c2b", "indicator--67d9ac18-9afc-4fa1-ad78-c4b21556de59", "indicator--af7960b3-385d-4450-a0f0-7a311cd95f2e", "indicator--fdb73672-8c84-469a-80b5-5b4a3d85dfbd", "indicator--489d3996-12ba-4ed4-b5eb-d82ef6765b19", "indicator--f90dd02f-82f1-432c-bef4-550b8dfc7a64", "indicator--50c11081-c431-4644-9437-1ba58607e228", "indicator--0b70c86d-6e6a-4411-ae64-15ef8fe27daf", "indicator--07adb5d4-5775-4c1d-af90-3fa585c5d85d", "indicator--450bac97-d399-4596-b6d2-bc4feb30251e", "indicator--699144e2-adb4-4e33-a2df-7d12db75b264", "indicator--041bbf2a-5f84-4958-8fa4-ee970363e477", "indicator--b821ed5d-bb22-4d7b-8c50-760bb32e4196", "indicator--a53e4cf0-a4e2-4d39-8d86-2d3efbd02d03", "indicator--d7c42aef-79b3-461b-a9a5-8c5d843f3d9f", "indicator--d8503718-f8f8-4b4a-aa2d-018aa62283f2", "indicator--2e9d9206-069b-4c61-a509-8b3f0f23c367", "indicator--d67521ea-37d4-4412-9cf0-28c5a9b38a9b", "indicator--7be224a3-0575-4a3f-a2b9-6a19d0b61d52", "indicator--efffd556-c4d8-4c03-ada7-dc0250368b78", "indicator--7d56cf93-23bd-4dcb-9735-4b4e26fe80d0", "indicator--14556781-6b07-4933-bc12-ad1b081df752", "indicator--b6805006-2087-4ed2-933f-4000d14bdb37", "indicator--8c5f3c31-bdbd-4b87-97e8-d930f1f7acb8", "indicator--afff2685-ca55-4c16-b846-3ca9f08fa1aa", "indicator--4245bdba-9033-43dd-8f6c-33fb16c30f27", "indicator--7216e940-f28e-4679-9f03-f2399d8945d4", "indicator--86b8907c-474b-4103-8d65-1aa1573c7608", "indicator--3065bb80-8fcd-4e7f-b483-e252f853b26a", "indicator--413c4b0e-c404-4081-876a-6b2bb8b793ad", "indicator--d286f946-cb8a-4c12-9915-f2ce6265cbc6", "indicator--77e4080f-e681-4f7e-9a23-9b439e47d88a", "indicator--b576ef92-c5b0-4fbc-a0ef-cebc2963b021", "indicator--7f93a63f-115d-4b1e-9d37-61cf72e25b04", "indicator--c6531e43-2131-41a5-a15d-31eefe53e0e5", "indicator--4ee6fbd3-a24a-4396-99a3-0a8cb713f52b", "indicator--f1cccab6-c75b-424b-8eec-e37126fde14b", "indicator--c4113913-e81a-46bb-a7e7-8e08744bf7fd", "indicator--f15e4921-7fad-4dcb-b33a-ef3fd91dbcdb", "indicator--8a7882c1-a6ae-46ec-9b4d-9ad903ede135", "indicator--a5b2589d-4939-426f-a4ac-d3f93c2c90d4", "indicator--7a4b3595-63a4-4b23-ab1d-c5f7f9d5f5f7", "indicator--781e522d-c63c-4e91-9768-a7af056ecd5d", "indicator--b167cf7c-af7d-4f27-b31d-e09af7f3a338", "indicator--c3c4dbff-8fc6-4764-ae3c-8f3cc0593f0d", "indicator--c51930fe-41e0-4ef3-80da-36c219d24ea6", "indicator--dd4cf63a-6924-4913-9fe3-d7745754e61f", "indicator--bbe5a0ed-db04-4218-add6-6482b8705a56", "indicator--e87c8ce6-ea54-4cae-a4b8-24205d02e3a9", "indicator--50d36c17-4788-4f12-bab2-8688a0acce07", "indicator--17f6d00e-4a84-47c5-ac46-ef445f61b2cf", "indicator--40e39be2-4a78-45ab-b896-05a1b25c7008", "indicator--b8bcc8c8-cd51-4b8e-8622-cf13acd5f67f", "indicator--91a3a35d-c6f0-4867-83ee-1d2b45f38b82", "indicator--4a8c13c6-d3ca-46be-b06c-bdbde9a92539", "indicator--1e8f554e-6e30-4c09-bbe1-3cb422c521e8", "indicator--e481ba51-7e2d-4df6-8ade-eb5b1fc85973", "indicator--06a8b6db-2c68-4e72-8979-f434e215fc35", "indicator--10a5a1ff-c8c2-410d-aa63-082ad54523a4", "indicator--7d81c9a3-d494-46b8-ba0f-43dd4f9b89ae", "indicator--c9833693-c912-43bd-811a-713d6f6979bc", "indicator--464b1be9-a837-4230-a993-1b9721d0a653", "indicator--37ff3d57-9fb5-402e-8ccb-149098d8cc04", "indicator--7f9f09d7-e790-4573-b303-16c9d447f720", "indicator--8e42c043-7f36-4c1f-b70e-c9e384493310", "indicator--1d3c5fa5-1a38-4bd3-92b5-746ffa7e679a", "indicator--5f4fb098-1643-4116-93e9-817549c8ee75", "indicator--e2da92b4-50eb-4215-8fa5-cdb6e0e26fc4", "indicator--8a0d6977-7140-4f70-bf38-010bf7ea9653", "indicator--5aa6795c-17c8-44e8-8d6c-211f763b98d4", "indicator--15634d05-d451-41b0-9053-91d32d06e6e2", "indicator--a5d91285-ea70-4707-9752-d58de9e7750b", "indicator--78422b33-7aff-4c2a-9dd1-fe384d1f5ec2", "indicator--0c87089e-d1c1-4519-9be3-a6ec5149c1bb", "indicator--90217846-0471-44d7-a0d9-aef74cdef711", "indicator--319f0bd8-afd5-4fa8-846a-f627e982f502", "indicator--9d6318db-1649-4fe0-b5eb-873dfd6098af", "indicator--10db7296-7c65-423c-8395-74cf3b209f7a", "indicator--ef1bc2d8-e641-4329-a889-31c45c5c4f9c", "indicator--9d7c8e14-c8ed-4312-be35-87cd13e12e6a", "indicator--29cd471b-48af-4bda-8e33-f931c5b79d48", "indicator--ca122492-45ba-4975-a518-a52f236220a4", "indicator--d52ce84b-0305-43a2-bfec-43d99f82c88e", "indicator--a501a818-f3b3-4b83-8d75-7a571a28c9b0", "indicator--d6afd6e9-2b11-4886-b16a-fa13fb208117", "indicator--da0ff1b0-8058-43cc-955e-c4144cb22c88", "indicator--e4ceb4f6-1946-4d87-8431-750e1cbe8adc", "indicator--83280c1f-69b9-4752-a9ff-f66cb49f6bf2", "indicator--5bf6d287-5b81-4591-990d-be67aed884b3", "indicator--5a0e22df-1b88-449a-8084-6a3c2b14e403", "indicator--ac0fe71d-efda-4208-991f-5fc53588de1b", "indicator--7388b9d8-c71d-4a65-b6a3-b3dcf18f617f", "indicator--871c4309-618f-4d0f-ab98-b306074af09a", "indicator--df36843b-15e4-444a-b3df-57c40fb7eef7", "indicator--8290737a-34b6-43d9-b446-f29ae4df3105", "indicator--9af47160-da6d-4f7a-964f-0850771f96fe", "indicator--fb26149f-ef9d-4970-9b9a-9257b4c236f8", "indicator--23a4514d-c6a1-4c5d-bfa4-409c88901e5a", "indicator--740fa075-8773-4547-ae9d-04eb16d85687", "indicator--08cc12df-3aec-48f6-8abb-81f46e1aa0c4", "indicator--e78e5fe9-0ac3-4148-b4f5-21644a5d2204", "indicator--73f5011f-ca02-4215-9d88-b013b9d28fb5", "indicator--2ae560a1-c18e-4c5c-bdf9-8fd4315e45d6", "indicator--187d5b4c-11f3-4cc4-b4e2-3d3ed721347b", "indicator--7b84cc7d-4433-4627-becf-ad2b3a437ec6", "indicator--c231a818-354f-4e6c-abb9-8e23f13b1f80", "indicator--7ed263ea-d590-4713-a000-d70c2995b61d", "indicator--fc037c28-95c0-43de-8993-107998ba6e27", "indicator--6202709d-8dea-4934-bcf6-1db9a2ee02ad", "indicator--7e97555d-f2bc-4a41-beca-f0c69a74e0da", "indicator--9c83e6ff-8408-457f-a26b-28e8ffd7f190", "indicator--c4cd9dfb-49a6-4ed8-862d-d23750cbbaa9", "indicator--14f022da-c70b-4513-8ff3-47ccb1ed09b4", "indicator--439db9cc-a1e7-4615-aec6-b0e740633494", "indicator--3026677c-51a6-4387-a4f9-41e9ced5903a", "indicator--b9fe82f0-5a50-4e5a-9492-84d091386d2e", "indicator--bb450729-3cc5-4373-be91-7a12ec57ebf1", "indicator--190a080f-8d64-46ed-8e10-c2533305dbef", "indicator--86572a23-646b-42c0-a37b-fef41a2d1a7b", "indicator--b975f8df-b7ab-467a-a888-b3133a1dafe1", "indicator--fa3e65fa-4172-4cbc-a1e5-22ef46cd2e2f", "indicator--191e900b-646b-4890-bdb9-473e1d96808a", "indicator--d28b2638-cb6a-4f71-9044-67eb6043cc2e", "indicator--6960f639-d83b-41fe-92a8-344c2b9d1074", "indicator--033f8b91-2e8d-46ca-81ea-72f33a3d3c2e", "indicator--a63ad1c4-1de5-4f4b-8a01-dda74a9e4801", "indicator--e77ff4e3-3724-40cd-80bc-45da55312de1", "indicator--e1319a8b-fc80-4d96-b5e7-75d554b4b9bb", "indicator--1834b298-1720-4a99-be52-49210469d27f", "indicator--c006e559-126a-4a04-9b5c-1dabbbe91c5f", "indicator--ae7a56fc-bed0-4a39-aae3-d2d543a02a7d", "indicator--a40bd092-f160-4c45-ab78-f11d98684136", "indicator--16aabf5e-4844-46fe-8e3b-b3ff7de5ede7", "indicator--faa65340-d043-49ea-9b5b-aa8736031aef", "indicator--dcb091e3-acdf-498f-8823-f90a770e8277", "indicator--a1c130e7-432d-4e73-ae74-83a911a64aa8", "indicator--0413e227-1b32-4b23-bb82-7e739c73b3e2", "indicator--57d850fb-7565-4ff4-a5d1-a583668958a4", "indicator--0f9ca034-3df9-420a-8e58-0f8e2162cb56", "indicator--b3be3655-ecac-4d49-a292-406bd85e6343", "indicator--5fbd1a68-8404-4b39-be50-09cd5733b05f", "indicator--8d95e00d-ee34-4cb7-a6da-c421e0a520c9", "indicator--5e96c366-90c8-44c4-89be-8f416292bdc0", "indicator--2e839c9d-a5a5-4a6c-8e6d-bea07f2d8191", "indicator--e095be16-7427-4920-b8b2-3601c51b111f", "indicator--21f0a864-791c-4617-bc12-d0175ba14808", "indicator--de24c5c8-522b-4505-a498-7e8b7281cd6b", "indicator--05a781f3-eab9-491c-8e79-6718a419ba8d", "indicator--28af8bc0-b34c-4404-86cc-96a412288f3c", "indicator--be37c6f3-8374-426e-b696-d6767fe15134", "indicator--eb121d44-008b-485e-93c9-14e095f12435", "indicator--8a60c555-06c7-4368-96ce-81f17b3e0a69", "indicator--28a0a8ef-a28c-47cb-af3b-ed04b851f54e", "indicator--f0e7be26-d53c-480e-b9de-efccbb131f20", "indicator--bbcc651c-b8d5-424f-b379-80150c99f02c", "indicator--b3b7dc38-6086-4e96-bb78-403649eff016", "indicator--e80a107c-7680-4616-92f2-9864143f3de2", "indicator--8fde7ff9-a6bf-4b63-bcc8-f1a0d20ffd55", "indicator--f204e22f-1db2-415e-81e6-5f2f253c8d9c", "indicator--2f170783-6afb-4032-bd01-e9d3f9819276", "indicator--3a8fe644-de80-430e-9bfa-a28e9a16fd41", "indicator--67e51eaa-4710-46c2-889d-397aeeda997b", "indicator--6b555c84-a009-40d8-98e5-6f9b75d4dbd9", "indicator--2d485064-e6bb-4de4-b2fb-0df851c21910", "indicator--9a8c0744-060c-4e0d-adfa-bfe404dd7d0c", "indicator--1bbdb142-2175-4d45-bb9c-cff7601b54de", "indicator--e6efacb2-ee2b-4512-9d90-42567f6a7279", "indicator--5d502a75-1021-4df1-afee-b9abb04b36a2", "indicator--efd76746-f1a0-4317-9164-77dbcf81eb26", "indicator--aa12e9d0-acaa-4524-abf8-ff4fa7c6db86", "indicator--3df48331-d0a7-4100-a20b-fab0c6ffffa7", "indicator--cb5b29a4-d06f-44a1-b7e4-e9c30cd7a9ec", "indicator--26d74d60-1da6-4c92-bd5e-bbc6ce5b583a", "indicator--e0f71b8c-39d9-4917-85b2-c9b96426063a", "indicator--51c71677-1978-43cc-95a3-1c0cd6a8bb43", "indicator--d8d59943-6241-4ec8-867b-66df9eb10824", "indicator--934d6fab-1e7b-4a51-aa34-d918f1c80120", "indicator--bae82667-3277-4235-8820-50d3e017e1eb", "indicator--2e7eb7fd-1921-465d-b364-46f70e184224", "indicator--950274f8-de04-4663-9b5b-88a1b8629625", "indicator--a7de1e90-1640-4c5c-9ad4-600c6b576d05", "indicator--4431bd7f-8c9b-4128-bae1-8d230d145db9", "indicator--971fc0bb-e8e9-473a-b606-243762832025", "indicator--05494482-44f5-4b4f-8c2d-037851a3e080", "indicator--7a56778b-9cb6-421e-ad63-2d21a34b9bf7", "indicator--0620e3cf-8f27-4a3d-b5e6-7c89c218aeb4", "indicator--d0a2b89c-baf7-491d-aef4-31f5d7b56972", "indicator--1bea04a9-0510-43f5-bc8e-04531f473d60", "indicator--78737d45-c06b-4ed5-b689-c26c8f2db3f7", "indicator--980d08a0-9f43-42f8-93df-f07a2f028ade", "indicator--e4e8f34d-bec2-4f79-ae0b-f6098885211d", "indicator--e0c8805a-02c4-4341-8a00-6912f9e0239f", "indicator--422e7a0d-e082-4545-821e-7205803b01fa", "indicator--db8d37d1-793b-4544-8e37-ea298efd3120", "indicator--21428260-f067-4536-8583-e8397fcc6cc4", "indicator--9c40f687-0a6e-48c7-af09-0c0fa7d808fc", "indicator--b5074b96-2ec7-429d-a900-8a9b7e2b6e36", "indicator--4c314197-0941-48e5-af75-78c42f825ffd", "indicator--272f9304-6f6c-4f89-8ebb-04a4ab2451eb", "indicator--f9127530-669f-49b1-985a-f53a81759c03", "indicator--1bbc0285-3c63-4b41-84f8-b5f02664312e", "indicator--0eb7859b-36d8-4b79-b848-5d4312201243", "indicator--bd81a025-9136-42f0-9eed-48c6a2b88790", "indicator--c157a8d9-315c-4e7a-84c9-fd6cb8d1457d", "indicator--75eea4c8-8273-4bc9-a429-c681d3871d5e", "indicator--2250e33f-f1eb-4289-951f-ae45aeb13a97", "indicator--a49e2ab9-bb1d-4e35-8469-5d96a72c4895", "indicator--567e39e4-9451-45d4-bed1-4017923c5052", "indicator--60ee3133-44c6-4f49-a09c-b84872578d24", "indicator--1a9d4b93-b047-434f-8f78-8d89d43b70e1", "indicator--3ec0e010-0a4d-4e1a-ae9c-242571fcfb53", "indicator--193a330a-fb40-400a-b152-29f7d5a68740", "indicator--6612383c-c75b-4cc3-a6cd-168a065a93fa", "indicator--2e83156e-0ee3-4f99-abbb-3e51b7961491", "indicator--2303039f-669d-494c-b8de-49668222b600", "indicator--02ffa4df-7563-4482-8a7a-a81edd5aa903", "indicator--6308fa96-adc5-45e2-bf17-f0838b878ac0", "indicator--7c77b30f-eb47-4515-b940-16d7d2b6a2bb", "indicator--dc8236e0-4e3d-4c62-bd58-8f46ef53aa52", "indicator--a3cbe6e4-135f-4bc2-86d9-83b81948c6db", "indicator--be5179ad-e9b8-4cef-99f5-861f5f390392", "indicator--5310fe0c-c7ec-4146-b806-f414fc0a54c7", "indicator--89e6acd7-2eae-49b8-b36a-56a2f47ec5a5", "indicator--a1c64199-43ce-477d-9c68-48b8bb241544", "indicator--b585427a-f9fb-405d-aa26-84a6af53f2e2", "indicator--e11c5d82-f284-4c96-987e-ba226a8480d1", "indicator--e1760ef5-bccc-4ec4-b1e8-c57e261d6ef8", "indicator--804ec31a-e39b-4ce8-b010-1bd866816e63", "indicator--ee135ee4-fc25-406f-815a-963b370261ad", "indicator--da5dc1e3-5e68-452f-9301-86d2080aa1b3", "indicator--7ff32baf-b240-467a-bc6c-83f648dfca84", "indicator--e98491f6-8b44-49e6-98ba-85b2c504e804", "indicator--8fd12580-9966-4ed7-994c-3fb506072035", "indicator--25ab312e-625d-4991-a189-bb63e89e80b4", "indicator--5d273a84-0948-410a-91df-5301f70d9114", "indicator--db97c831-6681-4e4a-b6e5-74487847e553", "indicator--70a3a98d-8d8f-42c0-9261-4d5d5ceb73ab", "indicator--dcb03661-7b14-473d-bda3-5c6045c102ac", "indicator--c03b8188-a00a-4287-9caf-757160559bad", "indicator--d6c7b8f6-b8b2-45df-b7a6-099c941195e5", "indicator--d86eeb64-59bb-449f-86bb-9c1ca0317ebd", "indicator--2fa736f6-1362-4623-ad4b-362d2e102587", "indicator--21fef60f-08e7-4a04-82cc-f49344580d52", "indicator--e6bda607-2fde-4b4b-865e-d0b2939d62f9", "indicator--00980de2-a5c6-4e6c-a0d0-e0158926132f", "indicator--0fa8031e-d960-4866-a160-eea8050f0e3a", "indicator--df1f9586-70c6-4240-a3f5-218e756a441e", "indicator--0202f812-1905-417a-b463-69f999d13624", "indicator--bbaece49-54a4-45c1-a644-120d69295281", "indicator--08741db4-6a98-4571-9d9a-8601bc830e52", "indicator--df580f5e-2e34-4a5b-b916-9ef83884568d", "indicator--e3d64889-a1d3-459f-bc94-d9be00c447b6", "indicator--8d56442a-33c3-418c-86b8-f50450dd1004", "indicator--0878a363-344d-444a-9e5a-8bcf506a9a84", "indicator--757c42df-a55e-40a4-a003-45899e97a84b", "indicator--5c040346-8c6a-4f09-877b-cc9ad3c5f940", "indicator--7a455fcb-166b-419d-a833-287b4102fa5b", "indicator--ec247655-f35d-4db4-905b-a706f643e256", "indicator--82282625-6bd9-4fb2-89f5-29e8f0e5015c", "indicator--17ab2aa6-b47f-4b2e-b027-816ca51e5c83", "indicator--91c17e0d-8ee2-4f44-b05b-ae24f557e1ec", "indicator--36a4f289-8a3d-4cc1-a2e3-25f60b62dac9", "indicator--482c0da0-c259-48fd-91d2-cd222d21be32", "indicator--0dbc2105-f95b-43bd-be2b-126ae8038cf0", "indicator--ac202ac7-e1d9-4659-87e7-080b35a2ffd0", "indicator--4e22c372-785b-4a6f-90b1-b8220a164d0a", "indicator--814cd59f-39b5-4ac4-8308-8699cbcf49e3", "indicator--be92b504-87d0-43ed-9496-8089cba009ef", "indicator--300d3b16-a77b-44d5-b55b-456485077657", "indicator--696aa6e0-739f-457c-86d1-b0290edf2b0f", "indicator--565e6b7f-0657-407c-9a90-c0a7df07061b", "indicator--268180a3-0f16-4873-9ef2-a404a1923e10", "indicator--a2cd956e-e11e-4d5c-998e-27c9b73b1a70", "indicator--3a0750b7-fa3d-42af-9c1c-bd09d4333e92", "indicator--73ff8102-3757-4137-aef0-0f11eb7caed6", "indicator--ba3265b1-3929-46ee-99d5-2e31e1f191e5", "indicator--9e3bf29e-2abf-4255-86da-b9b6eb780b69", "indicator--87edc892-5c4f-44a3-bee4-5f28a8a45cba", "indicator--318fb024-971d-4ed8-b562-389bc7e13373", "indicator--5cd597b6-64d8-4e54-b8d3-ae1cefe0e0f6", "indicator--950a70c7-da46-4124-9183-ad31ff7ac05d", "indicator--c1312da7-2df3-4d40-a86b-f2eed17693f5", "indicator--901c526f-cfa4-47bf-8dee-9b614ef7636f", "indicator--18cb6630-3815-435f-945e-5417f4a193c9", "indicator--67484fb3-43a1-4020-8a2a-297e9640c2d3", "indicator--05805c57-10b3-4339-824a-630c0a9ac5d6", "indicator--81e4a6a9-a368-4a4b-8f69-b9ba7ae42d3b", "indicator--ba735618-7856-4a07-81bc-8ecf28177af0", "indicator--1e11f01d-7414-4dd3-b089-f0cc6e4d4250", "indicator--454aca18-cdba-41d9-a8a4-7671214956b4", "indicator--b9bbf4e4-111f-4b5c-824a-32fe86964add", "indicator--e1bef495-9a13-42f5-83e7-92298ce1f9e3", "indicator--ac30190f-a7f3-48a8-af87-74e8706dac2d", "indicator--f2d66090-156e-477e-bda7-f9fdeb29795e", "indicator--22539d96-b660-4a6b-a47b-abebfc1c8a25", "indicator--4963c903-002b-4823-8612-dda210df6d2b", "indicator--22d986c8-b4b6-4bb8-b234-a47790058637", "indicator--5c6ef979-4261-496a-be5d-e6cde9caa179", "indicator--fd03e4db-cc14-491c-96d2-a574acbddbcf", "indicator--65343876-58e7-4ac8-b3a9-0fed59b755b9", "indicator--2a56574b-291a-464e-a0dd-43d9d33de410", "indicator--5d420dde-2594-4296-828f-5c1f03aa997e", "indicator--eaf91036-6a52-4bec-8473-8ca2faf86201", "indicator--0918b8e5-bd5d-4bdd-b539-37aa51baa451", "indicator--ada27b80-7edf-44c8-937d-6daec44d3941", "indicator--a77d4665-f44d-4356-a5f0-faf3aa23ebfe", "indicator--10925968-8d24-4756-8391-74d2b61f2858", "indicator--cfe7d13e-21ba-4ea6-bed8-4c36bed9530f", "indicator--8e67c21b-0396-4035-9bc5-a9d0ac5695c6", "indicator--1a875f88-b7f3-4772-a61b-f3563b5df4d6", "indicator--2171a2c7-48ac-4653-8796-b9507e184c31", "indicator--46561221-716a-4ac5-bc41-5b0fffd29ab2", "indicator--9fc96baf-3b5c-492d-8f49-f1aca1eb4be7", "indicator--b18d4c7b-6131-479a-961f-5954497148d1", "indicator--a4a3276f-1928-4c77-a31b-47d6c1bf78c6", "indicator--ad227b57-d4ba-4593-b54d-7d8265339369", "indicator--c01845dc-2e24-4bc8-9a03-585a3ec368de", "indicator--e26b5d20-f35f-4f2d-bbe3-ea0b44cd08a3", "indicator--d66b488c-0dfd-41ec-bf0b-3d3039542f63", "indicator--a43064a3-7146-471e-bab6-806c62b65aed", "indicator--f30fc658-8b69-4a83-ba88-0024656e0338", "indicator--fc571a15-299d-4c8d-9eff-eb9754196dfb", "indicator--ec173a10-d95a-4ac4-ae1d-984d9cef08aa", "indicator--e26e39a9-b3ca-49f1-8cc6-915cb2ee5a1e", "indicator--c60b6aaf-acca-428f-b341-c1827c0dd5ec", "indicator--db4f913e-ad8e-4f4b-904b-f21f2b253b80", "indicator--a3740e47-84bd-4604-9d3d-bf6d7d10915b", "indicator--2ee53b8f-c1d2-407b-887d-1c0d69957caf", "indicator--11bb407a-f7ad-495b-9f5e-e57f152bc34b", "indicator--9547f692-2cc0-4379-ba85-bf327a7469c9", "indicator--169a17ca-4c9d-4e90-a20e-b0d57684ccf7", "indicator--8f5325be-d434-4ab6-8d03-504f7c70342f", "indicator--56208dbd-a3bc-4555-8dc1-96d8cb841f52", "indicator--4e92321e-ee21-42d3-918f-1d819915f888", "indicator--ceef0a54-deb6-42b8-bb8d-aa59f74aba43", "indicator--92406914-736d-4517-bb36-c93f5a726a0a", "indicator--69311078-469f-4dff-8cae-80b83dacd8a4", "indicator--e1ae4b99-c1d0-4d3c-9814-66522584d0ff", "indicator--c875dec0-ba71-47c2-86af-78057fca1697", "indicator--3c37bf01-5997-4eb8-92a1-169802e966d8", "indicator--a6ee227c-a720-4aaa-8cbb-c32abbc1c1da", "indicator--b585ca46-9e0a-4ec1-9e2d-f23d38284b86", "indicator--3c164ea7-942b-4f53-bb73-e7f686ffd686", "indicator--eaa8da45-81cd-4278-a0bd-0b540d145eda", "indicator--279816c2-b490-497b-8493-955f95c6c4f5", "indicator--d74db772-285a-426a-a22b-afc3bfac0ed8", "indicator--30e6ffdc-6d40-4692-b062-3173159d9eae", "indicator--5c2dba17-cecd-4554-82d8-89789caa1a90", "indicator--7de1f4fe-a6bb-42d7-b7b5-30ce6a337c15", "indicator--1cd549d5-f632-406a-a79a-ed3f3f465c3d", "indicator--a404de41-3e25-422d-b069-b45f85ea874d", "indicator--897655ee-725a-4fb1-86f0-3929926c8aed", "indicator--a964a2ed-b0e5-4107-bc15-0921c8114409", "indicator--f951dd0b-fb23-4eed-80cb-3491628a223e", "indicator--35020a54-100e-43da-9ec0-09a7c86d2aa9", "indicator--90bfb3d7-acb1-4af8-9af0-fe5871807c78", "indicator--58c20d73-47b2-4cfc-8fcb-375b74d17650", "indicator--ed650e51-23f5-4d81-a41d-5f5f1f7704dc", "indicator--de8cdd22-a842-4648-950d-adc1f97d38ca", "indicator--9f8c6664-3956-4ce8-b053-d14e6baf2d19", "indicator--e1e95617-7df6-4c65-b4c6-9ce9af9e0761", "indicator--fb3d54d9-47a7-4e0d-8f7e-231a9982b100", "indicator--c7fecf36-b93c-4484-9cb2-0506c88e137e", "indicator--7c4432fb-6123-41d5-9841-c62469c2e720", "indicator--f50b0685-1647-4da4-b4f1-16b488037647", "indicator--dd21f8f6-b46b-4384-a282-3055f7339211", "indicator--b8b32062-aade-4c6d-bbe2-a060fdd6463e", "indicator--038de942-1336-433a-9990-a268db4005cf", "indicator--7283e585-e045-460a-8412-912fd15013bd", "indicator--4930f1ec-2798-4348-93dc-0a273d9792b3", "indicator--08d9d5e7-76f0-4bd9-b0ea-27fc859aa91f", "indicator--6687df82-dec4-4bd2-b6bd-278346e4c8f3", "indicator--7687077b-763e-45ef-9842-e72c2e99229d", "indicator--d70e0b27-f1e2-4173-aa3a-a81b73f6c62c", "indicator--9144de7e-4e68-4dac-9e6b-2ff0b4b59470", "indicator--25ac52b9-e6fc-4799-9beb-7fb44959a074", "indicator--19f69606-a3a7-43f6-9145-a03a9ec8abf7", "indicator--49691047-bec5-4a07-8b62-c3128b958fec", "indicator--75526e36-25e0-4419-b77f-36982fee51ab", "indicator--e7890a14-be09-4bb8-9af7-f47ff5432dd7", "indicator--7d34385c-d447-4fd6-8095-42e14b1cc445", "indicator--a12cef0a-7c1d-41e2-a5fc-cf4144b9676b", "indicator--a2c8c61e-c6bf-40f1-ada9-f2381ad69474", "indicator--db6766c1-bc3b-4d6a-b766-1766ecb70339", "indicator--94878925-7eb3-468a-87ef-9629c8a81aed", "indicator--851d7e8d-f007-4ba9-b722-982f0d226bac", "indicator--3a98cc61-161a-43b5-acde-33116bf56059", "indicator--db7df4af-6f8a-456c-ae27-35bf713858b6", "indicator--cfae1a4b-9f43-4472-9e37-da84c744b6d5", "indicator--9141144d-5e23-4a0a-8e8b-7b0dc6b759a6", "indicator--06fbc6ec-3a3c-4b51-ad4e-850efaf9f1cb", "indicator--1279cc53-6472-4b63-80d6-c5e1e1bc463e", "indicator--4db647ab-231f-4ff4-bea3-836628b8d1ed", "indicator--2c5ca470-7500-49f4-bf6f-94ff9062f78f", "indicator--4ad72b52-5de6-45c9-87a0-13b42d37c9f5", "indicator--b88be670-3e75-418a-aa07-406a41605976", "indicator--0569e5ed-e0eb-46c9-b12f-a2f6bf55a0cb", "indicator--f073cc41-c9cf-4a6f-a955-904c7baf1274", "indicator--3850bb6f-cbd4-4fc1-9dfc-87a075101637", "indicator--4947b42f-7cb4-40cf-8bf2-692cc9b56483", "indicator--4da2ebf6-825f-49d6-95db-4e3857bba3fc", "indicator--c6d61493-cf08-43ba-81c7-eb96649f6439", "indicator--a6187c65-2efb-47ce-be72-440492a5dd46", "indicator--f2fe5af7-1ed5-4aa3-8793-6cc2a359a93c", "indicator--e1d1e1c8-a03c-4f20-96e1-590d606f095c", "indicator--701c4aa4-5154-4985-9a14-24d9d45d5ce0", "indicator--6b09fa76-3ee8-4a87-846d-580b87396930", "indicator--8a59443c-9e6f-40c0-9bdf-26e20cfc811c", "indicator--215f6ea7-2cbd-4bff-9611-13bbf29f708f", "indicator--8f8e264b-434b-4d9d-9bfb-f7c8d096844d", "indicator--31a3b52e-2df9-4127-a823-3045de3e934d", "indicator--4f87f351-486a-4c01-8819-c1fb3d23fc46", "indicator--9478cbf8-9185-421a-b673-bab6a411ff5e", "indicator--ca9bb369-6ff9-4216-8479-71ecd0926c2e", "indicator--a486fe02-8265-40ef-9327-a237cdb78b90", "indicator--c91fc0fa-d9ab-43c0-b474-bd854d3d4560", "indicator--16a6ed1c-d5f0-497e-89d3-18a79bdeb116", "indicator--1b91254d-bc8a-4fc4-a82b-cb25aecee996", "indicator--ba776d47-0bfc-4c56-9c41-2ae601c813f4", "indicator--279f6bd5-eae8-49f5-8ed6-1664d5f320bf", "indicator--67d0a96c-b225-4b14-9c0e-655a5f036108", "indicator--477867b3-f075-4fc8-9d12-cf141341c26d", "indicator--0d8daaf7-cb6b-4429-8f34-5c7226cc6631", "indicator--5a140ccb-74f8-4404-911b-677762526c6a", "indicator--21b0e7ab-0c55-4b7d-be4e-e1d17c73e9a8", "indicator--aeb2a690-6a54-453d-95b9-3c88349a03c1", "indicator--28c3bf70-311b-400d-9479-712f08200815", "indicator--e1867d0a-033d-4107-bb27-bea0bdd22fd9", "indicator--bcf9ff58-bf35-4ad6-8d81-20a3831a8e76", "indicator--3941d5a6-a1ca-4376-ae6f-a24144cf5064", "indicator--68ad6d16-f16a-498d-aefe-1c03da657131", "indicator--14731983-0c7c-4102-a388-20e4ebfadc99", "indicator--54df7311-cce4-4390-b164-a341f6a05019", "indicator--8bb60f4b-b07f-48ce-ae63-1293eced477a", "indicator--5c67d765-4d4f-49e0-b5ae-23c2af2cb293", "indicator--3c6aefdb-de90-485a-a04c-4bd9361558ea", "indicator--7e159031-c096-4e9f-934b-23a38a2cbba9", "indicator--facc7b2d-5a51-4ea2-b75a-3ef3051dff3f", "indicator--8489a27d-dff3-467c-a7de-3bec3d6e6acd", "indicator--83bc0c71-3aff-4530-879d-469f69487a05", "indicator--550503cf-1af1-4502-8a57-676f52f88a96", "indicator--9209539c-3417-4297-bf29-97696457b912", "indicator--5aaa476c-9380-4a1f-a4f6-a282d0dbc2c0", "indicator--969d3e07-4cfe-4372-948b-76ab8bb0e6a4", "indicator--a5ba9bce-78ee-4842-9490-f583aceacd77", "indicator--0b324504-929d-4a2c-8ef0-37342b75ea8e", "indicator--b5d93dab-225c-4f8a-b03f-31ac602a6400", "indicator--57d66512-af5a-41cf-967a-6443e46cc5c8", "indicator--6dd20b69-c80b-462a-9892-a220e98566d7", "indicator--fa1d21be-5483-4dbb-86ea-9f652f226045", "indicator--b5c2c76d-0f39-4af3-8744-1faa699bf92e", "indicator--db40c734-d402-4426-9275-1ec7bfea0cea", "indicator--aa4a45bf-cc11-452c-b4c3-43d474c4ee36", "indicator--fb939b15-cd74-485c-8f8c-bb20f9eeba5e", "indicator--d7f26be2-4afa-4f8a-84a8-4d0f441e0388", "indicator--979256cb-16da-4917-94c8-d024c7d78ed6", "indicator--86a70116-945c-4ccb-9c05-18e61c0cbfee", "indicator--8d96eff3-6736-4b18-ae26-76ab29e8d3d3", "indicator--8444a0e6-d5d5-424f-ab2b-2fa4d89ffa0b", "indicator--99e750bb-df67-4a81-ba2d-9d5080f95664", "indicator--b6a005ec-b3e6-4fd1-a838-e29d46b33b4b", "indicator--7c75cee9-c0fb-4261-8fad-8475d1849cf8", "indicator--fd7b41d5-f9cc-4d50-b21e-4a10fdd88696", "indicator--36ac3aef-ab86-4826-9698-997c4577ab16", "indicator--1e03f492-347e-4dbf-a7d6-504dd07d0961", "indicator--4be37af9-4f59-49c5-baa5-b2118c15f9fe", "indicator--5b5e324c-b5d8-43bb-a628-24b79352792c", "indicator--48bab5fc-bf7a-47d4-aee1-c5d02da58739", "indicator--2e0be7b8-84ac-467a-83da-1875319746ec", "indicator--d04ddbde-8949-42ea-94e0-fa154cb630bd", "indicator--96b0e850-3a7c-4055-b46e-92a94a3aabe0", "indicator--df7c44d3-065c-47da-8b7b-0f0e18ae934c", "indicator--b0492be9-2bab-4e43-84c4-02af70312722", "indicator--7f463b39-291a-4098-8728-e3445c8d1dcb", "indicator--0a7c6556-79f6-4331-9e60-5a3c463cb126", "indicator--2e3fdedc-4ca4-4742-a362-22606920858c", "indicator--e7ebe4c2-3c7b-4780-93de-e3a8c809e70b", "indicator--f66ec417-322d-43c0-a656-1b17ac385c56", "indicator--245676b2-3545-4563-b825-a4efbe5c324a", "indicator--cd54b825-a2d3-4bae-a8cb-935a7d594d61", "indicator--bdb4af29-3e5d-4da0-b8ea-96481069ee78", "indicator--e9b08531-a6c2-4589-bafb-960a6e1718ee", "indicator--19e415cc-8233-48d4-a13e-98f600b18cb9", "indicator--51e62c96-844c-4e32-90c6-4be18f1de3a8", "indicator--f0e962c2-24ec-4e85-9f78-1fc1dae1f5f6", "indicator--440df71f-8cd5-441d-a91b-ce7390f5cb26", "indicator--e638dfc0-96eb-4d13-837f-a563bc617f47", "indicator--733ece44-b85d-457f-aae0-d34173f06dd0", "indicator--4fadcc9f-5645-4df6-b85b-046e9a5f79a1", "indicator--314d3342-40d1-4fef-9998-7651fec2d3e1", "indicator--f8c8eaf6-878f-4b94-a927-b39850a2b33a", "indicator--69323a67-6d9d-4698-b136-9826de605476", "indicator--1ae3c8b7-223b-46be-93c7-d449a195440e", "indicator--72f5bc7a-c782-40ff-9492-dc9a24d20b6b", "indicator--82e6367a-4a0f-4b20-b611-e5a475aa0b55", "indicator--bbc5d543-fb9a-46e4-a7fe-c7a50e41e29b", "indicator--4f9fe295-0ef0-4998-bed1-1f1531b3eda0", "indicator--8e215d56-e99f-4443-b8ef-90fca22ae3bd", "indicator--ff49b9a7-b061-433a-9613-dec7fe7dfa30", "indicator--ddd4207e-15d4-42da-99ff-634907dee769", "indicator--4d936f38-89cc-463e-ba44-e0fbabb25504", "indicator--8fbd5673-e4ed-4bbe-b9bc-2f37941a923b", "indicator--24eddd6d-628b-4b2b-9669-3a5f5ec66d55", "indicator--11c58a0a-494a-4d3f-a375-702d05d04a4c", "indicator--c5b3318b-a292-46b6-a71f-689a4e1f5b42", "indicator--707d453e-aa1b-4a78-8fd6-45d38d264c3b", "indicator--b1601248-84dc-461a-9138-a827d6c5e658", "indicator--c486ce5a-4934-412a-8fde-653bb1b2a146", "indicator--4a5ef8d0-606c-45aa-9173-857de977353c", "indicator--305dcb84-257d-41e3-8b04-23e713ffd3d2", "indicator--84c7b6db-ab08-4c84-9131-589457f5bb3a", "indicator--8206ad5f-b851-4e39-b9c1-a002dd8da71b", "indicator--f5e7b499-ff2e-44a5-bfc1-06ed1cd8e000", "indicator--499eec3c-1c45-42e3-a511-da49381731c4", "indicator--ac444722-c805-4716-9e8a-a0cf8d6b1063", "indicator--d88baf7b-cafb-47ef-97b3-3e9aad8e59b5", "indicator--67f14f68-9594-4ef1-9546-53493d04fc01", "indicator--329a8696-1341-42f4-8c1b-12badb32e8cb", "indicator--ccb4e6d3-61b4-4cc4-8e82-f061cf6924b7", "indicator--ae33b33d-a5d3-4155-a347-315072f78b84", "indicator--8113e929-cb0e-49ac-9974-a0a141d3a407", "indicator--836fd9b1-4695-4c06-80ca-0aa9a1f4976e", "indicator--4530de94-4343-4717-befb-b10f0c4bf093", "indicator--166b17d0-5498-44f7-abec-6d7d66cf6218", "indicator--80604428-53ab-416d-b6f5-343801143896", "indicator--35e1f78c-e008-4979-93c8-ea429c87be7e", "indicator--151b5a5a-a872-467c-9b4f-ac4b3d2727e9", "indicator--dc0f697b-a8cc-49df-a7ce-1923eabb2918", "indicator--c936b2d8-5532-4be1-965d-5758c29e7675", "indicator--13301712-9705-4074-a5a1-935cbc6e1968", "indicator--2240fe83-28c6-4f3d-9a5f-861fd3109796", "indicator--c9630c95-a461-4c62-8d8a-8dc9e0f2582d", "indicator--bdf026f2-4ec3-4a1c-a764-c60b000e0943", "indicator--ebd78533-e1ea-44e7-ae3f-8f87ac2cbc11", "indicator--d072e326-8889-4f20-8f14-04a9d08c5bf6", "indicator--92a96fae-59b0-48b0-88e9-807bc48e9552", "indicator--e8026131-109c-4c6e-abc4-f2594727629f", "indicator--d61c8756-bed1-4a1c-8f16-8b3a5bd1f7e4", "indicator--9e4f59dc-9f66-4389-9691-1d6a1997fe20", "indicator--8f620853-0d54-450a-a9a6-da9dd5d074bb", "indicator--abffda0d-02b6-444f-88c8-1d3a03e129c3", "indicator--a8b0719c-80a5-48c9-b6d9-a82d49b88eb0", "indicator--d43599aa-17c2-4976-a5d8-cc0923fbd112", "indicator--621a1c8b-ee76-48a4-99ca-4f9590315e67", "indicator--7c670d43-7803-487a-a2a3-1ff896059f14", "indicator--3534d036-c193-454f-9ba6-47d7fda31cdf", "indicator--857e524e-eb5a-4863-b3e7-3f0ea12dd5cc", "indicator--0d561403-e2cc-429c-ac0f-34366e87e2b5", "indicator--11c81260-9252-48f8-b84e-e64d94129c8f", "indicator--c4dcbae6-9ea0-4123-9e75-cdb6ab0c71dd", "indicator--103fc168-d59c-4799-b66e-95adb5947c5e", "indicator--8f41863a-289e-4b5e-b18c-d287b4854d3e", "indicator--84f6753f-14d8-4122-8bee-abdb9511c4ff", "indicator--9faacc24-16de-4b3b-9512-29a43bfc546d", "indicator--4e15af92-6bf0-4431-b45b-2822d6495a2f", "indicator--762f5d80-2559-4ec9-ae5d-415a2697313e", "indicator--03211eed-c11e-460c-b22e-9044fc47d8b0", "indicator--7b218282-fe98-4b69-bd15-4d7db22db17c", "indicator--7f8bd82c-4cdf-4147-a65f-15019c29774e", "indicator--6fac3f42-dff0-442f-a3bd-7cc696bb4101", "indicator--7439cb6b-4684-4198-98be-5a2601764782", "indicator--7cbba8b2-544a-4faa-92d2-93196a420c81", "indicator--89980675-080e-433c-8e89-dbcbeaf9a8da", "indicator--9e07893d-db9f-45e5-875b-e0466c7724a4", "indicator--fa7d5675-8290-489f-8885-ed8a55035f78", "indicator--6438fee6-b4d0-4dab-b9bd-088cbf3fc01c", "indicator--8b55121f-35de-4d2b-b41e-38cffaa7e5c6", "indicator--2b3ee8d4-55d1-4e05-8afc-6899ca64e3cd", "indicator--d79fee85-546c-4004-b8b5-4273ed638814", "indicator--0cbdbe8f-5e4d-46f2-9bad-2053ddbde1f5", "indicator--8f2c3ae1-7d7d-43d5-8fb1-120a5cd3bf7b", "indicator--dd8e76db-3cc6-498d-aa5d-664008bbcd9d", "indicator--72b6bd65-fbe5-4246-bea3-e5ee02dd8a7b", "indicator--b0fc04c2-2603-4669-9b75-93dd92a42878", "indicator--24bc9210-6fa2-484d-9e36-3401fe02bbd9", "indicator--e7fd8942-96a5-4184-a650-ba4fe03f0a55", "indicator--68661a6a-e064-4cce-a309-cecff9d712c1", "indicator--7ae239c9-825b-482a-8b18-bca83ed3a3b8", "indicator--408116e5-b64e-427f-a5e8-f8cebd8adb40", "indicator--388b600a-3e09-420a-8d9a-06a6b6cc108f", "indicator--2f9a8369-4896-4199-926f-170c7c7c14ec", "indicator--3b94be0b-fe80-4091-9122-42ae0f5ae57b", "indicator--a06ba148-488e-472c-8bed-cf512fd410dd", "indicator--4ab8afe0-978b-42dc-8805-694e192d42bd", "indicator--8a051143-6141-4160-8ccc-07a460561d50", "indicator--0216e769-13bf-482f-8c83-c9f74844079e", "indicator--c88a197a-a42d-4bd6-b9b1-820cd22235f7", "indicator--d3f5d6cb-c5f1-4d96-902e-b2ab354c6fb1", "indicator--de035d79-60fe-4447-815a-1643a636b86e", "indicator--f1d5d017-59d6-4a6b-8402-4b1db49413b1", "indicator--70065d9b-4fd9-45c6-9e08-9758d83abc77", "indicator--0b834c43-a047-4562-9d89-26711a3df2e4", "indicator--18b6e022-8bd8-4a36-baff-0c3f9cd63ff7", "indicator--931bbf0c-e294-4701-98a9-64d02a5b5fbb", "indicator--9d1252e7-6507-44f9-9883-d4cb7cc0fb17", "indicator--c2e8ac4a-8c96-45af-93b8-cbcfc55750ac", "indicator--3a435662-8cc1-4785-a1e6-273e7d633afb", "indicator--cceeac1d-c59b-4db2-ab50-d803945a1922", "indicator--a1954141-30d5-4b66-b482-106b6a7cbcde", "indicator--964256a7-bf64-4ec9-91a7-e5fd97d489c1", "indicator--be1ed735-8bb9-4454-86e1-ff62c07884f3", "indicator--6e228aa7-4c16-4196-ad9f-577c248354d1", "indicator--c506be9c-144a-4402-b503-f78ce7e99e6c", "indicator--3f1d7852-14e1-4c2d-895d-41b2024a9fb3", "indicator--d7715b29-dcdf-4a45-8b3d-df2691c87575", "indicator--faafdac5-9330-4f64-bbcd-406d5bae754f", "indicator--46998d75-5dcb-43fa-9ab7-0f552d5ab5a0", "indicator--8ad7fad0-ba30-4e6d-ae67-ef1acce73339", "indicator--97b89b63-c958-4c8e-a990-956ac629f0d6", "indicator--ed08b495-4c08-44ef-a144-c710ee416215", "indicator--c647b712-b047-41e3-bcc0-a871f4dcced1", "indicator--d6a50d47-297e-4a45-b5dd-162b5d0b05cf", "indicator--2151f1f5-59e8-4a71-bf2a-b3861182b4a6", "indicator--7d0d8d8d-21ac-4348-ab58-330dc6725a5c", "indicator--8c5a49d1-19a4-4518-b252-9afbf9827c75", "indicator--4db8b7ab-f752-485c-a95d-92cbb62c6d83", "indicator--ad83ffe7-3091-4c1a-8215-0237f984e539", "indicator--0cf70af7-7ecc-4e7c-9d09-22140a4226b0", "indicator--6188dd2c-7569-4962-8bfe-0d2cf7c37f75", "indicator--5d6a148b-b6fe-46f0-a49f-236d426a0cba", "indicator--d8e0d9c7-b760-4ac4-8a06-a53d5863ece6", "indicator--ff9b62c9-298e-4ad5-b492-587fd8b69a29", "indicator--8495bb94-e887-4640-b0c2-79d025baab39", "indicator--aa1f5382-17d6-43a4-ae60-f1816d4b54d1", "indicator--3ac6b64e-31ca-4797-9a09-7726b6e900fd", "indicator--3ac83075-4340-44e4-8c4c-fffd0f20fd01", "indicator--0fc5abd1-c21b-4bf3-b4c8-7d62fdf389aa", "indicator--2c37468f-e5fe-48ce-9639-1ce621dd7426", "indicator--38b685ed-1569-4493-8414-c24f4e5f84dd", "indicator--d582fe0c-720f-42b2-b04e-c4ef10d7a948", "indicator--b3a52d42-b6b2-446f-9ab6-37f701092b73", "indicator--ef719399-13ca-4ed6-90e2-5665805ca702", "indicator--1175c400-bb0b-4174-bbe1-52f1f05bca1e", "indicator--1e55c668-247a-409c-8c8c-fcb72cdfe8e1", "indicator--8ecdddd9-a3fd-4ac0-bebc-67141b6a2503", "indicator--a6a438c5-5146-4529-bbe2-eebc410c2133", "indicator--8968bae2-47f7-448d-b3e2-981521e2ab71", "indicator--0cdb7b7a-32cb-4b70-aee7-3cff0045635c", "indicator--c780f848-54fe-4fe9-ab4b-c43515315481", "indicator--9187a96f-e5c8-484b-8d9d-7aae5617aad5", "indicator--cea397aa-1043-4adc-ad49-feac5073c2d6", "indicator--c832864d-7b91-4832-8ca6-c7f2acd70d17", "indicator--e936f347-3133-4c8a-8ec4-c3a8eb9ad214", "indicator--0769a04e-35b3-4e60-b6c2-478fb597bf89", "indicator--51ef3c3c-91ec-4677-9ef3-6fa84ad051ca", "indicator--586e0153-88ad-46b3-ba94-fa27233df021", "indicator--b1dee002-8ac9-4cb8-b499-8c378c21518a", "indicator--f2927301-a617-448a-a1ca-fcd7f4204318", "indicator--fdca18c8-a2cf-44e3-b356-f96c0195d64c", "indicator--2ef1ccd0-257a-4ba3-8ca5-102ffffa9a19", "indicator--797105a9-7a2b-43d8-afed-e343daa6734c", "indicator--9ec4d096-0970-43be-a042-0305dd51f6ec", "indicator--2c53473d-4245-45f6-a1a9-6d8322bdbe48", "indicator--9b419e09-8033-4b97-8f77-156f9885dd61", "indicator--4a875a53-64c5-48d8-acd0-8fe5437eb9c9", "indicator--5a77e6bd-41a4-4b83-928c-b973f2940640", "indicator--63c7e51a-48f5-444e-b0d2-f24567ce90f4", "indicator--e0e42be5-adb3-4eca-8af8-c3e32ca37db8", "indicator--2d7f84a4-ce67-43a2-9ee6-d309c26965e4", "indicator--ad670155-baff-4fa2-8b29-70b17af979aa", "indicator--63bf3e73-6566-4b58-bd9e-3e52621661df", "indicator--c71921ce-051f-4298-becd-6bc3a58b80ef", "indicator--208025ae-3896-4a56-9d73-4a1c06669b7d", "indicator--85e8236c-8269-4d93-a2ea-6a00449568a9", "indicator--37e8c070-be3f-427c-acd2-c201db144ad3", "indicator--21eef725-4170-4c58-9702-0d8e8e90dc33", "indicator--82bd5f9e-3a9c-4cee-a5e2-08dc651a4490", "indicator--eb1aad80-bc98-495d-a3f4-fb869ef2503e", "indicator--394abc7a-3fb7-4ce0-af0d-e9a712fce53e", "indicator--55f6f320-1a6c-435c-a458-f1cc63b34e68", "indicator--dafce368-7c5d-4b3c-b572-f4a65b5795a6", "indicator--49afcedd-4401-40ee-b229-54aa42f7f0ff", "indicator--3822c631-1ca5-4989-9fef-19aae8059354", "indicator--90a8c344-6a44-4e85-816d-01cccc8be929", "indicator--387cf90d-05e9-42e5-9f7c-26f683355c4c", "indicator--988dcf2e-6c9e-48c5-a61d-049674c935c6", "indicator--96b0a128-8a17-47d6-ad97-f3d37019ff65", "indicator--d33d7c04-55b4-4bd7-adad-e9f3d6d35086", "indicator--6848ae62-6185-487e-9313-bdd8d63e4f43", "indicator--361ac883-b777-4cec-8e6b-db8157a5a556", "indicator--bc569c74-77cf-46da-a892-d882fae91bb7", "indicator--73de8a89-6882-44a7-a832-7cfa37a4e75a", "indicator--b07b01b2-ac5c-4b96-9fd6-2d0b18c7c2e7", "indicator--1f36e187-b71f-4bed-8c4c-51f8176f8bf1", "indicator--9bed0684-6529-4060-801c-a2ad346ceb18", "indicator--5e0f211f-b9ab-4579-8a69-d7e7f3d8cd5b", "indicator--95f72455-ce16-4352-a862-0c1a9ffdc99e", "indicator--94290541-1a6d-4285-a798-91f123a778de", "indicator--e936a6eb-e250-4b82-a6ac-4cacac6c3b38", "indicator--0b1f9ebf-b894-432c-a139-fe2e0716ce63", "indicator--f8388455-7b0a-4ada-8762-bbd9e2735c7a", "indicator--c853e98b-d5cd-4ab9-8bc6-2c29a81c3ba7", "indicator--ca7e6757-0346-4847-890e-642821f696a4", "indicator--b75392d5-c43d-469b-840b-ccd12f0769d5", "indicator--acfa9fa1-2643-4bea-aac0-2c451b1c5d2a", "indicator--3528a524-6708-44ec-881b-26c18570dba2", "indicator--eaee9b11-9d00-4e61-80b1-55a5353ef224", "indicator--be4882ef-8382-4f9b-a768-00e13f9470a2", "indicator--c65965c5-b44f-4af0-83e5-553379f777e1", "indicator--80651975-4b73-40c7-9262-25f4db87ccfd", "indicator--64050d04-22f3-4e75-b75c-c49f2581345a", "indicator--22c5af65-cdac-4b82-93b4-65456dcc8aac", "indicator--38250ee4-965a-4c4b-b101-cb12686d8156", "indicator--262879e6-6a57-459b-ae65-07cb117b753a", "indicator--e71f1e02-991b-42f4-a267-3710d4ad2c22", "indicator--ef33c860-67c1-4508-918b-63f46180789a", "indicator--b2ca0d50-8f54-4a6c-9afe-5005281ed614", "indicator--637506b1-eb03-4449-800c-6974c7249978", "indicator--007f246c-751b-4ec7-a453-88df33df9c1a", "indicator--06fec941-b8e0-4122-b821-77314639a5f9", "indicator--6ff4c2c5-acb0-4dc4-a8e3-8c25b2eea6d3", "indicator--436e8462-c13d-4073-b4e9-0f4854f0a12f", "indicator--59bbab00-b45d-4f5a-8730-df0e4de2364f", "indicator--d34c34a7-eec7-4cfd-bfda-619d5d55bf78", "indicator--538c0bda-a6ed-421d-950b-d12e69325bf5", "indicator--a9922efa-cdd6-43e0-a3e4-841fa8466d18", "indicator--ff61ce45-5d89-4f9b-bd34-40ec5fad236a", "indicator--d077bc47-e91a-40f9-b8aa-01e119925c36", "indicator--42b08ec2-d493-497d-9e0c-53fecc2a68c3", "indicator--ab1872bc-dfaa-44c4-b674-4795f19397c1", "indicator--a0590978-8dc9-412e-994f-a513ea4980a8", "indicator--7c89ebbe-08fc-4327-a7af-0f3e276cd04e", "indicator--57a17fb1-d7bb-4ded-b3ad-c0b533732c6f", "indicator--62eae36c-4ae2-4aa8-9b45-0f8e8ca7921e", "indicator--60c4404b-7a40-4d52-8381-737d699e31c0", "indicator--6ba7cc38-e08f-4a69-997f-667ecf11770d", "indicator--cbbae586-06b8-4209-a4f2-32c1cda64a1c", "indicator--49bfceb8-b57f-4c76-92e6-48a7d0c80a66", "indicator--f5d3ece2-aa7c-49e0-b0c5-c52d0019aceb", "indicator--f3671dd5-4c9c-4de1-becf-d0c4a31cfb1b", "indicator--9d095bc3-3954-4f2b-bf79-46dc779e992c", "indicator--2e2a65f8-7e99-403f-a3b5-b8d531092027", "indicator--d40b0bba-01f6-4cf9-bfcd-4c1b0e6deb09", "indicator--07a118b9-7ce0-42ed-8ec6-ad8343bc5ca5", "indicator--d7fa549e-555d-47fb-ade4-f37904c9a259", "indicator--d2a54169-d17c-428d-a28b-d54f32ed32a8", "indicator--97c13530-68bc-495b-9321-e041f6c39513", "indicator--07453867-8385-4e9a-b147-49843fbb88a0", "indicator--a3bca4c5-bbb4-4298-b0c6-67a84369001c", "indicator--dd6f5ae5-6cec-4835-840b-6e86bcce71b8", "indicator--513cfa3f-f7a9-4718-a64d-311be6af29f9", "indicator--4bcdb8ef-6db1-4f0c-a413-4c66f5858542", "indicator--71dcc9c1-df6a-421e-b6c8-78c5da9f2e4a", "indicator--288478e9-50da-4bb6-ba5e-8697d7df9592", "indicator--96677132-3f64-42c3-a785-48e8b474e483", "indicator--625de4dd-f1d5-429b-ada1-42354c648cf1", "indicator--a6f5d920-5ba5-4474-a0cf-c34bc9c4c220", "indicator--277f028b-41ba-4988-924b-a5c8740fe528", "indicator--a9fcb3fa-737b-4938-85cc-78dacdaedfe0", "indicator--b35f32e5-b4fc-43d8-ade2-28e309a7b7c4", "indicator--4ba3ee84-6212-452b-ad2d-33bda8e41a3c", "indicator--6d5f59dd-8451-4d3f-afc7-7b98fdc327f7", "indicator--d6013bd0-1209-4e66-a9b1-820f7ccfb02b", "indicator--5523eb66-de46-4812-b154-8a84fff21df9", "indicator--5be31011-d702-40fc-b3f8-e43f467bbb34", "indicator--a95d319b-2d7e-4d72-b698-e6cdbb3d0f4a", "indicator--25636e9c-38e7-42bd-a640-bbb9f0fc9264", "indicator--c9f5f43e-f94f-414d-86c9-27233649acd4", "indicator--65c94bc7-d05b-4c1b-839a-8be86d6373cb", "indicator--f9086127-33a4-4e6c-a0f8-054dd724793e", "indicator--dce54000-87d6-4c61-9950-77bc7f775fc3", "indicator--844065ca-8cef-4309-90d3-dc8bbbe0df5b", "indicator--459bf294-e14f-4673-b464-03ab5140f220", "indicator--97c4f704-e8db-4eee-a304-bae859794e1d", "indicator--17ea2cae-f342-4f6b-bc82-8b50998f4351", "indicator--19318811-6a25-44bc-bbcc-0ecdd3df3b5f", "indicator--86db84fd-1309-44b1-bdce-6692bfea5007", "indicator--7d3d5323-9c0c-4d4a-8850-3fcbbe4f5a85", "indicator--6ebb8ca8-962f-45f4-9e39-8d50cea54997", "indicator--cd121f5c-b6eb-44ed-a6fc-c45db766dde4", "indicator--ac5cdeba-afa8-4419-8d2d-5869b504c3ee", "indicator--351535f8-e2f6-40d7-9241-797ac50654eb", "indicator--96956be0-4485-4a1d-bb76-d02aa7f19747", "indicator--1d7dce13-7201-4281-90a9-f7a294cb809c", "indicator--39a39a47-311b-4860-b608-e00e50658994", "indicator--01f1fe80-9ba7-4202-95a5-aaef54f63aa2", "indicator--4f87e1e2-ea21-435a-be6c-03d5e6c1cc18", "indicator--c7839f19-fd40-44b3-abf2-33942700e1c9", "indicator--9be47337-0175-4f12-9bca-03b67df0b4e8", "indicator--cc65233f-52b2-4820-a071-76fc0e60ac28", "indicator--c8e8329f-fa57-439f-932b-19421630d0e5", "indicator--b5337078-88c3-4881-8ddb-113064bc4ca3", "indicator--15f7ec82-f6fe-42b6-9801-39a792f75017", "indicator--d5760f82-9b8c-4f3a-ae8a-4851f95f90c8", "indicator--a82ac5fa-c512-48ab-9662-379486dc55ae", "indicator--dab4dacb-92c9-442a-966f-97e80624d88d", "indicator--13e50cae-6338-482c-aed3-b818716707f3", "indicator--cc854f4f-15f6-4fd4-8fff-d341f52c5832", "indicator--0a1982fc-3b2b-4cc6-8df3-bfd6811292e1", "relationship--faddab46-3e66-48db-b563-a41096747813", "indicator--b31fbdae-85db-4df4-8c62-aa7b6227ba6e", "indicator--b4d6809c-2909-4d95-a87f-445fd155b716", "indicator--10c52d3b-b59e-4ce1-afc1-2da855767e55", "indicator--ce3121b0-7b27-4434-86cc-22393b7ded49", "indicator--af60d7d0-f3ca-4445-bb30-2857a6f00347", "indicator--b251d147-017d-4bd5-b4a5-3a170e97eef2", "indicator--325c5f0a-2765-4068-b66b-413a8efadddd", "indicator--942fc755-d7af-4f91-9869-6d23fea22af3", "indicator--a29449cb-911e-433c-98c7-93e61e404d6f", "indicator--d8310a6a-ec0d-4faa-82f4-0ce9a44225a8", "indicator--bd4272ad-bc92-4076-b67e-3e00205f08cf", "indicator--a7bf4282-6d05-4a1c-be9a-06cf26901354", "indicator--949bc4be-d764-4ee4-9f99-0a9386831047", "indicator--1c0cdbbd-a25b-412a-81a8-15ae1a920b5c", "indicator--2b6e9358-6d27-4bb3-9466-fd56061aa0fe", "indicator--6e84845d-c59b-4eed-8613-1f65dea034b6", "indicator--ecdf0bf4-b0d3-414e-9612-2e728e75c1f2", "indicator--c9e029f6-553b-4707-b4fa-8db44966fdcb", "indicator--6b9bb40b-84ce-4f7c-a743-20587cea30a9", "indicator--c7ccc3d7-3eda-49ef-85da-7655e29aa979", "indicator--d064d99c-e560-4a30-bb58-af8808852a52", "indicator--7769dcc7-30cd-4545-912a-c6f9d71da6f5", "indicator--dd6cee86-c2ce-48a8-8c3c-057699423a6b", "indicator--c0756899-a0e8-4a78-9cd1-0c87445ec215", "indicator--e1adeb13-9f29-4a73-ad3a-0fa5506ad478", "indicator--94ddca11-ec33-4dcc-bc3a-a094a7fefd73", "indicator--515c198b-63fc-4d64-ba23-8f90c7a6486f", "indicator--7b0ef078-c198-47cb-bf32-5b1ded3d86e5", "indicator--aa51a13e-75c7-4c07-90bc-f7e866e787f0", "indicator--53be574b-1643-45ea-9365-65b75cf2e85e", "indicator--f2e2831a-67fd-443f-a357-7f7d2e7719c6", "indicator--cac19311-4279-42cd-93bf-c73a720b6935", "indicator--f3c79f1a-5e7c-403d-a8fb-d43a88df7cdc", "indicator--ffc8c5cd-15e9-480b-af1e-cae650e329a7", "indicator--ed526b00-ce9a-48a9-9ad1-685997d2daf8", "indicator--054d12e7-f230-47b9-ad10-453dc8461dae", "indicator--2f706896-fadb-46df-92b8-d2bc4481b53a", "indicator--34225a94-6bfd-4e13-beab-3871b093f866", "indicator--2c4c1d97-f934-430d-bf5f-faccf3294a48", "indicator--f04a9538-2f0f-44e2-9ebb-0938f75a7684", "indicator--a9d92116-9213-4a49-8229-f82c63f8f994", "indicator--302de9d3-2103-4cbf-8abf-d194ecea70fa", "indicator--d953e557-8276-42d4-b321-5d4db3ad8b07", "indicator--bf21ba87-2dd1-4f51-86f8-91220f044e19", "indicator--b45701dd-34e2-4375-ab75-d6f30e922357", "indicator--03bb7793-9ab7-489a-96b9-e52e50e221b0", "indicator--32c6b7bf-fc97-4d22-99a7-856245206b3f", "indicator--eec96259-cf13-4c67-8761-8786d9a3060d", "indicator--d33e616d-84bd-4406-9b09-a1ca103b0404", "indicator--05c9d2f9-df7a-4fe5-81ef-f353584fa541", "indicator--4170cbd9-60ae-401d-bb1d-1ed2ab46e123", "indicator--a72c841c-3361-4b2e-8fd6-b80572edb533", "indicator--8f80096e-7d3d-469f-ab3c-658b90db8dcf", "indicator--eff4a9bb-14a4-4248-a3a2-976c086e6b51", "indicator--8aa081a0-98fe-4547-ac37-3026f7abff02", "indicator--77734252-b9d9-4d35-b6df-652cde98f5c2", "indicator--c47a4ed5-098e-4a63-9cbd-ec817affea3f", "indicator--2036171a-95c3-49a0-b85e-b130b0b83521", "indicator--b1036d85-2947-4353-93da-51a8894ea3ff", "indicator--fba5fbaa-48d6-41a9-80c3-300fdafae999", "indicator--8a092c0f-9e4e-4ae0-9745-780326575c63", "indicator--20de47f5-84df-4320-b4d3-0b184ffe382b", "indicator--0e2fee16-9d7b-447c-adab-b4234afab27e", "indicator--f0ecfbad-833c-44ee-b2ff-51f07f4a9672", "indicator--3077ad28-d2ac-4f3a-910e-2cbec8870da1", "indicator--19068d1d-ba37-43b4-bebc-14706d2e1b59", "indicator--c96bab97-be7c-471e-a7bc-e88bcc2f2aa8", "indicator--36b847a1-2637-4439-ac3d-dd06e0a7b1f8", "indicator--f6ab8764-2e28-4962-b50f-e05c51bdf9eb", "indicator--668bf9ae-6524-47f5-9d50-398d7dc93cc0", "indicator--95df21bc-3fb1-445a-81ba-edcf03e02ca9", "indicator--7576fe31-7dbd-45e2-ad1a-434f1172abb8", "indicator--4651e944-55d6-443f-963a-79735947b1f8", "indicator--9dee741f-632c-4671-8834-bac02f448b26", "indicator--10cda643-a6d3-4cce-8493-429c15035442", "indicator--32260aef-c95c-4328-b02d-3fe298a5548d", "indicator--93fb4a90-2f2c-4378-8ba9-d6575c207ff9", "indicator--bb0f2a2c-4ef3-41c5-9079-d3ef085529b5", "indicator--09406b37-f6d6-4eb0-aed4-b1fadf6bae91", "indicator--4d9f21ce-27ff-4a59-a6d7-31aeb00256b6", "indicator--72f95ff8-c012-42ff-9ad3-0b4fe5ac416e", "indicator--9cab0a7d-e8ab-4768-affa-93d35be4ecb8", "indicator--b4597a72-cbed-4dcf-94ea-ac001809e0a2", "indicator--150e04d9-0ec6-4049-851b-b8c1181377e1", "indicator--a7ffcfae-1e87-43fc-bd81-98ac3bc0edf5", "indicator--c227eddb-7e0f-400e-987f-eceecd543f83", "indicator--bcb7287e-a81f-4972-baec-c259637d70bb", "indicator--489f0862-2fc6-4b5a-b7fe-2e0c0b19ddec", "indicator--5b971247-c1d3-453c-ac12-da88e2c9942a", "indicator--b76e8b41-3cec-47d0-af65-48656f5e2cef", "indicator--07a20915-4726-4ec9-8897-c774a7ccfc65", "indicator--5034c3db-f0cf-4491-b2b1-74079ed6d68d", "indicator--4a3306f1-1108-4514-a765-d889993a04f5", "indicator--663e2223-2714-4e3a-b4c9-ce482f06e124", "indicator--b957716f-84ca-44c7-9331-c8319ec02c2c", "indicator--a8de3fc0-70e9-4628-8211-4f3e4dd5828a", "indicator--0d169307-3139-49bc-adc5-135c80908c3d", "indicator--4f68b43f-a4b3-481e-8231-53e44a806ab4", "indicator--244d2f95-8f5b-49a3-a9fc-da067784f3dc", "indicator--fca1b1ac-9b56-49be-9892-15da70a94afb", "indicator--e5ecfcf1-e181-4ec2-aab2-679364b95ab8", "indicator--7a65ada3-4ee9-4098-9c26-29531db8a915", "indicator--9d08e7f3-2890-45fa-94b1-4bad3d5fb582", "indicator--d5c6267e-462f-4d02-a575-3aba35c02d4d", "indicator--3edf90b2-df57-4b60-9c3f-ad5c18fdf368", "indicator--e28144e2-3301-48e9-80d4-512de9c90fc1", "indicator--777c3a3a-623e-4d31-900f-77d4265e2c9b", "indicator--5de9610c-5f0c-4fb3-bc62-7b779db04be8", "indicator--c0dea8b5-723d-4254-b4e7-a3474b2cd1fa", "indicator--3a88cfee-dc4d-4cdd-a569-0bcd8010b365", "indicator--6be27e37-b068-4c29-af06-b00178351f31", "indicator--68567de6-ea2f-4cc3-b3a4-3d688804fbc9", "indicator--e620f978-d201-4b4c-97a3-c5cba4530b84", "indicator--12468795-b551-437d-a19a-65a8345d6e8a", "indicator--71d8c13d-3a11-4364-9dcc-bd5c7fdf8188", "indicator--290b080b-566d-43b9-b269-2f11e294ae9a", "indicator--069b3735-bab7-4bb9-99cf-9339f8d3f0dc", "indicator--17258538-6c9e-4bad-a34d-c3f7473e3c0c", "indicator--a0a9c759-aef9-46c1-9d27-7858ee18e20f", "indicator--24590fdc-d2e7-4f33-8a41-f07a3878c141", "indicator--dfd593ae-2781-436a-b393-bdddfd3d827f", "indicator--5af59f6e-df26-430c-be03-4dad7f1891e6", "indicator--91d9fb3c-ceec-426b-aa60-d2634146e78e", "indicator--ce2430c0-2aea-4aa9-a648-8d5d93794b6e", "indicator--8c4b7b61-cde8-47b9-9373-2d5bd2522e1a", "indicator--d9188453-bf86-485e-bca8-4623ad0d4f62", "indicator--f9fe1924-51e5-476e-884d-0ab22d541820", "indicator--d9e2e2c0-9fea-4519-b434-27c361b7a7c7", "indicator--ab935740-3599-4cb7-897c-9755ad2bb5c4", "indicator--9c7957a7-56f5-45c8-be15-d7919cbf4cfd", "indicator--e5f6dbd1-93bc-4ec6-891f-2e2e862fe9d5", "indicator--ffe5f170-cfbf-42f9-9f78-cf2deceaed99", "indicator--5648655f-cdab-4b7c-b041-90c1498d0533", "indicator--dd650435-1746-48e2-8602-f26b11f89123", "indicator--7ca10081-0415-46e4-bfa2-5d666a6b80c9", "indicator--3c22d1a5-d5f5-4c9c-9724-46115b516bca", "indicator--3cdd1779-fd0d-4c13-b9ca-0dcf96eaeeb9", "indicator--a22415f2-18f8-4281-a973-0ef9347d1f30", "indicator--0ee5a1cc-bd95-4113-822f-a2b407e2bd87", "indicator--f606ffd3-a20c-4140-8a6d-28162cd94508", "indicator--d541d7fb-0b8f-4ee2-87df-c18da289a084", "indicator--a3a3ae85-d6f9-4057-bfde-ecc3c55bd535", "indicator--7d402589-70c2-418b-a00f-5d8141c4490e", "indicator--4ad02f2d-ffd6-4c66-ae12-829021b2958f", "indicator--fa212be5-d402-4b1d-9631-52728d7040ee", "indicator--55935b9e-08a8-4866-b1fa-8d818dba48d1", "indicator--b2204ed9-7894-4259-a499-2b95ad3c573e", "indicator--0b3957ee-eef6-46ea-a452-aec2b986339d", "indicator--77335b63-e3cb-4859-b193-117dc4cc21ca", "indicator--b17be841-a088-4bdb-ac03-1791313aaad9", "indicator--1c432e64-810d-4c0a-abd5-5ad77486650b", "indicator--769e2e7d-d513-43e9-b914-b0542ec0e598", "indicator--f5baa9c2-0649-4fd7-8933-9f536891921a", "indicator--62d64228-4c30-4d18-a5e4-2517f81c7afa", "indicator--db92d0f7-f6de-4bfa-9133-560130886906", "indicator--201ef4fa-b87b-4a66-acec-948b4d042433", "indicator--6b593f39-f266-45de-af15-38a686786d21", "indicator--c20cd346-9eb4-47f6-9830-84fc4ee93d04", "indicator--9f6984d8-0826-4c03-8279-8afad9b7d668", "indicator--449170f5-62f1-4fa2-b035-903987765496", "indicator--5d9e668b-6b32-4edb-9b46-1bf8e94e601d", "indicator--f48ad2b7-1089-4ed5-a7a7-978a4c98b8c6", "indicator--4fc34352-28ed-48d8-b194-4646ae1a0329", "indicator--a62ba369-9a78-4948-9333-aab014185c1a", "indicator--b06e680a-eb0b-4e65-9749-114aa1ba6a4f", "indicator--1ceb8c1e-f956-4855-9dab-e76ce269f408", "indicator--45e01baa-974c-45d8-8330-fa7c08505fd9", "indicator--5abac377-5b19-4ef9-acc9-086dd0b38c2e", "indicator--dbac08a1-ad0d-44e1-b50b-9bb419a3857a", "indicator--8eee0d69-670f-496e-8d2a-3b8f55355d83", "indicator--03e902de-c6ed-4214-8215-9132f5fd1e07", "indicator--c991bfca-1ff1-48f1-935c-2b696818a4ac", "indicator--9de8bf19-0817-4f81-9bc6-4b5bbbccf0ae", "indicator--fd3abc31-ae32-4c60-aa17-17f83db2a9be", "indicator--5cc10320-00a1-4ac3-937a-6da72e2dc6b5", "indicator--1233bc0f-5ef0-4ef4-8695-6385d7c2dd91", "indicator--e713c7da-bfa0-40af-960c-8ce6fd21f20c", "indicator--13e9b6ea-25f8-4d39-a23b-a30ac1b932d7", "indicator--202f7b44-31cc-4b31-93b4-3e84cdedd9e4", "indicator--ed68e9c3-4767-4730-936d-463a2192fb26", "indicator--d1aa381d-a2b0-4a7f-ae5d-a867beb8e83f", "indicator--34873229-3cd2-4963-8abd-b4eeeca4cc3d", "indicator--b98d0d3e-b989-4a8b-b251-63e9436fee78", "indicator--33182665-603c-4621-9b85-742359df9f3f", "indicator--0dac344e-8837-447c-9a12-3cbaac57088e", "indicator--c6b2578f-3855-4787-abae-5630a29ab99e", "indicator--d0ee0442-2eab-40b3-bde6-ce1672ff00c7", "indicator--e99b1532-802c-4cfb-b580-aaee25283ed3", "indicator--290a954f-2f51-4e05-ae3b-43daa7283637", "indicator--75942f84-65bc-46d9-bf08-1454169adfd0", "indicator--d3523bf3-b639-4b7f-a45a-cfe74a4e0014", "indicator--58e75cf2-ba2d-41fa-b129-100c3633c7e5", "indicator--b78d38f4-5083-4667-bc6e-192a446cc601", "indicator--adcdb721-7bd6-4506-bedf-0fb2cf759065", "indicator--7b472122-34a3-4dd2-b987-8866b76d031e", "indicator--1a9f4853-d21f-422d-a378-cd0e809ceba7", "indicator--5ce7435b-abb3-47e6-9a79-0947e5af7c0b", "indicator--bd707482-f7de-406d-a7e7-8bb2b46b9db4", "indicator--268c28e7-5ddb-4a3d-a6cd-32c0f6c6bca3", "indicator--41538cff-91a3-4b0d-9bec-2fa446c439eb", "indicator--5ade1e11-5dff-43a9-8234-2cdd9c498360", "indicator--298a46b6-f4bd-42e4-a809-a568cb406e7c", "indicator--a3f87cd6-f458-4000-b9f8-91badd354098", "indicator--420b5a26-d9f5-4041-bd25-b3f6a6d671e3", "indicator--4d35a034-a823-4009-8c7a-a4a33e42b282", "indicator--81b0e1a6-75f0-4d70-8c07-8eaf56302c2a", "indicator--0d2b0096-f570-49a2-9ee3-043a40c2dd1f", "indicator--1541227d-15f8-4d34-af07-3efd1ccd367a", "indicator--ea7bbb5d-7a0e-4e6e-ac2e-c80878e5894f", "indicator--cbad85cf-b1c4-4371-ae94-13b95d0ffd62", "indicator--bcf8dbd5-bc18-445b-a432-e2f4720e232e", "indicator--0045eaaa-c9da-4e09-964f-fb02d246fea4", "indicator--17661e4a-81cc-4c63-a258-c670b1fae0f0", "indicator--d33d90aa-2e57-44ea-b2b9-ce6ec67a11c9", "indicator--765428f9-c132-46f0-b5b8-c87d78e21093", "indicator--5c413a0b-e0a6-4236-89d5-c739927d246f", "indicator--8ebbed1a-845b-4cd5-8214-6e5afd2be739", "indicator--a24e5f31-1718-4e2d-b35d-f84f9ec85eb5", "indicator--ee33ff12-edb5-48a3-8d10-4842b154e903", "indicator--23c9d915-39d9-4f12-afba-24ec6a521f10", "indicator--52fe3ef6-3f7a-4774-8c26-0f97fbd491b6", "indicator--ff5ebd65-e888-41f6-8b86-1574933a9a68", "indicator--492594aa-9794-4707-b3f2-18e38d60ee0d", "indicator--fb45bfe9-8744-4e48-ab67-aee39db53b20", "indicator--6a5961de-d900-47be-a6f1-bc472e25fe65", "indicator--9653bdb2-e25e-4a5b-9319-d93e3001773e", "indicator--0aba091e-4c55-45d1-92d3-bbd89fd35106", "indicator--d9a51160-2869-4e90-90d2-263fe047e45c", "indicator--3e60a0b4-1fa4-43fe-b781-e57bfa4baecb", "indicator--76e06a5d-d92a-4409-9237-10fd5fedf7fc", "indicator--42f1a1ef-173c-47f8-ae74-7c8a6c37b9e6", "indicator--bea58b05-81b4-4269-b018-b7c9587f4856", "indicator--11284b33-943c-4aec-a6cd-0749b57f8994", "indicator--08f7ecf2-4326-4285-a085-2fdf1da6e5f0", "indicator--bc645cee-c4cb-4ab0-a486-02f3e202aa74", "indicator--fd3872d5-5095-4065-ad09-c81904fa54a1", "indicator--e86d423a-02d7-4231-bc02-16d40792d4ab", "indicator--87366957-baff-4144-9eda-05879c07faf4", "indicator--c9bbb9fa-5989-4638-99bb-ce82f2d4508c", "indicator--6a539890-7bba-4302-8523-41f010fe9854", "indicator--379faacd-e4e7-42d2-b186-f2252798e629", "indicator--9641e5e6-a8bf-4321-8251-abe87bf59585", "indicator--3b510732-5ef0-41b5-b194-d5b9dd2016d3", "indicator--814f2ae2-f37e-44e0-a7f6-e4f10f09559d", "indicator--2483f3cb-3c8d-41e3-9160-db4e416c860f", "indicator--90a0b445-decf-423c-b6f9-20c486d3dcae", "indicator--255c15a0-dad3-472c-b6f2-164ffb33f8d6", "indicator--53c4d66e-7c41-4431-86b6-d153be397190", "indicator--832f1e15-a5a1-41ef-9562-a8ad4ebc31c3", "indicator--b88c6517-504e-4f65-99fc-9dc2b85e591f", "indicator--0f64deba-3f11-4651-bb07-c1b0f40a7854", "indicator--99cec232-e79e-4e18-a402-1778efee97f0", "indicator--93262868-10b9-426e-893d-3b039861831f", "indicator--75922516-69a3-4e0c-a62b-e356790dc141", "indicator--8acf65c9-00b3-419f-a634-0b6cb75652fd", "indicator--cdd7d9b5-7efb-497e-8b97-3a71d03bf9d1", "indicator--6601a8d2-6d84-4a27-bcc7-44d76ee8bb1d", "indicator--8e40c69b-b6a9-43d4-9516-e7f68293ef60", "indicator--467d9490-f9d7-4940-a6aa-10c66978eab5", "indicator--bb7f3444-61ba-4a69-8d5d-4a5a07738cd1", "indicator--2becd59b-e816-4f83-b41f-fff96d85d067", "indicator--f9f6de00-c6af-429b-be18-2bc745584334", "indicator--b08705cf-0141-4408-ab7d-8f5e17d05de9", "indicator--25185014-869b-4b81-be7a-c10e288822a1", "indicator--b8b80172-b97a-4607-9f30-53cc522f459a", "indicator--d3a5bbc9-99cf-4ea3-b1a4-8057ea8c6e7b", "indicator--f11ca6df-847a-46fd-8267-6d44c370f86e", "indicator--640b95a6-bb12-4815-af6f-d1f52925d3e7", "indicator--81c5573a-d8f7-4c76-99f6-e3daac461cc8", "indicator--8cb76b52-b953-4fc0-b37d-bbe22979c8be", "indicator--6018fe84-be10-4558-92fe-2d5a30f9a0d2", "indicator--f76c15db-53c1-47da-a261-761b5ab24463", "indicator--42731cff-a70c-420f-9129-c9345c55809f", "indicator--ef162199-2458-482b-9177-19b99f9e1de7", "indicator--665b92e1-59ad-4955-9c5d-df14ea324531", "indicator--27d2c6bb-c066-4367-ac8b-ae90eaad7480", "indicator--eff0bce1-8eb9-44bf-a977-a3b3c1b84f2e", "indicator--15d40bac-4d4c-4d1d-a44a-4f233585f78c", "indicator--63826eb6-cc09-4187-ba71-87e6cab6b2b0", "indicator--d095bb3d-bd1a-4197-9b80-6e5be73765a6", "indicator--bba023e2-5c01-45b7-867a-1c16df977ff7", "indicator--a8d3174e-8167-453c-8009-33d32e4e51eb", "indicator--654c1026-bf61-483f-ab14-d04e7fb713a5", "indicator--fd73aaf3-7b96-4b24-894e-8f806921f01e", "indicator--6e8d5d78-1f3d-491f-af17-9817bf0f2f2e", "indicator--2b9ed5d7-62b7-4028-b130-26a2ded426da", "indicator--3e853247-2a3b-40d9-81ea-48f42d6e2f7f", "indicator--558e488a-f833-44d2-bfbd-b20aefb54307", "indicator--f6d24a69-334d-47d3-8d0f-0953dd7ea32a", "indicator--9e2a6803-20ab-4afe-bb6d-447cbea7fe03", "indicator--b993bc22-3e55-45e2-b23d-67cfdabfb860", "indicator--607104b3-0a6a-4d2c-b46c-214567dc260d", "indicator--3c89e722-75f8-4e84-97bf-13c9fda93d06", "indicator--9c36ba42-d48e-4cc6-af70-810d35af7fee", "indicator--a394b553-5884-4a7d-98c2-7922ba56f76f", "indicator--744800ee-bc89-4c47-a1fa-f1819a7a9cc2", "indicator--17047a51-34f6-4203-bfa8-a7b1ec90a3c0", "indicator--24545635-35a4-4aec-bba8-47e8cd7fe646", "indicator--47a31109-6e9c-457c-ae04-495d17be51f9", "indicator--b86fdcfa-d723-4bd4-a1e9-d36817bc4012", "indicator--0dfe82a9-df5f-4071-b763-9246bccafdba", "indicator--948bec78-b282-459f-a87c-823c28714ac3", "indicator--3b41d2db-05ad-432b-bde6-296c1c5302b5", "indicator--6c6f07d5-9298-444d-b300-305f00341899", "indicator--d853cb6d-14ac-483d-99ac-b9cefda0f86c", "indicator--5aacd0ae-9c54-43da-babd-8df24361d003", "indicator--96c2fbf4-42e6-4e40-aa86-eb200cf4e513", "indicator--caa28f91-87a3-41b7-b130-1bbec2b65369", "indicator--8870e89f-960a-4cc9-80f8-4ebeb2d2f6c5", "indicator--da1e6ced-f9b5-4d58-9e3f-1e43b6037ed6", "indicator--c97563a9-b991-4644-937e-f162b41ecc23", "indicator--08fb1b59-5845-4818-b245-3e574aac6f4c", "indicator--d477439b-b7fc-46cf-b174-600bc0f37cf1", "indicator--eff21b80-3ef0-44dc-b2bb-57e846f4af1f", "indicator--865f8e19-088e-48c2-ad75-f4cf57fa5b6c", "indicator--93493277-08e5-44ec-ac75-07754ad34eb5", "indicator--124a9a74-1492-41e7-aa98-8645829dbc88", "indicator--36ba9dc7-4111-41bc-a30c-46bb94168c8f", "indicator--34ea687e-defb-4c63-85b5-af0828f3ac75", "indicator--6f7f6b89-321b-4af0-b206-c51765184d15", "indicator--0d67d8a9-5d6d-4143-ad8d-ae11f01cbdc5", "indicator--4c163d9e-ca17-463d-8f96-e9b0ee1b4525", "indicator--ec6da9b0-5d98-4100-b0c3-c53b92e9a810", "indicator--093a0c9f-c4c3-40db-8bce-20b4abe8eadc", "indicator--66cbb53d-6261-4759-8391-32fdff8d1d93", "indicator--d8ffc395-3a29-44ff-9b50-56d12d053c10", "indicator--9bcd01bc-f59a-464c-b7ff-864b76163010", "indicator--c9b578fc-81f8-41cc-b4f7-09467d0da7a1", "indicator--5cb53208-2468-4025-9ac0-97d8266061cf", "indicator--005b1b85-716f-45d3-af05-8b7cf0f17f65", "indicator--a173e522-9d91-454a-b5fd-956735463e47", "indicator--4087ef72-693e-4ebc-9569-e1c37690b211", "indicator--aebdb0dd-56c2-43f1-90ac-52754e1a3e5d", "indicator--26d620bc-9583-4cc1-9f4e-b163f24f994d", "indicator--5ba0067a-c80f-4048-8415-543619dacb09", "indicator--abb980f1-0a76-49cf-b1c4-b411094a19da", "indicator--fc5b5e24-9c26-4205-b88c-7f436bfd30f7", "indicator--992bc6f2-9a09-43ae-a738-7ce1b5772d71", "indicator--e2dc1423-cb1d-468c-a5e9-c64d28557836", "indicator--d6e17ed7-cfda-4974-b111-a213e530412c", "indicator--6b9c1fb6-f169-457d-bdcb-ad2bbef1783c", "indicator--dad3262a-15ef-4334-b751-3a04732ba4d7", "indicator--121461e4-8c63-4a9d-a256-2f940cccbd62", "indicator--88bde832-9c63-4b9c-9b38-0b6c54eec35b", "indicator--7356be27-1be0-4f1c-bdb5-bcda1fd6a888", "indicator--403a0bdb-27ab-4ada-920b-8032f6efa0f0", "indicator--27f32964-9b27-4d2f-b498-5b5d55741290", "indicator--86058012-a229-4be8-9958-5606adac1721", "indicator--2f79e22e-a23b-47e1-adf8-8897751ede89", "indicator--793bceaf-1c6f-4904-9321-d7c378e4dce6", "indicator--01b1c3b5-7aa9-4aad-a532-017fd3fd6c8c", "indicator--2900a5b3-8a03-40c4-9944-2116bc56c465", "indicator--e5681557-3d3c-466d-865b-2ebea86d57cd", "indicator--15a24518-b6f1-45bd-92ed-fbd877e13587", "indicator--22fdb5cb-eb11-4ed0-b426-ef0326f536ac", "indicator--6d91762c-3841-4e80-9643-72001dfff958", "indicator--8abcc7fc-2013-4f40-b7ec-71ab251b225b", "indicator--31dec975-4cb9-4465-988f-65c00d9bcec5", "indicator--68cacb78-8fa1-4bd5-8f6e-97c63be55745", "indicator--bf7da546-0a73-4e39-900a-75edee03b1d4", "indicator--9b59c00c-300d-489a-a84b-72b9746bfe9e", "indicator--c6d5ad40-dd5d-472a-aa03-6b1bcd98bddb", "indicator--69b97f0c-1cea-4c17-9a50-4549782f15bd", "indicator--51587fa5-c1c3-495c-83d7-e6823b957794", "indicator--8d0d9fb5-5512-4ef8-b59e-2a68e707a417", "indicator--d01206ae-a6f3-49cf-a476-1ac81dc896ab", "indicator--b8fb9327-4d91-4193-9abc-6bde8a58a24a", "indicator--2f9237f4-7656-4ac8-aa4c-0f8cdd7ec48b", "indicator--b1ba6284-5b4d-45af-9488-1de0c8598f42", "indicator--7e9a3512-67fa-4a7e-a11c-f93429c7f01b", "indicator--890636f6-da67-48a2-ad82-e2b15615a3a4", "indicator--7522bcf4-ae78-4aa8-8a1b-7e123a3ebf32", "indicator--402c4a0a-aed0-49e6-b2ba-7a72a50cc37f", "indicator--66b2264a-6bf5-4686-b29a-db297845b098", "indicator--1295e8a2-6618-4810-971f-463c54186ea7", "indicator--701c6fe0-8603-4248-a1fc-7669df1216b9", "indicator--01cf9a84-b39e-4016-8a22-1683366be13d", "indicator--ff112e4e-2563-4583-bbbc-ebb32c004fd6", "indicator--060d766b-07a5-433c-acfd-0458a10d90e3", "indicator--db095bf0-0d76-4eed-9198-82e55e3e01e0", "indicator--72a09a14-ecd1-4549-955a-6824c6a93e93", "indicator--f9c94919-9284-4e7c-914b-4efc9e6c81fe", "indicator--0eb244cd-11b3-4f1f-ba85-4cda767e03dd", "indicator--ab68ac54-a28a-4a1e-a582-dd2a616530cb", "indicator--6e9b3dc9-9a26-42e1-80a7-a5c6770e9f9f", "indicator--db598bc3-c03a-457a-a56c-63626fcdb3a6", "indicator--adeae893-b09d-4527-9b7c-d2f826b2d3ac", "indicator--538d3683-ebbc-4578-8399-27446be2e9f7", "indicator--e7d776cc-39c1-476e-84ba-e92f8ab7fc88", "indicator--801ae6a7-4e8b-438a-b892-d909ef4d475b", "indicator--8c674193-d359-48d9-98bd-630060f0b5c0", "indicator--882a1540-a24f-4b9f-93cd-7b178c32e7a0", "indicator--e437d47e-73d4-4da3-9510-aefa6e38a990", "indicator--3235b4f8-15ab-40ae-b59c-044412c81922", "indicator--50089b7e-2766-473b-8d0a-974fdda32c4a", "indicator--9f3092b5-1c5e-45ec-b9e8-63f9a1dac311", "indicator--6d02e7af-a886-4857-953f-6dad5a1ab594", "indicator--749704f2-8044-4235-b7b4-68464a277284", "indicator--69bd4d30-8702-4a2f-b9e2-8a921ef4eb34", "indicator--3c49fbda-2522-4dd7-a737-ee0d0c19e786", "indicator--2f0f0d80-3932-4e4e-90aa-cb2f596acc06", "indicator--ae437293-f126-47ea-a190-508965709837", "indicator--ba4cdd19-6dae-444d-ab73-02535664588a", "indicator--b11bbff8-8b2d-406f-ab72-be82061b303f", "indicator--37499e4d-ccda-4864-ab37-f1826bc82f32", "indicator--06798c51-e4c8-4653-b848-dc1f547dd05a", "indicator--9fe18773-799e-4f72-9e66-0adb7ab6a50a", "indicator--1636f1b7-ca89-47c4-a7c5-4cd8fa500f9f", "indicator--042c4dcc-7c19-4040-994b-e427c4d87a48", "indicator--c21390f6-ea70-4437-b809-dce4cec29291", "indicator--8f345699-4eb6-4927-9ac7-7c01e793cadc", "indicator--6c82cfdd-b5d5-4523-a8fb-f75078db23e2", "indicator--c07da726-18c0-4586-8cf5-6b183db3c32c", "indicator--16255a11-5f3a-45ed-a35f-82bdc7410a05", "indicator--3bcdd102-4cb0-45f0-9d8c-f411abd9b952", "indicator--0a13d98c-8725-4f70-a9b1-8a7ce9448bab", "indicator--bd704a97-14c1-448b-8b73-fb307a30be53", "indicator--88d92321-8976-45a2-b63d-cf8d179dff00", "indicator--cd5aaac5-6d1e-4d72-963f-56424f83816a", "indicator--581e59c4-81f8-4c7a-86b5-8960f75d55c1", "indicator--66833a41-0402-48aa-9521-f9cad9faad03", "indicator--9de59100-b0ec-4d76-bd8e-0f45d4074f37", "indicator--aa5f5acc-89c0-4f10-8836-594627a83888", "indicator--4ac399d9-4bad-4a66-8293-2f8e5cc4bbef", "indicator--75c80772-654b-4bd2-89fe-ab9a762ee2d8", "indicator--2c81aa82-f245-4d80-b30c-e9a66c539489", "indicator--47155fc0-f81b-47eb-bbf6-857909e0a43c", "indicator--aff8c355-2ab9-446f-83e6-d947b89ed6ba", "indicator--6e5fb6e3-79b5-4608-ab8e-a7ec630aa876", "indicator--40b81b50-320e-453e-bf23-a7017ffbe666", "indicator--5d8e543c-58d6-4828-979a-f9ec40baf94a", "indicator--824033b6-8ce1-42f4-ac9a-13de7104227e", "indicator--accecc64-e436-434b-8f7a-83a50720f70f", "indicator--d6c205b3-1ced-4610-9607-392f9208838d", "indicator--08840bfa-a2f3-4fff-b453-ebdce088993b", "indicator--256b6390-f5b2-4e85-9b5c-0ad29bb8e315", "indicator--9c258865-1732-41f6-9f68-db1f88083fdd", "indicator--f292400e-8a16-46ab-987f-7235385ec5cf", "indicator--2e77c77b-f4c7-4ddd-84a9-45083d5c8830", "indicator--6293c6bf-71d9-4aaa-96be-f02d567c972e", "indicator--22144208-55c0-4913-9e70-794a2fb48d51", "indicator--356f55b4-6a15-492f-a9ed-58484e2e29cc", "indicator--938ecf75-7bd0-4ce3-8874-63af8d1fa078", "indicator--6827f1b9-7414-4e33-bcb2-bd9dc4ff1f47", "indicator--0a772f6b-c8b4-4b62-b2eb-ea476e2a9e67", "indicator--9a74b5da-2dd7-4ce3-abca-163906dda475", "indicator--efe39830-9687-4d49-aee5-d8742bc7daf7", "indicator--85ab7b6c-03ce-4f7a-87e7-76439eca0d77", "indicator--7b0d8124-2860-406c-8a6c-e493367a5d85", "indicator--6c575bb1-e42b-4087-827f-d49aa1ee0fb3", "indicator--6779b89b-63d9-4a7a-879f-8ec93f4c435b", "indicator--2d90e0e0-19b5-4698-8a32-86df18380537", "indicator--86c9918b-6b2d-4c26-a72f-b6180264e4d9", "indicator--b5f61103-9c87-4562-9f6b-8bd1fade52c7", "indicator--d0840859-6e7b-4536-915c-45f702d49605", "indicator--5fed4822-6d97-41c9-be7b-1e03ec08545b", "indicator--b1cbd46b-3824-4260-a37b-4331310a195f", "indicator--47ec7a84-91cd-4a35-a3d1-868ad5873c0a", "indicator--0a81e675-b4f3-4844-9c32-43314ef3f5c9", "indicator--7c16140c-b4b2-4c93-9272-a45a61bdff94", "indicator--1a2a9d3e-beba-4b60-a237-e3932140a04f", "indicator--2a383a53-ee0e-451d-87d1-ab5cd3e18b27", "indicator--095929a9-ddf4-4a90-9f60-ffc2dc578401", "indicator--37001750-ff9f-4c51-8e16-1b5d6ee770cd", "indicator--a6638c87-284b-4e2c-a4ab-cd4d7d5ac148", "indicator--5995d25b-afc2-4e42-8039-8a263fce1381", "indicator--191d66c8-adff-4970-89a7-5f22d4ba3398", "indicator--b7ca4cdb-7e1c-411c-916e-ee1bcfaa47a3", "indicator--7fa1df26-61b2-4426-ae08-0031b2407ee1", "indicator--a97015dd-3461-43ca-95fc-ae478e136fc2", "indicator--e0fab7d6-7d8f-4548-aec6-7c4d2c234d46", "indicator--6f87cade-708d-45a0-9a0f-8947dd48ecd0", "indicator--7086aaf3-1444-4790-9517-beea2677a012", "indicator--c3ded75c-1498-44c6-a6bf-d08c64a8f476", "indicator--753e89c5-60ed-4368-8f6d-029d41a5cca9", "indicator--2cda9f81-272e-4c85-9042-fbd315586a9f", "indicator--6eafd183-fb23-498f-9528-0809bce41b27", "indicator--de18d52e-0629-4d4e-ad99-45f8fad449d3", "indicator--73a54aeb-db22-491e-92a1-f7153481f05f", "indicator--8eb3810d-90c6-4e78-b32c-43d952138afb", "indicator--2f579f69-5210-4cb0-8ee7-29c1beff78bd", "indicator--e4a7ca5c-60c6-4a2c-8673-a386c0627cd1", "indicator--f23b7b48-d845-400e-bad0-a85d04d98dc4", "indicator--e0c69953-4921-4d5b-ae3b-a9368f7d1b6c", "indicator--caa4ad8b-0220-4464-afc9-b11ac724e465", "indicator--bf24e01c-7e51-4fe6-acd7-01c9f15c38f8", "indicator--1a1dec8c-2e86-48d7-ae9e-7666ebbaa285", "indicator--f18f6c97-d5e3-4dd1-b671-a85a5fbb11e0", "indicator--9cb0ae43-a6dc-497d-9b39-afc44ecc1080", "indicator--21ddca4b-81a9-4aa6-9fb9-1ddad53892c7", "indicator--6ad039b0-2829-49a9-a6bd-c746e1f40761", "indicator--c50997ce-cd26-406e-a49b-57720357ac45", "indicator--f0add24e-62ca-4eab-8049-a1deaaed9ca5", "indicator--90906d07-22aa-4453-b2e8-760bdf8cb0b1", "indicator--efab81fd-b818-437c-ad29-b55e1613dc55", "indicator--5efb2dad-3533-47a5-9a70-2e6c2f921248", "indicator--fe51dce7-0205-48a3-a4bb-58a5b5de82fc", "indicator--2ec67bef-1929-486b-a167-249abb757f25", "indicator--7f398de0-997e-4f80-8638-b0058a6acf34", "indicator--1fc9e6b1-d41e-473b-b006-182a05347f75", "indicator--59e01dfe-ce96-4830-b889-c08e28cbb2a3", "indicator--1ae1121c-6143-4baf-86f8-f345f1316f04", "indicator--ab3f85db-f9a1-44cc-848a-2bd29e26365c", "indicator--76114172-cbb2-45bc-8eba-ff26a7102760", "indicator--cfe34a60-19c8-4720-ac17-51268174d2d3", "indicator--5e543d47-dcad-4ee9-a7da-41726ba24386", "indicator--9d67be1b-a456-4447-b0de-6fb11849ee08", "indicator--77c7b9de-13e3-4d79-9d0d-8a91b390de37", "indicator--f5db46e4-938a-4645-b42b-27296668068d", "indicator--db4d9051-9f3b-44c3-9874-df674d257822", "indicator--9dfb3630-36eb-4bd3-a1ed-dcabdce81313", "indicator--f68c26a5-9c58-43a8-a42d-b45cba557b71", "indicator--7a8da786-e93c-4eb6-933d-c1b53d3cdd1a", "indicator--9b798da1-0239-4251-a9a2-9654db2915a4", "indicator--e067d435-d9be-4c3a-92a6-ea30f87594cb", "indicator--09405a18-485a-45d8-92b2-3ac3f3bd7c4a", "indicator--047aa72e-f237-4ece-88f6-6afeba593019", "indicator--6fc23e55-b0ef-404a-ae92-d5a93c1724cd", "indicator--0a619f46-2be4-4d75-9e79-ecc08e65594c", "indicator--4549f80e-6fca-4a76-82a1-bde543acbe40", "indicator--6830fe22-66cd-4951-bee9-3557adc8063c", "indicator--7560879a-5c9f-4dc1-9b21-37b52c726e64", "indicator--b890c2f6-964b-4a3e-9bbf-fb6b5ff3cc88", "indicator--9c85df91-bec0-484f-8c3b-d20a1336d10d", "indicator--2124a864-1a4c-4410-b6d5-4375e3f1075d", "indicator--718772e7-9aac-4803-9384-1dfe3ee00ae7", "indicator--c5cd1c1e-33c7-4cff-b24e-ee622929234b", "indicator--efb00967-488e-413c-8e73-5a6735bb9aed", "indicator--17bbca69-8da3-47d8-9be8-7d6bf86b83d4", "indicator--ef39131e-9582-4f02-a835-fa65c89a2ddd", "indicator--0eba8b68-269b-4c75-b891-fc0f9062a9e4", "indicator--8b10d99c-6e70-4e2b-8552-ad9d84b6b57e", "indicator--ee0fa4ef-a379-481c-bde4-565ffb6d5765", "indicator--d3e6fa18-7f7e-4e32-8c60-2c2579cca5e9", "indicator--51a4b739-e956-4518-95e7-3b146a5eb1e0", "indicator--e75d71de-32e8-4082-b879-d2d60e3f3c8d", "indicator--ba9dc963-ebfe-414f-b96b-b6358b2124ae", "indicator--07513496-dcee-4967-ab18-6ed713fc5cc8", "indicator--d54470d3-6b98-4004-80f5-beb95bca9c87", "indicator--008fe50e-9ead-4d79-ade8-9444b9cd7c73", "indicator--df48759f-9530-4467-9ded-ad71e52340fc", "indicator--6f58cc1e-8769-4c56-bda3-f0caf8938b7b", "indicator--9e2c81a4-094f-4253-a2a0-6fbbfb47e37e", "indicator--49e1510b-8346-4ee6-aef7-889063f25540", "indicator--367a6ce0-55a7-4f45-b2eb-2507e3e3f97d", "indicator--42beb3fc-e3d8-404f-b4a5-8a4fa9282f05", "indicator--0d54c987-73f6-427b-bd32-2c9f75d1c090", "indicator--c576cbdd-8565-462d-aa0a-cf06ebe0f805", "indicator--739ec108-379c-44bc-a7e1-59581ae66a97", "indicator--5bd0e4cf-4462-42f7-9d49-c205de98b5d2", "indicator--f9a9c0cf-c79c-482a-9b2e-b723b0421777", "indicator--17a11b1a-8799-4e43-a3ae-2692e8872544", "indicator--166a104c-6152-44a4-bd86-cfc059ba401d", "indicator--f7a06cfa-0358-4d98-b610-a46664102445", "indicator--4800729f-c5ca-42f1-ae91-7960147afee3", "indicator--713cfbc4-7d32-4c35-91c7-e54130dacf3a", "indicator--db705fd2-7f56-4b44-aaa1-0e33585c363a", "indicator--2a268970-74c2-413f-9fa1-9c021e2107b5", "indicator--bb8128a1-dfc6-4d70-a835-fd5f838f3391", "indicator--e8da1f81-f671-4022-8693-9d80e3274ae6", "indicator--84271772-2ce7-4c55-a9e8-5c77cbdf8d92", "indicator--3e03f72a-1b0b-4249-8b53-12aa125f7d5d", "indicator--8c74b920-e6a6-4468-af9d-5d5e2d7b3c27", "indicator--d339610d-db28-4935-9062-2a1acdf2c616", "indicator--5b0cc52f-8fdd-4a34-b8da-ad6746e1e428", "indicator--d47b6647-8fda-4dca-b548-aaf88e760f6d", "indicator--a89d8cca-fba1-4d58-b4e6-267bd53e1d57", "indicator--f77625fe-f33e-4f37-a4d9-fa15a9fdc520", "indicator--ca4399ff-66db-4e37-9942-c1eabf43b78f", "indicator--d01be5a5-c71f-40aa-99e7-05da58175e8b", "indicator--c1d3968a-9790-4a2f-824c-a743a2ebb078", "indicator--4a0976b3-c340-4168-867f-0780ea6e5c5a", "indicator--094d50a8-5946-4899-84fb-356ac7d589be", "indicator--2c88daf0-334b-4551-b030-398fe0b65b4f", "indicator--e3f02f19-67be-4486-9114-f329c73782d4", "indicator--6a7f3093-c671-4715-b018-6e26548620d9", "indicator--6aa760a0-d044-4b57-b3aa-e9e756459c98", "indicator--16061259-42cf-43f1-b238-12cd62f672ca", "indicator--71efcef4-9d51-40ef-9873-51e47600e1c2", "indicator--7c8691d9-45e6-4feb-a963-4b3f8f7d0e86", "indicator--909e4e6d-a569-47d6-9e43-ac42f23a7452", "indicator--57f170b2-187f-45eb-8eb9-1e22fb494b8c", "indicator--336534ba-4e8c-4bdd-8a39-c93abb541a1f", "indicator--25f3f785-d7bf-4267-9c5b-3cbf95bdd16b", "indicator--345661b5-1dca-4e17-8f1e-dc4288408ce0", "indicator--e7da257e-47b7-4f7f-9d16-dd68d8a74d22", "indicator--26a2dac4-a7a9-4f85-aaaf-ab6926e9d7e5", "indicator--e878cf9a-a87b-4b99-9b87-b0b23c832b05", "indicator--814e2132-0794-417c-abb5-906ae6a1becb", "indicator--c9dfcc3a-bf88-4b2c-89d8-7237afd102c5", "indicator--02bf6aaf-06e0-4a67-bf97-e38d5228dc6c", "indicator--e4e34e78-9b22-4957-af85-c70a373c57da", "indicator--e15dee8f-a727-43cc-97b8-64b8601f1d5b", "indicator--93ab70d7-d802-4a06-b772-df420d03ca1e", "indicator--cbbf8361-3837-4839-b32b-a4f29c18efe9", "indicator--7f90bf8f-b79a-4839-80d2-8749e056a155", "indicator--38311db8-7196-459e-b108-590ff6d8a270", "indicator--3ba56b75-b128-43d1-b246-9e16608f1dd4", "indicator--c0d30b13-c569-49fe-bda4-ec8fd9f5331a", "indicator--b10a970d-fc16-4491-a681-6b9298c035f6", "indicator--3e8482b1-5440-40af-97e4-82e1b5d5dfd3", "indicator--9eb54aa0-8d57-464f-a042-e1b71aa6340b", "indicator--bebbda40-2905-4c2c-8179-d35d13e2996e", "indicator--9090ca1d-0838-4d9d-a7f2-32d1e943bd06", "indicator--db4573c4-ddc3-4c76-8f07-201e8e3af30f", "indicator--c3c548fb-599f-4cca-a2fb-904b641fbfe5", "indicator--8ed64f56-bac7-4809-9d9c-74de487b0a7a", "indicator--951f3a15-ef6c-4b3d-95d1-7b7a4c9e5d43", "indicator--b75957c1-92c0-494c-b9a4-d628e4c483ec", "indicator--903779da-9018-446f-81cf-0a47c12083d2", "indicator--1065a80c-3574-4aa9-be2d-fac6c9a484df", "indicator--98526d40-1d7e-4e11-8915-6182b12d3944", "indicator--044e8c59-9289-4721-a9e4-b52475e19961", "indicator--85e45870-d305-4a6d-975d-3b7b0ac57f77", "indicator--d8f369d9-af55-4eef-aeea-f346d838c96e", "indicator--c9ab9660-0cb5-48f5-afed-d1cb3e9c0043", "indicator--31bd2dfc-1ab9-4f9d-9c86-acb61863bd54", "indicator--804f3cb4-c8c5-465f-8213-f37aae9c318b", "indicator--9ea3a0f8-6e6b-4cc3-b492-6d7cd76a7991", "indicator--c1257326-fbd5-4e68-93bd-eba6757648ab", "indicator--72715af1-1979-4876-b5ae-03ad7c8f09a2", "indicator--55e8e64c-3dfe-4ed4-85fa-75a8b22c5900", "indicator--1b5e300a-17e4-4c74-a036-c1e440347aa1", "indicator--e5c21c7b-ec31-41ff-9212-0c91aa1b90f8", "indicator--25681cf8-82db-48cc-97fb-722bdadbc432", "indicator--e54a68da-cf1a-42fc-96a2-a88479474a32", "indicator--8984a802-4e7d-4b14-a9e0-482efe6efa88", "indicator--eb7b9db4-6ffc-4206-9e9e-c10617425b6b", "indicator--c6c2fdd7-1c1f-4776-aa44-4480b2f81bbd", "indicator--97deb0e0-c17b-466f-a2db-993d6c023b13", "indicator--f11c6f14-8182-4855-8eb6-5606228bb0b7", "indicator--096c204a-0f91-4767-9b5b-275c6babe050", "indicator--bbb1a523-2b0c-492e-8e8d-5db78fc0f6b5", "indicator--7f6085fe-3f8f-4798-a571-30099f9909e5", "indicator--f54b3077-8480-4682-b099-e4ebc3162d7b", "indicator--86fab4b6-0d63-4af8-9bdb-c9d096dceb88", "indicator--e30b3213-29df-40cb-9ec7-13404be6bcca", "indicator--ccee47be-2ac0-4d4d-ba0d-79f030a57c01", "indicator--84e97b02-1919-403b-8c8a-35ee6850d965", "indicator--1c7ffcec-6e80-4daf-9e88-44bd86847da3", "indicator--611354e4-60cf-4a0f-b3e6-2b9a2400103f", "indicator--d04a7acf-e270-4a71-9c82-77bcfb28f8ec", "indicator--98760681-4d8a-4217-ba70-cffc76a6e0e5", "indicator--66f2fd0c-651f-47cc-b1a9-a3c296b15e13", "indicator--e282649a-81ce-4594-aa7f-327bb214eacd", "indicator--eb5eab54-0576-4269-a33e-718ea9fd6d7b", "indicator--30b76356-88f8-4954-83c0-557a546585d8", "indicator--a65c3de0-66c0-44ff-9e56-c1cbebf17e38", "indicator--d1c0546a-bf42-48d6-80e7-2d5f7e6ac40d", "indicator--28c97f49-19f6-4335-bfd5-1c74073f550d", "indicator--c0abfee3-013d-4b23-bf1b-76d3d78769a0", "indicator--9f08ba04-1880-415a-adac-7dcb5df86ff3", "indicator--2600c967-5fd2-4f24-87f7-d0b4633400da", "indicator--56bd0d66-99e9-4dca-96d3-55eb9b037be8", "indicator--596ccad7-6639-40e9-8f3d-5de23772336d", "indicator--cb4bda38-3afe-415e-b350-debc9405a02f", "indicator--11f918e9-e591-4a03-8e7f-73d55b6a592b", "indicator--5a14bbe3-681d-4a13-9c21-4226a93aea81", "indicator--8105fc65-9b24-4e33-8bc6-6f198eb30676", "indicator--ca39c939-d8f6-4bb9-a960-813fe13d56fc", "indicator--1f7591a2-3152-4b50-9994-0c470cdca06c", "indicator--f39a3c8e-72db-43a3-af6d-07a399c039ea", "indicator--22d5d085-77d6-4eea-9bf8-27d669288c6d", "indicator--e048e3f1-2f72-4e96-954a-046bf96a67c9", "indicator--babd9e3b-31b6-43ad-b50d-91995f7ae2d6", "indicator--443767b3-b9e2-41dd-be5b-e9dd5a07236c", "indicator--ed250269-e2ec-4096-b837-282467051ed3", "indicator--960e0b5b-7b3f-41ae-8a4f-540c72cfc373", "indicator--b48a8463-af23-4380-948a-b3018b14268b", "indicator--91527e1b-308a-49fc-9c61-f4149b9917b9", "indicator--5eff6a93-bfc0-467d-a19e-411514d79cc9", "indicator--c92444a7-d01f-41fa-87f6-e91f7ff687a6", "indicator--afc8867e-6c70-47bf-9133-124532335d25", "indicator--24e059a2-7ef0-44cb-bd5c-8c727b3cc148", "indicator--aad8f739-1f84-4ab6-b293-17c1e9fecb84", "indicator--d6513ec6-c77c-43c4-ad82-608e75c13b43", "indicator--f003a645-3e39-408d-a9ab-44acb66cce9f", "indicator--0b259513-866d-482c-8ded-cffa02c1d0b4", "indicator--fd1ed0a7-6ad8-4b81-87b7-3bf424b80d3f", "indicator--50edd5f6-f2f1-44d7-8f65-19853967de46", "indicator--9408a170-41c4-4b63-8944-3d64d11749e5", "indicator--8eca4702-786e-48ea-b9ed-5faa5453f318", "indicator--165c3821-7a50-435a-96d8-0a11188b9836", "indicator--662dc8f7-e56f-4caa-b331-d935e9ee38e9", "indicator--f205e1e9-afd5-4e71-8a00-b9d2f9b7e281", "indicator--b61e079f-5f5f-43ce-9c32-ce3794e3c37f", "indicator--c62fca2f-3eb2-4567-99b9-2a3098e61cfe", "indicator--189cb311-778a-417b-85f3-2e36046acbec", "indicator--1e514fa9-4ecb-4bf3-aad8-67715005fb32", "indicator--72405ebc-3586-4507-882c-04272395fa2e", "indicator--563c2822-247a-4038-aad5-fed0fd9d2f32", "indicator--2a1b9fd1-678f-44b5-97b7-2f28cf2ccec3", "indicator--ed410830-e02f-4b82-b9d8-8ad14a69a2c6", "indicator--bb641d9d-8580-4668-a561-b895ae626828", "indicator--26bc6eb9-eede-4ada-bceb-f5d4985e40ab", "indicator--cf2a1a6f-0197-49eb-80dc-d9837bd4a1de", "indicator--01e372d5-8db3-4838-8bdc-afa0654c7c7e", "indicator--967c02da-e851-4f0d-911e-c4aefaa3d5c9", "indicator--7a54d7f5-c85b-4d26-a077-c9a97816ac63", "indicator--7958b72f-8a09-482c-b229-bacf08727999", "indicator--da877b96-58b6-4480-b0d5-22817d82fea0", "indicator--f2bf4cae-edba-46ee-ae17-38d06bfd9470", "indicator--53db055d-66d6-4ec3-85d9-c78c145f1ef8", "indicator--7fa48791-8da9-4440-aefd-264e629382b0", "indicator--7afcd4e5-ecc5-4ead-9b38-401ecd616e9b", "indicator--d34f4f7e-29c3-4b5e-b10b-7df84f4b3e30", "indicator--eb05cbcf-ca4a-4bd7-be52-4860558e36ad", "indicator--226e16b2-65d8-47b9-b99f-ef2eac37e9bf", "indicator--dfd174b0-8da8-41ba-a5f1-0557c546b00f", "indicator--53508111-54ef-4237-85e9-61385a3fa748", "indicator--3e31a0d2-1864-43b8-8cb3-7f25ea08fcbc", "indicator--46e705b7-9303-4681-9c8c-b2687d36c93a", "indicator--641326e0-d4dc-4537-ad1e-7f15ecb99da2", "indicator--fb41832d-691d-421c-aeed-6517c106667f", "indicator--7c4c9e49-5d92-4831-bd00-1f643a83704c", "indicator--8718c0d1-7475-4de6-aae8-c7f362364346", "indicator--6ee030c7-1731-4fca-a0e3-c65e1bffe9d9", "indicator--2b4dcb90-061c-4426-a7ca-56f2c0d8d4df", "indicator--d4a4ee8a-5508-469d-be0b-226524327473", "indicator--ed50823a-2b7e-4e54-aade-53dfe6f6536f", "indicator--2ddab630-b127-484a-a44e-54f0807b58ce", "indicator--790ae8c0-455a-46cb-93bb-15820136cb34", "indicator--43bf4727-0fc0-41fc-bf17-733eacadb788", "indicator--1f88243e-a562-4c83-934a-ca0afb2a4fce", "indicator--4bf0e852-1d1e-4090-bb2b-d6ad06124eb4", "sighting--6edf859d-fc51-4dfa-87ca-67ecfad0e912", "sighting--9c2cbef4-717b-48d0-8486-fe00a3e59889", "sighting--126c2e6e-52cd-4ced-8652-3dcfc3286a53", "sighting--61000e86-51ce-4de7-ad6e-011dad017395", "sighting--abbd286b-2598-4ea2-8073-0fb12c3faf5c", "sighting--5bc93b53-404a-4ec6-b984-89580bc9c169", "sighting--520fb8b8-77ed-4de7-a4bd-e2dd5c344fd7", "sighting--3f642695-5ae7-451f-acf1-01d566455a15", "sighting--4fb33626-281b-4c9f-a078-e370e0ee62d6", "sighting--47885d92-29c6-4ab8-a838-35f3da6358ca", "sighting--1cf28118-cbae-42fc-be00-bf15e9b46ec9", "sighting--b98637d0-b576-46cf-9e90-bf57d4007307", "sighting--1a56eabe-2d84-4784-95f1-2cd13b9aef56", "sighting--d274859c-8d41-4a6f-877d-d6002ea166d7", "sighting--297ec97e-f09a-4675-aff1-0fc02f5b51b4", "sighting--29ee1dfe-3f12-4e09-ba6c-113ab5ffe44c", "sighting--615e7998-611f-4670-92e7-4154bb67edce", "sighting--e100d11f-caaa-4d02-8f62-a2789290ee0d", "sighting--874231b6-2cae-40dc-b8cd-46dddd79520c", "sighting--c2d382da-5a0d-4b34-ad65-680adec8f109", "sighting--54232a1c-ef01-4f35-9fbe-c9e49ef5aa85", "sighting--35986d5f-962b-4496-aba6-bdc2b1ac7bc3", "sighting--fc61c323-40af-49b6-98c8-12c3c3b87ab3", "sighting--06ceeefc-81cd-44e2-9051-97661c535a99", "sighting--036a02da-8bb6-41ec-ac90-801cef837846", "sighting--11c8da4c-2093-419c-8ae3-9a40494d5afe", "sighting--a72aee1a-939b-422a-bcd8-48721653471a", "sighting--044e193f-7bd8-40cb-b057-e7452a9d3887", "sighting--3b44a0a9-4714-4fd3-bb83-abaaea6fde82", "sighting--dc486a52-afb2-4260-8e4e-ce7d5705567f", "sighting--0f63cc8a-b536-48c7-8a0f-75e428178ea3", "sighting--c3005eb0-12f7-47a8-80ec-eb0779472e9b", "sighting--ef936251-2b2d-4ea3-a438-4088a7e445d5", "sighting--2d659f5f-3a91-4a7c-8ef2-66169cba21d9", "sighting--12ecc70b-f945-4b24-aa52-6f6f997d0b4e", "sighting--42184c1e-913e-496f-a8a0-917188c0ffb6", "sighting--50e173aa-94e7-4978-a2d2-90d73664087f", "sighting--15599ba7-8401-4ab1-a27e-fef4ab677c16", "sighting--846b9437-4148-41ff-99bf-d0e709f52480", "sighting--b71734c7-5e66-44dd-aa57-32899294b786", "sighting--481ee90b-6946-473b-b5ba-82bd088af7af", "sighting--80e724d4-9162-4581-9cfe-40c40b52331c", "sighting--5bdd21b9-0dc1-49fc-9770-32d40d4f048d", "sighting--c538a82e-3749-41da-94f4-5cc87afc0fa5", "sighting--ea224779-4509-4a49-90db-93d6f4390a29", "sighting--167e9a35-0501-4026-bb72-dfb2487be3fe", "sighting--fd13a7bf-b892-4d05-8f1f-a3003fe5eedb", "sighting--2301f445-383a-4822-9da2-23e450ec75ea", "sighting--e7df3682-342a-4776-b780-07d4852c35f9", "sighting--99e186a0-b3c2-4d18-a79f-7c9d2627cbfa", "sighting--d01beee8-c162-41fc-ab2c-67679b5d1f24", "sighting--a29c2f39-f3cf-4b58-9ab7-16a58c244c5d", "sighting--8ca245b7-4150-4e7c-8f3c-5ffdbe757bb5", "sighting--26fd19c7-60ab-42a0-8a94-82415cd76a8a", "sighting--dea6996e-ba53-46c8-b04e-0fadadd73db6", "sighting--8ec27434-9a60-4605-8fa7-fb0fe5bcb489", "sighting--ed619f9a-e3d0-4685-ab8c-70a16213a399", "sighting--505c1ecc-81cc-4457-ad91-43af754d2b4c", "sighting--ce8e9b78-db6d-4d36-af91-123f67f5dd10", "sighting--2e2669a2-b56a-4bcd-b7f4-fb327dab17aa", "sighting--54b0beaa-35b1-41bc-aa58-b2f25eba86fe", "sighting--564841ae-a7ac-4830-b595-c3935b12bc09", "sighting--f525c63c-35c0-4ecd-acf9-088f8769f200", "sighting--f99bc736-a614-4ce3-b449-de6511fd851f", "sighting--336008ba-fb73-42ec-aff4-38fb5393c2d8", "sighting--e53fcd6d-6b71-42aa-ba99-037e13fd776e", "sighting--d8e6e81b-406a-4998-8218-8e621ff88859", "sighting--d41e4a95-9e7d-4219-b8d4-903430e1847b", "sighting--4d0fbf44-5fc7-4595-941e-fa774ebcab52", "sighting--08512bb3-bc55-4420-b724-8700bd63e74d", "sighting--7bf7c203-1581-4ac4-994e-6c81b7afea1a", "sighting--139e9282-74dd-4899-89dc-b0b0140763c5", "sighting--1a4696a0-5bfb-4a19-b364-10d5f704289a", "sighting--8aed9b42-5aee-4b35-ad3e-9bc559eeff4b", "sighting--527a9ddc-0e1a-461d-bef3-01e9bc897f95", "sighting--f35249e8-21a4-4b26-a5a1-a1e123f8d828", "sighting--401578cc-751e-4a32-849e-635cc37ab80b", "sighting--722d76aa-2f1e-46c8-bc2b-dd586525e89d", "sighting--ee3ba1e8-f251-4bc0-8270-7d3039a0c444", "sighting--b96a7418-7f3c-45ac-9291-22832a0aeaa0", "sighting--4bc37288-9d03-4385-9be5-909ebb52a41f", "sighting--be6c3957-039f-42ab-80e5-2821b79091e7", "sighting--4b6744b1-ea32-4eef-8ee0-47e281c54a50", "sighting--0050085e-c757-4aad-9251-722775eb9e65", "sighting--918c4049-b429-4e79-aae2-5d2c517feca2", "sighting--702e2ce6-9804-4548-a8a8-c5c3e1f6feab", "sighting--b05f11a9-7f58-402d-a884-b001cd46e024", "sighting--5769ede6-328f-4e9a-a288-126b1d908a0b", "sighting--c13c81f8-71f2-4f80-b443-2e82493135df", "sighting--55afbe48-2fd8-4946-bfe3-988808246e6e", "sighting--afc6d1b4-036c-472d-9119-b4dff71f711f", "sighting--5326805c-6769-4c0a-a3f6-0eaf84efde8b", "sighting--6c5708ea-afad-41b9-a667-1a2aeab2fb82", "sighting--622e2325-dc5e-4edf-9914-af7c5e1a5ce7", "sighting--faa2a92f-2212-4d92-b634-24c3163aaeb4", "sighting--337f680f-0a4f-4e0f-82ab-ce08e6c9afd4", "sighting--c2425999-b9c3-4176-9d9a-67fbd6093933", "sighting--86ad8208-061b-4eab-a44c-2997f882fbb8", "sighting--9b61d05a-8021-4faa-9598-415872c4753b", "sighting--211ca927-aa90-4a53-837f-bff52ba331c7", "sighting--ce73959c-f385-45eb-bc38-07e7538f9d7a", "sighting--badcc297-1671-4e6b-adb6-a8407c85d480", "sighting--c511e128-ab6c-4ef4-bcae-a6cec5798386", "sighting--4d6d9043-d925-4ce8-a525-10e83b366e6f", "sighting--f0c51c01-3304-457c-bad6-72c8a9853e4f", "sighting--0d73d357-88d1-40b4-a30e-dc2a65e0d0bf", "sighting--007f25ff-324d-4739-a437-5f8133c397fa", "sighting--80b34a6a-64de-4a02-85a0-7ba6ddf93dd0", "sighting--fc748197-1270-4944-ad73-ed5b7e0a4225", "sighting--0eca6caf-020e-479b-bf41-f4a818ea9eb5", "sighting--bbce6705-7cda-4ea2-828a-a3a200a5dc15", "sighting--5a90d0d8-e1dc-4c9c-9d6f-034b621235ae", "sighting--76c828cc-2fd9-49f4-8e63-c7e66b89eafa", "sighting--8f821077-f28e-47c2-9ec6-c9197b505b69", "sighting--ed99f035-31e1-44fb-9138-eede6236df3d", "sighting--ab42cb92-6a68-46e2-8def-455d0cbeacf3", "sighting--d9e530c0-dec1-4d3c-b93d-ce969c35de89", "sighting--b1040c47-6ff4-471e-b178-44c78b3bf3a8", "sighting--8c2d55a5-71bf-48fb-a08c-fb1bd6e1fd31", "sighting--beb8729e-79ec-4eb9-9683-e919dcb3b97e", "sighting--4e034294-6add-4d2c-b147-7dd78253aed0", "sighting--d1d35c89-80d4-46dc-be8f-bb9e797d339e", "sighting--47de53e8-15f8-4671-aac3-6abffd8b5277", "sighting--a1bf9ba3-cb63-4f89-b950-0c0557b1e22f", "sighting--5494f2e1-1641-4cf8-8a31-9ebff679461a", "sighting--66191392-5a5a-45b0-9f19-2574cad934b1", "sighting--5ce36d2d-bcc8-4e11-add4-e7014e1b07b0", "sighting--bcef8089-0b41-407b-b587-c914dbd13c3b", "sighting--abf62077-027e-45c3-bf70-fad04457f326", "sighting--aaa917b7-5d81-40d6-b7ef-a62c9b72d090", "sighting--bceac1d2-3982-4e86-a858-c62cddd3de31", "sighting--771c5f7c-af45-4357-ab59-d2c4d9d8cae8", "sighting--40a6bf59-3e5e-407e-9406-7024c9bb8a32", "sighting--824b0798-2367-4b63-a178-ef5307905763", "sighting--e478ea5b-0275-47c3-bae6-78eaeb27ee7d", "sighting--49331d83-4a26-45a8-813b-3d7e158bb719", "sighting--b352692c-2c74-4ed6-9914-6b18503c5063", "sighting--494e19ec-78fa-4270-88cc-071652b5c84a", "sighting--3576c9c6-ddb8-4d66-9c48-24c5792963c4", "sighting--9e007eef-d77f-4996-8101-3e037b5bec0c", "sighting--d5c92310-3560-4861-beab-b494f4193785", "sighting--28fccb61-01ee-423e-947f-203aa495f1b5", "sighting--08dabe22-99b2-4cbe-a1ba-8866dcbd363b", "sighting--b4df2714-c3f5-4f64-8425-bb979e6fb7d9", "sighting--f160ee2c-4007-4d8d-a192-01dc3e352fc4", "sighting--c58464c2-18b6-4749-8be2-69bfbf00deee", "sighting--abaaf322-6d2f-4719-9d82-e591a27faa63", "sighting--b4fd2c90-a846-4084-b6a8-e7aca257d11d", "sighting--83d6e724-cdfd-4cdf-82c7-d889444cfbd2", "sighting--4ed0f3ab-b8d0-4dd4-9006-09dc2764dfa2", "sighting--1fa7d3e4-d2ba-4619-8a19-88300db82e79", "sighting--83af5eaa-68f4-4fde-b6c7-c726c3625a29", "sighting--cba8642f-1f18-443f-81a2-6ad4dc837f65", "sighting--af72bc03-774c-4806-b1b0-3d78aacd29e4", "sighting--7de673a0-3ba7-4eb8-91ed-f296325e5793", "sighting--3b5c0f1b-dbd6-46a5-932a-229e01a8118c", "sighting--4b096b28-8427-419d-a79a-5060228ee53a", "sighting--b4d6226f-7795-4837-901f-fc994d1de5a2", "sighting--26db210e-ce60-4b0a-9105-c7ab05ef2fb5", "sighting--22e265ed-d030-4df3-acdd-6932db26ff72", "sighting--e5c32dfa-f32e-4458-bf13-0709f2868b6d", "sighting--464ce1d3-85dd-4c5f-8c95-2c14bc71f6f1", "sighting--36bb04a4-91c0-4eea-bebc-0445ec894fc5", "sighting--9a1be84e-3180-49e4-a1f2-9d1daa566885", "sighting--0f83db8e-a7d5-478e-9f69-ca76872faab3", "sighting--67fb5f24-ffcd-45c9-84ad-1cb2f1cc8b27", "sighting--c2f5b558-20f1-427c-9e3e-ef1461144e05", "sighting--f46a7a66-968e-41d4-a6bf-c897473ae552", "sighting--807cea67-015e-489f-b123-e1510e68bf81", "sighting--0ac62115-0df7-47db-8127-5fe873490246", "sighting--db91243b-d26f-4521-8761-34323e39d259", "sighting--84f3a65f-de60-4f77-b8b6-ab3331bbea9d", "sighting--faf21988-3684-44ab-8419-a12d1c1740ea", "sighting--ae7cc772-8439-4226-87d6-f8b719002d82", "sighting--bf8c354a-789e-47b0-896d-06eba6ae0679", "sighting--e515c36a-aad6-4348-b5ee-43a77b31ffc3", "sighting--85458baf-e63e-45c3-9738-bbcf42be60c4", "sighting--07968300-bed0-4609-bbf4-f8451ff61058", "sighting--c0a0761c-a93c-4ee0-a2da-8c2457858bf9", "sighting--2d1127d4-8b63-4f8c-b1d9-8c35a6460d0b", "sighting--9c397732-3932-4adb-a8b9-e6797ff09707", "sighting--5a211380-b5e7-4e68-8a1f-a9001679c88a", "sighting--84f1805f-5eb0-41b9-a38a-43e1bbc5cc58", "sighting--4a49c339-6356-4049-9874-8526255705fb", "sighting--f26daef1-1127-4ea9-9bbb-58dac79cfc34", "sighting--5eebeb52-a010-40ed-990c-dde03dc5eea4", "sighting--3ecfd320-b624-4626-803f-cfac37b02aee", "sighting--e7a6bc34-b82e-4e43-bec1-0bc67e2dc1d0", "sighting--6333a7bd-cbc8-44c9-b7d8-0e1d18c92bde", "sighting--9b76a78c-aba4-4dbe-9371-f004222cc1ad", "sighting--79965b06-f066-4e5e-b242-ab33bfee62f9", "sighting--109dd937-8a85-4415-8bf3-5b49bdddd115", "sighting--4788c536-796d-407a-975d-2a47b50440e0", "sighting--e4c8fde4-a771-4d50-ad3c-04a112b65d83", "sighting--34973c5c-5ff9-4f0a-b007-e06e674a92eb", "sighting--e173e00b-e820-41b6-812a-b00b105fff1a", "sighting--d8f95bb0-40b7-4306-9365-ea8e5f8c0ebe", "sighting--2ee2c7b2-1769-481f-961f-e18102e67e0a", "sighting--2e791460-3256-48c3-9cfb-244432ea9fad", "sighting--ff15deab-d13d-4817-9d47-6f09593e95d4", "sighting--dd34cb21-c96f-44f1-9ce8-de6681f290b1", "sighting--69ec01bd-259b-4310-a49e-11288d7d7b14", "sighting--f8975b16-9bce-4981-95f1-74f6a687b513", "sighting--98ee5018-df1d-4323-abf6-934d159d4906", "sighting--f8744fdd-02dc-4829-bd1a-ccec6f796119", "sighting--6c286c00-f42d-4999-83b6-1bffb712e685", "sighting--545976cf-e3ab-4bc3-92f9-935bd8a7cbd5", "sighting--0ee15b70-f619-4b10-a1fb-f363a5c7ff79", "sighting--d3a7c955-b292-41bd-9d03-eac3097cac16", "sighting--cb159761-1646-4dfd-8ccb-81b88544a9ee", "sighting--2c624cff-d84b-45c0-8b4e-9f4e7f503117", "sighting--b459ec57-ecb5-409a-80f9-bd19bcb9c980", "sighting--581d27c4-0766-4c84-ad9a-2209fc3f641c", "sighting--1c4da3d9-614f-4363-bfd5-2042be6ce19f", "sighting--ef9f2b1c-8169-42d9-86d2-106203c60c8d", "sighting--a80dcfd3-ad2b-486c-9412-c825dae89d83", "sighting--a55042ac-b388-423c-ae34-80293d826fc2", "sighting--abb83d5a-ed0f-4053-836b-28cafc8f59f1", "sighting--62bb520e-1795-4c99-8519-ce8ac9ba47e3", "sighting--2ad91687-4eee-48cd-a504-761107c5e688", "sighting--f913967e-c841-447f-819a-7fe6f3d1f957", "sighting--84ff913b-b3ae-413a-93b1-e4323d19f72f", "sighting--5c91ae05-5feb-4417-9fa9-9b2875304ed3", "sighting--a6ef2cf7-c8e2-4394-b229-4d18bf13ff16", "sighting--213d88a6-5b4a-4a4e-9710-68780b621f23", "sighting--85f3a12c-01af-486e-ab7f-3444836421a4", "sighting--1139a31c-959f-437e-a7d8-786973ee05a9", "sighting--61017bf6-fb85-4b87-bbcb-2b9331f5d842", "sighting--c3a5d6bc-51b3-410e-8649-2d3592da62bc", "sighting--4ca7ee16-dcd9-48c2-a662-6e017189cfe0", "sighting--97eb71bd-fc0f-46e7-80e0-95e39aeb68f5", "sighting--eda68c5d-48c9-4f0d-b229-6a83cc81f7b4", "sighting--688585a9-1878-47f6-ac25-1bec6d0ae0ac", "sighting--c7fd746b-0152-4245-80be-914ab0fa17cd", "sighting--d64548e2-c4dc-4b85-9b01-f3a3655a08f0", "sighting--ce89ccf6-23e0-4486-9460-ee49e737af6f", "sighting--93e6459a-1d73-4519-bb7a-f0e10ce1d628", "sighting--b2033540-e302-44ef-9074-35924a6c5d1e", "sighting--70e5cc6d-6d1f-44e2-ae13-5b5dfa054552", "sighting--bd51549e-a903-4e4a-8354-8cbdc0e7e72f", "sighting--8797b5a4-e576-4754-924d-5143238e8fe9", "sighting--0f73f07e-2801-4275-9c1d-b1c32ef232f6", "sighting--bedf79ec-8732-49da-ac11-96da34db161f", "sighting--4901064b-f990-4678-bdc7-037d3df71cfa", "sighting--9c01a1a4-c34e-42e9-8bb1-f01e35f570ba", "sighting--910375e6-abe9-42ec-8188-cdc72f1db5db", "sighting--bf3a48bf-bd89-422d-b0e5-9d2a77b8a70b", "sighting--a93b1301-497e-4ac4-98ea-e96eff358b87", "sighting--7a78e5db-0b19-4d13-a817-188677e1d202", "sighting--f50938b1-bb75-4647-aee3-10ed13525e19", "sighting--516a86e6-3446-400f-b0db-fc8cb13d45ff", "sighting--f46e8e14-ed93-4ab3-a593-71e3241e6305", "sighting--01bdcc08-74a9-4255-b52f-c4e35320577f", "sighting--3aaa62bf-9f6e-465c-9ce1-c53b3881dfba", "sighting--40d8aab0-13fb-4af1-8b70-89602e044977", "sighting--e6ff4a73-0d8c-4169-a53f-fabeecb7d09b", "sighting--45577820-c4be-4c49-9a0b-cb7b2edc731a", "sighting--c7b99f55-1052-43d7-b629-03bc44861a24", "sighting--f588e618-4081-44fb-b22e-2c4b54986368", "sighting--1e248b5e-6a7d-4376-be54-154e46dc3c87", "sighting--9d454cc3-fde4-46e0-85e4-9c7ee7cbbe8c", "sighting--27af1dc7-6acf-4057-b1ed-d9d29bca4a79", "sighting--07dcc3e1-eba8-42d8-8456-879515a8acb8", "sighting--c0fa5ca9-9ff7-4008-98f4-dac3c76c625c", "sighting--a1465f83-9576-4bcc-8e5f-07c9cd1720f5", "sighting--10311eeb-1333-4f5f-a652-41f4fc9120d5", "sighting--f59d05db-93f1-4524-8be2-10150aa8f777", "sighting--b5e9cfbb-4118-47c5-b3df-fdb7ea3aa16a", "sighting--71a2dc97-8582-4707-a15e-9f23afc02da5", "sighting--a74ea2d0-d9d5-4dc7-8522-ec550caa4b9e", "sighting--785a5e09-02d3-47be-bd5a-aa3f997c53c2", "sighting--245ff786-1b7b-4c8e-b28f-e96562f4eb84", "sighting--fefa7273-6510-43f6-aa63-dd91824fb1e4", "sighting--9887fb21-4b35-43ba-9030-b29e8a9a1c6c", "sighting--387250e5-2e4e-4d09-942c-97a1a503105f", "sighting--a65679eb-e9d1-40d9-b241-c6922bc6e849", "sighting--e8107c72-de44-4927-9436-8583b73532aa", "sighting--7a2c3c20-2624-4985-9739-a9bae456fd90", "sighting--cb177dd1-4479-4d41-aebe-b899449117dc", "sighting--068afca7-2c7c-45d3-9d86-a6c5d8a5230f", "sighting--23d2a53f-e44e-46e1-a2a5-5ea22736df53", "sighting--55d28817-6e3c-4bb8-9be6-1b5607ae91af", "sighting--ba638cc2-43d3-4751-ba70-2e7edfbfc4f9", "sighting--2438c7ef-c7db-40d3-94f4-0918b38dd7bd", "sighting--0f59245c-ffb2-475f-a7a1-915f7cbc60fb", "sighting--758041fb-208f-4f9d-b3ef-e99366225708", "sighting--3c4b6c36-e1b2-4aba-a757-b9e7b3be1176", "sighting--abfd5166-6eac-4ef0-8868-15469a472142", "sighting--d13958f8-6065-435b-b3c5-2f18bf716a69", "sighting--3559288d-7ba8-4c99-8d7f-897515aa5d06", "sighting--55094472-4825-4553-8061-786164f830b7", "sighting--b30638ad-1fba-4664-8b18-40cfcaefeb41", "sighting--d13006be-8827-4754-94f3-129279a74aea", "sighting--88046db2-c473-4d47-a167-e5b55723acd1", "sighting--86810fa0-554c-4bf8-b060-902641e8e52b", "sighting--45df86a8-f0fc-4903-a2f6-2c362aa6b491", "sighting--0d468749-75d4-4033-a01a-ce6619b2f279", "sighting--9b405611-a11e-4b35-876a-b21df7dac729", "sighting--55baac53-04df-4fb4-a846-76ba335597ac", "sighting--31b3ce3f-c40f-4c59-bd81-9f5d14c64c12", "sighting--877d01cf-6ed1-4f58-ac11-d8ca2ef99961", "sighting--25817704-8023-4fc2-92fb-17f044e875ac", "sighting--aa860e4e-c843-41b5-b3bf-4da756e199cf", "sighting--f860d438-160d-498b-84cc-348d9c553edc", "sighting--e7550198-5858-4113-be81-8f1b65049dff", "sighting--fd9729e6-44dc-4c3a-b0ae-14253173b09f", "sighting--56c86f15-6ef9-423a-a9e0-a54d0efba721", "sighting--e71fd6b1-ea1c-4ea6-a7c8-b78399e34296", "sighting--6d0ab122-86ce-4dfb-9298-28feff75c29d", "sighting--2c37d927-8ecc-4308-83df-c33ce0955a11", "sighting--e6a3da7a-af1c-4b41-a253-8bda13be20a2", "sighting--d89f7199-017f-4de2-9f2b-00acd5a7d0b7", "sighting--375283b1-80ff-4af8-a2f1-0271546a62fa", "sighting--2e1a664b-99bb-46e8-b168-700418cce21f", "sighting--8c93760d-6b10-4ce1-be6c-0d4d2072aac7", "sighting--6b7d3f3c-f8ce-4f1d-b8e4-9277c4e99dce", "sighting--dfb7e6f3-a1ae-4297-b30c-2a7a6b2bc743", "sighting--df1eeae5-380e-4258-8830-b1d63b76888f", "sighting--6d2ba377-74a5-404f-916c-5964b3092ddc", "sighting--d034a88e-603f-4e09-bf66-c3998a3f453c", "sighting--07e8c2b9-eca6-41f4-82b5-15dcde90e12e", "sighting--d20107dc-c685-4bad-ade5-f3fd1ac6acec", "sighting--a84a62e8-cf4f-489b-8e09-bfb05fde37a9", "sighting--cca49aef-6305-4602-bba5-5c2dde50eb37", "sighting--41999ef0-da38-4f65-9c39-6cdafbb9f120", "sighting--23ffd05b-4f58-4076-89ae-9de78f02733b", "sighting--513427de-3939-4fcf-9d38-779475b59832", "sighting--cff24bde-c43f-4d51-9a72-81afe31b9426", "sighting--7a7a0f00-16a1-4bf6-877c-bf629c7f1b1c", "sighting--52609bc6-cde5-4c29-92fd-1cb74f7365b7", "sighting--ad2ea287-f6a9-40f8-a887-440be5d7c462", "sighting--f4664a40-3230-4b9b-a3e8-5e4f508b137c", "sighting--6389541b-21bc-4954-b2e5-88b03402814f", "sighting--c111bf6b-2a1b-47d9-a893-2427c9c5b59a", "sighting--d4403870-8c2a-42c5-8972-425a8fcd8b5f", "sighting--57162c79-2537-4d2c-8264-82b11ad1a0cb", "sighting--90e8a1a4-e251-4a50-aa52-7a269fecd501", "sighting--8c4cdc7e-9999-4668-9429-d9a638d1df8c", "sighting--d8597ecd-2322-4762-b0ef-156185fa1835", "sighting--9d40cc05-2553-4bf4-ba5d-83b1736b0d4f", "sighting--0cf00d49-45c4-4176-a06a-34dc869e7604", "sighting--ed02704c-1f1f-4e10-a70e-bf3f340fbbac", "sighting--6115b956-f89a-42fc-addf-efe33611ffcc", "sighting--ef1f7953-6f58-4532-ba3c-ad0a1b3fcffd", "sighting--59ba2d07-ad89-41c3-9b1f-10ae25853818", "sighting--6db537ac-2f84-45e6-a232-50c0c3c9acde", "sighting--6bf7bd72-6fe5-425b-8d22-9d60030611dd", "sighting--d0841241-34b0-4d01-9f00-c7cd33388624", "sighting--c2bef910-f528-4294-8341-707a6e723ff8", "sighting--69da2af8-b79c-4bdc-8246-b2b7c75aaf2f", "sighting--cb7a5715-b9d1-41f4-8b94-ac487690fdf1", "sighting--c45d3180-84d4-42c2-8cf7-6d56298dac08", "sighting--c3a304f5-02d4-4450-a8ac-788f2e2bf0e7", "sighting--731110d1-aaf8-44fe-899e-856f01ad88d9", "sighting--df891a17-fec7-4eaa-9fc0-9be4913de310", "sighting--81fbffbd-fa78-4e7c-9b5d-f0b2e176bc37", "sighting--d6bfa4d7-a1f7-4be6-9ab6-a599631b6f70", "sighting--580f820b-cd71-408e-b885-d1968f144c4f", "sighting--fb1d1acb-a292-4b19-b5dd-41b2c679dd56", "sighting--f9d6ca40-753e-4b22-a55a-da20d4b9ce70", "sighting--5c0cce02-16f5-4abf-ad4a-e910996c6586", "sighting--c7d65658-235f-4b7a-a07b-fdfa29a32604", "sighting--7e21aa9a-0b63-44b8-84a1-0cc07ebbd1ad", "sighting--c35cd6a3-49c5-431e-b58d-c7ff1cf03c2a", "sighting--6bf3c394-fc3a-4398-9799-2240ca46b5f8", "sighting--c4e7574c-3bd7-4f40-9193-c979915b9f40", "sighting--59875542-4353-45d8-b687-d49eaa5f95e7", "sighting--7af9b89d-a68d-4a05-9788-1aaad63dd66e", "sighting--a2f57ae7-c92d-4c0e-93cc-4341e7a98bf1", "sighting--3b8f93f2-8bfa-40b7-ba7b-3e29b78b67fe", "sighting--abde63ef-2bd3-47b6-8d7b-6f3d5a14cc33", "sighting--cb007bd9-335d-4558-8138-2807b6d5584b", "sighting--2bff03ad-281f-4a40-809e-62cd41659665", "sighting--296232ef-5b3c-47b5-b62c-e3e560b2cc59", "sighting--72fdeb5d-8e6e-44fc-8e2a-f3a5dc7ac06e", "sighting--71b37d04-520b-41e9-b532-4db56bd4280e", "sighting--dc4136da-4c4b-4ab7-b34f-b9cb6c346b31", "sighting--05b0ee2b-9a14-473d-9779-701d2b3cf399", "sighting--9835afa1-c7e8-44b2-92ec-57fe8d80b437", "sighting--03b54629-ada7-4ea9-a454-32de5cfcd2d6", "sighting--d52b4599-8514-447c-9906-740dfd36cf0b", "sighting--c53332f1-9de1-4d61-850e-0241fa9a03b8", "sighting--494b4089-c068-41fe-b765-eb35715aac3f", "sighting--0499edeb-4b4f-4ce2-a81f-5fa823ace1ac", "sighting--3235bc45-1747-4863-8313-70eb94f5890f", "sighting--2d9f5052-00f1-4c4b-bba0-e1b623f6bec4", "sighting--986ae6b3-1717-443d-95de-41b0641964c8", "sighting--d035b3c8-de03-4d93-92f4-bd5355917dfe", "sighting--d04a188c-a337-4266-880b-0f6b9dfc63cb", "sighting--891683b9-3370-4d34-92f1-edde511051c9", "sighting--dd26afb5-f3c1-4c4a-bdda-5b3860646f72", "sighting--eff53bfc-4ae8-48e1-a8cb-5b94305e90c5", "sighting--9d43d954-5b0c-4c78-b44c-b6586e72e8dc", "sighting--1be8c386-65d5-45df-af36-9c04dd97d15c", "sighting--56501615-a4d6-4e67-b4fd-9dc6015cb12e", "sighting--0ddfcac6-498d-4e81-a04f-189bf2e1e80c", "sighting--8787bdbf-8c01-451f-b1ed-150d64b587dd", "sighting--950b1c4d-4093-4280-ba62-453c2bf66432", "sighting--1ce0ffb3-db54-408a-a139-669c32b8fc70", "sighting--29313796-d0cf-49a7-83b0-bc0bf4a4f304", "sighting--4cb8baac-b622-4d42-b329-362bc184cc07", "sighting--37f467fc-0e92-4636-acfe-250a1d3705d3", "sighting--930a718b-74cb-4810-8345-67ff8e129e14", "sighting--0fcaefa3-bedb-4775-8285-2119ea75da98", "sighting--17370da1-0846-402e-a41c-ec7f1b171549", "sighting--21cfbf12-4075-4c8f-bad6-05f530a6cf63", "sighting--dcae6338-a0b8-4126-936b-012a781dc602", "sighting--336d6f45-af30-4a0f-b368-19e388658d9f", "sighting--1459780c-a16b-43a9-8752-86829ffd405c", "sighting--6e182b84-04bc-46d9-92ec-099f77d23530", "sighting--6752f9fb-84d3-41de-83ba-c6f6d426b5dd", "sighting--7e99d302-426b-4a05-b816-b5f9a3c79bc2", "sighting--0fe9f9c8-d4be-4d01-8ab4-02307098ecbd", "sighting--ce17e7c3-4179-4097-a693-cc006ce40148", "sighting--045f42c0-efd7-4e8c-8269-8a6014817db1", "sighting--5834434e-4edf-4f3f-8283-c464b1a67ac1", "sighting--aa598c0f-6ebc-4577-be73-86ff3da611fb", "sighting--94bed82e-e49e-4d2d-b23c-67af3061cf44", "sighting--37d0aaf4-6a45-4fda-930b-8d44995a54e7", "sighting--92dd5af5-8434-4885-90cd-4781299f3fa3", "sighting--0f356cc7-76d0-4603-a435-7bea5bd8457b", "sighting--85b0ba1c-44d7-4557-9bb4-0eb0476a10e6", "sighting--1d3fe42e-30e6-48f0-bb1e-96dcb5e3958c", "sighting--121e34bf-21ff-4c8e-ad02-84adfe350efa", "sighting--49a014ef-d139-42d0-a333-b8b21e026947", "sighting--5483e33e-3e57-4aa3-b3f1-9fd1934388bb", "sighting--813ab6c0-a40b-4f03-bbef-e033fae4f151", "sighting--12c817b7-4cd6-4312-bf7a-3cbdd6cbc11e", "sighting--03de7b8d-9d30-4111-8f2b-8fa3e1abbbf4", "sighting--94c917d1-9d1f-414e-9cb4-ddbc0d5097ec", "sighting--4fc23673-610d-400b-a7b0-af2fe4103030", "sighting--32bba51e-8fb2-4804-98f3-572fc44861fd", "sighting--dd020da7-9957-4ddd-8aae-8c17b5ab9a12", "sighting--8a844a35-b156-4ea7-8b19-a15c9e000bfe", "sighting--f247e3c3-251e-4e0f-9d5b-df402d5c8182", "sighting--4d91cae4-1a1d-42e1-b7e7-d2a28ab76c09", "sighting--bd566ccb-9265-41ce-9f4f-a8358dc6afaa", "sighting--a595f484-bcf8-4149-a033-ff354c0d83fc", "sighting--a529a422-81fe-4f7c-bc80-6292ae860bdd", "sighting--e54b54ac-2d3b-42f2-bc9f-0764d7c580ea", "sighting--a151505a-dd3f-48c3-a843-0b3b1eb4edba", "sighting--85a85ceb-6fee-45db-b8c4-d66fb658c4f0", "sighting--91570bd0-e2e3-46e2-bd3c-984a089a7fcd", "sighting--ba0566ad-9f2d-4dd4-8258-cdf7995a3e37", "sighting--8c786f90-f08e-454f-8c9e-6381b6a189a2", "sighting--c3a2f081-2a95-4148-9f08-e025166dd52f", "sighting--986966e2-ae6c-40b0-8655-ba16a3c2f22c", "sighting--11e4e642-ff2b-4b1d-a7b4-af5a94951e18", "sighting--4d447557-6d4f-4b7b-b433-37443f505457", "sighting--d3ae7f10-8fb9-4ca2-a615-484a95d9a855", "sighting--fe52c2e0-88c8-44d9-b408-1a143a1e9971", "sighting--13b3043d-0bfa-4f70-9d11-796fdd6a6315", "sighting--0ea8ec73-9807-4c60-bd2b-ccc74af23ba0", "sighting--5a93082f-0681-4825-8fd0-24d3742855f5", "sighting--1f84cbfa-bf7d-4f80-a2c1-8e52e3060b86", "sighting--1249a8fc-cb7f-4668-a068-9c8767000667", "sighting--cab8ade0-50f8-4b69-b161-eef6427eb90e", "sighting--5552f0c3-5d49-47dc-a34a-b8936599732b", "sighting--cdceb6cd-173c-4539-aaf7-03ad5e060538", "sighting--3081cf78-b843-4db9-aec0-5ab4a1b1693d", "sighting--d0664e69-b96e-4cae-9912-fab54f30911c", "sighting--d2173981-43b2-4e86-b4a1-023061de3651", "sighting--bec6c1aa-d5d3-4cc8-a05b-c68d9054e547", "sighting--371436d8-dc0b-489e-b831-4f3a79f1883d", "sighting--967edb5f-9e32-461f-ae0b-cbcf3124c2e6", "sighting--8ad713e0-7d94-4270-a624-393e62852c02", "sighting--2294ab27-3d66-477e-adfd-eabae60bd3f7", "sighting--09ce2899-a867-4a50-bbf8-90a63cecc50d", "sighting--e3d75407-9a3a-4d69-a86c-73feb8daeeac", "sighting--ed866129-ce17-46ce-8f3d-5cd3a584ca98", "sighting--b701f200-49be-4d87-9300-ec7a82550b1b", "sighting--93ee12fe-57fe-41df-924c-fd4df1c0c45f", "sighting--5904b047-933c-49ec-a33f-de80dcd08980", "sighting--9c6d17ff-227a-4865-a600-29a1fc68f105", "sighting--f00081c4-3fd6-4f59-a9f0-24aabaa5c01f", "sighting--c1c10277-2fc0-4a95-9f48-131a601ceced", "sighting--81034d6e-4dd3-4468-abdb-6457e0708d1b", "sighting--3ba84702-1881-46e9-b5ff-d9c7d11b48ac", "sighting--a182053e-05dd-4663-93fd-9788d0f1ca46", "sighting--92639a5d-bc8c-409f-8a98-ec18e4591f45", "sighting--74d49daf-a040-4faf-b98d-03a428a960d2", "sighting--9ee462e1-35a9-4a53-96ac-83c60bc218db", "sighting--c6649d95-bdba-43cf-a76d-4737c656e30a", "sighting--20cfef86-6930-4179-baa3-d3246d8578cd", "sighting--e80fa531-d416-4a69-bc07-053aee0264bd", "sighting--e0bad822-ceb8-4ad7-b42a-77d4377892b0", "sighting--3a156a5b-6822-44dd-bd98-47048286a0c5", "sighting--2608af95-ad98-4cb7-8b8b-a1a3ac71429e", "sighting--90f78125-aff1-4c1c-a695-9e174a416ade", "sighting--13c1c7b1-0975-495e-831c-824f8b1a6de3", "sighting--d5be8858-cf8d-4527-9e8a-84b051a46e14", "sighting--6fa58076-fb72-44f5-a5d5-de36f160b5fb", "sighting--91fc56ad-71d3-4046-a8ba-8c7cfc2b35ff", "sighting--eb6a4ef8-5591-4a78-bd12-22e6724ea93a", "sighting--26fc454a-0879-4924-b720-0e302c16c0f8", "sighting--983fa5a6-28d5-4779-aff6-dc9d29f15999", "sighting--500858a2-b4a1-48af-8cc9-746496158295", "sighting--1f0ede8e-f29d-4606-bc4e-0947674cdded", "sighting--fbda097a-506d-42b7-bc43-1c6438e6de44", "sighting--15936621-d336-4975-8fd5-44efe414926e", "sighting--e069b0ca-c622-47db-9672-4e0e8490a6d0", "sighting--b74a1241-7fed-440d-8ead-1a30e1242747", "sighting--6208f90b-5f2b-493b-93af-bcab8f6e5f2d", "sighting--1402db3c-2a1a-4ff2-89f9-a57cc3d2f10e", "sighting--20ee149e-9f54-4bd9-b11f-0d6634d5e413", "sighting--2a02bc78-5565-4791-8fe3-a4c95744f13f", "sighting--53dd6dc0-ddcb-4389-90cd-02376c452441", "sighting--f87c824e-c444-4d4e-a99a-702d036a9f62", "sighting--c6f4b511-42d7-458f-9b4a-f3ef88104869", "sighting--ac1c515a-3219-40a1-a099-65867e1af530", "sighting--55b71dca-fdd4-44fa-ae77-384e32b4ad46", "sighting--28466b17-7c4f-4cfb-96fa-d6f5177b5a3a", "sighting--fc0f6816-4ff4-4878-893b-67bfeee0e3c3", "sighting--ad4885be-804f-4879-953e-03dfa797dd27", "sighting--3726ed82-b602-4899-b471-e5247c3bee1c", "sighting--418d69c8-19fe-4d1e-8cfe-cc97d70440ae", "sighting--8fb3a813-1eeb-4596-9cce-92b2ef139139", "sighting--9a9d7951-cde9-46af-824b-07a4f0e0ff5b", "sighting--54d3076c-1ca3-4a9f-bb0c-7d97631b4175", "sighting--62efdbad-4ebc-489c-998e-e1624a9e3954", "sighting--7c1e1d26-0f8c-4c2e-9ab9-3384e6c3f58a", "sighting--15519a4b-8f7f-45fd-a734-1a923d9b9fe6", "sighting--0483feea-9c57-41a2-b82d-3433f0399048", "sighting--e2e982fb-adc8-4a58-a361-45b8f05c62d5", "sighting--d85cb2bb-8e54-42f4-a5db-f2abc3c0a694", "sighting--eeafad49-a75d-4604-82ae-f9ba76a5952c", "sighting--7b6206ef-74c0-4f33-8740-128fc4419029", "sighting--aca6c8e8-e5ef-48ef-b1e7-10555e12d4d8", "sighting--8faf89aa-02b8-4080-b5b7-268c9b68fa54", "sighting--b1f093ba-d991-4cb6-9c65-0840c3284199", "sighting--91840a97-23bb-4cb0-bb01-23fbcd4d887d", "sighting--64803625-13b7-4ac1-896e-78bf4f42f469", "sighting--1bdf80f7-0487-4522-b1d9-e2efe3fc3af2", "sighting--9e15d2d0-950a-4b07-9fe1-95cbf6a8708c", "sighting--eb5de305-2b08-4173-86ea-b91662d93120", "sighting--195c6eaf-e369-4608-b17a-ac6e4a1d18f2", "sighting--f0fd22e4-075b-4aff-ba22-8f9fd304ff31", "sighting--531c4c17-e006-4915-baeb-9f6843a29d68", "sighting--1a21fc2f-a970-42f0-9bf0-eb6f07542e88", "sighting--fd0c8d2c-2908-4b01-b90c-feac18f6ed87", "sighting--fea52c36-b3b9-45d8-ac7c-b21c1bc841a6", "sighting--ee0b2aec-91d3-4be7-8063-e530436044fa", "sighting--90ea3289-4924-43d2-b83a-6062f3065a3a", "sighting--c2cce03b-a6b4-4aaf-95dd-46f7c3679987", "sighting--0b7fb99e-bca5-4d00-9b98-115a01dd7f9c", "sighting--5d9dbd23-a8ae-4d1d-af3c-870efbddb5ab", "sighting--2b32d980-c1da-47aa-b2ec-3ac088f24a77", "sighting--d092e484-ae2e-49dd-96d7-f9b3d8ef415d", "sighting--b62211f9-26c8-4f62-a1f3-d1984bf815ef", "sighting--904357e9-3fe1-41ae-926b-cedf1621c553", "sighting--4cefc8db-5830-4088-bc4d-af4d9be079b4", "sighting--b7bcd252-a248-453b-9873-bdafbb104a70", "sighting--d720e718-3ad2-493d-bb45-d30c3b1167f1", "sighting--5bb9a2e5-da3a-4ac7-b091-9fe990949718", "sighting--85fa265b-ba41-4de0-ac56-54d8aaab4ab6", "sighting--4577f33b-bb9e-4476-ac10-2c8f9f7f9af6", "sighting--088ef82e-6f54-4846-9073-c5970ad1de31", "sighting--32979bd2-0898-47bd-89fa-6dabebc1e602", "sighting--fc2b3010-491f-46d2-973e-697837f950b3", "sighting--0020a9e2-d64b-43f0-b3d3-965644d53999", "sighting--337870a2-348b-410f-be91-c8e3dfec1b89", "sighting--535d9689-c539-4953-ae29-59f695a7eaf1", "sighting--506437de-aaf0-4bf8-a2de-9f16504de49a", "sighting--0ac2dc9f-9e41-4362-b00d-6d2eba548782", "sighting--f858a484-599a-43c3-9048-c2bcd2568118", "sighting--aa44fd3c-fc16-46d7-92dd-36d67909aecf", "sighting--c1d10c87-506b-46f6-a690-b8ff3ed4928a", "sighting--bba6ba9c-a1f2-4335-a447-1ecf6e14d944", "sighting--5791b056-f072-45ff-a829-28e15f50d9de", "sighting--7b916f4c-f3f3-417b-8380-0c84f38e84eb", "sighting--cfb66050-c0ae-40df-a73c-e85c5a08918f", "sighting--d40f6c5e-8006-4ccf-b928-825a34fac5e1", "sighting--fa1c3d67-74e6-49d8-b83e-c56724411e98", "sighting--f84b61b1-b5d2-4bae-a129-d164899502a4", "sighting--c6887e7b-b546-4d18-aa6c-05a55cb81d19", "sighting--f18349f4-5de8-4682-8808-6ee3f116977a", "sighting--90c3bba2-5deb-4645-a171-f698fa7c26de", "sighting--beca0340-56b9-488e-8ac0-3e7b7a0a7b4a", "sighting--9b4e0881-cfa5-49f0-a01e-1fd8cf571d7b", "sighting--117eaf73-f5be-498d-b664-e4e2201c01c3", "sighting--7045c307-3403-491c-b2df-def564ab5d80", "sighting--42a7a7d5-93ea-4b94-84e2-ef6f4381f49d", "sighting--00eaff39-80a4-440e-8578-1a9740847645", "sighting--bb94e0e7-7d0d-4df5-b472-6b40f0c593ff", "sighting--ab8a0093-c62e-4014-b173-1db786a3a6d4", "sighting--dc3d031f-ba5e-4462-8a33-f16bc1539bed", "sighting--849d7a45-55ef-4e71-b86e-614be19b3691", "sighting--58d5a998-d504-434b-8cf9-f7ae362387a5", "sighting--51303276-d32b-42ea-b665-cd12e4e1bddf", "sighting--57a45a8d-385f-4a47-9651-3775f102c1f5", "sighting--bbbefef1-e88e-4fac-a6bb-fb3ad1328166", "sighting--68c203c7-7ab1-4af9-be02-0c336bb290aa", "sighting--1122ee95-bea1-445a-8228-5b8b30209fa8", "sighting--64e99837-bbe9-4594-9033-b5755a00fe50", "sighting--5c3d5d69-601f-4aca-b985-fecef96038ab", "sighting--ddad4e78-e161-4158-817f-cdbc0bcd8c96", "sighting--db73c7cd-fbe5-4ca2-952b-0ef0c732ab81", "sighting--f29937f2-93a3-467d-9a95-eb19982e5744", "sighting--6fb78dee-5ddb-43cb-9993-f12df2274100", "sighting--9ec2b412-aa34-47ac-b263-fed3243c8932", "sighting--8bd12051-ee7a-4626-96dd-e22469c89fa8", "sighting--6fbdac28-96e7-4313-968a-2e058c1d3c6b", "sighting--dd102ea1-b14f-41db-acc2-fade6dd7051b", "sighting--151ee3c0-973b-421c-bdff-08f528f6ae59", "sighting--35ac9663-0de3-454c-b583-9ba2a6f8be01", "sighting--e2d2a5a0-63af-4e1f-8b94-5d4ef48bfb2e", "sighting--0a9d2d6c-b132-4270-a659-582935be8886", "sighting--ebb3cc52-8e23-480c-8e34-6d1e1ebc53d2", "sighting--b1201010-54e9-4bcc-bd13-45b7301b4922", "sighting--1ff51d6d-cc82-4d9f-bd5c-6a3f7763e27a", "sighting--36939128-7391-43ca-8736-8c0f87f8602f", "sighting--8a81812b-15e3-44ef-a206-d2f366b61e6f", "sighting--aba2dc31-14d5-4e38-8067-11ed132f3bed", "sighting--c4ac1bb2-c921-4ed7-b651-171d0f1acd45", "sighting--98610294-6fc8-441e-87e0-2c87b3e6d8cf", "sighting--78f5410c-13cc-48d1-b822-60025786e279", "sighting--481c4e51-e05b-4c0a-8e28-95213e46b038", "sighting--3fd30b37-e2a9-4872-b451-a0b4a16b0cda", "sighting--871afc80-bd6c-4f8c-9c85-e6fe560c1972", "sighting--e71712ac-1f93-45e4-9be8-3d82fa36e7fb", "sighting--1d8cc8ae-c66f-49d6-89b4-344d66083160", "sighting--085f3c4b-c956-4a16-864e-c614c7fcafa7", "sighting--0608c052-90c9-4bf2-87b1-f7dc49b4bd14", "sighting--d4d75bcf-ccb9-4328-a293-7e998d16f4f4", "sighting--0219f4e7-d550-4608-ab5a-646eb8d13573", "sighting--cf1c82e7-446c-4691-ae6a-13557b70ee3f", "sighting--fe4a707e-ce46-4eb0-a591-7a0e951267b6", "sighting--6d74d3d0-42e5-4c0b-be79-dba4c46109b8", "sighting--ec8daa15-3bf2-451e-8dcb-0d437b2bc99e", "sighting--0d07cac9-82ef-4949-bb26-11e6d0ef8198", "sighting--5e4b29c1-757f-458b-9290-65f55978c367", "sighting--f0412021-e22d-4068-b7ed-1c7c72a388ff", "sighting--84735530-894c-4e05-8cdf-a5a92c6040a7", "sighting--bec64307-7b83-4a6e-bbd5-38e6c0817c56", "sighting--ebd67db1-9cdf-410a-b64f-a943b651a1a1", "sighting--cc87df12-c048-4aee-8298-08c22c1597fd", "sighting--e7aa0b6e-d5d3-4a55-9839-a9b4ca2ca885", "sighting--b8e67b4b-80d2-417e-8b4d-407f9d127179", "sighting--7566d522-c89c-4722-8e1f-6c43f3bc9fd3", "sighting--084640de-d68b-4546-8e87-af2c02c3aa27", "sighting--68b69ccf-b1b0-49c6-8ce2-ca536a2e6ae3", "sighting--a638a092-fb21-45d8-8461-a2f45f48bbfa", "sighting--ca04e64f-865b-45a7-a172-9be968dc1660", "sighting--b1310d70-4354-406a-9adf-b168226ae15f", "sighting--803f15d5-ebae-4898-a69a-cba453a44c1c", "sighting--2bc979c8-fa05-4b17-82f9-f49825f87e7c", "sighting--58e8ba6f-d49a-4d00-93c8-733b96e19b77", "sighting--67c492cc-716d-4a4f-80e7-5ae3bd049231", "sighting--00e00367-4e90-470e-8db1-9a6546b96971", "sighting--1cedeab3-dfd1-4625-a163-c70579e298a9", "sighting--95172504-0431-4a1a-af58-49a4ca5d323c", "sighting--8e62d687-5650-4515-b317-a7b2a7a99e17", "sighting--4a0289f0-e876-4f00-8bd1-3855a9e0b1c7", "sighting--7db2597d-ac18-4e57-b277-127f31c3532f", "sighting--d832bd28-27b5-430d-a2cb-0a9b0e01b5d7", "sighting--236a5d53-6f05-486e-8485-265a535b743c", "sighting--9399505a-eb83-4400-91e8-218b36255bc4", "sighting--4c7826bc-199f-43bb-9bc4-b5a0c88a7f9f", "sighting--8ccaada3-5cd5-4103-92d1-bbec97bd2cd1", "sighting--1cf2107c-0809-4286-8aeb-c25834aef92f", "sighting--5c2ca57a-e707-43ce-882d-32e0d4d9ee12", "sighting--0039ce33-1485-4e9b-8361-ad27467f448c", "sighting--ad138ba4-b8f2-46ba-a3ef-d2ca195868a0", "sighting--157407bc-2bfb-4665-9ae1-39562b889e3e", "sighting--4fa7f3ff-f291-43b8-9470-9757158f50dc", "sighting--cd16c503-4daa-4cf0-9016-0d338610186c", "sighting--d933e76c-c170-4123-9586-c855c6ec8e6f", "sighting--698357b9-1381-4648-82d9-608a267eb415", "sighting--455589a5-c07f-4e14-a480-8508f3bdc3f7", "sighting--fd2b366f-856e-4ed9-9a95-0c4b2c3dd6d6", "sighting--92893111-0539-49d2-bcb8-8d827dd27702", "sighting--2132746d-13d6-471d-8fac-bbb898aa2bba", "sighting--0e6821b7-13dd-487d-934e-51361406f169", "sighting--4719743a-4a95-4602-a14e-fd484db7c710", "sighting--11bbe982-0f17-464f-967c-af1b2cbda322", "sighting--886432bd-2b59-4649-a8e3-9c92e9f8b66c", "sighting--9b29108b-9b3b-4a01-94da-0511e0d805ed", "sighting--52345b17-1387-43c9-95a6-5766fc435a9c", "sighting--80b28f53-849e-4d38-b9c1-2a25040fcb1d", "sighting--c4ad0eb6-d25b-4d70-8fd2-5d9cef2acd28", "sighting--3e1281da-6995-4bb1-9722-15e1e4e64f6c", "sighting--ac2da968-adff-4b4c-a6fd-fe43e8b86058", "sighting--a283b304-704e-4d6e-838d-7f7876aecafc", "sighting--f4c12bb3-a449-46a8-be2b-0e5dd8df47a4", "sighting--92941f0e-b24c-49bf-ae99-7b582ad3b235", "sighting--b3444946-4d68-4bfc-aa6e-7f41339a97c1", "sighting--e3a4b315-6d48-48dc-bf0a-45181ef3ee86", "sighting--ddb3bbad-a8e3-438c-86b2-523105f4e944", "sighting--08601ba1-e94f-41a7-8ccf-e920316287bb", "sighting--80d19135-9e31-45b8-9640-4c4a43c5879e", "sighting--4375164d-2101-47e5-9be5-9b6101ab7195", "sighting--960bce82-78ef-466f-8bfd-53ef9ac53da0", "sighting--01ef93fb-f40a-43dc-a854-d243f0478871", "sighting--81b8643a-9b13-481c-9738-2d0cb4f45453", "sighting--770d01ed-b48d-4a82-acce-fc52935b2c47", "sighting--297c3d17-e852-449c-baec-9bf3ccf9440d", "sighting--94108640-cc87-4a77-bd4d-d16f0c95f35c", "sighting--ca5b3a41-35af-41cd-b5f4-d4c5e76e300c", "sighting--225fdd7d-f884-4d69-95af-c5dbe2e6f0f2", "sighting--b44bb9ff-7fce-4ce6-b3a4-9747119afc56", "sighting--de87b8ab-41a0-4947-877a-72793ba1e8c1", "sighting--3ccf7d98-be7b-499e-9d07-925f4a3440ce", "sighting--dd3812cd-b9fe-4dee-834a-6f497442eb64", "sighting--4859d311-88cc-4891-b500-e4ea9d46a977", "sighting--f1f1b214-c75d-42e6-a2f7-b035e1e39033", "sighting--5b3b8923-3a41-47b0-9ca8-fda857cf5b07", "sighting--6b185c63-5354-4b02-83c1-c790c868166d", "sighting--54e85dcf-cba1-4585-9d0c-dd0241455dad", "sighting--6b14578c-c302-4bac-a07a-79081405af94", "sighting--d12c11d2-f4d1-405b-ba8e-b339aa6072a1", "sighting--fa48a37d-93ac-4fc7-a2d2-e7244a43e550", "sighting--5f010857-67d1-4ca8-9665-a004b52d883b", "sighting--a99d24e7-01e1-4500-b296-807f53457f9d", "sighting--ea901455-480b-46f4-9c42-c324670a4ea8", "sighting--1056723b-0e19-4ff8-a903-850984252cd0", "sighting--4aacf09f-d9dc-4139-8bd3-3749cc535de6", "sighting--57a12c69-3165-4f21-b690-540b44aa09a5", "sighting--2484bfd5-1f41-42a3-ab89-c3d896370778", "sighting--39a01897-fc4c-4188-90f7-8c1f201ca89e", "sighting--b1c52bc6-f51c-457b-94e4-b30a30744bd9", "sighting--141a308e-8880-4acb-a547-4518c8a6dd52", "sighting--eeefbecc-4d62-4f35-bec4-0bfb8add89a4", "sighting--4d8b4862-ba5f-4713-bf10-1a4d8bdcd76c", "sighting--5b115566-cddd-4c57-8da7-bf17e53188f5", "sighting--03c20e4d-8c56-4f26-853a-43ef8dac8939", "sighting--077b218f-f50d-47f6-b36d-0c77d20febd7", "sighting--336c12ef-6006-4cbe-8f74-e710e43f4d55", "sighting--3ceddab5-518e-478a-bb48-f855182ccacb", "sighting--e36fa6e0-9a43-4c2a-85d7-46ebc9442a60", "sighting--9133ba5c-9fa4-4cd7-af11-43fd33dd3f68", "sighting--d6c55263-3b42-4f06-862f-b9d391acd7f9", "sighting--9253bbb2-a905-48e2-a028-82b53c54f15e", "sighting--71257f90-2b96-4609-a883-05a0ddf3c7a3", "sighting--5ccaf325-3321-4f13-b58b-2884acc3c1df", "sighting--016070b1-e762-4566-8723-85ef42f286ba", "sighting--e2c0ed95-b94f-4260-8276-ac9e12fe730e", "sighting--b510eb03-da57-469d-9791-b73079f20bcd", "sighting--e4aecba6-f3d1-4f38-b71a-2507ae47b39f", "sighting--93915c8f-fe6c-487d-a5b7-0e68e238299c", "sighting--69c7e771-7344-4033-8e09-20206af5773b", "sighting--7599488f-d01d-46d3-9e3a-29be8a6af5c1", "sighting--779468e7-813a-4996-a671-116769cb9ef9", "sighting--9fa59b06-7e15-4dc0-ba50-6723c3ab80a6", "sighting--d85c9d75-fd73-42a4-bdda-dfea10b0aa99", "sighting--4cc1ea7d-e9c4-407f-9806-abace5508400", "sighting--006b5b68-b6ff-4e00-a3db-d0147c848348", "sighting--0c7cde7b-d1a7-4923-a888-39b7cc6bbc50", "sighting--1c954312-3036-48c0-9512-b1768d71f3dc", "sighting--53ebf981-d984-4d2b-8bc2-f978c5de440b", "sighting--ad4b4ce9-ec6c-4f80-bd0b-5b71e84fb686", "sighting--b0275beb-bd95-4633-953d-75e72cd911f5", "sighting--9e708ffc-2486-4660-9a30-b4fdbee9de9b", "sighting--cbe40408-5d4e-4ad4-85f9-b034bf192695", "sighting--7d72c20e-2edc-4f3c-b1ab-9cba2af3670e", "sighting--411e7906-bc84-43c6-bf24-6fcc3be12bd6", "sighting--78fa547b-61f8-4d70-a382-4538ef5a5b74", "sighting--640183e4-15fa-4865-9b02-1b0a2e063904", "sighting--0a3d7d99-a8b6-4c78-8b03-65a3b182cf3c", "sighting--e389ebea-e8b6-4fb1-ab15-45a076c6ea33", "sighting--3a390561-4aef-4b5b-9b5e-2c0527b4c2c3", "sighting--355190f6-d5cc-4824-ad95-65f717d44089", "sighting--2c29953f-9e12-4255-917e-caa189ab4b5e", "sighting--f4c38afc-e743-4069-8c0d-3ce5c8f71c09", "sighting--b64fd79e-63fc-4660-9804-c901c0540cfb", "sighting--140cce9a-6df3-4a50-ad2a-bb7fbd2e11c5", "sighting--4ba2c7f4-1272-48b1-a86f-3a23583f2faf", "sighting--44e2db09-18b3-4a12-9f47-a540eb537c9d", "sighting--0fd1bca2-098c-48d1-a7f8-be34cb8f836a", "sighting--f009e8d6-79ff-4ba7-983f-ab2a24b55bb0", "sighting--90204ee2-494e-48ee-9fde-58b406d29b09", "sighting--5b106264-050c-4b92-baa2-a8d87bd32270", "sighting--70bc6fc0-e917-46f5-9048-f8f65659d1fb", "sighting--9055d7df-473a-44df-b038-f04498cd54e7", "sighting--6bbc2cdb-d464-4b0e-a12b-bbd3f376ee58", "sighting--a4a66f76-5617-43b3-a452-873ccafddcac", "sighting--fbea1c89-eea5-4bc5-be1b-c083912abcf9", "sighting--509f38ca-7bb3-4b2e-abfb-1fae8fe82878", "sighting--405b3c74-ca68-409d-92c3-3b79988917a9", "sighting--8554ac5a-7cc0-4441-99ca-46155350aebf", "sighting--58b1efce-8d9c-49c4-a3c4-f06af92372ca", "sighting--1373b771-6838-40cd-b447-a69351e6d612", "sighting--b4aa470f-e16e-49e2-b0fd-9a8d2fbf65f3", "sighting--1e4b597c-49f4-4039-833b-bca081b0b900", "sighting--48f8cb2f-6ed5-4a33-a84d-c50b55338353", "sighting--e27035d2-d817-49bb-aee2-9ba7e3abb983", "sighting--5208254b-2535-48d7-b92e-282aa0c955c6", "sighting--247c3944-cc0d-43d4-be3f-f8ccc786d726", "sighting--cf9d2d48-7713-481e-8202-a2c826b5440d", "sighting--82346ea8-798f-47bf-a7a3-27961953e371", "sighting--7fa532d2-3c4e-41e7-beab-c85fa727233e", "sighting--6a92fadd-f4e5-4507-a91d-2a1d1774137d", "sighting--92f41962-5ab2-458f-b9ef-3a51e654d104", "sighting--0ba81053-9ab9-40db-a71a-68dbf9c72987", "sighting--62f5a148-3fa2-4a78-8031-0751df48b8d5", "sighting--4ff4a1be-b6ff-4377-b9b6-d514656ac732", "sighting--dabf18d9-b2fe-4e6f-a1dd-9861a4913a6b", "sighting--b502a935-b082-4139-977d-31ef8842d197", "sighting--9813201c-3dbf-4e7d-8e1e-2648997f5812", "sighting--057b616d-3763-4087-a81b-284c1c50bcac", "sighting--bb89dab7-3cc9-48d4-b70b-8dfe9112eff0", "sighting--09ee709b-983a-4f5f-bf0d-8c37a1fe8713", "sighting--4693b5f2-6c6e-4b56-8740-863ee0fb8f91", "sighting--bda50f13-e61e-4006-b288-f7c4a07b112c", "sighting--60512dbf-f55a-4d2a-b55f-70c6e0f9ed6b", "sighting--a4db1b8a-cfee-44e7-be3c-b62b11322942", "sighting--d1cf9a94-7583-4eb4-84f7-d3cefd60df8d", "sighting--8c2cc100-f368-49a6-b3d4-7d04f7baf0ee", "sighting--80a4c536-c30a-4723-9474-e50a728c69ca", "sighting--81a20a87-249e-4745-9545-1a5fde1748c2", "sighting--830cfdde-8f37-4051-aaf1-347b28a26773", "sighting--1e61682b-fb2b-4c5b-8331-06d7227af9da", "sighting--b1ad769b-3674-4999-bd3b-9fe13c708bef", "sighting--9951034f-36d1-4320-8bdb-4538ff2228ed", "sighting--7d0f0579-1243-42d0-af2f-27194a91c707", "sighting--101964c5-8a00-466d-9ab8-c669433698a4", "sighting--15cbb627-6585-407a-b0bb-fc6c18de3085", "sighting--f169c23a-2edb-40d4-865d-12afdf4dd301", "sighting--05583ec7-50e3-4043-83b6-b1934d5cd26b", "sighting--b435ba89-4a2c-4ce2-91a4-721677a9e1ba", "sighting--92920a24-931a-4f3e-b3a9-95460179b821", "sighting--1b1b3ab0-59f3-4ef6-8096-c0375c46a61d", "sighting--9bbfe53d-63b4-4b93-a675-c4fab2bc45a3", "sighting--af68c542-7205-4e0d-94d4-a48a31036f60", "sighting--43d6d406-1aa3-48b7-bf08-623df4a38c2b", "sighting--4c59c4e7-78fb-49f5-a802-2122df82056c", "sighting--d2374878-0f14-4210-98e6-445796f48970", "sighting--40a68671-635e-44ba-a29f-d020b59bbc53", "sighting--16bc02f1-6486-4cf6-95a8-68fe68594069", "sighting--de2ca5f6-6f7c-466a-86f9-dc4709daa3d9", "sighting--057338b1-24f9-4181-9a2f-1d92cb38b20a", "sighting--7f171841-033f-4013-a0f8-ba43d316af5f", "sighting--f824cbac-a126-47c4-a95c-07050d492ca6", "sighting--235f2a23-3e03-44ea-a85d-ee4527ceb2c5", "sighting--1fab9a3f-5174-4b5f-8a3d-43b602aba685", "sighting--4fb13735-67df-4eb1-8b7b-2a9aedca6baf", "sighting--2487ffc0-b1b6-4254-be75-fb6b484fd273", "sighting--c6c2a26f-e370-40bf-ba7b-566edf6df6d7", "sighting--807389c0-8d41-45d5-916b-64f0899f9636", "sighting--91146a7c-39ed-4587-807c-4f70a1f1c611", "sighting--63e5ae56-33d4-4df6-8722-5e0402dd8163", "sighting--b53137ba-30a0-4d53-ac11-03e9d3d8f0fc", "sighting--7850b559-7ad1-4e90-a529-cb33dd52b8c8", "sighting--5e8ef388-4836-47f7-97f5-17ba5f642911", "sighting--dfbc859b-a37d-4dad-b5c1-5cec9bdf7386", "sighting--49cb5f4b-9350-47a9-95f3-b3b7c4bad6e0", "sighting--4cd1aeb8-b6ce-4e1e-a8e2-ed48ae6e7e41", "sighting--1a129f8d-5b7d-4304-ad10-72c342fe73df", "sighting--423897c7-6f36-407e-83aa-6696d387fd7f", "sighting--f0639be7-c3be-445d-97eb-0ece605463f1", "sighting--2bcbc682-da33-404a-aded-f93961c04456", "sighting--d6c798dd-28b2-494f-aee1-ef138c1845ac", "sighting--261ba07b-2d36-4210-b5ea-80c799d404f7", "sighting--9d1ae591-d7eb-40fa-b2c6-43d972795f69", "sighting--7736e7ae-76db-4517-9084-eeff15e575b9", "sighting--1056915b-872b-4df1-9a4e-8706034c57d5", "sighting--97c3fc5d-fc8a-4f0a-aa7c-9c3069662488", "sighting--c0641c03-929c-4770-86b0-7f39d7adcba4", "sighting--f01bd628-e6df-4a02-a283-431a5d484b41", "sighting--cd9c7a4a-6dc6-4182-a6a9-1347ec1916da", "sighting--d8ead274-bd2a-4e6a-950e-fc0e515ba697", "sighting--0f515703-dd8e-4e16-ad47-158a26735345", "sighting--d49de47b-a544-47a8-8272-40070d26d1f7", "sighting--db9bd1cb-1383-4d42-a051-8d3ed5bde600", "sighting--0594151a-0970-4858-b9d6-179aa73c5bc2", "sighting--c45271ae-ac85-4800-a7ac-c018306274a4", "sighting--969ca7dc-fe4d-4593-9d90-04a82ebdd57f", "sighting--832b1133-3c3d-408e-84dc-985effc61005", "sighting--67aec3f1-e552-412c-bb92-ac490b206280", "sighting--688c6efe-f65b-494f-b997-84aff986fea4", "sighting--da694f40-65a7-477a-9992-9b11e991f407", "sighting--d3a9b3d7-bac5-4bd2-96d8-a6a1a01a428f", "sighting--743744a6-713d-416f-bb22-eb8576f661d1", "sighting--c280de57-69d4-4edf-b6c2-b552ce8c7562", "sighting--609a0cdd-04c4-4cba-a010-0cc7836095d1", "sighting--c242038a-fcf2-42c0-b00a-7e66359fd54e", "sighting--7417910d-5615-4215-8111-03fea8d3d1db", "sighting--0c5b8275-f78f-43e6-a31e-49dfb7625923", "sighting--142fc0b7-7b50-4af5-9118-e43b1d7d5fe3", "sighting--0a3a7787-16d1-42c4-87c1-205a49bc5499", "sighting--5a9ad671-1e79-4e7b-a15e-be889a66a13d", "sighting--f6c875d6-745b-4b57-af3c-c69338136ae9", "sighting--4b902905-1115-4e69-aa8b-01fd6208184e", "sighting--b5a8fedd-7274-4793-9ef8-a41db252a9a1", "sighting--3c0597a5-8dbb-4f2d-b42c-66c70c407342", "sighting--44e72a20-2e9f-4b24-aa5b-03d94c69829a", "sighting--f46d6fdf-4b14-4c97-bed6-32796e8abc52", "sighting--7c7a89ce-3ac8-4fbf-b50d-8fc0c290a40a", "sighting--24c3f22d-0d22-49b0-af34-194531eb7284", "sighting--ed46487e-efd3-43b2-b8d0-1eb9131b8009", "sighting--91c1ce90-72ce-43dd-b9c3-1774f5f16e52", "sighting--8f67e8fd-d94d-4f03-ab7f-a5526fcb5937", "sighting--20d8a006-7aa3-4623-9caa-bb6361f37784", "sighting--4848e72b-ed03-44fc-b463-f763e2bc67f2", "sighting--e380ae76-fcf3-480d-a361-8a526376f3e6", "sighting--0279ce17-f11d-479f-936b-ed4dd317cf7b", "sighting--71062191-bf01-4358-aa60-029c9a5015bf", "sighting--5c2bf7c8-9ba1-4685-ba5f-5a10a4b1463b", "sighting--1cefa39c-185e-427c-8182-6d52adea4ae2", "sighting--287aa5bd-af41-47ec-b66b-91d402ee9e64", "sighting--9a1fb497-2abb-457a-ae6c-ab1e682e9ed0", "sighting--2d3eec0f-cb7a-4ed2-9d99-25fc3e35f59b", "sighting--8ab8a239-03e7-473e-adb0-fde01b4527df", "sighting--524c94f1-d0db-496f-b4ff-74fe31a167d2", "sighting--11b73bc4-3168-42d2-9e29-38fe7f34147a", "sighting--61a9955b-4889-4851-a9bd-55b01aa3623b", "sighting--2d488201-b304-478e-9816-f469b7d98650", "sighting--4afb0a1d-223e-40fd-9c27-25cda3bcc0fd", "sighting--0caf6dec-a757-4c6e-a010-c67da1a6fb81", "sighting--0a16d1e4-eb15-4ced-bdd3-c6f533ef5da5", "sighting--9b6469f7-967d-4d72-99bc-48ac9f702d6e", "sighting--d05fda1f-632a-418f-b98c-50648f6d950b", "sighting--d1007dd4-e574-4c04-9d70-958d034a8651", "sighting--64d0cd6d-3c18-48b4-92db-ae054af9fc3f", "sighting--127fc449-ba21-4374-b6a0-c1e8c49476b8", "sighting--91e7a927-4107-4eea-a133-46fb704a1d71", "sighting--e158bc56-dcae-4aff-ac14-a2d5008c688d", "sighting--ed65783a-163b-4a41-949a-59f34fcbc5b2", "sighting--93fafc11-92df-45ba-a82a-50f554dafdd5", "sighting--dc900bce-e70d-4137-b664-6e2721251563", "sighting--bb1171b9-941b-43cc-a007-2758212355a7", "sighting--9155b2e2-44f5-4495-b82f-b62c449b8bd5", "sighting--cb6c3e93-6f5d-45bb-bca9-231636b25e4d", "sighting--176c1892-8697-4112-bcb3-e497e040b3c8", "sighting--179db03a-d9fb-4742-ba9c-83c29c4e4d7e", "sighting--ed6864a3-b7f6-43b8-b1e9-8323e2b25c3d", "sighting--a0493102-fceb-41f0-8daa-ea39e0275801", "sighting--73daf874-f20e-48c0-b57a-309850f10e90", "sighting--7b71b7f1-936b-4c52-a598-28904248fc58", "sighting--83bfc1af-1a86-4b1c-8046-cc8df38c36c6", "sighting--1e9aa2b5-4e5b-41c2-a4a7-9c9a8fb44e39", "sighting--352436ec-1a21-4204-9d73-a0831879c19f", "sighting--324f8611-efca-416f-a3d1-0528f0c0b1c5", "sighting--ef43493e-af18-4180-827a-73efe2e236c4", "sighting--c96e7f1c-efbd-4ab8-95b0-820822bf8539", "sighting--3000d4fd-5002-4614-a479-8aa3f3c7ed34", "sighting--bb03f646-7f5b-455a-b2e0-59061ecf0e94", "sighting--1f8741c6-1c0c-4394-9284-7e36addb96f8", "sighting--b473d21a-4369-4861-8e5f-e173eea2c2bd", "sighting--c64691df-6bc2-45c2-be31-adbd1ba5410d", "sighting--7a6d8f4f-9b6e-4ff6-bdd5-1592b6221a9c", "sighting--40686b3c-7c47-430c-baab-7a126d4cbbae", "sighting--3b84399e-4393-4341-ba45-b170a2f40df9", "sighting--a09552b5-5e63-49f7-ad78-4f98bd65b304", "sighting--69dc5cee-b2d0-46a0-9103-ed8bac1b596a", "sighting--101757fa-2dd1-4b7d-904f-7f32f8eb2b26", "sighting--11bf4fd9-eef0-4bee-97f7-da8f5b990f01", "sighting--e3d30bf3-d206-4fef-9b3b-5736825a6f9e", "sighting--3d8e52f3-5e92-4f51-a25a-135cf8ff2bef", "sighting--a27b9d1d-89e2-4e0b-a373-e66c8d68e25a", "sighting--f7141491-e565-4dc9-8688-94ca0734083f", "sighting--6e5165bb-b28a-4dcb-a256-35da97c6299d", "sighting--536f5c5b-f06a-4de7-b4ae-acad86c3ebfa", "sighting--60170648-6222-4380-9c27-dc25f8d112ac", "sighting--daa11099-3d5a-4a62-a0f4-48bcabac6b30", "sighting--70153c4a-b33f-41da-b297-3867dc040068", "sighting--9a25d4ee-98a2-4f06-8333-8064d79e30ea", "sighting--a74abe7e-08f9-4c96-8b60-ead06cdde460", "sighting--bd9daa2a-0439-411e-bf23-9cd2191dfc67", "sighting--6f45051b-33bb-41d2-a86f-9db831896b78", "sighting--c889a0e9-4cf1-4c4c-9cd2-85d332fe195f", "sighting--fe63ae20-4985-4dca-acc2-6faa88d17231", "sighting--28d81407-5672-4e32-8d47-110b1c38e64f", "sighting--93032b91-552f-41c3-a20f-b42f62c74f0d", "sighting--65f7d959-e651-4377-bfcf-61bd564a778b", "sighting--9e44024f-9194-48b7-a2be-f9734d33838e", "sighting--0ff6e202-8929-4b1b-a416-bb0e4f0068c1", "sighting--4d35eddf-7a63-465b-ad00-6398a549c747", "sighting--3a9b6da0-fabb-45db-9ce8-a32b8fadad81", "sighting--e4e7d5c8-3736-43f0-9036-57a85d2aa62a", "sighting--8de3d518-7375-4f86-96a0-29872aee9215", "sighting--641e2c9b-8bab-4402-ab92-51a21d75b9b7", "sighting--c9d9338d-bde5-44a4-8902-344dffb13c87", "sighting--498872d5-886a-4c6d-9d51-b0b06cd41f93", "sighting--2ae1e0fa-02c0-4fb1-8e59-d469547cc868", "sighting--b9ec562d-0c99-45f5-9638-ed74521b4482", "sighting--a03abca8-06fc-4f23-bbfd-8fac41c6db03", "sighting--2c54eece-0fae-4823-8302-c78f43db4060", "sighting--23dfdcd2-66e7-4fae-8aca-dfb2794c5cdf", "sighting--03fdf11b-d7ca-4a9f-9535-64eef1e1a4d6", "sighting--7f30fe28-2120-41c7-8f7c-5aa7b3c24a52", "sighting--d4bb8623-610b-4770-a74e-d05008264974", "sighting--68af51fe-d46e-4da3-98b3-6d76da29c216", "sighting--9b4ea97c-95ba-499b-8088-2cb936b87cd4", "sighting--ee0a145b-055f-4aaa-bcbe-886dddcab935", "sighting--0205c574-eea9-4db0-bce7-272d55fc0926", "sighting--595a7120-3468-4236-bfb6-e16fa2b8eb97", "sighting--0a27b110-62dc-42dc-b94c-4423a0edeecd", "sighting--df595608-b3eb-416a-a866-ef344081e044", "sighting--a643a5c1-c293-49f3-bc1b-628d79f6aedc", "sighting--9e4bc424-cf3d-45f1-bb0a-a251b1d7e2c9", "sighting--93c10d44-6977-4fb5-85d4-6ed21844db05", "sighting--b11a4a81-ccf9-4575-a577-009767c743d5", "sighting--75d5f47e-2d28-40f7-9a8d-6353c6890c95", "sighting--00cbb8cd-c4e4-447a-aa4f-b859deb7dd02", "sighting--07f6d160-1bcd-4e2d-9d53-6d2a3269a7c8", "sighting--bd8f2534-c6bd-465d-a1e4-077a62460842", "sighting--c7dc153c-50f0-48ca-bfa9-df10a3d66851", "sighting--96aed0ff-0cdb-4e6d-8380-e78963bd2669", "sighting--b03b671f-b5c8-4959-890c-c3b826020448", "sighting--1622e755-59d5-42a6-8457-a754a22cdf16", "sighting--a720d3aa-bb80-4842-bf9b-ad45d31ac0da", "sighting--ca30c1f3-a411-49c5-a29e-78d1a229a3b2", "sighting--49399ad6-a007-4bbd-b207-bafc0f4466d0", "sighting--c76b6531-255c-49f5-9451-b4ac69effbca", "sighting--018e2cb8-670e-4675-be3c-55425c4271c2", "sighting--218b8da5-ec5c-4f07-9a8e-6f5e20608cba", "sighting--7f0067ad-a3b8-4827-8b98-1b77cc4ae366", "sighting--26a8eebf-ec8e-490e-b013-900506e1cd53", "sighting--5b98e900-a302-45ae-b8bc-de654709ce0e", "sighting--79f765ff-7db3-49a5-b258-075887182d18", "sighting--f3a5d88d-4718-49f9-ace0-62997d2726c6", "sighting--39c38391-d936-4bec-92cb-2752ee566c2f", "sighting--eaec43c7-968a-4b64-981f-631794dd6257", "sighting--91dbfdff-c6e3-4992-8cd3-9390ef3bd7bf", "sighting--9c5696b0-6b71-4527-8739-9bf9820c736f", "sighting--37566e65-85e2-4ff4-ab24-c711e8e37ae4", "sighting--ffac0fc1-44d1-4003-8d9f-45c268b13e13", "sighting--1c2e8b70-e17f-480a-98f3-ff8420605b52", "sighting--4245ee9a-e64d-463a-b536-fe3ac3354564", "sighting--7efeee8d-4cf0-4e74-b338-591531fa052b", "sighting--ce2fd242-60aa-4fc0-ab30-4c4035f49243", "sighting--87d9fa8e-c5ae-4d69-8cb1-6634bb801fb3", "sighting--35b26aeb-f437-4ea1-a25f-e8bc23b3b470", "sighting--d5094b16-0b79-48bf-b028-311e69e2448a", "sighting--072578f5-228b-42d3-ba43-bbeec318ebc7", "sighting--9b77d59f-5588-4540-89a3-3c4ccaacc899", "sighting--7b60d105-ce2c-44ba-be16-d567b1e05ece", "sighting--430e9a8c-dfce-4f0c-a4da-b015cb3239be", "sighting--510f07ee-5735-4281-ae63-366a12766488", "sighting--d9b368f7-4e8a-4947-a1fb-b9e9b9688d5f", "sighting--900203e0-f66d-405a-8d3c-3dec8cd9595c", "sighting--a588db82-ab1e-4392-8435-89f83da5fdf3", "sighting--ac0c03b9-3bb9-4c2a-a9b1-c41ed72be152", "sighting--9e7df0c0-204a-4e06-95d8-32e18d2e06b8", "sighting--da6ac473-eb30-4b3a-978b-5bb1bd5c5918", "sighting--1c4b9564-3888-4c64-abdf-0661d14f880d", "sighting--f3e10782-5769-4d58-9529-a15af2706912", "sighting--a96940a0-842f-44ec-b956-c0ee66952d61", "sighting--7702302a-53f1-4352-9a16-40a70d567e6d", "sighting--bea4a2ba-0ebd-42bf-acac-36cc2a842ab2", "sighting--d77bb552-6d65-445c-9a20-d1472b3e707e", "sighting--021b774f-f009-4d64-ae51-0138c975dfe7", "sighting--2df3b835-6d95-4774-bf06-502d36257f72", "sighting--1023c2db-46bc-4877-ab67-1a6b0d19ae96", "sighting--f584f5fe-28ff-4437-875d-e893944a087d", "sighting--70710745-4877-4688-849b-1577cf1e87a5", "sighting--1e444f7a-501f-4a3e-9836-2d390db13751", "sighting--60140ae4-c175-419e-ab34-130a834af676", "sighting--7caafa38-49fd-4994-bab5-36a905a091b3", "sighting--26ec3b25-a2d9-45ff-9c9f-049c891df3c9", "sighting--798d1917-6030-4948-816e-a7ec7096fcb0", "sighting--8e4b3032-ed2a-49b8-9202-62ed5aac5139", "sighting--cdcd9163-df67-4567-a480-15199a70290e", "sighting--1da73449-5f86-4ddc-86b8-ace9fc78cfb0", "sighting--78e5816e-d64e-4e47-b03f-e269ab10d6d8", "sighting--88764aef-4ba6-4633-942c-6510d7a2c669", "sighting--83a5df8a-bc47-4580-9a1e-f04f6ad239b4", "sighting--7ba2a090-721d-424d-9137-ce09abeb39bd", "sighting--a1ccc30b-996b-47f4-8e78-2eec0c898880", "sighting--20d335e7-c532-452c-98bc-9a245c5c56aa", "sighting--584ff8ae-fe61-4320-95bf-c255b09f5f01", "sighting--e8dbe82c-3b06-4820-96cf-b8008083b0d0", "sighting--ae8d6fc2-9e9f-489e-bc94-3846a5842d0d", "sighting--774a723f-5fe4-40ea-a836-107c72cc0470", "sighting--34c94075-c8ba-410d-b3a5-bb2eaa734e41", "sighting--66ac78a7-766c-449d-b74e-1e4c1d12a64b", "sighting--be77cba3-1a56-4e24-afcd-1d43e140552d", "sighting--1ae80eea-318e-44c0-933b-ad2844a0f905", "sighting--12b339f8-0746-42a5-8bdd-5f0bc5133c29", "sighting--9bb9b57d-20e7-43e5-b0f8-4234165a046d", "sighting--b2085a3f-bdba-4dfd-963c-e9dc428395d4", "sighting--44b7a3a6-d5f6-4242-a3f0-110d7a5e9be7", "sighting--9f4e0454-ce43-4ee4-8bb2-3d2034dcd9b6", "sighting--9a7a0204-f64f-45ca-8c71-72898a3dc8c9", "sighting--44659403-9c67-4c7e-9e10-eec0474bdb96", "sighting--fa95bde1-858c-4280-ba64-ffbb205db107", "sighting--317f02bf-e916-427c-86a6-9e66a19ebc66", "sighting--f4dae066-5164-4222-94a1-5f29dc15e39d", "sighting--f5051360-20c8-40de-8388-b8d5405ba37d", "sighting--f2e58e71-5dab-4e64-ad66-15ec7c5051fb", "sighting--b22e254f-e6dc-47dc-899b-9f132edea6c7", "sighting--28b65e40-c5d0-4b31-bf02-3577ea1f2193", "sighting--5b9cf1dc-4fb0-45f0-90f9-aab8b01eebc5", "sighting--c73d70f9-9258-466d-b0b0-ac54e8202d0f", "sighting--f8ee44b9-61a9-4685-b131-a4f103b018d5", "sighting--4de3fc46-ece2-453b-bbd6-054b604fd944", "sighting--b544047f-a43c-4376-8415-969e0b2f9d0f", "sighting--3b4ba67c-38b4-42e4-be21-facae4a739c9", "sighting--96ea268b-b093-46e8-8d75-1ea3c733fbb8", "sighting--0a3f2784-2370-4b50-bf06-6704ee1520fa", "sighting--14e82db0-5ae1-4547-92f0-60f7ca7f5f23", "sighting--b9bfafc2-1876-4d0f-9bce-c5a65baa6736", "sighting--8bce0178-b583-43f7-9f17-5d11ba0774f4", "sighting--8d30dd5e-2c96-414f-810b-2ec5f898a965", "sighting--de1a3472-83a5-4a5b-9908-3e76c8d7592f", "sighting--fed54d79-2e31-4e6d-b677-d2692f24c299", "sighting--b1fd3ddf-19e2-4496-9061-c9e0b89a0e3c", "sighting--1ca69471-a69f-443f-85b2-804005805f19", "sighting--e30cdcc3-3c51-4b5f-833d-b964f2d8ae6a", "sighting--5bc5075a-a522-4947-b859-eda4f4a2c917", "sighting--c7247afc-fc8c-4f4f-a8bb-9cf44f3b5e8f", "sighting--de6daa55-8be6-47b0-a80b-7c6e5f200213", "sighting--d9479eec-34f2-402c-83f7-2bd3d07f7187", "sighting--c863f253-9223-4430-afa3-b1c123661e14", "sighting--667c11e9-ef58-49f3-96f6-66bf95607eac", "sighting--90c3f001-d2d6-41d3-8ef9-66261ad57ba7", "sighting--b978833e-85fe-44cd-bbfb-ffccf28ac0b5", "sighting--ce0b6b92-e554-4df9-b31a-e82b38f1c6ab", "sighting--a4fc375b-c7b8-4ff3-b89e-2b62a02e309e", "sighting--b8b70704-a5a5-4c4a-803e-f5dac00c8d29", "sighting--760e5c0f-a8ba-4bb5-971c-8c1b5281b1b3", "sighting--bceb6c87-c46c-479b-8557-1dedc34bfc9e", "sighting--59cf2e69-66fd-40c4-bc6d-88a1e7d54a15", "sighting--446e9015-0806-4f55-93ce-fc7faafc2838", "sighting--8e7dc80c-d8e7-43c1-83b1-cf7d8bbf0c88", "sighting--4d86a393-c6f8-473e-92ad-ebc603f56eac", "sighting--9609f91c-cd11-4ca5-8081-f9d7b1ed5c59", "sighting--5c11ce59-8ceb-4fae-846a-fa2819486f68", "sighting--3c993192-e3f2-4b5b-99f0-8a19069a47ac", "sighting--1eab35ac-82b4-4c93-9227-6c255621cb87", "sighting--4b3a6368-1a5b-4ec4-9c13-e376a52c88b9", "sighting--00e50bbd-ce63-4c57-b8d9-0a4abb583496", "sighting--adfa3286-587d-4b8b-82c4-e10025dd24e0", "sighting--7cccb621-7a07-4f42-8a9a-629265a65d77", "sighting--da5d5ba9-49e7-4a7d-9477-ceb29945b5a2", "sighting--d6d814bb-5be3-4698-8c1c-7297cfa1f809", "sighting--f307dcbf-1b70-4736-84f9-2b1d8b44c953", "sighting--8c9ab431-5e61-479c-98bb-4e687d45241c", "sighting--e99635ad-895f-49d1-80a8-c6afacc3f4f8", "sighting--b0419c22-8bd6-422c-a9ea-413726844bb1", "sighting--95ba2342-26d9-4b07-80cb-1510a836ad75", "sighting--9332448e-04b1-4c61-9b26-80870c5c2f3d", "sighting--6e5f6c53-04c5-4905-8720-6a7664c505a5", "sighting--342190e2-0a17-49ae-b79d-ad45a94f98b3", "sighting--d87722e0-7838-4143-bd53-84ac0650e3ff", "sighting--2de88f0b-cb67-41de-980c-d778521fc31b", "sighting--cb58d83b-b395-4b45-a944-d17e5f79934f", "sighting--3a3af93a-0a0b-46c6-aa22-fc84c5b2fce0", "sighting--f15b6726-d9ab-4126-b4d2-4a76b37536b8", "sighting--10ee7066-d980-4c1b-9d3a-76e630af5a33", "sighting--31de1e54-b711-4231-9731-9d3391375844", "sighting--522c3beb-05e1-4cae-b2dd-df45ceed6bfb", "sighting--564468b1-f6f0-4410-b489-788764912b4a", "sighting--ba81de0a-431e-448b-b664-06035d2aca97", "sighting--21a03039-c961-4c1a-8f2f-e2ee2e2c0e30", "sighting--bdd6b083-ff85-44d8-b40a-bd706ce8696e", "sighting--15ff9f06-d6df-45b9-8825-c506f9beff13", "sighting--5ce31c67-d195-4106-aef2-f73c9099771f", "sighting--23925966-f8c6-4604-8f83-e74dffc7907d", "sighting--f65d5264-7203-4b54-a5c2-c4f05e315938", "sighting--d8e6ae52-9032-4647-bd21-24388057780a", "sighting--09e88847-2c5d-4d69-ab48-5638b4cca732", "sighting--799c0605-2e63-4170-9b05-724029cee014", "sighting--d133501d-f0ab-4c60-92a7-de74ff2f0889", "sighting--b3627019-b573-4ab9-b750-bc07ab32a0da", "sighting--ecd7d026-3579-443f-ad13-cb88497877ff", "sighting--e1a7e2c3-dd90-40e2-914b-093b55450f02", "sighting--e6b3a7ca-7230-4f86-833c-cb80c6de5df7", "sighting--241bdc59-6baf-4d92-b0c2-f29b7ff85256", "sighting--5485c2e7-6eba-4fc7-874f-532216b63038", "sighting--89297f0c-728e-4c10-896f-f42fbb656a12", "sighting--2967c78d-a952-4a29-8473-1c588197c94e", "sighting--e061c670-f0c3-49d4-85c6-3a4bff429e8c", "sighting--60830047-4ac6-4e29-aaea-02be75ac2bd9", "sighting--64a9d809-7bba-4cb8-a83a-86e74015e151", "sighting--e3461bc8-92fb-47dc-b246-55287d93b0a1", "sighting--013c2bc7-f439-441b-a542-ad5fabda57e4", "sighting--06ff29f9-94ff-4b5e-b542-512ccb21c6c7", "sighting--97121690-0727-415a-bcca-5d053202d1ae", "sighting--110ffffb-64d6-44fc-b89f-656e26b283d4", "sighting--567e289a-74b4-4be2-9a90-892a0f2f8390", "sighting--a1bdd996-3b15-4861-b738-56a72b11455d", "sighting--9393b70e-684a-422f-8075-78bde9ef5fec", "sighting--e056039f-8ebc-4e68-86ca-18bc1799818b", "sighting--c4d85a1e-ac7c-4e07-bfba-0bfc8f3fafe9", "sighting--67953754-1976-4da2-b6e2-723376889ee3", "sighting--0826b61f-b565-4bcc-a54b-e3825fad73b4", "sighting--224867cd-765d-441b-bf91-54a1356d9f58", "sighting--b6c4389a-bbcc-4248-a420-d8ced00edd20", "sighting--baf403b4-e3e1-48ed-a273-e256bd42480a", "sighting--bb1580cb-894d-4bde-8975-5a922a3b9fa4", "sighting--f1c55777-75f0-4d9f-84ba-f127ae2cec2f", "sighting--41adf433-fdd2-49e2-bedc-1900bd43842e", "sighting--ed15c565-4f7f-4ea1-8e7b-1432e1110e20", "sighting--36f4fe12-9d9d-4fa2-8e5a-a73036ebaed4", "sighting--3d14394f-92ec-4939-a375-830351ef2018", "sighting--e008b356-8901-49d4-bf03-7ee6f2c91686", "sighting--4e185846-213d-448d-8c02-32df7b62d52c", "sighting--9457d8f0-a322-4fad-921c-8fa8168ad716", "sighting--f8bb1840-746b-4247-9427-df0a62412808", "sighting--086573e8-20d6-4aca-8023-0a2de0e21505", "sighting--947e9a51-0e22-4c7b-9b54-7b43fd8b6f90", "sighting--d1d4055d-e1eb-4ee1-aba6-21150e5cc61b", "sighting--9bb4f439-9c78-4a99-a4ac-7fbdf9595a1d", "sighting--37160942-48f5-44ed-9427-bb6fa2ac4945", "sighting--37a3cf4b-c71e-41b7-a5b5-ed8ce3d51d41", "sighting--d5ce2c91-8104-414a-9c97-ff3cd03413f2", "sighting--4bdd8878-164c-4297-9a38-36c255a8fce7", "sighting--1b01ffbc-dab1-4de5-bb5d-0ea7a243661c", "sighting--9a528a3c-a464-4197-8670-2c282d92822c", "sighting--dfdc014c-3623-447f-978d-df60d783adca", "sighting--ebd314c1-951f-4187-a0b8-94a9a99a40e1", "sighting--fcfad480-11df-4237-aeb0-647aa9352894", "sighting--86d6cea4-8558-4fc3-8472-95de57ecf8a7", "sighting--3e1e7188-db67-4a3e-b55d-e439fee4e5d3", "sighting--eb0bc1ee-8895-4bbe-98b0-0fa311f6febe", "sighting--2cbc8b5c-8702-46d6-a373-3fc893bdf0a9", "sighting--fdbaf354-d360-4101-807c-c64ae7876b42", "sighting--d944a143-51bd-499f-abf1-1beb01f4b7af", "sighting--cb9def56-9225-4d6f-b65d-7e749add1a15", "sighting--54947e81-524f-45d6-a587-c06a970917e7", "sighting--548af0b9-aabd-4e38-bd48-0d29df8e373d", "sighting--bd086a98-7cf5-4ed3-80fb-b9a434685a66", "sighting--44e3aa3e-adb7-401d-ad17-c0ec5c3de7b0", "sighting--2e134947-752a-4a2b-b023-cdfdaef0ab88", "sighting--2a20dea6-d28f-4399-9e1d-123534677fa0", "sighting--00585ec8-efc4-4938-bbb9-d14c061d31da", "sighting--58bd3a64-dbe4-4002-9c50-ba9d4d56b054", "sighting--ef5f2454-6778-4910-a97f-f10054074599", "sighting--99d2fc1a-6a44-4af9-9efa-7c214806cd69", "sighting--975736cc-2cf5-472d-8a57-b06d0f172df4", "sighting--f78c7d43-7a29-4b9c-8805-f9adf9da6996", "sighting--16562217-eb45-4eba-9405-cdebc64246b2", "sighting--35f304ca-6117-4496-a614-bb9b98bc0373", "sighting--9494b645-0f76-4607-9719-047882608832", "sighting--2cb6dc90-4e7d-4e4f-880a-2e613d1e8780", "sighting--0f678ab4-3bad-4663-909c-511cd5395997", "sighting--75d59c8b-8082-4b94-8a76-9e61d85324a2", "sighting--0602bd6b-eaf2-4393-b753-819535a4be7b", "sighting--3ac68b52-2a0a-4977-843f-05de650ff316", "sighting--05c349ad-6175-4a86-9409-ab85fc225fd0", "sighting--42ee7c2b-81b8-4382-b2e3-2a86e3552fbd", "sighting--be6c8072-14d0-4748-8ad5-4597e163b561", "sighting--fd540a9b-89c0-4350-a070-f58ff30836ff", "sighting--e53303e4-1c48-4add-8d7a-535bc1f7dbc6", "sighting--cf79766a-40af-48ef-a0ea-a8f5a4993608", "sighting--ddb473f2-b654-4857-9899-0091c5d5b99b", "sighting--b425e413-4955-4ccd-adee-819b7c2c2667", "sighting--788ef141-a19a-4467-83ce-c2f38c144857", "sighting--e10d541e-3b8f-4ee5-ae39-352cf7d43191", "sighting--7fd8df78-b968-4e22-800e-7fe569601b7e", "sighting--be7870ae-8b5a-490a-a0ba-89a951f6496d", "sighting--8a722e6c-d7a0-48d4-b837-36b6962220a5", "sighting--df41caaf-d7f3-4340-acf5-0e721042c4eb", "sighting--63a7aff2-4131-42da-8759-373206676a49", "sighting--174bd645-a630-47fc-b977-c08f9723326a", "sighting--a0b7aeb5-630d-476e-8b4c-e7d31bf4b557", "sighting--9e195b21-c89d-4171-8f1a-aabaca4ed74d", "sighting--dc1db197-f117-4c2d-8cf2-8937a196b5bd", "sighting--0c8a0a05-3abc-4f0c-ba57-f80a27aae550", "sighting--7c4aeb0b-297b-4feb-bc0e-d72a06fdb067", "sighting--2756eee1-f9b8-4d44-a21b-f1c769c9605a", "sighting--6c34065f-7918-452c-b286-58bf50486b7d", "sighting--4f90087c-acde-4029-a601-322bf57727ac", "sighting--089e1ac3-d11b-4452-8b20-791abca73ac0", "sighting--54143680-bd54-4f1d-8c7e-2ac3a6b60e2c", "sighting--5ff9ace5-14cb-48bc-a601-f2cfac5ae640", "sighting--51bb576c-1a58-4f1f-a350-57051ab35bba", "sighting--a8a4d7a8-3613-47a6-8685-218656fa1ff6", "sighting--4e9cea94-6fda-45ed-92b0-e12fcb5e6eec", "sighting--486ddbe3-2bf4-418a-b640-60badbfb8670", "sighting--1ae898ec-686a-4c7d-8fc9-ac8a08cb49f7", "sighting--240d4e8a-0b0f-4692-b597-68ef1b15127e", "sighting--856c9a4a-f1cd-4f15-90b9-4372f1ae482a", "sighting--ca82c659-1ebb-484e-aeb7-5e3b7f79cf74", "sighting--00d350fd-f66a-4037-aae5-ad2bdcced639", "sighting--2776eadd-1ef6-44d1-8e3e-2f99192cf21b", "sighting--b48e65f8-5e46-4364-bd46-6ab27cfa0c31", "sighting--f03f19d7-495d-4cab-be14-d8b63da83d55", "sighting--087bc01b-6749-4ec6-a327-79bc7f0eaee7", "sighting--cbb4531c-4c17-4500-a919-f8aadbb26062", "sighting--49e3824c-4510-483e-9913-b189fe519f9d", "sighting--f6699566-9aeb-4001-8cf6-fce79b136b17", "sighting--fa5952b2-5f59-4b1d-bc1b-042808644876", "sighting--714f3f96-9ea8-49fe-8341-b7d4a9ee88b4", "sighting--038cbe93-bfd5-4176-9dc7-ca85d7638da0", "sighting--fe4e750d-c612-4fcf-83e8-6aedb6ea0b9c", "sighting--150131ef-ba57-42f8-adc8-c3aa0527e0db", "sighting--9c33411f-53fc-4440-badb-0cb2b20da20b", "sighting--988ba4d3-37e6-4119-a497-064d4eec7bd5", "sighting--23aca202-c115-4402-a47f-72f2ca1ced47", "sighting--ccf9e91d-e4cd-45d4-9b6b-b88c1c9b47a5", "sighting--8d13d354-4fe9-44c2-a0a5-1022b8ba3689", "sighting--57dbb8a1-8be9-4855-9654-f1df67b23712", "sighting--a88425cd-07e3-4e08-9857-62d187b51631", "sighting--e0ccb35e-4bf6-4912-970a-22c119427734", "sighting--0b54ea71-1ea0-404b-b295-5345069c3e84", "sighting--bcd2753d-22d8-464f-a061-f5e2c0476918", "sighting--4b2cf6d6-a51a-46a7-b2f0-6129b526cdeb", "sighting--98cd2ece-e777-45d7-9a66-e1b1cd1ae388", "sighting--312b0779-3808-4b98-878b-48861b337988", "sighting--ea159569-5449-40cf-bb2a-b37e8c929a8d", "sighting--e39ba8ac-0dd2-4f02-9f07-2afd950b354e", "sighting--8a8b978a-ee28-4490-be52-a482563fb392", "sighting--8081db4d-24cb-49fc-8df9-f95fcdf032a9", "sighting--2c85d6d6-1334-43ab-9a79-299a80efdc90", "sighting--d2bbf36c-71bd-45d9-9093-652827d7501e", "sighting--33149014-898d-4307-b1d7-5de44b17da64", "sighting--55780bd7-dbc8-49c6-9cb5-6e38fb68c811", "sighting--6780b011-380f-4c47-b4aa-3c1f8e7c44bc", "sighting--c1c2af09-89e7-4abf-8ace-3c8d52305840", "sighting--86d77d5b-6af4-44a0-8f5a-e39305550634", "sighting--237efc3e-c51c-41e6-9954-6c3579a27ded", "sighting--cac53daf-1a4c-486a-95b8-74eb97f95e14", "sighting--55d99058-e025-42bc-b4af-bd1d202373bf", "sighting--daa13c2c-d577-4dfc-bfab-d980f6e19ac3", "sighting--856ccde3-bc48-4f67-8e46-a805b441053a", "sighting--cc9a8124-a919-466c-a30a-c7a951785e95", "sighting--024c24eb-7b20-440b-aca6-170915e7911a", "sighting--2c0fa2de-49e0-44d9-b87b-f4c4fbd6487d", "sighting--dd70903c-7c7b-49a8-a32c-eeb34bed446f", "sighting--58f1b8f8-661c-4936-860c-1e8a9b8c3ef7", "sighting--a9f51de7-4a67-4fbc-8004-4b80266f4f61", "sighting--95b02ddb-8cdc-4ccc-a91f-d0c833950579", "sighting--f21f20d8-6225-4d17-abbf-43022ff86e95", "sighting--061f9161-20b1-4741-bb5a-d30bacff9e1c", "sighting--e5fc3e61-916b-471d-89a3-53e88cf3b80a", "sighting--68fe02e5-9fd8-4440-9a62-9c93a82d1c87", "sighting--859e3dc4-ae6c-4eed-825a-484252f93857", "sighting--46f17f64-45f0-4ae0-a8a0-28b31f9deda3", "sighting--9242fe17-e642-4ec5-b2b0-2b2ef2b1239b", "sighting--6295fb36-dbce-4fc6-b7c8-c0e7a7a543ce", "sighting--cfe0ab53-e63a-4d50-b68f-b91fd96f09d7", "sighting--ce3f0a88-4297-4f3a-8c5a-4dcfd8f78e44", "sighting--a92c510a-3bee-4a74-88f6-22f050a62e6d", "sighting--047c1ea3-36c7-447e-b1ee-c27b2c158d7f", "sighting--e157f067-f872-4e5c-ab29-f4bd1c2e6c82", "sighting--d55a0efb-3c4b-454a-b411-b8893aa47eab", "sighting--9e2b35d9-5427-489a-884b-b01a18fb2df2", "sighting--b3638a78-d64d-492c-a54a-603f6e97a31e", "sighting--eb8502a8-bae1-4668-8e44-1e287a253cc6", "sighting--fafed967-1724-4f63-b76e-8e24d567285c", "sighting--c788e5fe-16dd-4fe6-ab01-fe118f0c7fb0", "sighting--4bccff6e-a4c6-4a5e-a3ae-29edb00e0cad", "sighting--16bbb835-e481-46bd-8e76-ecb59cff2262", "sighting--1e65c523-8902-4eb4-aff6-b3b81d617a96", "sighting--217bd4b9-ba2f-4d41-960a-05c45459b012", "sighting--8b1ab26f-e6c0-467f-a957-5fbdf1949df9", "sighting--698f3c19-9fb3-471a-bce8-41623ae696be", "sighting--acec000d-4726-4906-b02a-206e234329b2", "sighting--04faa0c9-3437-4af5-a3f5-6c6caefff197", "sighting--b3298c73-6b07-4205-9137-00f96481941e", "sighting--0b9e262d-47ef-47d8-bf73-b9ba8a233876", "sighting--819a9bec-e0fc-4802-babc-bfc7baa710db", "sighting--1245a46a-2454-46a0-9216-00339e73efff", "sighting--19c9f32c-faad-4d00-90f4-53f430cafd81", "sighting--858e8b45-fa8d-4a8e-b807-52f6dc3aa251", "sighting--a79244d2-ba2c-40f0-82dd-cb4aadcadf27", "sighting--bb8d08dc-ca73-46ed-8a89-1fd8b35c9716", "sighting--f909e6a0-27c1-482d-8bc6-4239e33ee43c", "sighting--a72f7c20-7458-4ee9-b9a8-78a2c6d9467f", "sighting--17b639bb-c408-4565-99c8-81abe9345aea", "sighting--85893729-d77d-47fe-b2b9-77820a21a5b1", "sighting--7ba01a9f-e8f2-4cdb-b6e4-44c020bbee9f", "sighting--be3f9c9b-b48d-4f82-852f-128644bb45ba", "sighting--79622f02-9c08-4336-b185-27e5a67b42fc", "sighting--e982084e-10e2-4da7-9d4b-369f088e9e64", "sighting--233bbe2f-56dc-48be-8eae-b396dc4b4543", "sighting--7c79ba57-e7bd-4d70-8832-a20d621bdc30", "sighting--2c70fe2f-05fa-48bc-8737-b24b3eb63519", "sighting--ee8f9532-1f2f-4761-9c1e-ce80feb02444", "sighting--5b2a7918-f253-40f4-b8d8-0928e35d452e", "sighting--4da3eaf6-be84-46fe-9a91-c98b63e3f441", "sighting--349bdabd-27fa-44fe-80a2-5260a0af583a", "sighting--23b186e3-2faf-4cd5-89c8-3756310c4dd3", "sighting--45d2c107-9da1-4104-8eda-b35e7bcdc667", "sighting--64936005-69e4-4f1d-bcef-4db910132ddb", "sighting--0f219e4d-71be-4fbe-8e5f-71be21c209ef", "sighting--3e59b503-b4eb-4a2a-967a-f6ef16df8590", "sighting--fbf5c0db-fc13-4483-8c69-a3609f631526", "sighting--30ed4e73-47d5-42c3-8f5f-602b68158f6a", "sighting--0f514631-e605-4e6c-8304-5b1cf87e5e67", "sighting--c3a4be43-14f5-4063-8154-8a44aad74247", "sighting--c9d09ee3-32c6-492b-8b59-fa10757f7072", "sighting--116d4646-95b4-4fdb-a3c0-12d02533d13b", "sighting--9604fae9-d0dc-4b9b-81b4-c2cde99c9546", "sighting--b33c85b4-e946-467d-ae93-debf9f2cc685", "sighting--8ee624e0-7500-4573-9916-4fdefda887dc", "sighting--953d6757-568b-48d3-a242-a5f9251ed440", "sighting--16f93697-23a3-420f-a57c-a9bb5d5340bd", "sighting--6742362e-d0e2-4ef3-9d75-ee2dda9b9f4b", "sighting--d46c8976-bb40-4462-88c2-833dfb8fb4d1", "sighting--d2cae907-eefd-49af-812b-90b7f23d6cd7", "sighting--5e55242e-ee49-44b3-95f9-ef48c0400a9d", "sighting--637865a8-bfc1-4c12-9ef6-f2a62c2407a2", "sighting--ffc41933-efa6-460a-8537-41a5018df82a", "sighting--53b81b7a-9487-401d-8bff-10cf3a9eb22e", "sighting--9ff443f0-0feb-4d0a-9d5c-22a31ca59091", "sighting--35f16fd9-2cb4-41d7-81ed-f5069163858a", "sighting--772adc72-485a-4682-a6c9-996b534c8b31", "sighting--1ca5853f-5342-4319-8729-bf501b3ce368", "sighting--90536272-ea8f-4b71-8e79-046a4c43e1cd", "sighting--59624705-20bf-416d-b6c8-5afdc023eb97", "sighting--ee8c61d2-4719-4c82-b2b1-36d59767b192", "sighting--96bbbf6c-c9e9-435a-aa0b-a76fe3ce1ab0", "sighting--6da42a6f-9ee6-4907-900b-b9b2249cb5f3", "sighting--8046a5fc-8b61-433f-8583-149db6006409", "sighting--2301a713-8181-49dd-b937-98701b728985", "sighting--26fcd763-921a-48ed-9837-07e2bfa96e08", "sighting--550ca0f1-4347-49c0-b5fe-caf00a343e2b", "sighting--ae1f8dc7-4213-49b1-96c9-d63594241cbd", "sighting--6fbd1efe-c4e0-4f06-baf2-40d754d726aa", "sighting--aecb4491-180f-43a8-8715-6f592ebc4109", "sighting--a7d4c0f0-de33-417b-a6d6-36da76e19aec", "sighting--c671137d-e27b-4ea4-a609-7156e4474156", "sighting--5ab4a7c8-e592-4c63-9894-97d0b0539d90", "sighting--19cfe834-c49c-4888-aa25-fa9f6a952952", "sighting--cb69a88f-cadc-48d0-b170-dfadd195dfab", "sighting--41b2b6a1-131b-45b1-9724-7f5de6647432", "sighting--1d726799-105b-4554-a230-d32b91b618f4", "sighting--afcef9c8-1f79-4d60-9434-0c8b1b2a8dc5", "sighting--3c0643c0-97ef-442f-bb4c-37b74e97df18", "sighting--7245dbd7-c9c8-477c-ab7c-f7b201b77929", "sighting--4fa23470-ce89-4fb1-b649-aa90eb2252b9", "sighting--5d95e2f5-11cc-4649-b3c3-f1bc1f6fe58c", "sighting--8c4b20c3-f438-4fb0-a86a-15589af1c218", "sighting--a234361b-bd46-422d-830e-01af0a09e3d9", "sighting--d5cc224c-5f9b-4ee4-adc1-715c73b835b0", "sighting--32cf91e4-34fc-454d-9001-0e4aa571fc31", "sighting--7a8762e8-f52e-4f49-af9c-b2f74a2e905c", "sighting--48d9fd9d-0adf-42da-9fe9-75affda9780c", "sighting--e0afa295-dc4d-4c89-b9ef-b75508906c69", "sighting--8d683319-337d-4918-8789-eea1df4c3bb7", "sighting--1a006783-713d-4632-b24b-b9d3d2b72c71", "sighting--f749d965-dbf8-493f-a608-1980bedcf82d", "sighting--75c8c8cd-be3a-4713-b577-85a7f7accd64", "sighting--73cb2f39-0bda-4bfa-bf00-c59dba8b3b72", "sighting--d5c8b5fc-3346-4185-b5e8-330fb86c2063", "sighting--baab2c93-ff9f-485a-9e0f-9bfc99c20bd6", "sighting--02d99c68-dd45-445d-9e41-43c32d912f84", "sighting--13ef9194-56d5-4cbb-94a1-5375b51e92c7", "sighting--1062023c-abf1-4758-9e7a-1fcc55c88687", "sighting--6688a2e5-5502-4e38-9746-1a3ebe701253", "sighting--e6611501-f8df-4dd0-b09d-89205ba3d06c", "sighting--63c9312f-212b-4977-81e4-3c82b08698a8", "sighting--b56a1a7d-3660-4c44-b325-29596e9a8e93", "sighting--4e0cdac1-0ecc-4e6b-a919-dc0b8fe5f974", "sighting--5dbf47ba-2c96-463c-b4ec-803a2b8fedee", "sighting--76f6597a-b40e-48b2-8971-d1283beccefe", "sighting--c7bdd2dd-acfd-4d32-91c5-8103f69d249e", "sighting--733c64f4-d8dd-42f2-8a70-c7671edd0597", "sighting--c25a04bc-8421-4ba3-ac25-9077c9af25d8", "sighting--2425845c-e6bb-4c3b-a66e-2901cd8fea88", "sighting--5a84bafc-1afa-4217-a6ca-d202e7e9d9dd", "sighting--6628e4a8-e4d2-48b5-93ae-7a6b03bbdb37", "sighting--652e6b6e-8b5b-429c-b06f-2f24331dd961", "sighting--c5d0eaf6-5d9a-4976-946b-a1e077947e14", "sighting--98b79b7b-1f5e-4528-9958-1923c2338e43", "sighting--d66661c2-e72a-4e94-aca4-6f23b122bf02", "sighting--b8f481e8-8beb-4acd-9f25-54bc876f901c", "sighting--0f796d57-16a1-4b4d-86b9-ec832ae1eb89", "sighting--76f3dd1a-6481-4bb6-a10a-90fa5c4b6129", "sighting--bacf10e3-7706-4bb7-8ebc-c1bbacd3420a", "sighting--567f63d0-ad4b-4fc9-8c2a-c8ab42d08c37", "sighting--9dbb441d-a43d-4172-a518-00107b4d7328", "sighting--f7b97868-62e4-4680-a43f-cbd332836376", "sighting--89e5f05b-5727-4003-b85b-6ecdca5c7405", "sighting--ef62e2a8-a495-4efb-a54e-1608ed31d48c", "sighting--05ab4312-def9-4171-a01d-bb667d445105", "sighting--27addafa-7e63-4326-b582-559cb3af9d6a", "sighting--da686708-f5d6-4a39-831f-936c8ced96d4", "sighting--7b77b8d3-767f-491a-bd4b-de7bae5bfb7d", "sighting--d6220be1-dbe7-4f23-8d65-f2aeffc12c18", "sighting--76301146-b4b9-4549-bea9-cd225aa281d9", "sighting--3040b480-9cf2-469d-8dad-8e68d6be2e8a", "sighting--756d3f93-14eb-47e6-9652-ebf1a2ec64a5", "sighting--a4d8c960-98b6-47af-8104-852ea55a2644", "sighting--899c159e-2131-42d6-b3d1-8548dc64b00d", "sighting--0d2d0100-05d6-4a31-9e6f-1e1fc0238183", "sighting--c13780e9-c3e9-4239-9b62-fc3e33c28c10", "sighting--eae0e03a-5509-4494-8393-76accbc3c68f", "sighting--34825663-bcf3-4ffc-8f4a-fed08fce4c78", "sighting--30464667-6752-4b3b-b861-d9cc338ecbcd", "sighting--e5591b30-6ad3-44ac-806a-d7604d5b4012", "sighting--e3e6b70f-ed4e-4dfe-978f-d48618a9d6f3", "sighting--e227f572-5c04-4f91-97c1-189215173d22", "sighting--857a88cd-07a6-4147-8925-fe76706d4c54", "sighting--662846ca-84a5-431b-8f6c-2ec729605a0a", "sighting--fc691c80-f702-4ac2-978f-df1cb7079fa9", "sighting--f4b0b7bd-d70e-44e5-bbbf-71377ad3d2ce", "sighting--13dc222e-1eeb-4de5-ae7d-ca072ce3b88d", "sighting--b625b282-30f1-4a29-837a-f85cfb98cac2", "sighting--b64d43bb-a8af-44aa-861e-6e8d3814c87b", "sighting--fb489128-2fdd-4eca-aaa8-ed5063e8aebb", "sighting--641c0393-35c4-437b-8b0d-e6bf45d0b850", "sighting--fa49b3c2-9f60-4aec-8209-76ff8331860b", "sighting--4f794250-f01a-4979-a655-00ccae5c59ce", "sighting--8b38055d-c090-4c30-947a-8dda44e07592", "sighting--2d1b68f8-0a3b-4490-bc41-8e8335cc8f95", "sighting--b7515ccc-a899-47f2-95d0-3306c5743e82", "sighting--8e767cb3-eb6f-4462-882a-6ce90c5cb169", "sighting--d8434d60-9c7d-4e4a-99df-6b97aba01ce1", "sighting--9477c6a0-c9c0-47fe-8b68-477ec60c806e", "sighting--8838db53-ea7c-4c1b-b105-ce0d8ceeece1", "sighting--452f040a-3564-457e-a624-359038144a90", "sighting--55a06081-aa4e-4b9c-b676-d9822420cc9a", "sighting--ea39e689-ae98-46be-b06b-5bccc8d6742e", "sighting--a97def25-b0fb-4c25-81d8-137cb68b7e08", "sighting--353c2ca5-dc3f-436d-8eb5-364a56b6660d", "sighting--24207678-7e10-4c38-9153-26fe99639a90", "sighting--4fc15dd2-d334-4477-a65c-c6c3341d2e41", "sighting--5ec53d06-3c7c-4e79-bf32-eb865e8c0170", "sighting--6993f67f-5c35-42a7-97ba-390f99e3b50e", "sighting--1ba88195-0a2b-412b-87e6-606953559b7f", "sighting--a959569a-7698-4ce0-8e0e-0b636f522f75", "sighting--29ff636b-832f-4048-b1cc-efb8c3448ace", "sighting--b4191da6-2cd3-4a03-84c3-2bef2b64da1e", "sighting--729a7a56-61d6-457b-b8a4-f16aea43b87e", "sighting--0340a30f-91e8-4c15-950d-649892d8b5f1", "sighting--898458fc-6e64-4b51-b177-22027e576672", "sighting--d5fd2a0b-cd78-412e-bfe9-f200a29deae7", "sighting--7130a2e2-5006-4c65-8104-d6f980908449", "sighting--41a1e19d-0a60-4453-9ed1-42c9d0b062f2", "sighting--ddf58b05-7dfa-4067-9a18-043c5b7ed82d", "sighting--253251b8-0670-4b84-89d1-9fa9402972ac", "sighting--58d11c26-0a73-41e8-816e-6e1f781ea1ee", "sighting--2189e19b-0a47-4c7e-aa9c-e56ace0e5c12", "sighting--8f4d7738-e150-4509-b430-d47b65c466c8", "sighting--8fe20f60-b9fc-45f5-9e36-5522a2f98250", "sighting--86377122-8f20-4aab-8e2d-00775d707457", "sighting--b0d746ec-17e7-45c7-85f4-0a9c6430aa57", "sighting--29131dfb-d8c1-41e0-b13c-3a0a200d8fda", "sighting--5cb1c7ee-1920-44b2-ad81-2f64977e5b6d", "sighting--603e05b3-02c4-4fee-9b07-457b52014128", "sighting--6da87bf3-df59-4a3e-a0a1-99aa68eb7117", "sighting--a5731130-a203-4257-8f29-7a83f6c7a6b0", "sighting--3f22599a-2bcc-4b3c-8764-213114dab447", "sighting--72bfbd77-daf0-43ed-8c3b-1f29cbfeecfe", "sighting--8f9cebf3-e8bd-4c96-a132-f6696406ffc7", "sighting--bfb083bc-6b3c-4997-b57d-4eb650e19c6b", "sighting--5a21d1a9-b41c-45e9-9ebd-1185fd71b39d", "sighting--15f88939-a748-4cfc-ab24-cb1dd3e2618b", "sighting--497c65cf-4732-4939-9835-59a1604d6b2d", "sighting--387efe9e-c87d-41cc-9d98-b192e3d3c860", "sighting--0eb36e32-fbb1-415a-9778-503837a971b2", "sighting--de99ea78-3379-41d1-a94f-5acdf0865385", "sighting--c70b2217-fdb5-4349-8d44-a3353c738b26", "sighting--7cfb3867-3843-4629-8450-5f348786a01e", "sighting--51cb2a4e-f273-4c8c-806e-881d1490de3f", "sighting--cc3ad043-2218-481e-8a78-d9987e9e4319", "sighting--59c8e0a2-2ac2-4ebc-8ee2-bea9a7bec5ff", "sighting--164a2001-059f-49b8-bff1-78cf6f77c082", "sighting--19815041-9909-48f5-9ac5-629fbf06b194", "sighting--f9df336e-70d4-47c7-ac30-c4c304322c34", "sighting--e3f6d31b-7edc-434d-9961-c95ce9eb3663", "sighting--637b1f3f-03c7-4349-8f79-181004b3ab90", "sighting--042c0d13-c08b-40f9-a912-24f6db1cf390", "sighting--ca30f0af-192e-4601-9b0d-bfb884366018", "sighting--fc046f3d-7819-4c08-9049-86643a75871c", "sighting--b73a3eb8-4c62-40fd-b524-4b411fea5b4c", "sighting--8661fd30-389b-4645-a532-e020b22be4e0", "sighting--05b70063-fced-4810-8604-5e90cd3a6f10", "sighting--f312af67-5cdf-4b11-8ee4-ff21eea34d2d", "sighting--7e9062cf-c422-425c-8971-882ec2483c1f", "sighting--1aeae2b1-c260-4b41-a791-ffc4d0042e30", "sighting--e6ff8de6-4727-4e6d-9b37-18e7917ddbd5", "sighting--031bfb45-ccdd-4739-b013-7e151eb81262", "sighting--79295c3d-b858-4a57-87ff-f06b03a6aae6", "sighting--86f300f3-80c6-4681-8df2-7cdb8b9aa64b", "sighting--fb14f54f-5362-412c-96cc-32eb5b99df0f", "sighting--a7f0e0a1-b717-4f5a-accf-75151d6a143a", "sighting--46bfcf31-69f0-428f-8c21-6ebc965596fc", "sighting--a823107c-0f8a-4cbe-9be9-a5b89d9b77cc", "sighting--82ed2cb4-94ea-457f-ae14-097b43e2d1c7", "sighting--da39d00d-f631-4b8f-92e9-2284ef9a4a7b", "sighting--f49b8a4b-2923-454f-8474-a299d36a3002", "sighting--6d6ec777-ae6f-4913-aac8-7cd5d8db9d1f", "sighting--ce576fc5-db97-4305-9448-6f23b2883d63", "sighting--e010760a-f28a-48e8-87af-12bed2b4759b", "sighting--a2802422-2e65-4c78-8008-fd4888839f88", "sighting--c082a74d-fcb2-42c5-b124-9044c6300152", "sighting--41e6feb2-493d-4529-9292-087a9f2b767f", "sighting--01e1f0c9-c7bc-4fd6-a7da-e485b466a64a", "sighting--f029ba2a-d395-45ec-949c-57d69d6a2cc3", "sighting--c93d5e88-7cd1-4672-bdf4-e0c64b6403d1", "sighting--cb079689-bbcd-4581-aa19-40e6acff2962", "sighting--f7e851c8-d5c9-40c6-8b81-0b25c74bd211", "sighting--b591d1b0-1dfd-433a-9843-50e72da9d78a", "sighting--7f2d2ae1-018d-46a7-9c7c-f960f384486c", "sighting--78375584-4a81-43d5-a403-6691921ccaaa", "sighting--d3846960-aada-4721-a151-cfdd49f0fc4c", "sighting--b6962e85-41ad-4756-b0ad-7e5992e6e47c", "sighting--cd39bcd4-5bec-425f-9d13-2b44ea575d3c", "sighting--6c8f373b-ac4f-43b6-bfb4-41bb74c121d7", "sighting--b27c5474-6a77-446f-9365-fa3d3c59f613", "sighting--66373076-14a3-46cb-aa5b-b777a318e995", "sighting--65ae7ebd-6768-42ff-a439-c42784d0f016", "sighting--73d3acd2-708c-4e6f-857f-5abc39188ccd", "sighting--aa1fbffa-7ca0-471e-a36b-b2888555af95", "sighting--3c9a08bd-52ce-4228-b469-239d9ba2eccd", "sighting--7d2fbc2b-e76a-4f8d-a48b-3482a739fa5a", "sighting--6a4542e6-68e0-4600-9f80-c8c256e4fbc4", "sighting--a19f7819-fa62-49ca-b133-ce5ef10c328f", "sighting--c08785be-398b-4f46-a843-08a2ec31d010", "sighting--7c916e71-a6f9-4aad-aa93-c06d8d3337aa", "sighting--cb84b406-2285-4159-9674-2b4be549ae38", "sighting--d654bf98-39b5-4e84-a382-34f86cd91d68", "sighting--629436d5-2586-4a17-82f9-db2d0f6a5fbf", "sighting--f0f53ec6-0bac-4b21-b797-546c377ea871", "sighting--9be3f66a-d99d-45a8-bedc-60086bee33be", "sighting--54600a05-cd2b-41f5-9ad8-47128636672c", "sighting--4cafb1ce-b6e2-4248-8318-2ff524a721f8", "sighting--27341b4a-4a65-49ac-a154-d2e718899931", "sighting--9d64ae91-008a-4fe9-9597-c91e909e5864", "sighting--273fc4d9-ea04-4fdd-b539-a6c5356af754", "sighting--cda35135-4141-437f-a4ad-097a57b262d0", "sighting--fa536f92-c850-4524-8d79-a5ba5c2c1c62", "sighting--f9df4770-663f-4ef9-b3a2-884783aea419", "sighting--422cf0af-731f-4ce6-9c8b-c387d0ff91b5", "sighting--fd25936d-9c33-4993-b99a-ffb0025cb4f4", "sighting--77b93439-1386-4c85-b1ab-a516a8a8fbe3", "sighting--b0f54619-6aeb-449f-9fd7-1fb9870f7d98", "sighting--5a0a896d-fc64-4749-bc8c-a1425741d1a2", "sighting--b47a9b8c-80df-4440-a734-925aee4e24ea", "sighting--6bf5a33f-fa3d-41e2-9ad2-070c418621e0", "sighting--d085e5fb-4cf4-4ed2-9ba9-645d71d056ac", "sighting--6470ad22-c04d-480a-9b99-b621824d445f", "sighting--71e5c285-0e36-4009-b216-46293d8cd612", "sighting--357a6d77-3db6-435e-a8dd-fe95447f90f6", "sighting--6b7819e5-b3f1-4207-818f-1af393ca35d1", "sighting--a9e1dfcd-09a4-4bee-89a2-7ce0ca54abd5", "sighting--27cb6f75-7663-4bf2-a97d-ee67299b1d93", "sighting--ad0776c6-fc47-4a58-8af5-1fdc875fd118", "sighting--a45a760b-2871-47b6-97c0-78eed23e7e21", "sighting--0acce8ea-7bb5-42cb-86e8-ee87ae07943d", "sighting--326ecef9-2674-43a1-866f-ba9113ff5143", "sighting--2e15ed9c-e608-4b3a-ad12-ccadac5790f6", "sighting--bef3aad2-5296-4f5f-81bc-64a3af9f2eba", "sighting--f3856fd8-e194-4d72-9fad-994b97fa23fa", "sighting--6e5967d5-add5-4a63-ae4d-1da63ae5266a", "sighting--b8ee1a39-5a8b-4339-bfff-67427794fa77", "sighting--5f0b454d-a43b-49c2-8b9e-c486f48a67df", "sighting--115f292c-74d0-4c38-87cc-5c2214ec95ac", "sighting--d10552e4-e849-4bca-a33e-ff05e30558a6", "sighting--ecbaa572-c772-456c-a0cb-751a3abfb9c4", "sighting--f97db9a7-dca7-4ee0-af25-68fa9048a0d9", "sighting--b33bfefe-aa26-4e5b-a3bf-fc21c6a49548", "sighting--cba7fb73-59b8-4cae-a245-13bbd33db44b", "sighting--c8565145-647b-4507-b57b-acffed19990c", "sighting--9f5deb20-4797-443a-a1dc-0d4502be0c64", "sighting--22fa21c5-348e-4907-bdee-c367b0eb4817", "sighting--f29af1d5-59b7-4b0a-8821-9267435758a7", "sighting--99caaf0a-6bc8-4981-9bcd-d236725eeac2", "sighting--a5fde4a5-6cfc-4837-9659-a52c51a879b5", "sighting--a3fdfdc0-9e96-48eb-a5d7-fc1a4e119e34", "sighting--bc35b7fc-4dc1-41b3-ba83-3b8cc0b3b17d", "sighting--630a9ec5-73a3-47e5-a783-48ba2c1872a9", "sighting--a46fc337-10aa-4a96-9ff1-07ed8a326903", "sighting--826b69e0-355f-4c1c-8432-3513416f8676", "sighting--e61571dd-be22-421f-a9a7-bafe53db573b", "sighting--8e87183e-3a35-4b19-84e9-31e234e3a073", "sighting--6cd6c25f-84b9-4222-b57d-49ff7da02777", "sighting--73ff4bd3-66ab-496b-ae5d-0d5b01231d21", "sighting--23f14f45-11b1-47ba-afc3-7ca434ef5e07", "sighting--bf59711d-071b-400b-a22b-fb989adfe44f", "sighting--4bf06f3c-1c0f-48e5-8fa6-282d62a09794", "sighting--5de8ddf1-daf2-4c54-b440-3bdd0747cdb1", "sighting--2db9cbc4-b391-4343-9296-991abf9aaaef", "sighting--72045246-40fa-4340-a604-16c4070d48bc", "sighting--9784e0f1-4121-4412-88c5-a5f36f4872b5", "sighting--83a71e34-a5f5-47e3-b06f-a7f9011be244", "sighting--a433b130-bdd0-4ac3-b37c-4ebb62c6b786", "sighting--37e80a08-b56d-4bb6-a6be-a161276024a6", "sighting--0f8038d9-5011-4203-85ff-79e8b975df64", "sighting--84fc0899-e054-4432-a1e0-4cc79ba3cf3f", "sighting--d7097b85-ffc0-4771-85e7-703db5548f02", "sighting--c5d32c68-70db-4f28-a4a2-0c5cd68f6cd3", "sighting--6c9e7c8b-de34-4670-b0ec-0ade9d403f36", "sighting--23984a3f-3b93-4b4b-bfc6-a98fb899dfe1", "sighting--13b7a46e-9834-4dee-ace2-44b01528a24f", "sighting--013d2ba9-3dca-4631-9816-f6a038dedc15", "sighting--4fa09c2c-5f33-40b1-aeff-d8f2ff1e73f6", "sighting--d55a22e7-953c-46e5-9b4d-093e3b6d1b71", "sighting--3c7f51cb-26eb-4993-b0f8-64099a651a06", "sighting--da011977-3163-4a97-b835-afa95bca6cd1", "sighting--1badd3c7-4655-46b7-b228-92eb7f555721", "sighting--6268a39d-b794-4b9e-abf7-b31c23a20012", "sighting--53a0b33d-4d4a-46a0-81e8-67fe961c7098", "sighting--8a4a8ed6-89e6-4e42-a45d-8a15517a3828", "sighting--7019784d-26e7-43f6-bf9c-9a6bda0eec65", "sighting--48d79350-227a-448c-b25a-eb32f19cd620", "sighting--8bc5f67d-6d88-4068-a1cb-f0e6907660b6", "sighting--23853de2-c0fd-42a9-88db-d86afd650b31", "sighting--07f74862-1ce3-4884-8bb6-5ad1c9906631", "sighting--e2d487f1-9b03-4014-a96b-4452edfa7759", "sighting--785a5306-a5e5-4bd2-b6f1-5925af0d247b", "sighting--e593e0f1-e010-439d-919f-f962a7ebedf7", "sighting--fe4f514e-feb7-471a-86e0-f2f645f6aa9b", "sighting--1ed5bea3-743a-418e-b826-fa91a085bfa0", "sighting--aa29119f-8ae7-439f-aafd-e45d1c406b4a", "sighting--5b603dcb-8a4b-4ec7-a821-da722549f052", "sighting--6fa0dfe7-b6ef-44ee-a056-b2fbef2acd56", "sighting--71d00230-412c-4597-a798-988b8928cd06", "sighting--757d8a32-deea-4bfc-9e97-5e8aa2bb9571", "sighting--702186b1-d847-4df9-857f-560b62563917", "sighting--98254efc-17c2-4a58-a7b4-f18aceee6b56", "sighting--907e608d-e3c4-4f46-ba03-adea43f67bce", "sighting--dccef241-2b58-49c8-ae99-6a7661e4ecd8", "sighting--678f00b0-ff90-4503-a46e-edeb20189c9d", "sighting--3816eca3-6ae4-42ec-8628-cc2e8da77525", "sighting--ae250dca-255d-4d4e-b324-078f1fb9863b", "sighting--391203f4-71f0-4e3c-af5d-b7b40da41b17", "sighting--8189e213-e2f3-4adf-b55c-db6a4e4953a3", "sighting--9da2691d-5369-4fc5-b80c-f29394cdb891", "sighting--72d79cfb-8bbb-4a27-95b4-31a95325f701", "sighting--71fe204d-c216-4b45-8bd4-21f10ace93ac", "sighting--e0c62e70-f545-4636-8960-9ffac0174330", "sighting--d2ba661f-db04-42ae-a01b-78a93045ad81", "sighting--079665e5-c6a2-4e25-8c3d-ecd66b7f3de8", "sighting--50a70b46-e4c6-4f3d-8143-fb3f5493a6ec", "sighting--96124754-a1b8-4b50-bbff-44601f16cbef", "sighting--f01e9dad-bc2b-4f61-af92-9596bb8cc711", "sighting--b9428d87-ac6b-4cbc-98a0-3ef077510930", "sighting--4dd5ff0e-5821-4464-bea6-b5944f4a8960", "sighting--56f67fee-8c68-4d89-bbdf-3bf7c44ef331", "sighting--ca98d646-7c82-4eab-92ff-90114cdd29f3", "sighting--cef3e33f-927b-4673-b10f-23ccfcd17910", "sighting--d6afaa7c-88d6-4d6e-b1ea-e3fdee88c973", "sighting--51e77337-348d-49eb-9012-3b945f19d714", "sighting--372c1b3d-e157-4920-afec-a0dc5134ff63", "sighting--a755c3a5-3ce6-4204-8006-f84547c76e6e", "sighting--4fdc12a9-0bbe-4cb8-a668-a25ce3f2404f", "sighting--53ae9f92-5696-4cf5-aa5f-f675a686c867", "sighting--42cf216b-655b-4736-90e5-478f53e48a4b", "sighting--7cc68129-99da-426e-bec6-4e9bf2fce954", "sighting--f93b4492-c8a6-4cab-b956-74f0d5ca82c6", "sighting--7a823c27-e8d5-4052-b458-bb75fa13a638", "sighting--dd218979-6907-489a-915d-582156c8a16f", "sighting--d66ce0aa-7037-4733-bbb7-2b2db58ac2ab", "sighting--0d90ba65-2d28-4337-8f3f-a84e1dca3966", "sighting--4267634e-48a7-42e2-9aad-75693bc14e81", "sighting--1ecbf706-89f3-46e7-9d1a-8fb5ed5ce2f1", "sighting--d90325eb-7590-4448-b72b-004255262439", "sighting--6e85417d-811e-40f4-983a-4ec6b64208ab", "sighting--42249e87-86dc-4764-bc5c-4841f2758d74", "sighting--78a91b62-ac8f-4b78-808f-b3f63ac3698e", "sighting--f6f3dfb7-141f-40e8-8a3a-81ee31f9a5d6", "sighting--087ee4d2-7c96-4896-a1c6-73e4e831a6ab", "sighting--762f6ce9-07b2-4b1c-bc6a-b00afbaac35b", "sighting--bce66158-628c-4380-9168-319b5e536d25", "sighting--564a093a-49a4-412d-9076-1e0836c7f58a", "sighting--ee2b4b74-5c85-4b19-93f0-5ae2fdc0261f", "sighting--0619c2a6-6c89-4f5c-8205-f5b518bc1e94", "sighting--c7ff39b8-924e-4063-a1dd-0970b90d91d8", "sighting--c3ee9cf8-cc96-4efe-afc4-9fb4c1f6ccc5", "sighting--da0526a1-efec-4676-9c98-bd4048f5a33f", "sighting--7a1d34cf-5dfc-4ba9-9195-6744211e8640", "sighting--30dd8f4e-51a4-4433-8a6a-6fbfee4df9fb", "sighting--b2674518-fa79-4b16-a9db-b018f5c3657c", "sighting--5deaea6c-3e68-4fa2-b5b6-0bfc25eb71cb", "sighting--8e91e840-46b9-4b0e-a62a-08153e811bf2", "sighting--5d29ba07-1bdc-4fec-976d-cb5b938d2924", "sighting--406cba4d-5843-458a-a854-e660b08f8e94", "sighting--863ac5dc-b675-4f2d-95e9-eca2f1970b4c", "sighting--e5484cf4-9372-4f8d-80b6-9b2db13ee1ad", "sighting--82871fdb-5a21-40bd-9a9e-e995572eca8f", "sighting--a02db61c-4485-4ada-877f-84e706d642e8", "sighting--6bc80e03-cb95-4a02-a54c-96d964404454", "sighting--95dbb46a-0f13-4097-992b-c670d0788430", "sighting--3035d43f-0ce4-47ba-99e3-7d5b52995d10", "sighting--be5afb18-4a25-4678-8622-dbfcb695fec6", "sighting--8fd20209-af47-4d9e-99f5-97858b71c177", "sighting--825a177e-9ba3-479b-82f1-a1cfe653a354", "sighting--d6bdba42-57ed-47d1-a4b8-3cf34644b690", "sighting--0b229d2a-be0a-4bad-b607-15dcad6648b7", "sighting--172e1b49-4c5e-4271-977c-b5773ab557b3", "sighting--79106b93-5793-4f53-bd8b-3929a78c6977", "sighting--6b08de08-a781-4ddd-a7af-e83ac4f4aa4b", "sighting--a671c3c2-7764-4bb0-b8b9-6588a47b3f77", "sighting--2e5147b8-f206-4e6b-bcdd-997490fb46b1", "sighting--1daf5d37-9796-4d28-9be4-7d688983a6b0", "sighting--acb23956-304d-4a50-93da-c49815bf431f", "sighting--7367dbb8-f2d3-4890-8733-7173ad885918", "sighting--5d474d07-6180-495d-9ce7-3fd9d6e630fb", "sighting--cc09b386-eda2-4ce0-baac-cc42ad9691d8", "sighting--7316fcb7-843f-4c35-b337-d22ac634c67f", "sighting--0d7df1ec-638f-4189-9e6d-5d89ac27b6b2", "sighting--ebb58ea9-adfb-4422-980c-6ee2a01aa049", "sighting--c8da8942-feaa-493b-87ec-3ef982511e96", "sighting--f0041f37-33b6-47e3-8af3-f53ea7d10307", "sighting--4fe9460a-49b5-49c7-a5b6-06caf7b3d9fe", "sighting--184821ed-7b20-421e-91d3-dfe20caf935f", "sighting--0829bf6b-fcc6-4687-b40f-85b8e47c9c05", "sighting--76c345fc-0acb-4f91-96e1-f5dd1be8c832", "sighting--dbb5c988-5cb2-4f1c-99e0-792a29321088", "sighting--f9ff069e-6a11-44a5-830d-1ef96929a4cb", "sighting--f4d85762-68df-4e70-9367-983f036a5fa5", "sighting--2141e58c-4531-4258-9cd9-3d5ffcec0219", "sighting--5c20156c-292c-40aa-80e1-69ed640b17f7", "sighting--059b30f1-10d4-4fc7-90ef-55ffc94caa2a", "sighting--8472f60f-cf77-4c05-b474-1f55e45bd82e", "sighting--f3287fc7-0b2a-415e-9252-3b9874ba6f87", "sighting--a4a06778-4167-4efe-b8ac-815d7d70f779", "sighting--487d17d6-f731-49e1-8d22-235d35d1e29f", "sighting--0ad7fad3-2353-4ad1-8377-baadecb62c28", "sighting--8622764e-3c40-4323-be30-0e24b01f4ea2", "sighting--defc6734-c231-40d7-8f3c-6ae9d58c5348", "sighting--d25fd1f3-3442-472b-9cbc-d32344ba2107", "sighting--601b2d86-6fa0-4baa-bba5-e939ec1f9b29", "sighting--57b0663c-3e6b-4735-aa54-a30b39a3839b", "sighting--8be2b630-87e5-478b-9ea1-90b67c89ba4b", "sighting--f6e2b9d3-cbae-4ae9-acc8-8d8623c94d74", "sighting--253120af-e30a-479a-b800-096a3b62a6eb", "sighting--d98d2c2a-a208-4a0e-be32-75423c894853", "sighting--d2b7185c-d688-4b4d-a1e0-46536f2f6a74", "sighting--e1eceb9b-8a45-4cc8-91fc-eeb0a4999c57", "sighting--613ff87f-4469-4e58-a936-32e94f825993", "sighting--c2b07583-344f-444e-9d8e-ed741fd7966b", "sighting--17adfcfd-f374-4ce0-a8b2-20496d03a3b0", "sighting--70d60b79-686f-4b00-868d-b5997adc2a31", "sighting--0f91cb8b-d856-4a59-99b4-4fccd29d5783", "sighting--c4b6a6a5-ee1b-4e37-aab7-eca70f90fd0d", "sighting--969cb198-a3bf-48cf-b756-84281b911cdf", "sighting--ea6bb42e-17dc-42ba-aaeb-f7357abffda3", "sighting--69b75428-e61a-47e1-9ac0-b94c2299ce88", "sighting--f5e66791-15aa-4db9-89e9-aab8969632b9", "sighting--b41f1147-f6cd-47e3-89a3-e2b0d6de11a8", "sighting--fc1d59dd-c7a5-4fef-9541-088828568174", "sighting--86498678-6e00-4d78-a318-5941c01f33f4", "sighting--2ea21b2b-9608-4c87-b6f6-609f915a4520", "sighting--6f2fad7e-cdcc-424c-a8b1-202bc92971bd", "sighting--272e828b-0ad1-4bcb-af55-8cbf23698251", "sighting--67a16c39-e742-4237-878c-27154503fdfa", "sighting--6f284779-bcb4-40cb-92b2-28aef64b9f6b", "sighting--316b1f23-43c3-4878-9966-2c47f0a3a644", "sighting--5d94c157-e2ff-4f7b-aa09-58e1934bf57f", "sighting--7cdb5045-9f92-4ba6-b6aa-be33a7c97ba7", "sighting--73242b1c-7e95-42e8-97a6-0d68370e9b74", "sighting--26337141-4a90-4348-9649-2c23c26058ea", "sighting--2a2a015b-e3a1-44b7-953e-f506904cff76", "sighting--a6081228-aa04-4474-a2be-97a67890e126", "sighting--69c84a51-46f9-4f3e-bdce-64b0eb8183c8", "sighting--c556d904-a35f-4cc7-be49-5b2c10a242f3", "sighting--9d23e47f-7569-4aa8-b226-de7529704ca7", "sighting--d08a5ecf-6bc7-4ea3-ba4f-bc84dc66cf8b", "sighting--024a19d1-89d4-4d79-bd3b-18977ace00a9", "sighting--1683ec70-dd7a-4407-9f88-d1688331b385", "sighting--4a644633-7638-49bf-8173-a78319ee82fa", "sighting--88e2dd5d-2c42-452a-9cc9-8a7f62c73b84", "sighting--82c6021f-2c29-4df0-89e0-74bc4627ce41", "sighting--960373ca-883b-4cb6-a268-8e2711481e46", "sighting--f4e46e21-cd97-40da-b77a-509765983e19", "sighting--cffe6ccd-443f-4dd8-95d2-96e65d6dc02c", "sighting--a8e76327-434b-466d-a690-49a8ba0a254f", "sighting--c2a7976e-5d5f-4eb4-8d6e-554469169e6b", "sighting--24c4659d-c05f-4870-934e-c53263a8f124", "sighting--1546aaa8-de17-4453-8c92-2f3af79fe9ff", "sighting--dd662640-cbe2-4bae-9771-8fd81b120255", "sighting--3ae5bf87-5b28-4572-baa7-ce760d84e8f8", "sighting--90f0c075-8de4-4113-a8ae-61adb0647543", "sighting--6c059b18-2030-4733-85ac-99b958aa7f16", "sighting--3606b19d-f4f6-4733-a449-53a619957ce2", "sighting--1e435d57-aec7-494e-884a-0945757617fb", "sighting--3d87539d-5af9-4278-9267-9a9a63ac99b3", "sighting--2065e972-60e8-48df-ae88-d063de7d00be", "sighting--0b0f48e4-5dbe-4318-80f0-a23f2956b969", "sighting--4f545927-61c7-445e-a284-8f29738c209f", "sighting--ec7d55fa-f453-41a4-b3e6-8ab9801f52af", "sighting--fa29a29d-d310-4449-9800-82151a3575a5", "sighting--518a2bf9-4acf-4127-b2ef-51348763380e", "sighting--89606818-9ec3-456c-ba2b-5540f061c600", "sighting--2efffbd1-a299-4dd0-8d19-aa9eed092cc8", "sighting--409cd353-67f0-41f7-ac56-58163c35afcb", "sighting--0fa3cc93-cbd7-49e8-98a7-6a66c7e94f31", "sighting--92dacce3-3ece-45de-9a3f-7ee78fb55b5b", "sighting--ba451f5f-4e40-4ab5-ae39-12557374e740", "sighting--24484d39-23a3-49cd-8f16-a80e2dcfcb00", "sighting--469c1d9f-7a1e-46c5-89bf-464ef71be0ca", "sighting--6a275a5c-0788-4335-8741-d73febd7412d", "sighting--3ced73d6-e710-4ab4-b5c9-2ab8eeecd9f3", "sighting--72c259b2-ec0b-4c7c-904a-74bfc3acb827", "sighting--dc402df8-48e8-487c-bbb5-5fcdc7d15a41", "sighting--98e7b7c5-0869-49c5-8637-8a8c21c21d02", "sighting--ab728e3b-c0ae-49af-bec6-fc601f967d78", "sighting--f6048dda-72d7-468a-8968-848604f74beb", "sighting--778656f1-efa7-465d-9726-1bc17ef5c5d9", "sighting--e950562e-a22e-45cf-80c4-b6a85c32ad84", "sighting--92e05f92-e43c-469d-8fe6-f687fd7c77f4", "sighting--94619513-5c87-451b-9572-452408dc6102", "sighting--a13a762a-2857-4b38-9a28-472d0c77a711", "sighting--5177199f-edbc-4d26-af0e-076be2d51dcf", "sighting--c96e3228-7574-4eb4-9bea-d2fb3f40510b", "sighting--531c6244-314d-4cd5-9f03-cca6b11fedc3", "sighting--275cf089-5070-435f-87f9-d24b00d3e73d", "sighting--0c59e198-4ffb-4cfb-88d9-0b02726e4912", "sighting--390c63fa-d3fb-4ddd-8836-187773f89b46", "sighting--bf249960-288c-4d35-9cf4-e1eff0ff8b87", "sighting--ca9961b3-5e21-41b3-842a-378ade7daf01", "sighting--b583c6cf-f02e-4247-aae8-c960f70aeed9", "sighting--f0ee45d8-cf4b-4cd7-b54a-612dfe417824", "sighting--86a7fafc-f397-4545-9824-0c007fbe293d", "sighting--b7e8b5f3-e00d-427e-a34a-409252bd5ada", "sighting--6d6c8cf2-528f-4861-84c4-fac501d78ae2", "sighting--d4729f3b-c8c7-46ee-b368-967d44ae6b2f", "sighting--2662de2f-3e26-4a5d-b118-1a72f031c2d6", "sighting--ff52560c-bc9c-434a-9537-56e118394495", "sighting--019cb78c-c372-477f-be20-4dbd154fa1f5", "sighting--65528ca8-2ff5-43d4-b198-e7df6eca35bd", "sighting--e0ad9239-c188-41b7-a9b8-ac7978040396", "sighting--878d5f12-f64c-4945-a36c-5be0c332bf05", "sighting--8e65a0c0-96d5-4ece-ad79-9b487c429f52", "sighting--6cff81a2-ff38-4294-8342-c251337cd6dd", "sighting--6280954d-4862-49ec-ac69-c5e2da2e4eec", "sighting--f5de3f4b-1737-4dfc-8068-538c4b9ce1d3", "sighting--62916fba-eb3a-4978-9881-a3980318d6c9", "sighting--b689119b-0b5a-44d6-ab9b-704a00708a46", "sighting--5602f406-1fc8-425b-bed3-f9e15127cc4c", "sighting--c78a1f97-9dbc-4087-be89-0ae50c398613", "sighting--cea3b2ac-7c68-4686-9b86-31df780bd32a", "sighting--5dacc257-4248-4f54-8701-09195f8c97c3", "sighting--bdbf5de0-afc3-4c1b-bb53-1327735c9577", "sighting--5722a9bf-339f-4ac8-a213-05ec1a62e51d", "sighting--2bc77866-eede-4ec3-965d-32d424cb4069", "sighting--e8d314c4-ec4e-40b2-84d2-ed04a333b64f", "sighting--124a58d1-516f-4757-8950-94f35d22cf50", "sighting--17dbf10c-5386-43be-bd1a-b96d53b3c4f1", "sighting--27811176-247b-4563-8936-7820bb4c0dc8", "sighting--4289203f-3968-4f11-b258-970cbe331125", "sighting--8fb90ce9-834a-403f-a125-62b7e96469b4", "sighting--f3ba8be3-6ac6-472f-b707-47fb6c0717e5", "sighting--34cc021f-c2a2-4ada-b5a2-02c46d041025", "sighting--0e220129-54a6-450e-950a-31aae52bde62", "sighting--e9bd23bf-ff7c-4fcc-8f76-274fa189517f", "sighting--16fd44e8-a6f0-4782-ad3a-d49a75c7ede3", "sighting--ced4b276-74a0-4d34-9eee-c1efc6040b22", "sighting--21387d60-23b1-464e-adf3-6c9843148ef1", "sighting--20974ad4-efbf-4094-be67-2936c0bdf5a5", "sighting--fc7a333c-86d3-4a69-9afa-8ba97334e5fa", "sighting--49903f72-82e4-4d15-b8e7-fb8f5f2a4275", "sighting--553680b1-7235-4989-b5a6-b464d1577d16", "sighting--68839a23-8fc3-4306-a309-2c13594c68a9", "sighting--e50449e6-c59d-43e7-b8cc-054f0062c914", "sighting--a2df221e-9698-4cb3-871e-10feddc2c1fd", "sighting--0bb7363b-ae7e-4a82-930b-220c67830d3a", "sighting--13f94838-f1b2-4205-978f-5b9e94429f34", "sighting--9a472848-d7ea-4755-b4cb-dc091af0094f", "sighting--f211b931-13c8-4465-95ae-698be2209528", "sighting--c9012f99-3f4e-48b9-a2ea-7355ed59b51d", "sighting--7ff2bbd5-b50c-47f5-8b0a-bb69eab17830", "sighting--5335eea7-0b35-404d-b73f-51d8930bf80b", "sighting--34565a48-5a10-46a1-a390-755dda4edf6e", "sighting--8fe3a1bb-d77d-449d-bad7-193bfe3cd3c4", "sighting--152b398c-a24f-476b-8de0-aa20069dbf37", "sighting--fae2ea4f-0b8b-4581-89c2-0351c2a2e91f", "sighting--2cda446b-8538-48ee-a46c-2512d53fe7b3", "sighting--97217079-f8ef-41cb-b7e5-df4bbfc1b364", "sighting--9ac8bde1-a697-4d8b-aa00-b55750279291", "sighting--bc6df988-6aad-43a8-87e4-047deafc1023", "sighting--ec669a25-094b-46af-b2ec-572fb5f8d30b", "sighting--64aba100-9f54-4f03-a642-f8bc82f8f59d", "sighting--f177593a-15ea-4c46-a177-f4e5f05bad58", "sighting--46030383-d97d-49b8-bf7c-23ebe980b023", "sighting--61caf7e9-68ea-478e-91c6-4dff50af227c", "sighting--d336e62f-913e-4364-a7e5-1ea3cd0e4fdf", "sighting--42a80b3a-d914-4d17-bb7d-db4b06f18cec", "sighting--736c44b5-7b64-467c-adf5-b35d96904063", "sighting--b5431004-4bdf-4c42-bc33-441cc5437a5e", "sighting--47c4872f-04b4-435d-830b-e1e0bc097069", "sighting--5bf4ca37-c439-4051-bdda-1601c97f41a2", "sighting--a0f39f74-bae1-47ea-a56f-9bfc83fce7e9", "sighting--2827c6ea-a5df-4d58-a98b-49032f819e7d", "sighting--21fb4ca7-57a0-4747-b0d2-a1a8f83b9204", "sighting--ef553b13-45d1-4ecc-8ace-ef48449b8881", "sighting--6a1876fa-5704-472c-ac12-014079c11e44", "sighting--c2dca5d7-d1db-4ddf-95af-f7457f863fc9", "sighting--17c894d9-ef15-45df-9ca7-aeef1ad3f22d", "sighting--8f579278-78e3-44e2-ba03-32a9b6f7ca93", "sighting--77217f48-d05d-4cad-a3d3-834b97be8ddc", "sighting--35fb1091-f92b-4327-8a0c-e099369405a6", "sighting--f557441d-0220-41d7-bed2-f269acc7bdad", "sighting--07b2c253-c6ca-416b-a125-d9a354e761ec", "sighting--812d66b1-3155-4f30-a5bd-ac30ef33102a", "sighting--cb7a4736-a57b-4649-8e1e-a00d334261e2", "sighting--67a4fbf4-5e7f-409d-b776-5b52442ffb49", "sighting--13eeaa18-07f3-4a2d-b6ec-e4765124c04d", "sighting--45cd6e98-eea3-4bed-8175-446be24d97a6", "sighting--77fe0f95-6596-4300-b3dd-87af4c7563d9", "sighting--b096c82a-9152-4668-a4f5-e50624e02a55", "sighting--bb0e092e-8988-4a1b-8a33-bebb215a5fd1", "sighting--2da95746-5224-44af-8dfd-5e6fb78c0df9", "sighting--edb373cd-79b2-4941-bf60-451b9ee281c6", "sighting--78dcc866-f282-472b-98ad-c4f1dc9bfd41", "sighting--c9d92b36-f20d-49e4-8060-9c445de22d1e", "sighting--e7e68aff-6d0f-41be-a770-0383a547730a", "sighting--300f38c3-f586-490b-9553-0be48a5f1776", "sighting--cad5641d-6e7f-4a74-9d03-13ec0bc7e669", "sighting--68f62d08-aa55-476e-9ae2-b68e2e76bd29", "sighting--5491a985-e164-453b-91f3-241b42ef2833", "sighting--e3c36140-46d5-4c3a-9718-cfcb3a6d7341", "sighting--2762c281-761a-4490-9714-ae634e0a99c6", "sighting--7dec1dfe-5ef0-4b70-8dec-b01da534ea07", "sighting--f1dac81f-b842-4c79-bf19-2f11c4925b50", "sighting--72cd8bf8-4556-4d2e-b13b-f95a313efb34", "sighting--ccdd7654-c564-48d8-9eb7-2ab95c2bcd92", "sighting--1608b7e0-ec5f-40f8-bac1-87dad69d6431", "sighting--addd645b-24f6-4bd6-84df-0755f832cf7b", "sighting--385c54a3-6300-4672-9ed0-b7113f125a96", "sighting--88a993b5-1d92-4e78-91fa-13c7d8c2aaa2", "sighting--bee5b8c9-f6f9-4820-a076-53ee4b421f8c", "sighting--1c553f93-9adf-44ee-bdcb-d2c6096e328b", "sighting--a2024669-3049-4a5f-bfc5-307e7dd0bfaa", "sighting--c443b528-384a-40e0-80ae-8dc521d169c8", "sighting--323e68ff-c661-4699-b13f-395165b17b38", "sighting--04db8d27-dc71-44a2-aa61-c81ab2ac4df5", "sighting--84623d27-650d-4660-968c-389f428e7bf0", "sighting--8f4b06ea-c10b-4442-94b2-23f43ab552b8", "sighting--5bc124b1-b65e-478b-a2c6-a03f96258c4b", "sighting--f8644ddf-62b1-4791-8c7e-cbe3b3fe712d", "sighting--ed9468e1-f8c8-4c28-9f30-a09796d78b03", "sighting--0c083d6e-022a-4ec8-9839-b40f8218f75b", "sighting--fad38de3-bcb6-4bcf-9aae-d8c9b0841b0f", "sighting--8424b71e-ed1a-4d37-ab6b-08f534d9ecf3", "sighting--e019816d-bc52-433b-ba49-3ba9cd536ffa", "sighting--a7c35d53-dd5d-4457-8a04-7336db4f1de1", "sighting--10cd9914-f29d-46f0-9ff7-b3538a47f1ea", "sighting--ae5be85f-5198-4144-8be7-7cec2af75765", "sighting--77690400-0dc3-4f94-9c7e-3f0e2f3a2a28", "sighting--9852de9a-1804-4bb2-a766-00e46bb1590a", "sighting--16a9f92a-c3bb-412d-bcb6-737414a73d53", "sighting--c2526019-6603-411d-b245-d05bcffd64f5", "sighting--b956acdf-2f03-463d-a32a-31885ad9df7b", "sighting--161c5f89-59da-4362-94da-dd0074b940bd", "sighting--44456c9e-2dc9-4926-880a-0a0559ddfa87", "sighting--4771bc2f-2058-4b66-9033-b68651c8ae1c", "sighting--5291038d-29c5-456a-bd03-9c1e2c2cd7a4", "sighting--0ff9bda5-fada-4480-bd33-c77fdf26f11f", "sighting--a734b067-2647-4579-982c-6527fc31bd21", "sighting--d47fd9e7-78cc-4ef8-b220-819909c193ab", "sighting--7f19f97f-b81b-4c82-9996-5f420e79e1f5", "sighting--2d96538b-80d8-4a40-bb39-afbebf74851b", "sighting--a259261d-2fbd-45e3-a107-9fac36a22599", "sighting--f4cc1b01-9f0c-41a5-9f04-c0f3e2efedd5", "sighting--af2b472c-d2ba-4151-b41c-58c59a62aafd", "sighting--aa63aead-7a1e-49aa-a05f-651f69a74d05", "sighting--0d70bc0d-f8ae-4ec2-9c35-1041d6a4ab9e", "sighting--983d32c0-b950-4414-9233-603c9ae760d9", "sighting--ea2d65c6-fbfd-4e35-adf3-734e7a8d99aa", "sighting--b89fe552-f2e7-4ba6-92c3-6dab8e45d181", "sighting--c7c509d7-bd3d-45e7-92d8-57b6f79cc0a3", "sighting--ce6e3b25-68ab-422f-8c1d-ed276e12046d", "sighting--e0c8b843-54bf-4e3a-892c-7ec0639b1618", "sighting--9fe8b501-9649-4c64-825b-82a6eaff921c", "sighting--2efaa052-054f-447e-8417-549cca275bc1", "sighting--28134a97-f57c-43be-a728-a9e0a139b0cf", "sighting--94f19e46-7984-4dd0-b03a-b967b951d440", "sighting--24b175fd-876f-4792-8dc2-6fbb56fc148c", "sighting--b85fd1bf-557a-443b-856d-e10f1cc64401", "sighting--f4c9827a-1121-445b-bf98-2d50354eac0c", "sighting--c1512e0a-12d4-4f96-b490-98956a3b9b79", "sighting--b8c10498-7692-4ec0-9eba-6175612f3fcb", "sighting--4dcfb9ba-ee52-4b8f-a3f5-f0aa9852b251", "sighting--0f17119c-25a3-4f95-86cf-8fdf15c36bbf", "sighting--d198e629-0289-4819-ade7-f18083e4dc98", "sighting--065b5394-b570-4c13-a48c-407e365e51e9", "sighting--1cea6cef-a87c-4e26-a828-c3ca28eb242e", "sighting--2b9229bb-f937-450c-8cde-5a332dba8483", "sighting--9b6fd9ad-349c-4354-b101-c91b74414d22", "sighting--1db57af6-c3ec-4f02-9eaa-55a97c1c01ab", "sighting--38d8ffcc-f169-48b4-b439-2f20efea3ab0", "sighting--5bb155b3-ce97-42b5-a979-d7ce296555b2", "sighting--6f385e56-548a-4ebd-8a3a-4f4fbcc5cb39", "sighting--dc16ecdc-b655-4d2f-94fb-613e701bb4dd", "sighting--f2c5df72-db98-459e-bea9-bb25ed15d84f", "sighting--cdf2c390-786d-4a24-b896-b0f11b831133", "sighting--fab68676-5419-418d-a381-888603076b13", "sighting--99ed8fc4-e53b-4614-b9a8-952189fe20f1", "sighting--a02f6c2d-f697-4366-818b-09096a5a7a5b", "sighting--2ecb78c4-c066-4c82-bf17-d735dc589aeb", "sighting--0536be91-8c5d-4903-a17e-06c7b932eddd", "sighting--5672b1c7-0aad-4a2c-8a16-d7768bdcc9a3", "sighting--717cb8a8-d11d-419d-802a-a72a65360190", "sighting--8c7dcfc8-184d-4259-b049-79c4c30a33fd", "sighting--fa509820-ed38-4e7c-b8d2-3a4cda418b0c", "sighting--04ff25ed-6e66-4417-b61c-c67f97e2787f", "sighting--8c15ba2a-89b9-427d-9bd0-3375680ea274", "sighting--e2753549-c65a-4f48-af8e-21b004c3655e", "sighting--614b0d3a-bc74-415b-9022-ffa1b71bdbc4", "sighting--f16a62fe-e646-436a-9561-0576a1fc0918", "sighting--5d7cced4-e922-484e-9fc8-d73a7c325cbd", "sighting--d225f9c3-f4a3-405a-a69f-c8b234ada2d8", "sighting--f118175c-134b-4626-91d8-83df991363d1", "sighting--7b784d8b-4b20-4d9c-bdc4-906ffd62f343", "sighting--01349b5b-b7d9-4c97-9423-5f1e53467481", "sighting--535f74fc-5319-48dd-a5aa-a807ed8a9a84", "sighting--62003dd7-c5d9-4101-8d4b-79a3617fa8b8", "sighting--00c1c8f0-6533-445a-b969-491212c7664e", "sighting--b59350c9-4d31-4ae3-b967-f2919c14d2f6", "sighting--2ac384a6-9083-4f6a-b21c-9b9c97af24eb", "sighting--05f14d46-e77f-4ad9-b11f-060e4fbe2078", "sighting--e52796b7-28ce-4537-8620-c40c86f68427", "sighting--c3f38e98-7786-480f-a3be-61ee9295f812", "sighting--8dab2095-8f87-4c25-8ef8-7a2e329681b6", "sighting--9b76e852-a6ea-4919-a6d1-7a9a166deadb", "sighting--c543bba5-7f3d-459e-9e3d-821ed9819fae", "sighting--cc31988c-0371-4233-b7bd-5f5f9fb7d96d", "sighting--4281f293-e4d1-4f3e-90c8-69260de184da", "sighting--00545bb8-3852-435e-afbd-a0d095992f4b", "sighting--78382e12-822c-41b9-ad61-56c652a3486d", "sighting--8114ab51-ed22-4736-9403-1ed1a5a28114", "sighting--8d3af319-2746-436c-b9ef-eb684ae84552", "sighting--4e83bbcb-88ef-4239-bc78-cf681600296e", "sighting--cf7313db-1fc3-4a4b-adee-c6031c6674d3", "sighting--23f82c58-0981-4595-8ff5-d8136e37343a", "sighting--623856f4-3063-4f5c-b533-32e0bc266e28", "sighting--75148ac0-afcc-49c4-adad-7c4bdcbc036c", "sighting--0a9edb75-0532-45ff-9690-6ed28d622364", "sighting--4441befd-c317-4627-a670-1a0fcc2880ec", "sighting--f0a6ea61-d0d9-42ea-a042-a28dd66cbd98", "sighting--38a7de1c-be18-42f9-a47e-c46147230b62", "sighting--bbd574f3-9a78-4fd0-89f2-75208433deb3", "sighting--c3388ad8-2815-4c1d-8afc-e81abd50d464", "sighting--cc2b8ce1-081b-4c6c-850c-412937cb5a0e", "sighting--56109dad-9884-4532-a00a-07f30e070078", "sighting--7121003a-337e-4e8b-8c81-e72e34027395", "sighting--514f1644-55a5-4d8d-9dcd-8dace59d7781", "sighting--c41df94c-91f4-4b8f-90bc-9e2600690dd3", "sighting--37a4626f-2700-47b0-95d3-0290401ce0c6", "sighting--9306908c-7b55-48e8-b56c-69d7efe37c1d", "sighting--5479ce37-9092-40d3-9837-99f4bd089661", "sighting--90978f88-7c44-4b37-a346-7b1fb9ea3b80", "sighting--b2e9f6fa-e79b-4544-87a8-484f467cbbc3", "sighting--6441d68d-5a3a-4180-9b27-b487e479940f", "sighting--891b4802-713e-45fd-aa07-d634b22a53c4", "sighting--67136afa-8754-4e4e-ba7c-f102ed02662a", "sighting--21778973-0841-42f3-be94-00be26595b17", "sighting--742b6806-1d6d-4b7c-8d74-0e42fdbaa2fe", "sighting--0fa1773c-0b78-404a-8d3b-2a6cb3864324", "sighting--ba6d9956-b940-471e-876e-776475d14fac", "sighting--11562328-bb3f-48a2-8bfe-386ff1c72d08", "sighting--fa63deb3-943e-4c30-b43d-8ba8699a92b7", "sighting--7ff3dceb-dbf0-4340-96f3-e7abcea4956b", "sighting--acb638a9-2e97-436f-bca9-40f10ea2e5f3", "sighting--9aa0f5f0-d225-4ac1-9dd4-9f90434fecd5", "sighting--2062061b-5e5a-4aa7-bad5-28eeeed35126", "sighting--5a037458-2a9d-4101-a957-f274db4a738d", "sighting--639e1776-0af7-4227-8c4c-bdae4dd2e974", "sighting--fd2e2279-5040-48ac-9070-465ff5dc0b02", "sighting--9b89be44-2e0a-4fea-bd9b-13a3349c8e80", "sighting--0af58d63-385b-404b-b83d-f9bbb3139fe3", "sighting--cc35cca1-a037-470a-ba5d-94392ab35456", "sighting--7e2a0c96-3272-4966-8c5d-b4cf91a15b38", "sighting--bf95bd64-55d2-4aa1-824c-c74199d8f7ee", "sighting--257589e1-a5e8-4b1e-a378-37cf80bc0fdb", "sighting--76dc0552-da81-4c5e-8753-b8e4e8a35328", "sighting--0202bf6e-69b4-40f8-a945-0cd55b59398f", "sighting--123c6850-810c-4034-b40d-e3d140e3e627", "sighting--bcf7e2c4-7885-48ea-bdbf-951be35a1dfb", "sighting--17305479-9a14-4371-9901-9464008c19ef", "sighting--a113791a-9d02-4f3f-840c-6bd792958a63", "sighting--bf594ee8-b81b-4114-8712-0870afa6742e", "sighting--23eb7fab-a234-402a-a767-87d672c0f2c5", "sighting--57773ff9-7c79-4175-8e4c-6fdbc562af42", "sighting--7df6921f-5d31-4ca2-adbd-98d01bb7f221", "sighting--84e047b1-7c74-4d71-940c-c8dbaa62a5ee", "sighting--6e9227d8-eafb-47b5-be94-53575155e16a", "sighting--3cf1b5a1-ceb4-480a-a9b6-66fc173ea43a", "sighting--e2eec362-5a51-4464-b8bb-ff74a255ea01", "sighting--60a02f0b-5eab-4558-a088-944dd78e7b27", "sighting--80deb551-c261-4981-81f0-7dae8c1b3d70", "sighting--be22d808-e3b8-4dab-8655-aa07ea475de4", "sighting--523f8abc-81f7-4be4-a674-1e8f893af5db", "sighting--d67e5d8e-066d-4dab-846f-38f7d063bee9", "sighting--2c605752-9626-4210-bd28-65029878dfee", "sighting--0350559b-318e-4fde-90e7-2a6d3196acbb", "sighting--09ea2aa2-3ad7-4e16-8f90-aaa70ec664b6", "sighting--abd4c318-7c24-4111-a074-ea733637c7c3", "sighting--bda8003c-edc9-4827-9ac8-cf7961033d3b", "sighting--9203f6d0-4060-4d15-8ee0-9c8e40c158b2", "sighting--ebddd227-0f0a-4d6a-9f69-87551cbdef69", "sighting--053f5faf-6838-4981-a1c9-29af7c16f804", "sighting--5c5de029-31d1-4b09-86c3-1609e286c03b", "sighting--17b79955-383f-4707-b8ee-fa4ea78d5101", "sighting--7b05999b-0e0d-4683-b873-ab2edfad121b", "sighting--bd97e13e-727e-4867-be86-ea70619f0936", "sighting--ba945e26-feea-44b5-8496-aff114d5f3f8", "sighting--f97f6067-28fe-4b77-9770-e6da958c934e", "sighting--261199a8-53b0-4168-a17f-7f460a406a9f", "sighting--379426a5-cc56-4d55-9c08-2f0670e15cd4", "sighting--76c69159-6fb5-4184-bdd9-5f16b23629b0", "sighting--3536987a-9957-43ad-bdbf-c97ab0dc6ce3", "sighting--aad56cf6-9c42-481c-a79c-e45c5d146de4", "sighting--091ffe9a-c1a9-4a8d-83c7-e2ef6403a97e", "sighting--54b2e109-4d6a-4ba9-96c8-4158f0bbb0cf", "sighting--674fa21f-d0e3-43e4-9c89-f19c7b11cf5f", "sighting--bacf3a30-23eb-4466-b889-1f071cc9235c", "sighting--23a25fb6-5421-4506-87af-589099b126ea", "sighting--35bbdab7-4d26-4688-8289-e15c8f255b60", "sighting--32db51b0-566d-418b-8998-b8844e1a1f43", "sighting--e30ee046-8a70-4390-b004-0bd9b38ae77a", "sighting--3eb8f417-6bec-411b-8ac5-f41440a96c41", "sighting--1df7f640-e1bf-4f63-bde6-040e247de40c", "sighting--e01d02ba-14f0-4c78-8c99-32946bbc455d", "sighting--c3f10b88-336c-492a-a1b3-3626d37b64f3", "sighting--df954713-1d2a-416e-99c6-b546f88c359f", "sighting--89fe8f3f-4285-4fd6-b381-be91da7f6e3a", "sighting--5d276ed8-6e76-47bd-a626-f692bbfd1bbd", "sighting--8bb356f4-bf8f-4ae5-a73f-2d930f401f21", "sighting--f3cbd72e-d214-426f-9ea5-5a56ff02b5dc", "sighting--e069377d-3982-421b-9302-32e170d67632", "sighting--905db6a2-886c-4536-9830-59cba98260ae", "sighting--e51e3e24-ca4d-4877-aa91-24488966d982", "sighting--ae2dc21a-4f6f-4247-a9a7-8ccd39a9dc9d", "sighting--2c29be17-02ce-4009-9145-f223acd1c7f6", "sighting--e364b1bb-8df8-4885-b050-f10ff209b6b6", "sighting--f84d2f2b-a10e-4b72-82f3-e4e99ea2b18f", "sighting--c2e2cbd7-80bf-4ede-bc89-0d5bbf72bfaa", "sighting--915a4f63-b8c4-4b57-aa58-e1e748ff8d48", "sighting--1ef2c56a-0b79-4e0e-a5c7-9720c7d90283", "sighting--475b00bc-b8e7-4c89-bc66-d7d1a7ecb112", "sighting--1fa51122-ca89-45ec-a276-bd6245e10251", "sighting--195fddc8-ab23-454b-8588-561c8e23a068", "sighting--5b13fbbe-6423-49c5-a1ba-f76cba71d000", "sighting--0645f3ad-b710-4fb9-a12c-547cd3138a34", "sighting--4856a7bb-bed7-4c38-adee-c17e66e9312c", "sighting--3d659a67-738c-467c-9437-e4da8983a1ce", "sighting--d2b61b60-be5c-4578-baff-f1371ef9a5bd", "sighting--03e51ea0-f3df-432d-9fd6-c2d8148a9f2d", "sighting--d3430ffa-aba9-48b5-b48d-1fb114ab45d5", "sighting--387af5bb-fe92-45df-99cf-d02b47a402ee", "sighting--5768f93b-5104-4e43-a804-b55853735e60", "sighting--130ad9b5-0fcd-4a90-9528-6530955d4d2a", "sighting--18f9fb9e-a70f-4f71-9ea0-ce0ba04d875d", "sighting--62d546c3-ab66-4523-977c-87b54d35ba25", "sighting--b5b5d6dc-f39b-434b-a71f-654290d9ce7c", "sighting--45854db5-596e-423c-bed4-c76e8ddfe305", "sighting--2237b16e-fba4-49bb-8b37-f40f33c85569", "sighting--ecf07bdb-c15f-4374-b325-43d3bb2005d1", "sighting--1e22c5cf-696a-4617-ae82-d377b64e7abe", "sighting--358f3a52-af3b-4b62-8325-7d85f244bea3", "sighting--9c06235c-b283-405c-9377-4c3fd34f6948", "sighting--5d42ce0d-046c-4230-908d-33cd0fd59d11", "sighting--be75c5ea-35f5-473c-a20e-602d30407748", "sighting--2f2d3c12-c5d7-450c-9d44-5d5ffd8c4882", "sighting--7b304417-47ff-49fe-9f45-7c30bcd5ff6b", "sighting--d4250d0c-9729-40c1-be97-4d06d8ecbfa6", "sighting--3a7eb17d-e021-4f28-a933-29cf477fd321", "sighting--746d3312-43e9-45e4-a60b-d58d67d7e6be", "sighting--ed6f995e-7a01-4d99-9353-c1a21a76ff45", "sighting--70222b2d-35da-481b-bfe1-a50535eb878b", "sighting--da38af9b-8a5e-4cfa-9ae7-c1b712116b59", "sighting--784e7b22-7802-4776-9a6e-3b1176357f4e", "sighting--d9cce3c0-a937-43dd-87b2-cf423b59c6b4", "sighting--d5c8941b-2edb-4967-ab39-7fa729ec5a88", "sighting--0cef98ed-ab5d-4dc4-8c8f-e29810e9e89d", "sighting--41bdb2c8-99a5-43e5-a1b2-245f5ee853a5", "sighting--23c96b08-c086-4998-9ce6-84481083f27b", "sighting--ecfcb8f1-ab7d-4ba5-b329-047f914187b3", "sighting--46f96e06-84e3-4e22-8b69-d491a17af2a2", "sighting--a8fbfbe6-dbe2-4c3f-a37b-e0a66667746d", "sighting--41f95f02-b4ac-460b-b931-2b676752864c", "sighting--43ba2027-c78c-4da8-b84b-759717d32145", "sighting--f98bcc07-34e1-4fc8-9682-43b35ab966c4", "sighting--d4137d48-208c-4f87-8966-a7e240a4e915", "sighting--74fd751b-e3b7-408d-ac33-442853d6bb3f", "sighting--780fce27-cd01-437a-a40a-3f5edd37e6bc", "sighting--ac3143a4-3ae6-4bc1-a2ef-be1a2b448f6d", "sighting--62f507af-933b-48de-9708-aece0f05743c", "sighting--fce8f6e8-f641-41bd-9926-493a666c6921", "sighting--6b593aff-c285-4016-a46c-daa57c2cb69f", "sighting--20b2e027-7b3d-4b4d-8997-834a0d672f6d", "sighting--f2099ffd-946d-4f78-94af-e9d945737b8c", "sighting--4d113127-0ec1-4db8-87c6-96c26d4c6ee7", "sighting--2c0a4df9-fd85-470f-bd61-54bd84c6bc3e", "sighting--9408ec49-c4dd-445c-9c2d-ecf291334342", "sighting--f14609da-f106-414c-83d3-7a8b74baccd0", "sighting--1ce81b61-d4e8-438b-a7d3-5885ef7a92c0", "sighting--f6408d49-fad0-412b-8340-883dc54db00e", "sighting--a6ed4ac1-3f47-42f4-875e-2e76b58611b2", "sighting--1d17327a-1563-4004-a802-33c8b4a2a0f4", "sighting--1a0c8674-46e6-4d46-badd-69518b70040d", "sighting--fcf9c71d-9455-4082-907b-c1b1aaebbc71", "sighting--9646479c-0d79-43b8-b4b3-4c740d949059", "sighting--5ebb357d-c0da-4de0-a373-7237b5fd8c0e", "sighting--366a2c37-e469-4f87-b88b-3be134f690fe", "sighting--554ba40a-db51-4175-8ae2-69325cd51ef4", "sighting--9c03ac00-2d3c-47cf-8c35-f25596434a95", "sighting--261eecd0-81b6-4ac8-bef0-f27079176b15", "sighting--821fee3b-1f84-4fe2-aee9-fd67ecdbd1b1", "sighting--eab35cb4-4a76-4f50-987a-1c0f6e8aefcd", "sighting--dd507b83-468b-403e-945d-9930d6ce5c5a", "sighting--7dd10188-4955-48ea-8cd4-6e39be661f8a", "sighting--631f2d30-325a-471b-92b8-10bd932d742f", "sighting--c0959874-16ad-45bb-a0f1-83c024f3d422", "sighting--3912a2a1-6fc5-43cd-9970-93ff93468971", "sighting--cf92176e-7940-4d03-8c1a-4bb6aa5b9632", "sighting--978dbdcb-c8f7-4840-9937-c7a17a77bb0f", "sighting--db13a2fd-15f7-42a1-870a-3766534a298a", "sighting--1ce2dcae-e310-43f6-9d49-45a158bafffa", "sighting--ad41f21c-e7cf-491f-941b-b82541707959", "sighting--f47e4a22-c6e3-4418-9813-fafa5caaaab6", "sighting--50440845-dabd-4af3-a36c-70552bb9ced2", "sighting--1dcac0e7-7122-4fbb-a80d-fd37183194b2", "sighting--d4022b6b-5b53-4486-9412-8e789f8b88a9", "sighting--d8ba2cff-b344-4e07-8137-ae9604a41105", "sighting--8f49f7c9-8359-4043-bb81-f0acf3638cf9", "sighting--4ad243a1-b9b2-46f2-aff1-572bf8ae4e09", "sighting--0609e877-1404-4695-b344-dd621f4a57ac", "sighting--1dbba547-1ba3-463a-b773-0bfa36a111b0", "sighting--1a0fef95-a0a2-4433-b5b4-719cd96255f9", "sighting--e5c5ca9c-7b88-4eb6-a35f-e5a4455fe0db", "sighting--6cf4eddf-8c13-4e92-9991-3dd1b4998067", "sighting--8900cc29-51be-4145-8de3-1c25b2a15e26", "sighting--723e04b9-34e0-4445-8517-4f4dd294fbb5", "sighting--8eb763a6-7a7d-41ce-af13-b8798a84e88d", "sighting--b08d1854-93bd-423d-9e1f-ad7b69b2a184", "sighting--f2391120-ddad-4bdf-a7e8-804560e8bc43", "sighting--c2226417-d3b9-4a44-8150-43be7aae1a04", "sighting--1217a37c-52e3-477e-9721-5895a7bb2bfc", "sighting--bd55241f-0126-41c8-bde1-3664cfe4dc50", "sighting--c1344a83-eb5a-4ee2-9e29-a8a639614faf", "sighting--9151049a-3977-407e-a412-1c39dc1c2405", "sighting--d58512b6-ef30-4497-8e41-0dd23ac7ced8", "sighting--e564c449-fd3c-4141-a5e9-c48a94218695", "sighting--4bcff4d2-b13d-4544-9ff6-f9af9940ebaa", "sighting--0510e734-1f05-493d-bf24-c776cc80517e", "sighting--28778c27-b38a-4bca-838a-0c7996dfce74", "sighting--836374c6-b927-4033-ba22-0490f4cc1428", "sighting--db14b3ca-4486-41e9-b521-b253fbe2a1a6", "sighting--8152ef91-0385-45f7-b992-1380229e09be", "sighting--4c699708-c4cb-4fc2-bbd1-9cae7d6fe578", "sighting--d973d48a-6fe5-4457-8323-e63e2ef48bac", "sighting--b40f746e-b3d6-4e56-a1c3-d4947f7e3f02", "sighting--bef70621-c2bb-4262-a0fa-b248a5830c26", "sighting--ad1c2d11-dc88-4e1e-a745-8421e9cf856e", "sighting--bef59a49-2288-4588-bc9d-bb5b0ebb101e", "sighting--de9483de-c221-45e2-ae0a-40f1c3b0a917", "sighting--42ea2c72-5aba-422b-8692-d5308ef1dbf1", "sighting--149dbc59-17f1-4b47-8c0b-b70c479179ec", "sighting--1bd0feac-4673-40fe-936f-0babd18d3707", "sighting--9a092001-5a44-430e-90e5-c944d0c8f045", "sighting--ad69b9b1-c29f-47aa-81e0-f783937de632", "sighting--5187b030-f864-4d04-94d7-839dd22bcc60", "sighting--61dba646-2bbe-4048-a077-8e650f5b5021", "sighting--83347ab2-e71e-43ed-a32e-da57bcde4466", "sighting--40c521f5-c5c2-4561-a83d-66cce9d51a1f", "sighting--48a5be5f-e236-4a47-b1da-9d92f25e9d93", "sighting--552313cf-895b-4ced-a02d-42967cb8a5b8", "sighting--b6ba6701-1e7e-4e3d-bf33-9b22078d93e4", "sighting--dad15b72-0d2c-4321-9d62-da553cd2ee1e", "sighting--739c2eca-a4d6-4d2e-9ef5-c20612b16c17", "sighting--b2e8c34c-8b06-452e-a9bf-89c071010cd7", "sighting--fa622d24-6856-4b65-8f08-f5e4c21fb669", "sighting--cb8d52c5-e571-4836-898d-36dc146e5ccf", "sighting--f2b6503b-dba2-4249-b765-64ac4993c00f", "sighting--48c96e3d-95ac-4d65-84dc-222df1d33574", "sighting--e3b6cbcd-5430-4d74-a7c8-f431e25035e5", "sighting--ac2930de-672f-426d-8116-806374df5e46", "sighting--5ae8cce3-b4ef-4dc5-ad48-6a885feb300d", "sighting--69776e40-6201-4ff7-9018-ea8c77b8a741", "sighting--31724c3a-3108-4741-b858-27a4e28566aa", "sighting--960ea2e6-0f11-435b-8c12-dfebe1cf410a", "sighting--859bfeb9-5412-40d0-a52f-c1f37db7a95d", "sighting--344fa92c-4d3a-40c7-80d2-24f65f9eac4e", "sighting--d0d117ba-bb84-4267-8454-77893e6e5741", "sighting--6893ca1b-f14e-4d09-bfb4-24f72e47c698", "sighting--31f95422-c857-4649-a086-32c56719def1", "sighting--d0ba68fc-82ad-42f7-b00e-cbfa024f378b", "sighting--9d6e223a-85a5-417e-a195-ec32ff9c19c5", "sighting--72841315-88aa-4e4a-9a1c-f181fa07a2ec", "sighting--0c1ff7bb-18cd-4c4e-b02a-97bfcc2b368e", "sighting--56399131-0a58-4bb5-87f9-00d1fa7ca00a", "sighting--8d8307be-9905-471c-acb2-dbae89c2e4a2", "sighting--ce57b07a-f509-418c-bf70-3e0e6ec9d971", "sighting--e71a6cb3-caf4-4246-b93d-50fcc7d7b516", "sighting--efb0f79f-4126-4e80-bac2-eaf4423df810", "sighting--7d1015fc-b911-410f-aadd-855725a6c0b3", "sighting--6af2db7f-97ce-4409-bd98-c151c0d7684b", "sighting--c396cf78-f4eb-47c2-b230-877552117de0", "sighting--f051d8d5-7bfd-4e43-9be6-15a2495aef87", "sighting--cd7c8a19-62b4-4541-82e4-f34164b6680e", "sighting--97ee5f27-1af3-4ee8-8538-cb470581024a", "sighting--c08f6391-96b0-4964-b5bd-566763ca6ab4", "sighting--6faac3e8-3630-4408-a03a-0eac9e178089", "sighting--fe777420-a2c2-474d-b0c4-42a2987d852b", "sighting--c45118a8-8ed4-4023-9a31-99f664e7a122", "sighting--b5f120de-7c6c-48c9-91eb-e79b17faa524", "sighting--7e8351ec-fed8-4102-82ba-98c75412f1fb", "sighting--a79ee92a-b27e-4759-a417-01beed4cddbb", "sighting--ed624d57-8780-4e5f-b6ae-b19b0259b304", "sighting--fccbeb68-6b22-403a-8ecc-28fa41bc0d0e", "sighting--2008d825-028f-42ab-b67c-8ab9bfdf6059", "sighting--c92e6da2-d9ea-4d67-8265-302aa85fad24", "sighting--414436b7-f1ce-4603-bd7f-5cdd8542870c", "sighting--779bb037-caff-4ef6-807e-cd39e6ea31b3", "sighting--cc47f33d-d911-4e30-853a-d076514d5b9b", "sighting--167cb08e-cf15-4271-85b9-5953d1dc9b65", "sighting--b2387c0d-bdc0-4ec3-945d-82cd5e341a83", "sighting--23dc0fc0-fe7d-4ea4-b435-e5b1a6b05584", "sighting--07096c85-da70-48cf-a1b5-0d6154096748", "sighting--a3c78d76-31d7-4363-be86-b11f71ef6125", "sighting--d3923562-bf17-4800-bfca-7d9a7fcee198", "sighting--51d41a8e-4558-4d77-bcdc-768d2afd3dd4", "sighting--02a7d181-8255-4a70-93aa-ce2672a65e35", "sighting--13fe2af1-7f75-40a1-b7a3-c9e5e0c748af", "sighting--1ea7fc6f-7070-4183-9376-ec17b23783b3", "sighting--0dd26c4f-1b69-45ba-b47f-e010612a00b9", "sighting--81f71c98-1627-4280-b562-354111b9cbc7", "sighting--f793f4ee-36d0-41aa-acc7-44b6fed9fdab", "sighting--b6f6fd27-5359-4231-a2ef-2b374163b275", "sighting--148f901f-ccf5-441a-8591-7456f15b8c0b", "sighting--ec66bbeb-f34e-4b91-be75-307084e99887", "sighting--2d27b073-2577-4fc1-95c0-30539df786de", "sighting--f44f5789-46b3-47bc-8e6b-86ef50900b3d", "sighting--2fcbfe28-1e90-464c-bcb1-7737ae3f6a85", "sighting--4053d736-a3aa-4d8f-92f9-0ca7b8080c48", "sighting--fd828c1c-3aa3-45c8-bc1f-800d8d4c885f", "sighting--4f561830-608a-4395-837f-e022d009ed4f", "sighting--049d0049-77a3-4190-97d3-03b16a8d5936", "sighting--56c6cfff-9e13-456c-b0de-97961e74cf73", "sighting--d1b6239e-5a9b-43ee-aad1-066defe5cf38", "sighting--79697387-fb4c-4ede-b3b6-42c89be7740d", "sighting--6d560acf-73f4-499e-b218-150f0668b907", "sighting--bcd1409b-b21b-4198-bd1e-a8225dec5095", "sighting--2ec7c8a6-5353-4cf7-a022-4a46132c7b6f", "sighting--3292b2d2-aaf8-4722-9b88-b143a5c51acd", "sighting--8aa50db5-2c90-4763-b04e-93c50027bb96", "sighting--82624163-1eff-4d72-884b-901805ba37a1", "sighting--3df6c68c-c262-4e1a-b500-30d0b6f3aaf5", "sighting--f5e73520-f1ad-400a-8026-2d9d164a5874", "sighting--8a216a0c-b810-47b8-94de-94c3700964af", "sighting--eb1bd592-652a-42b4-a7b1-66b44f1407c5", "sighting--47a3ce45-b4af-40a9-91af-1c0c96dc550e", "sighting--4edc99cf-8133-4784-bef0-a47c4605a4fe", "sighting--16c92375-d310-447c-96a2-95f11fe7e99c", "sighting--dcc7462f-9cc8-44bb-9153-0927b86cc68d", "sighting--4df27062-3785-49e1-b2a6-b91ec92553eb", "sighting--d97474af-931b-403d-8a66-99127d5ee600", "sighting--67ce597c-3b6b-4897-aa93-b51850da45fd", "sighting--6f056c37-8065-40b7-9df5-7e896597a3b3", "sighting--27397000-e548-47bd-a64f-c40cc6506894", "sighting--216495dc-5968-465b-96e3-b66066cfa272", "sighting--57b0bbbe-0e8a-42c2-8d7b-587ef75d68a3", "sighting--b5ea4327-3dbc-4f9e-af5d-9fc8b5b857c5", "sighting--6b7b1fca-7be7-4e08-9377-fe5c29c409cb", "sighting--794bc44b-abcd-4edc-8f49-8b381c3454d9", "sighting--3393011b-d0f1-46c9-9d95-109699412dbc", "sighting--0bd43130-efab-46a3-8465-c17fd7b5cec6", "sighting--3c627510-2390-4410-be1d-3ce6641c141b", "sighting--cf2aa5e4-03c6-4306-bdd6-d8381d9edb8d", "sighting--924b7cc7-050a-4e4b-ba6c-81cea808a60e", "sighting--632d42d9-76ab-4377-81ec-09cc1701d179", "sighting--91b92208-0369-484b-b00f-e1f4029fa848", "sighting--58185b77-853d-4053-8a8c-da11382972bc", "sighting--924ca482-ffae-4a1e-9c1a-efc1cd039cf6", "sighting--bd96e4e1-a6f0-4694-801b-fce9502fd568", "sighting--5f9911e7-08e6-4280-8534-19d3e2bd8200", "sighting--e829b7c9-a235-4726-acf2-9c5b1bcdaa03", "sighting--0cea258c-c51f-4e3e-a8ca-b968df6ff476", "sighting--19e20590-e6c5-4ca3-8218-15b6efc150f6", "sighting--5b740f45-25e1-4240-afaf-e0974b4da0f3", "sighting--eb334f32-2a14-461c-830c-7d8dd1c4e78a", "sighting--1316f171-07d0-47b9-9e9a-82b6d64587c5", "sighting--95bf978f-4237-4f85-aed0-cebdc28017fa", "sighting--81bff453-8927-41a1-97d6-2e6c28067ec2", "sighting--f542b981-8fe3-4bd0-baf4-7341795756fe", "sighting--29cdd6f6-2a8b-4e5e-a6c0-2091709b3e0d", "sighting--32fecd46-e64a-43c9-a5ba-884ced169100", "sighting--19e8d71a-9406-4d3a-9a73-f2b25d3875ce", "sighting--9b9145d9-58d8-4ee9-9301-776b6d93c802", "sighting--aed81c27-2524-41a6-98e5-4d4c037f7980", "sighting--4f12cda4-7766-47dc-a429-3847a8e44287", "sighting--f48689ae-1afd-4dfb-87a9-ad6aa6a66507", "sighting--eb63bda1-f0b7-4208-8102-a435222bb42b", "sighting--913f9d15-34ea-4f6f-9f8f-f7f01e0d14fb", "sighting--24916261-42cd-47dd-a3e6-efbe64df60f1", "sighting--065dc422-68c2-4757-8185-5167feb3105a", "sighting--ca15453c-846d-46b1-bbb7-1d71d867cc94", "sighting--f3816004-ed8a-469b-95c2-8d40bc752f73", "sighting--4d001636-500c-4a3d-a994-fade521a1ea6", "sighting--f92983a0-7059-4be9-a374-995c2f91af6c", "sighting--c64716f1-5e5f-4ea9-bcb5-43efac119c65", "sighting--3bfacbe7-61ab-4c7d-ac53-e2d998a7519f", "sighting--fd31f14e-2301-42d9-b036-d84e98493ebe", "sighting--724b4f1e-3702-4cc8-ac2e-08a35b7c0cf0", "sighting--1c3a4660-8fbd-49e6-a425-b23ded778213", "sighting--e39c554f-4767-4ac5-ad6e-ed1ca9325247", "sighting--2b5fc806-7dd2-4567-989a-7056d25bc7ea", "sighting--8ebe35ef-36d1-4931-9518-316e12ed2b40", "sighting--6e554828-e049-4461-b1e6-90cedc8afad7", "sighting--d1dcc30b-3826-4946-b4ba-d8bd5a8e9912", "sighting--4ff8c6b2-ee14-4c98-9992-94bd8e7c5bf7", "sighting--52cf8396-db41-4a88-904f-1573a69f51a9", "sighting--43c39ce8-d760-499b-a8f5-77cb92e3b122", "sighting--bf34c59f-7a9f-4b6b-b2c1-36c80424e1f0", "sighting--814a80be-3355-4622-9cc4-66edeafe0e22", "sighting--3cb78504-5107-4f4e-aa8b-58f11f864d47", "sighting--19672209-c964-4df7-bca6-11cc80cb22dd", "sighting--b8ddd8ab-6b4f-45de-ab78-acedbf201972", "sighting--9fdc11d0-64b8-415a-8014-fcce0f1b5679", "sighting--0df42ac8-b462-43da-bbab-551e0e992d33", "sighting--f3fdb3a2-6530-4265-9197-0a17b78521ee", "sighting--735ea28c-e188-44c9-912c-df270b458e1f", "sighting--046b6830-cfa2-429d-82a5-fa000a7eb778", "sighting--cd963651-21c4-425e-b749-e76d8983d782", "sighting--fcc866c6-825b-43c8-8685-d60bb0bf4f3c", "sighting--95e28f5b-d872-4742-b9b7-d8aee3e05d4d", "sighting--71d30176-5ea7-4479-9903-aff565da8351", "sighting--5d7cfcb0-1d88-4b8e-8b5e-e9d699148f50", "sighting--f26a3a8f-33e2-4f14-b1c5-01ce86bee3ff", "sighting--688e58ab-e128-4b77-a62d-d79115f2572b", "sighting--ab232f3d-5e6b-4c5e-9fed-322d9144c2ee", "sighting--27074a3f-417b-4f65-a8a9-c07ce4a10172", "sighting--cda8c7cd-ba70-4ff8-9f14-ae4b5946ea0c", "sighting--9ab6d7cc-6512-4e0d-997e-f9d201cb8400", "sighting--888ea0f9-ffaf-4c0d-af77-454adad2de3e", "sighting--da4521fd-f5e7-4a4c-9355-ed9408068984", "sighting--7c07a546-455c-4a8b-8818-727d1e56cfad", "sighting--93d38d49-5b11-418f-80ab-d65868ad5db1", "sighting--fd97bfc3-e919-4cf9-81fd-f203230f69a4", "sighting--1d32266a-ac7a-41fb-89e9-4020b1a333f9", "sighting--ea2f0c9c-918b-4575-8209-fda35f6c44a7", "sighting--c645bc8b-b18d-4a63-8bec-ec0ddd2fa84c", "sighting--764d25c5-f622-438b-a70b-b079091e5dd1", "sighting--ffc468a5-f3fa-41ff-b4fa-7464af72d765", "sighting--09da8f2d-0fb3-459c-9d9c-5a1fa3f4fb5a", "sighting--14ea879a-4c35-4f5e-a5c1-254fb05ab9d4", "sighting--0a764ff4-5da4-4629-86b8-8521db110a36", "sighting--c1693793-021c-4818-bbb7-51dedeb938a2", "sighting--2862af94-e641-4af0-aff7-7400bb0bd270", "sighting--15c91d06-3441-4cba-9b5b-346146ce5541", "sighting--68c49571-1702-4f83-95e2-fe10c601d59e", "sighting--a1ce9924-b64c-4023-9566-3e50bdbd7215", "sighting--02a7c34c-4b7c-4612-90c4-555dea93b3b6", "sighting--517652fa-59b8-4de4-805f-839a5097b99a", "sighting--cb043607-3ebf-498d-8c10-c98e23316018", "sighting--49e51613-6a29-4216-86e2-281f42c96da7", "sighting--b69420d1-2fe3-4a3b-b732-43c5243bffba", "sighting--cb5ad927-0503-47f0-88f5-6f64c8edbefb", "sighting--5c727218-12aa-427b-833b-c702b54b668e", "sighting--44346faa-79e5-45d2-a399-0e570c3a19a1", "sighting--df99d0c4-f685-4962-9931-7b217f2bd5a7", "sighting--73e1324e-e274-448e-8449-9e799010e3dc", "sighting--1f0839fc-9e0b-4bcf-a4b5-67d2b551ffa9", "sighting--b7e49614-b96a-495c-a7c9-9eb9285b25b0", "sighting--375f3782-c6c3-4f4d-a96f-6644fa56a6fe", "sighting--415aadea-423a-4196-bbe9-b977881f9a89", "sighting--33bd773f-d97e-4ba1-8f8f-fd430cd456d4", "sighting--99ba2a6c-8843-41fa-abb6-0615e9341fa7", "sighting--cdd5099e-e6c8-4198-b4b0-fb082916b612", "sighting--3a9205cc-a745-49f7-8b8b-7445635c7f89", "sighting--0ce60ca4-2b23-464f-8408-ed1f65136da7", "sighting--9ec6849f-72d7-435e-8d23-6babfdfa9933", "sighting--868c6c80-fb83-4655-9963-34082248b09a", "sighting--f4ca78fc-72c6-4794-97ea-7148e754eed9", "sighting--11792d05-e104-472e-8b0a-75e424d434ea", "sighting--1ded12b1-473f-469c-b799-f418e255f09d", "sighting--bd8018e4-3061-420c-a40a-c5f8e36f4994", "sighting--d727d482-5231-4876-8d16-49a2b302d8b3", "sighting--dd8e804a-8487-42d4-a589-3f9313a85522", "sighting--aa86502e-299a-4d7f-a47c-f969c9c7ebe3", "sighting--e0828973-d846-417e-8828-afb729deb69e", "sighting--5820b6c6-a58c-4485-b9c7-417aefe1ffc6", "sighting--87cf3f33-d6c6-4d3e-aa9b-70ab25204ae1", "sighting--298e8d06-569f-4bf3-a8b9-ee52c81661cc", "sighting--8ef88490-3998-4058-ae02-5b3f33767829", "sighting--bbd97190-bc04-4869-8844-fd5a3e0c2aa4", "sighting--97f9578c-ba7e-4f07-a3f3-bdbcf75239e6", "sighting--ebc90a80-918e-4b39-bd94-38fe2e1a548f", "sighting--859e6e61-da68-4fd5-aa22-8712c38a01e4", "sighting--e29d8e54-f966-43de-a9b4-67862d356216", "sighting--9abf0f33-b227-4300-abcb-98fe37ea75e3", "sighting--9f041893-ebab-4d38-9f2d-3019853044de", "sighting--145bbf1b-8b46-4f8d-af3d-e11dc146e9fe", "sighting--316214c6-c299-47f8-96dc-73afbe58dada", "sighting--c7fb3c06-34f8-4fee-a1d2-d8b9e11ed666", "sighting--4af0a7d6-2256-4621-8d8b-0750550b3b39", "sighting--fcc3c2c4-7dcb-47ab-bfa5-01d1636ddd37", "sighting--bd86887d-60e9-4592-a93f-7521e34c5ac8", "sighting--13c222e6-f137-4e08-8cf3-c4ec6e9fa345", "sighting--6748f7cc-9444-4245-8b26-d6336bc8762b", "sighting--a3cbe208-3581-4565-a3f1-9ef295a82bfd", "sighting--b7c9c5bd-b902-4c5e-a7cd-d832bebdff66", "sighting--180f8d4d-8c78-4e1c-b692-afc24abc9cde", "sighting--2335b0b6-2671-4fc8-93c4-3595d2519099", "sighting--3fd9057a-21dc-4a2b-9818-841a1e7179a8", "sighting--57fdb94d-395f-4327-9ebc-79b20870389f", "sighting--6920f495-86d3-430e-afcb-034691b1429a", "sighting--7f071bb6-7d8a-413b-adc0-1b14a5ca0aac", "sighting--39ab2c2b-296d-47b6-91bf-48b02966a7a3", "sighting--5e07c358-aa6e-4ed7-8f6b-28c341d74d06", "sighting--e9944a5a-59e2-44e1-bd0b-df00b6e536a6", "sighting--9f0f827f-83a9-4b6f-a7df-eda86c619ec8", "sighting--3cd69f9c-c262-46b8-bf94-6966effe8d57", "sighting--9149a95a-d791-44b5-9b21-dc16b1065692", "sighting--c6097a87-34fc-4619-bcd1-617ffb8036ec", "sighting--ce36909e-c1a7-4671-b155-089f5e3635c5", "sighting--a7df4ddf-7b1b-44bb-84a2-f54965a753fb", "sighting--6766a306-26e7-423c-9a9d-d8ba6d5c2813", "sighting--6e1f8cd1-f242-48ba-a634-a81e4e24b92c", "sighting--29267698-0986-4842-816f-472d886fc839", "sighting--78942c84-85f0-4b8d-be23-4a605365365b", "sighting--1ce5f73b-912b-4dab-8a96-960a6ed97741", "sighting--d90840fa-3ba7-4b1b-98bc-0c612e4206db", "sighting--1c828955-e8eb-4aca-a6ac-30c32c108ce4", "sighting--93e00196-368f-47b0-8a1d-16ad5579174b", "sighting--1bd9b393-f0dd-4db3-94df-335d070a901a", "sighting--5b041c23-6bb7-4ca8-8f79-faa2703b2df1", "sighting--9581ef29-c17a-4dcb-889f-f66a85c4876e", "sighting--3971c831-a2c4-4296-9d09-d36c43b9ed90", "sighting--0e6a296c-7bde-487a-95f4-296a3bd15a73", "sighting--0bdf30a1-c1f8-4b30-b48a-f6253c68ac1b", "sighting--b47c59bc-3f01-4a85-9981-913bc8885692", "sighting--4db5c918-7fb4-42df-a921-d019faddcf27", "sighting--ecdd0d73-32a6-4f14-8057-d6bb4f92a180", "sighting--d0f561c8-5b56-47a4-a295-b335531ef189", "sighting--55fe2f43-7a5b-46ca-9892-d00cf4dabfc6", "sighting--ba6939e2-ae3c-44f0-90a2-38c44ab8d11e", "sighting--573abda1-41bc-49f3-9055-1fef6024c12a", "sighting--e1662894-3351-4fbd-89e8-a627ff54190c", "sighting--d626d0b3-e376-41fa-beec-bf590d5a2c89", "sighting--2f541f04-9efa-454c-b231-cc6de284d584", "sighting--b588d711-7235-4340-a3bd-e4ff9a637887", "sighting--6724e30c-c128-48ac-b680-bfc7d7f4c568", "sighting--3a1943da-6342-4d41-bc2e-1ce8e67ef668", "sighting--6cf1a1a1-1986-4f32-a457-88f7d87a3f2e", "sighting--9b1d6c42-6afc-44de-92bd-49b3c991e50b", "sighting--3fe34ae8-65c8-40a5-a941-4af8d2708e5b", "sighting--e6a87998-c167-423d-ae6e-23253498233e", "sighting--e596dd9a-ce6a-40e7-b1c5-e036f662bdc4", "sighting--f3cf1088-d034-4b9a-9dcd-39e0041f84b8", "sighting--511ac55b-5d60-46f6-a8e0-1198e7f748c0", "sighting--5e326a01-3179-40a8-b1bb-65b78eacb029", "sighting--06a1b739-6ac4-41ed-9066-489426ce3d94", "sighting--b0abf378-fd7e-41ce-8a44-fd1b25de2f6b", "sighting--18236dbe-4fae-40b8-92c4-3402904a12ad", "sighting--d7e77bcb-6692-4bfe-8330-cf18cfb8ee98", "sighting--aa9476fa-b195-4185-8ad5-26b6bbcd6907", "sighting--224ae382-1f58-4675-91e6-b52ab29a0349", "sighting--1b6fef9f-f5b7-4e24-a444-238f34626266", "sighting--bca4645a-77e3-40f0-87a2-df97e28fa0e3", "sighting--e90c1104-bbf7-4551-85e1-55722ef23d51", "sighting--e3fce417-d91b-4ce4-91e3-0bf60176fdf0", "sighting--f4b01bc1-272b-4f55-820f-39decd0d4581", "sighting--ad7a6610-d11c-48dc-9faa-9567d11f9570", "sighting--22396ca1-cb5b-4b8f-9a62-9d8bdfb15bf1", "sighting--8451a733-53c9-479b-ae06-97d89b891fa9", "sighting--01524a23-8212-49f4-89e3-c4275dd0ec05", "sighting--d055a591-d96c-4de5-8b16-8c1bbdcfdcb4", "sighting--078fc41a-4a91-4c5a-a5cf-237a41504483", "sighting--c4006e8b-763d-4398-af18-1e272a46dc62", "sighting--4ef73cb2-ee8d-47fd-a64a-e32a3e70ea9a", "sighting--f1921564-18c3-44da-87df-d0ea6c775dbd", "sighting--fc1de208-f1de-454a-a7e1-40bc6f0e4a26", "sighting--16f1c0f5-41e5-414d-a967-9d46710a1a76", "sighting--d2e0323e-55b3-47c5-9157-5aa5fcb99ed8", "sighting--ffcc68fc-9c39-4d35-8e50-ec316df54b72", "sighting--085a6ef0-d5c5-463b-8b24-91b1b99f84a6", "sighting--dffccf1c-df74-4ab5-8dcd-5902a2689243", "sighting--36e8fdd5-10fb-4492-83cd-93e717d5614a", "sighting--1e58b28e-af92-4059-bdd3-cc05a3d2f3f9", "sighting--82479127-8a38-450c-b472-e2e3bae6ad8d", "sighting--8e987c7e-081e-4414-8cf2-e96300320dce", "sighting--71eb3424-b536-4488-9e77-088279d45f77", "sighting--1415d8a3-1083-4a75-95e1-017b4c07334d", "sighting--a3866edf-d42d-4c03-abd9-4190e7055e2a", "sighting--321629be-1669-43c0-96eb-d3359152037a", "sighting--f40d4497-e565-4298-9cd5-a9cab766177c", "sighting--c7f8fd7f-288a-47cd-a9fe-6753715e00e9", "sighting--7572ab8c-15fd-45ed-a25f-93b6113cfd57", "sighting--7127fa05-b548-44f4-b8fd-dc5a78d3212c", "sighting--a1d586b9-71ac-414e-83df-ee86e36a4826", "sighting--e8977dfa-a1f2-4bfd-aa8a-8d39bf5e0b83", "sighting--167d64e1-a379-463a-8aa3-7935367f733e", "sighting--9b796d9c-1ec8-4d19-92a0-0cb140b78698", "sighting--ae851ba1-7cfb-46ed-95ee-c36a22ee21b1", "sighting--58b9c98d-b7e9-4b5e-b72c-a6dc81fbb0c0", "sighting--1e54393e-c845-4ff7-beda-2f1643d9b754", "sighting--e744712a-3809-4d16-985f-d0716cec1e23", "sighting--9281ff27-4286-4fb4-9249-a220c627bd2d", "sighting--dc20205b-5e0d-4d1f-bfb5-02e3092ec3ae", "sighting--ce57e016-778f-4bd3-bb27-fd24a15f1d0d", "sighting--0372fa0c-7fc3-4164-bcd5-52f9cfb403f4", "sighting--ec87aec9-bf08-4c5b-8c2f-8bbc5ef11016", "sighting--27786941-ff6f-4c82-96d6-184b8907d8fa", "sighting--770b75cf-3bfa-426d-968b-95fb2ae931c1", "sighting--3a24b235-ecdf-48ee-9333-ec49920b443b", "sighting--09dabe88-7a64-470a-90bf-74f2f3deea81", "sighting--d25eec96-f495-4603-802d-378e17b19923", "sighting--6acd6148-8470-458b-abb7-43d705c5eaa6", "sighting--02bad2c5-a432-4eb3-ba08-daca2d8806d3", "sighting--5d7ba3ff-90d4-4ab3-b3fa-704753597095", "sighting--157f0ed0-0cbe-45d3-8109-eca20d67b9ed", "sighting--8b5f679e-03df-4b10-9405-399bb3d1c8e6", "sighting--b47057e5-c815-4e28-9d86-c0d74c97da82", "sighting--0e9d8b39-3577-4f5f-9477-61c387a69f8e", "sighting--526793da-8fd1-440d-a83e-678c44c4a497", "sighting--3dbc1228-0d63-4f61-be36-77137d64eab9", "sighting--3eb6ac7e-253e-4ac6-9e00-5d3157d521e0", "sighting--32d7a09b-048c-485e-bfb9-dd16878c0999", "sighting--653eed1e-e724-4d21-8e64-eff18d2ce04b", "sighting--242516e5-0cb0-4583-bb7f-0deeb00d8237", "sighting--6eb02b8a-8eaa-4011-b0ba-a672824ef571", "sighting--627fd5ef-662b-44e0-b384-18ee3b0264ff", "sighting--7a9e79c5-35db-4c74-ae40-8f5daa6fcf8f", "sighting--998f2f18-2fe5-4682-939d-058f527938ad", "sighting--c2f3804f-077d-4501-9ecd-ee5c66eae994", "sighting--69bbd2b9-de71-4bb8-b01f-39d95652d86d", "sighting--6e0adf99-2584-467b-b0c4-6f31da4220d0", "sighting--5b8eb9a8-c5af-430d-b1f4-745c81d35cbd", "sighting--c5a4e006-426c-4022-8027-a43ce8dbd873", "sighting--c81c5a9f-186c-4f2e-beff-8a01d2aeb0d5", "sighting--71f41635-11c4-4071-8a93-b814477bb1b1", "sighting--1e09dfb1-3db1-4648-b7dd-65a1d8ed4b0e", "sighting--7c32d219-897d-4ff2-aeb8-213b72ecdbf8", "sighting--a3d4f7b0-0a36-422c-9fd6-09506f203500", "sighting--432e893c-7eeb-455c-9437-df2ca977f656", "sighting--ee64a964-e07f-467e-8185-71e3f57c1033", "sighting--dda6fe52-faef-46e4-9dcd-7d76ccc2d578", "sighting--a51a901f-a116-4d12-953d-dc9db771a138", "sighting--ade88f3b-871f-4a3b-9795-e12ba5962cc0", "sighting--d9b34767-e6ab-4ace-8654-ea8539c9d1f5", "sighting--032db849-be85-4d0a-a2fe-ec482393886f", "sighting--41f23915-aa9e-432a-8381-7c6fa68a14a1", "sighting--1e7e7e6f-f7db-4fd8-a1c2-302abbf16073", "sighting--162f9e2f-3597-4928-9aa2-e47f1a4a2d95", "sighting--3d0a7495-6f96-47cb-8dac-fc16cef2f5d9", "sighting--fed1d388-66dc-4663-ba47-9879a989b896", "sighting--ee30dc96-c505-4d20-9030-7ab377b3fc8e", "sighting--b0189d83-effe-4fb1-b01e-4f29ee52d128", "sighting--f8e6580f-6227-4f87-bfd8-c5ba3e12b0c2", "sighting--77d22994-7812-46a8-a90e-5ceaa16a13be", "sighting--a70ebbf9-7c0a-4a9f-b788-b5246d9e5db5", "sighting--b74dee77-4551-49f5-a59e-6193c42280c7", "sighting--45ad46e8-8c97-4d45-9834-aa16c5e15bfe", "sighting--c23c589b-bb48-4628-bdb8-594befc3e774", "sighting--bb6f71b4-a105-4f48-8797-b23cecafbcf9", "sighting--78a67d94-b497-4946-9e53-fd59868e5eff", "sighting--d4309de5-403c-459e-a3c9-064a32837aa0", "sighting--1fcf1683-af68-45fd-b48c-474436f82a68", "sighting--c5ca0d0b-a22b-411e-8fc0-6b129f72bc17", "sighting--915eceb1-9aba-446a-b6be-cc8dbeb40efd", "sighting--a9def8c7-b9f7-491f-8e14-668509bab0d8", "sighting--d5a47792-c8a8-44c9-a184-75803b80f9a8", "sighting--6f044027-9dbc-4892-8ebc-5254f9a76a44", "sighting--9598328c-0bc2-40ce-a6a6-c89a3b3aa108", "sighting--8adcdc7a-8c0e-4679-b994-e6e9338bc53f", "sighting--cbba8307-dc5d-490e-9f9f-f6658bd32a0d", "sighting--e8979d6e-07d6-42e1-a462-1c790d78e01e", "sighting--7e12f429-512e-411d-a2e9-359ad56e95b8", "sighting--0dd4f414-ff42-4af2-89c2-d9867a955506", "sighting--5a722b89-bab0-4b5b-8832-e4be400eaae4", "sighting--d783be46-4386-481d-baa3-aa77ed800d10", "sighting--7263018e-119e-46d1-b8a0-637f3eec9e4e", "sighting--5182e75b-f9dd-47c5-97b1-f45a8f1fa7e8", "sighting--2f13cabf-4779-4957-86fd-a7bfa329c95e", "sighting--4e7aee6b-dba3-4da2-8cb2-92fd797ff9e8", "sighting--01642ae7-4133-4634-a715-2a71c8fe8979", "sighting--a079183d-1602-47ae-94b6-766fcc6cec48", "sighting--4cae9a5a-45ba-4bcd-bd2b-8048894d197d", "sighting--2697697e-28c0-4844-95fd-091927a3396e", "sighting--5a3f0d72-e062-4251-b971-f57583639ab0", "sighting--c37e8121-184c-4fb5-b232-0e5b79160298", "sighting--672827bc-91fb-4f6d-a657-d8faa6e92e48", "sighting--d9b9e8ee-081b-4edf-a6cc-3225001c4551", "sighting--241315e2-e332-4c18-8c87-5531cb5739c2", "sighting--1a93ae41-807b-4024-81ad-898c59bf5905", "sighting--9217de44-535a-43c9-b66d-516def0628e9", "sighting--d9514b81-3f7d-4689-904c-d1f59f31fab5", "sighting--3a3b8b51-76d5-4bae-a754-2fb3f73fa8f0", "sighting--5fe93ce4-8ddc-4d0e-9d9e-40a47471c2f2", "sighting--ec21e11b-e360-4693-a527-0431baefb0a5", "sighting--38a49b0c-e5ce-4277-a364-9cd11acbe950", "sighting--6d7540c8-76b5-4ea5-b012-8d46434138c5", "sighting--82dd8664-b9b4-4c1f-a4d2-486ecf325d7f", "sighting--1cb78141-8cb0-4cf2-9dc4-f39307719057", "sighting--a19e3a18-7782-4c83-a64a-206e55c791ef", "sighting--67e95331-b313-466c-82b1-e078d37a8d56", "sighting--59aaae15-ffd7-4db9-befb-8f67bdde8835", "sighting--4243219f-0285-49fe-b612-91d719fa4131", "sighting--3f066232-0270-46b4-870c-a6770f501a5a", "sighting--6170056a-9d17-4c1c-b60e-ca66cdcd1bcd", "sighting--afd358c5-2c9f-4bd3-8d3f-c51188dbec3f", "sighting--fe1bb1eb-d15a-4328-a93d-b0a6cc024d3e", "sighting--199b3433-dac6-4702-83ee-bd3a518c2806", "sighting--7d3103e1-5add-45fd-96f0-5d7505765749", "sighting--30a7807a-c706-41aa-a9f3-1828b6099090", "sighting--da64414f-037d-4293-afa4-3848056a2935", "sighting--139bb13f-75e3-4dcb-a708-e1272cc384f2", "sighting--2062fd49-df16-419e-a2b6-6393bb22911b", "sighting--13d09096-2192-46fe-800f-969e46960a99", "sighting--04bc6ce4-b0a3-4508-9670-a2fa568834ce", "sighting--0d3ee4fe-bb67-4659-97cf-3948104f7825", "sighting--6de83816-f7a7-48ba-9ca7-47627d3366b2", "sighting--dae0847f-9803-4097-89aa-10bb927f96dd", "sighting--b9d884b6-c017-4a94-afa0-c1ce81c0a0ee", "sighting--44ee06a0-b449-46b9-a8c2-986ea3bc456b", "sighting--12e137c2-a2b6-4caf-b22c-175e0d211866", "sighting--2cd37894-4abf-4918-bd80-1f97f6a353e0", "sighting--b4970988-3e29-4b5f-82b8-84b112f1dd16", "sighting--706c652b-5929-41c8-895e-beee0b64882e", "sighting--e8ac1a65-1485-4955-b768-179b36604b49", "sighting--a3b78b81-3cd6-4cbf-90bf-fdb3b1345cc0", "sighting--f1d7edf3-d870-4f6c-94ab-768ef806d9ed", "sighting--2827dfe0-400f-4e94-83aa-255258028485", "sighting--ab415873-47a9-4466-bf38-f14590ad82c1", "sighting--4f69a413-bab1-4425-988c-3d4ac92ab71f", "sighting--aabd7d0c-280f-4840-bf0b-4c8c48208dd1", "sighting--b9428af0-4561-4ab9-8120-3b266ee1d36a", "sighting--3dfc584c-1c52-4591-a2ee-30beed1dc7ca", "sighting--c02c97dd-a1b2-4536-9e84-9b491d4ee7ba", "sighting--a287d414-3578-4d22-b3d7-a15e406a4f15", "sighting--f09fb2a0-07c5-4fd4-b78f-dc86fd8436a7", "sighting--c2dfd861-07e5-441e-889a-bc1fd905cc91", "sighting--ca59fc10-fb77-4e38-95be-27db88174f29", "sighting--9cba72f8-fe4e-449c-a5ae-39ff56d91a3f", "sighting--9e393784-e9b3-42bd-ad47-e4f9c994db23", "sighting--01389b6d-6b24-44ba-a162-0ab80ba15835", "sighting--09d9a8b3-f8e3-4314-ace9-c42309159d24", "sighting--8b7cbdf6-5e41-48d9-88f8-11fab8ef1233", "sighting--45ebb801-e87a-4b7d-8e7e-a5730ff4ebf0", "sighting--01b0d9d0-2754-45b9-81a6-2c351d714733", "sighting--709a70fe-c973-4fbb-9365-6ced6980b57b", "sighting--4f9aae8a-84e5-4106-b27a-6315a5786b55", "sighting--6a900408-5da7-4f16-805f-a9cff81d1f0e", "sighting--dc867a46-7911-4bd7-9125-63004f709b2a", "sighting--c4028305-e77d-47b5-a8d0-931a046ab7a8", "sighting--99da9a4d-89d1-411b-863b-8170f68daaf3", "sighting--ce42267c-f4ea-4326-bca2-1f7fca5fcbfd", "sighting--e5fea622-00cd-42cb-a4ac-5742d620a0f9", "sighting--acbd1f4f-8e0d-46d9-94c6-923dcf751f2c", "sighting--230dea9f-d49e-4d8c-8983-779428ddf5dc", "sighting--1607cc7c-26ee-4314-b39d-e93049549738", "sighting--0290eb5e-b30e-4432-9854-e09c0e197e89", "sighting--e2aeb8ec-e15b-40a6-839e-e71061880e08", "sighting--7f51ec3b-d8c7-4fb6-8955-3220f3b2a3b0", "sighting--ccad87b1-45dd-4371-be62-af4232d79ee3", "sighting--0fce6152-6db8-4138-af0a-e5a4cd8aa3ef", "sighting--94d4e22c-fbf7-4397-84be-62819916cf7c", "sighting--2c338469-d0b9-4ec9-9e71-ce8423ae75d4", "sighting--47b8d1ea-93f9-47d3-8e6c-cc480db7a379", "sighting--fc1819be-5d18-42c0-b777-7bd364812abc", "sighting--aa5b90b0-1975-467c-9638-527fcb507deb", "sighting--d8b4203d-56a6-4d06-afd9-cbc524d906e0", "sighting--0b1da757-a175-43fd-ba00-f1416629acde", "sighting--518da315-4d29-4c10-8c58-32a62ae0123c", "sighting--635f642c-e910-430e-8146-24137b9f9fee", "sighting--844688af-1768-4480-a4dd-3066cb6d650d", "sighting--153f564d-da95-45cc-a733-01a3e38120dc", "sighting--6f57bb74-cbd4-4081-9b94-2c4a281e2248", "sighting--c5ff67a5-8825-4c76-9a27-c4be615a5d0b", "sighting--a9b14c16-bdee-443f-b91f-ed4122ac013d", "sighting--335826cb-f249-4dd4-bda3-93213497e398", "sighting--ee2fae70-b221-4d28-bef4-bca6227e6f59", "sighting--2cb9bbda-7949-4540-ac25-de23cc9ee498", "sighting--219be23d-adaa-4bcd-b392-a836fad60947", "sighting--bf76ba5f-ad66-4814-8e7e-eb9c0b8d2734", "sighting--49f3d933-8dfc-4411-90b3-b575df23de16", "sighting--b39b7e6c-fed1-449f-932b-ddf375fe673b", "sighting--6aaf1d0f-79db-495e-87d5-5ab3bd083c07", "sighting--ffc0d05c-db3c-4ed3-b970-53d9fbb43200", "sighting--57f638e7-863e-4816-9324-f27ad3746e32", "sighting--abc9b311-f9e1-4e69-b279-66fb1d0a6730", "sighting--8fe6d2e0-a712-49a8-a4b9-5f5013c1ca26", "sighting--419c0172-ed8a-4b11-bbeb-42541ad4d737", "sighting--3e220c24-dfc3-47d9-84cc-4b1cef023986", "sighting--95a49e64-985a-494a-82ab-b130f4240ef4", "sighting--8878f602-2839-467a-99d1-540248d62545", "sighting--ce88b388-9574-4624-a2ed-3b86dfec2fd6", "sighting--30c91f60-05eb-4e1f-ace9-5b5dd0b038c4", "sighting--2dbb7550-82fb-412c-9f68-b3a26ae439d1", "sighting--08b7c292-ef66-4e3b-9df8-fe2ec001ea48", "sighting--17b84937-0681-468d-8bb0-5bb0bd264dcb", "sighting--1c6993ac-40b4-4d1b-aa95-ab278a709a16", "sighting--54731b77-5c4f-4779-a583-acf7498e38ef", "sighting--852833c4-301a-4afe-8e86-e6871d2785ae", "sighting--7d5ab308-2930-44e4-bb69-a0e91ec5ca54", "sighting--9de712eb-cab1-4268-b1a2-363f5c800ff9", "sighting--13125b5c-3b15-4793-920f-5159a3232c30", "sighting--1ecc4a62-9591-4e9e-a9ed-5e7220edc814", "sighting--1cdb90bd-c0db-43ad-b4d6-1b7af6197553", "sighting--0dfc8267-0289-4e1a-bad2-a690225ca42a", "sighting--716b4a07-3010-4b63-8939-1c6c15271337", "sighting--232274e0-f6cf-4f77-92c1-1c7a95fb766e", "sighting--c59d5c8b-09c3-4232-b412-c1363543d83e", "sighting--acd41e48-142f-4a70-9570-c90802a70152", "sighting--24630bc5-1c5a-4f65-9656-9e5bd05aa87e", "sighting--3a1ea0af-bf45-40d1-b988-34322677a6fa", "sighting--a1480cfc-3622-4711-bc9d-37ee2de085fd", "sighting--59c1d34b-7232-4de0-81a2-b33242463d75", "sighting--f9d7f6f9-d4bb-4636-9773-559d28753ab1", "sighting--018f92bb-adf1-4aa3-bf8f-160d4c76785d", "sighting--8d613b0b-1827-414e-a8cd-79f4b8bc9291", "sighting--fcb701bf-884f-4ac0-acc7-b3d2e4e263b6", "sighting--a0f2540b-95ff-42af-bf3c-971875ba56b8", "sighting--0ca7af51-430b-4076-9150-a615b53aa16d", "sighting--ec956b0b-70e8-44a8-bc49-fbc3ca8fc8a7", "sighting--09193890-ed83-41be-9d5e-0768a5e22151", "sighting--d31e4cff-04ae-4a96-b61b-58cb9a11b92b", "sighting--a87ecb84-1fb2-4eb5-9fb0-7998a8f1f4f8", "sighting--c749235b-4afa-4c1a-860f-d4a263bf18e6", "sighting--04b0b027-4edf-4a0e-a4ec-632a94bcaf4d", "sighting--1d5a304d-1d61-44aa-94f6-4fd47f6ad3eb", "sighting--a056deeb-015d-4bab-a1b6-86f329c3f87a", "sighting--2f8285a8-95b3-4e77-b302-57067c42ad98", "sighting--8c04bcd7-ef22-40bf-aaf6-e303af972b30", "sighting--0912076a-65da-4329-b9c5-bfbffc19776e", "sighting--a35bdb77-4577-4930-800d-9acc62ac783f", "sighting--aae869c6-cb0d-4570-8fb8-253d1d3d338b", "sighting--6bd3af8b-10b0-409a-b889-ddec2013a858", "sighting--828d09fd-3811-4bdc-b4ab-5e26baf1eecd", "sighting--54b33187-0a1b-408d-858c-0edb7b683532", "sighting--2819056f-e525-433b-b78d-af45dd7e074c", "sighting--176a2ce9-b4cc-441c-bf7b-e20c33161c70", "sighting--88d8f3e6-ea1f-4f1d-a41a-b0400ed15fdd", "sighting--532ce193-1a2d-4660-ab48-afca847fb453", "sighting--808f293a-67ea-484f-9764-f912f947fefa", "sighting--df890131-02ce-43de-aa1a-ee985b1f1057", "sighting--342d5115-490a-4941-96f2-b71f4387a4bb", "sighting--f6086f97-b3ec-45af-baea-f0d34b8d452c", "sighting--12bb75b0-145b-482b-b0a1-1ec0c282b06f", "sighting--c7adc37d-4740-407b-b82b-9d33fd688095", "sighting--0c32f056-f226-4115-bee8-14ecf3594cec", "sighting--d1ffd560-1bad-407f-807a-a07d73bc5f84", "sighting--43652390-ca54-4dc9-a2dc-9e9b15ca88cf", "sighting--18d1a783-088a-42f2-876c-8889a80974fa", "sighting--d431881b-4e1e-4091-83d2-a06d8126ba04", "sighting--4944ded8-2bec-478c-8f5b-7e5191d6ae66", "sighting--a580f72c-9c98-427d-92e7-82ac273ab9f0", "sighting--aee0fdc4-e4a0-47ee-a887-fa674defca77", "sighting--04ec3a6f-42bb-43f1-80b8-1a06a7e57ae0", "sighting--840b7b46-a6e7-4763-bee8-ef9bd837cf03", "sighting--ef70b66c-7e58-474f-aa68-11b0e69e120c", "sighting--e077656d-a8e3-45e6-b9bc-7cb384b38591", "sighting--395e3945-5e08-425a-b74d-a38001dd39b9", "sighting--9c1e0e08-1a14-498a-91ae-cc86aa858890", "sighting--fe870e88-df5f-47b8-a1e3-fcbbd6e08eef", "sighting--40531252-cba5-4344-b2b3-2d9ebcbd1ff6", "sighting--c9352234-87b2-4c2c-8348-9e18611600b2", "sighting--e3307baa-8d27-4bb6-9cb6-dd65ef3e5c7e", "sighting--b9530335-e2c3-42a7-abf3-deff0b5e70e5", "sighting--cbcdc3a7-1cb7-4b10-a8ce-37318b92300d", "sighting--a15a938f-38ed-499f-8293-739be3b46944", "sighting--7e956cf5-9a70-419c-bb84-7aa4af1cd7d7", "sighting--0f177f67-55b8-4251-8dc3-fa75deb76d57", "sighting--d7e71882-c6e6-4654-8344-fb99ad4411d1", "sighting--ef6ea62a-379a-4faf-97ff-a57c52801540", "sighting--e4e911c7-78a9-4fa6-afaa-f82d90243daa", "sighting--44a7768a-1228-460e-a168-9c115fdc33b6", "sighting--53828ff7-e0b5-4793-ad18-7cd482cd4488", "sighting--379cb848-579a-40ab-80e7-2fe82994444b", "sighting--47d4ae81-b1b8-4f27-be91-f72289faae74", "sighting--4ba5078a-849d-4ada-b4be-dd37dba6ecd8", "sighting--70292e39-8bf5-4283-b817-54d52f75b9e5", "sighting--6e7e3ffc-50af-4ec0-b423-34cc54b53793", "sighting--3dc73812-4276-4b3a-8f78-9e76d0c81881", "sighting--1033b67c-017e-4c2f-848d-e311a403ec9e", "sighting--ee3fa1a8-9e4b-4808-a4c2-cfe2f8fe5f2a", "sighting--2e2630d9-a1e1-4735-b31f-e22a67ec47c2", "sighting--5dda31d1-2b97-4758-b41f-9c07ec98e163", "sighting--1a42370c-43aa-499b-95a6-2e6218623c5a", "sighting--95dc8b69-81cb-480b-8337-f03fbf3228f8", "sighting--10d32c92-c05c-40b4-a7c2-42335d058003", "sighting--9397e843-837e-4010-b017-1cb556248e4f", "sighting--3a7716b1-7747-4184-a401-82db80fdc40a", "sighting--bb928985-6c5a-4829-8bcc-28dd9e854760", "sighting--8cf1ffcb-2c77-42d1-85e2-63a93c56023e", "sighting--260dcc5f-9593-40f3-9b56-278be44e8cc7", "sighting--1e32010a-bb64-410e-8763-6fd0c8b454b3", "sighting--6d8c56d3-af1c-4b32-a608-41103e71fdc6", "sighting--83c6acaf-1e0e-4c7b-9d29-6fb1a814d584", "sighting--19182cf5-898a-4bf0-a825-654b24ef87be", "sighting--032102a0-cd72-4ad8-86b6-0d0615afa77a", "sighting--e15b6161-2550-4c90-9ee1-a5c5a235c056", "sighting--73d7de61-4cf0-4c2b-ba2d-37bb6a376358", "sighting--e876898f-ed81-4892-abbd-3387e809cc60", "sighting--435bd32f-4fcf-4149-95c8-fd94383dac2b", "sighting--98581cf9-8b9b-479f-b511-1dcb46a5553a", "sighting--75702bb6-d377-428c-a1f8-19b5708e7b2c", "sighting--a1debd6e-8b67-40ef-a9ca-e51d2d2f29e3", "sighting--b46d6578-6bbf-4f6f-89d1-200366bb8f5f", "sighting--c426a0fe-4693-465e-bf51-670af17cbb37", "sighting--e8b6ca3c-97ad-41be-aa3a-d513c7955d44", "sighting--3eedb1a5-b1f1-4433-8246-c9509cacd94e", "sighting--f271ac73-6d4a-474e-96fa-af70a706e67e", "sighting--07abde46-4e95-4e03-bd5b-3e2869240141", "sighting--a3c36a0e-8492-47a4-b677-557ed528acf9", "sighting--6d8a9dc0-6358-4a2d-9c02-398be9f181ab", "sighting--30dcbcfd-35be-4f39-8c04-6cee984cf8d0", "sighting--887de097-48be-47d0-9e19-597656a67730", "sighting--f219601c-2693-42cb-9d53-57716d329f21", "sighting--7b7c4c0e-30ba-40f9-9714-d1394dba2d68", "sighting--a3527395-be3a-4cea-8469-dab94259eeeb", "sighting--419b8d9e-6662-40e8-a02b-32aecbb990d9", "sighting--56962651-6f19-4921-9327-65ba581aca6a", "sighting--51013c64-12f8-4995-b6b9-fb993b1ae619", "sighting--bd941483-1cba-4ed3-96ba-5d9c5e51ae4a", "sighting--eb408ed4-b812-4622-bbde-a051aa3db5f0", "sighting--ca5ae7c7-c3c4-4394-b675-1fcffa6ee20a", "sighting--cd98f7d0-a9da-475e-a679-d76f8fe16e5f", "sighting--fc669e5b-1c87-4eaa-8575-372aea57d906", "sighting--59c85705-71cf-44ed-b9dc-f84b0202ede3", "sighting--76166db7-8c75-4986-9e33-46eedfdbed71", "sighting--22800dc7-6780-425c-9573-19e38143cf9d", "sighting--32c82da5-9e1f-4092-9486-d96ce88de685", "sighting--c978eb57-fa40-4b01-8ee8-f1afd0a439b1", "sighting--da19977b-c5f2-4bd5-bbc9-441f90432494", "sighting--57ac6616-262d-4f57-a515-8167c108ac1f", "sighting--7faaf05f-5e29-46f5-b12e-8cfc9ce2afb6", "sighting--949a1a2f-8d14-48a3-870d-1b0bd2da6d8c", "sighting--24602eaa-0895-4d60-b6f2-48d98d741dea", "sighting--b79a35b4-452b-4c39-8eb6-81bdc04404a7", "sighting--a4290a6c-cec2-4977-abc6-42fcb55e8f48", "sighting--248d6c2c-661c-45a4-a393-d4914ebde641", "sighting--cb17c1bd-18f3-497c-81f8-92fb93355103", "sighting--4b882700-d567-408d-b78e-90b341bff2ac", "sighting--f0230737-6074-4c1d-9097-d531d91dd0d7", "sighting--b07266b0-be3c-4d0f-9118-c3b420043127", "sighting--8800b209-b042-4856-8977-98fb101d611c", "sighting--371eafd9-3a78-4832-a857-cd3758894f65", "sighting--f51e3c57-1846-4c0b-860d-c8e90dc58e36", "sighting--7101d5fb-dc0b-4848-af12-f3abebfae1f9", "sighting--c681e0be-269e-4fa6-874e-500922109c84", "sighting--841ca809-62f9-4afc-a64f-3d120a40f830", "sighting--08813d38-be70-464b-a266-7b39cd518852", "sighting--0750ca2e-6c43-485e-bc81-1acdbcc39991", "sighting--e31f3eb2-9300-4946-a5fc-fd66ad259bbd", "sighting--307cd165-1c66-49ec-a5e6-297cd3317a75", "sighting--a2566de3-3eec-4340-b473-16875e541ebe", "sighting--cefdb8a9-5f10-4bf0-8bb0-92db353c68c9", "sighting--1097b5fe-0609-42ce-a5b5-1d4c7e2f3fb9", "sighting--b1b0626b-0e4c-49a5-8a09-ca442c48889b", "sighting--04df9412-b075-407a-82be-754e8be91842", "sighting--19ab7079-1cd6-462a-9775-e00d3fe247fc", "sighting--2c960c9d-a02f-4d92-a7ba-6da3e1caeea4", "sighting--71ae0cea-a514-4235-aab5-c4ee1eb07f5a", "sighting--938d41fe-2629-483d-ad66-8b1ca96d36c8", "sighting--ae87ff2c-6964-41aa-b7da-813e2017c6c1", "sighting--f1e8e748-ee6d-4c2f-9b88-c0b16b4a46cd", "sighting--c2b6d281-890c-48af-b446-1dabc4d4d956", "sighting--5f064290-026a-4b39-9837-1e8cf08000c2", "sighting--2e34b04f-2e59-47ed-a908-a31d2d598aff", "sighting--6ab18e40-c6c8-4b99-bae2-c933a851a459", "sighting--b7f41838-9737-4c7b-a0de-3cc055333087", "sighting--b5c34fdd-5c56-417e-9a4b-da20ad8c442d", "sighting--a385cd4a-ce70-4e74-82fc-378135b8bbbe", "sighting--c7f151fc-74ee-421d-bb90-392199ba9ef0", "sighting--b4e0a5b0-b137-47a6-a6c6-7c6d3dd09c51", "sighting--7a5c2a41-340b-4228-9857-6f7e459bb766", "sighting--a1fb9def-02f5-4e40-8508-59c5ebf3ceea", "sighting--2f1111a8-b6bc-4e5c-a622-77f56bda2085", "sighting--6228723c-e0ec-4be8-93bc-b8365e612726", "sighting--2031253f-01c1-419c-aae0-491026cb00c3", "sighting--487d7e95-ce0f-4727-988b-adff48e49dea", "sighting--5b9aaa30-9704-42ea-ad03-034313dfe82a", "sighting--eed1d0ba-e20d-4c6e-9f0d-7ab493caf68e", "sighting--06d59d56-bf8e-414c-9c91-788c545abc98", "sighting--5fc62f48-7f53-4bb1-b909-2860d685cc15", "sighting--1a6f216d-111e-4f10-8bc1-d8acf7eab504", "sighting--f9910eda-bc69-4502-bc2e-3782b86665e9", "sighting--e0fc015e-0577-42a8-b1c8-ec42a79b79fd", "sighting--5dec3230-1a60-43d3-97b7-a8db97dd2681", "sighting--08e189ea-1225-4baa-8b78-606d293fb622", "sighting--d9c28e24-6728-462d-a7e8-6941bcfb36c1", "sighting--8176fcbf-0b0a-4303-8450-78e538b86167", "sighting--c846be09-c884-4d50-80fb-b4b5d8bf05b3", "sighting--9059edc7-4a4a-4db9-b5c9-dd438f145556", "sighting--2df8c98b-d7ca-4e3b-b2fa-0aa46f3398b7", "sighting--a616ef4a-7ee6-48e8-aa76-4f2b65f61108", "sighting--b5af8d0b-4a17-4e4f-984a-a190a73db7e4", "sighting--6d49123b-4294-40b2-bf73-9a4a040221c0", "sighting--35d8cb4f-6075-4e10-9eef-15af91ead12e", "sighting--2f5e6959-030c-48f6-9f32-351e0bb88072", "sighting--54e7c21b-0ab8-4520-8ed5-57b395bb2590", "sighting--2e2ff8a7-14d2-45d6-8b66-481e7c2c8135", "sighting--629802b9-6e44-465e-a360-313fa3431186", "sighting--fe007155-5813-49f4-b53f-c52c5e7ccbf5", "sighting--2434c991-4b3d-47b9-854f-96f465db6358", "sighting--bce79c83-044d-465d-8e4a-4012b41ed317", "sighting--76b6013a-33b4-486c-b431-f537af2f257f", "sighting--1497a67d-5bfa-47f0-add4-17c920c7aacb", "sighting--f528eec6-c43f-450e-8012-1ed1cc8bdf87", "sighting--104a675e-48e0-437b-973b-ffa6c3ba1580", "sighting--445e900e-9494-4242-9764-c977ba123a4d", "sighting--4829ecc7-73ee-450e-ade7-9bcc75ff3b18", "sighting--53be3b5c-836e-4bec-8812-5c76169521ab", "sighting--41dc1085-a43a-460f-bf1c-2fbaf8cac223", "sighting--7bb64ffe-6cdc-463a-91ec-ec6ab65a3650", "sighting--43e7abfb-99bd-46cf-b1f8-d541733c8d99", "sighting--7495740f-764b-4afe-9797-0b72606d3a2c", "sighting--2404f770-9143-488f-86d1-891a3ac4f199", "sighting--012ed5e4-062a-4050-b882-9a223a4e11a2", "sighting--b7a717b7-8c42-45a6-9606-43b844f2740f", "sighting--0a9cee63-1af2-4cdf-8c47-33f2386680b4", "sighting--28accfca-e4c8-4207-892b-0c9cb72b1903", "sighting--84b3aa1f-eba1-4567-a998-d39a35efdda9", "sighting--63ebbee6-f60a-4a50-943f-daef442d29ad", "sighting--7c77d802-38c1-4868-adfa-f8287215c5b3", "sighting--dabc5433-5f3f-45e6-a4a0-355e25f4bdd4", "sighting--3604b6dc-7d16-48d1-abe2-9a991303d7fa", "sighting--94a20af3-291d-4b02-b401-729d26f4245d", "sighting--f020780e-5e21-429f-a7ee-96e159256758", "sighting--84d45dcc-a2b3-472d-aa45-98feace60b33", "sighting--ea3a7d72-4631-4e38-819e-5d20d53407a4", "sighting--0cf489c6-4cda-42fb-ae64-d45c582836cb", "sighting--a09909a7-56fc-44f4-b294-d71c4664a7a1", "sighting--05ada2ae-0a05-4ece-858b-e2215c37906d", "sighting--b9117ae8-db27-44d1-b1fd-556586975b7c", "sighting--a7ad5b63-1225-4582-9205-ae50478c9e5f", "sighting--c83ce0d4-50b7-4706-a5a4-c2e898f92e64", "sighting--572e65d3-73e1-42ed-a6ff-22476e5b9d75", "sighting--e05823ea-d2ce-4936-aaec-feedd528a1a9", "sighting--31fe8325-c30a-42af-960b-4b3478145da6", "sighting--db28b66d-5491-4d44-b002-15025003192d", "sighting--ea6b8192-c43f-414c-9ad1-171950150d61", "sighting--86663783-77a5-412e-9d23-83c7a46c10df", "sighting--c5df14c5-bdd9-48ae-90b1-6eb56c5b2766", "sighting--aee2e6d9-ed6d-43aa-9522-62aafa131b60", "sighting--0a2382a4-662d-4935-bf5a-0aed75f9738d", "sighting--f1697a99-3e06-41b4-acf7-00c4ec9d62c7", "sighting--99b34841-7ef1-4bba-98a3-0b27f77d8231", "sighting--f0a5e48c-1afe-461e-866c-394948184881", "sighting--1a0a1e1f-bf50-4692-9080-80ebf0a30501", "sighting--54e2ff14-149d-470d-88b8-0c1a9ab1190e", "sighting--612d2a7e-6ab1-4073-9a35-65c2f8e7175c", "sighting--f9196dbf-412e-400c-8857-e381bca3b0c9", "sighting--4f4cfa3e-e601-4946-b74a-2e9d05c36cff", "sighting--30fbf818-5631-4ba7-8aea-87be57f47fd9", "sighting--5476b993-5927-4636-8c10-80fcfe2609e3", "sighting--9a093b2a-7584-41a1-a409-8b9cd0aefe86", "sighting--2748fd9d-0328-4437-996d-ce8b945535dc", "sighting--5e03ed94-bd69-49b6-9fa2-e409af676a24", "sighting--552a1de8-4e1c-43c4-9959-cb86c476a6f5", "sighting--4c6f024c-f6ae-4506-81dd-a9b55f4b12b0", "sighting--6ac085f2-3014-45d6-b0d9-c002ee294574", "sighting--be8562be-5d0b-441c-840f-b1618b9d4bb2", "sighting--ac911ea3-2616-47d2-9be6-f3b2dd76962b", "sighting--1317ead9-a61e-4f2f-9886-ce6db0cccfae", "sighting--55a77813-e1e4-42f3-9219-1672b0b42bd8", "sighting--9cc001e3-13ba-4e4c-bae0-14ab0aa18c7b", "sighting--c079e67b-0333-4e90-ac58-b2eb77a6b777", "sighting--d9c2f2d6-2c9b-4ca8-b796-ebb779d8df3f", "sighting--35be99e4-6856-4a7a-90ac-ce17576d2592", "sighting--8a29f2de-3195-4f92-aa3a-602bef06dc68", "sighting--2c3283b6-9b6a-4ab2-8447-fba1bcaf83bd", "sighting--72ee61b2-199c-4b31-b63e-2a5a5500b958", "sighting--d3030ede-3d13-49db-aeec-d2c968625e0a", "sighting--9b445867-5218-4077-9cef-4516b204138e", "sighting--da09a009-f664-4151-8303-7b2d122d2f79", "sighting--710a6b71-0c86-48ae-8ceb-8cf870389c0e", "sighting--2e138ba4-7ec2-4c9a-b152-1b8f2dd50b29", "sighting--57940810-a452-4e7c-9f47-5dbcdfbdd8ed", "sighting--f314d40c-57af-4a42-a235-5b0cf7cc9a9c", "sighting--863a3386-c75c-45a4-a2fa-0aaf76180a67", "sighting--3fe3e3f2-6ccd-408b-bba7-8a2f71adba1b", "sighting--4b1a139f-5077-43c1-bc6e-dc4501e1d27c", "sighting--034fe6c5-adaa-4c8b-b558-72385ca75c4e", "sighting--2355ab40-876f-4d51-9452-c74f1f8b562f", "sighting--a4eb0774-32cd-4f67-874a-d9459b02413c", "sighting--2a6c3d2c-0ba7-470b-9eed-b9265590ce07", "sighting--f9c328f8-4716-4075-8400-138bd24b33cf", "sighting--257cdb05-bc93-4586-976b-bb3c9729755c", "sighting--57f9ea55-f3fc-45e1-8a36-8cb7cd49401f", "sighting--cb7fcdc4-9987-4e0b-b8a6-ae45e81e20f7", "sighting--2229a2c5-1a5f-4b91-88ed-517669164121", "sighting--896c4c8a-2afe-4944-88fb-239e7edc88c8", "sighting--de9c4231-b5ff-4b53-ac3a-09425c9799ae", "sighting--e6920353-a528-45f7-a89a-7c7cbba30de5", "sighting--f564b6b5-2dc0-4b06-8ad7-93e59e1827cb", "sighting--76627e84-b121-4494-8814-041b6c297a02", "sighting--d931f4d8-d333-419c-8a4e-101cec4dc4eb", "sighting--aa5c20ff-e095-465c-bd62-cc361bc0ab70", "sighting--6aac8370-9d6a-46c4-b553-0bf45d33b7b0", "sighting--81aa5200-0d26-43d8-882d-5c89104244e9", "sighting--05e090ff-a62e-4e8c-9fc1-bac38856129b", "sighting--7337f556-55e9-4c8f-959a-36236a312f1f", "sighting--4d73963b-974c-48f3-b501-f302b26784ee", "sighting--0d7c0ae6-5b0d-4807-a610-6ec3e7486631", "sighting--e3f3deb1-767e-4a47-8a79-8f8438743bf9", "sighting--ab9efc58-5e31-49bf-9138-7652ae6a24c3", "sighting--78d316da-725a-4461-ba42-cc5dfe44840b", "sighting--7c25939c-d462-455b-ba5b-299974492bc9", "sighting--7303b8c1-cc79-4b3a-8ec7-668e41be811c", "sighting--d2fcb1cf-7856-4b1c-ab35-b91523b4b535", "sighting--2dfacf53-8ba1-4a1b-891b-f3a2122410fa", "sighting--8719c7ba-08e8-497c-a001-2f9657cd26f7", "sighting--b714f024-6df4-4750-82ac-ec954b3b0e7c", "sighting--8a6aba58-3af7-47f8-be49-471876092319", "sighting--3e3c7736-4f5a-4da0-bce0-b76b3e3fba37", "sighting--79c96a07-7752-4830-b284-873ec1ab2f49", "sighting--006254ed-e5cd-4518-a671-0d8e81bd4990", "sighting--938e23d9-e3b7-4c71-bcd0-284c9a117e3a", "sighting--61c384a6-0b88-4923-a6e8-36a2f418d047", "sighting--81848945-8bb5-4a29-81c0-41add68347e5", "sighting--2344e5a3-c001-4824-a795-ed07c46591b5", "sighting--be7bc20e-b0a1-43d3-8fb7-c9bb57e42b5a", "sighting--1db3b0cf-24be-4c58-9fa6-288e7cb36010", "sighting--122ce5fc-1fea-4db6-918f-f1868c4871a5", "sighting--9fa07619-9b75-4bd7-acfc-da70572c98bc", "sighting--b686f4ac-bf10-4972-a4cc-22fa19b50cb1", "sighting--f6971077-b05b-458b-85ca-f9ccf96d3c1f", "sighting--9f43fdec-7771-4add-9173-6d8b42b05a01", "sighting--907da797-2e4c-4279-baf1-ac7fc05d4d7d", "sighting--a6f444e7-44be-4db2-a00f-045ea6ae8885", "sighting--2976d265-c767-4986-8d42-d4348a4b9ed6", "sighting--5fe945b8-42cc-4c5e-a4f3-18b02ff5eec4", "sighting--70c31a80-9612-4c6b-bdf6-12f92d9dfcc8", "sighting--e5d1b894-b81f-4bb5-8584-94c6d7cd9b87", "sighting--6b1356c9-e262-4585-8bc0-b46a26da04d1", "sighting--d0c5cb68-872b-433f-bc7c-7bb912940ea3", "sighting--a705ae06-697e-4f6c-a5f9-6153ef953767", "sighting--0810540a-353d-47e6-a948-3876c98bcd30", "sighting--c83ae1fc-6e0e-482c-a034-4f9e18e0d54b", "sighting--82b28080-e537-4f5d-8826-90e4178e0ef1", "sighting--fc595f28-59b3-4735-a041-bd707adaec9f", "sighting--9f85661e-3ff6-4f2e-9400-11dc518077bf", "sighting--30d53476-4b7f-44cb-91a9-27e01710c9dd", "sighting--68d84795-5412-4f58-b330-b9f729170528", "sighting--de7e6a68-fe30-4343-a84d-dbecb9edd9a8", "sighting--a48aa64b-0620-4572-b425-1a72e3bcb9d0", "sighting--f49d0cdc-dac2-4c6e-9fda-aea2c4e612f0", "sighting--fd3c2383-1541-449a-9b29-6474bdcbcc8b", "sighting--798d77d7-7d26-4274-99d2-c39d67eebf01", "sighting--7a6fbfd2-59cc-4807-9e31-071bbf4003c1", "sighting--07f11d91-5299-4ba5-b4f9-4465ab227f16", "sighting--078826a6-ddee-442b-83ab-fc698ef78664", "sighting--e1adbc95-00d4-401d-859a-94a142c781c6", "sighting--5f1e07bb-398f-43c2-9610-ce2482dc4d8c", "sighting--3d4de03c-0249-4b1d-b842-1cc243b2bdf4", "sighting--da76377b-0cd9-446e-a71c-563e7384e39c", "sighting--b685dd6f-2aab-4247-8649-e4a27a354000", "sighting--15bb9284-c9a0-41cd-8e7e-01a6c36b5449", "sighting--6b71f6ad-cf82-4d7d-90d4-ca32ed2d5423", "sighting--7686b932-3fc4-461d-879f-6be185f184d2", "sighting--07c933c4-29b1-43ad-a86c-47f69b7a8b4f", "sighting--575ae601-0f0d-4e2e-886d-cf44f5b1caa6", "sighting--a58de5e5-117a-4607-8716-725001773568", "sighting--8fac3374-d126-4100-806d-bb6d24d93bd5", "sighting--e9de1198-2143-4ad9-b118-8d4fa2ef2d3b", "sighting--81edea34-c641-43fe-8eb2-63be2f9c84a0", "sighting--8b883942-10b7-423d-a1d8-592ed7f57706", "sighting--7d243895-2c57-4fb5-81d3-df2ef481739b", "sighting--2940605f-7d33-4c57-b5b2-96c26ea13124", "sighting--d3b041f0-6f5a-474e-bddb-86dd6ce26e2a", "sighting--4fb7452d-dd84-4ee1-a025-f6d5fa5a8183", "sighting--f7b9bb86-1526-4164-b30b-37c5e3851a94", "sighting--bb4d6a0e-1f75-46f6-82e6-8aca41ad63a9", "sighting--a0edc10a-bd88-4330-8a16-75787eefc206", "sighting--7db2d1ee-8c73-44be-83ea-2fbdde24da7c", "sighting--9bb462bb-4725-4e09-b345-7ac0544478bb", "sighting--a8da2f9b-56b8-4c3d-9b1e-3fb03f4852d5", "sighting--80792ab9-4e84-4ef0-a3f7-56a3741d333e", "sighting--d97fd03e-9b62-41ea-88d4-b45fc4fc027f", "sighting--f870d4c2-f5ae-43c5-9ae4-9cc94e669749", "sighting--906bf574-380a-4e46-9f26-7a87f02b3956", "sighting--3cc9a35b-2cb8-4ef8-b2b2-038cb2a36a27", "sighting--e8ae0462-c0e8-4186-9983-3ccba82dcf7e", "sighting--e3341084-e961-48b7-a468-ed2f29266166", "sighting--4a4a9113-1c6d-4b1f-be2e-d7a9c2f346d4", "sighting--670b0832-2e57-4d3f-9a0d-c53abe0d64a3", "sighting--3668686d-d01d-4bdc-95c0-d07ebccd0ea9", "sighting--6a633e05-68d0-4b23-b2ef-e059b9d863fa", "sighting--e29d04a2-719d-40be-a638-0d2996ac375b", "sighting--716c12b7-8ee5-4b94-a657-2a71ea8ffae8", "sighting--455b3605-55bb-4556-9f52-6ac31af2ed17", "sighting--0f658d2b-7dbe-4f0e-9f07-4b957be2ae2e", "sighting--6a801604-8e34-4957-a0b0-e801db142992", "sighting--6ff68d52-f0bd-4897-b5ce-adf12cbfdc99", "sighting--8374afe2-9733-4f4f-a30f-5780711ee93f", "sighting--7d4ef832-ba05-4609-98cd-1eea580796bd", "sighting--f297c82e-4137-48ba-a8fd-fc8f8f3cb383", "sighting--d59870da-b000-4040-be6c-bb8fce41daf4", "sighting--15421a55-4030-48c7-9b07-a86aea1b821a", "sighting--e2560956-d29c-4273-99e4-1e00bb93a9da", "sighting--07ad8bf6-24da-49f0-9b26-1a88345447fe", "sighting--adf17312-8d1b-495f-b995-8e33e0e3a2a8", "sighting--1f8e94fc-2cd1-4ff4-99ca-33bc23c11ae0", "sighting--6d83d507-134d-47c8-9824-e65a85430ec2", "sighting--a0d474f0-8bcb-478c-af87-f0fd16b79e9e", "sighting--c948e7fc-54b1-4844-ab3b-50ed16b6b0f0", "sighting--f83c0ff8-108f-4816-8f43-171aa2a32cd8", "sighting--22d8edc6-27fc-4d0f-983f-9de43d22ee4c", "sighting--c4c7c2b2-441a-4c87-b17b-f3d7f7f77833", "sighting--ef60048c-fdb9-47cf-8f94-f61e1e84feb0", "sighting--eadd2873-4c9a-4ded-9658-661af4102694", "sighting--a170c211-692b-4be2-ae4a-58eba3c3da16", "sighting--d0047c5b-cb7e-462a-9b54-690a1458e373", "sighting--b5519191-dd61-4096-b0c7-80dcf634b215", "sighting--28579223-df2b-4fa9-8012-c77e92270afd", "sighting--5c776295-833e-4e06-a902-6f308b18ccd1", "sighting--064a8e1c-2853-404c-a7dd-69332d272ba9", "sighting--d6f096cf-7676-4e64-b23f-14801faa0fb1", "sighting--65cd6aa2-d143-401c-bb0f-fa9def2b089c", "sighting--f90f9cb3-e1d2-4b09-9f96-9db24cf10fc0", "sighting--e2efd543-78a0-4d0a-b6f3-c7f9b6070e5c", "sighting--ad1bf6b7-40b3-40ff-90c5-ac8f0f7d6cc0", "sighting--6e8075c6-071b-4e21-8759-b21ab871eea8", "sighting--6bed2be1-ce37-41d4-8def-0c0157f13933", "sighting--76633dd7-f64d-4023-8f92-f51a8499f9ff", "sighting--ce33ea90-81fb-4ec5-ad57-b208cf9e332a", "sighting--b4c54530-51aa-4d38-8791-99d423eab071", "sighting--7f754804-113f-42ee-9ccb-9f7dcb57557c", "sighting--26ce94af-f7a2-4714-970f-553b38bc0fe2", "sighting--572ba5a6-2fc2-42cb-955d-b87196e49ce5", "sighting--f7c864a0-fedd-45d1-b940-de857629b2fd", "sighting--b9db9706-4e55-41ff-8adc-6656887d5661", "sighting--10607dbc-fd4a-4d62-a695-da090dfc3527", "sighting--a2754604-c0a3-4b04-986e-9c318bf593ec", "sighting--aebabdb1-fb75-4411-9972-938a6724fea8", "sighting--5631c373-e3a5-4466-9b3a-ae639722976b", "sighting--76b598d3-30fb-409e-a694-b920ceb21a2e", "sighting--f0112f3a-6d7f-41f7-bb94-01ec01954332", "sighting--f10fdb32-d206-4f4f-8208-9850da424c0b", "sighting--a54637da-3efe-4ea3-a46d-597ccda4a17e", "sighting--c646388d-238e-4527-b83f-340645fa468b", "sighting--c46cf965-365b-4c8c-bc64-3d89d11bed7b", "sighting--a7b3a75d-d1b5-47a8-a239-2fcae29ff231", "sighting--784e9fae-cec2-42c5-8c12-6442a3db25ba", "sighting--64d090c8-0139-472a-a88b-60ae948cafcb", "sighting--ef682283-81f0-4f65-9260-2d6e1e02f15a", "sighting--0ee954c4-2e94-4f72-b151-fb54085a193f", "sighting--1f2c6a81-012e-42ff-a38b-fba1391e1287", "sighting--6ea68114-e482-4760-baa3-0fabae2475b3", "sighting--bef93840-acaa-444e-be5b-4fb71a4cda1b", "sighting--ff86b57e-b885-4ae4-9c85-f60ec5dbed4c", "sighting--cf802d18-84f0-42fe-867e-c95aa49cf6bd", "sighting--f8228dca-06b7-4823-989a-72ead8026eca", "sighting--5166bfd6-8e59-4e32-83d0-eafb82e9a7de", "sighting--d4667df1-2342-4917-81b4-f9d383eee308", "sighting--e414989a-1d8e-40f1-9bce-c43efe51afd1", "sighting--5191c1e8-ca8f-48ff-b9f9-d41167b3d33b", "sighting--bc8feecf-1fc0-41c7-8bdb-ded81515ca8b", "sighting--f1741f62-e188-4c1d-a45c-e1269f92645d", "sighting--554a0089-963e-4c38-8b3f-bf06ea2d96a2", "sighting--3aaf71de-2bfb-4d62-8ae6-5ab37f8decb7", "sighting--3c9daed1-db4f-4ffe-a13f-43487ab7d409", "sighting--de8fb67c-d486-42e0-ab54-fec2184e74d4", "sighting--9835fed9-2787-4bf5-9fe8-74b977211ad8", "sighting--56f24f4b-d6f1-4c1b-9e93-7a420ee69c12", "sighting--45af9900-c61a-4367-a540-b75a8bc054d1", "sighting--786606eb-ed30-4a24-aeed-38c1ffe87c8f", "sighting--6d13c5f2-3afb-4aba-80e1-69e551579f4c", "sighting--a6e13a1b-1bc9-4934-a240-7af341ed2956", "sighting--4132fd0f-d4cf-4f9f-a6e3-4c9a3e0e6f8b", "sighting--2a82133f-bcb6-4eea-95aa-ef9e31bc0b3b", "sighting--4f3dd107-96cd-47e4-aa02-39523c099ec2", "sighting--dc4ab0d4-71c9-4f20-b820-5121b1961f81", "sighting--df93bd11-47d6-437e-9f4d-6e28ccb4736f", "sighting--9e41cfa0-f571-470c-98cb-b5925d0a7a57", "sighting--ee19c559-3cd0-4d5b-b493-d14ab6910054", "sighting--bc9079af-ca6d-430a-b677-6ab300109276", "sighting--4e16239b-d536-4f14-a468-4f935efd292f", "sighting--c6e1f27a-e032-4a41-95cf-fffdc6e7f4e6", "sighting--f6c07260-3b85-4491-bbb9-d7172c53ac40", "sighting--6ccf3cfc-8aef-48f7-b798-084e3010ccb4", "sighting--8012b234-f087-4e7e-bd90-d1174f00c46f", "sighting--c3c79176-d75c-4e83-92e1-160f9b98a636", "sighting--f09c34fe-7628-4b62-bef5-12b74d7fedcc", "sighting--9e1760a0-e83b-4e14-9ef8-f931dda130d1", "sighting--4717e5be-c0a4-49ab-8f40-d287765eef6d", "sighting--c6d95ef0-1ce2-4472-a99e-2ca5e87b8c24", "sighting--ecdb252b-2d92-4c38-8606-ecea07419ca8", "sighting--87cf8966-a592-4e7e-a748-ce48fdcbb386", "sighting--f60e4b85-2835-4ac2-a2d0-5bb573994d6a", "sighting--7375602d-a108-44e5-87e3-d007c77d7d1c", "sighting--90d4d4e9-1ecc-4795-a154-405d287b1f7e", "sighting--456e7bbd-c122-4eeb-ac81-5c8977e957d2", "sighting--f7d78344-5e36-4c35-9f3b-a0739adb314c", "sighting--8a37a750-25f8-4954-a95d-bc6dda60a147", "sighting--15089afe-a62a-4504-b224-bf9f9c2847af", "sighting--67e2e2ca-a7a8-4d61-9949-606fd060e3b6", "sighting--fb69c64f-a813-4bb2-af2e-5dc449c1dbf1", "sighting--d9c9f1f5-5981-4721-856b-d64090555602", "sighting--008b271a-00b0-499e-8b30-44bc4115e917", "sighting--a5aabaa9-0997-45bb-a856-e0bea3b7dbd5", "sighting--5594f95a-d3cc-4acd-b9aa-aa04041d57ea", "sighting--02c73a96-41fb-4266-97a6-b0a54433ef62", "sighting--8dd92b53-c3c6-4279-9aef-a169197079dc", "sighting--485f520c-27e4-49b9-81e6-9b73373713b8", "sighting--fd452767-6a29-4c1b-8be6-ed3e96f5203e", "sighting--9c4315dd-c036-41e5-8bac-874a01330d7d", "sighting--a64341e4-c7ee-4e1e-b1c7-b171777f5bde", "sighting--409d0205-5af5-4553-8592-1e2214f14511", "sighting--01c08f9c-87b8-4290-b584-113b58af1739", "sighting--a34dcca4-983a-4e93-a74f-268f8e4c0878", "sighting--5995bf42-7d94-4144-9879-3ec81ce6e6e2", "sighting--28f30678-6750-4185-a4f0-902d6509d0f5", "sighting--0db3044c-5141-4088-af4a-3b0fa58d7090", "sighting--fbe3f9ee-db23-4ce4-8caf-512e0dd636c0", "sighting--9a51c3ad-7f18-4de4-9fa4-051f1ce39b44", "sighting--17a9743d-8a1b-470f-afdc-afc58ecebbf1", "sighting--271bf8b6-a2ef-449c-a247-65d851aca039", "sighting--222a2b5c-2087-44ab-acac-0ba056b48ab6", "sighting--20be0063-939d-4c93-978f-f7f869270dec", "sighting--ddec3e63-5292-40e6-aad4-f2c8c0584933", "sighting--a92d535c-2c83-495a-b2aa-f9fe94b31146", "sighting--70466807-b294-4037-8b0f-534c01f7fa72", "sighting--bc1e9509-69ae-459f-9469-de2642affcd6", "sighting--ce11ef37-2e0f-415b-88da-0813e2340a54", "sighting--9a525364-628c-4b7d-a77e-317afdff67ce", "sighting--1eb44dfa-1f03-4d47-b6a5-9ea8e16fc3ed", "sighting--269e1b8f-4426-451a-ad06-1a484a927e71", "sighting--5b59522b-d187-4db9-8557-b3e2b864e03e", "sighting--f7f69f40-5720-4cbe-9cb8-ed89452fa23d", "sighting--9a7bbcd4-8ae6-4add-8797-16f5d676c848", "sighting--e33ab276-43ba-4898-b58f-210cfa034fa8", "sighting--9ae714a9-8bc1-4b2b-80b9-368f090e906f", "sighting--a9c5626f-a754-4404-b905-55cae7190e3a", "sighting--e4e6d86f-ccd6-40f6-b653-340b2755c2aa", "sighting--3f462250-a80d-491b-adba-56e288053a08", "sighting--c0dd9c4e-a920-408f-b758-02437297dcc0", "sighting--c9787438-b43d-4676-8910-f1690f70ddf8", "sighting--c3dfc1eb-45e1-4be6-81d6-1a726e249d6f", "sighting--c635252d-b090-4209-b45d-1eb69c001990", "sighting--1074c481-0cc1-4eee-a421-52f5e1b2107d", "sighting--f3bf96d2-7b10-4525-b447-544c6aa78c76", "sighting--bff510c7-dd2d-461e-a5e0-4ff86b38ad1c", "sighting--bd88b9eb-7090-4e20-87d9-4fe659866e21", "sighting--443c0835-4831-4368-89e0-91cad262a750", "sighting--45757a9d-57fb-4422-84de-c76e1d1cc983", "sighting--45cac2b3-29b7-44c3-9b2d-832e7dc205d2", "sighting--95288a4c-3530-4304-958a-03b0a097b4c7", "sighting--1ffaf9a8-2ba9-495a-a77c-c70e799dbbf7", "sighting--a58239ec-75b0-44c1-a5b4-e42c318570b4", "sighting--c9c92530-7c95-4f2b-9d32-81dc4ada41ca", "sighting--1fcdfe4a-50cb-4b73-bb48-5ca1fbd37418", "sighting--0bec5f0f-c046-49b1-b5e2-bd9bc2f1964c", "sighting--c0a9ce7d-5955-4dc0-b431-21d998bf019b", "sighting--60a742ba-55f1-4bf8-9f94-f0d075c9aed3", "sighting--6cbf3f1d-fbe7-44fc-a1d3-94a4ade3d5a9", "sighting--28edbffa-943d-4679-ba60-1e4095f3e160", "sighting--efd21d4f-8ece-4c50-a8d3-257b07300cf2", "sighting--8c26eee8-9c83-41eb-a803-cc031aa33676", "sighting--49b26414-9ca3-4b3a-9fc3-fe7d53c47053", "sighting--cc301bb4-bb44-49c0-8fd8-0a2334b32660", "sighting--a0b475df-076d-432a-a50e-75473d2d45bc", "sighting--bbeb6cc7-f989-4d74-8e41-c8caa3600925", "sighting--cfa9ee8b-f828-41d9-8780-b55740d71065", "sighting--823d3d20-6ae9-4239-bba6-def7be272a9b", "sighting--c813a6af-36d2-4b8a-8d58-dcbc5f5998ec", "sighting--ece0bfc2-fa50-438e-a5ee-15210a7ef51a", "sighting--37e8932f-0aa1-492b-97c7-4a01a539f999", "sighting--d3ce3009-13e3-4700-96a6-10e47c099254", "sighting--e4a769cd-ee65-4492-af7c-b3c5772a9789", "sighting--1e4582ca-31d0-4d3a-8b0e-3676f56a89d3", "sighting--ae467d35-71ce-42ef-a050-9b7e38b06523", "sighting--368e71f5-9294-4724-a081-79386d17be5b", "sighting--b618255f-61d3-4ad3-9b9b-fbf8ef0c9526", "sighting--0a30bf60-3914-4d2c-979b-046c643d3ae4", "sighting--ce58eb53-d030-4ca0-984c-6ed1a10ffe64", "sighting--fa631bc9-7847-4c75-998e-8e57f6bbfdb4", "sighting--ee4f1eac-8aab-4500-85ec-503b35778ba1", "sighting--7a4b5c1d-3435-4b48-97d9-6daf7b4e953f", "sighting--93be4d5f-b925-47ce-bad5-cff9bee6030e", "sighting--cafe8f69-39dd-41ad-9d7b-9bf5d27cba83", "sighting--43dde581-8e72-48c6-b70f-7d5e0ffcab03", "sighting--be2ec3f9-af1e-41a4-be3c-dd8b741c9806", "sighting--6ffb5938-31f7-49c5-b171-f35d9e4f1063", "sighting--71e68aab-20ab-4dcd-93eb-b13fb3b122d5", "sighting--8fe0a891-0765-4383-9e9a-f651224df46e", "sighting--992b1ac8-bc7c-4081-934f-e0965875ba85", "sighting--a305321d-af7f-453d-b688-5b9b3bc55a0c", "sighting--0525b052-580f-48a6-88f5-4d9db4226b7b", "sighting--71142910-80ca-45d9-b782-fc4d5622396a", "sighting--9e132b19-e98f-4e8d-a67e-a1c0e923c536", "sighting--a196d481-afc8-4dd6-a490-3592d88e26c7", "sighting--6ae76af0-617e-4859-9ff1-0b26739b843a", "sighting--3ae8aa73-9bd1-4093-9324-04c6d9b24a95", "sighting--9a6bf6c4-f056-4649-abbf-338b84b65891", "sighting--34bf1b88-4b47-4c48-af8c-a9a11f64ed88", "sighting--0982aa6e-b7e8-4d85-82e3-f13e60f779a8", "sighting--f8673387-604a-4f63-84c4-9930ecd0cd83", "sighting--6086c8d5-0f57-4a04-9689-6548ee1de872", "sighting--847de3c0-8996-4ece-8ae8-0db2997e8692", "sighting--aed1d12d-ac30-4acb-86a6-1363c223deaa", "sighting--be74d0ec-3ac3-4e8e-a5c9-63addb4038a6", "sighting--0daf56a6-7312-4354-907a-433cb3d5331a", "sighting--cc298d5d-f56b-4b94-8066-a6cfc45694ed", "sighting--b2a60a66-1a7f-4038-839b-90f5fd2be924", "sighting--ed05f914-e282-4bc7-89ac-e4b6da4ecafd", "sighting--ca3e5370-75ee-417c-8f5d-c42d38e196f7", "sighting--6fe99bc6-8212-4035-b453-cf4a9d2da80f", "sighting--6166742a-013e-4a6e-b230-ed9d953f9b0d", "sighting--60aea705-b730-4518-a495-a59cc15d6e58", "sighting--5d5b190a-25fa-487f-9335-6b588032b0b0", "sighting--272e5383-aaaf-4acf-a0af-cc7cefd6c7d4", "sighting--534e093d-e757-4612-b3e7-9cad3af62234", "sighting--f1818117-b044-4d2f-8f1d-6197fbe883e5", "sighting--898e6e95-3fee-49d0-afc2-b8499620f955", "sighting--4f2ec898-e5e0-4034-bad9-5566bbbf7c92", "sighting--7c2b87ea-5144-4349-ad09-87e3ed0ab65b", "sighting--440c5cd6-79b2-4e21-b3d6-539beb5ed354", "sighting--9977bd90-84aa-4c36-97d4-7ebf69111d6b", "sighting--bff5eb92-56cb-419a-afc9-9a1c224b407e", "sighting--2033abf8-fcfb-41ae-a1bf-e4ebd5916822", "sighting--39caaee1-fa72-46df-a8be-6522d023779e", "sighting--0ff17bd4-46ac-45f8-ba59-46ab4cb2dbe9", "sighting--afd079f5-aa8e-4b54-b92f-d77799680386", "sighting--1b4835c5-5685-4d67-bc01-0632de8ac0fe", "sighting--b3f95d94-e866-478a-bdda-a3e93ce591bc", "sighting--e36bf120-fb95-4f95-ad2b-00e7f8a985cd", "sighting--c80d67fa-8f1b-4d6d-bc50-0058f48c5295", "sighting--01887c70-a51a-4c72-a1ff-6d7097f94d61", "sighting--f16c1295-892f-4482-b914-b23b168b4f4c", "sighting--05800551-7c43-41e1-9818-5f0bbdc4d381", "sighting--180a847e-7d97-4092-9bdc-cb49b0fbb3f3", "sighting--24fb614d-6d93-4261-a297-65dab01cd5ed", "sighting--9dcedd7f-4017-4a37-a683-d02f30ad9146", "sighting--41ddc2c0-d7de-4121-a35a-a87567f55100", "sighting--372625ba-8bf5-4e80-a69b-33d820b1e282", "sighting--a2927cea-e82a-43f5-a9d6-a0af1b2ee73b", "sighting--01df8df8-54c3-4579-8a1c-1425b8de3780", "sighting--cf777990-a39f-4f38-a119-fa0e1a8d3e49", "sighting--a4ed4b52-a14b-40f2-8d38-8aa25e255907", "sighting--4851e39c-2bbd-4a89-8a83-5952652368b0", "sighting--9693b6da-ec12-434a-85e0-70de588d104d", "sighting--c200fe29-358d-4894-91c4-931717576413", "sighting--3d0b45a8-ebb5-4d0f-a5a5-db9816da623a", "sighting--6c124cf0-a828-4019-ae31-e46dc69c9fd6", "sighting--1d42f5ec-2caf-47a9-b9be-f7dee19a8fc6", "sighting--b7f7732f-8dec-4519-bc45-e917525e0d48", "sighting--a1bae1de-72e6-477d-b03f-9bd8699bae54", "sighting--78a27b99-5cbf-41ae-9a45-f43523c520d4", "sighting--3c9c5fec-33c6-48a6-8ef0-34a7ebdc3864", "sighting--4eef9f7a-b9a4-4a54-9d92-c6bd57222624", "sighting--1767ab17-bee1-42ab-8841-492b53dfa15c", "sighting--6436ed1e-966b-4a8a-bc71-5fa76a06c879", "sighting--f60971a9-7440-4e12-88bb-c519f84d8e81", "sighting--990aecd9-9e9d-4b04-ad07-ef2992c53a18", "sighting--58e3016a-58af-4bab-8e9d-8ebe9054a1b2", "sighting--dbaf948a-d28c-4f5e-9665-3e3f77ce63c5", "sighting--3052f28c-e4e3-444c-8ad7-54ade627275f", "sighting--e9c63f6e-eb7f-4261-bb00-2c08f45d5cd0", "sighting--90a4affb-c8c6-4735-b652-427a4e5ac192", "sighting--d04d2481-91b2-488e-81c1-82128d1361ba", "sighting--3f5418ab-0799-4dc7-9699-b106b666baf2", "sighting--0095749a-f1c3-4376-bae0-a2c79801e2ae", "sighting--cef90f44-0776-4ddc-ba21-6b4b3a154c64", "sighting--93d883ae-4857-4418-add4-67e5a34f6c01", "sighting--09ab394d-d0dd-46c0-8580-da9d58daf474", "sighting--5b1a1f04-df3a-4887-aeae-f4e96d06612b", "sighting--c2f690f5-e693-4048-8511-d666bcfedc7d", "sighting--5130687d-5be7-4dc8-85a8-0c5840891088", "sighting--4516872c-1b12-4e25-a436-30605fdba37e", "sighting--615fe69d-fcf1-4886-b3c4-1becc9a2cb35", "sighting--ffd2e0f7-a20f-4c81-810f-91cdb87623fc", "sighting--ea0f25e9-88fe-4997-9323-c37db9f5b0f7", "sighting--fd580097-a52b-448f-b692-490a2d0983bf", "sighting--ccdc2d49-0256-466a-abf8-2b27bc17c0b9", "sighting--e4b67848-8a72-4784-8b6f-b126aebc1655", "sighting--76db5643-c420-4259-9fb4-6417f6f648c0", "sighting--e2d0dc78-15a4-4e10-9e5b-d0b7c56a4c80", "sighting--e3c59df3-a725-425f-b9c7-62f9d2d8cd19", "sighting--124e22b6-db1c-4e49-bcbf-60234c7bc699", "sighting--2364b3f9-6131-4d80-be8c-ca5e04aeb60e", "sighting--3de62b4c-a578-4c96-8eb2-b67ba894b960", "sighting--b1886578-2f62-4226-b2c8-6e06b55077e7", "sighting--3aa6e5c7-dd55-4b14-a3de-424ef009ff98", "sighting--dddc9494-0e8e-432e-b154-df66fb039a9a", "sighting--fb7cb381-cf0c-4a9f-b74f-d9972995e280", "sighting--f349f5f7-5f38-4715-871e-24d5fff9dacc", "sighting--3a6ad88e-6a8f-4987-8a8a-e659dba685c8", "sighting--d83bb6a1-9b7d-4669-b9a2-d04150afd171", "sighting--9f6a1303-4291-4e0f-9399-d44164d262c4", "sighting--acbcda1b-3570-4dcf-a362-0fece55ca3ca", "sighting--4f0388f9-51a4-4ea5-bcd7-9dc9b409b40e", "sighting--7e1fef59-be8e-4c89-9373-beac12638e9a", "sighting--e146e61e-7a59-47cb-8842-086f1e32ccb3", "sighting--9ef12ab6-d939-494e-adbc-305cc7412558", "sighting--da3babb7-dc5b-49d6-b0b6-c0837823bbe0", "sighting--8ca8977e-7f62-4e07-86bc-aa2308ccd1f1", "sighting--5209526f-b4c8-47c7-93c0-929884516cf1", "sighting--47a29086-ed8a-4c7c-9e1a-2a19263be7f1", "sighting--1ea0d628-1542-4897-904c-d1350a122f9b", "sighting--584a31ee-a7b0-4b14-ac73-b457bae4ea75", "sighting--b34f2b91-c5f3-4b7f-94f7-eea499f956ba", "sighting--ff18754c-aef4-4f6a-bc77-a0d92d3ae8bb", "sighting--3ec389a5-862d-40aa-ac39-a73e81639c86", "sighting--c3c54c80-beec-4fd0-b3a7-5bb098dd0d0e", "sighting--0b11197c-b53b-4141-b6e3-67a2a952be04", "sighting--8192f30d-9fe7-47b0-afbd-ff8301101c0c", "sighting--f8ab8e8a-5634-41c7-85d1-73376695387b", "sighting--bd9f900e-02d2-4c56-b5db-d7d0918bff0a", "sighting--8a24433b-49ba-468b-b881-24160cd1a974", "sighting--c0c1ddea-eae4-4823-8fd4-d6bcd4226706", "sighting--188fc992-d694-4464-94cc-1eaf461d7618", "sighting--ee135d6e-2993-403c-9a01-b653f1233257", "sighting--2b048e74-df9a-4e69-98d0-0901904b9aef", "sighting--0cfade8e-7cea-4e4f-b175-1f6989a3fd2c", "sighting--c872e436-b20c-4afd-bd08-550b675365d0", "sighting--2fb3a802-7b6c-4600-86a9-8f278632b8ff", "sighting--f27157d3-6ae7-4867-8c39-99a5bfba17f9", "sighting--72767321-2301-4e53-9bd4-5035e49032d1", "sighting--6852338b-165d-41af-8159-ba81ba42a772", "sighting--1072a7cd-2910-416d-98a0-2e4f10943bc8", "sighting--a478cf9f-fc06-4d41-837b-d1f435d7a513", "sighting--f209171b-e51f-4689-a2c5-d3933561cc5b", "sighting--74a72c01-4360-47e1-b3fd-760f6103d91a", "sighting--93fe4c2b-73aa-4b07-a082-e8dcbfe4c902", "sighting--14d1715f-852f-47e9-a2e5-4d6e3dfbce36", "sighting--b830b66a-bac7-465f-90e6-bfcd386ed9fe", "sighting--ecf79818-8a5a-44bc-8b01-7557a7454cd8", "sighting--7b0d1be0-1034-40aa-80ce-03f89ade00b3", "sighting--c934a588-ec22-4d0c-820e-7ae3a6c80315", "sighting--0ef8ec7d-f1d0-4312-8c99-f6520fba421f", "sighting--bac42687-a4f2-4a5d-9fda-546996743282", "sighting--71466217-610d-414c-b36c-227ee44b87e4", "sighting--2809d4e2-4fc6-43c6-a032-ebf87da79b25", "sighting--2dc7d443-3995-404f-a8f3-8c381f6863c6", "sighting--62700442-f5b6-44d1-8009-f0367f53a191", "sighting--69a65c36-a2a1-4895-b306-a0ca27d9a310", "sighting--d7a21c5c-92a2-4c09-9ad3-cf60d728b395", "sighting--5c6b0a4b-d080-4d33-8c2b-a07cf95bb529", "sighting--de9784de-2756-4e33-bdc5-bc4346c7a986", "sighting--d50071cd-aebf-4ce4-8400-dfaac64c12ad", "sighting--30f7623d-3304-4f90-ad76-fe0c8870e65a", "sighting--8b47a60e-261a-4e09-a9a7-39c7be7ff8bd", "sighting--97d20b92-b891-4ba8-86cb-726a53886a76", "sighting--f9235c2f-9165-4fa7-8a94-010e59585840", "sighting--5944a46e-eeda-4079-8100-e51d2078587b", "sighting--be23c2a7-d2ca-4a20-98b5-29821de0c2a1", "sighting--4f6f24dc-40f5-4494-b959-fe2b2c542f16", "sighting--4dea1fac-624a-46a1-8771-dca00db594f6", "sighting--def40b04-237f-4c7e-8464-ae5d61045909", "sighting--aeae5241-70fa-4756-aa4b-35cdd3b7dc72", "sighting--152e8089-0598-457b-9f43-4198d20b5d6f", "sighting--e9229548-d779-4e25-9d22-44ea9cde3315", "sighting--974fb99c-3bfb-48dd-be66-93a8e7956667", "sighting--7e213c1f-c973-4cad-bb01-a54b1f2c5305", "sighting--3d32ee0f-6187-42a3-801b-0e177d29b2ea", "sighting--7fbf473c-e672-47d0-bf83-7110462dc5ad", "sighting--4f7ac29e-ce3a-40a4-a3a5-2225ea7e798a", "sighting--1e083816-3e06-4257-a84d-1b6c8146747d", "sighting--77c6850a-8f7a-46e1-86a2-91e0c5d912ae", "sighting--e260b109-a413-4439-868c-8dfe8f1fee8f", "sighting--5d5fe594-8d12-4338-acac-4559adffc702", "sighting--3ac599de-72c6-4543-8adb-3c4acdb86530", "sighting--f868d72e-d32d-4376-b50e-4d0cce4393a8", "sighting--1771b252-4ad0-48ca-9ad1-d7c04e3cc013", "sighting--81fea92c-7b46-4603-b470-488813e2b852", "sighting--592b69c0-98db-4ad0-9d1e-06251bc39717", "sighting--07ca2d3e-356f-41e3-98d4-49fbe8c77b54", "sighting--318aad7a-9eec-4842-936e-11752d21c140", "sighting--addd59ad-f88d-47ae-8e08-0dc0d3e67577", "sighting--bf8c6c05-9af1-4a1d-9599-d76feb4567de", "sighting--294f60fb-6892-4826-b2c4-ec402cca7569", "sighting--753751f1-1b5a-4e78-9475-244b4b1046d2", "sighting--6fbbba88-aca8-4606-b4a0-9af0a0cef4dd", "sighting--f00a83a9-3c49-4fdd-b676-a6e923b81638", "sighting--9565bf9e-a2cb-45e7-8831-b499585a03c3", "sighting--30a83af5-405d-4b89-9077-c347baf2b73b", "sighting--9a759532-4329-430a-a6c0-ce94bebdee81", "sighting--f83b2d75-e636-4c7e-bc7e-2ac6445c61f8", "sighting--69a60139-8ddb-4650-9c9d-cfe739e9dce6", "sighting--85a44090-1c4b-4731-bc23-5cb4d8fbb6f2", "sighting--d1117c6d-a7ab-4a20-96a1-f75ad5890da1", "sighting--d551a39f-0617-4d9d-9715-6b9a0df524f9", "sighting--9ab3eb59-c916-4ed2-acc0-958f03eb8b87", "sighting--c173dbf0-c779-4ef6-a046-86e052be0a34", "sighting--02c7d2ea-5634-4747-8888-963b46c54b1d", "sighting--fa11a1b8-6160-4781-be03-2b41df7964d4", "sighting--89395ee3-913c-46c7-928b-4de22e12ae41", "sighting--0f739854-b9bf-4e94-8832-32bfd5dd1a11", "sighting--d76189c1-1184-44e6-97c9-aff589b9cee4", "sighting--486c02db-9e5d-4f7e-85ec-6dd8cc3f8330", "sighting--91083eda-3ef0-4832-8ade-dbedd59da244", "sighting--20c1043a-825a-4075-8e72-1db32810386a", "sighting--64136e0f-3aa6-48c7-837d-5fcf1fcc4796", "sighting--cf5e7b9d-f30d-4cdc-9850-d1f5d9fc8d8a", "sighting--ed3d5df1-a8ab-499d-a531-1a05114a7975", "sighting--afaf9f6f-cecf-4f16-b527-a5758d5f81ca", "sighting--00584f7d-c02e-4abe-974e-7438835f3d92", "sighting--a8e12231-ed92-4af2-a6fd-be6dc178aa9d", "sighting--56fe86f8-20fc-49ca-a5e4-75768d3caf19", "sighting--19a3f7ca-5f51-455e-916a-728249f8d4bd", "sighting--3e119a47-2c19-47ac-88e1-fd98fb56f503", "sighting--e61876d6-7b47-4a32-bef6-a968cd46e54f", "sighting--0829b56d-7eed-4794-9e59-5adbbbd74c91", "sighting--c9f479ad-3880-4e0d-a6e7-bb5f6052dd23", "sighting--5cc149c8-5fa8-4219-b007-9625fe479973", "sighting--704b3a16-ff62-402a-a256-1a62d8986033", "sighting--1638c4e8-bfef-42c5-8652-e1bc970341ce", "sighting--9b788f46-23b9-482d-9003-64bc2bed0531", "sighting--a84ed915-42c4-4627-b980-1cf51af80715", "sighting--9eb90a9c-0ddf-4626-9960-e695f9b34a43", "sighting--f1a7bf3c-f2ba-4eb8-98f4-aba5a153a853", "sighting--a1b90124-27d8-4598-b644-e006abbcbe5c", "sighting--025134ea-e5ef-4c15-a4ae-51d2c0f41f53", "sighting--dc44631f-1d09-4a13-8c0c-3ac0ac37f791", "sighting--8ceaba1b-4d37-4d21-9b02-848107b7daf2", "sighting--7824f92c-d99e-4e23-af5d-54f84b556dd4", "sighting--e4d34cec-5034-4a7b-a00d-58fa2984d30a", "sighting--99aa095c-8431-4429-9d42-57d868932b50", "sighting--a761e1df-0c3d-4724-81f5-a62c3ad5a37e", "sighting--0bbda147-f673-4d66-bfba-c4712b6d7f3c", "sighting--854c4a0a-ce44-46db-8db7-9c9d7accd032", "sighting--2159656e-688a-4151-b53d-82aa8ef695be", "sighting--e19e1e52-40a0-46ea-88ff-2ab46440a8cc", "sighting--638d6c7f-d850-4ebc-8e96-a1429364ac43", "sighting--1f90bffe-4c14-45f3-9d55-fc21151c3e4a", "sighting--cde5e67e-4731-49ee-bd51-c3df69fcfc9a", "sighting--af152206-c9a4-43ac-99bc-0e5fe0f487d7", "sighting--532f2491-6463-4328-b2a9-27b920f456dd", "sighting--1b2dce89-a93c-4d7c-83b4-aa35c87ecc53", "sighting--9730f7c6-17a0-4c77-b2eb-a74f20fe2fae", "sighting--5635b43c-3e7c-4a04-8380-07a82111fd78", "sighting--88da5d0e-026e-433e-ae54-d135f7bcd9e7", "sighting--0ad3ba43-1d7f-4422-b5ab-42833cf5d6f7", "sighting--55bf83ae-beb6-4164-b06b-8181b464546e", "sighting--53db878d-d59d-4b78-b862-9b91878bfa78", "sighting--9efddeeb-b7b3-40a6-9627-bce8ff7bfe67", "sighting--63025d25-4205-4706-b129-e6e13844270b", "sighting--5ba28287-7bd6-48be-b2b9-0c4949d495c4", "sighting--998fbaba-d668-441e-94bc-759373c9231b", "sighting--be10eba7-c3cf-49e8-aac5-f4a31619eeee", "sighting--5313c68b-af2b-49e8-8244-01fe47cd17fd", "sighting--f841c0e6-8058-4d72-a1c8-1c8d6cee7d34", "sighting--08a606f3-b4e3-41b0-8adc-0017bfd4f78e", "sighting--dacce1b0-fa47-4239-a97f-6f08ab069ca6", "sighting--d0a1de7f-a264-4fa6-b7dc-54944ff5d645", "sighting--4c9f87bc-349c-4a20-b282-bb92b8bf58b8", "sighting--5a431060-d48d-426a-84ff-854178ba00f8", "sighting--e536c3d5-ac41-42e4-af70-9c5a3c13ac08", "sighting--7c8d92a0-b896-4ea9-b22f-12c86af4fe7b", "sighting--56892d54-f7ea-4c7e-9e1e-77d0e30d8c19", "sighting--dacabeb9-8626-4657-8056-000f04e438b9", "sighting--14e556e3-bf39-470e-973b-d3d7713e9ba1", "sighting--5dd90699-6b75-42b2-8dbc-aa5d99251c83", "sighting--cb808e84-9c2b-422b-b155-a6aeb06f918a", "sighting--65a5da0f-fd8f-4bd3-b851-c9dbf56262f9", "sighting--7788b217-7869-4065-bc63-bb9c4e3f590c", "sighting--400d6e86-7dee-4e98-862c-0c572cd846d8", "sighting--470ea5d8-55a7-4bfa-a80b-e3aa9edf2c2a", "sighting--fa5266c2-7a03-4fa0-85ed-5f362dc38bb7", "sighting--0b6f233b-4577-4b31-acf7-836e496b1639", "sighting--32f42c58-3d46-4471-99d7-aaf2a9059a42", "sighting--0101f9d7-f0e0-486a-8e86-01edcc1882b6", "sighting--d34307bc-6c4d-4ac5-9cb8-d3413abde881", "sighting--9e28d7c9-7bb9-433d-acbb-c3c72ad34421", "sighting--4a33065e-8940-4d58-9c0f-0933521b5f9f", "sighting--8368dcda-83fc-446c-9345-342f47c7f754", "sighting--ed1b6544-79a3-466b-9e07-505ee8f6e732", "sighting--0e86464e-8c7c-41bf-bc9c-1bec8107ed5e", "sighting--ba1fffbc-53c3-49ef-9469-186034ed51c6", "sighting--77e27f11-1a43-4c74-8c7d-1e3730cdb0a4", "sighting--da840641-3e69-42e7-a0a1-e3f40df75242", "sighting--6f5661f4-3eb1-4fe8-8d63-ff8f531b50a9", "sighting--aeeebd08-0280-42e3-8c4f-3e4491b8d80e", "sighting--8a243bcf-6728-4d9c-849a-a99f20aa3020", "sighting--08c076ef-6865-4f22-9541-d8875c86c70b", "sighting--70ed9b9d-3c6c-4e9c-af5e-05f41ba5a12f", "sighting--058bdc02-e8a9-40d7-a827-15f02463f23f", "sighting--2539e525-4675-49e4-9111-619d51ddad6b", "sighting--6dc64f32-dcf3-4962-90e6-9fccd05fad6b", "sighting--d407ff76-a0a4-4c68-bad4-ef0d5a1c7939", "sighting--12e9b872-7541-4024-a654-fb90f793c51c", "sighting--7be0bd00-f812-40be-af41-ef80d57433d5", "sighting--c5dd94a0-acfb-4004-9867-ed6a6c0b3e08", "sighting--d9e77d42-abbb-467a-ab5f-90f6e3fdcbcc", "sighting--ef6a0ef3-0d30-4b66-aa1e-e8827610db9d", "sighting--42a7317b-7adc-4475-8599-51125fa68c49", "sighting--970a7177-18e5-4a58-b085-486768d6d229", "sighting--9eb15d28-6b9f-4b28-8cc9-4be0a702be2d", "sighting--cdd89518-b5ab-42ba-9dae-41f68634bc95", "sighting--259872c5-2c51-4005-936c-58b8ded8cd0d", "sighting--04ab9a61-9034-4e49-a0cb-19727264a77b", "sighting--a3cc4a46-9144-4309-90d7-d6f451fa194f", "sighting--c9716568-4773-44f6-ac10-b0de21d1eb68", "sighting--64c3bc39-44ee-4486-8997-a4836477a874", "sighting--c51119df-1dd5-47c3-bba7-d9bfbf48d12c", "sighting--3dda8f11-12de-464b-bca1-3a0f47a3f45a", "sighting--498b477f-5c1f-46a1-82df-045b71b8f38d", "sighting--649cd922-c852-44b5-aa3a-efb3c2facc67", "sighting--3362db72-e683-44d0-84f0-cd9ad74b1e5c", "sighting--ac9dbff0-e752-474e-a7cb-640be51fa91f", "sighting--140f220b-a387-427c-944d-b043bbe89ed0", "sighting--fe41da0e-1959-44d4-a099-15ca22f5d36d", "sighting--c25a1b2d-f758-436b-9e83-e6411c55ee3d", "sighting--9ddc86e2-4baf-456a-831a-7501dde48a74", "sighting--39c8e0c8-49e3-4f30-a7b0-8f633e57025c", "sighting--9493da9d-1cfe-468d-9034-65a39ac09551", "sighting--f29127b5-7476-42b3-b440-5d64a26e68ca", "sighting--79734a3b-a796-4d2d-a40c-6948cc485dda", "sighting--0afdb169-c02e-4a3b-9ce6-7cafe7248105", "sighting--c22288e3-976f-4dc1-b513-26fc848bb0e9", "sighting--908dd00a-ecf6-451c-9415-02a208bc9dbf", "sighting--170b17fb-f03b-452d-8700-e9007e618127", "sighting--a505dd24-73ac-4747-9608-d7ac1953ac1f", "sighting--2ebc9c20-996a-47ba-aa08-3e03cf1435b6", "sighting--ccc298c6-4504-4697-9abc-2ae055ebfef9", "sighting--89c34869-a068-4ac9-89e2-7c5ddd6223ec", "sighting--b9c45d03-dfa0-4adf-814b-1eabed0ef3f5", "sighting--c053967d-6eac-4ed0-928d-87f7497aa313", "sighting--ef67bc28-c022-47b0-a330-24f3fe6808f4", "sighting--1ff38645-25a7-4142-8b68-8bda87653946", "sighting--48d746d9-d99c-4231-8cfc-1cbe8113ab8e", "sighting--00d45c49-2194-4c32-9b50-802e17efe59b", "sighting--0c8bb1bb-4b85-4f7d-b3cf-c97f2f56f377", "sighting--62e226a1-2599-4337-a356-d8e59ae1cb55", "sighting--14586054-cdb7-4b4f-86eb-bbbaaf296770", "sighting--ebcf58c5-e21d-4386-a05c-07d2707127d8", "sighting--35a8213b-1718-4cfe-8c9c-7b0a857c8c44", "sighting--1f770c52-c38b-4559-93ff-90302828bb6d", "sighting--3a1ee1c0-cde3-45d1-83f1-21126716be9e", "sighting--1382b91e-9c51-4589-8d41-22adf649e41c", "sighting--c9997705-e4c8-462e-b21c-44a7b6eb4feb", "sighting--23172aed-40b2-432f-8626-a46a666befd9", "sighting--fa224b2b-69cc-461f-b8fd-b8971c3316e3", "sighting--b0dc3b79-4430-478b-a3f9-1c16c5a4fa5e", "sighting--0c74fa90-055e-4d55-965f-c7f888635b3a", "sighting--9bd9d24d-1de5-4424-a3de-f76dfc4ef939", "sighting--26084d3a-2207-4b21-8602-55324634c177", "sighting--2d167b13-d78b-4994-a978-80d0d7e37b59", "sighting--517bd9d1-a65b-4939-b845-2b867db33968", "sighting--1a1a1dc9-ecf8-4f0e-8786-70a60fe5db40", "sighting--eda96e49-f4d2-406e-a97b-1e19b3384e09", "sighting--b94ce04d-98e4-4745-9edb-9e8f5bc1fd4c", "sighting--d4164957-e3d5-4fd7-af0b-4d0c4ae13aff", "sighting--d8e429ad-88c7-4b12-9b9b-f2c38372bd73", "sighting--25e8c096-66c7-4ede-9221-226a0c356f18", "sighting--b88998a8-b010-42b6-aaf0-38107485ac60", "sighting--d9af1a76-1f31-4702-babf-26f0e5993ff2", "sighting--534a6b47-0904-43c8-bb48-44d9e677714e", "sighting--e59516a3-f723-48c3-9c96-f2ef7de22f95", "sighting--d0577825-6b89-4ed9-9669-b054fa3b759c", "sighting--6a3e87c9-3a1e-4c3d-b2dd-02e936598bb2", "sighting--9c409b9a-0800-4b04-ae7d-158b39e69966", "sighting--44f5ef1d-b8ce-45a7-b5cd-0bc7eb6e7c9b", "sighting--20aaf798-b956-448b-824a-42c8da7ea35d", "sighting--c4f0f8f2-dbee-47f0-846f-ad35e24590df", "sighting--6e4691dd-6fb7-4297-86ff-34bb1b7a52c4", "sighting--7856ca0d-383f-4e2f-85e6-c4366a03f2b0", "sighting--f732cad4-1375-448b-8f1d-d747c0baa015", "sighting--1187dd94-adb6-476c-9c95-3d4479ea8256", "sighting--385935dc-d358-4ddc-8c05-8bd3f42b8983", "sighting--5d4be0c4-50c7-43d9-a2ab-05ee34e38d82", "sighting--fa01cbb7-bd70-4536-a286-8d0e3f6613cd", "sighting--a0b966cb-cee7-4fdc-9133-ef0b849648e4", "sighting--d3db8e0a-c6d6-4251-84f1-0b2f1dc10da5", "sighting--20069a54-ac60-4b05-9dd7-1fae7cc75b50", "sighting--f4aa4784-40cf-43f7-bf9c-28f165d8f6df", "sighting--c27e0ed6-7096-4198-a10f-7b0b84a89eeb", "sighting--99d56b9f-da78-4c8f-9045-62f853e70709", "sighting--c56b53b8-56ed-4e93-b388-d90c2d8f7422", "sighting--bd1a2d43-0164-4042-aa4b-dd8d4330ab9a", "sighting--7e4bb70a-18aa-4deb-ab9a-42d9cdc112ec", "sighting--39bce684-c88b-4c9c-ab1c-50c674f0adaa", "sighting--7351c4ff-86e1-405b-9558-6ce6d537d726", "sighting--c6c90bef-4567-40fb-86d9-cccafdb142b5", "sighting--f3b5ec9d-d32a-465d-a2ae-0b347cb01bf2", "sighting--97c0884e-f3ec-4950-9271-9693f772f5cb", "sighting--38d3fdff-6ad4-4783-85dc-d84072d9c301", "sighting--3a59d732-9b55-4f70-8eb3-5106c2f17f07", "sighting--bbda67ca-2606-432a-ab39-ed6c09ce52a1", "sighting--09e23829-3a79-4bd9-8939-5deea147b9f0", "sighting--ee487fef-19d0-4f43-a15d-d300aa0bfe9f", "sighting--f90e8029-e956-4202-8f3d-8fd8f0874923", "sighting--909204ac-df53-44d8-a3a6-e3ad2bbd6b87", "sighting--ba6ea202-1379-46a5-9e76-3232c74da971", "sighting--d9f4d7be-dfb4-4250-a3c3-8b9de13adf52", "sighting--51862b6d-fd70-4f35-88af-ad186001c7e4", "sighting--24ac08e8-46db-487c-85af-668628165c7c", "sighting--d0018730-8b9f-45be-931a-56bad4db79ce", "sighting--39576e73-460e-405d-a7fb-845ed3dbd874", "sighting--e550eb53-0738-416f-889f-2b767f39e8ce", "sighting--279fa9e6-e55a-444c-8c44-0075d89afc5c", "sighting--d6d5c371-7315-4c9e-83e1-bdd9f10b755a", "sighting--ae9e1f53-e647-4d7a-b805-80b2c07ac8fe", "sighting--70c44236-8cf6-4f0b-b3af-2a29fb6c781d", "sighting--a064bf2e-ae59-41de-aac6-2cb0d9c0bb70", "sighting--53958fe9-7db3-4955-ae39-8c8ec2f41eee", "sighting--bc57eda9-75c1-4a5d-a15c-7b24f8fb67da", "sighting--f6117879-3da6-46be-9edf-6b663fa39caf", "sighting--f250516c-9670-4e92-b024-5085d1c86c75", "sighting--36659c10-8869-49bf-9a92-4bd55b7f1fcb", "sighting--f0912173-24db-4956-b540-9cfb8c9ee1ae", "sighting--856a7a8a-aff8-46fe-88aa-de6470e4a53c", "sighting--25450e71-fb04-46eb-9ed1-877ef6a37517", "sighting--47c4b6ea-1ff2-4f89-bbd9-91993cce807f", "sighting--819505c0-464d-48b2-814b-faafde4f8b04", "sighting--08055ec4-058d-48c6-b84b-ec8066ee6e47", "sighting--445aedcd-81f0-46b1-bc05-3d3f9b07ec03", "sighting--2fb4ae69-fd50-4655-9fed-22645474df4f", "sighting--8a767a63-2113-4e8f-a7e0-fa073b08be39", "sighting--5e565071-b5e1-4117-ae37-ac24dbed0912", "sighting--3bf35960-22eb-4ddb-bc05-bd2a0308cd8f", "sighting--1ece79c0-d312-4dbd-adcc-2a0dd98dde9e", "sighting--b1dca772-509c-4ba6-b4f5-b73fd3bc23b0", "sighting--f65f53cf-34f1-4a65-837a-43462ded4e01", "sighting--591ef08f-1d29-4143-b418-6f1580ca08f2", "sighting--75a254b6-0fe4-493b-95a4-2442b4c7f413", "sighting--51514861-3b88-44b8-82fc-ad4e31f47512", "sighting--98718a26-9de6-43fd-a7c3-22981145c851", "sighting--4e251ad0-d9b4-445a-b016-be01ee68fc6f", "sighting--e8fc6045-0fa5-4e74-8740-7d94422656b0", "sighting--957f798f-f636-455e-9f60-b7aca903a203", "sighting--6b25da13-1ac4-4f23-8cc4-c5f71783f767", "sighting--8a79d019-1280-4154-9575-ed3ee667a947", "sighting--65d9e3c7-f273-4ec2-ab71-a86bca20dfc3", "sighting--ceab860e-e0f2-417b-ba42-3eda01dc87bf", "sighting--94f26fa8-e35c-4dfb-baa9-4dadb0ffd3dc", "sighting--85b262be-dc59-4e0e-bc8b-e0c4e002bf1a", "sighting--f3f396ac-8dc9-4758-bc91-3136a29d9306", "sighting--55928cba-8aa6-46c9-8f1b-60a04bf07390", "sighting--35362bc7-38d4-44e8-bb0c-4a3ed8a16ea3", "sighting--a54fa0fd-93af-4f07-98c8-eef85aef6d2a", "sighting--675cbd2a-0929-40b7-bfe2-4ef78d8380b7", "sighting--de9211de-a0ff-4b77-bd6b-b5c4a8224860", "sighting--ecd00688-9f11-4a88-bff1-138e48e29037", "sighting--78d80b81-1970-4af8-9127-1fae72660042", "sighting--c719cda4-b776-401a-ad8e-0cfefa96f2f6", "sighting--a6e54714-2691-43e9-b128-526d12e40988", "sighting--c538cf25-6d32-4937-9e91-4c01520d3986", "sighting--a9b72ce6-c61b-4d03-a518-70c1ef8c5f95", "sighting--2e6d50cd-491b-4e1e-8879-8ab1319f1508", "sighting--eeae4b4e-d382-498c-9fce-dba40498aca4", "sighting--fedb84c8-768c-4d80-9ca0-2a6a666d4014", "sighting--ba212300-a657-44a5-96e2-19445d92e67f", "sighting--ceeeeb4c-dd6e-4688-95b8-455c150dd842", "sighting--88f713e1-78ba-4d49-9b80-c720eb129ce7", "sighting--ccb04802-d3dc-4737-9d8e-9251cb88280c", "sighting--1c4e81de-e13e-4842-94cc-4608a6b490ad", "sighting--3b0046b7-3ba8-4a74-9417-52d08d204e03", "sighting--00f617fd-47bc-47d4-b8c2-459205f2bee9", "sighting--43ef27bb-f527-4b5d-b150-1f4aa7ffc981", "sighting--0b9cc023-15bd-457e-b592-8c5deef7aafc", "sighting--e2fb699f-37b2-4679-a3f4-83015c95df4b", "sighting--18e32a13-9738-4d2d-a9e6-2a4e3c8d9067", "sighting--85631d7e-5fe4-4f3b-9e97-2d27939113f6", "sighting--6fcc024a-67da-4b8e-a4b7-dd252f6d8e43", "sighting--85f8ba1c-a4de-4e97-8905-0b59d26f98e5", "sighting--e638d329-76cc-4c84-849b-3b7669d1de36", "sighting--ba2fa3af-1e1d-4e82-947e-1d2e630959b5", "sighting--a6382475-8504-48bd-a2cb-f8114a227130", "sighting--d03adde6-e792-4b30-8a20-6bea5574cac9", "sighting--65140143-78ae-4d4e-a76b-59959fc63c5b", "sighting--862f28b7-c036-41a7-8625-1f7234e033dd", "sighting--ab75cd7e-4878-40de-9ed0-f62af3118c61", "sighting--1c115ca9-7d25-48c3-b065-c072f0b9e033", "sighting--a38ff93e-4727-4b48-88c9-ef9e37d6b196", "sighting--256656c3-e3dd-4396-a317-484bca958a16", "sighting--887df69d-2c3d-4143-88a4-45f912071440", "sighting--c6bb21b0-2792-4e4a-9efa-3391a883d850", "sighting--b1f1d955-ce76-4163-a419-d50ddf571262", "sighting--6ab20ca7-60fc-4572-9872-2cf92917b4df", "sighting--a8269a1b-d182-4203-8885-53efda7afdf5", "sighting--76d79b8b-d84b-440f-a665-c62ef7bf8498", "sighting--5f5bfab3-746e-4322-bb26-95d94ddfd0f1", "sighting--5d05cdfb-d00f-41d7-8835-4e0712e7cca4", "sighting--e18bdf42-ab67-4335-9d1b-2bb44fc9cbb9", "sighting--1e900ed7-f4a3-467b-8c0e-04bfc60e7505", "sighting--25f157d4-cca3-46be-9770-b82431f4f1c5", "sighting--afac458d-636b-4373-a52b-4ab39e93ee65", "sighting--4c358dae-826e-4b25-b475-745b951c5084", "sighting--8c214124-cdf7-4e84-87d5-0be5fface5f2", "sighting--ffc1f3c2-6bc1-46ba-94b9-ca90286f9726", "sighting--520b484d-aab8-4d00-b0dc-3216c6d13da8", "sighting--f4e9f71b-15d1-48e0-98f2-976d2984ac56", "sighting--a463bb23-d524-4db1-83b6-99a29f413355", "sighting--19f72353-5156-46e5-b128-eb81b94c9077", "sighting--5995d88f-1b01-4601-8164-93115ff765c6", "sighting--9b3611dc-82fe-4d4d-b2c0-fcee05402c31", "sighting--6f1cda78-bbf1-4397-9ec1-7d0952ee7227", "sighting--a16b92b1-ecfd-46eb-8626-09e331aadbe1", "sighting--32eb6b0e-a577-4229-8e83-16d3ba7750df", "sighting--34a3891f-7ff8-4832-8285-0e035c25eba3", "sighting--86ae7ea0-a379-4c55-8cd2-b9b493764671", "sighting--82471795-9922-4a26-a542-e0e61188b9ca", "sighting--ef796b5d-fc55-4daa-9007-02aa773c41c5", "sighting--b6b10cce-e1f9-4db1-8f86-0c5de4dbe456", "sighting--cc50519a-de95-4b36-8701-be137cafc302", "sighting--b9d5c47a-188d-4ba4-8591-5d9124cbcb07", "sighting--4c5dd299-1036-40f7-8f09-a0d0566bbe72", "sighting--52e518df-348f-4c9e-90da-2d5b82f05736", "sighting--5923d4b6-98db-4389-a73c-59a8cb24b2f5", "sighting--803545f1-58fc-4d88-8f89-359b81a12411", "sighting--a262dfcf-6961-4ab7-a845-8be9840fedf4", "sighting--caabd3ac-fd8d-441f-8145-008e942d03de", "sighting--b062a1ef-bd3e-4b5d-8a4b-2f0382f577cc", "sighting--6eb10229-1074-4a22-af68-52bb8cb6b7a3", "sighting--a9eabe73-8f93-4a9a-aacc-526ed2cc97c2", "sighting--5daaa38a-20db-4fa4-bdc2-067f46a0347d", "sighting--fc3da424-a5f6-434b-823c-f4fce5130b23", "sighting--a140afb6-236e-4d8d-b6cd-8022a0ccc4a9", "sighting--a9a1f941-bf56-4428-bb59-31269ec860b2", "sighting--a7f19da0-0e7b-4060-bf5d-7a44b08fe923", "sighting--fc514f4e-2eec-43fa-8f32-55484cff8abe", "sighting--5402b57b-9b42-4ceb-959d-bdb88070e0c5", "sighting--b103ca68-1a69-4b4e-a0b9-66b490bbcc44", "sighting--3eed600c-3dbb-4eab-9add-2a760f44859c", "sighting--6f2381ff-1e32-4827-b1a7-360fc499af37", "sighting--23898fe7-a47e-4ae4-831e-82c2d2a9c73a", "sighting--30fe9ad9-dcbe-4225-858e-4d20dafa76e1", "sighting--a9cee3cd-9149-4491-b48b-90de491ef56d", "sighting--b1ec8b75-097c-4842-956b-ccf3b665b7ef", "sighting--b14d4dea-56b9-4bf9-84f4-419f869f83dd", "sighting--c2f51e2b-a1be-4529-ac11-53a1114bc522", "sighting--bb7186bd-3c0d-4a9b-9948-d9ca86391902", "sighting--5eb43a21-d99e-4492-9ca1-27b16d14bc27", "sighting--7a3569ba-621f-44c4-9e86-6c91efbfcbee", "sighting--aeb4690c-cc0a-4028-9dba-f3b4466a06d7", "sighting--048aa003-b36d-44fe-b3d2-fe472be37559", "sighting--610bdcb6-9e53-4385-bb39-3e90ca8e6568", "sighting--2e1221e0-b965-4e29-ba92-5b511c801747", "sighting--86fcd837-a231-4be6-9c98-b3635ad9e3aa", "sighting--d97e520b-c326-4fe8-be49-4eb1c94ffc64", "sighting--35f93042-b2ec-42b6-a307-ab7d83b2ff29", "sighting--44d35829-9660-4ba4-bc84-b9f1f37a6023", "sighting--d284d346-5300-437e-8ea5-9e2f3a48b620", "sighting--4b3087d4-e8e2-4329-9de4-57826f94a006", "sighting--5dd00683-6e0d-492c-956b-29a6a271ad2b", "sighting--3d960e7b-62fd-4889-afed-79f41cbc49f9", "sighting--b317c2f0-3552-42ed-9659-87615919e845", "sighting--64fedcd9-bfe8-41f7-959c-ccff3b9d5b94", "sighting--0927dc02-3204-4d8a-80d5-66e542584374", "sighting--35256c8b-8d96-4025-b2c3-d549c893b9b3", "sighting--b11ba616-50e1-484e-944e-896fcdafb9f1", "sighting--2a797702-c69a-4809-9980-5122d50da31a", "sighting--3d149a14-981a-452d-ab22-ba589ef2273e", "sighting--c3d0f718-55c5-4cca-bc08-1edc20e17cbb", "sighting--8a81347a-5986-48ef-bfa1-6ccb20c3f675", "sighting--e0c09e75-a378-4f15-8b48-cc903d2aebb7", "sighting--29621176-a2b0-44c5-9cd3-cc08555d024f", "sighting--e66b508e-4e80-47d7-9e92-053c6c2c423c", "sighting--2471e92e-5a7b-4a72-86bd-04a493ad0510", "sighting--7545ed77-8988-4048-979d-b5e8ada90753", "sighting--f938d493-8e85-433f-b7d0-4d801d99f099", "sighting--6eb0147f-8f6d-47fb-9316-9273930baa7a", "sighting--f85f2c5b-735e-41a8-98a8-a259df07d295", "sighting--fba03b4a-3ce0-432f-9da7-c7546de07e9a", "sighting--0a2f523a-d1cf-493f-a902-aa3d1cc209a7", "sighting--c569dea3-63a8-4358-9d38-3f3978ab7b83", "sighting--99884e75-4673-497e-9665-040ad09be054", "sighting--fd68f63a-505e-458f-92aa-9b65aa4ce3e2", "sighting--e1e963fc-fccb-46bd-ba9f-f767b9b44ce1", "sighting--ff17fb2b-057b-4b56-b662-d36c058fa584", "sighting--01995cfd-93aa-48b7-817c-94b25a1e05eb", "sighting--4b16d79b-89f6-4af9-8b0d-ac673a38be5b", "sighting--71f91832-c53b-4569-919c-36dc393e7fa2", "sighting--b02011e3-9552-41a4-8a32-242a139fccbd", "sighting--143c4913-1741-4402-a942-a8175a9004f7", "sighting--9f2f3595-aae9-4f78-9e54-733cc60a1e34", "sighting--e81c5568-1663-416d-9dc7-adb46715f8f1", "sighting--e9545edf-3e89-4704-9ff8-647f797549e3", "sighting--9cf54a72-acf6-4429-a91e-7ab9b60391c5", "sighting--85751e4b-a676-473c-bfcb-049cc76fe090", "sighting--c003bdd8-374c-4f4e-a27f-b22f88e2587a", "sighting--173c027b-d4a3-4c75-8b55-8b538e385a38", "sighting--a23abd95-c367-4425-9436-86f8b8dbe00f", "sighting--64881626-7e70-4c14-b1aa-110dc76b80ff", "sighting--eac08a5a-b7ea-4d7b-8bd9-236c16fca5b8", "sighting--b5a4ef89-5c73-4958-bc4c-d42298237044", "sighting--b281fdae-ea4d-455f-adfe-3985ba0a2e0c", "sighting--8a2f7d26-dec2-4887-83b7-942072fe7f95", "sighting--ce683830-1f22-4df3-833c-6a149f5ed466", "sighting--91374d25-0678-4fa8-aa79-0143bc4c62d6", "sighting--f6dd293d-f8b3-43d9-a422-babf9808ecd3", "sighting--8128edb6-0f3a-442c-a898-1089779d346b", "sighting--2afbc303-e36e-4c11-9f1a-7b6c3df07c55", "sighting--925a6738-0685-467c-be15-90b5bc7836a1", "sighting--df987067-f441-4927-a27e-e49477fc4f02", "sighting--83daabc1-1cd8-4fce-8a8a-7c5a08d096fb", "sighting--c1f66259-f5ee-4d62-b812-6612ecbb7ade", "sighting--e2dcbc83-010f-4127-ace1-6002bd05ad5e", "sighting--953a0b6b-b26b-4180-9f76-c7e2178d068d", "sighting--e342563d-0b40-43df-b051-16d398e1279a", "sighting--9b050ad9-b96d-4a8b-8b0c-d52f97a2bddb", "sighting--7fff58e5-1da5-4064-a355-9e49d3ccb4a0", "sighting--8e1e4516-f179-47e0-b9b4-3e3cdaf77b95", "sighting--b269ef8d-1c16-4d4d-b08f-bedf60d40e66", "sighting--02069958-4a2f-49ea-9b96-81e5f3112211", "sighting--a0ab1349-3d83-4556-8e72-fb6f0fc57371", "sighting--10c3ebb0-478e-49b0-86ce-83d00e5f530d", "sighting--2587d832-52bb-4777-a6aa-20a1b566d776", "sighting--f947ff76-5a8b-4c93-a2a3-dac3155d64e7", "sighting--659d2860-2262-4675-816d-06a72c01fb98", "sighting--518ee9e9-8faf-4856-ab84-211f17ddb305", "sighting--683557df-450e-4f82-8e0f-51af20c1271b", "sighting--e691754f-9473-4fc4-9617-af56687ac9f3", "sighting--b746b66d-7435-4ce5-bf14-98c9b9a5bf94", "sighting--db937ff3-4ec4-4c0a-b272-e1e836ff5a3a", "sighting--1cccbd65-54a0-4eb6-aaa9-af75533c9b3a", "sighting--47a89bc1-5be9-4d89-ba16-b354f6433e1d", "sighting--99c46e6f-9f67-45ed-8a4b-dc559ce7c890", "sighting--f6cba990-5714-4ae2-ad6f-74afc77428fd", "sighting--a9a2fc94-e532-4576-8b0c-b5d22663f416", "sighting--173f5121-8f71-444a-9cfb-d667c709071f", "sighting--599b01d1-8ab4-4dca-80e2-31941d353b4b", "sighting--bd84ffd2-2240-46e3-974d-1e2feef40fe7", "sighting--b8ea82db-2260-4d8f-82cd-78f3313d0965", "sighting--63879bd7-9877-421d-a8dc-b509b7b5b1b5", "sighting--af00e913-4f86-4f2a-95d4-d9286c2aa8ee", "sighting--6d4cf54e-cffb-4f01-abcc-f946db21aaab", "sighting--62ec0978-db7c-47d4-b8b4-361610c57f06", "sighting--aa5e6e8d-53bb-4e55-ace1-7b4ac46a3efa", "sighting--c545aad7-7d05-4a87-ab9b-928fb0e3c853", "sighting--534401eb-0fe2-4266-a75b-9ffa9c6f0f10", "sighting--b7ba5fd5-82ab-4790-9636-50a0d0a31d07", "sighting--0b5d9505-0342-486d-b0ce-d4b92695ff8b", "sighting--ad76f26a-9123-42fe-ab35-2ca48a24a17e", "sighting--b46bd048-c3f5-400f-8c35-7ce9ddc8e147", "sighting--2a530610-5fbd-4daa-bf84-f5066f2ce4de", "sighting--7875890b-5a5e-467f-92d7-f0d9360dddc6", "sighting--54745aed-43db-4d66-a506-13ddb8ecad5e", "sighting--dd8fa36b-fa6e-4e4c-acb8-78096036d4a9", "sighting--66edc41d-4355-4c35-b859-c0d506c51800", "sighting--90f11d24-2d6b-4674-b4d3-97ad8f0c97c1", "sighting--6cab180d-bd68-475c-b94f-4f4fdc808fa2", "sighting--4240055c-055e-414e-8357-6df625d0da0a", "sighting--70deef40-09ce-4e99-908e-fad7de389962", "sighting--56126dc6-aa27-465f-8331-f93c80eb6cad", "sighting--a5503afc-773e-44e3-8c31-7bbea8df76d3", "sighting--6deacaab-713a-4287-b9ff-eaa44b16d3c9", "sighting--473de9c7-1d46-4609-bdf6-33e07d6be266", "sighting--5e2fcc29-548f-47f7-908f-3669a69ac455", "sighting--b4285845-68a1-4392-88e9-811632011669", "sighting--146c8488-b94a-4ba3-b464-2b2b4c3c7393", "sighting--c08cb75c-e01b-43d5-884b-100c3cc8e800", "sighting--e7938355-19cc-48de-9d22-e80688d267a0", "sighting--127078a2-0726-4be5-8dfb-c7e732859f4b", "sighting--67412159-ff52-4fa4-bd5d-c96af299acf7", "sighting--cd7fea41-b28b-4ab4-b89f-835e351d355e", "sighting--fedd9930-d87f-4a03-962d-429497657445", "sighting--0388a7b2-17d7-4426-a6de-c93b0b04758f", "sighting--39f5885d-64ca-4ee1-a044-93922759c70d", "sighting--839759fb-ec44-45ed-978a-d62f9d43260a", "sighting--d1b103d1-bfae-4717-8dc4-bde08ccd97f0", "sighting--31090e0f-ff3b-4220-9019-af349fe4eafc", "sighting--5133930d-96af-462c-9c56-b02cd367891d", "sighting--f6f1f44b-8b3f-4981-ba22-0f8db3ffcd3c", "sighting--bce4d502-981f-4eef-abc9-6413910e7de4", "sighting--65939154-1ef9-4221-a3ff-ba7eecb32511", "sighting--f9404992-1145-4ef3-b38e-75170a8645a1", "sighting--0ba794b9-3236-4982-87e1-9519ebc6b802", "sighting--01a64fc1-5b0e-4dfa-803f-2937492976d5", "sighting--58f7d188-a0d7-4eb4-9294-e4874fbdf092", "sighting--054164cb-b8d1-4b00-b59a-2d75ea146128", "sighting--806829f6-0aac-408d-91f4-8cbf1e95270f", "sighting--283a245f-471c-4154-bf9d-520831f9f99a", "sighting--09cd50a3-8137-49ee-b2a2-00e7e5fabe3e", "sighting--4d70e12b-752f-48e6-a39c-7db733d2eb7a", "sighting--853f6e2f-e967-49db-aa48-eab7a00139f3", "sighting--b945cdfc-80e0-4d1f-b5dd-11a62e89205c", "sighting--008b95e6-f91a-4052-89cc-3aaaed5a4a25", "sighting--adc1e9c9-4b12-4a82-90fc-2a3f44fd2fee", "sighting--98991ca8-14a6-415c-a489-62a301f4208b", "sighting--81858b5e-3f42-40b4-8e57-bf9a9f9f2cf5", "sighting--f2d26cab-f4a5-4d94-9739-968045ba1697", "sighting--79be47de-cde1-4912-aedd-2956e8d8e25e", "sighting--e6f33e1d-b3d9-42c5-abb8-df11ee205a70", "sighting--abe99531-0403-49bb-b463-9c4807e70d5c", "sighting--38adccbc-0ae7-41d4-9e75-91f1cccc4be8", "sighting--f74ee09b-1924-4e60-a437-2542ffcad909", "sighting--21d0f6d7-c812-42ae-9f0b-0d5f3e9cf730", "sighting--6fec8f91-202e-4bbe-9515-8f312e210d36", "sighting--c614614f-f827-42a6-8725-0659936cc54b", "sighting--516d4aaa-1b7f-4647-87ed-f587b3a1ee9c", "sighting--b57e4b60-c2c9-48a3-b2fb-94688061e8b3", "sighting--ea08553f-99bd-4292-a416-8a9dd9e47178", "sighting--359d13c3-eb8c-4495-8619-e317fdaf4dae", "sighting--966e3d6e-2dc4-447b-a425-a13bda471d53", "sighting--bfeb6e0b-d55c-49a5-9e13-0a3102d776ac", "sighting--6b59ce88-0573-4cbd-b498-2112642bcced", "sighting--1e9a268e-0b46-434b-9980-da28456fda52", "sighting--fbc7ae46-e566-444d-a8cd-90698bd634aa", "sighting--42fd08dc-17d7-462a-9693-3909330bc6dd", "sighting--45c6fc2f-c9a2-40a9-8443-a49de0aeb4ad", "sighting--29dddbe3-c797-4885-862c-55e7fb792d19", "sighting--d08fd69c-750f-418e-b727-111eb1c1c273", "sighting--f0f5200e-1aa4-47bb-9275-3fc5e3506072", "sighting--9f9b09b9-dbca-4494-b5b3-1c92247cb9be", "sighting--bda7a0ca-249d-46ec-8db2-eae321ae3882", "sighting--dce83ebe-b181-4602-ade1-14a3a17fc527", "sighting--7b79d26c-8632-4662-ade0-53afd6aff9ac", "sighting--cc416e0a-b8c8-44ab-8b97-f2ddce2c5323", "sighting--95d3a8f1-26c8-46af-b0fa-ec0a502f64d5", "sighting--c1aaeee8-8734-48c2-97b4-e6dbfc06be9c", "sighting--e3422b26-6060-4551-8984-2ef90f2741ac", "sighting--8aafe326-7aee-4aa7-b619-8d4db251698f", "sighting--c7d45153-c880-4f2e-b350-b3e303d708e5", "sighting--a594a9f5-02e1-4d33-a122-8e1189c22e3e", "sighting--949c3845-cd7b-463f-ac4a-4b04534314da", "sighting--e5743ab9-62ae-49c6-a11d-f5e93ee57dbd", "sighting--159ff29b-1f0a-404a-a883-e801d2a7b9df", "sighting--c6222b69-5064-4982-97a9-13570194d933", "sighting--62aa0d48-2743-47a8-9583-86d217356f3f", "sighting--88550c38-ef43-4f61-979e-90dd4e0bacb9", "sighting--60da15a2-1480-4194-bc60-5591a6557069", "sighting--68e15219-e10f-4450-9c57-27383596a242", "sighting--6bcaaa1b-4a14-45b8-9c89-58d093ab77d8", "sighting--8686d57f-37cd-4ab6-8338-5571da8c3084", "sighting--51e38bca-5346-4af9-8baf-831b31e2e512", "sighting--2efeae52-88b7-423a-9351-47e526df7d5a", "sighting--b93f2e7c-c8d8-4da1-a795-01ae92e89b60", "sighting--d69ef14c-2b48-4903-b39f-0bc82658a09f", "sighting--39fb67fd-55fe-4350-9968-7fd307c5a2b8", "sighting--d5339b70-74ee-4ca0-ad77-408941e9e8fa", "sighting--d2edf917-d705-47fe-8c66-7cb6343609df", "sighting--cb6177b1-17c1-4de8-930c-835aaa2ce6eb", "sighting--888d00dc-175f-4754-8bbc-b1b7d947e158", "sighting--fc956abf-4efd-423a-a7e7-e03fe68ad040", "sighting--49bbeaca-4706-4228-af41-9a55bff1ad2f", "sighting--6aca3b7b-0008-4bb7-bf4b-6b703a6b83cc", "sighting--56428185-e5ea-4d8a-91cc-ae01e6bd3fd1", "sighting--7c55ac1d-09a7-4744-993b-d8215016513c", "sighting--f8232fc4-51a8-4eb8-aeef-da0494dc8c44", "sighting--5a2ce463-ec7f-4d70-ac72-c92a8c20204a", "sighting--2902072b-7c3a-4a18-80d9-727cf4056e8f", "sighting--96ca6c5c-85ed-438a-aa77-9387da5953a4", "sighting--63484b10-0ac8-4eef-81ba-507778e3c623", "sighting--3dfa1a6d-109b-414d-afad-cb6cb194c2e5", "sighting--642823f4-e67f-4255-ad62-5f408bc97a03", "sighting--19925361-1a4a-464e-b84e-d829d9023ffb", "sighting--511396f7-da91-4326-b2a5-c7525dc1e3a2", "sighting--a18c2dac-916b-4cf2-aff5-6d11bd38d3b5", "sighting--95dd90ae-cdff-4a9e-9be1-e78a14e41474", "sighting--03255195-5762-4f3f-a674-f750d80aeaa4", "sighting--9676c6d4-0a28-483d-8b9b-d360d64cfa29", "sighting--dd43ce1c-ae2f-49a1-a6e3-62fcaed7235f", "sighting--431d7bc8-4fa4-4760-9dfb-2a1e96f6cc67", "sighting--ff7182c9-0db1-48af-88ff-f667529490c6", "sighting--6b6ddbf9-97ed-4588-ad98-0ec9548c44d5", "sighting--d9eca399-5ccb-47cf-b512-c97a3e2e2a29", "sighting--1951b561-4ecb-4986-a625-df3fb88b9b9f", "sighting--941f7d74-43d3-46df-ab54-144fb5f34d49", "sighting--1d6d232e-d261-461a-9e31-ddf8c8d0d767", "sighting--321a5a66-bb4f-4647-8391-7d41fb83cad9", "sighting--f5cb95c0-4805-4891-b7ec-b492fb6ca919", "sighting--3d1d8d45-92db-4759-8914-ea6f8a585a0c", "sighting--acc45f30-a3d6-4ef2-b912-21bca24fca67", "sighting--1062719a-9fe3-4dd8-a129-968058b9775b", "sighting--48ac33c2-a93c-4b51-b34d-47be06f9f02c", "sighting--8eb9f9a8-5ad9-48e5-8fc4-f129d40a1348", "sighting--8fa2f0e2-2ae9-471d-b8e9-8ba186909a7d", "sighting--d2c37683-bed7-47d5-9d1e-e96c7dcd69d8", "sighting--b3439e1a-a5ba-49a6-8322-921b885a0794", "sighting--dbba7e07-9c75-481c-a127-45805662f191", "sighting--38ada69b-f211-4f4a-8e7c-5701f07087d5", "sighting--095f8063-7ae7-4ac2-ae88-0e574f4e80ab", "sighting--bc84d568-1815-4bf9-b24d-297109c46e66", "sighting--554c8c47-d369-4614-a510-d8fba5bb9550", "sighting--b2623e1b-b27d-474d-b23e-29fc4e89d105", "sighting--21d0db31-bab2-4552-822c-81ae8651ff0e", "sighting--3ecbefaf-5ef6-4faa-8b92-78e38f75c6a7", "sighting--7a6cfc3f-4a67-4b29-801c-9edaf2a37b31", "sighting--7b1ce7ea-7407-49b5-8da7-40560e477f79", "sighting--c992e38b-1e0c-446a-94f7-cb032ad09177", "sighting--b86a9523-f5d4-4a2e-97b4-9dad2710f163", "sighting--0cb6da41-d6d8-42b2-8dee-67b1943979ed", "sighting--bcfb1fdd-da35-4b81-b11a-6289fc581e30", "sighting--51a80faf-f2d1-4aa4-a75a-9ede98ee1233", "sighting--317be797-4a88-4649-a841-009f5cd3eb7d", "sighting--86bcce0a-77a7-4d27-aefb-8b387f923b63", "sighting--de1e9c8d-c7c3-4c40-b298-c9d92e9ae071", "sighting--e7fedb50-39fc-4ab5-a368-3e3b01156965", "sighting--7aed74eb-36a4-4b54-9807-0fbfb43d42f7", "sighting--886c4ba3-ea48-4c23-8cd2-8eb63bebf3fa", "sighting--361c383e-2ec8-4d65-a1ed-a1e03e02cbbb", "sighting--4515c995-db36-4ed5-b76d-265b901ce826", "sighting--4ff0f2ea-9f08-4783-a64f-4a9eeeb18da7", "sighting--ac33bd76-2ed3-4d5c-b820-96cb3d3aebfa", "sighting--7c60e3a1-6758-40b7-a9f6-197fc92a4340", "sighting--c531ad81-b562-4be7-b9a8-875876714097", "sighting--a2915739-dbb3-4ed1-92d2-9d956886c6b2", "sighting--79863c9c-6e86-449f-9a73-ec9c6f0da736", "sighting--0a97a41d-d100-4f6f-a531-295550ad5538", "sighting--916648bd-d89d-496d-8021-8f58d71439a2", "sighting--b7846393-12cd-4e16-8a91-4ffdbf8d9107", "sighting--a02e7dc5-ba7e-473c-a045-84bb9bc7e36d", "sighting--90b78862-3aee-4fff-b820-dc2aba251f5d", "sighting--cf909917-422d-4f6b-b162-b2ed8e13cbf8", "sighting--e8085c1c-5479-4164-a580-ca520ad51296", "sighting--25f33652-00aa-4e43-864c-9a11c613f6e5", "sighting--6f669bb4-2001-4bac-a625-4a1f46cbace4", "sighting--d819b270-3ded-49b2-8451-31bc7f27bf51", "sighting--34aca173-5556-47b6-bdf4-1e73e4201a3e", "sighting--0f71085a-491f-4a4f-b78d-cdcb061ff4da", "sighting--f2b3fbee-bc94-4398-80db-2cfd036fa410", "sighting--285a71ac-efd4-4425-9e9c-ada2b9fea7a5", "sighting--d5fa3aa5-5b5c-47f7-9ebc-1cdbaf23432b", "sighting--082fab9d-3269-4d0f-8c7d-40ec498c05da", "sighting--20a6f9b6-1be6-4437-8aee-6d4e7173c1e3", "sighting--a66f97fa-163e-4325-9245-679184eefc02", "sighting--3681bddd-2a9c-4f66-a42d-d5a789410f8a", "sighting--5829a272-dff0-48f6-bb99-c6fa3f8a6ef0", "sighting--a90e4861-4d86-4814-b104-1e17345752a7", "sighting--14d15257-d725-4eb1-9bc2-97f85ae051f0", "sighting--a71eef3f-fdc2-49d2-80b5-2b58060f9df6", "sighting--08f87044-b718-4f00-b9d4-f32c043be2bc", "sighting--8d1f471f-4916-46d4-9b00-2ad585d406f0", "sighting--dd4d7171-9ae7-4f31-a9aa-1751b2261d4c", "sighting--a89e02b4-b3a6-47cf-9f26-59a9b8c8443c", "sighting--a34e7f32-accd-405b-a75b-271cd8b25402", "sighting--5386deff-cfc6-4d17-ab59-6882831b64f4", "sighting--ce91c8ae-7f16-4bf7-b362-c5c94384c275", "sighting--a5029005-f2ea-49ce-a28a-b0caf061dc45", "sighting--154f1593-f3eb-4bb2-a73b-68ad5fef2b9e", "sighting--56e9789f-1a5a-468a-ac66-03d8d5bbfb5a", "sighting--431adbd0-f024-4713-8346-f7b842d4f45c", "sighting--591d8552-8271-4423-9cda-710b0a83b7c8", "sighting--c6ca3b8d-41ae-4102-bcfe-d91bd4a60a7d", "sighting--7bafafa1-02af-47b5-b4e0-e57406990235", "sighting--fcb3fee0-29c1-4295-a443-e2c3ba17780a", "sighting--efa2e66e-2942-474e-b6b0-385766f765fe", "sighting--97061ef0-86c4-4b7d-b014-ed156e15913e", "sighting--b39d4d74-5bf5-4c2a-a50f-28a5977fe8d5", "sighting--a7c7d25b-db43-4a8f-85b4-e69c1de668e1", "sighting--997dde83-1841-4bd6-9a42-56242709d638", "sighting--f81a1560-5de7-4e35-a0d1-6b05cffaede2", "sighting--ba46d51b-f7de-4e22-9de3-6c7daa4a712c", "sighting--32ff2da6-ee09-4d9a-bcd4-2b5ef953dc64", "sighting--4ffb7754-dbdd-4098-b692-0801efd2cc43", "sighting--6b7f0bf6-d60e-4baf-ab4c-54c0aa6ba695", "sighting--4bdb3930-8b57-4a6b-bfc7-a766fb087d39", "sighting--03a24079-7594-470e-9452-c9d8301ef4b1", "sighting--32d2f2de-8e4d-40c5-9b86-fc665062bf98", "sighting--6c93db7e-f797-4a84-b4e9-b050520779e6", "sighting--ae2b556a-db12-4bda-9103-020e6f7af0d2", "sighting--d2536f43-17f2-45fa-a764-3799927dae9f", "sighting--ae29d381-e9a2-4316-8beb-37741cc83acc", "sighting--b3d3c92a-6765-411c-a5bf-a0d0b94adfcf", "sighting--02cf4278-f3d6-425e-9844-5bcadc1ea116", "sighting--a1b01afb-19af-44e2-a008-8cff80d1e954", "sighting--63d9d20f-d755-4e39-a206-16ad3ce68d13", "sighting--2e3690ad-1e11-4e57-b4d2-a2331d3789df", "sighting--218a853d-8bfb-4216-85a7-713f6b0308ba", "sighting--f019c9dc-c343-4e3a-857c-30bf75eb4c87", "sighting--30b43334-08cc-44be-89eb-c36d2a4e3a92", "sighting--e716dfa5-ac53-41f1-ae61-e3a378e9dd4c", "sighting--e8d11e98-050f-4142-b7a8-fefae9f14acf", "sighting--99867bfd-015e-46cd-a414-f57eee91a63c", "sighting--529d8a77-517f-4fcf-8949-c53e94aa678d", "sighting--93502197-d89d-49bc-9ae2-865a27ae92e5", "sighting--abca3ca8-4fb9-4858-ae96-167323c414db", "sighting--bc826d47-0a23-4dbb-9145-3c93f3c625bf", "sighting--5dc87dba-6667-4fd6-83a9-c41ae0228d5a", "sighting--0b42dcde-460f-47db-b0a8-5f1708547aff", "sighting--8f488970-570f-47e2-a463-f7ba4f435c0c", "sighting--013f5cfa-b0bd-4ef9-9f1f-db8e03699fe4", "sighting--69532f04-bc62-4e82-9f60-1166da8771fd", "sighting--3cc2d079-7cb0-4bc6-ad70-463d10da8a83", "sighting--3e273900-1629-4451-87ee-e09729d01818", "sighting--d958c0fd-30b1-4824-89e7-f15a2171b8f7", "sighting--f91301d5-085b-428f-9a45-794ea8ae6909", "sighting--f5c7d165-e8f1-4171-a54d-76df784d2926", "sighting--42b75d67-3191-409b-92df-7376074c7960", "sighting--8afcb5b9-ff1d-4f74-a7c9-7fdb4c125a69", "sighting--0958da03-2ac8-4b36-a546-40f0e41716a4", "sighting--a88846a6-c0db-49cf-ac57-87663ee43834", "sighting--96c24468-460b-4410-b3e9-0e37fbff45b6", "sighting--62923947-0bc1-4786-9eb1-e12914712b6d", "sighting--71cde7cc-694c-45de-920c-c32bfd7211b5", "sighting--15d41754-5882-41d3-bf20-6580ab7f6b05", "sighting--571c29d5-9e5c-4e1c-a635-9ed8641f79ec", "sighting--344aece3-408a-48c3-ad52-ddfcb10f34a4", "sighting--9d5c1f07-3af3-4852-95b3-4676ffb9705b", "sighting--87595991-51d7-4a13-b8b9-575916639b50", "sighting--5bf42c4b-4636-4877-85e3-7daa3f3167b0", "sighting--efde13ec-5ce2-48b8-ba91-970d4aa34434", "sighting--f42cae0d-48fd-4267-8f23-c6d8a5c22bbb", "sighting--1775b3ee-23ad-49a7-b091-8d019a0a7a28", "sighting--5091a71f-4e27-4ae0-a641-b7cfa4a28071", "sighting--9e695da8-a5c4-407e-bb33-3e179d927490", "sighting--021a8d80-b5a6-4794-85dc-d6ab4b321bba", "sighting--261a9de0-d624-4a22-b847-10f713f910b6", "sighting--466917a0-0257-4410-a13b-289152589e52", "sighting--1414a761-4f0a-4d36-b957-ce02ff4a10c5", "sighting--ea4d6b57-f859-4826-bd7f-767a0e882ac2", "sighting--44cc454a-544c-4d66-a0d6-e6ec4ebad49f", "sighting--53d8ec0d-1390-4e4c-b27f-0f3c49e18a27", "sighting--49956419-d9f5-41ec-afa5-33b5a9dbf65b", "sighting--ebf4115b-2052-4768-8dcf-416ac655fe6b", "sighting--effdb55b-e53e-4d03-844b-d173a0055a19", "sighting--f19c7ee2-ddef-4e63-9a2a-7689a8cbc362", "sighting--567fe0fb-149e-4eea-b7b1-52ba4837ce68", "sighting--9e614068-6507-4467-9dd1-beec6f83157e", "sighting--422a01ae-63bf-42b7-992d-26d9bbff208d", "sighting--d66ad877-c005-49cf-b619-8e35f50404a2", "sighting--80d31ca8-2c70-4538-b750-01e9e6f7f4e1", "sighting--9fb6270f-01cd-419b-9f1f-1b16ac12979c", "sighting--99313afb-4bbb-46b6-949e-48aead78c474", "sighting--1a5f956c-157c-4bc5-9456-8b09826882a8", "sighting--1d9576bd-0bcd-4136-9324-ac2672d24971", "sighting--592be05d-86bf-491c-978c-c3428610a254", "sighting--0e901912-ca0b-43e0-8aed-fbce51e8a388", "sighting--89e9126a-a59b-41f6-998f-e5d7fe532da1", "sighting--790d401e-651a-4087-ad2e-208fee3f8e98", "sighting--e4dfee7e-2e9b-4c18-9ab5-ce8b41b43dd3", "sighting--de6804bd-0db3-4874-96b4-108e8e9485c6", "sighting--23e72f0c-f419-486a-ac06-b2b29a20cc36", "sighting--807984a5-1008-4772-8e1b-c5bd39ed8905", "sighting--ce673673-769f-4006-a8c3-8562a2f1d6d9", "sighting--94429be7-0c50-413a-8d70-61ccbf7768b6", "sighting--4e546730-b57b-432f-a28d-70d0c410e0ee", "sighting--1d25ce16-a6b3-4801-bdba-8746fef7ba8c", "sighting--f8e6d296-40be-471e-9c74-454664864801", "sighting--2231392e-20dc-49cb-943b-96b9bc2d5267", "sighting--5d0aef0a-090e-4f33-91ce-b0b8c2595440", "sighting--39259ca9-dede-4548-a8f5-0d8251277e0e", "sighting--c91a56f4-6637-4bcd-b38d-86fac6da772e", "sighting--2c5b78cd-4a49-4a00-9ca9-19f55f6ba218", "sighting--4b7afe4f-a4f5-4aba-b6e5-97831e6419aa", "sighting--20cc8cd1-6c4f-493c-8de8-c544ba564f8c", "sighting--62123f7f-e185-4e78-93cf-2833dfb52025", "sighting--55b0dff4-43b2-4402-ba0e-333e845d2741", "sighting--fa071716-e9cf-4dc1-b4c1-5ddf7eb73aad", "sighting--9edd0e59-c44c-4d2c-8a30-8bea58ab902b", "sighting--dc761ac3-cf18-4788-a70c-a690a5280804", "sighting--9c545fa4-1cc8-4fc2-9a98-093bd89638fb", "sighting--b345257f-ea0a-4f99-9cee-2d41be7b40b9", "sighting--1b4ae239-8af2-4b2b-a012-84a831d0ddbb", "sighting--54e43733-8460-4a3f-8287-8442f5b316fb", "sighting--b5eb9f8b-ccd8-4eff-8d2a-55ce5524b9ce", "sighting--1e5c3bee-b365-45f1-bcf6-18b6aa25efe8", "sighting--bfa568ef-7bf1-4d2c-ab94-fcee8252c309", "sighting--10baad5e-82fa-478f-a0f7-7a4ebd23dc20", "sighting--bb9c1d37-6936-4a99-847b-e8dffad55e55", "sighting--50e94a63-373c-417c-9473-2ff6e5fb823d", "sighting--8e37ce84-b359-47e6-8ef0-e8f425d1be0c", "sighting--b0fc1d23-d6c4-4351-97f5-b6d0dad99ea6", "sighting--6d3da6bb-c4ed-4e6e-89e7-90197f598cbd", "sighting--790fb17b-be41-45b0-914f-2fc6bc4dc971", "sighting--e110caf8-ad77-4c50-a958-70d4f83669a0", "sighting--eb604c18-6463-4e5a-8f26-b7c53ea27909", "sighting--75f5f1c0-fde8-4ac8-a973-11721fb5adc8", "sighting--1ca285b4-ded5-4370-9fad-3416dfd41b5b", "sighting--16be3bbd-854b-4a65-a27b-ceac5b44464f", "sighting--c9b584ad-1a5f-47bc-aae5-c648fd348efa", "sighting--a5991cd5-c6d1-4f1f-b75a-da70dd4d8a63", "sighting--f1856199-077b-4313-bcde-0dbd7e753140", "sighting--d93bcf04-5dfb-4e3e-b855-4d3efccb2960", "sighting--b4ac5469-1d6a-4876-9dd0-fc836c772aa3", "sighting--6f5aa425-663e-4530-a420-b5f8bcd54877", "sighting--c75088b0-e683-43f5-b25f-d4927674f1b9", "sighting--0d25a3a3-f80e-4c3c-ba99-84ca24ad9636", "sighting--03301a9a-88e9-4b2b-b735-41149231bb0a", "sighting--f362125c-8ad9-4675-8a02-0c132412becc", "sighting--fc358e53-02eb-433a-8a64-24d6efe50524", "sighting--5c00feff-816e-4d40-bbfd-b7380f1f6f5b", "sighting--a06da5b5-184d-4e5e-92c4-48d987149636", "sighting--34895983-ed94-41bc-ae70-7942384a379f", "sighting--f6e8dde0-f382-49f5-b4bb-25c0bf10003c", "sighting--8ace0d3f-b70a-4ffd-8342-a192fdcbb51d", "sighting--174b257f-a9f4-4f99-82a9-29f6518f7fa9", "sighting--e2338e37-ac0a-4651-a4dd-fb091bc540ab", "sighting--2423bb40-cee0-4ab3-bc1e-fad96448e45b", "sighting--0a9153d3-f3f0-4644-b952-18f8b9c60fd5", "sighting--f3824fd2-e3ab-4622-bbed-3dfc5aebba4e", "sighting--f4b088e5-b469-463c-ab57-867b21ff5e49", "sighting--19e7c76e-b0fb-41ac-b0f8-90d2884ebbf8", "sighting--18f42e15-af53-400b-a1ae-ab0949d25c52", "sighting--d77e4d07-8c8d-4a32-9ce3-7928ef87a261", "sighting--dc2361fd-a6b6-4d9d-bff2-64967183618a", "sighting--1b0fa84c-cc8f-400a-bb24-b2958bb447c7", "sighting--08b7dd7e-1b89-4341-82c5-686e66bb3c0d", "sighting--dfe6bb88-a656-4e59-889a-b4591fb9a5e1", "sighting--a36467f5-f6fe-4443-b9ef-5bf787823add", "sighting--c700c540-78ab-4cda-89f7-50dc4a0427cd", "sighting--e1596f68-09a3-4a8c-8eb4-b8d951d1cfef", "sighting--778c4b11-7d72-4c72-8b18-63d359c14cef", "sighting--d1ac3623-f849-405f-b756-6b2d4f6549e1", "sighting--da155c1a-5c22-4ae6-ab85-0a6f8280686b", "sighting--d46824f0-86bc-4b88-aff7-6a6aa9de54fb", "sighting--45d97632-f530-41f5-a8e6-048d268566b9", "sighting--d7107dd5-535d-4c76-8042-60c5ea2c1b79", "sighting--d02730dd-0105-4733-9939-fc6f96b3611f", "sighting--205899d0-44a1-4d25-a8b6-6e4c0d32857e", "sighting--106d9551-957a-4a65-b338-14f844bba056", "sighting--1a4b6d99-185f-41b8-a512-8abbc5281bb1", "sighting--e8699429-0a82-4d7f-bcdc-07d275a868ed", "sighting--a5a4b1a9-62bf-4fc9-9dcd-d8f911ef74db", "sighting--c9a50185-2ef6-43e1-96d6-d430a46077a1", "sighting--6c96e2da-0310-403f-9ee5-1cc200c441a1", "sighting--615e6570-ef90-4bc2-8d61-60826865728d", "sighting--f1da8c49-1eba-40c0-873c-1c325691e275", "sighting--60ead204-7d21-4faf-93c8-42d4087237e8", "sighting--36afb1e4-0de3-49f5-8e5b-29ef841f7587", "sighting--bef6a740-9293-495a-8dc9-2c750284de39", "sighting--32c68132-62d9-4994-a64a-979ab6889325", "sighting--b918dbfd-4be9-460c-9039-5e3a8958ed6b", "sighting--0d090f68-cabe-4726-9d9e-53c7f4d98b7f", "sighting--5bb9c87b-e115-4ec7-950a-1b601149140b", "sighting--0a770932-fdd6-4ea7-ad53-7d7b80c49425", "sighting--91d174af-e946-4c48-ad50-b51940c8f10e", "sighting--2e30f240-a907-49a7-844d-03322dba3c82", "sighting--28f7d1c4-b617-4f1c-8ae6-eab43bb9a569", "sighting--a6241b2d-6c1c-4f0c-9bfd-1935e022d6b9", "sighting--b34c3d1d-4a81-4044-83fb-b0425609f087", "sighting--dd746071-f8f4-4b8d-83b9-e405aec8f5f8", "sighting--c3469918-f416-4d30-a712-e7765f1f4583", "sighting--9c898fe6-14a7-4ce3-9f0f-9d3d1e45976e", "sighting--89267888-f691-4ffd-ad2d-8a490ac758db", "sighting--a762c21a-0045-4e44-82f2-66e997d5602b", "sighting--f4f71c07-5ec6-49f3-9499-67f3151b54ee", "sighting--5cafe93b-0c94-49ae-975b-6fc57b110572", "sighting--beca1a8e-db49-4947-a1b6-e144070f878d", "sighting--9189bf14-3396-46d5-af7d-7f99d7bb0508", "sighting--eb60b849-e445-4331-8c2d-c9e18ddb8d96", "sighting--f983109b-4606-458a-99bc-7f6702d35f35", "sighting--57662ddf-8a1c-4fb8-8e4d-caa8eb4198fd", "sighting--3ab4cd2f-9a3c-41f8-a032-7807b608879f", "sighting--be0edb33-7354-416b-a868-e23939e06f59", "sighting--af03440c-994e-4617-84b5-16fc2d91d968", "sighting--0f62b57e-da48-48a0-9e1f-e20dc57a8c9d", "sighting--8d88b010-1ca8-4912-9135-20ce3f34aae6", "sighting--8dd46caa-9731-460e-a5f8-a9cc181e7777", "sighting--7e253ad8-34d9-4f91-924e-84cb73e02deb", "sighting--e09a56b2-254c-41c2-aed6-87de4f34e08e", "sighting--bd69f23b-97b5-4413-96d5-0c6bf88e4c38", "sighting--595b76b9-61b8-4f89-900b-9616cda17a17", "sighting--c4c91fc0-9aba-4555-bc6f-b186012da2f6", "sighting--c1258af9-78a0-4cf2-9d5e-507cc1cec4f9", "sighting--3cd883cd-9f49-4cec-9442-c86c214f194f", "sighting--29565f8e-2389-4b24-8132-26d10557c499", "sighting--1d8baf1d-bafe-4dd1-b42d-e5db8f07211d", "sighting--05f13525-59ac-4d4b-ab7a-9a2367139ba6", "sighting--9104f487-7eee-4742-8191-4853ed8b439f", "sighting--76b2edb6-d186-484d-9f06-bd3e58653ece", "sighting--4bb7ce27-cfb1-443c-8769-4a0d79b65689", "sighting--83ff3b2b-3240-4d58-ae60-2d3062708eb1", "sighting--4de7d33e-ce54-459f-a02c-6c0cd23b103d", "sighting--6416feeb-dc3f-4297-8d90-3512c2962279", "sighting--a64f1e86-064e-4e8c-872f-cb41773dac52", "sighting--2f50c123-5497-4da1-a878-ba9141165778", "sighting--5be94644-4291-41ef-aa53-0fcf3a31ff57", "sighting--40480a05-11d7-47e1-a65f-8c60da6fccb3", "sighting--b00b6ad9-bc9d-484e-9dd2-00ce699f121a", "sighting--bfcccd70-7353-4cbf-93ce-3e7ea8ed2646", "sighting--95818523-1287-40ad-9ceb-bf938887434b", "sighting--ea4cda6c-717a-475d-9652-e072b3184fa2", "sighting--c0c481e7-b200-495b-9680-79edd1a6e187", "sighting--029e080d-a3e9-4b91-b1fa-42c934fe1ad9", "sighting--e502ad0c-8378-4d2d-8667-1e720b615e3d", "sighting--1c596c3f-3b9f-4389-8d05-29353df2060c", "sighting--c7580814-24fc-4e77-9e02-9d17c209f451", "sighting--8d5f375d-fee4-418f-911a-8710a4a6c9fd", "sighting--38971f60-4a0d-4c07-882c-e62dc53ef152", "sighting--7176e695-0725-4370-bbf9-855eb677d87d", "sighting--06733f1e-d5ea-4d66-a937-0ebcf9a876e2", "sighting--847565f2-44d6-4388-b0a2-d70f7eee32f3", "sighting--968490b6-f4b7-4e1a-be24-146843c023ce", "sighting--57ded8fb-761d-465c-973f-1ab8b7df233a", "sighting--c03b00b7-3460-4798-86ad-ce9f0bfcaa8d", "sighting--1ffe3f81-7f8b-475c-9af6-42a89d7230de", "sighting--1d963709-566b-4362-885a-c1e7cfab78d9", "sighting--5d037c14-64e7-4990-9d91-aaf665478e5c", "sighting--a45df62b-c4d2-4c71-9ef3-cf55022b2d10", "sighting--265d5753-ba17-484c-a2c8-bee9277316a3", "sighting--2d352a9e-8f03-4aeb-abab-e7a89bb0ad90", "sighting--6022cfbd-5e6e-4bd6-9291-3ee52e4c6994", "sighting--838eb233-f3c2-4c05-9683-6749a3a4ef36", "sighting--2b72e564-bc72-4207-a238-4de87dc2cfcc", "sighting--45d9eff6-7b52-4b05-8104-b57fdb3ea626", "sighting--558b0921-7692-4088-9816-0cb1356a1acb", "sighting--1741553f-cb45-4676-a66d-dc330b3d9020", "sighting--d1b4bce0-1abf-457d-8a3d-36d6dacd1d17", "sighting--78f0a0ad-d7ca-4433-9974-542bfdddec64", "sighting--25d42c02-301d-46f6-9c24-80c1b46ab7fb", "sighting--fefbbc62-95bf-4079-a63e-f40ffad66ce6", "sighting--65bbf708-61e8-4434-bce2-1523ce711865", "sighting--1d2ef77e-e2a1-4fdc-a85a-e84414bd3242", "sighting--7beaddb2-f2d6-44c2-9d3d-beed604dcaf7", "sighting--abbb93c5-2cbc-4a1a-bab3-53a447f09e53", "sighting--67233c3f-c83a-4892-9b86-429cb479a104", "sighting--bcb19a7a-c30b-4dfd-be05-324dc08751ef", "sighting--c4a6d138-d316-46e3-a43d-b716bdb37ccc", "sighting--80a1be78-9535-4db9-9d17-24044f0457b1", "sighting--c3d608b4-c783-48be-9adc-7fd721e1174a", "sighting--b24bf8b3-7bd8-489f-87d4-7e286f18974e", "sighting--b0420174-dd43-44d2-895e-25be5be9e43e", "sighting--de8da747-3efe-4d8c-be0a-666d8f2ceafb", "sighting--b03e18ff-8f7a-45b5-8907-33fca64f2935", "sighting--f73bf45d-a3cf-4815-81df-351ae9c1ff4f", "sighting--57e2a238-1c15-449c-937d-619ace148548", "sighting--47c6c06c-2006-4d4f-86e7-26d4a81043bd", "sighting--2d1af9d9-4629-4c01-a954-52fe4a689628", "sighting--858ccff5-edf2-4e56-b53b-d1d5b52f3077", "sighting--3be2e7d4-26cb-4cf5-8789-a01acb9ee1fe", "sighting--cf40d85d-3d69-4305-94c8-e91f4862f4a9", "sighting--cc45ee5d-7d09-4153-840f-013aad8c8c9e", "sighting--78a55fe9-0eb1-412c-8be2-a16586ad0043", "sighting--3d2695e8-999e-4d48-be6d-a15ced7a9f74", "sighting--d5884a3a-dcc9-4e16-9f3e-d880a62e7fb1", "sighting--fcbbb5af-e2ce-43fc-b962-5c4e31ba2227", "sighting--991c4a48-8209-418e-8be9-eb988d7c0530", "sighting--eb546efc-45bc-4b13-91aa-364afbd5ea70", "sighting--26f7ba9b-ab0e-43fc-8f27-d33d136fb61b", "sighting--fe04b529-2bee-44b9-bb96-677d9457a343", "sighting--7404bf7d-045a-48cb-9e05-3f959c111923", "sighting--7896b4a0-9286-449f-89ee-848f64ea5f95", "sighting--03f5426c-3dae-4c85-ad8a-882cc16aa4d5", "sighting--7e595dc0-f6d8-445d-a55c-7542498846a1", "sighting--6b2598c3-32df-473d-9661-801656895a26", "sighting--06982253-1ca8-4de3-8529-8012475ec2a2", "sighting--0172762a-c8a3-4ded-958f-c837fc9c3fc2", "sighting--326078d6-4e85-46b6-b20a-f59ab15f2180", "sighting--9bf343bd-5520-4468-ba2a-93fa2d180a05", "sighting--e91db521-61e0-4a42-98b3-756d1cc6186a", "sighting--1920797c-7dfb-44d8-a52d-c68e5ca19a78", "sighting--e5f1abb9-ff7f-49fa-93fd-7a3d4075b4a4", "sighting--0c12e83c-eaaa-455e-b125-cd9bf834dcb4", "sighting--cde46d53-06d9-4d0c-8b65-be239ab5859b", "sighting--06f61d7f-ed3c-4bd4-b872-02f2c0a7e1fb", "sighting--131f75fc-6e14-40e8-a4a3-6b98a6741b14", "sighting--3e75fef0-67ad-400c-a8ff-2141eeeab8ac", "sighting--4138fc06-2233-4bc6-87ed-078497700dbd", "sighting--60dec715-1aaf-49be-ac4b-37c9d48ca504", "sighting--08041795-da0c-4cce-a4fa-d5b40c31263b", "sighting--40940c86-3119-4540-aed7-8fa03a05f745", "sighting--9130ef0b-8e16-4e59-829c-be73cc8ec59f", "sighting--4e265a2b-1649-46c9-9387-42a3b499a0ad", "sighting--6d6ba1d2-1f94-46f9-92a7-4846cef94758", "sighting--9150d0f6-3664-4f20-88f4-d27be37853fe", "sighting--e3b7ecfd-7ae6-4d3a-b3be-da95fbc99399", "sighting--8947a9e4-3e3e-48cc-9e1d-daa96fd6c603", "sighting--e16df1c7-cb6c-4437-8821-450eb8326b82", "sighting--8fb0c360-9c08-414f-800f-e29c133ec209", "sighting--6c155bf9-99cf-410e-ae82-5ccc45b02fa7", "sighting--5d658a5c-7f3f-4683-b5c3-5777b433c2e1", "sighting--e9b79630-1611-44af-aae3-3de9d78a04dd", "sighting--d1d37d61-c059-474f-a5bc-ebc24c67b3d2", "sighting--ec0df3fb-81e7-4bc5-886c-63da5b0c5ed1", "sighting--2ea48f1a-fa9a-4b7b-9db7-0705af172347", "sighting--a8726d4d-42b8-4b8a-9145-2ed113e923ab", "sighting--70e65b32-ee70-4049-9a50-3da67630a9fd", "sighting--beee091e-a0ec-4876-a256-378c7581f691", "sighting--93d6f30c-b8f2-42d7-9012-19a865356473", "sighting--a01f45fd-9f02-4c91-9971-1ad9372669fb", "sighting--3da2fe69-1653-4cad-b5ed-ec25f54512bf", "sighting--1f354c4c-b81c-4341-ba5c-a42a225b441b", "sighting--2d7e0a2b-b257-4a2c-8d4c-06ac3c624fac", "sighting--7019631b-f550-4a93-9a76-3c0c5a0b9936", "sighting--73318489-b684-40b9-985d-6b5d81160a5a", "sighting--16e3e214-087d-4ac3-8872-b20ed156d389", "sighting--18b32a4f-62bd-4284-9ed7-8063f05bc32e", "sighting--8909c144-1e5b-47fe-85b2-f924c31a60bf", "sighting--fd916645-23ab-4351-8985-ef3557aa78b6", "sighting--382a10a1-a156-461d-ba50-c824eb352cac", "sighting--006e9c98-3e6c-49b8-a8f9-b4e37255d492", "sighting--8f576b63-4134-4860-8e59-213ffb2749b9", "sighting--a5cd9107-0cf0-4005-ab96-fc401f3dfe0f", "sighting--3354862f-e3c3-4912-be15-e041d091bcd8", "sighting--468e25b3-d037-40eb-9520-4084e1bcb5f3", "sighting--7fbb3754-ab96-4d08-a9dc-a8fef2ef3881", "sighting--7ebd96cd-e5ff-4de4-b580-db0a42a7a588", "sighting--396da2ec-c507-4db7-b8c5-5a76ecbf498e", "sighting--3d556b6d-b66d-4fdb-993e-9f50c78577e8", "sighting--7ad40c6d-b40c-4f91-992a-303a41dc90be", "sighting--5c6672ef-d4ee-4671-b53e-98fc59e8428c", "sighting--59f7c3dc-82f2-49b3-a78e-e34f89754d65", "sighting--b91fb838-00a6-47f8-b567-c3952f5de0b8", "sighting--c52dbbae-4575-444f-8a8d-f088f9d22581", "sighting--9b94d39d-0b90-4f9f-91dc-f352ef57806d", "sighting--990a34e3-b2dd-4356-8341-cd959b753094", "sighting--381f4637-5909-441c-989a-f97a1cf78e85", "sighting--4d8c2370-6f28-415e-86f8-a9ee4e7922b0", "sighting--2f9db8ba-d835-4040-9bc6-748cbe1d3a85", "sighting--245cf8bf-29f3-403c-94ed-e5e840b95140", "sighting--bba24b61-5f73-4b77-81bf-4de8057cb996", "sighting--59debafe-4d0d-47a0-a97c-9cdbd1de3613", "sighting--023512c4-8f82-4c44-a258-251b00a59d12", "sighting--ec211c31-cdac-46fd-9752-432fdee649e6", "sighting--49f53c9e-913a-432a-abb8-1d1c097781b3", "sighting--27bb588e-3130-4ad8-8807-80fa317e017e", "sighting--bd763e67-64e5-4ee7-9492-f3559a885d97", "sighting--b5377145-5d08-4d5f-8c72-70ef3f09de1c", "sighting--7b2378a8-7668-4d40-ad36-33734133fd3b", "sighting--38298106-46a8-4d57-b635-3839d9f1e870", "sighting--ba4cbae1-263b-4626-9372-514319ea87f5", "sighting--a77ba641-572b-4352-bd80-b24626d436b3", "sighting--282b17e6-07d4-4339-a761-7ef1bd6ed4a6", "sighting--3b39898e-7f6a-487b-ac6a-324e5de8288f", "sighting--8bdb37b0-955e-46ec-afbf-cbd2e69a3d40", "sighting--ca332b2d-1803-4286-8549-7c381ef14438", "sighting--2d9884ae-3985-4d31-a4db-0a56114ae3e6", "sighting--c87eaab3-14a3-4d5a-9486-6a95d4f3dc70", "sighting--deb8ee85-dd8b-4224-bb36-998b3aed0a28", "sighting--2c88a752-d949-4de0-bbad-446ede1a4d44", "sighting--c3c2ef7a-dcef-4c13-bcf1-c7ef90730334", "sighting--b071a799-8c4a-4102-91a9-72ec57327469", "sighting--ee8858a9-7e10-4538-be55-01b165b71329", "sighting--1662f149-4b94-44cc-a6eb-692a8843fa25", "sighting--bad2b991-d16c-419f-bb46-1d2e0fd9ac4b", "sighting--86e76aa2-8c50-4e65-be48-f4fb470a7e3c", "sighting--0824dd7f-05f9-4e61-ba4b-293fe154ac8e", "sighting--d4376109-690e-418f-a862-52785f8f8894", "sighting--88d2089d-99f6-4a8c-85f3-3cdb4671871d", "sighting--d90a43c5-af32-4f75-b566-7360681e7e31", "sighting--c41801c4-8d08-4f40-b75c-904af7590ad3", "sighting--c7907572-784f-4054-a60f-e2d512e20b41", "sighting--5e1247ad-f0af-4500-b15e-b590da831d82", "sighting--99c10bf8-d9a9-4d0a-b387-3978bfa93eb3", "sighting--fb7a2bbe-41d7-4003-8f2f-cb895aad4af4", "sighting--aa971b8b-3b1e-48fe-be97-c4cd7f4dc97b", "sighting--e69bd0f5-68fa-4443-b113-357732aa4b8c", "sighting--bc2d1a65-aafb-4540-ab67-6013dccb5b17", "sighting--68add8f4-2399-42b5-a3ed-df5fad18f36c", "sighting--d28002b6-fa2e-4f30-bef5-9d3b8d5fc7ab", "sighting--40d06d0d-4bfd-4484-b087-7c2826bae973", "sighting--c48abb8a-01f2-41f0-b94e-c2298b16a593", "sighting--c22dcac6-5743-4c53-a35c-b76bde72f870", "sighting--3327b2f9-5e01-4865-9071-abb617bbcb8e", "sighting--55392f0d-4b0e-4fbd-9de0-85b07eaaf663", "sighting--eabbde0f-ae07-4116-b3dc-8854f85540f2", "sighting--e8cb1b22-7806-4571-9ad7-d235d7ee66ca", "sighting--ca06ae6f-93d7-4b35-a500-204c207343ec", "sighting--b9fcf69f-8dbe-40ea-9715-844a4102bb0e", "sighting--2f0fdf5d-d926-43c8-b49c-a80270b35c10", "sighting--a00e1a9e-a020-45ed-a061-f3f7aa845c1b", "sighting--16b5f8a4-a74c-4c57-b43a-23c17fd11da0", "sighting--5c2d77a5-75fe-4cd6-a397-13186080883a", "sighting--56636919-a8a9-44e7-b385-32cff9c234c5", "sighting--cf027cbb-7350-46bd-8252-49318bdf925e", "sighting--b148707f-f57d-4ff1-a2b5-7d826cc104e6", "sighting--04bd18da-d77a-4923-93ed-83f3ef68c238", "sighting--d9fcaa06-6e46-4e0d-822c-5ed4afb55745", "sighting--09fd73fb-d21a-45a1-8cfe-2544365a33ef", "sighting--f06764c4-627c-47f2-bf2a-2f3679c89cc1", "sighting--5400154c-9701-474f-8d5d-0d95dbae27e7", "sighting--5f400cbe-321d-4c20-8444-e26b7d555123", "sighting--cf85466c-8fdb-44f1-b287-5c4742aa1a7b", "sighting--2d837041-e3b8-4861-b02c-9f2b802f2074", "sighting--10ecfa0b-9822-4312-8fa4-a4ba6c044cab", "sighting--81abf580-04c2-4763-9fb6-0ae75da08fcc", "sighting--32bf3a86-9fd2-4870-9474-8e9256e9307d", "sighting--e7401048-0c7c-4435-8443-dad8d1f08442", "sighting--063902bd-3158-481a-9c0f-fff28f9c625d", "sighting--483a70f3-bfa0-4eed-8916-0f758b816c92", "sighting--b429bf60-0c40-4ed2-a5fe-f220feb4326a", "sighting--100dcdd4-a0ad-4948-a52f-0bc53e705a83", "sighting--2552f424-cd98-4610-a770-13084d578da4", "sighting--902bce86-2923-470a-a0a4-0219ee39973a", "sighting--c63a5ef1-096e-43b8-8519-840e19c97237", "sighting--5a738366-cff4-403a-ae00-3e2e37022e0f", "sighting--aa6e6f3a-989d-4261-a269-c19cc1adbbd7", "sighting--d85c0c0c-d39a-4c98-8913-1378766c0b5f", "sighting--fbd90bbe-3533-43e2-82cc-68ec4f00c99c", "sighting--de26c26f-dfdb-4ccf-82f4-679783ebfe1a", "sighting--dda9b873-65e3-4281-afca-c606baa75c4a", "sighting--aeae1ad0-204a-4ed4-9c29-c05e2fc8d0cd", "sighting--e2c39e76-c208-4338-888c-0cd486fbe51f", "sighting--62d5d1a6-323b-4b56-872c-5e43d86fa548", "sighting--6781c8e9-1db6-4cf1-b0af-4f4ab338a0a3", "sighting--0eb33988-1ad2-49d2-b4bd-49d502f6807f", "sighting--3025d3d6-1bbe-46eb-9a66-c873ce5ae912", "sighting--7d6e03ca-596f-42f2-b184-011ff56153ee", "sighting--8ea9b463-3bca-4f19-b962-4926fdd1b84f", "sighting--ec5604bf-5e13-44bd-80a1-2ca1ce7ead85", "sighting--0ab0a212-7d8b-4999-a6e0-4a736d773912", "sighting--ed577ce5-521c-440b-b704-eb7cdd8ef5ad", "sighting--4a3ce516-7727-469d-8a53-adf5a249b2af", "sighting--f142283e-2e6a-4598-abc6-56f95b38c32f", "sighting--a3ac0037-e9e6-44e3-a450-071e6b481ee8", "sighting--2f7ce802-02a6-4ae8-a7d0-166f892a6e68", "sighting--f54185af-1fe7-42d6-b46f-0ca9adf312c9", "sighting--fb2df03b-9dc5-4c94-9e4f-fc14fb5f25c1", "sighting--efa26996-17bb-4e4b-ab47-f8205634ec93", "sighting--d7077d3d-f1cc-4d1b-8421-f7dc56508670", "sighting--9cdaffd3-b1ad-4606-a8eb-c9ee8b55d3f9", "sighting--87bcd998-a731-49c8-95d4-cacdc7e55346", "sighting--d6dc4c90-e41d-49af-b6c2-eeb8ec33c8ca", "sighting--38d2ebc1-6be5-4ccb-b85f-e67352c41e63", "sighting--44bb8795-4e86-486b-8ca9-946ee12777e5", "sighting--903dd410-73ec-4f67-9208-7f3cbd889726", "sighting--f6288a3b-4bc5-4c2e-a724-0017714734c8", "sighting--7bb87245-5e25-499f-85bc-fafd2126d562", "sighting--5b63a60f-4409-4382-b3b7-89fbd72945bd", "sighting--98c2bbaf-339a-4efb-8d35-a7561a0aafd4", "sighting--b63df753-c42e-41ad-a35e-f98d06e46e10", "sighting--36b00f0a-0fb5-41b0-bcd4-f67e6841f583", "sighting--7e3cc50a-efea-4602-b16c-b4dbf3f8ed15", "sighting--de253259-f670-4725-82ec-4ac17b949fb6", "sighting--dde815cf-cfeb-4090-b597-563a219baed5", "sighting--ac9698c0-c3d6-4df5-ad5f-67e1c70556bc", "sighting--4d4ff816-8af9-47e6-8d96-8ae189d09636", "sighting--700038b9-977d-4e4e-b146-ce390cc09230", "sighting--6765e3dc-0612-4aa2-884e-4a39c4ab0f5f", "sighting--2f843106-a63f-4658-93e0-c12adbd87279", "sighting--66051f81-02ed-493d-8111-1cfe408390e7", "sighting--9e0dfe69-2e63-45a8-8c1b-fd072382e901", "sighting--f1f68a13-ba97-4679-87f2-a8d1daf3d64f", "sighting--8cac0a2c-10e7-4912-86fb-d31d87034d22", "sighting--a4167299-e75f-4cde-ba9a-5ee999608269", "sighting--4e2eee0b-81da-4de0-a199-2b9d819f6120", "sighting--a3b6505f-580b-492d-9fc2-68c3904e2c7a", "sighting--90fc32fa-c34b-45b9-ae16-f16a1a00f331", "sighting--b694485a-7ca3-4772-8128-5945f65c1323", "sighting--b2cd2a31-0de9-450b-9f07-a4907e83db25", "sighting--ba91f54a-c686-4c0d-bbed-1e96c8f40853", "sighting--2c7f6951-b005-4503-a19a-d99f7c5fe589", "sighting--613651eb-3f04-4a7b-8d47-e907cb711f0c", "sighting--ec85ede4-8031-42e2-898b-9c57641a320f", "sighting--19a446c8-b7c5-4697-b335-0a65b3bd2b28", "sighting--0ac4d511-eb06-4124-af40-4b5f5af088e9", "sighting--bdd792e2-2ce4-493d-9377-78f28018619a", "sighting--9e14a90b-9def-4bd3-8a11-33fe22d13592", "sighting--2b25a499-34bf-4ce0-9566-a2999ec7a72e", "sighting--d241702f-2343-4fbd-a8b3-421c21f87217", "sighting--f99c6d87-6673-4644-976e-b8d2c6eb2eb0", "sighting--66c70756-6eff-4bcb-90d1-71f6ea99bb0a", "sighting--62a08c2d-7061-4416-a043-137460fc8dcb", "sighting--5e0db4d7-e98d-4737-8e9e-1035cafb8a23", "sighting--1fa4cc63-4781-4813-9835-68f922eb050a", "sighting--c19de12c-edbb-4958-94bd-d4955093c188", "sighting--daf4da87-ffbd-46f5-a200-de910b0fb8bd", "sighting--6236e13a-f04e-402e-b32c-ca17198ff170", "sighting--cf4a1f29-c7e1-4ece-b92b-c5d9a5c77a55", "sighting--c220e390-b237-4d7b-8cd9-1e194da4b2d4", "sighting--960fcbca-4278-44d1-b7b5-1687169994bd", "sighting--cacbf2bf-7065-4fef-b403-8752468993da", "sighting--95160746-3b64-4ab4-a432-b6e2455d0ad5", "sighting--a0989c4e-eb61-42be-b923-e80849dfa22f", "sighting--de3198c4-dab4-4bac-b821-56f53b344586", "sighting--3fe0a1fa-29ea-4b92-903a-5c1e4baca134", "sighting--feb2b35c-7357-40b4-8ff4-e4e92e4b40de", "sighting--6b298a19-5e3b-4ed0-9797-86021616861f", "sighting--e95c92d5-1ffd-49e6-bad2-59513a10e28b", "sighting--a4241423-1d55-4ce5-baff-c50d4b0af9ee", "sighting--5fcf35c6-ddb0-491e-9666-0382946e005f", "sighting--87203357-06d9-415a-8864-5cc11d229707", "sighting--3b0d38c9-b950-47ef-b258-de705aa91040", "sighting--57d609c1-6cda-414d-853e-c6262df99eb7", "sighting--47c02f60-4909-4eb8-8e23-cd5cdc57a809", "sighting--cf66a590-d25b-4a8b-8bea-abe2320b31d6", "sighting--531ebb70-806a-451b-8502-50963aba516f", "sighting--976ffadd-dd55-4075-8512-a53d4c8d16e2", "sighting--8361ee88-373c-4100-9e10-53485881c451", "sighting--efc4e52b-62ec-4e1f-94d8-743c1fad1e89", "sighting--d9192111-860b-4da7-a4b0-d87685807fa7", "sighting--836eebce-0a06-42e6-9cff-7ee5de5c14b0", "sighting--7fc044ed-bb6b-418e-a5d0-c0ebb06e4847", "sighting--77070763-6682-46ae-8de0-3a49b8199b31", "sighting--189c6c84-bf20-4750-9643-2214835df1bf", "sighting--9adc1f76-8bfa-4410-b86e-1c48dfa16930", "sighting--1cded204-ebd7-4794-b3c1-b3cdb71184fe", "sighting--c5aeb477-626f-4660-91e2-a2e604e358c6", "sighting--2d95c14e-55a8-4e41-b698-12363e155237", "sighting--cd926c36-1f0d-4e69-a455-36db1fbd1efc", "sighting--b0287ffb-f776-423d-90c4-e860c59737ce", "sighting--0e225429-1fe7-4041-b756-5396b42b7fc6", "sighting--80cc67bd-d866-4d68-9524-75c2f487d254", "sighting--e3dcdbbc-3593-485d-8b73-5aea37bb4b7e", "sighting--f268088c-a6d6-4c21-8e04-6edcf0a4d0c2", "sighting--0accc57b-97c4-44c6-9f03-ba38e8dea480", "sighting--19300b78-7641-494f-ae20-bdd92fc8b603", "sighting--c34dfba1-e11b-4ee6-882d-7d6147b6ea3a", "sighting--78d10de5-bc36-45e2-9001-22cf31ac1e05", "sighting--b88d10e6-27c6-48c3-946b-07c3f3f7b82d", "sighting--53c69ad0-f88d-40ed-b630-bfdb06d406da", "sighting--cd9e2263-026a-414d-9380-d58b2552993e", "sighting--6674ae19-f06c-49d2-9e09-a81ba42dc700", "sighting--7af5c6fc-5982-4f3a-8107-c6c8323ae4e6", "sighting--9b31805b-c08f-4753-98e8-a216819340a1", "sighting--3b6f7fae-5322-4cf7-9bdf-494b05f77bde", "sighting--47deba33-4a40-4212-87a8-eee46bc976b7", "sighting--f164c9b8-dbac-4e5d-9d9d-479ad3ce150c", "sighting--08e2566f-f3cb-49c3-ae8c-3e3114f9f6f0", "sighting--2e3ec676-d7cc-4bae-be7e-1ee27451dacc", "sighting--a6ac6128-bce1-47ed-b84a-a3e5ce8ae2d8", "sighting--74edbae2-e41e-4183-99c4-82a92da08a5f", "sighting--0a4a929c-f686-457b-be74-eaa32a904532", "sighting--8968cf13-6bd6-4495-b90c-78c2f93e56e3", "sighting--05e79c51-d4d2-4a17-bd75-d075e288fdf0", "sighting--f3e07456-52b3-420d-a3a0-45f7956b09e6", "sighting--cb2e8cda-6032-46eb-8e77-d6482b1aded7", "sighting--eceaebc6-59b6-4ae8-97d7-95f5892df988", "sighting--28000375-dde7-433d-8f72-7084cc07cf55", "sighting--000df052-60e7-47e7-ab11-14cc48344874", "sighting--87a590ce-e708-4ce6-87a5-d2e6883492ae", "sighting--9d724f25-5bb8-40ca-9715-6b41089fc79b", "sighting--fa3912c6-1880-4b12-a58d-91a0223ba369", "sighting--bc36190e-f463-4c63-abbe-659cbb7799b7", "sighting--ddf10861-24b9-44a1-aa0c-722e15a36366", "sighting--27425f2a-4ae1-46cb-9f86-f3986885de26", "sighting--2f57ce30-5600-4e16-ae33-561370beda0e", "sighting--810458b8-2012-4ed5-8b96-eda3f69211c3", "sighting--4502233d-c5c6-4e1a-8109-9bfd6ff181ff", "sighting--55d40433-2d51-4ff9-ad31-4856f57d3945", "sighting--93d03944-5975-4ea0-91c1-c887f62264d1", "sighting--0b797889-6b49-44f1-9c1c-8de05c518476", "sighting--050d7c0b-9ba4-4786-b7d9-e9f3c22a98b7", "sighting--dd806222-07d4-4312-82e0-2e1710e0beca", "sighting--79251616-7c02-4b19-8498-d3e72c1c9b2a", "sighting--a3ed6d07-d812-4be1-a01c-65c6e48b1fd3", "sighting--f6e9c1a6-aa28-4817-afb9-46c22d4cf275", "sighting--cddf7cdd-7b65-4805-a32d-7bf8be7f5bc6", "sighting--eb961c6c-550a-4fa2-9b3e-298d93185519", "sighting--097aa90e-2293-42c7-8d3d-33ade84d459a", "sighting--d8c48af6-6be3-4aa2-bf31-fde1978fb036", "sighting--3ccc7b5b-bcf2-41ab-9ad1-c2347f09500b", "sighting--56ec16c6-bdb7-4ade-8157-5bbcc35d4979", "sighting--00e45099-383c-4c22-86b1-313225b3783d", "sighting--6f89fa95-5db0-4267-bf87-6a11d31400fe", "sighting--60682b3b-9716-432a-89f5-262955211028", "sighting--e6a692bb-56e1-461b-8a80-50e31dc02b92", "sighting--654b1e02-b413-4b24-89ae-c800f96b0b53", "sighting--c312faa2-4784-475f-b3a4-8a19f7844dc1", "sighting--084162b4-5874-497e-875d-0d2b421e1ca7", "sighting--8424d553-e69f-4136-a014-f207dfde708b", "sighting--fce50147-deb8-414a-8fa0-38dfc73cd0ea", "sighting--d75779b0-5ecc-46c6-aead-f5c9a9df5d77", "sighting--ac2196c0-3d35-40ac-8ab9-4544be1e2bbc", "sighting--cb49ce4d-59f7-4254-a231-057383dbf5cb", "sighting--701e251b-6649-4301-b820-f426524f9643", "sighting--d7d4f2de-7c3d-4736-95f7-991b020d0218", "sighting--777f62c1-f855-4500-b0cf-c229a179493a", "sighting--9bba3f3c-bd4f-4191-9f6a-c918bdcdee26", "sighting--42e733cd-12aa-4734-ae71-2e73824ef05d", "sighting--feaf5047-3302-49cb-8e6f-7a2002f567c6", "sighting--fbf9ae81-ff90-4476-bbd5-645ed566dc4d", "sighting--610f7102-353e-43f6-a369-1c81f79309a4", "sighting--28d84a1a-5ab9-41f3-8950-3db67d5fd870", "sighting--3e18e3e1-4762-4467-a6b5-0bbb2d0fe171", "sighting--6bb987f2-ebfc-49d2-97f9-2f8cb7001128", "sighting--bc40f5a0-aba7-472e-9525-d5680f453770", "sighting--ab7f2416-5a52-4b5c-8f31-6d02162e42f0", "sighting--af132c04-0dd8-47d6-aad6-e2175a8a22c0", "sighting--8ff13eb7-4367-4093-b29b-edd28ec84551", "sighting--dd07f568-0cdf-44ab-b9af-b06f2a35fdba", "sighting--81377c1d-f902-4b48-84ff-c18c1ffd6e2a", "sighting--fe4bad83-ae66-48d9-92eb-294c1efebb87", "sighting--e6ec2fd2-ab71-4bf8-af01-ad2e916c4016", "sighting--82f353cf-7b75-49a4-af7d-e234cef5c7eb", "sighting--0feff23e-398b-4da0-a3db-ff14f492751a", "sighting--732fac5e-a877-42aa-a627-ce8a5a248208", "sighting--3ca5d937-989e-48ab-a25f-7f98696a6279", "sighting--116ec954-5ea1-4c69-b7d6-3fe62c6fe7d8", "sighting--a190d6d5-4293-4249-9169-7eefb385c350", "sighting--f92b661f-d270-4832-b1b9-0359cbd1add3", "sighting--aab1517c-56aa-4760-ba84-b250ee4d82b1", "sighting--8359ba3f-9675-4ae9-aad1-826fc40cc757", "sighting--7db8c0ab-d2c1-49fa-9dd2-c5224da65ca6", "sighting--6b264ab4-7830-45a7-8c2c-076a3b4756ab", "sighting--1f6519b5-10a6-4ab0-b26d-ff3da8630529", "sighting--939dc392-6408-4d89-9887-e94cd6245b2b", "sighting--b7129b00-c27e-46ab-9ad4-9f3e8c8ba0ab", "sighting--e57bec8a-0b5e-4ccf-9ec9-46c4ed26939a", "sighting--822d2ca2-b7d0-4e9b-b4a2-edee511742fe", "sighting--67f8079c-9a2f-4d98-a2dd-88704b5afc29", "sighting--f5fec10b-6fd9-4686-977b-b6340df09f5b", "sighting--5df98d5f-0aea-4477-a1e6-2efadb35425a", "sighting--a87a90b7-81a5-430e-87c0-6a753c723bb0", "sighting--88dab408-f0ae-4af9-9b5a-a9b4024f7af4", "sighting--9f17ef89-dac6-4d2f-bb8a-0d2b031d8cdc", "sighting--765eae00-b535-4507-b07b-cb4f6a18f99b", "sighting--582c9adc-e0f4-4e40-87f2-4e4016fecd5d", "sighting--be6db84a-96bb-409e-832b-9a9c460ec360", "sighting--a55b31f3-0392-42f7-85af-d094d487be82", "sighting--360b81eb-3516-4451-baa6-1473685cd464", "sighting--255fc6d7-efc9-40b1-a051-f71a73caff36", "sighting--5fe5a65f-48fc-42a3-aa0d-f35d739e76c2", "sighting--92e71cbc-ea5a-43d0-a660-24bfac2f8132", "sighting--a9c3c09b-0251-4c10-a697-43d2bde0d3d4", "sighting--8d5ac458-2c35-4100-b907-0a3b0df29e4b", "sighting--e21b802e-b2f5-4923-840c-bb9fb09aa375", "sighting--be536ca5-7b0f-46ef-adaa-8f018a1350f5", "sighting--1ecd7443-45ac-477f-b2cf-f1b902fe74e8", "sighting--e84b0eec-e1bd-4bad-8468-90e7f6d18a46", "sighting--3c6243b0-e6bc-475b-b00e-065216dc23b9", "sighting--fcebfe50-ae7f-4ba5-96a3-90a3474ae618", "sighting--1624b317-f8b4-42d2-adb2-035d11846d53", "sighting--70eafae7-f614-42f6-b1f6-a8979e29d417", "sighting--277e8fa0-5296-4f8d-83e3-b91b26bf3a17", "sighting--c9c00e04-1b41-41be-b5f1-f84d1fc5586e", "sighting--b347c9ea-16b5-4009-b5d7-ad89e12fa2ac", "sighting--2ce0c7c1-8505-4dd2-82cc-cbda02e8b1df", "sighting--1b593106-a7a4-4e29-8dbe-009bba475bab", "sighting--0972ba98-a97e-4ccf-a048-e17b438536e2", "sighting--6dbfc487-5c7b-4930-8dba-24bf4dc5a1b2", "sighting--bb22ac8e-0193-4e73-b082-8ede7dc3501a", "sighting--a967d681-dc70-4816-8cb7-6ed474a23d42", "sighting--1d968b2b-95e9-43eb-937e-e1d6873e7de1", "sighting--ac0fa5f2-45b7-4ad8-8e5e-ae592ca17cdc", "sighting--527682fd-fe02-46a8-a105-24fdf78a62f2", "sighting--7f4fcf45-df52-46b6-8bba-8a08f20629aa", "sighting--65099af6-1bb6-436a-bc25-979a3d790ad6", "sighting--b7b0a873-2c96-402b-ba16-f4e133ef196f", "sighting--26255dd4-bec2-479d-a31f-73ddb063046c", "sighting--85a1a56c-943b-4c21-9ed5-7e194913fbf7", "sighting--9a51d5f5-cb0b-44f9-96c3-91e7089f1651", "sighting--dbf00a2b-6fc9-4123-b2d8-872144022834", "sighting--857b74ba-b4e0-4a7e-9775-c512451113a1", "sighting--593d0a56-24c6-4c7d-957d-2b278284cae1", "sighting--8a50bce9-d1fc-40c0-a8b5-6ee35494840e", "sighting--55c4c63a-8143-48d5-862a-2f1f85cc2986", "sighting--4286edf8-3c0b-4c1c-be7e-40ef3ad74652", "sighting--2c958968-3719-4287-8cdb-ea323f68454d", "sighting--60b218a3-6167-48ae-b3f4-031017b69321", "sighting--2b57b06e-cc42-427e-91b0-8f21a9e653c4", "sighting--5784b0c9-a333-4f2c-8cd7-cfaf550038ca", "sighting--e6efdd8e-df6d-43d8-b2d7-4a1dadb0a119", "sighting--48f69ba5-4a0d-4127-b7c3-829c6cd05e75", "sighting--64656b42-908a-47ce-9683-69c84e7ad928", "sighting--93552862-03e3-4a74-93bf-0a3466bc82e4", "sighting--79087ac8-a19e-4f84-8d62-be39ba0019e2", "sighting--5a22c85b-f2e0-4af8-92e3-62d6efce6231", "sighting--76891e25-920d-4f91-8da9-7e0f6a9cd268", "sighting--549968ad-7073-43ab-a875-57ded7c6d336", "sighting--7461d8a1-4b9a-4d75-8b7b-0904d3420ca7", "sighting--da07b6e5-10a8-4dd5-a27d-2e957d6bb841", "sighting--fcbcc112-cc26-410f-a308-d3185fc12711", "sighting--876f6b47-fd85-4169-9fd6-45a5a65acd78", "sighting--5d71f53a-028f-42ce-8aa9-da9f2039793f", "sighting--5c7d0453-7ba2-4caf-b7f1-5361eebd6475", "sighting--42123756-414e-456a-9535-9c9578abc9e1", "sighting--fafedc72-9b8e-458f-99a8-db75c58323e1", "sighting--e6d21a53-ce01-448a-a293-86230d9af422", "sighting--70e8567c-315c-408c-aab4-beda3d1494f8", "sighting--f45cd123-3e5b-4754-a17e-779a63dde430", "sighting--8393aedf-ddb0-4ca4-8aaa-8a1fadbbb8f2", "sighting--7a39c822-1fa0-495f-b4e0-b622ae92f61a", "sighting--d86cfcd3-3626-40e0-ba38-c7f8590ff57d", "sighting--72d934f7-0ff9-4586-91c8-e90a8f1e729e", "sighting--8daffeda-4cf8-46b3-b839-b489f27fa535", "sighting--1c6d00d2-08a0-414b-bd69-8ed8847e74c9", "sighting--45a1d1d9-b180-4138-a442-381a015cd5e4", "sighting--036711f9-7e03-4831-b4fd-5191c9476b4b", "sighting--38086298-1e00-4b81-9aec-dfb7d078ad21", "sighting--ddb14afc-71a9-46e3-922b-f042a6e7e640", "sighting--66b01f8d-2de6-40ce-ba13-e002fd038b31", "sighting--91fbde0d-1de1-47ce-9009-d0b8215f84fc", "sighting--275c8aa6-4a4d-47f0-97c9-1b4fd966caa7", "sighting--e46d920e-f0ac-4290-81a3-74756a335322", "sighting--27e2e556-6e48-4f46-8221-9759ec3cf86b", "sighting--44847124-778e-4d21-b783-d0ac71222a54", "sighting--4fb074bc-85b3-4804-b31c-72eb5eeec4c1", "sighting--c3d59d90-1042-4371-9f3d-a5179a19764f", "sighting--12ccce42-9ec9-465b-94bb-df99bb6ef6bc", "sighting--1b5e322b-86c8-46d8-a2c5-09d74b2e8b64", "sighting--f2cbf35f-1fa3-42fa-90a4-b5e416616c3d", "sighting--ad2ca34a-f867-438e-949f-56a30f3b4828", "sighting--6d4b9b4b-0ff8-48b9-b9df-7247d377dabb", "sighting--3950884e-9bca-4427-afb5-52d928a38d8b", "sighting--163028ca-ed41-4916-b5aa-983dbe5215b2", "sighting--1fdd1dfc-e93d-4aae-a63b-9f85a47a4e9a", "sighting--1101b662-38ae-41cc-a585-c5df759ff7b1", "sighting--96a3b517-5172-408c-ae52-850d9ccf6322", "sighting--3dbe2106-5607-4975-bc94-fcff4696e9ca", "sighting--ebfaabb2-dd82-419a-bb84-74e9e6a3035c", "sighting--a2177b99-0db0-45ff-bdab-2fd92908c876", "sighting--bba6e612-7c2a-440a-aba8-bcc59ac453f5", "sighting--e4a50bfa-3942-44d6-8b4a-0cc4032db316", "sighting--b3e8c9eb-a065-4431-bca0-6e40470bdf26", "sighting--eecde0ed-3e44-435e-9bde-ee64b6675d8d", "sighting--bd39821a-fda6-4e7a-8df4-3455e3e8cd57", "sighting--31a12c4c-0a6a-4031-8817-ad8e0ae5dcd9", "sighting--1691dd67-4acb-460e-abb6-7486866a02db", "sighting--3e81182f-1917-47eb-a7a1-835d9635da83", "sighting--7d96631b-04b2-429d-aaaf-85dee62afb52", "sighting--9939d90b-a2e1-40e1-a30c-0ffa8a9ed219", "sighting--79f04cec-2c38-43b9-9452-6cf7d12685c4", "sighting--66f19a32-9a1f-4a15-ad8c-e9807e554113", "sighting--0a9cd8d0-3588-47bd-a852-4e57dd3bfeb6", "sighting--e9fb587a-11bc-4f29-8de6-2cd94e395726", "sighting--fdbab183-e79d-4e3c-b4e8-cd875f3befff", "sighting--ad335248-af75-40ef-8ee7-7b6ffb7cd81d", "sighting--036ec533-df7a-478e-822a-a625270e405f", "sighting--758f7d5d-ccfa-483b-9706-293eb5c335d0", "sighting--2c9fc358-f964-46a0-a4b5-efc1ecf8f831", "sighting--49f4da6c-5b37-48d4-9072-310190f17ba6", "sighting--a3d688ed-933d-403d-9842-4f2cba04416a", "sighting--9dfb8350-57c9-401a-b924-7238c4c2919d", "sighting--4d4e92a2-fe29-4698-8166-f503cc37f738", "sighting--f19e18dc-82fd-4c02-a7f7-875bbec789ae", "sighting--2829064f-79c3-45f2-a1a0-9a29d5d17e39", "sighting--a312bf70-00c8-4407-9b8a-0c9192969494", "sighting--6da4be2e-a464-48d9-b1b5-854ded2b5b53", "sighting--1b1224c6-3679-4e75-8e4d-781f3f30e1ce", "sighting--1f8323cd-668a-4013-b77c-39c62355bcfa", "sighting--d425ba75-7f67-4180-9fa7-ae8c8f621df4", "sighting--937ac130-5751-4891-8937-d0798f66566d", "sighting--ede5c4ac-c67b-482b-bc5d-0c75b22f4c80", "sighting--e17468a2-e1cc-451f-9cda-9566c5bc4f9a", "sighting--631df450-bb1b-4fbe-b17c-c1159240e799", "sighting--e7ed8481-53c1-4ff3-8f6c-1b14c49c62eb", "sighting--5865ed3a-d933-4d0f-8059-ea85e3abb8e0", "sighting--98015085-dcdc-441f-8be2-38199a1a49c4", "sighting--cc1b49a7-e6b7-4913-9659-5d9e4ff1f858", "sighting--2fba852e-63ea-41ea-9344-7c4a1a366a30", "sighting--50c5263d-433c-4d2f-9495-c15b9071c70d", "sighting--5515908a-b7dc-47e8-94ef-fd885218f5f6", "sighting--6324b2c7-a633-444a-a58c-1e209c2a996d", "sighting--0679e30e-fef2-4664-9a4a-1d4772e2e3a3", "sighting--7bda1937-48bb-428f-81ab-2a607f97f735", "sighting--4e8baaf2-3c34-4598-8132-3dc32925f75d", "sighting--1b01fc6e-a05f-421c-9230-aeb4eae43931", "sighting--3f993089-3ad8-49ac-8f57-dc17d2ca805d", "sighting--073f9a63-e87a-4e58-b9f0-8b332a18ff98", "sighting--205f4307-8a4e-4357-aeb9-b9f2e1468107", "sighting--52dc2800-69c5-4f19-b0dc-4274b4156702", "sighting--da3dff7d-5c59-444b-8c6f-679853474387", "sighting--1cec428d-41d7-4f38-a0a6-1dd928bdf970", "sighting--7115f85f-4789-4e66-ad1a-2a5120f24b29", "sighting--347f1c7c-2c02-4c06-8d8e-e71e1a26937c", "sighting--e75cb674-ac73-47d5-acf1-5c3afe5d4cf4", "sighting--89162e9c-f2cd-460b-a0b7-849bd2c174aa", "sighting--4482cb44-7ca0-49e5-94e9-cbbbf6826a59", "sighting--caed726c-135d-4f92-bf28-8b67d95730f7", "sighting--64860798-c6b8-4a55-bcf6-31017df1a48b", "sighting--52c1b3dd-cc60-4923-a69f-99266a3c0d3a", "sighting--40cee4e1-ebb8-4552-9bd5-548d58bd1ed6", "sighting--9a88392f-d499-4d23-b4d6-11bf83b6dce3", "sighting--0da3a715-1e70-4059-b622-555ba32d24ef", "sighting--af330fbc-2dd9-40ce-a532-ce5eb80527dd", "sighting--eef5a6ae-8868-4e81-b5ff-ecfe4dac3534", "sighting--524be3c8-e6c4-44ce-8562-01b228bce29e", "sighting--ce2b9571-5977-4699-ad4a-c10d3953f361", "sighting--2e5a2d3a-2f9a-46bb-b526-653ceddb0a78", "sighting--bc77a6b9-9433-4746-9b15-0869435c7ee1", "sighting--c2139533-3f38-4234-8efd-1a1d77292085", "sighting--a9e532b1-0d7a-4e2e-ac7d-d2ee4876172d", "sighting--2aafc9d1-67ff-4d90-8ad5-c201cb7cd93a", "sighting--f5bf2bd6-c25f-419a-bfd7-12445dc60a44", "sighting--5a717a9c-73af-49a3-a8ab-3f9f89048923", "sighting--5f1cfe76-713b-4203-9ce7-4dd13846474a", "sighting--58391331-4a2e-4aee-a375-8acb6ee4b4f0", "sighting--1f921124-d6dc-4a31-bf41-b6a3ece3a987", "sighting--cb5a6951-db3e-4929-a8d7-dbdd936cc412", "sighting--fabf5f6e-921c-484e-9a08-5eec022fe688", "sighting--6938ab4d-4b34-4104-be1e-d7cfd811efbc", "sighting--13d85eda-6e19-4d5a-82bc-f52e08af5af9", "sighting--a46b6f46-0547-4fc5-8c2a-f94e8cc0ef07", "sighting--f50e32b4-6479-43c4-a3ab-625bc063d80b", "sighting--9a3b9ac3-e01e-42e5-959e-6ba8a0649faf", "sighting--6fdfbcb0-7637-4a62-9eff-813c4308af98", "sighting--5fcb3c5c-0cd2-47a3-8efa-87455fb51096", "sighting--d7b8cc5d-0a2a-4d8c-85e2-9a5fb1fd7604", "sighting--007ced13-36a0-44b2-a1e1-f1ef7755d95b", "sighting--f5c0bd78-11f6-4367-a79f-291a9e41dd60", "sighting--7cd06c15-258a-42a3-873d-58bcfdbb9bdd", "sighting--ee18e47d-a198-4d70-8652-3af5bc4d45ae", "sighting--17922db8-2bbd-4b8a-bc88-a337ade647fc", "sighting--f8c6b58c-80f6-4f7e-8c3c-f1f18b13d9d5", "sighting--abc7d23e-241e-406b-816b-cc8edd6b8fea", "sighting--751f9205-2a12-4c55-892a-83778d604649", "sighting--c4ab45da-aeab-4451-8ef3-84c4dfdc8813", "sighting--8ad2209b-7cdb-47a7-b5bb-ae7e4584367e", "sighting--1efa1dd4-e2ec-45fd-8856-2cf98755be6d", "sighting--56fd4ac8-a091-4fb8-9c7c-718e20121b79", "sighting--ac3dfc47-1af8-4bc3-8a8d-1649cde80a25", "sighting--f987938c-9f58-4d2c-843a-e3c6440c6aa9", "sighting--a8411e94-f33c-48fe-810c-c4ac25dfb237", "sighting--966c007e-6581-4b49-b22f-6b4227039367", "sighting--976a33bd-e006-4a40-91d5-0cbb4c4a3e86", "sighting--5c85da94-3053-4296-898a-e0e98fcf4f49", "sighting--440768c7-e62d-4116-b8fb-85f31d25e483", "sighting--159966c9-e552-4f19-a571-fd8a0def1bfc", "sighting--04c4b0ce-1601-488d-8a0a-5028d529ab1d", "sighting--890c8096-523f-4692-b875-ee100df61615", "sighting--de2a0646-bd47-481c-a85b-34f838841882", "sighting--bdc3a944-6bb0-4d88-86e4-49988041f57e", "sighting--bdfa5a03-e848-4e93-83e7-5b893cd8cfac", "sighting--2e561b7c-8617-4c45-8286-5f4e20cfadba", "sighting--60ac235e-caf9-4094-98fa-fcd18e8635be", "sighting--65fb5ca7-27cb-454f-8f9c-978e67c873cf", "sighting--508354e3-d864-497f-8003-0bbb6fc00408", "sighting--8f2ca8e6-7077-41bd-9d86-a6040f9b213c", "sighting--d804389b-f78f-481f-b993-178012be99af", "sighting--f7a32328-6729-45c7-b2a4-93def5ee7043", "sighting--6485df22-065d-4076-9e85-d85bc4ff6c61", "sighting--6d218ddb-0f86-4e20-a2d5-4d4104e0b3dd", "sighting--2786e5f5-83e3-4c4c-aa4c-e5a60e26434f", "sighting--3f9047cd-6801-47e2-9334-f33d309e8b64", "sighting--d9c05c21-d530-4975-9e4f-cb6af08e9177", "sighting--1ad882bb-0e58-47b8-9a61-f8f89bdecac8", "sighting--613aee66-0f8c-4325-8991-adf49630404e", "sighting--9a862efb-efc8-405c-b7f7-29269a620bdf", "sighting--a2a5d8d8-27d2-473d-834a-511863ff5591", "sighting--b71d8e56-bb37-4637-896a-573f4908bc30", "sighting--267ca455-a878-4070-8e34-8ef8e839efd5", "sighting--40c76129-d0e4-4689-aba2-f077447ce59e", "sighting--9b57c66e-548b-4686-9a28-61eee56c0625", "sighting--90342498-7064-4c83-8363-363d662caebc", "sighting--e1cf2906-ba31-4b6f-8d32-d8a4b382e45d", "sighting--98b3a27e-ebb7-4c6a-b655-bd0964b9e5ae", "sighting--3caafaee-2a0a-41a7-860f-8aa38bd711f0", "sighting--2320388b-2f6c-4ac0-b810-2413e2200704", "sighting--2a0b74b4-62a0-4572-b411-139484f63f5d", "sighting--2620166e-eb80-4087-ac9b-19875644226c", "sighting--2f711c0c-8923-4da6-8647-4338c7c155e6", "sighting--697cc5c1-6e36-412c-862a-d0899dc29dbd", "sighting--3c434eb6-ce6e-45f6-8a0a-13384f5cd9d0", "sighting--3a1f9b24-05b7-4e71-aaed-3df3c1983e7f", "sighting--717d5182-e6cd-4ee9-84b9-e5a9c1e14a79", "sighting--c6e9be6e-fe43-4805-90b9-2818cf3f3159", "sighting--59543e98-f041-4867-9127-2965d1ab5c86", "sighting--e1b79773-04a6-4208-bcd7-a1a636db3f3d", "sighting--197f7385-9dfe-4663-8ee6-e331dee9dcb4", "sighting--3ddef8e6-0e15-430a-9539-b356d7c209d1", "sighting--616b6a9d-3e10-45a6-b153-636eef5290b5", "sighting--3bb970b2-7025-4647-9d66-71728824b020", "sighting--5dd3802c-eaf9-44eb-84eb-ce6f72153b9e", "sighting--d1ea198c-a002-47ae-8d18-fe4533e535e3", "sighting--37857a60-6d7f-429a-bf50-1d3592f732ff", "sighting--e2114919-f0bd-42ee-bdd9-5eab9a0aedfd", "sighting--03cd6499-b14f-43ec-9cf4-08a917d35bb2", "sighting--66302ffe-4f35-414e-a477-a6931c39b0ae", "sighting--b42b9706-d0a7-47ad-8df0-e88cbd8e9885", "sighting--3eedba05-95bb-479d-8efb-e0d70d99ffd0", "sighting--fbd8a2ed-fb07-4d3b-bdb9-c5223f3d49ef", "sighting--fe400e35-c766-4957-8bf9-be8a655ff7d9", "sighting--98c1bcec-96a3-4f8f-98c2-14d426e8a0e8", "sighting--205fb8c0-919a-4399-b775-d5e5c92a4bce", "sighting--9bfd4a61-f9d1-4683-bab3-810ba218a0bc", "sighting--b54a7806-e3d9-466e-83bb-ebac2e8a6d53", "sighting--c0686442-ee60-4283-9434-13fe17ea3a84", "sighting--28b0ae95-397f-42c0-bf10-2257cf8485cd", "sighting--b4e736da-90e0-42e2-a58d-44861b8ab486", "sighting--22bf2030-3177-4a2b-83ad-b4d4fdbe549e", "sighting--dde7faba-1847-40d1-86cc-873c1b07e24f", "sighting--795fd07e-ef64-4b42-a09d-de649bc99f75", "sighting--2a0e4e03-8341-4a8d-baf1-38ad0c1735d1", "sighting--ce28bafe-0bcf-4539-84c1-f8cd971edb06", "sighting--9166d060-59c2-4480-9c99-2f3f13d11b4a", "sighting--61415cab-9513-4313-ac83-d4bdbb0940ff", "sighting--380c30a9-539d-4b4c-9708-aa0e41dd10ac", "sighting--3b931dc9-a58f-40d3-b982-b01d848c2f6a", "sighting--b214e4ee-6996-450a-8dd0-755375497b06", "sighting--2a518c19-bde7-4932-b226-f1fb55f1acb8", "sighting--17cbf7c3-c1fc-4808-8279-b3200bbd44e2", "sighting--c4e12842-d63d-4b80-a205-b9e48d2a4c35", "sighting--88d73286-92be-46bd-b319-5be45c998baf", "sighting--0abbe8ac-5678-4cbc-aa28-640e0ee49d11", "sighting--c5d4d3ac-7ab4-4957-bc8a-d3d9944ce029", "sighting--c54e7b1b-ce77-4130-86df-63074a550faf", "sighting--d4e0bfce-bae8-4bfc-970c-755552222717", "sighting--a31bad35-f611-4465-a140-f6252d98cd7e", "sighting--4ca7f154-260d-452a-8547-e8d0a609089c", "sighting--09edd398-8937-4c39-aeaf-22bb998cee89", "sighting--cbcca067-6302-4453-bc51-26b9f820ad45", "sighting--7e6839e6-7e4d-4b9b-8217-6ccdc454796e", "sighting--e84a1126-22cc-4310-b850-03b6ea6c15d6", "sighting--04414917-5d07-4153-881c-99f37d8d96b7", "sighting--206cf904-0867-4145-b780-ef92fc8bf7d1", "sighting--601478eb-776e-4228-89b6-997269ea8812", "sighting--e21faa1f-ee98-4691-8cf7-61881c6bcf2c", "sighting--ba967972-4d9d-4909-9940-8ce2567e3848", "sighting--7be766ed-a81d-4d81-afaf-30281ba81546", "sighting--112cd395-1743-4e0f-8349-0a04f4055a43", "sighting--7677ed81-d549-4b5b-93b1-9d8ad64452d9", "sighting--e0591a6e-1815-494e-9ac6-a90e6d618bec", "sighting--63bd88f1-64a2-490c-9893-f5ff13fa151a", "sighting--07a283c7-23a2-459b-b10d-452b26a740d3", "sighting--c7f87674-75a7-4189-926d-6c9c1bb88789", "sighting--b7e055f6-6d60-4326-bfd8-f86f16fe35a7", "sighting--ee3ff52c-bc69-4380-a11d-09f75eef2d9c", "sighting--308425be-778b-443d-84c8-6f5dc72ea9e0", "sighting--96973975-ce9a-46db-8d25-29cca9a6cdb9", "sighting--76cb1980-f779-4ba0-99d3-711006c0120e", "sighting--3b6c00a1-5046-4e08-ab86-105fa51844fa", "sighting--cab0ec2d-b26d-4165-88b9-9ec79f8ab7c8", "sighting--97978d6d-0d53-43a1-bd0b-9d8690350e39", "sighting--77d890a9-1315-4e33-bd99-7c374126392f", "sighting--c118ee6e-6d5b-432f-82af-ef2820abbdef", "sighting--f7f259c1-387c-4be3-8ed6-19f017398454", "sighting--dc3c75e6-dcf2-46b0-b453-6bd12d1b37fb", "sighting--7b1dcf46-34e6-457d-b7f1-5c173fcb5d27", "sighting--98b4ca57-bd1b-46a6-86d0-8c594c5d10c3", "sighting--d84bd167-0ef5-4f8a-a97f-24dfa4a39a54", "sighting--0524fb54-24bc-4465-9d1a-d4f76dfe851a", "sighting--b6b5d9de-2f62-46dc-b27e-97ff19ca73db", "sighting--1a5dc331-d084-4af9-be89-f75229a0160f", "sighting--3bcbed71-586f-47fd-8f41-994afac98e82", "sighting--40232c88-499a-43a9-85a1-7379829b6753", "sighting--b994346f-e005-4ddd-9e7f-97e89a64577e", "sighting--ca502fed-cd90-49d4-962b-a75a4db2bdc6", "sighting--16179130-6330-4dd4-82b9-74c61e4b57fe", "sighting--e6fd24ff-93fe-40ff-b54c-bcb70b65d508", "sighting--97c43413-ddb0-4bdd-af42-c7dd090aaa62", "sighting--a2a4a067-d3a9-4870-a83f-54ec557ae4ae", "sighting--c04de603-0d1a-4a78-95d5-c146a31e72c6", "sighting--6cb3ad60-6e13-4e94-bf40-bdbdb23b3a47", "sighting--c1549f67-d2f1-49ee-a4b0-3bee7b71c85d", "sighting--f144b5fa-9b7e-4b02-a9ac-69dc7ad94179", "sighting--2b979bbf-0149-4ae4-aea0-1bc198b95fc9", "sighting--2fc2742c-203c-4763-a2a4-a50df25e91b3", "sighting--3b684f57-9ef0-469d-8c6b-f5f32860f60c", "sighting--cf83089d-f7fc-437f-b2c6-5d63d50dae3c", "sighting--99035051-306f-41a4-8129-f21eae7fbf99", "sighting--c1b51414-ad13-4c0e-99a5-8743c6e1586d", "sighting--44a19192-4c5f-461c-a1d5-f4d233a22834", "sighting--a5aac737-4f6e-4056-9715-3165bd4870ae", "sighting--e1f58243-504b-49a0-9ff6-0eca69ddd36d", "sighting--774981f1-df1f-423e-beb5-9ec600dbc91a", "sighting--b79c5cc2-cc6c-486c-9cbf-9773c1b61a38", "sighting--f2f1a47d-d81e-4ada-9872-aeccce554612", "sighting--d8384805-859f-4a34-b0e2-70edfe23d3b2", "sighting--3d00e6de-fc0d-4feb-be7e-b028bda0522d", "sighting--3bfe74ba-cc23-41cc-968f-830cccf42394", "sighting--842d234d-a52d-410d-932d-db52476c0911", "sighting--bd771320-f6e0-4cb4-949d-97617614ebb3", "sighting--3db4db03-5067-4bf7-9593-9de3cc416a1f", "sighting--796b2a42-08f5-4a86-8368-109d0b650e07", "sighting--9940608e-0506-4bfa-9618-6577979b6c03", "sighting--090bdc22-457c-497c-af7e-af51ddd5c6df", "sighting--b2d84714-ad2f-45d1-ae6e-3aec9e6b2ee9", "sighting--77e788ed-f6c2-48c4-a6cb-023369607f18", "sighting--b1e4a5c8-27a0-44bd-a527-d538eeeeb583", "sighting--cd9764ea-50a0-46c3-9da2-baee02af810e", "sighting--81f4e00c-dae0-4b82-b518-902fd9cbf753", "sighting--1a676da6-ef6c-4e6b-a00a-298fe514dbea", "sighting--003d5b73-1512-4a85-99c5-336f9296157c", "sighting--30d70498-5c05-45d9-8b18-f152ca976fdd", "sighting--ac7fd40a-5b78-4ffc-a44a-fad489136c58", "sighting--86af7b10-df06-43be-acb5-55ba722d652a", "sighting--62a4118a-a744-423b-a31b-a4c4be79f994", "sighting--396a073c-3e64-4e92-b7f2-ead97cefe8ef", "sighting--5e57078f-23c3-421c-98cc-d1e1f53a7671", "sighting--b5b6bfc1-7290-4afa-9752-4c07710ca56b", "sighting--fc798297-ac75-4e26-b090-2a86bc44c4d5", "sighting--60fea09a-2adb-4b11-8029-250a7010b4f2", "sighting--a68af78c-0f40-4ce7-8d67-0a41c143265b", "sighting--8035f476-e9db-40ed-bb95-7bee90af0801", "sighting--582e6fcf-186e-4208-a4c6-aec298ce26a2", "sighting--e83827a3-9739-49fe-8100-d56bdd523f2a", "sighting--f888d26a-5ff6-45f3-ac1f-3625072249ca", "sighting--d4e64e69-ac9e-42d2-b7d1-180c0d774bdd", "sighting--7dd5d243-25d4-4517-a6c5-c67a30bb4b86", "sighting--57580e12-47a0-4751-96cc-ad4f99ca9943", "sighting--47307b33-9357-4c1f-9867-7313fafeadec", "sighting--d49af5fe-5aa0-4d58-82f2-6dc08c0a0748", "sighting--86d7edbb-4c3b-4c5c-913a-cc555ce37c95", "sighting--5301676b-7363-4d02-9ad5-94ffd484de5d", "sighting--0988106a-5bb1-4055-ac3b-8c9cd2f43431", "sighting--85782b8b-b2bd-44cb-8177-bf04406d49e0", "sighting--d178cefb-e7dc-4cb4-a1f8-e154e0a7784e", "sighting--a7f5df82-7cbd-4cf2-ace6-8b6507b40e1f", "sighting--e0b1e0fc-236a-4bec-8337-9c5435c916c1", "sighting--d1bbc026-30b7-4330-9cc3-a654557ba945", "sighting--13dd29b2-9de3-4db5-bbfa-ac026a7b3696", "sighting--e3bb85e3-9262-4639-85a3-cd24341a4461", "sighting--40705321-f025-4ecd-915d-12d8470e68e4", "sighting--09462b27-3055-41e7-adc0-899fe63052dc", "sighting--2cdaabe9-c810-4fd7-a6cd-b26b8d79b5a3", "sighting--ac8fe908-b611-49ea-9d47-92965067ab4b", "sighting--7561174a-e6c8-4ad1-94b6-bef12fa7f308", "sighting--0f14ded7-c2b1-40f0-9505-9a1ead64a4b6", "sighting--a5e31cf9-05f1-4459-a206-aab973e9ee4e", "sighting--d2f89ed2-61d8-4f37-83ee-4695801dce76", "sighting--cd075723-2cac-4f65-ae36-682cf73a9d8f", "sighting--2a1ff594-b72e-478f-bfd2-f628f76ecd4a", "sighting--9527c886-3e10-45f1-a2e3-9691e6dfce2e", "sighting--acbae263-e650-4b3a-ad10-cae5864e2c09", "sighting--d3f6e8aa-eb7d-48af-b75a-2b86da965768", "sighting--6baf178d-4404-476f-9a0f-ed09199c0392", "sighting--9cedcbaa-890b-42ec-8aee-5d8a4ec9385a", "sighting--1c4ba8f7-05ef-4207-939f-6f58a9cffa3a", "sighting--dc3ebf4e-ed9e-4d44-9f4f-94df6048ac2e", "sighting--9e3d79a0-b43e-4dbf-a1d6-3fa5753b8e70", "sighting--f35bea45-1ffc-4300-a195-40ebaf05bee9", "sighting--d70924d0-8978-4706-a947-255d1e378cd8", "sighting--59df9e0c-2cf9-49dd-9ff7-dd969eb359f1", "sighting--673dd7fe-26f6-41d0-988b-3bfebfd606aa", "sighting--1c60df3b-bff1-445e-bc97-095a1257c369", "sighting--7581ce6b-2046-4cf8-8040-e266ed8ffbb7", "sighting--60ab4f7f-748b-4286-9f71-933c01d26ffd", "sighting--eb4a85e2-d0b2-4262-8dd3-07c95c798bdb", "sighting--2c8d20d2-98aa-47cc-9960-8ec5ac462785", "sighting--709ef0c6-7574-490e-9c2d-ea1b0f5806cd", "sighting--70db6207-785e-4a5e-8c0c-7c1adec9e244", "sighting--fe8c24cb-cffc-4c08-9697-dad4805e3bd7", "sighting--2c4e29a1-1d81-4e9e-834f-b62c72da3052", "sighting--b854eaf0-6c72-4e11-9444-f8af8ebe90b1", "sighting--8ecbacb3-f883-4942-a356-1a83e56ee764", "sighting--ac8f37e3-19aa-4f10-93c4-5ebbac9ca6d3", "sighting--89c21a38-26cc-4a74-9a92-6bd1b7f3619d", "sighting--56450fa6-409d-4301-99e0-59bad9cd6aa8", "sighting--a86d4b43-58ee-4b8d-8316-c9bdfc3f1d82", "sighting--a7718b59-bd0b-45a8-989a-8db4ce2b0dad", "sighting--5d4a1f59-c389-457f-9932-4ed11d1073c2", "sighting--b0b718e1-9e1d-4ebf-8f7c-857201394380", "sighting--dc4b35e3-d9f9-4a39-a90c-a687129020e3", "sighting--cfd493e2-8d87-419c-a1bf-6ce3b5ebe6b8", "sighting--a80292b9-69e8-4ad5-a93d-7c62f6e85ef4", "sighting--4fc47db6-bdad-4e7f-b20a-7fb73339ec74", "sighting--ebef475d-d439-4ae8-8385-f40b80b85f03", "sighting--2f8c2643-306a-4f61-9553-30b7eedeb34e", "sighting--edc8b4cf-350f-4788-8521-01ddde9721b7", "sighting--931398e6-ca45-40c2-ad33-96ba979a72dc", "sighting--03bc3b4f-d29b-4721-967b-b2bbadf59094", "sighting--01a61d75-6eeb-4e88-b61b-38c03243fdd7", "sighting--301503a5-7c72-48ba-8ace-6bea1152736f", "sighting--546bb024-8672-4161-9d77-e54d9b751eeb", "sighting--491ac84f-0a91-42f6-ad0a-c633b8b4e205", "sighting--e08e6d51-8f55-4c9a-b08d-b7208ed7e040", "sighting--d4cbdf78-0429-41ec-8308-b38163ac13eb", "sighting--bc7f599a-e887-49bb-8788-3219e7ba2936", "sighting--e45b3f15-9c88-420b-b7d7-10aa8c324c8b", "sighting--976948a5-8a4c-41e9-ac1f-7b733918c9a3", "sighting--80f5b753-445b-4f59-8f69-d0fdb03d6d12", "sighting--df04d967-8498-4f91-97e9-a21246f0848e", "sighting--c700494c-b856-4667-a46e-f43b5ada5121", "sighting--26ca4f11-c4f8-4f83-837d-2b3b86b2926d", "sighting--0180c92f-caaa-4b2a-875f-fcdee2ae9eea", "sighting--7850772a-861b-4128-b744-7e986eadf326", "sighting--e3868e28-8dbc-4757-951a-0e66a96442d1", "sighting--edadd457-8a17-4d29-b068-8b57f0bcea88", "sighting--c2332a97-6494-496c-b11e-2f7833cea7a1", "sighting--9c369023-23b3-4173-8194-2019804cd317", "sighting--5f494a3b-2226-4b49-a2ab-5d625b1b3935", "sighting--5a393f18-0826-4415-9f37-eabff497769b", "sighting--6e90f4e9-22ad-40e4-824e-2012b00265fe", "sighting--8b3d35dd-3b20-4556-a064-d29964c78b58", "sighting--685e5860-612b-43b6-b30a-43f60409e4e6", "sighting--7da464ec-64f1-4c53-acf4-22d491969924", "sighting--e914563d-58d3-4672-884a-ce1388eb54ae", "sighting--6b82e4fd-b37a-4a82-87c0-133951a1f1a6", "sighting--d54b199b-a6fc-445f-aa62-0f012868b539", "sighting--8775fe38-8953-407b-a4cf-0b0c8c6daeee", "sighting--e3c65df2-1f1e-4960-b21c-330434e40555", "sighting--e1078ba7-8731-43ef-8ba6-4cfd93e945c7", "sighting--d36a5451-a7da-420a-aa78-9b2c7874c98f", "sighting--6611db9e-e7ae-428e-bc6e-44e11004eedc", "sighting--4a4119aa-0f70-4eeb-99bb-c88bdd224e53", "sighting--791ec87c-0535-4646-8296-b8b8d422ab08", "sighting--6b884414-dd3c-4309-87e4-4b74405bd618", "sighting--93ceda29-3c98-4a06-abd0-59971ac4f963", "sighting--3cb0971e-3736-4ec9-a414-5be2b8798954", "sighting--f34c4d39-78c7-4327-b518-db386c06a8f5", "sighting--8d20f228-4100-4317-800d-ef0e8cc3dc2c", "sighting--b10dbd5d-3ab5-4ded-8ccc-e0ac83b9a5c7", "sighting--80790bc5-f23e-46a9-b9d8-588279ed2bc8", "sighting--231dfb3d-5f26-4c06-9176-8d20cfa51eea", "sighting--a3363a59-88a7-4651-bc72-06230a574f6c", "sighting--80b122c2-dd77-44c8-a93d-e357d5a3c6e9", "sighting--a4014dd6-885a-49c9-99bf-c3743d96ccb9", "sighting--7744b65e-31c9-494b-b21b-bb6936c580ce", "sighting--f041cf15-a279-41c7-8805-384edbe6f8df", "sighting--cd8034c5-a8c9-48f2-8fdb-5cdf507b4160", "sighting--38f3719e-fd9c-4dec-ae52-1411cd152996", "sighting--96020aa9-683e-47dc-8121-0eb7eee9050f", "sighting--09fa2cda-33f8-4e3d-a01c-0d74d49e55f9", "sighting--ef8157a1-d245-4dd4-9939-1c121471172e", "sighting--f87d14db-3d86-41e3-88d8-7b002f7338fd", "sighting--aacca139-63a2-41d7-846b-695e52fa2821", "sighting--36303c3a-1768-4b3b-98ec-94a583861814", "sighting--583b5b91-fb0c-4165-8bae-ac496bdf4ed0", "sighting--9abb2cd0-51c7-42ba-8b52-69ee535ff028", "sighting--4c8e8f2d-5de0-4f9c-b7a6-807a85bad4c0", "sighting--26cbd808-b0c7-41fb-a29d-e5df24f4aada", "sighting--943ea47c-6277-4457-aeb3-578b9acc0ae6", "sighting--a58a30af-e766-4cda-b8ca-f4f498941006", "sighting--28ce9dd6-4af9-4aa5-b7ca-4f315ccf5a9a", "sighting--c0c780ea-93ce-4783-96ec-2cacc8dfb2cc", "sighting--f36cbde6-581e-4839-9e36-bf7acdb958b0", "sighting--b4072a23-9932-4bd4-82ee-a0130b0d4286", "sighting--75e76503-d34e-41fa-9fb9-e990ad1bb046", "sighting--45ae01fe-c01e-4a83-90ee-4d58e7691fbe", "sighting--1fd61721-35cf-45db-bee4-72533d613c8f", "sighting--d1a6bd20-add6-4c66-8abe-ba3cefb682c0", "sighting--dbb16216-18ac-400e-a828-e109447c725f", "sighting--b44dcb11-f376-4d42-8f5a-e0056599d1cb", "sighting--f8d1ab58-a29e-40ba-8993-088ca6b4b180", "sighting--e5ca53e0-e94d-4019-81c5-712b26cce69e", "sighting--49233f86-df8c-46d5-8a41-1cb2eb018d6b", "sighting--db1051bc-e61c-4e05-81d3-c7d2173d258b", "sighting--90935dfe-b20a-484d-81c4-857579621703", "sighting--929fc2ef-1d82-4d57-a33e-e4e6608c70b0", "sighting--693b8885-2bda-4173-84f9-233350ac49c9", "sighting--0145f3ce-7297-469b-b118-f3e6906ab0be", "sighting--30687cd3-c131-4c64-b0c3-43124a0aa75b", "sighting--e7e88c74-d428-4178-a240-eb5978fd95d1", "sighting--203902f8-066a-4555-81b2-e52b76c309c0", "sighting--188d6953-0867-43f4-92ac-797c406516a8", "sighting--fa51ac17-3cde-487f-a50b-5f8c662ad290", "sighting--2dca31ef-2a48-4e9f-a0b9-673319958ea1", "sighting--482cd628-6939-4872-80d8-1b94c0c5abd8", "sighting--bc0617a7-4721-4229-ba49-7aa600e584de", "sighting--4eaad153-bbc1-4519-a143-a8a02bb2cc3e", "sighting--69675069-c942-43d8-82bf-84a8991698c7", "sighting--0627cdfa-cebb-4d3a-ba14-70fb767202fb", "sighting--4d08a763-8c47-4fed-8456-c26f5a49aa96", "sighting--75e6daec-b223-4b6c-8fd6-b609e319e86a", "sighting--65d370b9-4cab-423c-b7ed-75d0db7ec326", "sighting--a26d250d-9345-4b3f-b7c7-02b203f0d665", "sighting--e00dd0e8-127a-4de2-828b-29e98c6a27df", "sighting--4502c431-102b-40fc-b770-982518ff3d22", "sighting--8ad887a7-dbc4-4889-bd3d-a5f101385b73", "sighting--6025ff6d-061b-460a-839f-3bdf93025050", "sighting--acd46f57-7d39-48a1-950a-42f53789399f", "sighting--3335ffb3-a6c6-4303-b0fa-66c8f43cc823", "sighting--3e9d56a3-d397-4bd0-9c43-006bb877e57a", "sighting--f1924f1d-ce6c-4f44-911b-3d93c2b01939", "sighting--f8727588-7bfd-42b9-9b8e-3f3137b18c1f", "sighting--4bc94ff8-b84b-488b-83b0-c93a84f6cd07", "sighting--cf948725-d33e-4fcf-a541-3510cc0450f4", "sighting--9c9d962c-0af3-468d-ba89-661b4eac2a20", "sighting--11182568-e153-4f79-b049-7407571850ca", "sighting--9327914d-dce3-4f62-be55-acdb0742a4d2", "sighting--3d9f88f6-d640-4b48-b544-3e9c3bbe44ae", "sighting--487acdbb-1430-4b8d-9d86-08a003bc8b9b", "sighting--d599350c-0d30-44f7-b25b-2194c7847675", "sighting--871d82b5-86ba-4ea1-bc48-bddf38c5aed3", "sighting--b9eebd6c-ce2f-4702-95f9-38c944cd4425", "sighting--c9a2d505-4a10-49bc-b66e-2956f2d63223", "sighting--0a7c98da-66f2-4b35-86ba-cc3133e61da8", "sighting--eecfa7c5-47a3-469d-8ca5-75f8cd29c355", "sighting--26ab13bc-719c-4882-bff3-02d6bb1c8d87", "sighting--90ee001e-00ed-4ee1-8e1b-2c67e0cab494", "sighting--1c5ce1d2-dc1b-45a2-b5aa-ecedb14d0470", "sighting--8ca4ec0e-57ef-46ba-a5c4-6fd755f5336c", "sighting--71a51d40-7160-4a42-a518-9d6a66a28b5e", "sighting--eb66144d-80a3-47dd-8c75-af759485e711", "sighting--d34da50b-3c00-407a-a67d-f4561de8e123", "sighting--8c229569-4c63-4bdd-8895-6e8099d6e1d0", "sighting--68aeea5f-cebf-4731-b139-c07add3b3de1", "sighting--83cdf794-2b8e-456c-b313-eb4a45ff5930", "sighting--7fd7869d-e4ce-4868-9cf9-16bacb957f12", "sighting--cef4c356-1492-445f-a1bc-28a258504261", "sighting--12a5d0e0-b522-4dd6-81ca-07fc1ec49f38", "sighting--a8b62e9b-3f66-4a8a-baa3-a332bbd5531c", "sighting--83c50625-33db-4f06-8999-881a47c91587", "sighting--112be8dc-5e58-4412-b880-1dc7dee8476c", "sighting--881008f4-8457-482d-aeda-664c7600ed51", "sighting--70f79511-720c-4a97-8897-38c4b33718f2", "sighting--9f123272-7709-4fa8-818c-8ca535f0e3be", "sighting--be5af446-8300-4bf9-a041-40b932d52de5", "sighting--fcc58b3f-5033-47a0-ac73-496364e4509f", "sighting--0a7c360c-e80a-4d66-88f9-dacb1506eabe", "sighting--b0a71270-4f4a-4150-9e37-65d6d74f703d", "sighting--d4651e4b-68b6-45b3-a8d3-9ef12c5a4c5e", "sighting--7986ab01-ff3a-4afb-a700-bf13b451527f", "sighting--f9559640-e566-4a3d-9011-aba42f63f564", "sighting--50bc9127-e7a1-4a2d-b7f4-713d88b01c33", "sighting--cc5541ee-0948-465d-87a7-8c7cde4281fa", "sighting--2cabe053-4eb9-465f-b90c-099780efd3ff", "sighting--b4bf4b5b-fdb4-4ab2-8c8a-ef932e6d4399", "sighting--49d20a43-c6fc-4190-b437-59fbd8e51197", "sighting--3ef54675-caf0-4659-96fd-f88bbb8fbf6a", "sighting--435390db-885a-45dd-afaa-322d48f9a11f", "sighting--550cf013-b9e5-48fc-bcbf-ea1cc16730b7", "sighting--62dcfb8f-8bef-4773-88b6-11d6face43fd", "sighting--61132376-3a3e-402a-829d-55636beabe7f", "sighting--6e59b8a1-efce-4352-a4ed-0a1eaa88a5c1", "sighting--efe08f90-a5e9-42a4-86d9-2b0db1ee7034", "sighting--a9a64cf8-5655-4b01-8a35-c8c449810f6a", "sighting--9a3f25ae-0e1b-4bdb-878b-e0c878ffdc61", "sighting--f4f41a68-c750-4fd2-a310-347f434ba83d", "sighting--76f28ca5-22cb-4b1a-a6b3-128a7da661ac", "sighting--80aa8a60-5a20-488e-88fe-b21a1ae7a04f", "sighting--40baf3cc-cd2b-4c90-a529-5865696069c2", "sighting--212befa6-82f6-4f4c-becd-79fd727bbc6b", "sighting--d0b21af3-582b-41ea-83ba-78133154f683", "sighting--7f16b159-9bd9-4a24-b2ee-e093336dcb2e", "sighting--20cf79b2-7682-4602-a9b4-41e1c80528f6", "sighting--4ee3939c-81a3-4271-85ff-d4272046cd1e", "sighting--4e657155-0e57-4627-8798-cddbfa332d15", "sighting--653f113d-e032-4f4e-809f-0c7aaafde749", "sighting--739d496c-a4a4-408d-af00-5b736aa44cce", "sighting--d8fa9b92-73cc-469f-abc2-02979d708bd3", "sighting--588a2945-b123-44b8-a72e-c3dbd4e57667", "sighting--d053a41f-775d-441d-afa9-76c646b8b032", "sighting--080db521-f2e1-4d6b-a37a-b16dd7e09064", "sighting--8245043a-72ff-4dfa-a436-9941ab9c7ae6", "sighting--e9b21269-a7c2-420a-9396-db017506fecc", "sighting--7a8a9c42-aa6b-4a65-9624-a6c317ed3a32", "sighting--a8895534-b6d8-4014-822f-ec72f87c6d05", "sighting--acd8ce40-7bb4-4fe9-b1d4-71189edd69ed", "sighting--dc3dc2c5-dd33-4e1e-b5ee-ca310d1faee0", "sighting--1add3303-8b8c-477d-a434-d82af738df1b", "sighting--9f3a20a4-58f4-4d97-ac76-6e383b8086f6", "sighting--d4e3b76e-014b-4dcc-b2b6-ddc4d3034dd2", "sighting--a2b0ec1d-4d2a-4be3-a404-97bb8590cebc", "sighting--239348da-8695-43cf-944a-5162de96fcb4", "sighting--f4562cdb-fea7-49f7-b595-62b9ea39eb85", "sighting--d18a6224-e361-41af-89a7-ee24548ae4c8", "sighting--ea3c8d09-f6e4-4d76-b74b-b7a441f904d1", "sighting--200abf05-161e-4d66-a1f6-b96df8115b93", "sighting--4ede82b5-bcf4-4815-adf0-f1140c8f224d", "sighting--b08f93d4-c1d3-4068-b453-75b898210a19", "sighting--45a946bd-e540-47de-8498-9a5f3394a377", "sighting--0fea8d03-6e43-4a41-bc3a-49a43e02acdf", "sighting--dd0b22f5-c94c-4419-abea-ad4d6a3a7013", "sighting--8569bebc-91fd-40d0-90f5-5f4f5c785744", "sighting--84aadb18-a302-4dbb-af22-96651819150c", "sighting--b1d3c919-5ac1-465b-ad67-858ec572a088", "sighting--a9741b26-3734-40a6-ac87-86e9a70e44e7", "sighting--53775c60-bc4a-4700-868d-226b80291617", "sighting--5e4b5249-a120-4db0-bbec-8ed59b2f50ec", "sighting--a1215477-637c-40a1-9459-d6f606f6930c", "sighting--7e0ea135-b0a6-4d78-b8e4-58ba1ef8ec99", "sighting--a864d954-d6ed-44c2-8564-76c4f6a0cc29", "sighting--27d7d707-911c-407b-a774-381d0099cb62", "sighting--4a8f6dd8-a308-4936-8c2f-03ae08ce4015", "sighting--6519d578-a6c2-4962-b2be-b0c29f2b4edc", "sighting--5bfb73eb-2980-4f51-bc88-115196adb4cb", "sighting--ea93fff2-2019-4eff-b020-fa571dd2b16f", "sighting--b0ba9274-20a0-4469-a75d-c78280e94b8c", "sighting--02877052-c85d-4f42-a14d-94565530bae8", "sighting--f74e6209-66e0-4e01-8309-597e629eb824", "sighting--85d48a8f-5120-411b-a480-469467bc1d02", "sighting--ec9f9183-32d5-4de4-8cb3-5566cf587d1d", "sighting--eb4f17a3-61e2-494b-af30-87cb148a4de2", "sighting--898a2b9d-8576-46e3-a13b-4beddc638749", "sighting--3b7ed280-2f93-4c39-a445-669b6d501d1b", "sighting--87e2e759-ab96-4968-9d9a-b1a72c1819f1", "sighting--1551a3c3-8da0-4fc6-ad5d-d14cec9ceabf", "sighting--e84f90c4-abae-4ddd-a77c-d28223783ece", "sighting--0e80eef2-2ba3-47fa-a0b1-ffc5b61e14b0", "sighting--3b973108-04d9-43f3-8c58-dc27fea6b7c7", "sighting--cbc9e2b0-114a-4c8c-85ca-61660bef5c3f", "sighting--b1a2d53f-e524-4631-b9bd-7e3fb85a176a", "sighting--9f9a80e2-9a84-4d71-a8f8-9455c2d812cc", "sighting--babaec78-51b8-4e2b-94de-c5fab08f3fa3", "sighting--f5cfc24e-0fc5-44ab-b97f-8d308bd22339", "sighting--66dee28c-e218-4e5f-931b-68a2eb580241", "sighting--c8145f08-ef1d-4170-9ab1-bff5754d6366", "sighting--90cd075f-9517-41e0-9832-66f55fdd1a90", "sighting--c041bed8-cddf-4b39-a0f0-0f72d5ca4f37", "sighting--b4597997-eba6-487b-a3b9-4910315c9150", "sighting--754402fc-fca8-4580-8d86-a842ffa2966c", "sighting--dbb80645-183a-478a-b891-77a8b1cdfc7c", "sighting--91f12087-81c0-41f2-a68a-d2c6f50993bf", "sighting--9ab45466-3bd1-4252-a997-dbb57ada62c9", "sighting--b7f27290-bf4e-4f2e-a5e4-c23fdaa50a72", "sighting--4b1f1c02-d61a-49b1-b304-2d2f5a226e9f", "sighting--9b1723bb-e618-4191-8db6-be6c30448139", "sighting--c3b7b4e6-f0dc-4241-a46e-34eec432f3a4", "sighting--9f0c5bd4-c926-41bb-a8a0-3870e717c456", "sighting--df233e72-34c0-4687-b23f-0fa085ac02aa", "sighting--522c7d23-275e-4cc7-8158-226d0bdf32db", "sighting--ef2d85b3-e576-4ace-bcc3-74c5c71f725a", "sighting--3962ffc0-4ddc-4a8f-bee1-b35910e01281", "sighting--4ee4acf7-5772-417b-bfec-70c07bcfa054", "sighting--c4d75731-f730-42d2-a5a3-7e2fd169d109", "sighting--87d89487-10b0-4980-8d7d-2b6501b9bd88", "sighting--ccfdb904-3af3-487a-a906-dc977978e556", "sighting--85cbd061-2d19-4fbf-81ab-e5f7db1c4d9f", "sighting--7342290b-81ef-4ae1-b5f6-d5c473255a38", "sighting--57589805-088c-44a3-b986-5e6a189bc2f4", "sighting--c6e62147-70b3-42fb-a6c8-17a54bdfa08c", "sighting--64dd1587-230e-4467-bd1d-26b01b85242c", "sighting--90352543-1f79-4bd6-afb3-19765cd06cb9", "sighting--ffc77b32-c4f5-4362-91d5-a1ffa4c9c10f", "sighting--5ed3b154-911f-4f33-beea-ce9ba2d909fc", "sighting--1469e184-1e47-4405-9488-637f5bcb73d8", "sighting--65ce9dab-2268-4cdd-8b35-44372d7703b1", "sighting--f596ee71-b463-40e7-8e29-8ffac6eac5d2", "sighting--5dc355c0-8c5d-479c-97aa-efd500b62dea", "sighting--a0e89dbe-7ca7-4fda-895e-66b013b0ba69", "sighting--0733cfb5-6b79-45c0-b571-012231e438df", "sighting--b0fc070a-a750-4046-82b3-100b4ea1e1ed", "sighting--109983f0-b29b-4d0e-b9b1-8800046e8da2", "sighting--454aa322-c64a-4e10-9a09-0b755418b222", "sighting--8a974ac2-bf25-4e54-865c-1cf451495680", "sighting--7f1c1e70-c459-48f7-87fc-e8ccf7686d60", "sighting--b9d8cfec-1cba-41c1-a655-029811f792cd", "sighting--50b9b757-0169-4e0f-9552-e012aebc798a", "sighting--c2704584-5793-4be5-bc0c-faa1676d2c41", "sighting--d3557cbb-7c0a-41bb-be66-17abcdd9e845", "sighting--90af1a0c-8712-42ca-962b-7ba57ad3932b", "sighting--b5c611cb-0fbc-470c-b750-6c190f47bf5e", "sighting--277812b0-a6b2-45c7-a89b-372d8c89570c", "sighting--70a2b86f-4756-400e-b00a-6876c024bfa1", "sighting--049f0c1b-ed27-43dd-81c3-a40261db9028", "sighting--535688b9-ac39-414e-9175-8b8336a0f05a", "sighting--e50fbc4b-9e3d-475c-82d7-b691361d3c41", "sighting--9663f594-fe5d-4d14-97b8-f9b9d302ae06", "sighting--3012fa04-f615-4ece-8502-41c9443d2928", "sighting--153d233b-6a3f-47b8-9508-3caccb8889dc", "sighting--0854314a-be53-4a4b-a935-03aafc298bf8", "sighting--65d98e15-9a4d-4a20-bac6-25a0400fb915", "sighting--46be35e8-2cc8-4ff4-a450-5eeed06a80d0", "sighting--2220f7b9-abed-47c1-b925-6b991f60899d", "sighting--e42e1150-d4ff-4c65-9cf2-71e9a5f864e8", "sighting--c8c4ef4f-ee7a-4f0f-ac7d-d02bd81f0218", "sighting--9afc28f9-e0c8-4083-a44c-5cda42b8fd99", "sighting--d5536713-d540-414b-b618-7bb23eadf9d5", "sighting--a3dfe33f-16db-4a53-849a-730d98a98362", "sighting--7f0fdbca-2d43-4499-956b-30c2cb6579a7", "sighting--21751a76-8f0f-44e0-82ba-9e7916bcdb73", "sighting--6fcf8edd-9320-417b-9163-31f863dfa0a0", "sighting--ebccb1dc-e7f9-4546-a213-ea4702a84620", "sighting--60e2fd8f-e362-4e1e-b2a2-7bdaf5914e00", "sighting--df574efd-a55c-4abb-955f-2632e442280d", "sighting--3ec5feaa-d61e-45b5-a838-70c0e5e68d0e", "sighting--d4502abd-53ed-410d-b8ac-4a73c001a7dd", "sighting--70f4272e-dc7d-4c05-85ae-ec2cb67ed76c", "sighting--0db49c25-fbc7-47db-9504-8e5a96dda4f0", "sighting--a6410dce-5810-494f-8d19-2810ac268169", "sighting--92ff0569-6102-4929-b638-0d9c6fd1db88", "sighting--90a35049-cd22-4bff-b86d-93c1681edc9d", "sighting--bea2fe4b-05f4-4022-825e-f63407676f11", "sighting--ca6c3ec7-9929-4e5a-bab4-e940abd64e3c", "sighting--6362d9ba-b02f-4043-a604-7e181e9b1ddf", "sighting--bc3646ee-3b84-4b1b-900e-8b0b6dfce43a", "sighting--f07acc21-83da-469f-ade9-df881f8ee2f6", "sighting--56688cb1-4379-4436-8cc7-e17f247b9b2a", "sighting--e3b104ad-4184-4f62-a2fd-de26908c788b", "sighting--8da28222-ebc9-4a7d-99d4-e7ce499feb3a", "sighting--363117d1-6ff7-4d80-8223-4bb0b8c45f83", "sighting--028fa2a1-9699-4659-a8e6-9426fca0d608", "sighting--436b2d93-9f39-426f-a34c-3281634fd35c", "sighting--37a01121-480e-4125-9a9e-75f141a40964", "sighting--e6a97a93-6f22-42cb-9663-cb630477b112", "sighting--a80e1ebf-4885-4414-9825-5bbb0a6abe68", "sighting--0707e75b-c44a-491a-8992-ea021e1e2ac2", "sighting--3740a954-42e5-497d-88ec-fd4601c611a2", "sighting--bc3d5778-a419-4e4e-bb22-07427e131b55", "sighting--eace8673-1d4d-40ae-bab2-bf2d7e812e12", "sighting--bf276292-c4c9-48c9-98a1-39c3a18993a1", "sighting--7eec9e38-f8c5-4f4b-b94a-1f2e05d57ce5", "sighting--bce73af7-b750-4946-b589-fd7ad7cc1839", "sighting--15ace7f3-b3ca-402a-b308-6c8498003c18", "sighting--9e4c73c3-aac9-446b-956c-ec30e2ddcac4", "sighting--8b333372-a194-499a-8128-d03d40d1831e", "sighting--dbc77c0a-ad80-46ff-a611-c15d8982fd4c", "sighting--aba09c98-2951-4889-943d-4021bec2df85", "sighting--6b5ccd9a-a55b-482c-a6da-e64a8a5dba6b", "sighting--8d3ef4dc-9762-4246-95e8-015be2633b04", "sighting--429016f4-e6fa-4765-ab25-9ce1a3c14d6b", "sighting--bdd8ece8-3659-48a7-9ccf-4792838c2c7f", "sighting--419ca161-5140-4528-adae-e1a53453aecf", "sighting--fc2560d9-313b-4089-acbf-55c50858158a", "sighting--d752f5c6-f45c-4f84-8389-6c71eb6178c6", "sighting--72eb7de7-321b-45f5-bc89-533b504f916f", "sighting--09719132-1a21-427c-a9c9-a169b6f14637", "sighting--3f861998-00a6-433d-ad24-2ae8e55023b1", "sighting--1c93bc82-5abd-45bd-b545-3fb5eb71be4c", "sighting--6de748ae-4e07-44ac-b3da-2b74aea41003", "sighting--81ef14ff-0b25-4ba8-9724-a45e4819d2ec", "sighting--f87c39d6-529e-43a3-8b88-9fb81e63a537", "sighting--7aad0c57-66a6-4bd0-92e6-9ea83204e078", "sighting--b913c228-c379-4650-bf3b-fedbf9afc4a5", "sighting--06308b90-8e01-49d7-9970-5f3f831a3886", "sighting--09b0f77d-2010-4f59-9c0d-a94d855dc079", "sighting--65fe1221-7aff-4073-b7f5-95ef1ada11ac", "sighting--905fa3d4-eb1c-45d0-a9d8-b68cd520e56f", "sighting--4fc617e7-362c-4037-845e-ef48ab656f6b", "sighting--7e502c1f-b5d5-46c5-8ac1-9a5864637762", "sighting--24e6c090-3dd0-49c7-a8fe-6378f5b2345d", "sighting--a19ceef9-3101-4158-80c6-eadbc32ddbd0", "sighting--e9e3ab61-2e50-4649-9c9d-638eb4386591", "sighting--b4fcc5d6-ce2e-4753-8022-c14ea3bf4190", "sighting--09277d14-26e4-4f82-8316-c97696af1299", "sighting--51ff7803-9828-4656-8f13-cf386cc92239", "sighting--a6c73f71-6b46-4290-932e-185e5c38aeab", "sighting--517e290c-4f5b-4314-bd0a-89fcd1b817b4", "sighting--f106c945-eeeb-4121-8894-3d304ebf9350", "sighting--583e66ae-0b12-47a1-b803-522b8cdc9364", "sighting--00b14d7e-1a38-45d5-bf97-121a11747ff5", "sighting--21aef5ba-10aa-419b-bb52-b10347993689", "sighting--8fa3254a-5692-4ac7-b36b-52cd39fa947d", "sighting--9d62b89e-b577-4e3b-bd9a-fb8b249b45e0", "sighting--579a795d-57fc-480d-8030-325b1acb9644", "sighting--8ce2c3c1-d4bb-494c-a6c9-aa520cb4c29b", "sighting--304ff60e-07d6-4409-8c8d-957f77565e4a", "sighting--7b0a1b74-1b13-442e-b0cf-0b89b234e0a0", "sighting--3acb99e1-fddd-463d-ae50-dd90e182ad0b", "sighting--895c785b-cec5-4e3c-8dbc-9da4b98b4041", "sighting--18ff1dcf-c353-455f-9280-647e20279e00", "sighting--e3ce7c9e-ab14-45ec-bd5a-4d15e27004cb", "sighting--9f06db07-9181-4fd0-9056-0dd1c641c90c", "sighting--8224d145-40ef-4c75-b973-b43386afaa88", "sighting--1e26680b-95c6-47f9-bd00-76383dcb807d", "sighting--38f42596-a919-4b36-bedd-01bd88e55492", "sighting--2d398abd-4635-4ea2-bb2c-572e40b4e2e2", "sighting--2c4e1281-aab2-43d2-adcf-bfff0b52645e", "sighting--3cd4f0c2-5792-4e7b-860f-b389eab6bb65", "sighting--51dd191a-f947-4238-a82f-1a013bdd71ea", "sighting--680c9295-2989-468a-8566-17b0a1216507", "sighting--a3fe9720-11e9-4222-b621-a595cc163f01", "sighting--2304c058-9962-4ad5-a5e6-1d5a8618ec42", "sighting--e62a2f19-a0d3-4748-b2d8-f9e23fef2ea5", "sighting--36d2a30f-0168-4a75-9cc7-25ecd9c79ce3", "sighting--83e0f01a-4530-4f23-85e8-0cebce33d9df", "sighting--e2472871-febd-4f3b-bab4-395e0d8e7470", "sighting--0689ce2d-dcc4-48ab-a0d3-cfe27fda85ae", "sighting--25fadadb-843d-4bdf-8453-29d928bd5a44", "sighting--a88bd579-474d-4506-a19e-ba15ddab268d", "sighting--6eba0172-38f4-411a-8d16-dc54670b5bb9", "sighting--601c7e76-2b90-49cb-8a89-193fb489b3da", "sighting--6e734d1d-c7c9-447d-9c28-f8a66de24224", "sighting--c4741bec-8e8b-457a-a510-9f265c8760e8", "sighting--f006fea6-b6e4-4068-850e-d4dd48bc5100", "sighting--a699261d-501d-4461-8e2e-93d214a806b9", "sighting--6fc02751-c565-4e20-9bfd-48f315c6c849", "sighting--53c50931-c17d-4d1e-8063-f850d27a90bc", "sighting--b529ff81-2fdf-4479-a148-e87a990f6bc5", "sighting--867fb6a7-3b5c-4921-b0b2-8481b4891cbf", "sighting--716194b9-986a-4566-9d22-7843f04ecc0d", "sighting--40297f1f-7121-4864-a9c2-789c4babc691", "sighting--11adf09d-506c-4c09-8925-f6e7c4e88e6e", "sighting--40ae222a-2631-4c81-9ac6-93fe5205bc39", "sighting--951a3009-a35b-4dfc-8ba9-7c7c7419ce71", "sighting--1aebcf22-e3dd-4d02-a285-6c3fa84a44c0", "sighting--5a3aeae3-5bf5-4d3e-9fdc-0547e02a222f", "sighting--e46e709f-8b32-44aa-ae50-7843156485ab", "sighting--457d1099-1a0b-4ef9-a585-17dd87843387", "sighting--bcef9ac0-88db-4923-9666-942e97fca63c", "sighting--ee9633e9-bbda-4e46-9ba5-e3be5df358e1", "sighting--b5b0d58d-076e-4868-bc4a-015f2043dca7", "sighting--cbdd3f5f-acfa-4562-80a5-85c9891cb857", "sighting--7bbc774b-75e1-43a1-845a-cf1f9f732b95", "sighting--bf052dc5-0c81-4954-903b-84a106382632", "sighting--695a128a-109b-4a8f-b496-ffd313dc1023", "sighting--95ed529e-3255-4330-8fe1-b2ce7801055d", "sighting--6b9ca0df-1567-4b8b-a3d4-2e9723b217f5", "sighting--7d8dfc10-60a7-41a2-9475-b9f1cd9e63e6", "sighting--095b06f1-230d-402b-a8d9-40508522e987", "sighting--a29d295a-1b21-4ee5-ad66-04d0027926b6", "sighting--c68ea172-d84a-464e-a239-7b4b96378fb7", "sighting--57727fcd-d265-4a35-80d9-70caa1f8539e", "sighting--b50e8f48-d86c-41b7-b7da-dd310cde3020", "sighting--2bd98204-2145-4e5d-91db-acbfd46abd3f", "sighting--e5ce3878-801f-448c-b274-892a8d6f999b", "sighting--7b4da175-5420-4ca1-a796-a6db7adb7a90", "sighting--34308cce-98b3-4c6c-8818-101bcc0ea0ed", "sighting--d99dafcc-d5f7-4f7c-a4bc-1bd98cf3b8ba", "sighting--2920db33-9e5a-4084-a543-d901005d4da1", "sighting--1f3863aa-faff-4246-95e7-ecaceb6943cd", "sighting--b04b8151-61eb-4493-9e0c-fe013db6970a", "sighting--cc8c72fa-a81f-4a3d-989f-81ed5614bb05", "sighting--a411ccd4-27bb-45a5-a20c-de7f7abadc53", "sighting--b989cc59-0f4e-4cac-b2c0-66a70ce38207", "sighting--e5afca78-ca88-4f7a-af18-3fbdab03b7a8", "sighting--5d8acffb-497d-4fc1-b7f5-16b9401691f2", "sighting--f73b6915-91c6-472a-998d-824d842e2b89", "sighting--dac8169b-6807-4fc8-b76d-11b22ce5761e", "sighting--75afbba0-db04-420e-a966-09a4540663ca", "sighting--fad34800-a90a-430a-9377-229c7b8199e3", "sighting--fc38cab8-4daf-4775-b589-7777323f2031", "sighting--11afa62b-aea0-491c-9d9a-d9cce3c8612b", "sighting--12ec3294-c780-432e-a48a-120a4671d5ff", "sighting--f1debe20-625c-4f31-9c11-ffea5eb67eef", "sighting--8cc3d4f4-b6f8-4cd6-901c-0116a1710f9d", "sighting--049813c5-dc43-4be0-a884-9a6c6eac4de3", "sighting--2488c071-f2ae-4f82-83b0-789d0ea08206", "sighting--7c44acfc-698f-4b2b-a7c2-e2518c52b7d2", "sighting--89698ffe-51d2-4bb9-8b65-ae6a1c09fe50", "sighting--bee8b6ce-1bb9-4002-a373-c9b6fb8d1960", "sighting--eafbc8d9-caf4-476e-bca5-65a6ed477e3d", "sighting--ffed5d0b-1276-4f22-bb95-311f226ab0ee", "sighting--d79554ab-57df-4e32-873c-2b91f084b53d", "sighting--62cba432-e329-46a6-b2dd-6b18856302f4", "sighting--92ff0164-f474-41db-9fa2-dc4c9045e40d", "sighting--7a265ed4-0806-4bc2-818f-8151b18e364d", "sighting--b9eefa24-1463-4ff7-a1ce-3cfffca34945", "sighting--f31c4003-c948-4d37-9ba4-1ef9b190a90b", "sighting--87a5d022-9bed-425e-863d-f5e52003d655", "sighting--79fd5a04-3bf9-4117-800b-7c8eda3b0b06", "sighting--5fa903e3-6516-4b22-b566-70bf9b6b35f4", "sighting--302a7cac-b3f5-44fc-b62a-8eb19f4e003d", "sighting--42cb4eec-05de-4ebe-8b24-5c65fc2fcca6", "sighting--e285cdb1-89c7-40bb-907c-84101253f830", "sighting--055a4c1f-fb06-434e-ba3b-b1e6414a4edb", "sighting--8fe00798-bdab-4820-bac4-1ff98c4fa82f", "sighting--37ab4b46-00e8-4fbc-b005-16b1ede023fb", "sighting--9024fbfd-4160-46f1-891e-2f5b66643aee", "sighting--95ce4905-3083-4b4a-98b5-f6065b72e0b0", "sighting--c1dc4b27-8e1e-48ea-96fd-73cf7d293fe6", "sighting--91d2f897-ab19-4e11-b695-787a50d402fe", "sighting--b14ce49d-022e-40a8-aa9e-ffa678c71de7", "sighting--8d081190-708f-4ecd-898e-829a9399f0d6", "sighting--7d37f04c-ad4f-44b0-834a-61aee96bbab6", "sighting--164b38a4-ad1b-4a8c-98ee-223d8fe65523", "sighting--0e911ca0-791c-412a-8dbf-b14e5e7e0e3f", "sighting--d60f4214-c39c-46d7-bbab-4366314a64af", "sighting--219923c5-0b2d-40ee-811f-899c81f5bc82", "sighting--f323db2e-b1b6-49fe-9c0d-7503a91e69e0", "sighting--315021e9-a68b-4ecc-9361-295dc563e798", "sighting--4cde31f8-a237-496c-9549-6ef1af467434", "sighting--5a5b6507-64fd-4710-965a-b5d115381ae6", "sighting--2b18b5e5-5ab1-4930-baf8-2cb27ff72931", "sighting--fac9909f-224b-4d11-be0a-819675fb997f", "sighting--65d81ce8-3204-4801-924f-60f644852430", "sighting--e41c5a70-842f-4046-ba6f-2c148a2e5b85", "sighting--4fb91eeb-ecbd-4e25-a39a-070b1252e769", "sighting--c017e1c0-7929-4f77-a882-876a914fd871", "sighting--7f6d22bc-2317-4eae-968c-bab7aab33183", "sighting--9e7bccc5-1481-45d9-b55d-496bf3a817ec", "sighting--8e7799d0-502f-4d62-9bdc-2edfcacd3757", "sighting--a4339589-04c4-47b4-b661-0dd892e6db11", "sighting--31bb4224-d165-4be7-b39a-60ced46b2830", "sighting--ad7eb9c5-82bd-49df-a807-ab1f560e1d9c", "sighting--eff37c7a-6357-419d-b527-98e27c029aa3", "sighting--281c4145-7672-491c-93d0-52141dfc5f73", "sighting--4b17f19f-ea92-4e8f-824a-07e15e50fa13", "sighting--3f636a82-8786-4062-b75a-a0ca6a62bf10", "sighting--f1201ee5-7893-4c0d-a01a-73a495dfd01d", "sighting--e6cff0d6-6512-4ea2-bf4c-4a1365c824dd", "sighting--daea4c54-34d9-443f-9e28-a675d25fbeec", "sighting--ea6d2e70-8b0a-42b7-80db-f518a3ab11a8", "sighting--fdf4cd4b-9282-4f41-b4bf-e3a139b73614", "sighting--c8714216-c5d0-47b1-a335-cb4aca12bb34", "sighting--06ad2900-af3a-41cf-861d-943a201bb319", "sighting--53575e12-0451-421a-aac0-2bcc3ffa363d", "sighting--1edcd484-4c9d-452e-a54f-bfec6840bdc6", "sighting--1a69d884-3209-4d7a-b769-624d05d20288", "sighting--38965fbf-d06a-4da5-8bed-5d1bfa83b123", "sighting--a794de9c-e473-48ee-9b26-bc1f89f83bd7", "sighting--f303c039-761d-42e5-b6d9-2bd056437035", "sighting--1bf34e31-c143-4038-b98e-dc5cad6b3e23", "sighting--be7acede-8628-4ef7-9383-dc19932542d7", "sighting--932aadc1-4b72-4cb9-8d10-dea02955e49e", "sighting--01e420fb-8873-4d5e-80d3-e4e98a598505", "sighting--52b3e6e7-30c2-4158-92a7-1d12e884d37d", "sighting--92e894aa-66e7-41a1-8f8e-25969b78407f", "sighting--ccca742c-d8dc-4299-9721-630cd959249b", "sighting--28e031ec-cec6-4c92-81cd-b16b69638fea", "sighting--5639a599-5eaf-44e6-87c4-d09b1cdaa388", "sighting--fbcb3116-189b-4246-9673-ed363a56884a", "sighting--28909d16-c048-4751-b8e8-8a8d2b28cdce", "sighting--cf6bbb9d-0781-4655-8351-d8c92d240a3a", "sighting--092abea1-88d1-4cd4-85ea-8f5870fc7a90", "sighting--76a6bcdd-4469-4d0d-93f4-7dbd1f629e2b", "sighting--9c671b13-8fe4-4d03-8b4f-ad64d37473ca", "sighting--14cac4b3-213e-4731-ac5e-a0db864012a2", "sighting--e4ac4ba4-14a2-4a3e-9774-25a68eb5e694", "sighting--d41215ea-b0c3-4c8f-8282-c421f009a2f5", "sighting--29bd69a2-56eb-46b7-b51d-ef91a1c8d229", "sighting--222182e7-f643-405e-8a5f-d0ba29193ba6", "sighting--e844749e-ad67-42cf-b1cd-7cc38d5e91b9", "sighting--9e50627f-9c33-4e67-9caf-67e4b7aa4dfe", "sighting--664ab8d8-9bda-4db2-984e-2f7ebf696d1d", "sighting--b73454b9-a959-404c-aca8-4080ceeca6c4", "sighting--815cd722-6bf4-4527-8095-ee0c97642e70", "sighting--57bbbfe1-cf3a-442c-96c4-dd9fe9e2ac26", "sighting--dd8815d1-2a3a-4003-921e-78f14cbf7db0", "sighting--7baf4ec9-c857-4b2a-ae39-672e3cd7539d", "sighting--3319ab32-4f63-4719-8e40-31287ae3bddc", "sighting--8641c27a-9aa1-4678-8406-46fdafdb9e40", "sighting--b75ebe41-3f89-4a6d-88c3-40fa8c50a511", "sighting--add41bbd-40fa-4c21-86df-d854d1090fd0", "sighting--15b527c8-1983-4e56-ab0b-21c762ac1774", "sighting--386d7183-1291-48b7-9651-834c891ebf30", "sighting--c1262eac-8901-4f22-8d98-9a038ebb076e", "sighting--178ae16a-a6b3-46df-9f81-be34410cb0b3", "sighting--9680cbd7-d6cf-483f-b924-447e366481f7", "sighting--a396edb7-c701-4ccc-9e2b-be189c8f5485", "sighting--1bf3aca5-3363-4017-9e36-c96efe64133a", "sighting--cabd27cf-39ce-4b40-9c02-db33f070424a", "sighting--49702ec3-a74d-4c1d-a454-46e22108f651", "sighting--908e1f2d-be1d-4ac6-a02a-31545a014db4", "sighting--cdfe894f-82b7-4283-af66-069e87dc3def", "sighting--b66f4eaf-460a-4cd6-bf1c-aea1f6f7bc72", "sighting--7750d259-7d21-470f-bcac-a11706463aac", "sighting--e3dc6f95-ff23-4020-b0c7-75ea2ecd50c9", "sighting--5baad711-ea7e-40d8-a4e6-3afc0d29f6b3", "sighting--4eddd109-0c4e-46ca-b3c2-2a22c70ef76d", "sighting--a02ea16a-dd91-4e95-b7f1-3e6f654e94e2", "sighting--54173868-5ae6-49d7-8028-b774ea81ffa5", "sighting--42c2f069-331f-4d92-adfc-bb87b776304e", "sighting--dddc3f44-186e-4f48-9321-20045d566ab6", "sighting--68c32bbb-3e70-4a16-b8d5-595d0565e5cb", "sighting--3c85627d-5feb-4b42-91cd-698f9711d882", "sighting--f0b305ad-53ca-4f02-b52b-c638f2552690", "sighting--fcf07f4f-b6c5-467c-a0c9-091e2fcfbf48", "sighting--e68b6e37-6ebf-42a3-87d5-3684e8db9e83", "sighting--5a5f093f-e122-4cc1-82fb-a8b9a12ebcc7", "sighting--f7913849-5842-46bf-93b5-d5d66bd100e2", "sighting--d1dd7f39-7b8c-43e6-9e9b-0e3c988bc655", "sighting--5f182507-2ab0-4b2a-bdae-460ee4ef8995", "sighting--4dc7205e-8a16-4de8-a332-945c330f916b", "sighting--d4346631-f707-49fb-a8b3-df43d1c49dbf", "sighting--81a9cd81-67b9-4fad-8ed5-71e9733220d9", "sighting--c44a4a81-aca6-4c2b-a424-d16622da7fa6", "sighting--15e1baa6-d9fd-4a8b-ab3d-4be91664de34", "sighting--d4b89e81-6dee-40e3-b1c7-8aae7a7021ba", "sighting--2f480e4f-4679-459a-93e9-596cb7a88f2a", "sighting--d339d8ec-0ced-4a67-baac-fed230f438fa", "sighting--dba179e0-008d-4b59-be70-35c5378eabfe", "sighting--406fe1d8-233b-4539-b807-97425adffc16", "sighting--3095b7a2-d15e-4416-98c4-a026bd0159b7", "sighting--a7bf1927-9927-4434-b155-c8ec5342d4dd", "sighting--0781f57c-0e76-43b7-a594-3b2bcc25c223", "sighting--08a88418-8785-4f6f-970e-687071d73446", "sighting--c7f63eb4-7142-470b-8e41-fec7428ced21", "sighting--6a42b73d-d421-4a46-9e19-62522ecf846e", "sighting--5af05f89-b3a4-4f2a-a8ac-0629a08493d6", "sighting--c2f80b2f-4ff4-411c-a1cc-fa7b22e59572", "sighting--42283264-acde-46f4-9698-55c3c12d6513", "sighting--45954437-9bb1-4ce4-a0e7-790ef0db7acc", "sighting--c7d763b1-fff6-4a25-bb06-a02560fa4904", "sighting--9ca73119-41ed-4498-b338-bc8bc5ecba0a", "sighting--9ffde723-c5d8-4de0-93b8-bb0653828dfb", "sighting--920bc745-c827-42f7-8d4f-dbf9f7626c0c", "sighting--e92d64c3-a306-41c0-8cdf-de364c6b2401", "sighting--50ac85b7-f5f0-41de-8ba7-ee1950825810", "sighting--3e7e4fe0-1b7f-4b88-8667-48a9b1e684d7", "sighting--8c685a6e-f5fb-4c11-988e-934a00e4793b", "sighting--32dae232-accb-4a04-84d8-9e3f226b1524", "sighting--a25de4cc-21d8-4607-81c5-ade6aa2fc81c", "sighting--83544f19-0292-4040-b92f-7df86999b55b", "sighting--ca21d586-a7ef-493a-91d1-204f06765e2f", "sighting--dd75835f-3ba0-4808-af5c-938f705e6063", "sighting--0e7b29fb-b194-4d17-af42-2f38d29be7c6", "sighting--50353e0d-d52c-4013-8efe-44604a72bc9e", "sighting--360e2128-1466-43b5-931d-c4c1692c42cc", "sighting--b8ca149c-1e75-4d72-a7b9-25ea6fbb4276", "sighting--f9a70cdf-1172-4473-91d2-04af2c89d884", "sighting--90d74af1-8f6d-4d70-bb58-064b098a804f", "sighting--886666d9-eb52-40e4-8429-f0fb05c048b6", "sighting--3d515144-2286-48ed-a801-9e2ef108438b", "sighting--27211b51-266b-4e23-a18e-049220cb118a", "sighting--fef74bb6-ca35-4752-8ece-613418219f99", "sighting--7881c869-4df5-42be-9253-f487c90ba096", "sighting--7348d7be-2646-40ad-8ab3-8e746d3d36b4", "sighting--b07643b9-1cae-4fdd-a7f3-cb7d98caca4e", "sighting--4ace144b-ec93-4b05-b955-8746a009d06d", "sighting--77c072ba-d025-4d69-9308-7763c1992a31", "sighting--bfa45769-f531-4c95-a213-83bbe0d358ec", "sighting--57527863-8da2-47d3-bf37-1e590956dcf8", "sighting--f390df3a-8dd5-4734-b330-369231e36837", "sighting--c34c344b-3985-467c-ab56-51af339f08ec", "sighting--ba22aa6e-e2f9-4866-a941-de5829142e2d", "sighting--baa1b158-6ef6-42f5-8889-1924c3faa834", "sighting--d456d345-fa58-4d42-ad03-bb43ef98f386", "sighting--5e082b62-ddfc-452a-a0c3-95445e32f05d", "sighting--b8f3a157-2be8-4d11-8f1e-88b485cfbcf6", "sighting--6ef7b265-91c7-4c9c-961d-2ca31b7439c8", "sighting--483646d7-c8fb-4f99-b728-71ae19375716", "sighting--9744db4c-728d-432a-946b-d77aefb61cc6", "sighting--9eba9d0d-95ac-42c3-8307-6cf92ffce9c2", "sighting--350dfcd1-3678-427a-a085-3fb45fc7f234", "sighting--662588ee-50ff-435b-818b-21c50942bdac", "sighting--a52d25e0-1150-4d04-89f3-5a9cccc67ec2", "sighting--5e29b223-58dc-44ef-8061-fb24cd100afc", "sighting--7b0ed629-af4a-4f5b-9422-629c56a26913", "sighting--3ec067f9-75e5-414a-a901-024ab21ca0ef", "sighting--0a9c041a-9f43-48c8-b421-398680a274aa", "sighting--c02e159d-3b1c-44b1-bdee-033d2c1f02c5", "sighting--c9a8bc1a-2397-41fa-ac35-e625cfa14177", "sighting--2933e0a2-0eaf-48ba-8717-05f6e334235f", "sighting--dab30d56-c4fc-44ac-a5ac-c6cbb26c0502", "sighting--a6a33095-a3d9-44c0-99fa-366569d95714", "sighting--aaddaac3-3182-4e6f-9118-3debc1efeb11", "sighting--6028d684-5d3f-474e-8b34-2ddfed6452f1", "sighting--431d6056-0c89-4dbb-89a9-fa0519f82ad2", "sighting--a0dee7ad-1992-46c7-adf8-354d768a6b08", "sighting--4f7db084-e181-4647-b30e-f0a404f0fca0", "sighting--1c491af7-ff5d-4610-ab3b-4779c2affe9a", "sighting--c9f99d0d-5683-4a84-8a40-6e43a023ab74", "sighting--33f9f2ed-d661-46b4-861d-120654afca4e", "sighting--1ae491e0-83a5-447c-8486-d2ca529d6982", "sighting--f6e91ea8-5f17-4283-afca-eb4bceeec1c2", "sighting--5f4edf5c-1207-4252-8361-2cb4d2f97e6d", "sighting--a460cace-1de2-4d0a-a09f-095d88070459", "sighting--a72d795e-fc06-4853-af14-76aab70dcd76", "sighting--d85c5353-984d-41bf-bbda-09f43f4da92d", "sighting--b7f512fa-96e7-4652-a8fc-83db51bb28b8", "sighting--9c36ad11-7450-426c-adf2-479854623cd5", "sighting--b784ddb0-cc5f-4fdc-95b8-549750bb0c53", "sighting--3f2d8925-99bc-4ee2-8aad-c02a2edc3ada", "sighting--eb4046a3-f68d-4d8f-944e-f17873eb078e", "sighting--68ee4160-534b-49c8-8459-e97c96344c22", "sighting--692cf1f9-fc8e-41a7-8d42-e3cc7f90420a", "sighting--1ef536e7-b350-4a41-baf0-dcf260f2e8a8", "sighting--a855a2de-4b65-4246-a970-5f71f277a328", "sighting--7c7063ad-09f3-43e6-895d-250161312758", "sighting--d782887d-66ed-433f-837d-4efdc0278d78", "sighting--d3dca2a5-7d78-40a2-9240-4f3eee48c954", "sighting--644fa669-c47a-4eeb-b8a9-0ba454e2efc9", "sighting--98447330-f20e-4d0b-bb32-17633f09b62c", "sighting--12a545f8-7181-427e-8bdf-80ca77ccd093", "sighting--345d0931-603c-4199-895d-09098bc25bc2", "sighting--1b9621f6-413b-4142-bf08-6ea06c92434e", "sighting--b82436f8-e78c-462f-b56c-d8189cd1e604", "sighting--1a0cf5d9-3e84-4eb8-901f-ab245a636352", "sighting--8168eab7-b652-4a59-9f5d-05a3a15031ec", "sighting--8b870bbd-716c-45eb-b56e-79829debbfc0", "sighting--57d5d690-4452-44be-b4a7-40046cbd6ab7", "sighting--8e4d574c-7602-4c77-85f7-4865682f65c7", "sighting--4658f4c6-fb15-4f23-8eab-333fd0475119", "sighting--2b9eb985-09e5-4a75-8caa-e969f37d418a", "sighting--6cc7d60c-be7f-4f63-a594-8fb909ec6762", "sighting--82aa946c-4469-4050-9bea-9d240a3f84ce", "sighting--1e758fe4-5536-4a1b-a7e9-04f6c4b972a3", "sighting--d849e2ad-047a-4b6b-a83c-47553e72eaa3", "sighting--ff183deb-abb1-437d-b423-d8610b13605d", "sighting--ee3ccc9e-1598-474e-80d9-90020d23ac7f", "sighting--da1d98dd-2670-4218-8674-e2733d8d4aa8", "sighting--6b95c21e-9529-4c8a-8960-a0669c72d67e", "sighting--fb24262a-5b52-4e6d-9a58-0db50a200b15", "sighting--23332511-d783-4331-be6b-3ad676652508", "sighting--d545e329-e86e-4b53-81a5-d1f5f5a85713", "sighting--c3f7b2a7-a4be-49ff-9e8e-03d457a0844e", "sighting--bf6b8cf1-8f66-4a31-b260-d481c5852ead", "sighting--978d5220-d0b5-411b-8ef4-9ffc5649dd8a", "sighting--cfdd1b69-6e88-45a0-8713-e2de024b6ff4", "sighting--4bc3f520-b170-40b1-a6fc-0529c1392b83", "sighting--cc0925a1-4aad-45a4-b2d4-00fb5c7d753f", "sighting--d7031370-e21e-4935-98dd-ca8d2cf6d66c", "sighting--d8e3902c-58dc-4087-90d3-46a369d81601", "sighting--60e62d56-76f7-4639-832f-c20ed8a39281", "sighting--5364e3b7-19a2-4f2c-9e45-4d01bfbc6465", "sighting--41b45e45-d186-4e53-b0ba-6cf88f3f0ca1", "sighting--d8629762-676d-4309-b832-eda8ad2b43bb", "sighting--4f67f7bc-e6ea-4b33-99cb-15bf4aea28e7", "sighting--437cac51-14b1-4f28-9427-f490ffd64a11", "sighting--77ac6451-e3ec-473f-843a-ec3dcdd36584", "sighting--1dd2b833-816f-4d08-b2af-b8267ae64a34", "sighting--09348097-3eb4-49f4-b77d-f49e83661ada", "sighting--15166f1f-7177-42d3-b103-c50465298672", "sighting--c31df5fa-fcfb-49f1-962e-cb8a87e94424", "sighting--ea68cd68-a431-41be-bc25-3b3b71d52ea6", "sighting--01d98d38-624a-4fd0-be0f-ecb6ec7110af", "sighting--63a0c67a-61d2-40e4-8133-eec740d0fc42", "sighting--f3bb69e6-af42-415a-86aa-f9183b80fa10", "sighting--e82ac028-24f4-4425-aa84-85af44191031", "sighting--5fb73063-8cf5-489d-8a1f-3d67a225251b", "sighting--c23be17c-becc-45a5-b23c-f17ca442b299", "sighting--0a279825-bf8b-4545-a0e7-44adb29b38d9", "sighting--06b91927-b283-4859-8024-fece5b67a3f2", "sighting--1d1c2cba-f9c9-47d3-8736-02731560f9ef", "sighting--2a90be69-88e6-4449-82db-7261c19caed4", "sighting--1e84cb80-0f8d-4389-8ec7-8a8adfbba11e", "sighting--a50de23a-409f-466a-8cad-91d961513c75", "sighting--2bd07c4b-c882-42be-beae-da4969d0ba1b", "sighting--372acedc-876b-4f6c-b6c7-201cd765362a", "sighting--b6883a74-2727-4b36-91c8-21596159bf14", "sighting--2c7ddbe8-a197-4132-8509-70cebbc5d542", "sighting--06a44dff-c503-40f3-b7e1-dc505f77cd23", "sighting--cd39c941-6e6c-4012-bd79-23c72528eb1d", "sighting--ead4ca72-f108-4435-90a8-81eab20ceef8", "sighting--be265c14-9010-4dd9-a223-6d7bbac0de84", "sighting--1fac9226-9450-4d54-ac08-d511b4e707f7", "sighting--ad5e7a9c-9715-4098-a617-5662974c71e2", "sighting--046f9b31-0c2d-4a9c-accd-bbe23361a284", "sighting--7a68d97e-a519-4f0e-a14f-25876f2cc938", "sighting--e6362b12-8161-42e4-9186-6f383be6cb36", "sighting--ac924b03-7221-4fd8-adca-eaedd2e39945", "sighting--acd6b845-77af-4d95-a458-f6670fda569b", "sighting--b494a8b9-b4a4-47cd-ba8c-3228241c22ca", "sighting--d78a41ba-8b74-447b-b896-67907b8683a8", "sighting--43f71fbe-e612-41e2-9aec-32fcfb251606", "sighting--e865e03e-7bbe-48a8-90aa-107e2d718c9c", "sighting--8da314a8-cbe0-439e-8197-f14a2dbddc31", "sighting--4a006e49-39cb-4f54-8511-e2fc3836eaf3", "sighting--8c842ef1-7261-4509-a15f-7c3e81293e55", "sighting--00ceca89-6a53-4426-8fc6-274cfeaf8d07", "sighting--18af6858-dd47-40a9-b0e4-c8173bf4fe67", "sighting--f3547ce7-9edb-4eb5-922f-f56c5a0fe7a4", "sighting--68a6ffe8-d0cc-4a7b-8a42-389bf1297df3", "sighting--f59e2549-dffc-4144-b182-a9c9944dd762", "sighting--742a86b6-c0f4-450c-9524-6c22688fb2f3", "sighting--934e311c-c4f8-4b4d-be85-14160c182639", "sighting--c88f782b-3a58-44cd-ae66-f4b2511128e5", "sighting--d91a63e8-121a-4ccc-aaff-46652489f5bb", "sighting--1a745123-9839-4806-a08a-fa47d011fa94", "sighting--cdaaf711-9188-460b-b0b7-6ba5e4e66ca0", "sighting--ebed02a3-0f1b-401e-9b59-bcc53282867e", "sighting--c89cce7f-093d-4b0f-aa50-8b8d94e85a58", "sighting--9eb70584-9495-448e-938d-7652ef48eb7c", "sighting--01787cff-2fe0-4756-8b54-76e7d0a39fba", "sighting--cac3b3dd-35cc-452c-ad51-0bc6f0caede0", "sighting--0facc08f-87d1-4851-9557-58a04662ce26", "sighting--5373bb58-e060-42c8-8dd7-e36477b3330b", "sighting--21adbf0a-4e9f-4691-95d5-4cec5edad38d", "sighting--9f0d5f58-cfa8-4fe7-9b85-fcc15a532c56", "sighting--94740b6f-9e15-4919-9039-ce4d994830b2", "sighting--f1f81ffc-145e-44fd-8498-98fa2a419873", "sighting--4f8997a1-cf13-44e3-9608-8b7a9d0d1e95", "sighting--dbaf4efe-8851-4746-b306-4ba2b060d4e5", "sighting--a02b952e-dc58-4546-85bf-589b7fcbce41", "sighting--4f00437a-c3b4-4856-8aea-d95aa594ca7c", "sighting--7adc3bb4-afd5-4bcb-859d-ac57426519e2", "sighting--6b2e1b0f-621a-46ca-82f3-ddceb3ffce1c", "sighting--0327e18a-d2a1-4010-a048-1c42caf14f3f", "sighting--e3df680f-2406-423f-84c5-4091d8fc9a1a", "sighting--c6d05f29-0e0a-45de-afdc-5bfadd643e12", "sighting--587e9d17-14f5-475f-a1b4-cc4994104b03", "sighting--692ab629-9c54-46ee-a1ba-83bb22e88f9b", "sighting--0c87e998-8ae7-4e37-8965-bbfba4c7f5a3", "sighting--4bfdbc2e-e05c-476e-b81c-d6e608df0345", "sighting--904d3cef-cd70-4b30-963a-c7be7b4845fd", "sighting--e84439bb-dd72-4cc1-ade7-c7206fb168fd", "sighting--1a5af734-cf12-441c-8ab7-e92aa3cf3a0f", "sighting--0df9acd5-2814-46b7-868e-8727b455487f", "sighting--a2e0b85e-0031-435e-8288-663cd2d081d7", "sighting--f3bcb53a-092e-4f3a-a74f-d87e4f9910e4", "sighting--68610787-f3e2-4ce7-9cb7-993d0cab4246", "sighting--99755662-9463-4ed8-841e-daf1a86bed10", "sighting--59b50f66-b5fd-4f8f-a603-1564a7a81e05", "sighting--c1f85f28-9858-4b82-a1eb-d06fbe491f27", "sighting--0440a460-1ea3-4d18-b241-693238156303", "sighting--6403d3f4-ed57-45bf-9050-d77a2fc62674", "sighting--089d65f1-55f8-400a-96b5-b3a49d8d4d0f", "sighting--9993d671-7388-4928-b85a-0ec64c3a03bf", "sighting--6a0f79c5-f4d6-423f-b8bf-6672653db915", "sighting--89660d93-dfb7-4070-97ee-783f986b03f4", "sighting--3572914a-8b4d-4f36-8cea-3a36215f0e7e", "sighting--209ed030-5b97-4c21-bc7f-5854b0be9fcd", "sighting--e392e106-ff33-481a-99b5-34b09699f238", "sighting--af2e7842-fc67-467f-8754-4c8522228302", "sighting--2f8750e9-3bc5-4c1b-8712-19c4a34df08d", "sighting--4f014c34-fada-483a-976f-7b25114d6a78", "sighting--b9949b8f-dbab-437b-9b2d-fbd05f5df227", "sighting--8d08de63-61f9-46c5-bbb2-6728bbe77cdb", "sighting--90679ae8-083b-48e2-a5a2-16bae6c9c49b", "sighting--aa8bd837-adef-4e08-ba52-e29e6f1d4b7f", "sighting--3924ddda-13bc-4230-a384-e7e7e61e8186", "sighting--f1407049-839d-49b4-a3db-3e8a2c97709a", "sighting--089dcd2b-eb83-4bd8-8932-065427214b63", "sighting--38f5aa7e-ca76-4235-8976-84e0b0c43435", "sighting--8652c10d-9e5d-4089-b1ec-85f953372f89", "sighting--914bf266-e9c4-421d-906c-c6db777b353d", "sighting--11b9eff9-8ec0-42ab-b7b9-b721af5c196a", "sighting--518119c1-c4ea-43af-a3f2-962c5942402a", "sighting--602f6443-c91d-4915-92a8-c1d87aef287c", "sighting--cb70afb3-337b-4fc6-9d2c-57b63bd359fb", "sighting--acc4bded-be0c-4cef-a45a-2547d1430b04", "sighting--b0583994-bc00-4adb-872c-43a00723e0cb", "sighting--cd533cea-ae9e-4ea7-b3a2-ecf00c112f01", "sighting--6f78a5b4-1f2c-4db1-bcae-1a94c2a4e2e8", "sighting--12a0b612-4680-4bc3-be44-292e12f87b16", "sighting--9e4a26b1-bd6f-44af-b0f5-934634d2f11f", "sighting--66da8a45-cbe4-4062-b5c1-5723130e5a0e", "sighting--4a171c2c-bddb-4d8a-a0f3-0d3b13bc36f5", "sighting--4f873d6f-7e16-428e-9638-139d63ea26af", "sighting--2074e7ff-74f3-4869-9999-13a4624a98e3", "sighting--c15f1731-eff5-45b4-a834-bcbf28eda531", "sighting--a8388cca-d3b3-4b2e-a9a1-c2beb3267ba0", "sighting--3f900b51-fd81-45ca-9f19-acc3a34c948d", "sighting--58ac05e7-b66a-43c4-99ce-6ca0735e1c82", "sighting--4e1603db-3472-4b90-ab2e-8107891e77ae", "sighting--f06e9be7-de33-4449-bdc6-18391827bf29", "sighting--27fa61b3-5bcc-4d32-b48c-d27c719519cf", "sighting--a6b15699-f671-4ead-ab39-53d4456ce9e3", "sighting--b214ac8c-14f4-4903-847d-0a37b9f71bb9", "sighting--085afb90-2f75-4ca2-99db-1bba808f5ed9", "sighting--a0dd4568-14fe-48e6-bc62-fdb17fa26aad", "sighting--c8efb98f-da65-4529-9cc7-5dc71aa683dd", "sighting--6370f1e3-cdf1-4f99-83e4-a9217589f2b1", "sighting--1d54c72b-a976-40e9-9ad2-5a62272d17cc", "sighting--1c6907fd-d951-4692-8767-b220204bd419", "sighting--50525f37-5825-4e99-94d8-a611c6418e2b", "sighting--8e3630d1-43b9-4922-a36f-7b1bfb9ea7d1", "sighting--be5660a0-47b9-4cf8-9ca2-31000c9fa983", "sighting--2d597cd0-5f60-4208-b0a7-73dcc259f00f", "sighting--b22cceb1-cd0b-41d9-908c-2ce7b1951cba", "sighting--db9f91ed-61b0-4154-bad6-738984c57470", "sighting--cc587ef1-b9c5-4858-8a79-277a07c8b309", "sighting--a74da71f-5ea9-4ea7-a1f4-6d7454980c79", "sighting--01d80476-df30-432d-bd75-93cba2030d1a", "sighting--0b850f6c-a36d-4535-9f40-00c7ad025c5b", "sighting--00d9b583-4d59-4b8a-bd1a-6590c011f02c", "sighting--7095fefc-7680-4e1e-9b2e-2ba8da3b6060", "sighting--da2b68a2-3b8d-462a-8051-7ecec80eec7d", "sighting--5215168a-db67-4b45-ae72-4e2a7010eaba", "sighting--e182bfa8-c5f4-46ed-8257-98093499b4e0", "sighting--e7253037-8662-4120-8ecb-9a657500fa77", "sighting--accc6bf5-9ade-434c-bad3-c100ef12f962", "sighting--03928301-5a53-4aab-9669-ce7f8f99fd70", "sighting--af3ed1a5-705c-40d5-b115-cfceaa79f1c2", "sighting--3aa3ed8b-cbaa-43b3-8c5d-431a6d88f573", "sighting--cfe770f5-ddab-45d5-ac7b-2acb5d424338", "sighting--837d7976-b0f8-450c-bbca-701ef431ed38", "sighting--bb9fb65d-d714-4285-9f68-db1f692a19d3", "sighting--b5e0ad54-29d9-463d-9369-82c1782c48c0", "sighting--b90acf4b-2630-4dcc-b154-b6fc35a67e07", "sighting--2d75186c-21d5-4a87-8555-f1d64852ea33", "sighting--bf05e97b-3a34-490f-90ee-ccb21eb28eed", "sighting--b8d507bf-382c-4572-a097-1fb6c1d03cde", "sighting--d16208d0-ecbe-4e90-b705-339a5a6756c6", "sighting--9f6d81b6-a844-43ae-a26f-5eac5f1c56de", "sighting--99f7ccbe-4419-4847-8e19-c2b48feb11a7", "sighting--f1f8f972-bde9-41e6-8fae-060e740d6160", "sighting--f1be6cb0-b1d4-405d-9307-15dfb5339328", "sighting--da16298b-30a2-41aa-a96c-6d57cc150375", "sighting--ed4b8da2-63e8-41d6-8f06-97720b1fce65", "sighting--0af70264-ef7c-4b26-b0f0-24eabed5249e", "sighting--b90e7c0d-88ae-43f7-aa81-d906bb8ec398", "sighting--0b5ccecf-c9eb-4bff-9dc8-524b9c685aba", "sighting--e7cd51d6-bb8c-4c70-b8d2-e2fb356358df", "sighting--3f6f9c10-5e2b-407e-a295-f7b2ae7adc0a", "sighting--34a8ba16-0033-40da-99e4-b73856a4ca00", "sighting--0c6edaeb-10cd-44d2-bc2f-b44c496be0cf", "sighting--540a8af8-aec4-42cf-aca8-7aeda12dddab", "sighting--57fcd016-ce99-4dac-8549-298d4cbce01e", "sighting--424d5e85-5060-4dca-8a14-7260f5bb20b4", "sighting--89a5710b-47f0-49c8-9425-15ef47c4a105", "sighting--c3f11d63-3178-436b-b704-5df0368d74dc", "sighting--78c0876d-584c-405c-ae7e-fc7cc5d153a6", "sighting--b7f0d1ab-61dd-475a-a02a-f487a212442b", "sighting--002386f2-6729-42ec-a209-6ff9843c36d3", "sighting--1d50fbc4-3d83-46e5-819f-c39a19a281e3", "sighting--89328794-5ebf-48e0-93af-4a2ccb93dfbf", "sighting--d6a8a460-7351-4b45-8dd3-3805a7cdd106", "sighting--a5efbb9c-1c0d-4d0d-a9db-04de54613fb8", "sighting--af383957-29aa-4fd7-bef9-045f9fad7f8f", "sighting--6b83e215-b53c-45d3-9a5d-cd350e6c9df5", "sighting--9921b863-8f88-4b3f-9e25-cecd9110da18", "sighting--69b62fd0-d037-44f1-8507-f4b178d4d275", "sighting--2882f53e-5e7e-44ba-9f5a-002044143bd4", "sighting--bc4754b6-20a9-47d8-9ba6-496667614191", "sighting--d9c10548-d5f1-4f72-9f63-acde3b65bb13", "sighting--f3ab6be1-4ecb-4f04-b3b4-0f0eaad1a391", "sighting--5dc0735a-02e3-4840-8335-af0a287eb363", "sighting--1ee0ba68-e1e9-4bd9-9b91-1ba406aa018f", "sighting--23fbd307-17e9-47f8-9e13-fe3abbd6a566", "sighting--9d54f831-116c-4a19-87a0-955bb989a3d4", "sighting--709fb280-79db-45f1-ad56-0fd8a86702e0", "sighting--7d81eb1f-00a4-48c8-a3be-8deb01eb77a4", "sighting--083404a5-0652-45bf-8c5a-3378200418e4", "sighting--1d6c15c4-ed6c-4693-947d-a52d396c6834", "sighting--a7f446e5-27b2-4283-b830-5d5bcf5c8b65", "sighting--8ecb63e6-50a2-400d-8606-91ca2b299fa2", "sighting--1855901a-05ee-4324-87e5-5fcaaa27d318", "sighting--625db32a-4b16-433f-9153-1ba7dbccda35", "sighting--64adbcd4-7798-4e0f-b871-b1df3c3d4893", "sighting--7576c96a-3bd7-483e-8795-e1f80763f785", "sighting--262c1ed9-1371-471b-9dab-3a9a80fbb608", "sighting--2f87ea37-9648-4665-8531-a4c57e254d44", "sighting--8412d9e3-8d7e-4335-9ad1-218a5ac4c402", "sighting--755fa295-bb45-4714-bce1-6f1374385c95", "sighting--8198a0a5-32f5-4644-94f2-f7d9fb938acc", "sighting--4e01a2dd-a819-4504-81c6-0c807a263aef", "sighting--49c8e9f3-f60f-429a-bce1-cac2fdcd0345", "sighting--04e03aab-56dc-4e51-983a-450610fc971f", "sighting--ff58da95-1dc1-4bd7-9f35-9e98dacae9e0", "sighting--82d4438f-54fb-4fc1-a7cc-a36db3a16608", "sighting--e8eab943-1180-45bd-ba9f-76207e589c77", "sighting--a260d676-8252-495f-91fb-82098ba4e3b2", "sighting--0edcf5c9-8815-41fc-886a-39739471c76f", "sighting--685d4133-abe9-4841-8474-5c7d0a0e94f6", "sighting--b4dbb74b-8499-445c-8010-642383eed52f", "sighting--3a804501-750f-4961-8ec6-54f2549c5b30", "sighting--f45caa7d-f91f-4630-b343-29a444d68b3c", "sighting--146acbf6-eaaa-41a3-ab3c-a076b80fcd29", "sighting--fe07d532-ee97-4a0f-9ebb-365f2dcfe669", "sighting--7ba670b8-35c5-4918-8f4b-47915baacab7", "sighting--690300e3-4720-4254-9504-28985ff40d78", "sighting--257f6270-4fda-46de-a41b-a60d49cc4b5d", "sighting--639c6725-47e1-4126-8c8b-436f3da11a40", "sighting--211f6852-f837-4bf4-a045-715a3df77d81", "sighting--86ef469c-638f-4318-a569-786ce5884d18", "sighting--5d6f2568-8f96-441a-9ebf-eefa3e0175da", "sighting--1fddd4df-4c82-4eab-9243-5047a58480e1", "sighting--9c9657b7-03d7-4eb5-8c8c-f73ec4527b95", "sighting--e8784c64-d06c-4652-a58a-1a11ead89b50", "sighting--e66f5926-ef5b-4906-8968-d51dc02d3585", "sighting--71680fb9-429e-48f3-ba5b-943c8ca66b87", "sighting--f1683d38-bef2-433c-afff-602ce755e47e", "sighting--a170275f-525b-4635-a23c-a9cc658ac2af", "sighting--395de474-7de3-4bfb-adb0-b9c99b3d7a4b", "sighting--52ec9b58-19ca-4dad-bd7b-54e3e10dcad7", "sighting--6f92807f-5fd4-45ab-b032-72d745f55baa", "sighting--bd9332b7-8d00-4a3c-a962-98fb8e2d6c91", "sighting--4c4ffd06-84e6-4484-9cc7-e2334b7efc05", "sighting--5097075f-d448-473d-abf9-955774f7639b", "sighting--66fcb131-a7bc-444e-9867-1c3a10f60c7e", "sighting--1bf7af2e-a924-4ca0-a085-3e7263206eca", "sighting--b0a02805-9118-44c6-addc-206c87419d76", "sighting--3051f4c5-d765-4f90-8323-198e4fee7979", "sighting--a2012b5b-9961-4832-ac21-fc6c545a27e5", "sighting--e51d6dba-6a0d-478c-a6a7-c0ae212c3436", "sighting--8b8c37af-1358-4cad-953d-1b1410f3cc82", "sighting--6d8a3576-ee29-4df4-8680-2f84a61b9633", "sighting--b952911c-2ab7-4f47-b5e4-f786f907d23c", "sighting--5504ed9b-90f4-408f-a6aa-3587527a231d", "sighting--f739bf4f-368d-4e2e-ae75-719e22494d2e", "sighting--70e79ae3-2489-48b0-a406-c860863c30c6", "sighting--cdb8590f-3a16-4887-b1dd-9bd793ada212", "sighting--8e026e40-3029-456b-ba05-0f1ec6d7bbd9", "sighting--d30c41aa-2f4b-43dd-9a88-786713212a75", "sighting--52eb0c7e-cbe6-4d82-8377-43c5e975f94d", "sighting--c4b3fcd3-aa8d-44b5-a92c-94645b100e8b", "sighting--ab85fa04-e9e7-45f6-b8fa-559a949a980b", "sighting--6a1e29e0-b75f-4b20-a432-2de047a3caa3", "sighting--d86a221e-af1c-469a-a4b1-f2d8cb8493c1", "sighting--e528ea29-3e2c-4a01-b643-9f9849eac8bc", "sighting--1326804c-990b-4be1-ad71-81fa6de0c21b", "sighting--52f481d8-c1a1-44cd-bb91-b32bd6e5bcb6", "sighting--e7b465b4-854b-4599-8d78-1ffb32058464", "sighting--cc6d7440-3bdb-4c6d-91a3-e97f8a736d08", "sighting--00c4d47f-f45d-4ee7-b81a-ea1213e58744", "sighting--5dc5bda0-c694-4b6d-b51f-4e46028b3023", "sighting--dba808c8-6f06-4cb5-94c2-4bf2246544ad", "sighting--b04cebd9-5bcf-4225-8d51-5d552e4ea8d3", "sighting--6065c262-b5e0-4657-a6f1-65d2bd6e0aa6", "sighting--c557388b-9196-4aff-bf60-cf10097d3b74", "sighting--a7201eee-c452-4106-837d-1c0cd819f463", "sighting--be57a3f2-eb7d-4a1b-b687-d2d5504a12d8", "sighting--c7c10d59-29ae-4ae8-b4d6-ef174c3cbe5a", "sighting--7f8d8502-895d-48a3-9977-0867e010fd48", "sighting--5006eedc-562c-4aae-b958-ede99acffbc1", "sighting--e118b19f-486d-49a2-81c3-dd32a408f318", "sighting--9e98f680-0ed7-4bbd-955e-877ecc023dd4", "sighting--10ded7eb-8f43-4dac-bed5-951975ed479a", "sighting--419813ba-de46-4e1f-8e19-fec807a9277d", "sighting--f5ddb031-1d80-417a-ad66-4a5aef84a8fa", "sighting--6d3e5391-88f1-4e58-b33a-5ac711905134", "sighting--7b6f090b-f0ad-47e0-a0cd-cfec3161f835", "sighting--173c72d9-d9aa-4c56-ab64-fbb039ebf83d", "sighting--0f1f9c2b-d126-4571-8ac3-eba6e74bba45", "sighting--ac614499-a51f-4824-91ce-eaa67a4f7f24", "sighting--69e6c5bb-111e-47d9-9084-c717f389d8b2", "sighting--5227d82e-0f77-4dc2-880c-11c6ec885b5a", "sighting--a07152da-b186-4640-8a5e-675b3e3cf7fd", "sighting--63c45f9e-be21-4862-9642-5ac90e6137fa", "sighting--25d2fd71-0a2b-4dfa-a334-dafd5c444873", "sighting--cd3266a9-d9a5-40f4-97ae-794cad6b0047", "sighting--91d7d591-6b49-4294-968a-c519aba3b55d", "sighting--20db4ebc-7b5c-469b-bef7-fa8c259edee6", "sighting--0c8111b0-ebd4-41b6-9649-20efae4d2a40", "sighting--0fafd3c1-1413-4fe4-b0c8-79cec7d89704", "sighting--2369b216-f48f-4723-982a-085900e37643", "sighting--77fff27a-53c5-4bc3-a055-cad8b10a08da", "sighting--fd33335a-cccc-403f-962b-8220c62295dd", "sighting--efbcaf2d-d10d-4945-8ca3-786c116e38b7", "sighting--f47de184-971d-4272-acdb-ae6d5a7ca59c", "sighting--b76e2c79-64ca-4816-afda-19d97ee65342", "sighting--140e49fc-6dca-4807-8b6a-9b95de0e861c", "sighting--45ea5187-1c86-455a-8855-e97a5be46468", "sighting--990c65bb-cb4e-4745-a55e-faea49887ebc", "sighting--3265281a-cc57-44d4-ad54-137c1b9dc3f1", "sighting--8fea9b9f-b9e6-4c67-a78e-0f4f7ac4d519", "sighting--634fb8af-98d8-4a72-9f79-d1f61a499b0d", "sighting--9283c5ec-2fc9-439e-96d4-1f7964da466f", "sighting--c9eb5cb3-09bb-4c2c-8c25-bbed4ccfc500", "sighting--4ea8e7d1-66ce-48e6-93c4-157a780ab320", "sighting--d0121591-9dc3-44bf-a1d3-cc1e47230caf", "sighting--25da2045-b120-4ec0-b48d-697e611ea633", "sighting--129c9967-92dc-4fe1-95d3-d548a0f3ed6d", "sighting--2f9ca1fd-2ac8-44d4-a81c-8135694a3d9b", "sighting--85161ebf-53e2-437f-ae1d-d39d8eb953cb", "sighting--b46cccc6-a9b4-4e69-af44-0ac786f743d7", "sighting--8172d760-c320-4867-a185-d7ed50e6397e", "sighting--5f3f99b6-e073-4e6d-83d8-6a8c21698b86", "sighting--5888ad28-015e-45db-ab2b-94ba5023299c", "sighting--dc052a68-b8a2-4eda-a0aa-d870483b3e22", "sighting--43369540-52ef-4e83-a7e4-911a5b13d5fb", "sighting--a8942134-86a3-416c-8e09-2a88f82ef0d4", "sighting--dceb22fb-1dc8-403e-9476-f56ab575a9d5", "sighting--9e1351ac-d898-4eac-abe7-7664be06f89b", "sighting--d73e335e-6666-49be-a3b2-33299a5ac5dc", "sighting--6d9a22b7-fd32-4c7e-a44a-ae061818613a", "sighting--6b3ef71f-7e73-4642-9bee-5bd41516bacd", "sighting--579e5be5-752a-4d90-be06-765094f9616e", "sighting--a436b2d0-c3f5-46b9-ae51-e2b086907910", "sighting--e13eb5b2-353b-47a7-b270-2e55ae042699", "sighting--8b04b2d1-e82a-4637-bd46-f7b0dc288f43", "sighting--f27b5f82-651b-4d06-b0f5-b4c448d885e0", "sighting--2a123625-5934-48c6-97ce-86d38a153546", "sighting--35de5066-bc6a-4b07-8e14-4f16e99fae24", "sighting--b0391936-2322-4523-a628-45c190a56794", "sighting--5fec09b6-5678-413f-9956-4b3ee8f25422", "sighting--e16729c4-1d0a-4d67-a513-edd2fb39ba33", "sighting--2d05eb47-4fbb-48ea-94e4-c8bbe367dd9a", "sighting--ff9935dc-2f99-4b7a-8310-939d3f270b38", "sighting--47f8c11e-43cc-4d6f-8686-5d71a2e0a35c", "sighting--7308b6a4-572d-48eb-a999-984061426b64", "sighting--9e4535cd-ad4a-4322-b276-75704b46baf9", "sighting--86e50185-9345-4551-aec0-0aa6ff6dfe5e", "sighting--8c92b142-448f-4fdb-ac03-72afe5eb563c", "sighting--b77fd187-b2f3-494b-83e1-e500fd8e6bf5", "sighting--059f2a1c-9902-4be8-83b7-690a2af43b92", "sighting--07e983af-68f4-4348-bfd5-6c88ddab6ecf", "sighting--f3baf0b2-3033-4983-9c3e-c0c3b0f21f82", "sighting--30369d7d-ad63-4c2f-b8ac-790c319dc035", "sighting--57cde143-458d-41fa-acab-f7abb2e59377", "sighting--4cbff97c-32e0-44b4-8e9e-691d4387854a", "sighting--492d208c-cd87-4cc2-98b0-0706ff7b8a4c", "sighting--28dcacfe-4a79-4f61-a6af-119ad827d3b0", "sighting--43b2e49c-976f-4bfc-8626-0072404ea19d", "sighting--ec6497a7-c302-495f-943a-dc9909e8a989", "sighting--8c091caf-e7e3-42de-8335-cae5df4aae9a", "sighting--f012e499-64e0-48b3-a286-6b45c040d078", "sighting--4dcfc3c6-c3dd-41f2-bd63-1fc60da1047a", "sighting--92251a46-b467-473a-a8e2-967532dfc1d8", "sighting--607d17c0-349b-4daa-9aae-6b3272e06608", "sighting--0e1ca6f8-210d-40a0-bc33-ce34cc85d497", "sighting--54e1a314-a1cc-4093-bebe-587d4ae12c7f", "sighting--dd78f000-fb8d-41d8-a2d4-dfa4b1b7177d", "sighting--44475b43-2950-43b7-92b2-e3c460fe8c6d", "sighting--6ea5cbfb-c2e8-46b4-8499-7b7c605a0cc1", "sighting--62490a2f-1439-45a8-9956-1e257e976c08", "sighting--27aa1010-388e-4dc8-945d-14ce1db909b4", "sighting--19b40215-1537-48da-a0fc-7ed0115f987d", "sighting--cb87caac-7ab2-4b3f-b2e3-7f928a8469f5", "sighting--2a2a0cd0-2dc3-46ab-a3ef-9f83b6ca8bc4", "sighting--62a35895-bb52-4456-9f43-764ab240fae3", "sighting--8f8decf6-973e-4ec5-b0d3-a7175bf4189a", "sighting--8beabec7-2f71-4696-8863-e100d1785dec", "sighting--25928323-9a3d-4019-b7e2-27e99f6a90df", "sighting--1a11fa5c-214d-4246-9816-a5970a65640b", "sighting--b390f44e-cb9e-47e2-97ac-0f9e171f7f40", "sighting--89a447e4-3c5c-4db2-8651-51fcc44e94da", "sighting--0fa71628-2d91-42f9-aeb2-c628db91ed62", "sighting--6c42fbc3-bbef-41db-9267-5ff80602ba46", "sighting--1d551228-edb0-4f61-a7ef-4974db44d44e", "sighting--3ee55a1f-1766-401b-b504-809640a71b09", "sighting--29d62bf2-3500-4490-9e62-aa5f294903b7", "sighting--b19b45e9-3564-4a1a-b4b0-692d5f5e17ce", "sighting--dbbe5217-c759-4fd7-bb81-cc4c25700316", "sighting--3583fec7-7f6c-47d0-8c0e-d983538e5881", "sighting--9b2f96e0-83b0-4c8e-b2ec-ac2d4df17777", "sighting--156a90c3-c13b-4322-9830-62f68ffc7bbf", "sighting--3eda86b7-254d-4036-a4e8-cbd053ba973b", "sighting--f3ad8c0e-4bf0-4859-81f3-20407e77b6f9", "sighting--6024c8c1-5572-4c49-8378-1ea0243be872", "sighting--cc0411d1-b8a7-4c22-ac41-b9a941c08112", "sighting--31f85028-4192-485a-a838-12b1d169c1dd", "sighting--6d96c3ed-17f5-4cef-ab79-ee148afdcc21", "sighting--829b14fc-99d4-462e-b789-46e7a3a73e73", "sighting--27d6edf7-fdcd-410c-a10d-b5b364f30e29", "sighting--5419f0ca-6293-4a95-b2f2-cb12306985b4", "sighting--a27690f7-54a5-4faa-8a76-b384e46a5024", "sighting--9d953ff5-f583-455d-8a2a-4010fd28241b", "sighting--b1895d37-2c25-4541-a668-747e272d9f09", "sighting--39c840ac-c797-4f76-8bad-ed246dbab371", "sighting--ea16f24f-a74d-4da5-9357-207d46e2c29c", "sighting--9d7c5c39-3a7e-4863-ba91-b13f61ad3aff", "sighting--e4a71a0e-370a-4b73-82d5-3d5e0100097f", "sighting--51b5fa9b-adfc-4452-9224-94327d10ffbb", "sighting--abbc469e-b580-4cd3-a0b3-741f1fa8b764", "sighting--00f1c1d0-a19e-40af-a0da-c24adc27ac6b", "sighting--307b0a45-da3a-4c87-8741-e346caa81f4c", "sighting--c8f2baf4-37a9-4481-be92-ba4c6419a40e", "sighting--d97aeb28-c2a1-4b74-a973-84e15415822f", "sighting--3e3ceda9-a63b-43ca-abc6-6651c9e19deb", "sighting--b4e2b982-99b4-472e-afbc-d36ade605cfb", "sighting--d932f1aa-7bca-4d86-8d00-31d22bf92480", "sighting--6b776eea-dad9-4c63-b806-4dfbd96dabc9", "sighting--7e9d33ae-1a50-440b-bdfb-2cb343043bab", "sighting--489e6a86-b3d5-4f8a-a465-7dc4153fce6d", "sighting--ede9ac93-d3af-4ae8-802a-4688a365d058", "sighting--58164702-6eec-4730-afbf-d9280ef20416", "sighting--7b4f1cf0-12eb-4c15-aa67-f3d54e352508", "sighting--8b4b795c-3c51-472b-8718-5c3edd1a1e7b", "sighting--9e87c7e3-1e90-4e94-a2a4-85c095c9af69", "sighting--204e8db8-71fe-48ad-b130-74617c191434", "sighting--035b56be-7c29-4bb1-8373-c906ccfd1e02", "sighting--4e7eee54-936b-4551-905c-620dea6c48fb", "sighting--4279ebc0-7e63-4cf9-adc6-6b8ebcb84be3", "sighting--ecac0ef8-327f-4c97-93e0-c913ad61fc9d", "sighting--fef683fe-d6bb-45bd-9215-eb0327344357", "sighting--38a0601d-2d71-4d17-ab0b-6727dc5f14c5", "sighting--847c99df-74ca-43e4-940c-48e80cac9be8", "sighting--fcb845c5-0c9c-41af-b2a5-e78670462d00", "sighting--3666ef30-3b4d-427e-bdcf-de6516520b7f", "sighting--a281b75a-da03-44fe-91cb-fedd220a5489", "sighting--ca1de1b1-1fc9-416b-98f0-c8c1dc50daca", "sighting--e47ccee3-484e-4c2d-9a28-b189c6c5dace", "sighting--ad627ee5-2902-4ead-99a6-447768ff1c43", "sighting--c0b61556-a0c8-4fb0-ab22-bce2c18a64af", "sighting--7b24de95-a993-43c3-a70d-32dc40ce1256", "sighting--a59c1c38-e4b8-4d0b-b66b-a3890b1f7cfb", "sighting--888d859f-ba3c-4ec4-9487-d25b6de507e7", "sighting--1c27c5f0-ee3d-41a4-95f7-5d068ea11c2c", "sighting--8490ee64-fab1-4bce-99be-001c4dc1ae63", "sighting--c2833c3a-01ab-4696-a789-c8bcf1608fa9", "sighting--388a696f-fd78-4de4-bc05-aae57ef1f875", "sighting--fe4c16d3-0aea-4a0f-8701-e09a7306bcc9", "sighting--ea7179cd-8036-4de2-ad9e-69735fc9ad7f", "sighting--b1792e19-92e9-4b5a-b894-d33517207047", "sighting--d64ca5f5-569f-452f-9967-54a42c3402bc", "sighting--efed66e7-e5c3-4072-804a-386530464633", "sighting--3146a134-6104-49cd-901d-d08f4d7cef41", "sighting--cb3c5d0f-c36d-4eb5-9410-4a0f189a4849", "sighting--8bef4093-c56e-416b-a14a-49fd5ca65992", "sighting--a4911a53-da6f-4c95-9970-89170b87638e", "sighting--899eba46-8bcb-468d-8407-1c2d258eea21", "sighting--ceae46c2-4690-407e-80bb-ec83b2a68a6e", "sighting--300c1a94-e3ff-4191-9156-783fa694786c", "sighting--21058033-0177-44c8-af79-3d5e9600d78e", "sighting--d80842e2-62f4-4ee4-9f1c-8e0cd2c24cda", "sighting--4b74dce9-9986-43aa-b6bc-579f412fe2eb", "sighting--bd4d7454-f750-4db4-aef7-7bb11e2b4b43", "sighting--7a46fa81-5724-43ca-9650-5305341c93c4", "sighting--135c66e4-8f91-477b-b4a2-ca491c0ba8af", "sighting--cdfcf9bb-6f3b-4e37-b35c-4373ace85e68", "sighting--61cf775d-026c-43cd-8892-8ab07307a46c", "sighting--9b62fada-5035-41fe-a336-6231ff76e237", "sighting--edb2cc80-e416-4e6a-b516-a9e9868f4ade", "sighting--3f4f3513-dc72-466e-8a54-15042c973af9", "sighting--92a4e9d6-791b-45d5-af9a-b95a763529c9", "sighting--06d00ebb-e51a-45b9-84eb-40576bb1a361", "sighting--377e590e-cc07-4a65-a42a-59b7b53c157e", "sighting--76469ac4-ec5a-479c-827d-f2e394b59627", "sighting--2c09b6f3-dd71-4f92-aebb-2f8361ef6e64", "sighting--3f8dba6c-5390-4f4a-9673-9b39d61f9bf3", "sighting--695c815f-0a7f-4011-a8b3-85f8a05b20fb", "sighting--7d5c8f33-dafa-406f-af28-6ee6f8bc9c09", "sighting--c4d7cf48-a877-4bcf-98e8-84b2b4532e8d", "sighting--41c82547-538c-467d-ac54-977e341e5251", "sighting--4e5c48c5-54a6-40c2-91c6-718bc6ce37f7", "sighting--1d624b9a-a9e5-47ca-a8a2-33f31945da26", "sighting--a1f4e463-639e-4741-8123-d9607917316e", "sighting--9687e271-8672-4bb0-8c22-9d287701338f", "sighting--4c98beab-5645-4ded-a1dd-7050ed7b8ce3", "sighting--25d59256-7c9c-4aa1-a058-fad62faf0f17", "sighting--1d2ae15d-737f-4d7d-8c5c-932356ca4bd1", "sighting--662d0918-9714-47de-bbc6-7f76c606d896", "sighting--ecafcf84-d1ca-4ee7-9dd4-b677f2f78eb5", "sighting--e9a8240a-4717-4765-b7a4-eb48ac53096d", "sighting--d41481a0-d628-436b-9b01-ad4bae6fab9b", "sighting--ce9290c4-9034-445a-830b-dbee382a4478", "sighting--be511b37-3f13-42c2-b0da-7a943adb35af", "sighting--952962cd-cae3-484c-b1ed-ea9e0c08b613", "sighting--6dde1e47-53ac-4562-8129-a8f67f0cd49b", "sighting--d2f8510e-f87f-4d30-91f3-3f80257e7c01", "sighting--9b1c741f-efb0-4a5b-83c6-2a14f4463adf", "sighting--a69f163e-8a30-462a-b222-ae8b8b9d422d", "sighting--f2ddcf91-bfa4-4f6f-97fd-e41dbdea19ef", "sighting--a91b9e87-4930-4907-bf20-320c1ffe47ba", "sighting--6d62e237-4e6b-4ef2-9a5d-c2e723c93bda", "sighting--60767a5c-3edf-4cca-81eb-030044da679f", "sighting--4a8f97cb-df85-4ff5-a9f8-b041907d95bc", "sighting--5e69d761-2297-4066-bc3d-053bcb077ea6", "sighting--7c17b8f8-88ec-4463-bd10-95e99dcfce0d", "sighting--9e670b0b-0521-432c-b571-2c25dd81b5fb", "sighting--426b3318-7936-476c-8936-41be73481bdf", "sighting--4eea3165-08c8-4002-b464-0bb4c3b36d47", "sighting--7eb72f27-8915-48c7-a6f7-5d713827c1c2", "sighting--b79f50f1-be29-4a2f-9e29-be2ec5b450bd", "sighting--112552da-caf8-42b6-8f2d-2e112d0cd46b", "sighting--144a9730-1011-424f-a18e-8f55856c00a8", "sighting--ff9bbb97-9ff0-42e5-a4a6-d4d420cdb6c0", "sighting--1c9e6698-ed75-4166-b978-ad171a4cbc30", "sighting--d19c3d91-46b4-4e00-bba7-59bb8477612c", "sighting--7b7d5347-94f7-4f6f-916c-5054506cf43a", "sighting--c77b4bdf-98a6-4669-8237-07b2244f2c90", "sighting--511bcb2e-1ed8-4cef-97be-1d823a8b4a07", "sighting--be53d238-d699-4940-896e-2b9cf0cbca27", "sighting--a1dbebf4-bb36-43b0-9ecd-1460e9dc6620", "sighting--053202ee-66a9-40d6-a6f2-c717bb953616", "sighting--2566e0e6-d3e4-4228-adbf-1b76be09ccfd", "sighting--6df8e713-8804-4e69-8f62-69257124567b", "sighting--ea14e904-7a54-452e-a3db-459f9e4008b4", "sighting--6247c386-ea0b-4061-8bb0-24ce85258ac0", "sighting--46017cd2-bcf5-47b3-9e8d-c1cc59b52e85", "sighting--a115ee67-cfbe-4b38-a692-8a514a1e3ef0", "sighting--9e8f7a85-d6a9-4a8d-b18f-6a1172b405c3", "sighting--a25ef768-39b9-4f15-a251-e639cb7d53f6", "sighting--d9421325-a0b6-4077-a1a7-28f0235a7602", "sighting--3fff17d7-9229-4cfa-96a9-591284f8fda6", "sighting--f1c0fd9f-b1c2-4e00-a8f9-101ce47155fb", "sighting--7b39bcda-7f1c-4ce2-b9b9-65473f463ab7", "sighting--b802f0f0-76b0-4a06-9afe-1670527577d9", "sighting--cf5ae7c9-3545-4c1c-b5c1-05820f1aef2f", "sighting--fcc0e9f9-b82f-4b7c-aa7e-8274d86ed14e", "sighting--152b648b-3d44-43b6-9157-ab43e86aac15", "sighting--0ea47f79-6631-4324-b77c-4adde9024671", "sighting--5460f4a9-c4ff-418c-b9d4-fd2a623f4df9", "sighting--2adf3048-ee58-41cd-bfcc-3ff5d2f596dd", "sighting--0ac72c13-222e-4bf8-a729-87c0258401bc", "sighting--eecd164f-0e27-473e-876a-c43746afab79", "sighting--c854d5a4-0f36-4df0-bf79-881e640580bf", "sighting--3fa01875-9739-4c7c-bfea-f5fcf1691acb", "sighting--923c3903-bbe6-4345-8345-8927403b726e", "sighting--92c699a7-41fa-4ad9-92a9-a32eea8c3a50", "sighting--f6103308-6c07-4c20-86f7-095b83eb4e2e", "sighting--b241e0f1-5a40-4379-af33-a1cd47f6c871", "sighting--dc5842a7-1ff4-4659-91a9-b1b3942e8e1f", "sighting--f4865584-ebe9-487c-9877-89d2b6928aaa", "sighting--e0f23141-00c3-44ed-a4f5-4876e820e787", "sighting--e0b01a66-db5f-4eec-b4d8-0578dc37348a", "sighting--d8b0406c-8061-45b0-9b3e-cb9f18f4f33c", "sighting--d601873d-4cb5-4f05-8d21-8628832e98e7", "sighting--d9712d09-6a3e-4707-9eb1-abee56e341d7", "sighting--a853aba5-036f-45ad-ac86-0fe1659af8ee", "sighting--88747404-56ee-4e28-9806-94cbddaf82bc", "sighting--e5a3e0fb-0d7e-4f3d-9893-514c0a2cb45a", "sighting--89fa0fb0-4828-49a9-8491-f58795a26454", "sighting--e3e3b74e-b1ab-4f0d-bdd2-4036d74035c8", "sighting--cc807ece-2d76-4379-b6f7-3873418b5de3", "sighting--ba93588f-659b-45f0-b55d-3557c161b901", "sighting--2dc0ce56-f6df-4acf-b4b8-730bf1490997", "sighting--8e6d361a-f286-481d-97a1-8282b2d380fd", "sighting--95ba07a7-2ea4-4f50-b08f-c8dbe67eb4c7", "sighting--0e2ac76f-15c8-46b2-bf9c-8e6604f99007", "sighting--4bd8052d-9f08-4c12-a3ba-e36cb199467e", "sighting--ae0d7623-78fa-45c9-8b05-84b81cedaec0", "sighting--6f1269fa-815e-45b5-ac15-414e22ef9a07", "sighting--f33e4480-df71-4748-8a28-1f51168638a3", "sighting--ce0ef836-e453-466d-8d9b-0f19d8fc9892", "sighting--35679f03-d5ed-42f8-bbf8-f033e712352b", "sighting--633ef452-7268-4f11-9e3b-219517539a6c", "sighting--c0743d89-cfc3-46d4-a885-4d694bf76dab", "sighting--1172d0a7-833c-48b4-89ef-a0904d2bf5c5", "sighting--6cfb8c76-3a75-4c41-92fe-6470f5117bcc", "sighting--c91a2665-31ca-4dbc-ad24-adc8640fbad2", "sighting--38b9c404-9658-42c3-8058-a1a249f860d3", "sighting--9c0b4be8-519b-44ed-abe6-11282ca49c45", "sighting--a4efb1b7-2ded-4278-9596-befd8a872ca3", "sighting--db0605d4-d6c8-466e-a2f9-79ee0be8d034", "sighting--58021f98-9de3-4d90-ace0-36053a317647", "sighting--d1838eea-8bc0-44f9-b1b1-54cb0ad56868", "sighting--0381c20b-eb12-4ff6-a1c3-0b2767dffe95", "sighting--b76f7c2f-e6fc-42d4-b153-0c8f7d7d212e", "sighting--68632914-9e61-4f22-b7ab-db9e2fe8b6f2", "sighting--c02baf37-257d-4fe5-885c-c8f8e2194eae", "sighting--a8472393-da33-4fe2-b95a-096cf97b4096", "sighting--b5a4c86d-d1ac-4a1e-9401-9fb59151e0ea", "sighting--65dc271c-d065-4506-b7db-2e033e9845f4", "sighting--52412214-da85-48a0-b897-d6c99b3881ac", "sighting--d262cdeb-f083-48c4-9c75-5203c9c4b4b9", "sighting--8eb60472-918c-42bb-b4b0-67dbd4188425", "sighting--d9bcad32-79a7-4c74-a6a0-ff4164336e06", "sighting--efe674db-e3bd-4fa2-91e5-01b8f822e7fd", "sighting--073cda60-97d1-49cc-8390-0bdc202de5e9", "sighting--1b43afaa-2b86-4df7-9be7-6b91bc756873", "sighting--7e2965c4-531f-4cc5-a004-9fa2d0d99f09", "sighting--97998df6-34e0-41aa-bd99-443a11955662", "sighting--13a759b3-7aea-4ae3-8b99-428d40e4890f", "sighting--c1f599eb-8591-4aab-a751-94e3b905818c", "sighting--e60e8f73-769e-4389-af58-4a9f73c7d1fe", "sighting--8d541367-f0b1-49db-819f-a203912e35d2", "sighting--34128a91-3d51-455e-8e89-0275e1c9b6b5", "sighting--ebf652e8-0832-4b9f-94ee-fd08dd69fb7c", "sighting--77f3b6fc-a951-463e-9b51-32cd9908f155", "sighting--0ae3edd2-6856-41a7-97d0-ea9c6a51b9cb", "sighting--dc506234-6ca8-4bf7-9564-7d6b81faa923", "sighting--0a8346d6-4817-48b9-82a0-c46474fe3286", "sighting--b414183f-4aff-47ca-8d6a-9691865404e6", "sighting--9a43f9b6-7b2c-4dc2-996c-420198bbe0ee", "sighting--d5964ce0-aecd-4072-9519-815a7543ac5f", "sighting--3a2b0f6c-b7cb-4667-94d2-608aa3f6afc5", "sighting--24e6147b-cd96-4acf-a389-eacd9ea440f7", "sighting--0690329c-2366-42e5-98dd-575485ed3468", "sighting--d3f94867-16ab-4534-8045-24961c2c1ec6", "sighting--a7916836-9e2d-4171-99b8-b59f9106e351", "sighting--2e9ea665-ef8f-48b4-b442-a72dfea1d7e9", "sighting--895872b4-2f7f-46be-8121-fab0d077cf05", "sighting--d8afd3f7-afa2-42ed-8bd3-8111204d132d", "sighting--f3a17111-7f50-4687-8716-7186bfed8e11", "sighting--0046d43c-1cbb-417d-b395-7bf7a1f7cf46", "sighting--be4b6f13-685d-42dd-9914-e1336827a5b5", "sighting--480d972f-57e5-4f57-a7af-a8392dfa89d4", "sighting--347c3a5d-85c6-4621-99cb-0e342b21bdd1", "sighting--9f255ae3-ca2a-487c-848f-bdc2f5524930", "sighting--2394ca0f-ab5a-4716-89ac-c3b7b4111dbb", "sighting--a600cad6-4eb5-4c82-9fb2-ff20ac7af66c", "sighting--f132e4f1-80d2-4c7b-9b94-1c999eb608cf", "sighting--77598a3e-f845-4326-8750-34e25d613d37", "sighting--278f9f9a-db45-400a-8328-f5cefa75c351", "sighting--0cc68284-4474-487e-9ac4-c311cc178aab", "sighting--b781e979-6ab1-420c-b0c2-21239459ac23", "sighting--c10ac9ca-cdbd-4739-9804-a15fa90b7ce9", "sighting--607b2cc0-6ccd-461b-8a48-0abc1dc00228", "sighting--08def03e-c52a-438c-b110-9fc30ade95b7", "sighting--91a8892d-1859-4ed9-b142-43f376fa7e0c", "sighting--64adbb36-5075-4738-926d-645edc117b49", "sighting--bc162487-5146-47c9-8e78-1261b83c036c", "sighting--8844641d-9c63-471b-879b-6eb7a53d0cc6", "sighting--1071edca-14b3-4836-ab47-5454d18434b3", "sighting--bc2ab446-ee07-4349-8e88-2a74e76ad652", "sighting--b2c8551f-6f45-40b7-ba24-939a06feb639", "sighting--a2b138b2-3ddc-4c11-bb58-3555bee5b257", "sighting--9ee65808-2293-492a-a274-3176e5d89ce5", "sighting--972b18d0-2707-4904-81eb-d79384dd6e39", "sighting--842f1aa0-0f5e-446e-a6fa-1c9794e65471", "sighting--ba40b845-a047-40ae-be75-38479c5c7583", "sighting--f224ebcb-64f5-445d-8e4c-b1e971e1a43a", "sighting--e27bd353-8de7-4dc2-93ba-d4e155c50bd1", "sighting--d782e019-06a4-416c-a211-787914d5a279", "sighting--8dcbe4ad-9aee-4615-9975-542d566deb43", "sighting--f3422da0-d5bb-48e8-9900-5bbaf9f8df6e", "sighting--f2e2d9fa-0089-4593-8b2a-007fd69cb89e", "sighting--3097545d-be3d-4d23-8b52-b59a07304994", "sighting--e8e9bf7b-fd63-4d6a-a432-a6c64f2105d8", "sighting--08d5e1a5-ea0b-476a-8ea5-176609530c84", "sighting--62487eab-69e9-41d0-b3cd-78b4b3dbc1ec", "sighting--d5004e10-f874-405f-988c-a58136f0c6f8", "sighting--b8df3ac6-c7ef-4e8e-b5c4-258c81c0ef65", "sighting--637b1dc9-71f8-4ab2-86e9-a146c82d8762", "sighting--d14ec7e6-db88-4041-9b32-6f17efc47b3a", "sighting--13d1a654-b617-4f33-ba68-2fa6dce7e44c", "sighting--41026d5c-a519-4bce-ab08-f9376bc37901", "sighting--4ef8c9de-675c-471f-ab22-60b99ce8d89e", "sighting--2b21b37c-fd77-4d31-8363-61a1eab5674c", "sighting--352ca554-b8e9-4649-b67b-87c2c55ce08d", "sighting--e1d1d07a-9d17-4764-ba25-a708bd937e8f", "sighting--41e47eff-da80-40c4-a08a-6e9c21a870a9", "sighting--574ec8fe-7b76-4fcc-8237-d5f3e3998e8b", "sighting--643a78f5-4e50-419d-becc-3bd58f8095e4", "sighting--019f180b-1abf-49d1-a578-d3f5ad10b6f2", "sighting--1e296b8e-62f3-4e90-ae39-05684224e792", "sighting--a3673b87-ae4d-4910-8472-c60d7a583fbb", "sighting--f33a25f4-a419-40e8-8f4d-6f07353f05dc", "sighting--e372d98b-dc5b-4cfd-8696-876f2f0e02bf", "sighting--ff766e9b-b884-466f-8971-1c211c816296", "sighting--ad97190b-7c6a-4828-bb8e-f7514fe8fc62", "sighting--67adb595-e29c-42f4-8d6c-70409f42e630", "sighting--b875a86c-72d6-4d24-b236-716f071a7a02", "sighting--5737fa35-8876-4e37-ae50-e4724908caf9", "sighting--892e1213-7f87-4cc2-9581-031b02c7e563", "sighting--af5b8f1a-3953-423c-93d0-8669267be94a", "sighting--e55315a3-9202-4ccc-a602-35080b912e31", "sighting--db5bc1b4-9542-4331-88ab-5a2ed9202b63", "sighting--6075fccb-beda-4794-9f1e-3b20430810c0", "sighting--3f96b79f-c2c9-4c42-803e-956501fab836", "sighting--121a77e3-1e7e-4f40-8c52-3214639da039", "sighting--e118e211-020d-44cd-8b7d-40ff68751a88", "sighting--904624fd-e2d2-4614-afd6-9740226ded0a", "sighting--50a1b5d1-735d-48ca-886e-4738c33fc24c", "sighting--fefa370c-f068-482f-81d5-4b4324969bc9", "sighting--3e8c3179-033f-4cb9-b5b8-676c5ad98fc7", "sighting--6b068c7d-6756-4c7a-8a3a-560408cfc0f0", "sighting--487b8a68-789a-4a91-9494-fc91ea919182", "sighting--f169bb1c-4e46-435e-9dd3-c27029672a69", "sighting--fd0d01e8-badc-4f5f-8fb0-c46b3d3bd8b2", "sighting--d976f0c0-6234-4b70-bb3c-7e1510ca3faf", "sighting--26fa9f36-fc30-40b5-9863-3e64d89c1064", "sighting--abb0e66e-ea7d-401d-837e-e2500e423406", "sighting--e8ebdc13-f54f-4efc-bd34-25cd685815e0", "sighting--745f9fb1-0543-4866-b231-dbdffed7c9ea", "sighting--a372d0c2-7fad-41ab-afe7-0a196051eb5b", "sighting--df079ca4-ce65-493a-8f2f-c7e1cda1e559", "sighting--00e0d2df-a3a2-4085-ab7c-a593c4a84a78", "sighting--cf57cad0-7698-4707-90ce-94de5752300f", "sighting--6a5a643a-9fbb-415a-9560-4ade993a13e3", "sighting--1f56583e-5a0c-43c5-b2cb-1a99f7221496", "sighting--80e6d6f4-56f3-4a9f-b672-279264258605", "sighting--5d8f8463-29b8-48ba-af63-a8ecb1ca2961", "sighting--902cbc3a-55c5-42bf-9197-c99b087daead", "sighting--35c72499-e5ac-40a3-968d-d98a62fcd3c9", "sighting--f7e39067-f730-4637-a2fb-0b2ecc4d7f60", "sighting--3e50db68-f311-443d-b3a5-201921818072", "sighting--2d1e6674-86d7-438c-a548-44e463ffb2d4", "sighting--6457ff44-126f-4eba-9ea8-281c8a710366", "sighting--fecc3854-f5e8-4b37-8507-edbe4c6bb6d5", "sighting--c167646d-e4fc-491d-b01e-fe30c47f6991", "sighting--9dfef8a3-ab3c-43b8-9048-0a2447f2ff22", "sighting--c783c365-17c9-4222-bde1-1b2838e9f99f", "sighting--cf865a21-e5e7-4b06-93d9-8d46beefd7e8", "sighting--9d2e5543-a4bd-4cd7-9292-692d5893d6ef", "sighting--6827af67-799c-4ee6-a78e-0642a1021515", "sighting--5a555a94-505d-42d2-842d-b0149cf41465", "sighting--566a5fb5-74c1-438a-bb50-4545dd862125", "sighting--57e8d542-a437-41b2-9341-81e16d43e18a", "sighting--58827ae5-4cb5-4fee-b48e-9c6382efb38a", "sighting--5b13a8fe-9037-4f76-ba8d-536b3d6101a1", "sighting--b8a41c71-7742-435f-b212-79c426678195", "sighting--0dc2b564-3612-4a34-963d-ddebde46ab81", "sighting--3d9bf6db-d276-439f-991c-2d2ffe4112cc", "sighting--2dd096db-4955-4a58-a580-69eab7fda542", "sighting--d60c6c85-f0aa-4e94-beb6-d01df52f3015", "sighting--4050c258-8696-458f-b008-fc25adcd329a", "sighting--f6afe02d-57cd-4b8f-86da-cf83879c7349", "sighting--ddfbb412-9879-4d44-aab2-1fe55ebe5d5b", "sighting--9479e527-1a6e-421d-a9a0-ef6cc7a6d011", "sighting--74f2ce43-061c-4f75-9627-fc8fa69bc76b", "sighting--7d93d55c-9829-459c-b1c7-8fe223b9f4db", "sighting--a9459ccf-6b71-45ca-baf4-6dbc380763f0", "sighting--0ba1071d-cd8c-4900-ab6e-ef3cc513721d", "sighting--11f056b6-8595-48c4-970e-80008642653c", "sighting--d42e3cef-751a-4034-9c90-055b00d695bb", "sighting--fed2f064-0565-48ad-b0b7-d16b47cb4261", "sighting--a8cb0a79-d3e8-4fee-bb3b-5f953ea6c6ea", "sighting--2e4ca586-b8ce-4ec5-869e-6d66413ebdf0", "sighting--7d2185ad-6f86-4ae3-bd86-fe29628ebd5c", "sighting--abe63e9e-f1c2-4c53-930c-f69098fcc644", "sighting--162584f5-1427-46ad-bfc9-d7a0410be0f8", "sighting--6f06994b-0ce1-4341-a1bf-14c25993776b", "sighting--a5effb71-5aff-4932-8b37-8fbfd3b25701", "sighting--77b105d9-327e-4284-bb6a-7c477236f588", "sighting--27f1b39a-27fa-4b7a-8d9b-79a5aa552bcc", "sighting--9bab7136-60b8-4bd6-b1f4-5d63c8df27b2", "sighting--912d53fb-2a28-4cc1-a23f-8fb14a175a2b", "sighting--4661274d-8587-402d-b888-9555d910fbbc", "sighting--9babfe18-dddf-40d4-812c-512d1ac2c39b", "sighting--60b226d5-0b19-45b0-8c0e-f399ce8e925e", "sighting--8ac0880c-99c7-4b65-97d9-c34a0b1e0b45", "sighting--dd5ce6fb-534f-4a81-96e8-1dcd3a781da9", "sighting--525d15f2-5387-44b0-b2c3-bd54c9cda060", "sighting--e9b27323-439c-496e-8409-8286fbe90ae8", "sighting--add65e4f-b095-483f-842e-94a9159c5c7f", "sighting--a0490574-d771-417b-b491-9e1a57d90914", "sighting--9bbcda75-a005-4a6a-98f0-216446c2c191", "sighting--16e3f114-2ed0-43df-b279-dafc51a284d4", "sighting--9ec4ecab-f2b7-4106-8d97-7c12c3ed4d4a", "sighting--482901ca-80ef-4dcc-88aa-e18d9d4c8054", "sighting--50ec7f8f-40ed-4dcc-bcf6-7728b36cf106", "sighting--a94e4e0e-55ca-4197-8b69-9e4429c8e7bc", "sighting--e3d21f78-41b5-453d-a5b2-66c87754f49a", "sighting--88cab4c4-f4c5-4e3c-b15f-fc41d1a25503", "sighting--027bebeb-7e81-4f98-bff8-7b2336e5dfaa", "sighting--097e30b1-b585-4982-a96e-1e02bfb34324", "sighting--72b3ab91-a7bd-4be9-b281-a7ce5e7b05a5", "sighting--e1f4d06a-cd5a-4a04-b0bf-2ae123bece29", "sighting--4f953a7c-9302-4c8d-a8f2-9859e2ed88b1", "sighting--66452746-01b1-427a-b451-7ce1d3ebc4ab", "sighting--6be22324-11c1-4e0b-81ed-18c03f35fa93", "sighting--bccb28ba-7733-4890-8411-c5ec97b1c1ef", "sighting--f000dc99-ec72-4fc4-a095-ffe873a353a6", "sighting--d6a1cb01-e974-4bf6-9a9b-033d0431053a", "sighting--b685a5c0-32d3-48a9-a394-67d6db8573e3", "sighting--69420bd5-7f1f-4fa4-9910-bec30f3225b3", "sighting--0bc602c6-36d3-46d2-bada-8955188e13cf", "sighting--b9d8abf7-5b28-4cae-b42b-9fe1f253f7bd", "sighting--39ef295f-aece-4bcf-aeb5-ace32e84fcdd", "sighting--c6d99c35-cf9a-49d8-8d09-799ad4b8a8b6", "sighting--4abd0e52-f0dd-4e57-864d-5ed7679d29c9", "sighting--b5be1c94-23d3-416e-8157-87aced1052ae", "sighting--cfbb20f9-31d3-4dc7-bf3c-e9d354976f3c", "sighting--a702334c-f46c-4da3-ae4c-cb7d6252adf6", "sighting--526193fa-1e02-4080-abb3-fd5f6a7fe35b", "sighting--23952672-6094-4bbb-8a62-a0034ec7b19f", "sighting--a7fdd35f-938b-4fca-8348-7a253ff88c47", "sighting--c3515ffd-4a45-48d4-80c1-54fc130f44ce", "sighting--ecd165d3-a3c2-4178-a7d8-0d53fbdc99e7", "sighting--e6916b76-406d-4a0c-87d5-6f93d4ddfc53", "sighting--13f9a99b-9044-4305-ae7e-50e9d8051598", "sighting--f223bcbe-08f0-4284-afb6-9a91bc9c101a", "sighting--fcb86b7b-f23b-4672-bc73-edde6459fae3", "sighting--6911d9db-cf33-41bf-97e5-3a5fa2051779", "sighting--b3cfa87f-8b64-47cc-97ca-97ca6b9374fc", "sighting--4e25ec3c-488f-4ded-912e-6c3de6c4e298", "sighting--5495bdf5-3f40-4fee-b643-543e15283857", "sighting--47054820-212c-4dac-9ba1-9dda57914893", "sighting--ba451897-9eb0-4446-b72a-82fb5ad8c916", "sighting--72f51647-c4ab-4049-a5d9-3551020a7458", "sighting--baef62c7-b15a-47a5-9878-7d98c90e8f1e", "sighting--9a4b4c3e-d01e-4ff1-96af-a957d76d8717", "sighting--b017a627-4090-4970-b397-fba748a582a7", "sighting--791e9d09-c9ee-41f3-8368-0fbb41faf87f", "sighting--e549e64b-ee48-4bca-b8e6-affa327844f8", "sighting--b4404c0a-85aa-4f7e-a753-aa2363510893", "sighting--a13df06c-f5cb-4158-8a6f-ed169f55c4b1", "sighting--73246cbd-339e-4f0e-8026-b34c1d8fa061", "sighting--bb10a7d6-b193-4e45-b3c8-7a4078800447", "sighting--b8049f59-5321-4446-94d7-a501891be53e", "sighting--dab8ffbd-fc2b-4334-b148-9e628c85c12f", "sighting--4f4ef7ca-40bf-43c2-94fc-4356044daa18", "sighting--f59ca575-608b-441e-a099-f26a83b9880e", "sighting--c259f5ac-eae4-4390-9fa8-2b31bc443ae6", "sighting--8ee76936-61fb-4759-adac-64137374d3cc", "sighting--0fa51fe1-24a8-4388-a665-6d0b558c2f67", "sighting--04015483-d773-4607-b222-8819d8ef38c8", "sighting--60a51a1c-e983-4c34-99ea-5fcfcdf32d7d", "sighting--74b6bf27-7dcd-47d2-b644-958f50ccd154", "sighting--8909780c-0457-4798-9d20-2012ccaae3d5", "sighting--e6fa9147-e402-454b-b260-efa022b73795", "sighting--c8b8f881-b62b-4e27-ad95-d3551fc273d4", "sighting--a16e2e5f-081e-4850-981a-b1386ab0cba0", "sighting--32918460-339b-422e-9d7f-9ae5f0a351bb", "sighting--abde2013-d0fc-48de-adae-a54475e580c2", "sighting--3c1f7487-bcf1-4025-b9a6-32295a0e061d", "sighting--0ca03b79-98e0-4452-b6bb-90771a04baf0", "sighting--872ec4e8-8475-4eae-977b-889ea8985aea", "sighting--f9570938-29f9-4e09-a566-faa6421e06fa", "sighting--e25a71a5-fdfc-416d-ab2e-1f7fba4e9e31", "sighting--2846efcf-6877-4f5a-bba0-897d5dae7450", "sighting--d75fef15-7c5a-4217-ae82-63217126da60", "sighting--66253e2e-4875-4788-8f53-8427794c7c28", "sighting--fa309603-62e3-4ac5-a474-5157ceddd5fb", "sighting--45576307-9d2a-4037-a25a-3839186c39d8", "sighting--50d0bbc6-ae8a-49f5-9ec5-d65fa01e3a27", "sighting--d7b9dfd5-3f1c-4fda-a8ab-6ed8b3a6a8de", "sighting--f28bfc19-a32e-4e0b-8e7c-653d4e7f5c74", "sighting--3d32d5b7-bc7d-4d7c-8faf-97c929a31d01", "sighting--05a5e11a-6399-4c33-baaf-425ca347bef8", "sighting--c2860de4-d62e-4d6b-b2db-1c252730015d", "sighting--e77c1a1b-f7b9-499c-a4cc-11630adca6be", "sighting--40705a8a-7d0b-4602-943e-12b8e69d9e76", "sighting--78a78027-00bd-4782-a12f-c14c367fbb70", "sighting--73954cd9-b7f8-4f9b-ae67-dd2239296bd2", "sighting--43821eae-ca9c-43f2-a018-835ce4ccb5b0", "sighting--082f3dc2-285d-4ae8-8bfb-362c173e75f6", "sighting--e88163c7-e735-49b5-88bd-94eb56922617", "sighting--2942b414-56a3-4aef-bd36-4cb9c2dd00f0", "sighting--af03cb20-d5bb-4861-adb5-e6f556bb5256", "sighting--53ee4280-9753-4e42-8e58-ecc7b91e8adb", "sighting--b902740c-e3ff-4d1b-a545-1b639aab2cb9", "sighting--83339474-cf14-46c9-98bf-55d79498d417", "sighting--d52440bc-3ef1-4601-85de-469ec54c6486", "sighting--99e0e8d6-0a59-47bf-8543-6d04a08da8e9", "sighting--e2b3e238-18de-41e6-8d2b-7b56e4f220fb", "sighting--7bd7da10-0d30-413d-8e23-f6d429ec079c", "sighting--cafaac08-811e-45b1-8f18-5aa904786b02", "sighting--726d672d-ea44-40c8-84ae-7068ea66f0a5", "sighting--49fe0af9-7fc8-457e-be49-08a2ba6af950", "sighting--95cdfaad-fdfe-4514-8c29-7da945e26102", "sighting--30c1472a-27eb-4f80-9af5-c9c41cddf185", "sighting--e50c0a59-d778-4ab6-aec0-b5b570fb87f7", "sighting--6edc2af5-c7f7-4f5c-a8d1-c5f185a1a054", "sighting--b70b4150-9522-4eb9-88e1-77b1b12d7b5c", "sighting--c16f56d2-d471-45e9-8929-9e3091fc53ea", "sighting--1961169a-0bb7-4cfa-8e68-1be6a108743e", "sighting--dec762d1-6f08-4052-baf8-fa8214a8f11b", "sighting--48b1035d-209c-456c-8e2c-a09ff86a044e", "sighting--00eaa82f-ec16-4da7-971f-33677f624d71", "sighting--6483f624-dfae-4069-b876-acc44c5b3213", "sighting--b0d60dbd-210a-4ad2-afc8-6fa5051b2dde", "sighting--98be3018-5ff2-49b8-bfdc-c1033e066811", "sighting--871ee51a-5cfc-49ea-9a1e-72a6bbb6a387", "sighting--b579292e-4040-478f-af74-5e50bf0b97b5", "sighting--dd529b3b-3b2d-422a-bcba-b6b36ca4c641", "sighting--a9e7f0e8-d0fb-4775-8300-90d34911b672", "sighting--908d390d-9cab-4b95-a0f0-706b3d9e51b4", "sighting--ad07bd86-4d67-4670-aeec-d46c85716f0a", "sighting--32effbe6-11c2-4e52-b054-df299138137f", "sighting--41bc418e-8e66-4e70-ad7a-3142e23f6b1f", "sighting--76984079-7939-401c-a61a-96bb238b6694", "sighting--a8c08274-ec37-4d66-8751-445f8203c081", "sighting--5b6dd205-8f23-4ab7-99b9-7807e3fe9658", "sighting--df802f5d-80ff-4ab2-98ca-9eae652caa6e", "sighting--83826985-9cb4-4813-a557-9d5c1775dabf", "sighting--509f7f84-ac5e-409f-97c7-1399f54052e6", "sighting--27aeecd3-e769-4f0e-8ca9-7e2e338429c2", "sighting--59b9f405-f35f-4477-9106-173dd8675605", "sighting--ce74a916-488f-43fb-8966-98c6adb216e2", "sighting--9892544b-7c33-4dea-a5b4-addbdd1c9af8", "sighting--d8d727ae-ea47-407a-97a4-17939d0f70ff", "sighting--a6f39af6-6b7b-4f61-b82f-2c2b15fba401", "sighting--72a1fdc0-1612-4362-97a7-4fd1def2d38c", "sighting--4bec7098-6cac-4e5a-a9c1-4c1e11337330", "sighting--e5285ff4-1192-48ee-aad4-ce7bb34ceb99", "sighting--771a4b59-612d-4f9a-9a38-efd1ebc96626", "sighting--5781362e-48b8-44e8-97e0-c397f39d90a5", "sighting--31b6756a-5a23-4210-9ee4-2ad6a3793dea", "sighting--bd11bfc1-7178-4725-95aa-caf5fe9c932f", "sighting--cffc48fb-d13d-48fa-87f3-d08e774e29f7", "sighting--d1935c11-e35e-442c-9539-5ee92d865ced", "sighting--d408331d-dc10-46e4-b7ce-b13b8de4ce3f", "sighting--e1dd713a-4c7f-45a1-897b-84e891e447fd", "sighting--c1a4e701-2f95-4628-adde-dab0f13ce7e5", "sighting--851e0fa0-e5f1-4437-a9d5-87e2f2efcf48", "sighting--60108f0b-dc02-4d59-b761-74e0917813b2", "sighting--4ce30b57-0652-4185-847e-5df5c6f6346a", "sighting--1332aaba-afc5-48f2-9bf8-ba29939562ce", "sighting--6f094cb4-bb41-4cc4-ae91-fb26f4e340e7", "sighting--1feebfad-ff09-418c-96d8-b6ca174b43a8", "sighting--54c0aff3-7763-4c8a-b571-a60703e1a8dc", "sighting--ad3c115d-0b08-4184-a513-8bbb1d436afd", "sighting--39a9f544-4904-43cf-b0ee-5a01e07322bb", "sighting--3c0ba1af-3b5e-4768-bb85-a8146576e4d2", "sighting--faeb3fec-ec7f-4652-bd1c-55451e531910", "sighting--67f1e6b1-4427-49eb-a528-634a19aef546", "sighting--e2487365-2e6a-44ec-b1ca-89c0cecbe0e7", "sighting--c5414037-b733-488b-b2c9-ca331e5082df", "sighting--99465185-e406-4094-a227-5ddcf7bc42a8", "sighting--7cbc8551-da3e-4916-8802-a2cb3f6338a3", "sighting--79451c7f-b99c-40f9-a174-5ff0afc7c494", "sighting--afe23386-8eb2-4110-8906-554f29e13ca0", "sighting--4758e8fd-3dab-4359-a756-ae93caaeeb84", "sighting--83ea7bb7-387e-4910-bb72-873314e48a75", "sighting--2c84507f-129c-46ca-bc06-8a87a7ded297", "sighting--92628ba3-5c31-4a7f-90fd-daa66de6e156", "sighting--fa2c20c6-d517-434b-9181-bf9fb5f57329", "sighting--89fb962d-f1b5-4ab6-a981-99e12e64d6f0", "sighting--19ee4153-555f-4527-bf2d-d9ef14a50811", "sighting--8de0ba71-2ea0-401e-ac4d-4330d85e14aa", "sighting--f492eafb-5eca-428b-aaa3-e2314b83123b", "sighting--2f0e81f2-e195-4f2a-a7a8-f480c59d6520", "sighting--bf2a2900-4696-4a23-9573-a70df55bac86", "sighting--9a637805-bbbc-413f-9780-cb3d9a15c23d", "sighting--7ec5ea0d-3b31-47ce-a6d7-ffaa42c13f77", "sighting--83cc5ff0-6718-404b-9e5e-de0f0d6cb2eb", "sighting--6bc9bfa0-9600-4c85-ae7a-65fca924cf58", "sighting--8ffdee4f-d7ce-453d-b8cc-6cee97428f34", "sighting--2efc4d28-f1d0-422a-99b6-1194ae563c0f", "sighting--d1fb2509-af2e-4924-9437-e5e2397f0219", "sighting--587a6153-c9fb-4b02-a814-131689294d30", "sighting--d6a14a6a-cefe-43a6-be28-e2d940cdc519", "sighting--edba183f-e5f5-46ea-b324-4d56338afbee", "sighting--84e17ece-2a2c-4f80-b423-9fb6b8bcec15", "sighting--91b1c0e0-7cce-4ba0-8c55-1c5c7974f877", "sighting--c1c99924-2349-4ceb-a809-defca8509a6e", "sighting--03ae9f73-859a-410d-983b-6217ed64eee7", "sighting--9a962d63-f7f8-44e1-9b66-ef6c9a33f83b", "sighting--08e66293-6dc4-4a7b-bc7f-cf1711c81bc7", "sighting--7673e688-ca8d-4e64-b45f-704c975a9b7c", "sighting--42b247a7-4eef-44a6-917a-dd78ac4c98b0", "sighting--312d3349-d39a-45f0-9cbf-17b398eb50bf", "sighting--c8fe8dc2-43db-4636-89f4-f371fe703b78", "sighting--16f2d54a-073e-4684-9e9c-9c96cac53dd0", "sighting--858915cd-2a18-455d-af7a-7579e8ea4bae", "sighting--52b9b77f-fd58-4c1b-850f-6031e2f61575", "sighting--fef94bd2-f1ad-4462-bb97-86094e7e4083", "sighting--76b3aa15-fc2e-446d-b501-d3c2bf83a714", "sighting--ddcfb2cb-82db-47ca-b711-6a1650503a83", "sighting--287b0314-6f9f-4bec-bfd7-ea5c64636927", "sighting--ada1c671-d08a-4821-8c35-14fc1069998f", "sighting--1c976498-5e0b-4049-8732-65779c02c50d", "sighting--586f750a-c5a7-408c-a9c3-8e6eb32fccc3", "sighting--80b1c12b-8f76-4036-bf5e-3bcaad0a6b9d", "sighting--610e7142-cc2e-4717-9e91-03cec909d09e", "sighting--005038c2-9a20-48d2-a576-132ad72de861", "sighting--5f5178b3-0be4-4301-b960-0ebfb6a60d91", "sighting--962dfdc7-9dfc-47a2-8270-a60c15d38c9e", "sighting--f432ec5b-654c-4920-873a-5102f700b7ee", "sighting--29fd3860-9f09-4db5-ab13-3f65b4ac8f52", "sighting--fad5f82b-3627-45b8-84ff-5de2b7f4813c", "sighting--20207682-f7ee-4a62-a53e-d57b4841f815", "sighting--6c3458a0-3e33-4dc4-8656-5e389c8819ef", "sighting--5648f451-7fa1-47a3-9c5e-bf08cb2f4885", "sighting--67657e11-8f10-480f-8dd3-c43da1f1eea3", "sighting--ebe65519-ecf1-4c19-83d7-f693013e4cb4", "sighting--d2f68744-b023-4a15-8d7c-8a7218459657", "sighting--d2268f12-86de-4e1f-bb9f-cc5df78e3149", "sighting--02a81fea-a09f-4ca1-903f-09581be82061", "sighting--22c3e3e9-dfdd-4180-807e-c09ffe6ef539", "sighting--2e13973e-87bf-404b-bb0f-9bd025dd3f0b", "sighting--6dbd7a13-3d87-43cb-b71c-2f0d2e5da168", "sighting--1cd75d71-9888-4626-80dd-e990f96b62ef", "sighting--6ee41bae-653b-4ce5-ba71-89d633c6533f", "sighting--e109f822-83de-4062-b300-c0afc038c0a2", "sighting--54267ec6-4376-4d0a-ba72-c67d57ba4891", "sighting--c1a3c8f8-e5ba-4604-8f6b-fedd1c219c31", "sighting--5702cb76-f4dc-449e-9d36-a8d32ebae5bb", "sighting--67df7a8a-7784-46fe-856a-2b35e4179c45", "sighting--3fef3bfa-524a-46d7-ab74-64b0537b4c42", "sighting--871143cf-aff0-41a9-a7d7-f0be84d2cab0", "sighting--910acfb3-b034-4a41-974f-dd7755ca57e8", "sighting--5c718e1d-13ae-4e9d-8d48-775612cebf59", "sighting--1611e85b-a952-41a4-9136-257a72728045", "sighting--c7887a7b-4fef-4b86-92dd-fca0f78a4444", "sighting--f5fa7571-962f-4633-ae6f-757993bceb60", "sighting--c813161e-daaa-4e45-b3d3-3e5c6d7b9758", "sighting--d40c3290-27c1-4389-8923-186a613b7fba", "sighting--5051e9b1-9022-44c8-a364-a50032d43e90", "sighting--a49ef9ee-03bb-4d70-a24a-c1821472e087", "sighting--c6546a51-9cb6-44d9-9a3d-f107267d7691", "sighting--a0182bd6-d75f-461f-b421-aae3a6ef200f", "sighting--4ecf8493-522b-46d1-a595-1cf3024d0013", "sighting--d3fbc613-ce4c-49ec-8244-0da43b028407", "sighting--368bab47-8e15-47e1-8034-a3a729bf3a80", "sighting--e5a47173-92d0-4420-b74b-b881df1fbded", "sighting--eb44cc45-8b6d-46ce-a04f-354ab13ddbe5", "sighting--ebf69465-7f18-4dc9-a531-41f09853441c", "sighting--cc44d6e5-69b0-45cc-965f-7591ea4b69eb", "sighting--d3599752-8c29-45d7-8a79-e13c2f902b41", "sighting--34dc2add-e1b4-4020-ad53-4061891ef5e8", "sighting--20a84cb9-fccf-4041-9a9a-a45235dadf9b", "sighting--fdcd83b8-6d2f-40c1-b0bd-8c05bd3dee3b", "sighting--467c0265-5d06-4462-950c-800c6944ccc0", "sighting--b38a52d5-c349-421f-b71e-adec0195554c", "sighting--8de66c4d-42c7-4156-a65a-fe33e77c7b39", "sighting--3d71ae6e-40b6-4bc0-8bfd-defed607d3fa", "sighting--d2ae4236-9bde-4322-84b3-00ba1ff33b08", "sighting--485f34de-bf04-4273-b121-b915409cf1f3", "sighting--9a9dd659-bdce-47c4-b439-6fcba9a64e40", "sighting--a2a6e05f-fd8b-402d-bbfa-66e882cd8385", "sighting--dc062ecf-bd91-45f7-983f-5bd313ca5778", "sighting--0c14e921-0e81-4ab4-9241-b4ca86feebdb", "sighting--41e1283e-41dc-4d46-b83c-9c529bec2795", "sighting--bf6f4480-7b3d-4e33-909f-79ae3430677c", "sighting--0f461c1f-eb4a-41bd-9ab2-501e4160d66e", "sighting--eafc4f38-0356-4fbd-9f27-d99be517d565", "sighting--b9a4945f-b3ff-489e-87c2-8c60fe162a4c", "sighting--d09c7c55-2341-4f56-8f36-56595cb5dbc5", "sighting--eff4fc16-10f2-4cd8-8a7d-fc4f7b29f9cd", "sighting--c9e3e60d-863a-4a38-8d70-3b017188ea91", "sighting--88f07cd9-dc0f-4b1a-b69a-6db56f246217", "sighting--171e95cd-4d84-469e-b3c9-e733240d7b20", "sighting--b80ff8e8-7880-48a4-822f-d44465b48c7a", "sighting--ac4dead5-fa10-46c9-91a1-4e30cf1420c0", "sighting--ff34ac57-d68f-440d-8d9b-3d13691eb942", "sighting--d6f74077-f5f8-4351-be08-386a6aeb5caf", "sighting--d2e7deee-22ac-4e09-b1f6-18206934ae63", "sighting--a4cb5ceb-314b-4dce-8d73-2c5eb2a27ac4", "sighting--d55ba797-12e0-413c-b2d7-0eab761a664e", "sighting--bebe9b8d-0663-44d3-8918-d1acaec9af4f", "sighting--d0b52432-8400-498e-8e46-86cdeb9321a2", "sighting--412467a3-da54-46ee-98c7-26aac6496c1e", "sighting--3b626685-e424-471b-a84d-0df5576f4b9d", "sighting--ba392a88-e0f0-4a4f-9316-d25a62d77846", "sighting--22635031-eafd-4138-aa06-0aa7a74ae4bd", "sighting--3230d206-2767-4a39-9556-49fae1c59e12", "sighting--628e6672-ee31-47c9-a1ad-665fe72a58fe", "sighting--65b162ec-09ea-470a-9f05-054768c7ef2a", "sighting--0587c478-b1d5-4bf7-8cc1-43c7fbc049f8", "sighting--ea4664e8-29bc-4338-b3c5-02d597d531c7", "sighting--ebcd0706-27c3-4910-b9b6-7c72fd8651fe", "sighting--50b5b372-b8d2-4852-9d13-823d6e32ec71", "sighting--5b9fda12-eccc-4545-acb9-9b9324e8af03", "sighting--bf874ff9-d209-40dc-aab6-bd7bdc5556ec", "sighting--2160eb32-d5b8-4a7f-a300-8a0205cdda56", "sighting--93749201-2c51-4eb8-a86a-90ab07cc8a47", "sighting--67e1fbf8-5f8d-45f3-a13c-1a62b5575607", "sighting--b984c509-e5da-4c92-8238-88e6ff95cd0c", "sighting--b0f9f28b-c57a-4d00-9370-f776575d6a28", "sighting--d09dd189-bdd4-4007-9222-c23f10ec5968", "sighting--dd656cfd-b3c4-411d-930b-85dd28189df5", "sighting--d6692a1e-478d-46d9-9e56-53f1b51f8e51", "sighting--fd43e4a9-c5f5-47b0-860b-d76d2ab814d7", "sighting--55502294-517d-4814-8a24-d5aa2ce142ff", "sighting--7fa6c60d-f533-4bd2-b417-b5e98c7e3e07", "sighting--5dd718cc-a0dc-455a-aa41-13db1f90c06c", "sighting--277be675-30e4-436e-a4d4-b3d6d68c698b", "sighting--529ce6d9-c5a1-4178-b06b-7ec1fe7c55ee", "sighting--6c99de7f-59dc-4af1-b647-fd08f08caf7c", "sighting--abd74614-8d92-4d82-bd50-fda902510066", "sighting--69195bfc-ac60-4fe3-bc29-609020083bba", "sighting--ab29b33b-9303-4687-b8be-99d90560f0f6", "sighting--300cda2f-20ec-4cf8-8764-04e051b41811", "sighting--ed178268-e7ba-45eb-af52-de6c4d1e0ee6", "sighting--97348e77-c00e-410f-93b3-44c2b0dd1bdd", "sighting--b28a0ab7-bd5e-4ef3-8400-bdb95213c3cd", "sighting--5a148f88-2520-4eac-a751-cb9e9ed04127", "sighting--b7d44288-9d6c-4ea8-b4f1-c3d6d961e7d9", "sighting--3bfd2a3b-24ed-4e2c-8a74-a6272276fc58", "sighting--9c5aae0e-bb66-4fdf-980e-292b9e5bb43a", "sighting--0c203cac-3215-41be-91b5-aeeed4c4a650", "sighting--b418f88b-efe0-4f43-8c5e-c9f208416e49", "sighting--d886ae94-5fb4-42c3-b3aa-459258af5a2d", "sighting--d3a51e94-1d20-4cc4-b9c1-b4e42f8e4d65", "sighting--2dbb2ec7-87b4-44ba-a223-86638a48dc4c", "sighting--39c89458-74e7-4404-9673-a466c8a09785", "sighting--55686eb7-fd1b-44de-8f8b-d1929f0c2f3e", "sighting--c1db2201-1f02-4878-b2ba-306ae4052c4b", "sighting--d9241f8f-e022-4633-bc74-9f79f4f8651e", "sighting--46600dd2-835f-4152-a2b0-8a4bf3e5bbd7", "sighting--ff454785-7e87-48f9-8e7c-fbffb902a140", "sighting--3a8052e7-7486-4ff6-8654-6b758c13f473", "sighting--e6fbc0b1-11c5-44f0-844c-0d9aaeb716ed", "sighting--b4152a58-af2c-4e57-bccf-67ff781d185a", "sighting--aa639273-b789-48ca-ad28-1c8783b9061a", "sighting--48c0f7d9-2fd9-4f05-be18-f1f5a7006859", "sighting--aff75e42-a412-453e-91bf-84876853b063", "sighting--ead9d248-b3ef-4bdf-8100-ea5e1d799d2f", "sighting--ab4577bf-f4a4-4b0e-9a76-749a0805666c", "sighting--108805ff-62b0-4762-b568-1a69df60ce5a", "sighting--a3caecb1-d7f9-4c88-a2fa-f4823a266885", "sighting--3265f55c-f0f1-4d1a-9760-bf33c690c485", "sighting--552da8fd-cafa-4f96-b0a4-530fd29559cb", "sighting--25c4a1d0-ee47-4583-90e8-9fb269558871", "sighting--04a4a91b-8a09-4d88-82ce-57bea9690ba5", "sighting--6ac8f8e5-e358-4452-875b-d0f687b99f4a", "sighting--99a09b6f-075f-4d8c-a5bc-7640f3acea85", "sighting--53d2ab03-0ed1-469d-bf18-376b12ce40fb", "sighting--23571d20-b744-4d43-af13-9586095c7ba4", "sighting--a53d7a6b-89ac-4831-bec4-218af5a77cbf", "sighting--375a7c03-71c6-467d-ba83-480370c8c6bc", "sighting--2ee5ccc1-1d65-475b-8fc9-bc844ee3cb3f", "sighting--c1dc2cff-d0cb-48e6-9107-f93af92defa0", "sighting--ccf43868-5aa9-4c88-84c6-605a5eea3c0b", "sighting--24115913-daf9-47ec-a438-d781734b9eb9", "sighting--cc2a0caa-3a1f-4eaa-94cc-8e816627df63", "sighting--effaf628-2875-4bea-8592-ba3b902c1309", "sighting--51619b3f-7f8a-4551-b917-32f6994dc349", "sighting--b12abeec-e5eb-4fe8-b4ee-dddca2351da0", "sighting--104d3679-643e-45db-a137-cf6c1363b0dc", "sighting--6541699c-1769-4d62-9f8d-1b7f10795cb0", "sighting--1bf24bfe-38ab-4334-9331-f93d0ff90893", "sighting--dff63fc1-d28a-401d-873a-92101514f61d", "sighting--7303b977-434f-4d04-8a80-daf9ee4c9daf", "sighting--c71606b2-e2a2-4195-8cd4-9b5c606f8e92", "sighting--cce26c16-1d11-4b79-a986-717b4982dbbb", "sighting--9f696403-5e17-482f-82cf-5e06d3e670ad", "sighting--6092a0a8-f543-4ef2-ae00-3c6f85d27e9c", "sighting--11dbd647-84b6-41c3-a1b1-683c6d73c275", "sighting--2ca10cb5-6fd0-4936-9bac-226581d7d8f2", "sighting--da521806-f948-4501-ac47-bd618577ec01", "sighting--3365adf4-2fe1-48f7-884d-3aafbb0acc8e", "sighting--ddd17230-f008-4afc-9060-0f6b156e4553", "sighting--5232bc3c-c0c9-4cbb-a446-da61bb331e4e", "sighting--e5f6df42-3ae1-4f62-9876-226a549af4da", "sighting--61d39d10-6704-45a5-b1cb-28ff2cd5c6a6", "sighting--409720fb-f158-4a7e-9122-701bf73ed34b", "sighting--ca8f8b5c-28c5-47cd-b4cc-4cf3e179ca1e", "sighting--b497a536-de6f-4d97-a4d0-d380d44e1157", "sighting--dd604949-621c-4f3b-aa12-af15e4f29a1c", "sighting--4cfbf1e1-5355-45b5-9251-f4a7d1f33e40", "sighting--9e02be0c-3315-40a6-b77e-5dcd2ce6edc1", "sighting--b16e0916-60fd-4db5-a099-ac641484bc8d", "sighting--ce5b370b-60b9-4310-9c76-8a855db2fc17", "sighting--0a6c3155-555e-431e-8a72-6adae3d5c393", "sighting--df4ee929-c89a-4099-a71c-93cbb11ccb93", "sighting--a605a8cc-6516-4949-926d-b0fec0bcba2c", "sighting--ffd89045-4ec2-4dd3-b56d-06c12fc5fd2f", "sighting--2f4da973-6663-4802-89f5-2810e98c587e", "sighting--066e290a-4e6a-490d-b044-771a584265d8", "sighting--2c47d9ff-43b8-4c6e-b515-a564f25983ad", "sighting--73723374-08af-43d0-97eb-f28b23ca61d0", "sighting--33ec1400-8be9-4df4-9fca-9d5789798727", "sighting--dc6d55b0-51ea-4719-8fbb-6911fade8469", "sighting--7b660fc8-dff0-4e08-9d0f-62e16cf077be", "sighting--9d304181-fb7f-4f24-935b-62fad0a9acdc", "sighting--fac50d4b-ffb7-4b5a-9a07-9b3a76466f5d", "sighting--45d08cf1-805f-4ada-9fc9-c87b2efe0ac8", "sighting--e96dd21a-b090-40c3-89f7-e3ef8cfb7eb9", "sighting--3f1351e4-e6a5-4d80-95f0-9e3e54024d2a", "sighting--38429cf3-03af-4651-9891-cf28742bc3a4", "sighting--ef5e7497-414b-49ae-b504-2f2f6beb519a", "sighting--5cb18109-09f2-4fc4-8de1-b364888af640", "sighting--8bf12068-d2ee-4672-90f9-ec1d9c767a81", "sighting--7c7c99d7-982b-4a31-8016-7174e2e47f3f", "sighting--b3ea5d94-3fb8-4ed3-ab3a-e7442f8f9877", "sighting--b7542d62-56f4-47e0-a868-e0c76d4703dd", "sighting--a49b8d00-92ad-461d-9c00-cce7d9467670", "sighting--925551fb-966f-49ba-aae9-e49b19bc7cb8", "sighting--306a91c6-a896-4ddd-a359-919f138a1637", "sighting--72f41c40-cfdb-43da-8f33-f10a178ba210", "sighting--2b186a67-fbb6-4646-a925-1e1bc2dbfcf8", "sighting--675f9f61-8e00-458b-a48b-10e8b5b855f7", "sighting--d6371c33-6a56-44d5-8807-68650499d0a8", "sighting--3e4be8f7-e40f-48a8-90d0-910ba22cfd45", "sighting--2fdf53bf-ab36-43c1-83a5-dfb0cf94c807", "sighting--11192eb7-c815-4f11-97d6-8f3c49d9ede7", "sighting--f2540bec-daaa-47bf-a42c-d5407e91b302", "sighting--55b99d8a-4725-4025-b784-57b790ca6013", "sighting--b0033906-2826-478f-9a8c-152252d85be1", "sighting--f0b616e9-e373-4b51-8519-37c5a069ff77", "sighting--3f1717a1-d527-4129-a43e-727d684ec15f", "sighting--c5165d6b-c8d8-4eee-9812-a6fbb9c9c211", "sighting--cb3ddfe3-ef64-442a-82b7-50f1f3666820", "sighting--83bb5d9f-4caa-4c5e-8d67-1d69f34e2c0b", "sighting--481c7889-fd77-4d7d-bc4d-860c31671ac8", "sighting--ccf60da3-0d54-4b45-bc4a-a418a1ca36bf", "sighting--ebc8275a-4080-44a4-a01b-e94ef91a7008", "sighting--49725fcf-902a-4db5-8eb4-e9ad0375bade", "sighting--6c7a8878-bd9e-4506-975b-3ad0336c89ba", "sighting--ef3fe98a-8113-4204-acdb-947f97d94868", "sighting--ebf5976b-ba47-47a2-abd4-06dc84a52080", "sighting--cc433dd9-e384-45d6-b145-e3b677ae04f3", "sighting--57868517-08c6-4569-bda5-a71c0b652c76", "sighting--1b14dcb2-4f98-49d4-9fe0-41382f0fb131", "sighting--cae8ac8e-7c51-4aaa-ac9c-310f520d37bf", "sighting--dd2d0769-6da0-4848-bce9-cb901d6649c7", "sighting--9a6236fc-0e92-4bde-9c6b-da84e7809cd1", "sighting--1aecea39-dc04-40b1-8850-834bd348aec1", "sighting--82faada4-aec4-4504-aa57-0a7f16cec819", "sighting--6d6e4a66-2e6c-4e02-a159-4883e5eadafc", "sighting--6213139e-5611-40cb-94be-036cdfe05cea", "sighting--c7f5fe7f-fa91-4c3f-bafb-d39ab4d979c6", "sighting--17132dfc-db40-43e1-8dac-28d130b15318", "sighting--0c527809-4736-48db-8c78-d861ca73758f", "sighting--5867438e-acef-4f2a-b76a-a3a4cffa642a", "sighting--cc18360c-0542-4c4d-81dd-3a68c260b6d3", "sighting--f407d505-c561-4849-99a5-f7c4b6eff1f6", "sighting--8ed902fb-7fd6-42dc-a679-279a9bb0756a", "sighting--53036857-3213-4411-bf7e-920c96a786e1", "sighting--063347d2-6718-4031-a0c8-745528c09373", "sighting--889d84c7-a888-4d0a-bc76-7a764ca3e5dc", "sighting--94403ce0-1711-4be4-933f-25384b7b3392", "sighting--d45e6f8b-b527-4e25-920c-574b693178c7", "sighting--e5ca291f-2737-46f0-b63d-e5e266c96b88", "sighting--1ab2b15a-0836-46e8-9cf2-b06260b35088", "sighting--4409b01e-e2a0-421f-9dd7-2462649af26b", "sighting--74e6db82-3467-4ff7-87fe-fafdd801ad05", "sighting--28b8015c-94fc-4d5e-a160-5b1249970ce7", "sighting--afc894cd-c936-4315-9a83-8ee4d3f67bdc", "sighting--0da491a6-3269-4aa8-ae58-e7f36b8a5041", "sighting--44324671-fa7d-4f46-a05e-15c1785a7e66", "sighting--3a80e87e-b486-4e4b-90bc-9075f560ce53", "sighting--77c40f57-5c89-412c-907b-077623fb323b", "sighting--7ee4f094-7b0b-4859-bb93-e4f674b323f1", "sighting--6bab21fe-f4eb-4a02-8933-ff9c28e6fc2c", "sighting--679eb13b-e1a9-4f96-9af3-434610ec0c5c", "sighting--4fd98298-f68e-478e-bfec-bf2c7d4e34fb", "sighting--d13abbc1-ee73-4a92-9cc9-39e216e4cfa5", "sighting--b2f4d8c9-dd47-47d4-b56a-ee85c91f847c", "sighting--195a326a-3747-4fa6-9a7c-51a9763e9dc2", "sighting--5c17d4f7-2fa3-4d7c-9acd-50fd41e5503b", "sighting--8b58eabe-09ad-43ac-b7e4-dd017036a148", "sighting--47ceb710-025e-4e61-b736-66bb012ce71b", "sighting--c10e9d36-eb31-4420-ada9-0ff0b0fd419d", "sighting--d94d233c-1e2a-48f9-a9ce-4071fc7d5fa8", "sighting--4f4505af-1ba5-4ef8-a05d-b0bfc0f086b4", "sighting--320ebceb-94ae-4945-99e3-62ecf64e902b", "sighting--ea677212-fa17-4b9d-9fc7-dd592aea57d0", "sighting--0251c55d-1bd7-4fb2-88d3-8b2279d8b897", "sighting--643697e6-d5a8-4193-b45d-e23d8fabc3c4", "sighting--6892d3d7-1a3e-465b-a787-545a5f8b3206", "sighting--99160d0c-0dbd-4205-8756-f623ea4d258b", "sighting--0de6e134-6199-4553-a1a7-5fc72378f92b", "sighting--2ab1aa09-2bbb-43c3-a4bc-2ae095ffe5ce", "sighting--68bed968-1aff-4e88-88c6-12ff94e34dee", "sighting--b2285feb-abb5-4ff3-9cff-63347bedb44d", "sighting--fd5ad4ff-f2f0-484e-9f92-cfed014c047f", "sighting--62c04e6c-a207-4878-855c-dbce59210b17", "sighting--93d442c4-051a-4bab-87c1-c3961cd51ee3", "sighting--3d87376a-f507-4edf-af2e-13cc0c7650dc", "sighting--72b6f564-8beb-4609-b364-edc484d2efe9", "sighting--4cbbde4c-af0f-43ac-a6d9-f7ea80113981", "sighting--01cd027b-676f-4379-bd53-b26385fc2cf7", "sighting--74dad811-71e2-424f-a1af-720aed81f915", "sighting--a47883ec-ad4f-4786-9627-219b74b05c28", "sighting--76b7ad46-513f-4fa4-90e4-fd8b414da587", "sighting--34a5d417-a5cd-464e-98d9-30b814b2f2f8", "sighting--128cacbf-2a2d-464c-ab15-b2740856c44a", "sighting--32acb95f-b98d-4620-ab83-e97984b82fbf", "sighting--8c9fef2b-1071-4387-9762-ace0a282b06d", "sighting--f917e1e0-5fc7-45ff-af95-fbfecb4586af", "sighting--2b383b28-3072-491a-a56a-2ac8581c213c", "sighting--16a7aa68-4f6c-430c-bf96-7d185728f514", "sighting--6932ca04-db4a-4cd9-99b1-01670e7cfc1f", "sighting--26326404-7414-4b6e-8cc5-883b3d1f859b", "sighting--2efd88cd-9db1-4ac6-b37f-fc85d11f5dd1", "sighting--85a99391-1996-4b48-a99c-b0feb74acfee", "sighting--657391ea-ea9f-4c1b-8320-a8de38c8ac98", "sighting--edb44366-0af1-470d-b3a8-13a06a9239b1", "sighting--d4a9ae22-85ab-4fd6-923f-b10e31911e7b", "sighting--ebe9a92c-4bba-4d6c-a376-376825bbc72b", "sighting--198ca269-0197-4cfc-a9ab-3aacd47aea61", "sighting--fd49e66c-3534-42d4-a8d6-69935a8ac210", "sighting--7f0683d2-8bf7-4e34-b467-a8c2b1e8f2bb", "sighting--41cf49e0-d37f-480a-9962-e0b54dba3dc6", "sighting--909c21d4-9ed6-4760-bd9e-93dc48119724", "sighting--671b7e7d-e751-44c1-9330-086bd4704845", "sighting--b0cd78e3-dddb-43c9-9868-71f9c7b1df44", "sighting--af0d9b0c-b258-4b44-b920-30a3cc4665cd", "sighting--031a8616-4652-4949-9e20-70581802ccbe", "sighting--8eec5886-9b79-4ac5-acf3-6288e6719f9d", "sighting--01426d9d-d4fa-49de-a13b-042b787e0afe", "sighting--20c5adfa-e9fd-4fa8-990f-ba7ca9c1d3fc", "sighting--9f9feef3-c03a-4630-84bd-3d362bc3b11d", "sighting--1aa4b952-271b-4cf4-b140-8854287e0ad9", "sighting--ce4036d4-a834-4a83-865b-db2ab378093d", "sighting--27dbbe32-b16b-4c72-add0-5e8d56234396", "sighting--7907347a-cf57-4399-ba87-a5de7e71bae3", "sighting--4fd2409b-a941-4f70-821c-721737f1e736", "sighting--d650c26d-4e3a-4f5c-96cd-123d475fec8d", "sighting--d0a75381-91b6-43de-83e7-2f06f5b3a9e9", "sighting--3e7dced4-f7ae-49c2-9ba6-c524c453635b", "sighting--ee8d3e38-fab6-4d75-af01-36dbf37f5a5a", "sighting--01677a41-9e47-43ff-a59f-357a1c0e03dc", "sighting--dfada136-e5b4-4d0b-8328-7644fe43449b", "sighting--a647020b-f9ad-4212-a3a1-42f09ebd6662", "sighting--e9343b6c-82b5-4ccd-8e20-1ac5092afe5f", "sighting--25dee634-a51e-425d-83a5-af2f387b0f45", "sighting--f14c6cae-ef82-4752-9068-f25b13c047b7", "sighting--e3e02184-6f62-4510-8d42-6b60a616af59", "sighting--f401779c-315f-49e3-bce6-a3f40d3e0a2d", "sighting--ac083a62-2c22-473d-95e8-2013f037e12a", "sighting--85260f1f-0308-49f4-8ad1-269e19685f43", "sighting--b1b8a5cd-61ea-4f99-b474-f6a2fa23b9ca", "sighting--f15f63f8-4234-4937-89c3-6df6469b1795", "sighting--f363fbb5-4492-408e-8c45-814c65832b9d", "sighting--5723737b-c2e4-4c4c-a612-44dffee854e4", "sighting--778383e7-5672-4eca-bf9c-1206a50fb3ef", "sighting--3b35283d-6407-450f-8331-b91c27b62619", "sighting--a8ff74ce-7ca7-4236-a978-9eb78e244df9", "sighting--6992f9d4-4a37-4965-83e4-e36fbc13ecdf", "sighting--dcacd78c-bbad-4c42-a937-9b7d6aae4d03", "sighting--e9db9d81-5865-4146-b7ff-b8f6bcb56026", "sighting--42eafa98-5aa0-4f2c-9003-2f35bd83a83a", "sighting--62decd2a-1120-49bd-a1d3-8791738ca394", "sighting--55f58a48-4df3-44c7-a783-bd55558f31d0", "sighting--cacee155-0701-4ddb-a7b4-450684af1d65", "sighting--dff169fe-f7d9-4454-932b-ddb38ac64000", "sighting--9605eb4b-0b83-4b65-aedc-59a2007f9dc7", "sighting--223cd9e6-f495-44be-af70-0c9fbb823240", "sighting--fb4b61d3-d45e-4069-ac19-cb6cf9d0c45f", "sighting--d3c7e488-ab29-435b-ba05-2882fe4912c9", "sighting--83e771fd-8c8c-48c6-b5cb-56c855ec511a", "sighting--815b07e4-c9aa-48c8-b656-198aa8a9be7b", "sighting--3577ae6f-276b-4e98-a97d-e08708702bce", "sighting--255dfbc7-4a8e-484c-8a2c-35188e953357", "sighting--67137e30-faf1-414d-a8ab-db9a1716fa1e", "sighting--c81d18ec-affa-4c5d-9d53-6e5a37a243bd", "sighting--64a8629d-e77d-47f9-a1de-b721e31ec7da", "sighting--8c9c4776-eba4-4240-ad42-edd663aa1e3d", "sighting--dc4b958c-155b-437e-bf59-9e74688b4665", "sighting--f1c7f7e4-aa2e-4375-b7a8-c16e3b06dbbe", "sighting--78e2806d-5d9a-4fe5-9da5-7d2868f34a1c", "sighting--93a5e269-3124-4d94-99d4-c184b78feaf3", "sighting--ed35eabe-e1d2-47ed-84c2-fb547cf165f5", "sighting--2962d784-7df4-4a78-b8c0-c1b646165a67", "sighting--44c0f3a3-4211-4c7e-b0e5-f97a452d8b2d", "sighting--4a878369-2c67-48fd-82ef-8fb4a3d4da4f", "sighting--d166ed9f-e801-466d-b9d2-2e8e4ea79d7f", "sighting--4cca6d40-f6c4-447d-87bd-63651779a528", "sighting--98470bec-b364-4574-b0d1-6589554dd61c", "sighting--c86d0098-81c4-4eb0-b4bc-5ab8f09c7153", "sighting--317aa32b-49d6-4b9c-9f1a-cb38ceed9f0c", "sighting--03c0af41-b370-4988-ad59-177b50ba0b7a", "sighting--a7d4850d-933e-4355-8403-2b5823cadea4", "sighting--2651020c-3ec8-46a7-9b56-ea94f92bfadc", "sighting--49cd3a4e-bf5d-4dcf-a649-2b08012663f9", "sighting--3e714588-d605-4e85-aad0-c60f6431e75d", "sighting--a0c231cf-89dd-4394-a87d-f15ded610f66", "sighting--67d14956-02a9-453e-aaaa-b46d8c5d7440", "sighting--7b7bce7d-96d1-4f71-b85e-03ae1398e4c4", "sighting--bdfa7e37-febf-4f4c-b389-7d6250c3fc1c", "sighting--b0eebbb2-64bc-4568-8369-b0dc63925519", "sighting--bc218896-48a2-4616-bc92-6355e14339d1", "sighting--6d7c96f1-5e49-46a2-9cfa-8c8e47a2e01f", "sighting--27352410-f7be-4dff-a1d5-d4e200459eff", "sighting--5ddb338a-2e8a-4712-9db9-1e8478b44f04", "sighting--4057f28c-c696-47f4-8767-db20d43e5419", "sighting--31bad2cc-b3a4-4a0e-9f6d-bf3302641e0e", "sighting--e4ebf4ef-986c-4955-a528-79b1defc2a58", "sighting--1a675b72-f012-4916-a80e-3dc7f69782a7", "sighting--496b63b0-10d8-43ed-ad95-dc8f3be50241", "sighting--f0b9e506-7564-407b-b7b6-4f8afdcb0588", "sighting--9fbdab86-fab7-4e30-8144-180d483a2b33", "sighting--8ef69e4d-fdc4-48cc-b8c9-e55af5dd0eb4", "sighting--82c21642-2905-4644-bfbf-34fb55b3c464", "sighting--f01e677c-a10d-4301-940a-fcdf8fff7ed7", "sighting--6da188ca-022b-41cd-94e4-419635d81ca5", "sighting--286792d0-abf8-47e1-ac90-b105642a5cfb", "sighting--b70d76c3-52e3-447c-b72a-c1ee8fd2a868", "sighting--e633c768-ee1d-41c5-af65-4c8d8e899267", "sighting--44b3f371-4a92-44bd-9cbe-2d938f86158b", "sighting--ea66d5dd-3acc-4de5-a251-8dc957e13712", "sighting--522c08a0-d9b9-46b4-8377-eb2dc734af1d", "sighting--ea72d6f4-dca1-4ea1-b2a7-968d5d92a196", "sighting--2fa3c010-1bd2-489f-ace3-07b93589ff8f", "sighting--40cbda63-826b-49bb-9424-d4f363c5991e", "sighting--a3a41c2f-32c4-44ee-900c-2f99c187e9bd", "sighting--b9fb2d9a-1bac-4a68-ad89-ac59638e631f", "sighting--0a189306-02c6-460b-977b-4453a8e15814", "sighting--2a74db8b-ee24-4ac0-b6e3-2500d610e0ef", "sighting--d09f2ed0-8700-44ba-9be1-cadbf45acd83", "sighting--42089bb6-53a5-4a42-85b5-7fa7ba5adaf8", "sighting--7efc4734-3be8-471a-bc76-555669ad8faf", "sighting--35d84b69-3456-4c02-b54a-76e84adc1bc0", "sighting--fec27cb4-6c43-4e88-b7fc-fb604c42f174", "sighting--46ca0be5-da2c-4c85-990f-0c8db5a9a5a3", "sighting--fffff12b-5535-42d7-af39-a8e46e87b2bc", "sighting--87f56426-7763-49bc-a453-f5dd7520bcb5", "sighting--86e77ddf-70ad-4cc5-98be-32b098a85cca", "sighting--1e298d27-87d1-482b-9b06-6244c185a77f", "sighting--3edc78ac-64a1-4a5d-a914-6faeac03d2fa", "sighting--ee2ad5cb-a5a9-4d7a-bbd6-b281f7a47ba0", "sighting--e7dd2360-9e23-44f2-80be-aaf760a8e91c", "sighting--71bd7ff1-4587-4cdc-82c5-dc2be698fcb1", "sighting--0563b12c-29e6-4864-9eb7-10ae57304227", "sighting--463db75c-f7d0-4d46-804f-7be3621fd550", "sighting--f15afb0f-0cc8-46ec-a1df-0fc4997a7ff7", "sighting--a5371fd0-37f2-47d2-a589-44315138ebb8", "sighting--792ac85b-5e1c-4a15-b292-0c886e516d64", "sighting--d25a5928-3bd6-4d61-9cbd-94f84d5170cf", "sighting--cb28cee0-202e-4d7e-af43-d90743bcb499", "sighting--9f63fa4d-9ca9-471a-b93e-6b34a6e24ed1", "sighting--ff78afdd-e7e8-4831-8bb4-248e6e79ae07", "sighting--f791dc75-edc6-4fef-9699-e8d2478466e7", "sighting--0f1f4830-90ad-488f-99a0-6d8398529b06", "sighting--049e4701-5db5-4873-baa3-7bcaf4ec3b2e", "sighting--9f072c57-46e7-44c2-8a76-9d2934f56874", "sighting--7096524c-7ce1-4080-bea2-baaaa428ec77", "sighting--cbe5ebbc-8248-4a4e-9752-ea0405888a26", "sighting--40a807ac-8b56-424f-8287-716d5fbda3ec", "sighting--1f4f23bd-fa51-4536-b1e4-89f7fadf7f68", "sighting--86a0c5c3-19e0-4c1c-a14e-522309e14c85", "sighting--6d64c1bb-91c6-4141-b6ac-ea8c55ef6a1d", "sighting--9d12b12d-5326-4c77-bfd9-a5b75fed525e", "sighting--b749a08a-4cf7-4406-9e4f-e5b0b39fa9d5", "sighting--50894470-4c90-42cd-8944-c31e6abb2d6f", "sighting--37c78d89-5e66-43e0-9720-00f00160d0fa", "sighting--b33f5641-fc19-41c0-8385-e9738da0d211", "sighting--22e34699-4aa9-448c-9e55-65d5d994183d", "sighting--4e36b76b-92b3-4312-b60f-7b9f534498d2", "sighting--8236f13e-4ab3-4465-9bfe-03178282b433", "sighting--2ab24b79-6f73-4c01-ac8e-da71ff64ed28", "sighting--cbfbeb8d-7443-470f-8cc1-b1891464a2ba", "sighting--17e7c305-af45-4bb1-a7c4-2e3b7871ced1", "sighting--833fa078-4bac-4c18-b10d-14e59db3dc42", "sighting--527787d2-165a-445c-a03e-5de4e5043e3e", "sighting--17f784e4-e816-4328-9d07-750408c21731", "sighting--7e03306c-6efc-4c84-9138-abd6039c1091", "sighting--35c7f02c-45a0-4a6d-b859-c9cf66253bea", "sighting--043593c5-3e06-45cf-9fb1-d727c6d0b82e", "sighting--4d4b997e-a04d-43f0-a8bf-e37e815aa0b8", "sighting--8f731b00-7bad-43e6-be59-b03c0c7fc09f", "sighting--44e2075d-c067-46fc-8034-116bb460e28f", "sighting--6e1f3027-1a41-47b1-bbfc-56f2964218d8", "sighting--e878fd08-6c5d-481f-bacb-63cebac4dbad", "sighting--ad4b35de-7947-46fe-9050-c9a4411e8ac9", "sighting--a9d08e40-e37b-424e-b39e-5102faa40b95", "sighting--aa60c077-ba3e-42cd-9a8d-c9d57b426cc6", "sighting--2cf5a8ee-d657-40cb-a9e7-f0744a4c91fc", "sighting--fa2c9d68-3be8-4e6b-b935-f40662c68e5a", "sighting--97e86285-0623-4fd4-a55e-ec41f38f4cff", "sighting--561549d6-0ef4-4fd0-bc66-6cdca089b9e5", "sighting--5b2dcd6f-2a28-4210-a755-b44b1c3a56f1", "sighting--bc4ac909-8021-4b54-8715-f4298eaa7fa6", "sighting--c32e1636-9afd-430d-aa3a-efab116c8c44", "sighting--048f564f-1f21-44a9-8743-ff7f87eaf004", "sighting--5166d50a-59bd-446f-8f51-ee2f408b3f80", "sighting--c82c82c6-076f-4a3c-af68-9318df7a5ee9", "sighting--8a0cc37e-5b6b-4c9c-abb2-06248cbd0544", "sighting--3b549960-a193-49d1-a6bf-b6ee32536d83", "sighting--6d5de539-3920-4a36-8cdb-11aa56ecd1ad", "sighting--52fd2dd5-e52a-452d-a96a-ad35c7e425a2", "sighting--6ec30a55-d5db-43dd-84b7-f1ce2a93e6df", "sighting--1ac300a6-ddcf-4bda-b55d-50af5b65abf8", "sighting--a95767a5-b10a-4e79-b2ce-a4680d88b497", "sighting--f5440b57-93f2-40c6-b66d-e169bab12e7c", "sighting--11713d6e-cc45-42b9-83b7-a23c033aba7c", "sighting--158fd1c1-df0d-43f0-b5c5-6f3da111a950", "sighting--b76199a3-026e-4081-acef-440df0ec1064", "sighting--c955f741-4254-45f4-b652-2ca1bbc54f00", "sighting--c808cf35-129f-429b-b134-b9bdab7a2960", "sighting--a999863e-aa7a-485d-a85c-785febdd9d53", "sighting--882f740c-5c69-4735-89ec-d001f82a034a", "sighting--a92fa522-a987-48b9-9f26-9844440bac98", "sighting--33642385-6400-4b45-b963-4af707962c16", "sighting--33d98738-a207-4b48-85d4-aecf39d37cf3", "sighting--4769743f-acc2-45c5-bb16-677ffa6284bd", "sighting--93246a6a-ec26-4245-bd5c-f145b08d74c8", "sighting--dfbe3d5a-b65d-4122-945a-5afd665f92c2", "sighting--d487a182-cfce-4029-b6c0-1968a8ffe77a", "sighting--ae82074b-8f68-4429-9ea6-9fa00aae2e8c", "sighting--ee3c9ebe-4360-40c9-aa23-8e47e926ac56", "sighting--83abf62c-a4d4-4421-8b66-96ea7fac69b0", "sighting--0dbc3bd4-03f7-479d-b175-c6a0af8b7f2b", "sighting--6abe55c7-9bf6-4f0a-8ea0-a3f9658c6359", "sighting--503224ca-3a47-4816-a8cb-3d55ba28e280", "sighting--8ed400aa-c5e1-4b43-9bce-7fef0b0968e2", "sighting--dbda1ad1-230c-4be2-bd4f-865140501a30", "sighting--dc636172-c0ee-42f6-bc12-170941e7f76c", "sighting--fe117889-6cd4-4856-99e7-1926f5aa6e93", "sighting--18b02c3c-c0a3-4e3b-bd2c-b86e9074fa62", "sighting--9ad41c52-053e-48a7-ab0e-f1a815719e67", "sighting--74a06c55-54b1-4c38-bfed-e403d368cd31", "sighting--7ac63b8c-a1aa-4168-afb6-18b8104633fb", "sighting--5b8de50d-e4b5-4fa4-84e0-6ec5f5b33f08", "sighting--df586150-678a-4986-83b5-10d3a5efe41e", "sighting--cfd4df38-10c7-4ca1-87d2-36d9f1d98bb4", "sighting--b98f1fb2-2eca-4482-833f-36c3f856fdab", "sighting--e289577a-dd48-4a47-87e3-e98bab08e61f", "sighting--daa24516-4860-435b-95c3-79de16e48ede", "sighting--7394018f-f53f-4f34-b2e6-c8aa335a9725", "sighting--49b5361b-8074-4c4c-ba39-05b10b62c9b7", "sighting--5fb562ca-e602-4b9d-90f9-1c5ba22e3f13", "sighting--87d2f545-0004-479b-a7dc-382caebfab89", "sighting--ea3997a4-2374-4bdd-80ce-02ad0eae2c05", "sighting--f028501e-0616-4b2a-8d61-b08716584eee", "sighting--3a715d5a-f005-4df5-8788-3c8b4f0bb6ff", "sighting--821beb33-f08d-4c1d-9ca7-dd25eb91a0ec", "sighting--8f95c9c1-ad29-438f-b9df-12108501adcd", "sighting--606f5f48-4eac-43b6-9f76-a25c9941ac6b", "sighting--a2733156-20df-430c-911b-105764886e93", "sighting--87a79ccc-ad84-414d-8d73-a814033f18bf", "sighting--649bb097-f708-4352-b567-0d31d5cd8f67", "sighting--531a417d-7cbe-4041-9cb8-ca2dd02f152b", "sighting--d3386a7b-733a-49dd-8878-61e1a4add53c", "sighting--295078c2-6bb7-4af4-b490-5919b3519152", "sighting--c3f6844e-0cbc-46f5-b1bf-98710702e385", "sighting--9223a15d-0005-44df-a8d3-15461dbb5e49", "sighting--d7bb5be8-ca61-45a1-8182-4e07adb30b54", "sighting--75c924d3-f9fc-480a-94b0-e7eeeb792a4a", "sighting--69be70bd-90f1-4126-b60b-0e11da4e6a96", "sighting--35694a18-2c81-4859-b715-265bd786c7d7", "sighting--6b456b97-cbb1-456d-b4f8-c21169e5766e", "sighting--c4ec21f5-31f0-4bab-b5ff-8ce6f89c1a9a", "sighting--c1b4a78f-61e9-4ca9-b5fc-1b9798aaa775", "sighting--24cea33a-b6f9-4b20-ad76-129139c32342", "sighting--e62d6fe7-0200-49d5-8d61-131d3998e388", "sighting--8c1d5060-6992-48ba-b57a-010c12884905", "sighting--4844ddd3-c1cd-46e5-8cfa-e5f72c906d93", "sighting--6d31724a-48ed-4065-b63b-6e09b2f5a807", "sighting--b5fbde9f-a040-430c-9b46-4cb9d423e356", "sighting--2df52385-4227-4923-a1ea-91c490acf59f", "sighting--8e401e7c-2fdd-46fc-8af8-08a4f287cbe9", "sighting--6a5110c0-b1ce-458d-87ac-00ca06ba08f8", "sighting--e1ec2979-d132-48b6-8437-c53fff0ff072", "sighting--e2ba82f7-f19f-45d6-ba22-fb41b72c473f", "sighting--0b22b61b-9cad-43b4-9fa6-632549a2b442", "sighting--80333f8b-e926-4ece-920d-c1d18bd7a437", "sighting--78c0a960-2045-45d1-9917-cd4acc0eb528", "sighting--e203b4bb-27ad-4e34-a18a-aa1a67f0c43e", "sighting--af863741-ad1b-4dba-b49a-99772e2afafd", "sighting--738407dc-a989-46cd-9f3c-5a087d17eeb6", "sighting--62024cdf-3050-40a8-be8d-f53a705b1ec2", "sighting--1c61e17e-a458-41cc-b9a6-d00c24685550", "sighting--01e393c4-5396-4aa4-b8d0-3efdf4c11008", "sighting--74e8b62e-3ddb-4e89-967e-bc46ce2630d5", "sighting--3d7ad9ab-0e23-412c-a9c5-e06510675914", "sighting--b5d9f411-6318-4566-ae56-86c533240fa6", "sighting--3a4ebceb-3c2e-4efc-873b-8491652409f4", "sighting--ff0394c3-0ded-4830-baac-eb7474d2855d", "sighting--438e5354-1de7-4710-b506-e24e118e0d0b", "sighting--686a1ef7-c0fe-4c10-8208-0fd765d713a4", "sighting--11142081-421f-489d-8a03-720dc7e2dd26", "sighting--985505c1-191f-4985-8e56-63d584e95a7c", "sighting--78b66ec9-cf22-49ae-9359-af740c65ffcd", "sighting--dd0cd6e7-8ad2-4eb2-b601-6ee6eb9567fb", "sighting--db40f7af-90cf-4ae4-9478-f919f304465f", "sighting--7f83cea5-6439-4a98-a4f7-2867a32af3ef", "sighting--71b3181a-062d-41d0-ab46-8dec21331046", "sighting--77f0a713-39bc-407b-81a0-8fd3bff8f40d", "sighting--52e391aa-0be5-457e-aa57-7dbb26c350e3", "sighting--9c813a99-98a6-4797-b92f-ec7e5b926c6a", "sighting--7d09c20e-b18f-459a-93fa-f379b3df45fb", "sighting--df06865c-8ab0-4e0d-ad58-93c1d81bf3a0", "sighting--ff612621-3747-45fb-b2b1-4c9a6c1e5f1a", "sighting--dbb329d2-bda9-4ce8-bd30-8cd737c6c922", "sighting--31296ad4-9e4a-4440-bfd1-b5ca5badc5d2", "sighting--329b13b7-dd01-49f3-b39c-21e925fc9d9b", "sighting--8b18e2f2-f68a-4655-b697-c773665dd84f", "sighting--7abf01af-6704-4850-ac89-f65b275e995c", "sighting--d532ef0a-0558-40a2-a22b-d126d516c93b", "sighting--899569c2-de61-46c3-a155-38a306fee15d", "sighting--b909f482-188c-4bce-85d5-2dc4fe6b5e03", "sighting--668693e1-83d3-4bc5-b77f-0720aab2e619", "sighting--4ce094f7-7381-4932-a9ef-712a2faaedcc", "sighting--c8531a02-38d6-44f2-9d5f-c3539685aaa1", "sighting--c29c9ddf-a12e-47bb-864d-8fba06aa1f94", "sighting--5efd9f5e-998c-4639-8840-cd26b6329c62", "sighting--c7629c87-6cac-4a68-a845-ca7e4b07e430", "sighting--11b2ff84-dfc9-457e-b58a-f9096f6911cf", "sighting--bc6afc07-6cfc-4f3a-8448-f29f0df7fc1e", "sighting--b3e4fbca-3d2a-4abb-8097-46f694f7d4a1", "sighting--a1ee91af-3ec0-489b-a58e-0f396e9fddb6", "sighting--bfa6b9b5-125a-4927-be13-eaceccdee40d", "sighting--33431adc-69c7-4da2-8bc3-fbc6c2dac71d", "sighting--291b931a-3f39-4e43-843d-5319e48132ef", "sighting--a7a4e907-2ff2-4938-9054-a427fcb67cca", "sighting--27007f8b-cd2d-4096-96a5-e7593a154395", "sighting--c37a822a-fcfd-4ae3-bf01-8a4396cbfe22", "sighting--d84832be-b128-40d2-ac78-517f7cfc7823", "sighting--b6781e52-bfdc-42da-92d7-bc5b9a867b61", "sighting--aab752d5-24d3-4509-949d-20ecb9032490", "sighting--d46658f4-d64d-407b-b9f9-d71560b70f96", "sighting--2bad6bbf-5a1b-4746-963f-7c035a54894f", "sighting--f7a6f02c-a810-4a0a-9099-71bcf3eaf869", "sighting--b366796f-12e3-4599-b196-0a924e815904", "sighting--7e69b05a-dde7-4112-967a-62a956f966cd", "sighting--49a966b2-6e64-47f0-a708-34d37a72cc84", "sighting--408ca26a-456c-4e36-b0a8-e2d8c5721366", "sighting--ef73f834-dbce-4448-9c2e-b936bfa3a288", "sighting--2b489a0e-bfc5-436d-b50d-b43363cb5b33", "sighting--849b956a-0d70-42c3-9e95-ed0ed5a14183", "sighting--dbfffa7f-0284-4660-a403-ff4872e5efbe", "sighting--2c455a9f-1b8f-4319-b573-23dde6af75c1", "sighting--2c3bb068-549c-4e38-8d56-9ce60a96c37c", "sighting--31dceeb3-cf49-4ad3-b027-9737b552c40b", "sighting--98f417d1-9cf3-42ee-9e2f-273b22c2fd07", "sighting--3de1b4c2-3bba-4935-bc27-9d01c61c7ad1", "sighting--a6caa7be-45e2-4a9f-b140-7a27dbff5880", "sighting--fa4b50b7-7855-4324-b660-930f1cc5ee55", "sighting--15d3d169-31d3-4551-938e-7fa8f3b04c28", "sighting--c9d63604-f517-427e-9f52-7ca608b370d2", "sighting--b0097c36-7c0a-44a7-a5ab-6f5e98c18065", "sighting--05e9daef-1c0d-4387-941f-81e40ffd092f", "sighting--87966c26-1459-4fde-8b6d-6aab8e6f6323", "sighting--0827194d-affc-4ed9-96cc-12747c3206ea", "sighting--17915879-9d89-4c95-9113-644a96a9aef8", "sighting--ef4204eb-1873-45c4-b136-2ef9d2ef3605", "sighting--6aceeab5-7b05-4daf-b7e5-3db2b62788d2", "sighting--56131573-676a-4a54-b92e-5a3f9eb083c9", "sighting--54f7fd0e-5a0d-49c0-b659-af284eafd30a", "sighting--1b800530-2286-4918-a634-ee6f70309c83", "sighting--4196f36e-06fe-4b9e-a8f6-aa2b506a1c5b", "sighting--e0e9da17-b8fa-4e7a-9a1a-51ae57b55708", "sighting--1295ae10-554a-4ccd-a9c0-65d4bc0671d0", "sighting--d6980d54-c8f7-44c5-865a-5f46cc906cf8", "sighting--3c7b914c-0936-4097-80e1-60e9c582d6b1", "sighting--39b6b902-9b50-42ff-9b49-21399f2aa2fe", "sighting--e6e9c770-24b1-4cf5-89c6-b3c9c7637f3d", "sighting--6c845e42-6cc4-4ae5-bea1-85a1cf0d3308", "sighting--3f87ca0b-b5f8-4d7e-924e-2ddec550e495", "sighting--60ba9570-4014-465c-b44d-fb1e59db103e", "sighting--f506d218-6ba5-4d41-9db6-1a5c08e21010", "sighting--feedac49-9986-48e9-83cb-16c1de5508ac", "sighting--8ff76763-022e-4925-a66b-7970079f5c61", "sighting--f7e80433-ba98-4267-abef-9355c76a2c7e", "sighting--ca3678a1-b954-4985-bd58-5f1f873dbb7f", "sighting--53490cd4-eac3-4d6e-9587-23f02c0aa685", "sighting--ec1271f9-db5c-429f-afc1-9b5d68717918", "sighting--832dc374-197d-4e49-b2e5-0ab881d8102e", "sighting--5ada1897-e19e-4f10-bc50-f814cbaf2bde", "sighting--3b245089-0bf7-40e6-89c0-9bcf927ab582", "sighting--840fee7a-09b8-4228-b10e-db854ad6d989", "sighting--d8e91595-001c-4782-951a-707265cb5d1b", "sighting--af3449f2-868d-4630-905d-bc653757dabc", "sighting--4454cc2d-e7c8-4f6f-aeed-95543c1e4ad8", "sighting--44272990-65e6-46b3-8f22-9dae005bc805", "sighting--51e06f4f-fcd4-48eb-986a-511bf41ce449", "sighting--f514ebb0-7e17-4a6b-aa7d-fc90f44d75cc", "sighting--c4cf6470-64ba-4dbc-9544-94a8fdce3e52", "sighting--1bf641c9-e22d-4787-a59a-6173858af05e", "sighting--a08f111e-f5b8-4c5e-925f-934e5c98ae09", "sighting--888e4db0-8a88-43c4-870c-8e8d3f3eaa69", "sighting--941e61d2-117e-41dc-87f7-4122caf85e14", "sighting--662b0ef9-0df2-4273-bf6d-821732e9c5c6", "sighting--5da48411-c55f-4c8b-90d7-8d8fb4d2cb24", "sighting--1b7bf820-22f9-442d-9a70-b3174890e031", "sighting--f0f24a41-e181-4016-b925-634efd588f6b", "sighting--56c30d95-c943-4d82-a32b-db9726c19651", "sighting--3b07e936-35c7-4277-b08d-c1107b0ba776", "sighting--a0e09ac5-660c-435d-80ec-97cb41ea617d", "sighting--0a313e7e-802e-4ffe-9403-e661bdda939d", "sighting--9613f565-02d4-4b47-b3ef-7d5f704ced77", "sighting--718c4fef-9caf-400e-a9ba-8e123b35168b", "sighting--d781c5c8-d758-4f47-a394-f09c7dd992ed", "sighting--3b2c8cf0-8326-45bf-901d-b7b9df410a50", "sighting--90492e0d-23a3-415e-8884-c2675b2922ad", "sighting--6bef9505-e9f5-4877-b820-16d3ef26b54c", "sighting--927027eb-4257-423b-9b47-ec2d94b17bc2", "sighting--4ab4caf6-2169-48db-9ab3-23863215e1c6", "sighting--7daeecbd-7278-4cb6-8708-7a32b1793f06", "sighting--d9974cc3-aa02-47e8-a053-4e4de2872899", "sighting--34f8e1ee-3d62-4f5e-8f28-9ab6459c48b3", "sighting--1e3685df-5b0c-4a97-bb04-f0433ee4e2e8", "sighting--583d6017-c2c2-45df-93ae-865765b12ce6", "sighting--0a519e2f-e6a8-445f-a84e-fce6c6c8e2ec", "sighting--0f2f29e8-4421-4dd9-a6e1-9960c62c9620", "sighting--b23b5e1d-7160-46a7-b249-4aaedd5ec1ac", "sighting--e7060837-475f-4b3d-8c77-9c2935d41f73", "sighting--2282d7cf-5ab8-4837-95de-f8586571fd34", "sighting--970209ec-0baa-46f1-b6f3-5c54de0ef30f", "sighting--b533853f-76f1-4cff-91ee-7a0dd635d8eb", "sighting--32f54103-c0c5-4d74-b8ed-f66feb5ec731", "sighting--e652c537-1899-4fa8-81d8-e8b85db817a0", "sighting--61e19570-b62c-4a13-982d-dc9815476ec6", "sighting--d1cd6684-ebab-4f8b-8590-fbd25fe8b35a", "sighting--6a365c6d-6421-4f37-b3b2-6a1884ece362", "sighting--591cc79e-d94c-4f89-b494-4533afa5e925", "sighting--89d58864-02ad-4993-a288-dd26ba0f5f32", "sighting--316e3c28-d808-46a1-893f-957a906dd479", "sighting--ea66c5ff-d9c8-4be8-84e7-b62693a29c77", "sighting--903c62d0-2682-4b7d-9f41-f8099aa50a23", "sighting--c31faa84-246a-43bf-94af-de0a736b9179", "sighting--9761ae73-e5bd-4f42-997c-c4edeae9c7ac", "sighting--420fee94-7a53-46f1-86d4-075edce6b499", "sighting--dd829059-3eeb-402e-ad42-b2a74b025a3d", "sighting--68c5df30-4caf-4250-bf33-17d242dbc165", "sighting--7409818a-530f-4789-97fd-69ba85b66a65", "sighting--cff5db8b-6150-43b0-a680-c23482fac503", "sighting--2b849e25-7253-4c3a-99e4-05106345c691", "sighting--0846abdc-6a21-4d12-aeab-a5082962fedc", "sighting--f0335d33-308c-44d7-8491-9b506596f0ca", "sighting--ca2f4f07-4f54-4c5a-a6e5-79c407c7f6e6", "sighting--48a9d465-3d29-46bc-bc52-a53404bce506", "sighting--0aab4fb3-fa2a-46d5-8c56-c71a3a713db7", "sighting--4aa5070e-7c16-45c4-a177-7f4a13d8ebd3", "sighting--f84e2ee4-fa0c-4e98-8e8e-6a1ebb59d14b", "sighting--06d263f3-b798-4ae2-9019-3b9f31b11dfd", "sighting--72cba60c-ddb1-45d3-9972-9cab841d9f6d", "sighting--fd66120f-96c2-471d-9858-cd9f18877d37", "sighting--0d86a7a1-c87a-43e0-a87b-67f3ed84afa7", "sighting--031c1396-6735-4338-a339-010e7c380351", "sighting--6c86f7ca-5539-4da0-879c-424929d7095e", "sighting--c7a3c38c-949d-4836-b2c4-bba41097812a", "sighting--893fea0d-df7f-49fe-9f1a-e87d1d0af6d0", "sighting--a51589f9-131f-4476-b3f0-cb928be66fec", "sighting--71810ea3-5305-42e6-b054-da15cbf09f0d", "sighting--d7811c43-b9e6-4597-98b6-0f596f840548", "sighting--1c3e0559-fac0-4f6b-b320-2fbf411aa13b", "sighting--426823c9-ce91-49df-ae85-4820c21d69d4", "sighting--93a6708f-ab42-4f4f-93c8-301b6b00c2c2", "sighting--94fd8536-e5ca-4f5c-a3c5-b45667e485e4", "sighting--0392a6e4-771f-4bc2-a40e-14a54da3d5ed", "sighting--a0114a19-33f1-4067-b4e5-ace2ab379429", "sighting--f083c788-6f44-4587-ab55-732b1c99f07a", "sighting--1931b67e-1534-48a3-969f-6ef4f59fe467", "sighting--df721a60-f10e-49c1-8e5d-d072cce36159", "sighting--a6ec102f-b9c5-41fb-a28d-76c43df2cf29", "sighting--36514ae1-60ec-4f42-90eb-a7791d843f1c", "sighting--8117cc8b-5755-4982-bfab-f36af23dc162", "sighting--deda800c-8a66-4d3a-baa0-5544b5d0c75a", "sighting--f987ebec-67e5-4c54-aef7-6455815e5e9b", "sighting--1d0ec60a-ee11-429e-9ebc-0ef974ee8ddd", "sighting--bb9a3187-e5e7-476f-aee6-9ab4ac6d8a74", "sighting--5e652408-b0d1-4c7d-bb34-15588c81f21b", "sighting--d80e1e55-92df-4e93-9b9e-1554758672c9", "sighting--c49934da-f38a-4aaf-86da-3a66518d6c27", "sighting--2dfb28c8-837b-42ef-85e3-b125d5a175f6", "sighting--f25b107c-c295-404c-aa54-a134474b4712", "sighting--eaeafbad-e687-4976-a578-c9a730326f8f", "sighting--8525f682-58ec-4e0b-a801-07aae5b90013", "sighting--df398d34-e5f3-4e56-ba2f-212891fac3eb", "sighting--39fc09a9-3ce0-4a5b-bb66-3db6732d917b", "sighting--951b35ff-0c01-4b63-806a-1faea82486a1", "sighting--b4ecba5a-a486-4b23-ba69-babca2f19daf", "sighting--a3266498-3459-40fd-918b-ef4e29a1d3f8", "sighting--e2b1f3d5-7c83-4d3c-ad25-ee242b0a8980", "sighting--83894980-fc60-49e4-9164-7725bef82e78", "sighting--ca874df9-1eb8-4528-9bd5-64da201ab618", "sighting--90e866c2-a770-4675-b0a6-eb6afcde8554", "sighting--1caef7de-0b97-4843-9062-e052e7276a9a", "sighting--86f2ebf8-10da-49e8-9cc2-d0bf8caf9b8f", "sighting--59fff7c9-099e-45c0-b4e0-cba263a3622a", "sighting--f319462b-3d3c-45d9-8b44-2ad886922688", "sighting--226bcada-2424-40b9-bfe1-02dbcc5d3267", "sighting--f753bb4e-0f47-41fd-b971-a3d882a48d81", "sighting--ae07fb13-5935-4884-98b9-2d936e6d585c", "sighting--fb36120e-7d7a-4f53-af71-340e7cc4637b", "sighting--059651b5-5afe-4499-b6b5-ffcd6c7846f5", "sighting--0e5d3ea7-24b2-4d2d-a1db-e9ef9e1a502d", "sighting--2ad168af-5b1f-49c5-9451-642401384288", "sighting--91348a34-cbdb-4bfd-8371-167e4cedd951", "sighting--8444485d-f97a-4355-8d95-378e84df945c", "sighting--35a3a86a-c0ca-4395-a45d-082636f70967", "sighting--6edbc45e-b0a9-4c09-8a9d-2f3fd676ca83", "sighting--b912c5f9-3d41-47c1-a1c3-922bb7d8b2dd", "sighting--35f5f5ee-0d33-4875-8bd6-76de09271a07", "sighting--3f9158b8-b510-44fd-824f-cf273dfb6ad6", "sighting--55baad99-23ba-4167-bea3-35955c015adc", "sighting--7a9e5923-3c22-43c3-816d-25f735926683", "sighting--ad1e2867-5819-44de-b397-70cf374bea82", "sighting--8043cb58-c33a-481b-9a09-b3a1a3eb4b85", "sighting--f7998121-164c-4ee9-87ed-569bbc6e9be1", "sighting--df5d4952-106c-4a9b-93ec-85e0f959fc5a", "sighting--8d414f1f-c83b-488c-bffd-6daa33dfa753", "sighting--fd5f90cd-d988-47c3-b838-c879b46112ad", "sighting--f7fee4d2-398c-4a65-b257-e07487b90bc6", "sighting--7a41a512-0fac-4c41-a5c5-67ae071f00d3", "sighting--72efd7ee-8e67-4f9d-850f-1151a975097e", "sighting--8c2593ff-9526-4501-a1a9-2d6f6b86bfba", "sighting--19fd90de-0762-46e1-96a9-7fb9e569cb10", "sighting--9f821d6d-72f1-4de5-b76b-fdfaa956edf9", "sighting--55b32951-4a4f-4b63-b76d-8a8f0b8a0323", "sighting--cd10599c-8c9b-404f-8a77-e254e37f6132", "sighting--ac7d026a-f5ac-4620-808f-93caefa65e0d", "sighting--7f2fc737-56cc-49c2-8a7e-94ac4a465386", "sighting--513994f6-18f7-408a-9329-785ebdbc853c", "sighting--0d33c7f1-1b98-49a0-a3c9-f21388468b30", "sighting--3d0a2fd8-dc92-4308-b44d-97aeff8f18b1", "sighting--ded42b79-0a49-43cd-8078-e199a52d1157", "sighting--349aff09-017b-4b74-85e4-45dcf81ca8ad", "sighting--86803c1d-e997-49e6-bac6-8d37d5d2f2d8", "sighting--ab20ce15-0eb6-4e78-9f76-2d3fe742884e", "sighting--94edb0ff-1ee1-47c3-882d-1cd729d4be79", "sighting--6c57c138-0879-4048-b956-b47d802ca0ef", "sighting--e51acb4d-a9cb-48f8-8917-1918f8e85814", "sighting--5060b9d8-4324-4766-96de-aa5f6ee2fe7c", "sighting--e1889676-44b9-49a4-b9d7-934beb92f508", "sighting--53817729-a3ae-420c-befc-4735f1816a7e", "sighting--92192b34-05fd-4bfd-8956-2fe21409996b", "sighting--92d81c66-6d56-42f0-b9b9-3514a22660bb", "sighting--fe6d8f64-cecc-471b-904a-ba6192e13f5d", "sighting--42e6120a-a8c6-4ce0-9e6f-20852ede4c4e", "sighting--63603c71-6345-44d9-996d-eb2ca0cd5b1d", "sighting--f60d5253-6f27-4c33-a538-f3329efa6b62", "sighting--4e09f289-86b5-4e2a-ac6e-648e90ec09e2", "sighting--992002a4-1dc5-4d11-865a-a64fc9e63bbd", "sighting--728d517e-3688-49dd-93a9-194567c39cc1", "sighting--f2918a41-377b-4879-b96b-a2ae34e391e7", "sighting--6b3636a8-a4f4-4ef7-a72a-7b0dd9dd1198", "sighting--10fcb90d-f5d1-4723-84a3-7222fd44dc9c", "sighting--1f5b5b56-faa8-45e8-a150-6869f53c9b29", "sighting--5a11ded3-e60b-4a41-bdd9-65740faac50b", "sighting--a3a06ea2-e69d-4d12-8272-6623eb4b5beb", "sighting--d4997d02-7f41-4a27-9f50-d614c6c9fda0", "sighting--eee8d019-438c-4025-8a1d-2857ac4c0cd0", "sighting--576cdaf3-7ed1-4fa9-8cf4-6386021acd2a", "sighting--ccb8f1a4-4980-42ec-8a2d-1a7b1bcfceed", "sighting--01b7b662-4430-4640-9805-83027db16833", "sighting--498690c6-6ca5-4638-afb8-b4fc63fc07f8", "sighting--31a5b3be-018c-420e-a961-328eb67f7389", "sighting--45a1d4e7-7792-4bdf-8fa9-e1886f406e92", "sighting--59ffb018-1780-4128-89ba-3c88c1b084be", "sighting--daecbfde-39e7-4a03-baaa-64feeb695553", "sighting--cf199e1d-2ab9-4f17-a96d-ff95fe649647", "sighting--2b9371ca-b5ee-48b9-aa6e-314189e64c15", "sighting--536a4f5a-28d9-49e9-a12f-02050392395a", "sighting--87963821-53ec-4084-b261-d4b0df902e66", "sighting--c6bbb421-ad53-4393-a67c-7e84705baa33", "sighting--a1b6da7f-8723-489f-b57e-7ac08162d8a0", "sighting--d2489c0c-24b1-415c-908f-fa33cce91c88", "sighting--0c27fc88-758c-40ef-8450-e972e416f50f", "sighting--bc6f0c50-394f-4ece-a9ce-1cf131c07079", "sighting--e0d43a76-1cc6-45b0-be43-92521c3f5b65", "sighting--4dc10c0a-d16d-4802-abfe-7b39d5f89009", "sighting--1db51f11-f49c-49dd-957e-41268a1ddac9", "sighting--77aeb4b4-8940-4c39-a5a1-64e9a1017530", "sighting--a746dea7-2a09-4a92-9e25-0ba65a51aa6a", "sighting--d103ee1d-6192-4dab-8108-5e3d324e57e8", "sighting--8e8be133-d4d6-4676-bcba-15b97ae7bcf7", "sighting--85f88b1a-3a1b-4a61-9a11-0aaa6fe5e03f", "sighting--7b068423-9282-4f5a-a933-af4f78761313", "sighting--644e4d0f-2ca9-4a3d-b62a-2e502f6414e0", "sighting--70cbd950-97f1-448a-8cb5-dabfbdb63677", "sighting--13b34c19-ab61-40c3-9942-3734b3fd6c0a", "sighting--ef93c3fa-dc7c-4fa4-80d2-c845cd11b876", "sighting--893791e0-3cb1-4a63-a1ab-5efc026108b0", "sighting--415e0cf0-9ee2-4f64-996e-3f69e77bb383", "sighting--d6206a44-fa46-4aa1-b6c3-6c6d95c8fead", "sighting--37dae515-aad2-4495-8eb0-5bf80f67898a", "sighting--0bf2da54-4781-4b88-aa2f-1ec9d8545edc", "sighting--e61c3666-bab8-4efa-96d1-5d67d82f4028", "sighting--b54c0eac-c22f-4705-ac76-3729522bb508", "sighting--9f0442dd-52c4-4141-8464-6bc6cb9a58cc", "sighting--ba1ed457-9184-4426-a681-821197abe405", "sighting--9abfcf99-4942-4fea-b593-78eff5dac879", "sighting--e1904335-8615-42a8-90c8-11e0c04237ec", "sighting--8284b4ca-eb77-4791-a179-c3365e71cebe", "sighting--f984f9a3-2e01-49d4-a6d7-39d1c45114f0", "sighting--13f5ffa8-c667-4173-b8ba-f5908e41e5de", "sighting--3703f5cb-545f-4281-b653-4fa94fdc008e", "sighting--758c791a-6407-41e5-bf8a-6da097c9f1cd", "sighting--c6fc4530-6442-4344-b70c-f78e457cbbd7", "sighting--97f8035e-3eed-422f-bfdc-df46a8380ee6", "sighting--6badd186-8afd-4516-a6c0-db45da0580b1", "sighting--fc047b79-cac5-4be3-9abc-09f68c1be48c", "sighting--2031621f-64b0-4c2a-ad97-6faf21279ea0", "sighting--0b7437bf-4b58-4cb7-9886-e1f62b6eb070", "sighting--7c681853-06f3-411a-a6c2-fa9275ac998a", "sighting--614d351a-6833-4b41-a6eb-98565dd05186", "sighting--41e8975d-a506-49f9-8864-4732a4570a49", "sighting--4d91a912-cedc-4bfa-afd8-4430cfa5a359", "sighting--827e6faf-d122-43c9-b6be-4be74f16e7c5", "sighting--266de96b-d70c-461a-af14-36fcafb9d530", "sighting--1a5229d6-84b4-4539-aebf-ab31d589cca6", "sighting--5ac30316-f647-4080-8c8c-8f4b6b7fd264", "sighting--54fb4fa9-40f6-4584-ba25-b1f297ca7f8f", "sighting--2de65a87-8bd3-40d0-8ef6-359260c10d6b", "sighting--94ff0fe0-82e3-49aa-b33f-314444eb9642", "sighting--29d695bc-c37e-473c-9b6e-ceb98bde371a", "sighting--acba885d-49d7-4f6e-96a9-048d1ac2e7ed", "sighting--4768ec63-1f8f-44ad-98e3-121c34ca4f06", "sighting--4b1b0cfc-d11e-4b0b-a8ce-bb4ca88456ec", "sighting--ebfbc71d-b26b-4b42-8373-c8e1423ed279", "sighting--2084926f-0630-47e0-b096-1bd59a0b177a", "sighting--97288698-f8b2-44f9-8f8e-6d2b2eed3a16", "sighting--abf901b2-3fb3-4373-8a70-f9425c2e5c6d", "sighting--a827d522-0068-4973-a4f8-e1e2b2520cba", "sighting--ed21da4b-1e77-4daa-9686-c66d8928e75a", "sighting--e8d861d2-b890-45a2-99df-2716649c4737", "sighting--7f1d8ce6-b76f-418b-8cbf-7a2f7e7bdb49", "sighting--f9309168-8f87-4e5b-9091-3473260d3566", "sighting--8136034a-7131-4d42-854c-a4d793f91e9d", "sighting--44410eaa-bf25-4e0d-ae73-6e9d381355a2", "sighting--9683c9cd-493d-41af-8b44-7b1b43ea5b28", "sighting--1e807cc8-eb32-44fc-b517-5a83f8ab6edf", "sighting--cf1a0cfd-c45b-42e9-928b-373519bc1bd0", "sighting--d76c269d-715c-4ac7-9a00-88d354668a6d", "sighting--efb3cb8b-b35e-4015-b729-6eb08c1ed608", "sighting--d3be87a7-da42-47ad-957f-ff2a4f7a339b", "sighting--8ac7d5d7-96b6-49f9-8bb1-63ce9c43ec2d", "sighting--7d044087-7294-4184-93ec-71a71c44ff2d", "sighting--a2f78a12-9c0d-4261-9075-e2b429ee19cb", "sighting--e08e0071-3055-458d-8257-d33fa6c95eb1", "sighting--2e88d009-4add-40db-9f7a-13963cec8530", "sighting--7f612b93-eff7-4324-a08d-aecd7fbe2715", "sighting--265744b9-1ff1-4549-8660-1fa0c50929c9", "sighting--3e20cf7d-fe1d-41f6-bb02-f26ff4cee330", "sighting--6cfa483f-e1e2-48b1-9acb-bb5a0d90cb70", "sighting--4adf2207-0f02-4379-bbfd-239bcbd2c226", "sighting--2b307852-088b-4d97-8df8-e35037a6b076", "sighting--a4e6e19d-ccf1-4e5d-b65c-69089942e612", "sighting--1395ef39-19e0-4188-b7b2-d4d2216e0422", "sighting--76981194-79b9-47c6-8b52-7babdf715935", "sighting--188d7ff6-14d1-49b2-84f8-99ca3166c161", "sighting--43840b99-3a75-4bf2-8242-8f20dd3b55fa", "sighting--ed272cd6-3007-4d91-9340-647dbf25589a", "sighting--37b5d0a5-f468-485e-a2a2-6a3a47e76e76", "sighting--6f0a4db8-932d-496b-8eac-e74bcec5e107", "sighting--8a205f83-8381-458c-8ac0-a5b738314772", "sighting--f2a5a4c6-5d82-4c06-abec-1d0dbff6b058", "sighting--3099f65e-82a2-46c2-9373-8963339dc71b", "sighting--f92e43ed-ff4d-42ad-b954-cb4b1532a26d", "sighting--86cfdd5c-1021-4fb2-8722-3357af1ec41c", "sighting--a4ea7072-e0b4-47d0-97ca-ff1bdc37ddf6", "sighting--bcd9f8d5-0125-4dba-a0e8-a7a64fb60af4", "sighting--316561e1-ce96-439b-9c9c-cc916afe89ea", "sighting--6aefe11c-8a07-41f3-8d63-ec66cbaf2730", "sighting--81da4fd4-62fc-4841-81f4-610d25ae093e", "sighting--83f85b79-084c-4598-a7a9-d410c93bf1d6", "sighting--5f55a01e-63e0-4ed0-af03-63e0df5e6524", "sighting--7c6d9274-1d16-49c1-9d39-b1d384976c6e", "sighting--fd007b23-aa7c-4814-b790-56f58ecc60fb", "sighting--c071e8d7-9e63-4790-86a4-707f2c7ea866", "sighting--b73423bb-a98a-468a-9d4d-9e578f5587e4", "sighting--bfcd0bf1-5b6f-48b9-ae45-f9bfc6dabb51", "sighting--cb3f89a0-fc8d-4848-bb17-671edeff7ead", "sighting--dc671a87-5e5a-43ff-a256-0f686aad8e29", "sighting--dae371f1-0021-4316-a2b9-b79575490c75", "sighting--6b8cfff3-4f07-4507-89d3-3ee2bff2a56a", "sighting--293bde51-8c2c-4a09-8b6b-2bfb585d488c", "sighting--25c66a0e-d648-4772-aa7a-150aca3cdccc", "sighting--ff7f3729-bd18-4853-b8fc-62e697815f5b", "sighting--6f71b34a-5acc-4e9b-a669-57ec24c9b8ee", "sighting--a2018082-7f63-4fe4-930f-8800bcbd2226", "sighting--7853d9b6-8aba-4680-9154-c5264a9abaf9", "sighting--1d3597eb-3ba7-47ce-baa7-dc1eb59f1f46", "sighting--bf3c9e3b-9c73-4504-8381-855ca042c031", "sighting--b3637462-7878-45fa-ab9b-4b1c70955a5b", "sighting--390505d6-c801-45bd-b6f4-8dfc6d0cca54", "sighting--037f0a07-3270-46d5-ba4d-a832ebd27875", "sighting--4c7f39cb-a0a9-4adf-af27-adbdc71e1553", "sighting--c04137ef-9230-479f-a1e3-45bd6fb9ca67", "sighting--9cbaae2a-5ee0-4ca4-a7a7-44fa92c73d0d", "sighting--20dc4354-3ec1-4d9e-ba9c-9b9e24ece07a", "sighting--742a55a4-a45e-4689-9ce3-b8bcc64f0f5a", "sighting--c4ac448f-d7a6-48d6-b101-452faa90f86f", "sighting--16823882-4184-489b-9967-530b989fcee1", "sighting--dbc5fe0b-3508-43cd-b100-0805d218221a", "sighting--be954e62-6f5d-40b4-ba80-eb0888a7a828", "sighting--dee09bdf-a592-4252-a5f9-6c34c6e3b5ef", "sighting--4c2212b8-a05f-4079-a168-6a72f91701c8", "sighting--e0005eab-d70e-4690-861c-f6a1f7e53681", "sighting--b219a111-f45f-4232-8a13-56b86c2f59da", "sighting--1a49b3e4-4e07-4d82-b92a-1594401b99d2", "sighting--10092739-98bb-4ca2-b647-915957a4fc16", "sighting--2f95a742-293f-450b-af9a-4e99381be783", "sighting--d22cb931-4b18-4a4c-a477-af90a14f82cd", "sighting--643cf037-a0d2-4274-a439-d3a165ff5b72", "sighting--314bef03-7097-4867-928b-2b6e7fc7372a", "sighting--bad3f91c-6fb2-41bc-b9a2-6ea495909d7a", "sighting--c6106ac2-4ed5-4408-bad3-c73a38eb1e1b", "sighting--2e888ad2-4b6b-4383-8c8a-dd9490638d26", "sighting--27df9bea-c4f0-4dee-915e-479dfeffc683", "sighting--e3cea378-8ab2-4084-bb7f-b955fd4c4d86", "sighting--855c6f36-3dbc-4bf1-83ca-aff890849e66", "sighting--36907ec2-e48b-452d-9dff-b17e65ca4b9a", "sighting--8b418d79-93bf-4b19-8bde-acd48bb20281", "sighting--46cb1450-24d5-4df7-b121-f7650fc21ac3", "sighting--57f01ab4-7f53-44aa-a4d8-a14224af1750", "sighting--3b14ff8c-7b19-4c15-9873-81d076845ae6", "sighting--02a83f80-23a4-4c00-96b1-fb8cae06e4fd", "sighting--5d649ae8-b370-492e-a7d1-3b453ee8f4c3", "sighting--b8184896-7e49-424f-b8fb-205ea43d24c7", "sighting--ae2d893c-dd43-4b49-b394-ebdfbc4bdeb6", "sighting--b5db3c76-56f6-4677-bf8b-9fbc7ae94bc2", "sighting--9367dae8-c595-4d4c-bbc6-88aefbc8780c", "sighting--05c2fb6d-3fae-44d7-9834-e145ed62179e", "sighting--36c17797-733e-4f6f-be20-96fe3d085aaf", "sighting--d6436863-a385-43ac-948c-c7d766482930", "sighting--5f34e718-348b-4964-a31a-1b6c315368ef", "sighting--5a4994e1-cbc9-467c-b297-a78d4b7f997a", "sighting--f81fde0c-29f3-4721-933b-c24dbf2fae30", "sighting--ef25163d-90cf-48fb-b519-e74a8a762176", "sighting--157cec94-0aca-42db-b179-c948c79a63f7", "sighting--e193200d-bee5-439e-9665-d2ec211f5b77", "sighting--72c0acae-d449-4f62-be6c-246456ad6a8c", "sighting--fe5794a5-577b-4126-8540-b90f66aecff2", "sighting--59421a93-e7f4-4138-a540-7685c89b411f", "sighting--6f8bc7e1-14db-45d9-92d7-c29a256b0567", "sighting--cb02414c-89bc-4f35-8b77-8be4b0c3bacf", "sighting--4a290233-a0ce-4b8b-8137-1705695daace", "sighting--df1dcdfc-a1ef-4c45-af11-ce1f68c6f7e5", "sighting--a7336aba-74be-4745-929c-1b52f08b672e", "sighting--677f8463-e366-476c-9504-1f392731bfc9", "sighting--0c5ac710-f69c-4706-92a3-dc9f92cde4e6", "sighting--90870a07-d422-4aee-8534-2cfaddf73ad6", "sighting--5c4c3b9f-089d-4b63-8f55-9e57b3d7ade8", "sighting--3206277c-c3d5-48cd-b7d7-d73c1bb320cb", "sighting--4ef39aa5-fae1-40ad-8550-9c851048646a", "sighting--d2714aeb-db57-42c4-97cd-80471d3786ba", "sighting--b5faee38-ca97-48b8-8c3f-cf836bf0fba9", "sighting--24616f59-b85e-432e-95d3-396a99606d3c", "sighting--265b3df5-9496-42cd-831f-94df42b281a2", "sighting--365628c3-9764-4554-be9b-09f66ba800bb", "sighting--e72e978e-bc78-4352-a89f-698dda3a671a", "sighting--2ba18f79-affe-4903-8916-0231e6f85c0f", "sighting--2ec3aae1-eec4-426e-ae9d-89294fe60501", "sighting--0323ad31-bcdb-464a-881c-52c7aabaa758", "sighting--5d497553-7828-46bd-8f80-c1ebdd7f83f3", "sighting--e2574267-a959-43e0-a1c8-bab19f4cb310", "sighting--c6b3e74d-665f-44cc-af12-ba224d362919", "sighting--8ed7bbc2-d097-4c41-9521-900d0ba27f35", "sighting--10e637db-98aa-49b2-a0ec-c436f42c1c12", "sighting--81205757-c9b6-426c-8169-9ece6b0212d9", "sighting--b53c2cc6-6ea9-49d1-85cc-ebd563d62313", "sighting--9d83a96d-c8f3-4045-a648-75df7dc70db4", "sighting--0ca966d6-c507-41c4-be24-ffecef26a063", "sighting--bfdd615a-f24d-426c-ba4f-0a8f22455ef4", "sighting--9c7d7ebb-13c2-4f7c-aad7-14f35028c650", "sighting--b5f43107-7ea8-4122-b297-7773ee27062c", "sighting--fc407f1a-345a-4f02-85c8-a211de40b16b", "sighting--cf9f599d-9f50-4845-b57d-b556ff9f20bd", "sighting--dead1b59-8dff-411c-be0d-e56866a03613", "sighting--584a7c16-90e3-4e7f-84ba-9cee45fc2633", "sighting--8dbd86bc-7d05-42dd-898b-e2f27e052b2f", "sighting--6d2e7dbc-b509-4100-8396-02215671f571", "sighting--2ec873dd-dea5-4c0f-8d3d-c44656d41b12", "sighting--b497a629-7372-4da8-b284-a065b43261d9", "sighting--88d20b13-1e8d-444a-8887-7b2bc077c668", "sighting--318d227a-38e7-4c68-bdd5-d23e3309f441", "sighting--5327354d-2ec4-4a83-8b0c-980cd7ff0f50", "sighting--23466141-e1ce-4a2d-9f10-c51f7a35ca6b", "sighting--b8c1138a-41ef-43a2-a1c1-51a7f87e75bf", "sighting--c5a26af0-e69e-470f-b6ed-9bbb6933cf39", "sighting--a02a83d5-afea-4c95-9cf9-39f3296b12e9", "sighting--701c14d6-4c6d-463f-b39b-829d5c64c4c5", "sighting--c260c8e8-85bb-4b41-9999-3872a2a81de5", "sighting--90538482-9577-47c6-b7c1-ccffa6ed44a5", "sighting--ac7aa89c-6e9f-43ac-bade-eddf373b65b4", "sighting--49ff3b2e-d63d-4549-b1ca-2c06c924d9a8", "sighting--6c09b21c-eb49-4bd1-9b5c-d37cb6aef851", "sighting--2e58d67e-0a6e-4598-96e1-6d797af93f5a", "sighting--d75c1c6d-d945-416f-b817-015934f261bc", "sighting--95765bc8-f963-4a80-97b3-f995e3d03c7d", "sighting--bbdc7ee3-70b9-4b23-956f-bc54cba1d741", "sighting--35396389-c07e-46aa-b354-a227efea00db", "sighting--3f7da833-1b09-43ea-b42d-334d827c97eb", "sighting--81d33625-97ae-453e-9523-61f1438889a5", "sighting--13b5b3d7-4ff1-4009-8867-586bd03e722d", "sighting--a4942d1d-60e7-4142-81e1-c4fccb01cc3c", "sighting--d7d37e5f-e941-49b8-acf1-78d215fd1684", "sighting--8e2ff6bf-004c-435e-816c-7ab3167a7807", "sighting--6ba36149-f1c3-4093-bf03-b4542f8c3dd6", "sighting--73b92883-9ae6-43d5-900f-ab1cdf5f88d6", "sighting--f55bba7b-1f8f-4c89-b45f-ddcae77a0605", "sighting--f60b3297-cdec-464e-89de-4deef4e88eda", "sighting--e06d7a50-3619-4eec-adbb-9795af865115", "sighting--e06775a1-8b6a-438c-b6e8-679a2e667d7b", "sighting--ee398318-14c7-4568-b7ce-1c0f5a58c7e0", "sighting--304d9224-ed14-41ba-bdf6-a90c24e26f2c", "sighting--17c0e950-97c3-4e50-afd3-9255b4a9f18b", "sighting--23f16778-45cf-4ada-bec0-38a39939540b", "sighting--195a7730-d5c5-445a-9569-4f5377176463", "sighting--41c041c5-b56c-4dcf-986d-c9d7d23e41d4", "sighting--6083f9c0-c460-406a-8bfa-428bf235ce1b", "sighting--4bf07bb3-27d9-4723-8285-fd0bd70aa984", "sighting--16b82900-ed97-4bc7-8317-b8fc6d66791c", "sighting--20f2d5c0-c279-4f5c-872e-0b02a7bac638", "sighting--df885a35-e983-4f42-bf50-8a85e6dbe766", "sighting--f5fb53dd-9dfd-431e-afcd-ccc654b9251f", "sighting--62713506-58e2-4ee1-a0a4-001d89176153", "sighting--ac972cad-9342-40b4-b4b7-4bf09a179d6b", "sighting--428f4798-7d4d-4d98-9b3d-6d010bfa6cf1", "sighting--9aff3423-f1c8-4edc-8891-c5e6806195d2", "sighting--ca3ec2d6-e164-4157-b2bf-2c8c5a1a78c7", "sighting--1d0a7f41-de1c-48e1-bb41-9112e048d511", "sighting--1f3edc1d-1e5c-4ca1-bb51-b12ce230c841", "sighting--5d5d06eb-68fc-4492-bf4b-1a2cb808abfb", "sighting--30047137-0d12-4648-8d09-6c7c90b52c76", "sighting--6741b5e7-2b31-4888-9103-c3e716852d99", "sighting--ef06e665-63f4-4640-9e9c-1c1bdafed4b5", "sighting--2fcb0fe7-f4df-4385-b94e-12df143ac72e", "sighting--8ec0da64-f947-46fb-b181-3b987e9633bb", "sighting--8efb923d-ad37-405b-80f1-d40c2e60abd8", "sighting--e53a6993-8600-48b2-8d5b-34e38a57fdd3", "sighting--080a4185-8f63-4515-8109-4b91d19a8d80", "sighting--07048e69-b46d-40c9-ad19-1ec8a5e26698", "sighting--a98b5d4c-128d-431f-a529-5e3f0d633c32", "sighting--f68b0236-aa8f-44b6-ba52-550da6dd661c", "sighting--b7f81f3d-df97-4844-9aa6-936ac14c8ab4", "sighting--c7442c49-3f3e-4fb4-9bdb-a776cce0ebb3", "sighting--0e487e81-0fc3-463b-b18e-57c89084e016", "sighting--b194bf2b-1810-4efc-b15b-4483bd15ac48", "sighting--9795244c-61f1-4ae7-8148-7d11385f7011", "sighting--ca5011d7-a8be-4f6f-b7c4-5126a3d9c672", "sighting--36244e5a-e5db-4659-a2e4-761871c60b2a", "sighting--ba62914b-faaa-4249-be0a-737d469369cf", "sighting--731d989d-2638-4741-afac-c11aaced7ac2", "sighting--8295ba2c-708b-4a1a-a554-dc2901761206", "sighting--6342c815-51a5-46ac-8903-6f9b9887f1c3", "sighting--e58aa756-7881-4435-9922-5f5eff918f6d", "sighting--2a20c7df-0009-46b7-a10e-d1d0695c0f0a", "sighting--cf345f86-811d-49ac-b9c4-1ca970788ba3", "sighting--19a25a97-296e-44fa-80df-0fb36bdc6034", "sighting--f73287c6-6dda-45db-8655-33457cc8ce46", "sighting--b8fbd5b1-99f7-48ed-a012-5849535fd77b", "sighting--06aa7552-460a-4f28-9425-bf9ac6e39878", "sighting--6d584f30-46c0-48e0-af7b-92e31cf06a48", "sighting--33be8a63-f8d3-4137-a3b3-619683adcf14", "sighting--f1324a94-e287-43e2-896d-65c1c6ad03e6", "sighting--1c0a6e10-f05f-416d-b208-6380e95ae332", "sighting--76c22741-425d-42d6-b0e3-e492928e5812", "sighting--29abcbfe-7b61-4ebe-ac62-9f99fe31fc23", "sighting--ce32484e-fe82-4ae6-8646-3af0c9ad3f43", "sighting--f6f064eb-6442-49ef-aa6e-82edc1075bb2", "sighting--fd9c207c-c8da-4ef8-8e0e-bae9d7a1c5a8", "sighting--b52f4a58-5e03-451e-a117-6673a2607f84", "sighting--2aefef03-cf91-464e-be41-27fddd5957f9", "sighting--d442f551-9b6b-41e8-9401-7ccabe000b15", "sighting--a167b327-8038-47fc-ad47-deaa630faa39", "sighting--ef4edee5-8329-4100-be4c-d7eacc49cd90", "sighting--59916a9a-173e-4969-83e2-8733e4c61a55", "sighting--16a636af-2623-42d5-987d-128b51f3f54d", "sighting--afaec5fa-662b-47be-af48-6cc46836ae39", "sighting--1d675ecc-8df9-4b6d-aa09-c8fafc2a1f53", "sighting--f534ca8c-f214-49f7-a9ee-188b5705cf59", "sighting--d35b5093-4bcd-47f0-9860-86ee1dfe197d", "sighting--da502ff8-4fbd-42e2-a1c5-222db11a617f", "sighting--44bc645d-6825-42ca-8368-0f1ada62aa6a", "sighting--1d788227-23f0-48c8-9f30-054f4cdd87d0", "sighting--0ede93da-ec09-4135-89e9-e73322a2bcfb", "sighting--7b8ee6f8-b63e-4f7d-abbd-6b9b48fe53ed", "sighting--a906bab0-c90b-4afc-bb2a-45d5fed81b40", "sighting--d8280482-bc79-4f55-9033-3b64a65e615e", "sighting--49d77821-e7fa-42b6-89f9-faae5412d5f0", "sighting--de7c0e7f-e7bb-4479-a1ec-8684beeb3fd7", "sighting--1eda6d38-93b3-4a57-807c-4411160a3157", "sighting--3bfe4473-e139-47ae-9762-9c5eebd94133", "sighting--5a41bd3f-3ead-4f05-9515-37952d9f4c84", "sighting--7ec79d29-8c02-49d3-881f-f939d5b33ff7", "sighting--9f58047f-3486-44cf-9580-7dc35bde554e", "sighting--fec83aab-4eb3-4107-8eb0-69dbc7d5657b", "sighting--f3b53b29-f23a-4f77-8ef7-8d36200426bc", "sighting--67a80442-b0fd-4573-bc14-b65938c72b57", "sighting--852eeb59-0c50-4e96-9245-bf0553742a73", "sighting--4e7485dd-8027-4e2b-87da-d975e1bd303a", "sighting--bab13ed4-d9bb-4e4c-991a-83b572a91477", "sighting--a6a4a13d-30ba-4c52-9272-41c07718d4e8", "sighting--bbee7328-75ea-4fb1-915b-7219f84c7fd9", "sighting--8ce3303d-81c8-4a4c-a7fd-fbcb07c09f56", "sighting--69583e8b-698d-48f1-b1de-bf4cfe8d7b92", "sighting--04f29d4c-7f7b-490e-8e72-323ebe8823a2", "sighting--661ab0b5-d3b5-4ee8-8b50-be8e31af9edb", "sighting--7ded981f-9767-4a66-a3f3-324cfc0bf6bb", "sighting--694b2cf5-7a66-40fe-a8ec-c39d28dca83e", "sighting--953544c2-4edb-4378-800b-67fb6eaaeabb", "sighting--d6a183f2-f06e-4c04-95b0-84cb67057025", "sighting--00f58f11-4aad-4752-ad7e-96ba67ae609a", "sighting--4f05899f-f2b4-42ec-9346-784bc0b45964", "sighting--01f3c198-73bd-4880-98c2-83ce1a48619b", "sighting--8e774e65-0618-43d4-aab6-100c4b6bf7c5", "sighting--301ad371-8a1d-4fe8-85c5-f9df2089867c", "sighting--9d4f4101-37c4-4c7b-924e-bb30a3afdeaa", "sighting--822dfc62-aa61-44dc-ac6c-bb06184dc524", "sighting--1f530062-1540-41c9-abaa-cf64321f19a9", "sighting--9656989f-ffa0-4387-bac3-b2f32c5c987a", "sighting--2d0909ad-39c8-4242-8597-7bbbbba0c8f5", "sighting--86911d49-9826-4fa1-8fdf-6f150b45f3d5", "sighting--17c5a970-a948-41a0-a945-59cb2d3ca532", "sighting--8ffda17b-f643-4181-ad01-ef25ac27bbae", "sighting--f2d43001-11d9-443d-8389-eb5b3322c896", "sighting--4483de2d-c8fe-4751-90c7-b975bcd3dc2e", "sighting--4d0361bc-8e27-4f68-93d0-e678954d5dcb", "sighting--94e1ee09-9894-4b55-946a-52e6649272f5", "sighting--0a19b586-c048-4fb2-9e1a-db9767209f54", "sighting--c84fd275-9fd9-44d1-9118-7a9f9d40f054", "sighting--2d9000d0-885d-469f-ad2d-0016fb690f34", "sighting--4ae33e61-8f18-4066-b202-f4ec7ed9ab04", "sighting--e8772827-52f1-4867-b027-0b1da777783d", "sighting--e164afa0-2bb2-498d-a7e9-ecc92c86659c", "sighting--bca77255-6060-4e98-9b11-cb05faf9bef3", "sighting--4753e0b6-3d01-4cae-8c12-7da378eda1c7", "sighting--dd0d0ed6-921f-4f0b-ae79-9d1430af8a52", "sighting--783a0a80-2cdc-435f-8cae-a2a0d0a0b729", "sighting--be050d22-f3ae-4d71-9125-8f57887c9da1", "sighting--ae38cd37-dd77-4ce1-95e3-5b7f7f4b2245", "sighting--7cd8533f-eff0-42e2-93dc-ec67d898bb2a", "sighting--cb026aaf-eb8d-44a0-af76-6070cf2a624f", "sighting--c51959a7-91dd-4c03-8e1e-c0eac0e73e06", "sighting--a7d39633-13c3-449c-aaf4-b1105e1ffd88", "sighting--83f98c0e-6208-4c7a-b2a6-d926ef79124e", "sighting--351299b7-3408-455f-92dc-ee8d81ac4729", "sighting--1e5919f2-1168-46b7-bf42-648e28c8842e", "sighting--d1ec070d-b239-4eac-bde2-5a95a205d3e0", "sighting--64200543-48b5-4ca7-a011-1b61534506dd", "sighting--521056bc-5fb2-428b-a7f0-58ce3d389be5", "sighting--f3dc282a-264b-4b3d-99dc-b69d7cf9498d", "sighting--b96972c9-9679-4e96-8e63-b488dc0d6034", "sighting--8fdab100-0230-4adb-b001-0ea44c4fa1b4", "sighting--2415cd6b-251e-4a97-9298-0aaabcb04e72", "sighting--24296c8b-a2bb-488f-93b4-48154a6e6534", "sighting--4f6d0c10-a772-4647-a3e1-9d414bba3f48", "sighting--59a94c54-e64b-481e-92b6-e4a6b5384137", "sighting--5b21c392-0cdc-43e5-9ade-54deb6229894", "sighting--e7b63956-c425-4375-be4a-9a39295d7a55", "sighting--a5b689b0-0420-466b-b4a0-51759b694273", "sighting--e3668e19-2723-4fac-b55e-d7c9dbcbf0fa", "sighting--af7e0a23-c063-4166-9200-e477f5eede0c", "sighting--bd337f83-a736-4061-b351-cccf5bc97f7d", "sighting--d1da913d-535c-4286-81c3-6377f3968230", "sighting--0fab36df-5c05-4cf7-9551-a33228606b72", "sighting--6043ccfa-e0e3-4b64-96ad-9e7dc8d5c896", "sighting--1fcfdec6-2793-47c4-8682-40b1b7d3fb6a", "sighting--a63cb382-dd7c-45ff-882e-6ae8db05ec30", "sighting--daf49d78-87d6-4877-a577-e70a32c54def", "sighting--51d70665-2a61-4694-aa7b-7dd548097caa", "sighting--f5f46d1b-5fe0-434e-976e-bce8e726c35a", "sighting--e023a37d-1582-4f82-978e-4ac671c0fd6c", "sighting--c7c57140-7a6e-4627-bf41-d2c14adca2dd", "sighting--3e4afe7d-5866-4c8a-abe4-3e29701458e1", "sighting--e9456e6a-dddf-4f89-ad7c-7aa6ad91dc08", "sighting--947cc04c-d2d8-4822-b199-8c049a97d5b8", "sighting--67a4edc1-4cbf-4fb6-95fa-2000eb65a01a", "sighting--10b78087-339f-4306-8a21-a7ed8a1bc761", "sighting--47029c92-ea46-424d-a805-9fc175de451a", "sighting--6a32bcb7-eaa7-4648-934f-937654af186b", "sighting--cec145ac-8d91-4029-8978-2d54e4e6325d", "sighting--f1adcf4e-11a1-48e5-8177-6e21c48b7754", "sighting--5c840845-d813-4cec-8426-0a8b07ab982a", "sighting--f9a5dc09-09cf-4dac-a140-b61f6b8f1319", "sighting--9ca67573-e92d-4a48-9ecf-d3370ec3e2a4", "sighting--05af9ccd-957f-44c9-a372-2e1024b40131", "sighting--c8ac8dba-91f2-45db-8e79-e2fb615c8f11", "sighting--2305a5a8-fd3c-4093-a83f-f2d1f5918068", "sighting--4ef4d043-6844-48eb-98a2-70538e8f6ccc", "sighting--84291fca-88bd-4419-870a-d882f6f2b580", "sighting--15754cc9-1567-4210-b536-4ddfb7eceeec", "sighting--1b710138-3c05-4e8c-b9f7-7b5247cd314c", "sighting--85bc1039-5410-417a-935e-8763d9ef83ab", "sighting--e46d0b83-acc7-405f-8873-265a4b6035f0", "sighting--f930f763-4291-425a-8b12-746804ed3154", "sighting--b4fd978f-fc07-47d7-a0ed-d18b33cd7fc2", "sighting--6c6c3a43-8b7a-46ff-975f-594bd02b6e97", "sighting--df082f11-0d5a-4c18-9a0d-3c73fa075916", "sighting--6d1839f9-c73b-47d3-959f-e51fa95d8e2a", "sighting--03624fc0-decc-477e-939f-6d4fc5674c2b", "sighting--096da5ef-df22-49cd-8430-f03e8ea7a5a4", "sighting--36472ed9-9679-48b8-929d-f20f1c2b0516", "sighting--7ee94be4-1408-4074-b830-0f36b937b48e", "sighting--21e7cb7b-e2c7-40b0-91f1-af03930b93a9", "sighting--cfc9eed9-56fb-4e09-b30a-b9bb01762441", "sighting--537829a8-4302-4f09-b6b9-d80d8bdf21ee", "sighting--aa82b033-5ca3-4061-ac28-f565b66e399a", "sighting--524b56e7-1537-4ba0-b5cc-cdb03f97abea", "sighting--7de230f7-9150-4e85-bdb1-e1044a6c4279", "sighting--172293bc-f863-430a-b254-573e64a313d1", "sighting--8764d246-9259-4a93-94be-ecc5ed78ae04", "sighting--a8f27e71-e84b-4c75-92e0-1b173ef84dbd", "sighting--8e1d28de-33b1-4769-8649-0b73c9284d83", "sighting--9aa14d30-8691-473b-8e79-a0420a741056", "sighting--c37511f5-0569-4489-b1f0-5c361bba4b29", "sighting--e55f7db8-deca-44a7-8e6b-d9c44c79e16d", "sighting--109239fb-06d2-421a-b53a-24dc07dd2e29", "sighting--2dc2b6a3-caaf-4ff0-9695-6d8da319ac8b", "sighting--ca4f97c6-eee4-45ca-b6aa-dcfa0ceb922b", "sighting--dda1c99b-7222-421d-8757-7bfdafb636f7", "sighting--81c1f202-a74c-4451-ba00-b1b35523ceb7", "sighting--fdc7cc4b-708a-44ba-8958-4a1c83d63cc6", "sighting--2b289f84-232c-4366-850a-35cfceae4bb5", "sighting--b8aed1f1-b630-4c03-8deb-3e95cb819243", "sighting--a57b7b15-407f-4f9e-87cc-e1a4cd455ccc", "sighting--df755264-071b-4bc7-808d-053ad7d5d039", "sighting--1a438136-8382-48de-a29d-017ad9bfabe5", "sighting--9bcf9fd3-e616-4e85-9c16-3d62ef310447", "sighting--5d490c0e-27bc-43a6-abfd-3ae94a2abe1a", "sighting--12b27b8e-a2ad-4952-8b0f-86fd77504899", "sighting--182d3e71-d579-402e-bb94-e099944f3526", "sighting--f8af04c6-3b00-4c6d-af3f-eeffd8e6432e", "sighting--ff18da54-b680-44db-a5d6-01f02002af8f", "sighting--fab64beb-9710-4851-8160-2f433922cbff", "sighting--8f506fa2-214e-4eaf-8ee3-dcdf0e2d61de", "sighting--06cc375d-deae-459b-85c7-5bc226668ff1", "sighting--ec919e05-6a07-4676-a6b1-5a8306389bd3", "sighting--079a45b8-095a-4039-89ff-36a7ea2cb26a", "sighting--136df9cf-541e-4672-9812-1f9fdb0fdcba", "sighting--12621bd3-ac5d-4228-984e-d32765192bba", "sighting--23d20f0b-6625-4b08-9931-0b159a16539c", "sighting--c438eefe-8d7f-4ed3-8690-8bd6b61977a3", "sighting--15756990-61ec-4ab8-abb5-a5f06d92ff8a", "sighting--6ff6a389-62b4-44c9-9ddb-4bfe5e1cc1ea", "sighting--fda7de43-0b31-4eca-ab42-492d332e8432", "sighting--c2fd61af-bcc5-42a9-b339-0f39dd2770fc", "sighting--0d6cacb9-289b-4532-b251-45430031689c", "sighting--bed15655-ce68-43fd-9a04-71c7b169d5a1", "sighting--3fa71cb3-7983-42d0-8d93-20109a3f0ae8", "sighting--22f4ee57-2282-4bef-b783-10f3e4056c6f", "sighting--30a6529a-7c11-4ee2-af7e-32c5e6a6bf92", "sighting--f2f048d9-ce38-433b-8952-dd2b58d2fb02", "sighting--fab488cb-88dc-4077-9bca-e992ec0dbfdd", "sighting--19149dce-f5e4-4e7a-86a7-39a9dc8cb881", "sighting--5c509a06-fb66-41e3-979d-c4051834819c", "sighting--1168886a-6da7-4a3b-a4b0-d9e1d2bc913c", "sighting--3cbab5f6-14a3-4280-ac39-e06aa9535dfa", "sighting--d6d2a688-0af9-4580-95bd-9bb1b1b7c7d0", "sighting--f00282ad-8380-425f-b7de-088b197138db", "sighting--25efe1d2-a1ee-4b36-933f-c6ef9e2d661c", "sighting--8188d25e-ab9d-475e-b751-070cddaf961c", "sighting--ad67fefa-467e-410b-873d-a85571c5a483", "sighting--b47728ea-beed-4ff2-a4bb-dfc4027322c7", "sighting--76e472c9-c85d-4fa5-b344-45c2b1cb99d9", "sighting--7d41fc71-16b6-45f9-b7d5-a9e8574b83c8", "sighting--4e0df9d6-bbb3-4d98-a3e9-a969ad53b0b6", "sighting--71c40814-bbd3-48b3-9eca-5f6c849f1490", "sighting--8b1603d5-a536-4f06-a132-aab63869f2e3", "sighting--431f0917-3ec7-446a-8d47-d59e08fc54eb", "sighting--b24333d3-ff9b-4eab-b96b-37412ef54ea7", "sighting--fd978c6c-c898-4d34-a2e3-1e10d43feed1", "sighting--8f592e66-8ece-4502-ba29-b978f628973a", "sighting--f6db2396-415e-4231-a876-9ae0d602c7e1", "sighting--7f332012-ea3a-4480-8e90-ddc1f813a71d", "sighting--e8e5e517-2f09-413a-b4d4-9775ae56390d", "sighting--5509d260-803c-428e-a66c-8ec330963cad", "sighting--de6b250f-7159-4b30-a0b4-5429e6933dfd", "sighting--dac9f837-9c2d-41de-b3b2-3b8ddd3e167f", "sighting--ae3dec7c-e2ae-477b-b85f-eda5a1d911d0", "sighting--97e5ada5-1c0b-41a9-91f1-9f4c2f8d646e", "sighting--07b98ca5-d0e5-4303-acbe-c51687779c27", "sighting--b20ba14e-5d9a-4fe9-9b50-af5b378b0983", "sighting--3208500e-3e58-4708-bbdd-3802bcd92f06", "sighting--1d7c6e3b-dffa-4531-b3b3-db56f89f3f41", "sighting--77789913-257f-4abc-8a74-20af2991a53c", "sighting--7f8d386d-cbf5-4638-8da2-4b8702b54ef2", "sighting--7f204426-c5be-406f-9ee8-64898af72957", "sighting--1ccc71f1-4b79-4d01-a221-287667b3accf", "sighting--f0c6c0b6-d288-4e12-8c9a-4b6b292d0d29", "sighting--1a58fa90-4f60-46ac-ad28-c9c0b55cb2e1", "sighting--9fa1dc46-3ce2-46dd-a81a-8feeb1c6eb84", "sighting--d7eed232-9368-4e65-b8b0-0553b624718c", "sighting--df5c41d4-56c2-4747-a26f-2b64878882bb", "sighting--d0500a8d-ddd1-4e1d-b00d-96a2b4ef40c2", "sighting--661076e8-7b81-49ce-83c5-4eb75189ca50", "sighting--7cce12e4-77ac-4346-a576-4a5af29401ab", "sighting--6410bdbf-3062-41fe-a913-ae075bbcae80", "sighting--9fe9aa8c-4279-4a5d-a0ac-f0b16e45842e", "sighting--32c1bc17-b1ed-4ba9-90a9-ddf55c8f171c", "sighting--7ef696e9-e034-46b7-9595-0703c9c71893", "sighting--c72574d7-3f67-4d0b-a4cc-9745996f6472", "sighting--36d761c6-3b30-4bdd-9a0a-49970c9849b7", "sighting--3908ca09-8a39-4582-91f2-0ba119250e1a", "sighting--2586d813-6ee5-43c5-a69c-7e8ff70fb1d2", "sighting--b38f332d-fbd3-4be6-9155-591f95c1f033", "sighting--43de41ca-03f1-4e5e-9f46-7989b35babf6", "sighting--bdb22f53-83a3-4f3a-a877-bc5b71eb059f", "sighting--a614f9e3-a36e-4224-98d1-6bea04977646", "sighting--ef14889e-b2d8-42c4-b03c-37b4c789e24c", "sighting--d34d1ce1-00ff-459b-8877-93f3bd7f47a2", "sighting--5d86139b-f023-4b0f-b550-09d073c3f376", "sighting--34a134a3-c237-40f7-941b-43e547d8e8da", "sighting--4e346571-6ce5-49b6-9999-ce845eb7259e", "sighting--887d0f44-0298-4d05-bf8e-13caf7d23dda", "sighting--b2f630a7-8faf-4fc4-a806-fe82b8f3ff64", "sighting--a87ae111-27d4-46f7-b8c9-9501e15df199", "sighting--987f7419-3354-4a48-ae6a-b03eb50957d1", "sighting--07eb55f9-a847-42d5-865b-43a855a9f75a", "sighting--b008bfbe-b6b8-46c6-9856-640ab5d96f5e", "sighting--50e75c7f-8328-40ac-95a1-8f4e34ad9075", "sighting--4ec9c8a8-7c9b-4488-96fb-4bf183af4451", "sighting--490d3b52-78fa-400a-9b8a-3d01bd5b2ea5", "sighting--d70cd429-9918-4a11-b094-242fbd03f8cf", "sighting--6a2cfbd0-666c-4c7e-a136-c1b01a2c53ab", "sighting--2d3e4cb7-f4cd-4ef6-a205-da12bbb6b848", "sighting--61cfd71c-eaee-4d13-9543-2dfcbc35f9e6", "sighting--588a96af-daa9-4cc3-9a35-5805d2cf131a", "sighting--66d90786-de55-48b0-91d1-ba5dfeb31d63", "sighting--cc7f74f5-37ee-4df5-922d-47e676de09cd", "sighting--9598afd3-62cf-4182-a0cb-e4f6704900a2", "sighting--b3f7ffa6-1adf-49ed-9b2c-1343c802a966", "sighting--4440711a-395a-448e-b948-1e6c95f9c30f", "sighting--ef0e8bbf-b05e-414d-825e-fb09a06c4633", "sighting--10eed79a-5d7f-47f2-839b-a01df712e081", "sighting--ec4550de-5782-4b2d-b766-2733022df2a2", "sighting--935548d8-9a68-4ea0-91e0-6dd0048dd68b", "sighting--1e126b84-bec6-416d-898f-221dd65422a3", "sighting--e19e120e-93a2-4461-9cc5-1b69efb2c74b", "sighting--e199a7cf-533b-497a-b70a-ed117cba40f7", "sighting--ec8a89bf-0601-4aec-90fc-9c4a3d75b2a8", "sighting--345e36b4-6633-4e0b-913d-ae0d9fcb3ff2", "sighting--130c4cfb-b7f5-45bd-b9cf-cdd0d27d3829", "sighting--da2d1343-675c-4c33-aabb-afa445bae18d", "sighting--63d4c910-d17c-47a1-b5f0-2acb789076de", "sighting--535e3b92-208d-45bc-8942-9d512110a93a", "sighting--b188d182-b56e-4e8e-bc5e-744f76d04810", "sighting--29c78fc2-c460-48fc-a6a7-0031341330a5", "sighting--5657629a-2f95-4251-98b0-2bf2a299dd09", "sighting--7059fb12-0ff8-4b1d-8af9-785b8cc4e189", "sighting--ea1e12cb-d841-4673-b8c3-b75b8c8a78b9", "sighting--ba4a26ef-1866-4243-b200-aadce16c79d9", "sighting--6aad065b-3221-48ba-8897-f887dca66407", "sighting--b290419e-8f0f-4d3e-8f6b-111449bc7d8d", "sighting--3affa67d-e034-4f98-82e2-0b823a27354e", "sighting--a2d238b7-34f7-43a9-95d7-64f5bf315ba8", "sighting--ca771cc7-ff3b-44c2-ad7c-30ce0048ef03", "sighting--fbc65d0e-a733-4329-9447-c9bd51d01a56", "sighting--f9c81bd3-a8e6-48e0-9036-45c95d3b2eff", "sighting--3acc9a18-013f-4365-b341-0b001966fa89", "sighting--e6e9c407-cf01-4792-b6f0-109c033c982f", "sighting--5f1ec805-ff3c-4a9c-8f17-68d8f9fe4b03", "sighting--a879329b-8b8e-4f14-b691-9ba2b61bd5ff", "sighting--cb12f1f5-d0c8-4b42-b944-8caff5beeefa", "sighting--f78e45c9-50fa-4a53-8a2e-0119aabab342", "sighting--26fd5e08-eb35-427d-a4ed-9d5448334792", "sighting--ee03c3d5-aa63-4f4b-9b3d-0401065ad0d7", "sighting--ad5c3192-8719-4b57-a310-cf838e83e87e", "sighting--dfb2ed9f-a113-4df6-a87d-17ca43ef1835", "sighting--74abead5-01a3-4b7a-b8d9-ea240745cf90", "sighting--5280099f-4ae7-4512-ab4e-43487ebd3a49", "sighting--43953ae1-bb27-42c3-be49-ad29fa59ac79", "sighting--d9bda6a6-47eb-492a-bf41-dbcf47ee84c7", "sighting--5aa129de-bf22-4fb9-8025-abb628451a7c", "sighting--ff3df882-71e8-4ae8-903a-7dbab898d15c", "sighting--09cc6a7e-c708-42b6-a7fc-b19257e7da21", "sighting--c137aef2-e263-47c7-83f0-41445c4f45a7", "sighting--8e227534-3b92-4de7-914f-a73086caa34a", "sighting--c9c6ab20-04b7-4f6b-a05f-ee75fd2eae40", "sighting--3a4e30e6-c23c-44e7-8248-88b665699a3b", "sighting--e3c4926d-1466-4ab2-a805-15104e637649", "sighting--fe45ed38-4b9c-4c5e-a9ac-747677a540c1", "sighting--3357420c-045c-4efe-944a-298fb20480a4", "sighting--efce12ad-cd64-4cd9-a2be-6e09f8487e7f", "sighting--29a4920c-33e1-4388-b9d2-57cb204285c7", "sighting--069545ad-e018-44c5-8e3d-4cd67633b468", "sighting--be008506-f6c2-4c40-b3e8-53bc6d62d802", "sighting--ca0bb266-d864-4830-ba6a-67c10f7d17c8", "sighting--fef17d66-105f-47bf-9a77-690f0bdcc0b7", "sighting--53d37f42-17ca-4e05-9b39-7c96cc327a96", "sighting--09436fc6-b871-4bdd-aa18-983a7edc89b7", "sighting--9466ca9e-c38c-4d91-9485-26352837e782", "sighting--11893623-18ee-4f33-a6a3-736f1a51ce68", "sighting--c06e7041-27f1-4788-a79c-b15e521554cc", "sighting--b46d0950-a28b-426f-a7ea-ea02bf3676ca", "sighting--4f8897a2-0ce9-454a-b502-75cb42955926", "sighting--66767ebc-cc2d-41ff-aced-a743e3a4ad51", "sighting--5e441661-a8f3-41ea-a256-a27c7d7b1aed", "sighting--3f1cb2d3-5115-4874-92f0-9518a3b943d1", "sighting--9f8ab30b-8219-4207-97fe-597dacb934af", "sighting--6043e577-7d86-49d3-b5aa-c1ade65afd7b", "sighting--34fce136-eff4-41d9-88da-3394c2223316", "sighting--139baca7-10e2-4c1f-aa97-3974efa04cf4", "sighting--2c6ddbee-7f42-4953-9697-ad6147826efc", "sighting--7d345e1f-4f62-419a-842d-b6f3b544de09", "sighting--cb3c1026-75a2-43d7-b4d2-335c841a474d", "sighting--0682856a-4dcd-41d1-a56a-e12ff733d992", "sighting--7284adab-92b9-4d06-a4bf-79ceb711e639", "sighting--c34136f0-525f-4e1b-aaad-709fe8e5ec34", "sighting--3dcb066f-26e2-4f57-a114-8fcde497e5d9", "sighting--2e7c4baa-6252-42e0-9998-03b4713f3c8e", "sighting--4fe5a93f-dd01-4de0-8a6e-10773aa53ddb", "sighting--56d7de40-e971-41a2-bc8a-954eccc25b30", "sighting--ad0c5403-91c6-40a0-9ad1-82164d2ad289", "sighting--b3ee3e3e-5fb9-4eac-8a89-5d7091bbe41c", "sighting--fb746fd2-6358-4e7b-88c8-3a2e71433b99", "sighting--3ff5a162-abdf-4e3d-a100-b1e277043879", "sighting--42236fe4-1a2e-49ca-981d-311d15d052e3", "sighting--9f284c2b-6a46-41a4-be47-b6ce1bd828b2", "sighting--f1dc0106-2de7-4168-8212-3b0532aec875", "sighting--cc9fec37-6d71-404f-a3c3-3d7e146fa153", "sighting--4e84435a-3475-4dd7-8e7d-1ba2122f2c59", "sighting--e2e217f2-7028-41c4-a7e2-5497cf93b791", "sighting--aafd199f-510e-4932-808a-5690e29dfd89", "sighting--dd8867cd-c1cd-477c-835b-9ded7616e792", "sighting--440a578a-c08d-4554-8f30-b24c40874a5f", "sighting--ded0e685-d6c4-4a5e-a807-8c4be947158c", "sighting--d88b0277-5761-413c-8351-36efc7eefe41", "sighting--62787c66-7fa8-4dba-8f6d-f686f61ed137", "sighting--ec7ed67f-437d-4b37-83cd-47c59b872350", "sighting--7f63d0bd-cb98-4cb8-8e3b-e233b9c7335f", "sighting--0c927cb3-c6f6-4192-bb41-ae6b6d352543", "sighting--6bc4c430-8cf7-4932-998e-d6b74e3a35a5", "sighting--acb63ce8-f0d0-40ff-abc3-34df91efa335", "sighting--1102cafc-2718-48ac-94d3-8999e83e5652", "sighting--91f8e148-3fe3-4065-9154-930ca26587c7", "sighting--7aaeb874-d5ab-4379-a52a-a0538227d1a2", "sighting--e1b14ee6-0b85-497b-bf2d-569e3a8e332a", "sighting--e07a671d-6ca7-4e17-865f-345ef85a6251", "sighting--431aea0d-786d-4e4c-a9da-10be6f334d48", "sighting--d22b75ab-e73f-4c7a-8ec5-61a27da06b54", "sighting--5723f74f-bcba-450c-9b41-8e17642d752a", "sighting--8afd33a7-2367-4227-95ba-676d69dbff22", "sighting--355b882c-233f-49a0-8591-69537c3056ae", "sighting--6a30edd4-e59b-4a3f-8759-7862c6fedf24", "sighting--092eb57a-4975-45d9-b3e3-70acb394e81e", "sighting--54d117a6-e653-4ff1-baa5-fcd684474488", "sighting--e99dd6a5-0686-4e70-892d-59bcf3fe34c0", "sighting--4bd59bc7-e8c3-4082-9954-b3cd73dd4769", "sighting--6908c6c3-af23-46e0-ac6f-155a048378b5", "sighting--e47cf384-07e7-47e5-914a-74e9a5b5f3e8", "sighting--984c33bc-4787-470a-8632-19e185df9c8b", "sighting--9af8578f-5b9d-4451-a9a8-2a28dfc1f439", "sighting--0477141e-9209-47d2-923a-bf6716cc3893", "sighting--f8a1bf23-f8f5-4d7f-989c-70de9eee35c0", "sighting--063d6d4e-6b27-471e-b745-0c0c2ff3b0d2", "sighting--01f1579e-62b0-4539-80ff-0aa6e1379f8a", "sighting--d063e9c5-371c-43f0-9c1e-dfdadd007eaf", "sighting--56b9c0c1-f608-4494-a2d7-f7fdcb120442", "sighting--266b4f0f-02e5-4d52-852a-e8b3d7348580", "sighting--80daeb1b-a342-4c53-b849-d5d9442f6aa4", "sighting--cdc251bb-41e5-44dd-a44b-4c19c54ad2b4", "sighting--3ef1d21e-c3e2-4e3f-acde-cd0d96fe8ba4", "sighting--b1bcc651-fdc4-4a83-969c-bb3412e61146", "sighting--1dadd151-fa1d-47e1-985b-d60fc9c63cd7", "sighting--993c67be-75e9-4278-af39-54f693b306df", "sighting--f486bc59-d511-483e-9c64-14b1d2a92dee", "sighting--6cad4b6b-8dc9-4c9f-80cb-a0f5d3c6cef9", "sighting--aa3790d5-97ac-4868-a899-4111c830c826", "sighting--d3a4691e-ade6-4195-83ce-f350f5f0533f", "sighting--df79468b-f138-47e3-88c4-36328d23234e", "sighting--ab8cac80-4ff4-4f20-8d23-0a6962d6dad9", "sighting--c7b26c45-6ddc-4b5f-a813-a6c3b644d901", "sighting--2876860f-445b-442d-92ed-13365c9164cb", "sighting--b924b01a-2a53-442d-94eb-7665e8ff58a9", "sighting--90132350-4233-4f87-9d4f-71e507d59556", "sighting--3fbd9fc4-7ecd-40df-b8f5-f4598748a009", "sighting--df98f694-b127-45f6-b625-6da88ba1d45f", "sighting--23696b2d-81dd-475d-a5dd-155df7db3584", "sighting--e8621230-6672-4438-80ed-3c79057fa02b", "sighting--0893b907-8fac-46c0-9e5a-9e72f381977e", "sighting--b8983ef3-c896-431d-94a6-48af2651e574", "sighting--5f33f14f-feba-4105-a32e-58dd87cd3923", "sighting--955799b1-93ea-4a3f-8ec6-c7b3ea1db5bb", "sighting--13ba0538-b59c-4e6d-852f-a46480fc9847", "sighting--72d0a856-8e95-4fec-a7f6-c63adebfe872", "sighting--dfb34a7d-c5a9-4791-a7b0-e66b369d3284", "sighting--99442e34-c7a9-4e2f-8b01-fbbc24d90317", "sighting--bae6ebcc-9c6f-48b4-8853-8df911ac46b8", "sighting--3e4b147f-85d5-4725-b65e-b4c22113aaf6", "sighting--519f650a-e249-4304-a7f3-d1e80d1e9655", "sighting--ad79b610-6b17-4611-9537-ce40805f4f5d", "sighting--fd9d307c-eeb5-461f-937b-e8b2da154db6", "sighting--8b5e7d8b-43e9-409b-a4e2-80f9af3dfa59", "sighting--603be566-8b3f-4ec7-a504-02a6cfad4d3f", "sighting--2ca5985f-9531-4d68-aa03-ad81f86351b2", "sighting--b118b73e-2652-41ef-aeaa-df112fddcccb", "sighting--b2278f1e-3ca6-4d10-bc4b-e7eebbf0879b", "sighting--b1ac4472-db4a-4362-a1b0-3e84918b566c", "sighting--ff65284b-e9e3-4be3-8bcb-da34b56627cf", "sighting--d11e1061-55d1-46a6-b1d6-d08bfa0c4a4b", "sighting--dfe1532a-51cd-490b-9264-8aa29e7c97d5", "sighting--260e8311-b0d3-45f3-9b71-40e73419deb5", "sighting--9b393345-2085-4cb3-8950-0d0b6ce0c6a8", "sighting--a1989e73-bdff-4751-968d-dea6f068c236", "sighting--8803b0bc-bc7f-4fd2-bb4b-c61e3a175dec", "sighting--787947c9-e588-429f-8bfc-05eac9b17c74", "sighting--5baf5b17-d742-4e5a-ae76-10c8fc829b06", "sighting--74da1e53-317c-45f3-82b0-9dcbedb0bd39", "sighting--c5148d03-92bb-40d2-a8c4-cd2c6e94a2e0", "sighting--230aa8e0-f5ff-4744-aef7-bd9ff90b1617", "sighting--d7931bdc-8d02-49cc-870f-f5a409008205", "sighting--5ea59b4c-578a-4f12-90bc-aa2bda1dc094", "sighting--d9541c6b-4810-484c-ac41-11202c5cd835", "sighting--59377a92-7e94-455a-9911-d7b855d4cca4", "sighting--d731d123-b008-4b6b-80cd-8da34af3079f", "sighting--d10ebf65-5542-48d6-aae5-8e118ef4bb8b", "sighting--4e6ebfed-9026-4009-a058-45e763ced2d7", "sighting--1002482e-2d54-49e0-9ea1-c11c9e14286c", "sighting--441c71ca-a62b-48fe-9c63-40200a6bebb1", "sighting--5963b27a-af66-4184-9683-0b178d61910a", "sighting--96160ddf-e7e5-4905-9682-6b4b16515802", "sighting--490f1ccb-2f3b-45b5-9df0-9b5f5a389c4f", "sighting--722fe2a7-858f-4472-83d3-d93aa86400d7", "sighting--eddcb35a-56ad-464b-840d-599cac432da5", "sighting--d0e2e1a5-d8bf-4e4f-b2b1-95975a0b9712", "sighting--153b5030-6714-43da-a104-1d1898cf4378", "sighting--919f3a89-5a9c-4477-a1c1-64adc08d21df", "sighting--fb5f87a6-d458-45fa-9c9d-c1db1a240373", "sighting--d2197a28-e6bf-40a2-b197-aa21105bdd9d", "sighting--0fda0e52-c18c-4d3f-b77f-c308c6b4b5ab", "sighting--0eca6dbe-1bab-4666-98bc-8c32395463b0", "sighting--ead6a870-4a0f-485d-a1ce-f1097a8e0a84", "sighting--bbd8e04d-0a6a-4308-a818-5f4a6aea3cd8", "sighting--1f94cfcb-c42a-46c2-9639-baba3078fe9d", "sighting--d5dd2d1a-43d9-4a47-af0a-813e7e19c194", "sighting--1db1d031-e974-47e8-a720-3b4cf23a3b39", "sighting--83dff472-a9ba-4457-8a29-5600c038a617", "sighting--e5d488a1-7818-41b9-b22d-b3ac9dd64ee6", "sighting--010512c0-f57a-41f5-ad2c-060b73513785", "sighting--2e6502c0-e93f-464c-9008-e129d8defa0a", "sighting--94525c9a-8a23-4617-aa76-1ca63ca6923f", "sighting--84e984b4-3488-42ad-8844-3996a7b7e355", "sighting--c626d2cf-6bbc-4b4b-bbbe-7e9e0699330c", "sighting--8da268ea-a533-4806-8013-5f2592fc811e", "sighting--b4998d50-c193-4546-a4c3-0f023a0285c8", "sighting--de656971-455f-41ec-9239-950bf8b61fd6", "sighting--3cb5252c-39e3-4369-b899-1c7c7a666da0", "sighting--ffb95870-495d-4eda-b50a-a542c759efc0", "sighting--ef7d1f49-4b30-40b9-9b23-dcf8bd1808dd", "sighting--3ca1a796-cf76-4210-aa66-ed2dcea2f69a", "sighting--8fa08119-07c9-4186-8bcd-f4cb513712b5", "sighting--873b85ce-7605-44c6-9e17-b58cb9c28e9a", "sighting--5dd3a22c-8628-4c97-aa7e-8b3efa63ecee", "sighting--a98a24c6-c2f1-49eb-8de8-ff4b39956d88", "sighting--1e705c9b-fabd-4773-ab60-253cced839d7", "sighting--cd5fcc56-37e0-4f87-aa7c-4ca307c346e7", "sighting--c66d86c3-a14e-479e-828f-b2e0ad2402cf", "sighting--f022f7c2-414a-4449-beb6-0b6dc5b2ca36", "sighting--c312a00f-79b8-4dde-87cc-aad3ccf4d037", "sighting--c2d9dd29-d76b-433d-bb8b-82750a22abcf", "sighting--2a14863a-081a-443e-a577-9382fcaf4c72", "sighting--fd90dc4c-18bf-4452-95c3-30258ed6d144", "sighting--139a82b9-36ee-42ef-8900-a9bd3c51ee55", "sighting--da850a9f-0a58-4b8d-9d70-5856c633848c", "sighting--b93cc12a-3cc2-4fb7-8113-aa7273a9e52e", "sighting--0dd0e7f3-b00d-47bf-9515-ca0401bc64e5", "sighting--a323bc17-8e66-441c-97a9-c24015f04f03", "sighting--8d665894-395e-4bc5-990a-7c3f83754e06", "sighting--aec817ad-bc6a-488f-a503-fc7f6e9b821b", "sighting--ab25ee72-bd24-4a90-8cef-dd3e8e4447c1", "sighting--8b540da3-103f-412b-9241-5ee79e42c2b1", "sighting--a164f850-e250-46a6-bc4b-046c363df7aa", "sighting--8d17d716-9d35-4cb1-859d-55547aca8236", "sighting--39250f99-2f3d-49dc-bc31-8da261e106f2", "sighting--3878da50-85b3-4816-acd0-023907049e30", "sighting--7481adb6-ee08-4328-80ef-944eb0486e99", "sighting--b1a0bfd5-f93a-4f06-b086-28b2ad7394a8", "sighting--7d98c93d-0669-4d3c-abad-45307a02e89c", "sighting--a272ee10-5f6a-4e38-a7ca-995d8d0e0474", "sighting--430d4df6-f80f-417d-a8b3-52cfb69db798", "sighting--aca75eb7-7cfb-4600-aea3-3faad504cee6", "sighting--e1764acc-dc3f-4dc2-9190-caa8b63f8d6c", "sighting--9c5a0217-187c-4c57-bd94-0c66f10ed1a2", "sighting--30694860-d346-4ef8-91d8-d6f6e979b53e", "sighting--ada1a49b-5e47-462d-9ec9-184e7eb5cd9b", "sighting--fa62a4bf-1236-4ac2-b798-9aec209f27ab", "sighting--ad6a6386-9341-4186-b86e-2b984612cfb7", "sighting--8953568f-0910-45e6-96e9-8ad07fc2d2a4", "sighting--2ff0f533-ff7a-48ed-aedf-1a7b83dead0f", "sighting--085f9d7f-aa15-4eee-ace2-ef1afeca8a30", "sighting--83a8b899-b5a0-44b4-ba64-272f8edb7dc8", "sighting--208a77fa-cb16-4f3c-9769-290afe29ac5e", "sighting--d32b5712-1b8e-4ce4-9564-2a7a33f7ff91", "sighting--3c029b1f-3e85-421f-add6-d8dd31d3f918", "sighting--58d6e293-fd01-4d2e-9530-29566e5bfbb0", "sighting--7415fc73-ea5b-48e2-97c9-aa4609d0a108", "sighting--47ec8122-9879-4782-8dc1-c6930b0c5c5f", "sighting--3dd2ca0e-d534-4e6e-ae70-71cf867f7312", "sighting--a233c6cf-a36e-40b7-a44c-75f2604e8122", "sighting--854cf533-5fab-4f6b-b05e-f19818fb7374", "sighting--88b7be40-fd10-4f7e-a4c5-af66c321b586", "sighting--9499d348-9a35-4e33-83e6-b36548500282", "sighting--5e99e426-d780-4e7f-859e-53f8e1f43a17", "sighting--a0569cde-25a8-417e-b321-4a8e1c96e489", "sighting--73bdc85c-88dd-4318-8fa7-682d34165395", "sighting--560cd1a9-1126-480b-a961-2a7e6b371102", "sighting--c53e5588-9122-42cb-bc57-11a9be8adc51", "sighting--9a88fac3-4c09-472b-8199-b0656ea9f811", "sighting--d9900563-1f27-4a16-b29b-6fa4f7941054", "sighting--bc1cd2f1-b90c-4707-b5fb-1a7100cdffbd", "sighting--2a92551a-d416-41c5-8c42-540bdd26d856", "sighting--67353b91-552d-47e6-9246-f0b2a1bf24ae", "sighting--c4a3be19-2aca-4b7a-80ef-4047504745f4", "sighting--16ee7a4f-4171-4e33-ada8-758bc68fa15e", "sighting--8335e92e-6ba5-4ee8-841c-f99b802a4520", "sighting--f48aeba6-2c5b-45ec-a95a-b1c1d344ba7e", "sighting--5e525c89-db6d-4d18-a19d-0818ca333008", "sighting--ee7be80c-666a-4f3f-9a9c-8065e7302531", "sighting--6869a1db-619f-444c-87d5-b6eab1f98f8e", "sighting--a497537d-823f-42be-af66-4902a096b191", "sighting--addd58d4-75d1-4171-92ba-15f871705c63", "sighting--3a4d60ea-8860-49fe-a937-8b856f97bfa9", "sighting--20b1f876-6d4a-4feb-9ca4-d1909d262093", "sighting--3c7389e5-914b-4829-b78b-252193de5bc2", "sighting--a98bd6c2-8dc8-4e1f-a062-25a830458185", "sighting--d36ef166-c985-4b63-9863-bb2345bd12ba", "sighting--4c20b478-0a33-4889-84ca-8bca3b57f476", "sighting--4093e93c-c58f-47ce-94d3-974ca5d9a30e", "sighting--f7859cb5-af74-475a-9f00-f9fbe44c5aef", "sighting--48aced85-c667-4e89-b1c5-27a002031c09", "sighting--39099b05-ca38-465f-836e-2726eb4b64aa", "sighting--3773ae49-ea41-4dd3-b9bf-5b3bf065f305", "sighting--2c876fb5-69e4-47a4-a8e8-f850b3f21285", "sighting--87640785-1a3d-4c67-a3fd-832bc31290aa", "sighting--be1aef9c-4cb9-42e2-b82e-511429f7befc", "sighting--5fe466f5-6ed2-41f1-936b-4253143e1ffc", "sighting--b368f339-e079-44eb-b658-a85d615b2f74", "sighting--cdc03607-8bf6-4e55-87f7-7f58f3eb03cd", "sighting--b6c032ce-a217-47ec-9048-7cba922c9ec7", "sighting--130f3575-7057-4a0b-bc80-c171b64dd639", "sighting--7460a068-f53e-4025-88a6-a8b67488175a", "sighting--e3cb3dce-1cab-46ff-ad0d-d74fad1301cb", "sighting--23c4aa7b-20e8-48de-a19a-95c7fa0c031b", "sighting--2f7378db-0e23-4d7f-98d3-6c98480bd57f", "sighting--5c1eb29e-e2c3-41d6-b5e5-64631a363bcd", "sighting--c392f8b8-b1e3-4f69-ad0d-e5773e35e86a", "sighting--d3d3b968-3f77-42a7-b0cc-e117b38e2645", "sighting--4fcdfc02-63f2-4ea1-9f39-2b4cc9e7296c", "sighting--cbeabfae-59d6-4f5c-80a4-79e85a4c129c", "sighting--41fd9873-ab0e-4b82-8b0b-f6ba541de5db", "sighting--f51c22de-f5ec-46c6-98e8-5e86567f46e7", "sighting--2f135a2c-542d-4a56-b8b6-0952e5630b7b", "sighting--681be1dc-bcc7-440d-97e3-b309e230bc54", "sighting--fd500f1f-157b-47f8-80a2-19106b5ca34b", "sighting--584e418f-40da-40ba-9bd0-6382b071fd4d", "sighting--42bc9152-6f82-4330-a3d2-b102a5ae55bf", "sighting--95c9b299-270d-4b8d-95dc-fa89e7c8d248", "sighting--3f2784a2-de86-4c96-ba7e-15117189c021", "sighting--48953d2b-4c4e-40ba-80c0-ba7294911409", "sighting--9c808201-9a8c-4021-96ee-d2ab9b96a4b9", "sighting--96fc84d3-3641-4202-804b-876ec7408ffa", "sighting--cf4f5852-12f5-4697-a124-99c7a8488e1e", "sighting--6eb06f58-a9b0-426e-b1a2-105ed21158ce", "sighting--98910ac9-55e9-426c-91a7-2f54a82301da", "sighting--493d103c-97f6-4698-87b3-43880d3cc2b0", "sighting--467ac305-1b1a-426d-b003-23edeec3e213", "sighting--dd7a2aff-9653-446d-a373-47b19088ef57", "sighting--1f30fff7-e8c4-4220-9594-aae4786e40d9", "sighting--0cf8edc2-d902-4c50-9a85-b34392b0cfb9", "sighting--5650592a-78c3-454f-ac2f-565091bfd43c", "sighting--892c3dfb-cc11-4b31-ae6d-0d2399d476b3", "sighting--38cc8a1b-0345-448c-b642-6a4e7d84b821", "sighting--c6735751-8c2e-4d0e-a93e-8949277c0478", "sighting--e56fa186-e955-4fff-a853-efc65f98f506", "sighting--d742a40c-b858-4ef2-9747-bec73295795e", "sighting--c2fed850-6e7e-471c-88ab-655830870c1d", "sighting--05034f6b-ece5-45d1-bb8a-ee18ad77c420", "sighting--68a2f863-3f55-4dc5-9c0f-e965f868685e", "sighting--d9ed510d-3af7-4da2-9753-beeb8729a2cd", "sighting--fdf0ad55-dd33-48cd-bd4f-98c9112adaf6", "sighting--041c14f1-090a-470c-8369-dd751fcc6ca4", "sighting--53fa4f63-aeaa-481a-9fc8-56966400035e", "sighting--2dfcf97b-b061-4271-b080-e0c720168e8e", "sighting--ed93a0f9-4350-4602-9bcb-337eeb5d79cf", "sighting--74879ef3-ca20-4dc0-a78c-bec86df7dd2f", "sighting--fc7a1978-24ef-4fbe-8c70-b746832c651b", "sighting--5386e239-369e-4483-8f50-e9bb74c5c695", "sighting--162dbf4c-df2d-471a-bb38-5adcb3f64a61", "sighting--ef08396a-a3b9-49a0-9207-bcead2f1f172", "sighting--6762cf40-7710-474e-8dd0-3c7ff2075f7b", "sighting--da4d952e-026b-4da1-b535-b9fd217e9047", "sighting--f48242ce-fbc9-48c2-b525-7f7caac2d996", "sighting--3942004f-9f7f-4af3-ad78-d8591fbed8fd", "sighting--daed2cda-e11b-42ae-90c1-f4230394c9c3", "sighting--46594030-1993-4ffa-af40-3d7b1b0a13b6", "sighting--cb0fb570-614e-4414-bf5a-b3fb857a0442", "sighting--7531cca4-ab69-4392-9cc4-d87d10bc2b21", "sighting--d1ab2eef-363b-4ed9-8a5c-560fe6ed4c50", "sighting--3a58476d-4190-477c-902a-0bead2bb47f8", "sighting--5cffc30b-a68c-4008-97d7-615632c3e3dc", "sighting--f93f1c72-56cf-4274-85eb-76cf8e31763f", "sighting--5850ebe1-b24f-4c93-a9a6-07da4f3cb792", "sighting--1f558c9a-b0a0-4f1d-9fc5-449229ca8779", "sighting--9a1bee16-e592-454b-bf7d-8914bbd7ef9a", "sighting--09d6abbc-538a-47bd-838a-61536baa349c", "sighting--8f8a2c8f-125d-4749-8ac4-11eeb526a139", "sighting--72061d43-0473-4ed0-8de0-e2f9c2d729bb", "sighting--f9b66c48-6982-4329-b772-1fc18a7348da", "sighting--ae1086e8-0b1b-4dde-9dca-e2f8a77a77be", "sighting--272aa070-d4c7-4127-a30d-15ec2dcd9567", "sighting--bf47f16c-44a3-4064-b53f-fad61dcaf041", "sighting--0ffb313a-7e33-438f-b0da-291f3002c349", "sighting--0e2d1da5-a986-4d1f-8092-64088d44e37f", "sighting--de9adecb-465e-4913-9a1e-8caff766ec29", "sighting--a8240f3e-b475-44b0-a681-ad6249291daf", "sighting--eca94b30-87ab-41b4-9437-e0c6e9f5e59c", "sighting--91dfa51f-763e-4da8-9417-9e5fc10680a8", "sighting--07b734b1-f019-4fbe-b229-920ecf23c382", "sighting--2d05f2cb-30c2-4d42-aadb-4585e5c4938a", "sighting--84356ade-aa1d-4e1b-afc6-86ae80d19edf", "sighting--7a6b49ab-4195-4573-abdc-42fe48dc1548", "sighting--46711252-271d-41c1-8198-a590dcdafc78", "sighting--512f65b3-82b2-4e5f-8ede-17f463579501", "sighting--a9eaa559-358e-4a71-9c0e-fe71251e13d1", "sighting--eb5b0e26-f18a-4472-9f2d-e2cd11ec1ade", "sighting--a925a4be-60f8-452f-be53-89ad9571eb39", "sighting--4276a2d7-eb7a-4c9c-80ea-c1aae2089f78", "sighting--9f95b960-bbac-4830-b9b6-e0fe7f6a91a5", "sighting--c1c3b264-432d-4df3-b4a8-224b3608970e", "sighting--4a9dff25-466b-4f78-8470-f6731eb68bea", "sighting--0ba3f839-d4b9-4c5c-aa45-493c3024915c", "sighting--9c463ace-fb76-4ffd-ba5f-4a751cd132df", "sighting--b602323c-f64b-4fc5-869b-34856d365e80", "sighting--b1a21902-39a4-4421-8279-1a55e37cd90e", "sighting--dcac3842-bcce-481a-bf4b-3d772055264e", "sighting--bd41e0bb-64f9-40a9-9e71-c2cf39881de1", "sighting--825438a2-82e4-4c75-962d-8c592da8ba0d", "sighting--5be695e2-5d08-4cbb-b6b3-6ef87140daa4", "sighting--b98e5fd8-aa18-41d5-b108-c9d7296f1390", "sighting--8ffc1cae-e527-4192-b42c-2fb4adeeddef", "sighting--264340b0-9fc5-4f64-b5b9-ca55207f097a", "sighting--9e9b667e-5e00-4e5f-a335-14dab8c092fc", "sighting--e20151f3-998f-4ea6-bad7-aa1f47a1386f", "sighting--a8019294-f6b3-4322-9288-851691f7b1e1", "sighting--d8525847-ee9e-4f38-8727-d22f01a6d2f1", "sighting--687cd8a9-216b-47dc-9eb1-084ae3e7cf36", "sighting--c72b06c2-c515-431d-bea6-fe64a9dcdef0", "sighting--d51b5ce9-ec71-4775-a242-cfe412b69689", "sighting--2ca79a99-0787-4289-af02-d3873a99023d", "sighting--941d0ce6-24b8-493c-9093-cc53dcef91d8", "sighting--ec7538be-1896-466f-9548-7132bdce917a", "sighting--213c11e5-9b84-4798-a67c-e085ca3b5a47", "sighting--b02f2c65-2845-468a-9aa0-5d4c95fb512f", "sighting--e57a4e4b-a3e9-4dfb-b64e-1ead8459427e", "sighting--bdb634f1-cf52-4b13-863f-736b92e76852", "sighting--50775b1f-a19e-40b8-830a-efd9052b8f81", "sighting--1fdae92f-9c5a-4ab4-8ebc-66b1fcab527c", "sighting--0922c2ef-8a72-4421-b425-92f1d061e44c", "sighting--29d3bad7-5b01-4225-9806-aca448eac2a7", "sighting--80cb7d68-330e-4244-863b-21da8d1c6fa4", "sighting--aab5c9b3-cc73-425b-92ec-b6813a45d26e", "sighting--6fe75110-b74a-406f-8f72-0086023be4c0", "sighting--b2139a56-19b7-4cfa-ae6d-8c56731d0cca", "sighting--703a86c2-f91e-400e-8ac5-81d568c030d4", "sighting--28b5aea3-eae4-477c-a9de-e487427e7ffd", "sighting--fb791587-69c7-44c9-972f-6659b324a550", "sighting--286126f8-95de-4d4a-a95b-0b83a9991bf2", "sighting--1b813f33-2537-4d60-b18b-cbd29ddd18d0", "sighting--c0b14ca1-b1d6-4015-84f0-c8c1aad2ca8f", "sighting--285edbbe-2bf8-4350-9c7e-bd8c28250f8c", "sighting--69f32c1e-95f1-462f-a816-ee5f708091ba", "sighting--0a9adb3c-421a-4f76-a005-aeeeb9d2527d", "sighting--6eaa9aa6-4df1-4b62-8976-ff17d376d6ed", "sighting--701a5f22-b92d-4ffb-92a9-20b92846892f", "sighting--1d89c771-2aea-4dcb-b6e0-b75572389cd8", "sighting--cc03e594-3bf0-4230-8c6c-d25b9433a3b4", "sighting--35f6d31c-ce4f-4050-ac04-1781d47270c8", "sighting--e5c6ee2f-b823-4a95-ab7e-557de593093d", "sighting--01cbd487-a16c-4338-aa20-f905b1f66490", "sighting--a7ba50f6-88fe-47b9-b9f4-0d768d2fbb95", "sighting--41d19ad9-563f-4435-a0a2-6a7b2e38d828", "sighting--9f232646-6aa1-40bf-984b-fbb36a8823b8", "sighting--08706d72-8389-4649-b72a-2549d0921598", "sighting--cc3adf09-6f3b-4358-aff1-98703a022874", "sighting--fb4c0d58-f976-40d2-b76d-a704b97beb8f", "sighting--328f8cd3-0668-440d-8683-ee9ba055daf2", "sighting--b158db1a-8adc-4d46-878a-24e4da87b88a", "sighting--be0d4e33-e688-4f66-8e7a-63fa0a2502f9", "sighting--d23d12a9-7438-4bc1-92ed-776eafcb2a3c", "sighting--b65e0a46-9c45-432c-ba67-8e565f482ccb", "sighting--70dd79f1-997b-4bd7-acee-ab694b98eb2d", "sighting--9ae393b3-adbe-4b6f-9be4-6105a4c136bd", "sighting--4c97fafb-bae9-40f9-8f69-3ac0dfd35442", "sighting--1ebb642d-83ba-4da3-a646-415f87d3576f", "sighting--20fe4402-450f-40a1-b8b0-a5e504e179b4", "sighting--3de75908-d032-41f4-80da-f396d036b9c6", "sighting--49685184-0b16-4401-abf8-fbeba107afb9", "sighting--7bfd04e8-cced-4403-93fd-adfe3b6a9e72", "sighting--e7144728-456e-4ebf-9935-f9a5516f5033", "sighting--79921cc4-52fe-4060-86f4-13ccc28bf01d", "sighting--cb59169b-8290-41c0-b0ab-669ada8f37c9", "sighting--5d2440b3-19b8-45cf-9d9d-45ac08070f1d", "sighting--94e398cd-2a21-4f1d-b149-4f79eb6a99ce", "sighting--8c2e5aa0-adfe-487c-b59b-bd9090ed364c", "sighting--fe05d490-724b-448d-8364-1bbf9ff0be17", "sighting--7416fbdd-5220-4003-aada-bcc7f494f6b6", "sighting--b3b1c2f4-cfe2-49af-b6df-5d66557dcff6", "sighting--2a352162-c791-4f7f-b846-0391a4a6c126", "sighting--0a4d79b1-9352-40a7-b57a-bfa6413bd6cb", "sighting--0dcf25f3-30a1-47b7-be98-525594758786", "sighting--bc9a8465-1f02-48b7-89ad-0fdbc18f9b87", "sighting--cb960b2a-5ea7-4416-94d1-0e1935166e40", "sighting--6f4736f5-3c44-4f77-867f-159a7c7113ba", "sighting--9d779b6e-56df-4d6e-a5f6-2751c10f5a47", "sighting--093662f7-cffe-45ac-9c77-94ad4bb9bb65", "sighting--94c01281-bd4e-4aa7-82cd-b50a68842354", "sighting--eb6f39c5-6204-46b6-a9b4-189e9409cddd", "sighting--41b651ce-a8dc-486f-93a1-5f719314968a", "sighting--dfcfd19f-8d1b-4df1-a07a-13f79a9de554", "sighting--ee50643e-60c7-4071-9a4f-f109054bf74a", "sighting--44e86366-9783-4626-a3d8-7f8c3924bd79", "sighting--d679f67f-117a-4ee4-815d-50bd4a74717a", "sighting--9ff57275-b6cd-4b06-92aa-a35235aafbb9", "sighting--b96f2448-f032-45b7-9ddf-ce7013477248", "sighting--af59a1e9-686e-489d-b2ad-08b12f15d899", "sighting--4667f6cb-1789-421a-9091-bc0ef00731c2", "sighting--e790abe7-07f0-487d-a06c-f5889bee797e", "sighting--7c379545-78a8-44fa-998d-afbcb1a48712", "sighting--0b73de65-f2af-4009-9cc8-b31ca87bb837", "sighting--284e69e0-9a19-4489-b87d-14e7c2372324", "sighting--6567b88a-a4a0-495d-9925-de22f26f29f2", "sighting--d23364e6-3867-441e-b15c-671a8d7bc8eb", "sighting--ecf17edb-3d09-4b57-a33a-5ed718cfba5a", "sighting--55bae44e-ceb5-4c55-b2e2-6901ca521189", "sighting--452fd11c-4cb6-4733-92bc-02950f8732f3", "sighting--15bf146d-7d64-4adc-bdf7-41fed28b9acd", "sighting--a7cd74e2-578a-449a-bd81-c7277f4cd6fc", "sighting--1ac0623e-e0e5-4d2c-bcdc-c97ae81c73a0", "sighting--d5dea570-73fb-4eec-bca1-993f2b6c7701", "sighting--137d71aa-8fe0-4cad-9b28-d95df19f43a3", "sighting--6838b104-d7d4-44a6-b105-f93ea471afea", "sighting--c7898c4c-c8c2-454b-94a8-2173d402d119", "sighting--87ee4822-e57c-41ce-a07b-582815ccbc59", "sighting--fafed1fd-6e44-4278-9ef5-c8999c525e39", "sighting--d7f55d05-a3af-4445-a8d8-d6d6bfd7d3c1", "sighting--78d8bffe-31aa-403b-aa9e-ffe18def65ea", "sighting--520fa7b7-7ef7-4029-9f86-3ad1b8b14a2f", "sighting--0426cf8b-f858-403e-a4da-15522a37213e", "sighting--49c76bb8-b2f3-484e-a343-058d0698a35d", "sighting--41d20678-26e5-48c4-86fe-ac0fe5c712d5", "sighting--5a1cd1ff-3e8d-4927-9146-68103dd676a4", "sighting--9e4fc4c9-4b7d-4bb4-a3be-680606c1d8c0", "sighting--a3d1e5c6-dcf3-4ae3-b933-6eb6fd76ccbd", "sighting--0b054015-1a9e-4794-89de-829e98192d8c", "sighting--8e49fafa-7078-49d7-868b-2e5c1a7e526d", "sighting--f4bdab5d-d402-42f2-8f94-f565bbcc6feb", "sighting--dde01a98-8573-48d0-84ec-4756c52a34d2", "sighting--586170c5-7e8c-4c67-9167-ec47af741158", "sighting--108d13f0-5270-42c8-b93b-73cba898a0ac", "sighting--08dd3b8b-6cdf-49f3-9a79-7d4b8fd6fde4", "sighting--0ca28213-8da7-4dbd-9a79-30c21599424c", "sighting--739f076f-d763-4167-ae75-91d4f1387253", "sighting--dd58f465-aca2-4dcb-9166-8674ca6c01f4", "sighting--7f35e891-d81f-4027-bedc-5865f1ece19a", "sighting--26dbcc29-3333-4578-a605-4cb34e610be9", "sighting--4740c88a-ac70-4c53-8b11-d414566a60b2", "sighting--89fa4460-09f9-4a92-80c8-1d8bc217a9f8", "sighting--d55d2461-c9ad-4d0e-8426-116cc169c337", "sighting--93003c3b-936c-43c8-8d9f-525741aecb49", "sighting--0fc992aa-b24c-4111-9745-56e97a821a51", "sighting--fad9eee9-4d5b-4a28-b88c-611031663376", "sighting--c8cfe7ad-b31c-4120-9e8e-759478f9ab73", "sighting--2b3ac2ad-5b70-4ca7-b03e-aafd3407717d", "sighting--c5aee986-b079-44ae-8d71-d2cdbac8c2ff", "sighting--e164722a-acc2-429c-aaad-a809668c0c01", "sighting--ecb730ce-6303-40f2-b54d-a4b25e5499b5", "sighting--2b1e8301-6752-4c7c-b018-659d7dfc4b5a", "sighting--4a2a1414-3ce1-48c7-a181-e8e30af82ef1", "sighting--c91604ab-4863-4fe6-b048-4da41fb96ff9", "sighting--17962ca7-8829-4303-bccc-df4f3af1dd70", "sighting--cdd9a66b-ad54-4877-8878-8f7d907691a5", "sighting--d4ba7764-4be2-40ec-844d-4b20dd8274f6", "sighting--59098d86-9a27-4603-a645-bc085c324225", "sighting--5907d710-3d17-4b7a-be22-ca87185b802e", "sighting--acf34c71-5870-4584-8bd4-3969730cc159", "sighting--a20b5109-4796-462e-8474-0da2d495fcc0", "sighting--8de8c81a-8abb-4549-92ea-7b8fce2942c9", "sighting--7f951fab-3a9d-455c-848d-ff18e13ab077", "sighting--be39f332-5ba2-4779-8f66-9aed7ebdb73a", "sighting--4c5a6c13-2926-4d18-836e-d4b158a5b9ed", "sighting--678ebecf-18a7-4156-a9df-bf60a4369946", "sighting--7c67ae5c-4bc5-4e76-8b7f-f05322c42ad6", "sighting--af306690-de8e-4245-a457-68f5b6861f59", "sighting--d2ebf266-a728-4923-9eae-ad3e03b76993", "sighting--4c13e25c-225d-483d-bb6c-4b03abbdf8e9", "sighting--516e8552-d1e8-4b4a-9cbb-4b505bb04d96", "sighting--60d8dcc5-a7c3-4373-93c8-8fbf134077fd", "sighting--bdc3a319-6ecf-4e41-9b7b-5a569de0fbc6", "sighting--849bcc1e-4307-47e4-a1cf-c8fdc90cf872", "sighting--4ac7ab21-396c-420e-84a1-01ecf0d3ea0e", "sighting--927b4f20-f49b-4779-9a85-bb78989cbc8e", "sighting--f416f458-3d24-40ad-a762-cd30c2fa6a59", "sighting--778ff436-2dcd-4179-9f1e-f59720888bba", "sighting--3855247b-40ce-4262-9feb-47e3b1b262cf", "sighting--ad1c85dd-28c9-4e66-a0d8-8221e39827f7", "sighting--56ef8c6f-1c89-41c3-bd5f-681b7d27b823", "sighting--698ab6e8-1239-4679-9bc4-34b3f4228f96", "sighting--70eea65a-93d9-47d0-9497-8494b07c9541", "sighting--1e5d6622-93d7-437d-802a-4997dd51653f", "sighting--ade7884f-4c59-4f13-bcc6-883c85f52026", "sighting--e7416ef7-92fe-48a3-bdf5-759b56aa9d93", "sighting--03097fe4-00bc-4ac9-9e07-54d30c58c2aa", "sighting--14cc8e9c-e0b9-4386-8fe7-e64f556506c8", "sighting--24603ac1-9f43-4f28-9ded-ee480240c356", "sighting--08a15ab8-75cd-4128-99b0-b580f7f7cfac", "sighting--83332a30-bc41-4f7d-bc1a-4766e5db192e", "sighting--24bcdf1e-80e4-4d7c-b98e-1cd01aa4bd48", "sighting--396fd4eb-c014-45a9-ad01-0a433602f438", "sighting--dd27e10b-b8a6-4df3-a794-9f84e7cbca5a", "sighting--90c59c50-8b9e-4065-94a1-34392701fef4", "sighting--22b43d75-0ac8-49b6-be32-5d4df1e35a16", "sighting--5eaf7b1f-b10b-48f7-9548-1f95f7d51fd6", "sighting--72670e2d-cc5e-4383-878a-db522703a9c6", "sighting--fd8963f0-2812-4977-b5e3-07a505df064b", "sighting--757b1292-8cec-4ee5-8405-1b93635004c7", "sighting--5aab1f77-5ec1-4b46-91d8-e0fa04b5f66c", "sighting--0b7dd54e-3aed-46ac-bf40-0747832ed82d", "sighting--e9f8ad34-c5cd-4cbe-af98-f29e6e0ceab5", "sighting--6fbadf41-8f70-49c6-9144-0b49c76ec5d7", "sighting--dd381a67-37ad-452e-94a6-b3095e2ecb64", "sighting--4cadac79-e66d-4e2a-8bfc-e0bf87a7c9f1", "sighting--13b27627-d770-4526-a3f3-36914adbd76c", "sighting--61cd8ba9-b1cd-44fa-b231-e7173e451d6c", "sighting--5607b7ff-10cc-453c-aaac-433c0ffce138", "sighting--139a0fdc-aa26-4db7-bbd6-f540581fd7c9", "sighting--787b7105-be30-43d9-9924-89821616e6f5", "sighting--9f09fec9-e2fa-4269-9629-f1e0e9a5cb4e", "sighting--d5d2e2e3-6443-4432-973d-f6729dade6bc", "sighting--2a318f58-dfd3-494a-a1f9-8703ed12be29", "sighting--1ef6cf00-d6b6-4441-a16f-37ae6749ee63", "sighting--cd446c47-1fa0-43eb-a84c-cb33e96ca400", "sighting--3324c4be-48e4-416c-aac7-01b0c4022dac", "sighting--584e9c5e-aeb2-495d-adc0-ab4bfce52269", "sighting--eb261291-0c85-49cf-8aa4-ab2576aa923d", "sighting--85204138-e21e-44bb-b4c4-9269b51d2514", "sighting--8ca73624-5393-465d-babe-54b2eb302132", "sighting--eb91d045-285b-4b27-82cb-e07916f3b9ec", "sighting--6ad1a6a9-45fd-45e7-84ff-79f51fd5fc84", "sighting--b5b871fb-fb9c-49c0-bfa1-7c40c9ae80fb", "sighting--0d7aa98e-a8d4-4412-b6ae-2d5be89b0dee", "sighting--e87d4aa5-7e86-4e70-861f-d556920e968f", "sighting--0fa8006f-9009-4e3d-8028-d58c2377bdd1", "sighting--cbbbb530-57f6-4b3a-a01e-1d021cfc0a40", "sighting--fc802326-96c6-4cc4-b829-6d178e565ff4", "sighting--837485ae-c33e-4271-b01a-d91abe884991", "sighting--45ea3f7f-c1ea-470b-bdf5-096aa5713d80", "sighting--d7003ea1-5103-4365-8958-196844d67a83", "sighting--a12505db-2c5f-4a3d-aa3e-4d39088ac189", "sighting--c1e0ed80-c29b-48c6-b6fb-1847b799f829", "sighting--068ca79b-8779-4b5f-a527-5693960b954c", "sighting--950d53a4-b884-47e4-8c44-81fdeea929fa", "sighting--e667598c-118f-4753-aaef-c2593cb9790d", "sighting--e78ebee1-b46f-488b-a28d-470d222b0115", "sighting--acf2ae46-5f93-4f9d-b86f-8579cde4256a", "sighting--9252b6b9-3b20-4024-ab68-6e76dbb5bdcb", "sighting--858ef50f-33d9-491a-8562-272afeafd738", "sighting--137c0ee5-bcfe-4c37-8529-eac61abcbb60", "sighting--a81a84ae-aed8-45a1-aef3-a1e5b8c3ea3a", "sighting--4c01426b-69d7-4992-8698-625952718cf1", "sighting--d5ad8b95-9a61-440e-a615-cb7c8395fc62", "sighting--0a2d5982-e751-412c-b464-37f08a26d0a5", "sighting--940819e4-9525-406e-ae9a-f45c3fca5f4a", "sighting--db35c91a-914d-4494-8032-9473bffeadcd", "sighting--fa1b72ae-9d75-433d-bcb3-6c32e5b2d110", "sighting--c58c8602-1b51-4238-8a11-fea0a546f886", "sighting--978ae1ab-efdf-4d4b-b553-ca1f9a493ca3", "sighting--96b5346a-b55f-4180-b832-c7bf7cf19128", "sighting--6f5dd87c-373f-4928-a2dc-5ad0c0a23f8c", "sighting--bf7dda57-0c82-45b9-8844-4488789cb086", "sighting--7500111c-6688-496d-9c66-d3902c8b8e63", "sighting--a713c9f0-186f-45a4-847f-ccd8dcf4ca04", "sighting--ca55920b-1050-4a26-a4cc-03bdf113f9ca", "sighting--8c87889e-c7fa-4682-8a57-ae07b8f205c2", "sighting--8b9ad592-258c-42ab-88e8-6cdf768e141e", "sighting--277310de-c516-4f0d-9312-a489317039ea", "sighting--a3e9d65c-dbe5-42cb-9e35-a0ee28e9f7b0", "sighting--0f247403-cbf8-45bb-ad0e-88b1712f9961", "sighting--f5520b5c-6dee-48aa-bcd6-4440ac1ef617", "sighting--5b1dfe2d-df7f-4155-b66e-bda07b67730c", "sighting--f9b74dad-bcb0-4c65-a7df-3e5f268dda14", "sighting--6f4f30cc-5e4f-4875-b730-3df47366a043", "sighting--8fb1e52d-8191-4a57-81c5-dbe14becda7d", "sighting--80026df1-10f1-486b-bdf4-322a4187046b", "sighting--8f973c6c-b120-4c21-8638-4ee88d3da770", "sighting--c3b10d1c-7ab1-4ce4-b9c5-dc3332087526", "sighting--ea554a22-aa4c-4b76-8269-59dc7131de17", "sighting--aff0fe1f-eb89-4344-bf95-0153d7ee486d", "sighting--9fe9ebf4-2ba6-4901-b9aa-2bcffd8cb7c2", "sighting--e8c52802-8400-4c60-b8ef-2d8a206af0be", "sighting--52171464-bf13-443b-98ad-141c64b30289", "sighting--012a7210-faad-4268-951d-cca9e898adc2", "sighting--2532aa1e-7e3c-4915-9906-6efbea238481", "sighting--64cdd57a-9b8a-4d2f-96e5-4d9248a385a8", "sighting--48273a2c-2cb1-4e05-85b9-c467500d7a3c", "sighting--02b8add6-2713-4ca5-ae06-c15d4f68c0a1", "sighting--6aa0254f-6401-4a90-95d3-c78a652f35f7", "sighting--2ef2e6fb-530d-472e-afb3-f119a896a84c", "sighting--01031850-75ba-41b3-b833-1cf5fd398ad3", "sighting--cfd6276e-81e3-46b9-8546-e04af492c731", "sighting--c9c1eb0e-c2bf-495e-a20b-a5c5ab840c91", "sighting--07ca898c-9836-46c0-8e91-5873dab3d743", "sighting--35689116-3c2c-481a-bd10-411f39d2a51c", "sighting--5b4e313c-ff4f-406c-84d4-737512559584", "sighting--66b5636a-0d89-4c05-b9be-ed6aab0223e3", "sighting--5fa919c1-8bc0-40ee-8ae8-b5c0619525ae", "sighting--9e3a7ed8-051d-451f-ad82-2604fcedbfed", "sighting--ce00ba0b-a9ea-40dd-b71c-c325374026a0", "sighting--fcb20d4e-b5cf-412b-ab56-da95b08e3060", "sighting--fcc4e37f-ed30-410c-a54b-df789d674368", "sighting--bf48d17b-e5a3-46b2-b6f7-b15358af0fc5", "sighting--e09bc158-d959-4abc-9c89-6b3acd35c57c", "sighting--09799b26-50a1-4319-a506-143126b97bd5", "sighting--dd75603e-9bb2-4b5c-90d9-7248fb00f1f8", "sighting--0d1a6632-f9ea-4da4-a1a6-e7b306dee31e", "sighting--7e27bf05-515d-4d3e-b16e-32b319eb85fd", "sighting--f009c547-36dd-4bf9-ac4e-c622c824c4e9", "sighting--1715ba08-7739-4dee-a428-b15e8661ea10", "sighting--c1cf72e0-2b20-43bb-ab9b-869fddb81ef2", "sighting--47b1696a-9329-42c5-acca-8fdaa0e7a14e", "sighting--e9948404-7eef-4f36-9d71-6977394661c0", "sighting--b62336bd-02f4-4f62-b154-d730d2413b4e", "sighting--4f8d8375-ef86-4f1c-8893-8260ebc2332c", "sighting--1a76fb8a-9515-4eed-890e-3749338ea1f2", "sighting--00eed701-00d6-414a-8102-20b23c145c86", "sighting--b0baae1a-c561-426c-ae34-27f67cfbdab6", "sighting--7ac80085-0a46-40e5-a998-a3f88a0dd8c1", "sighting--65f6f649-6378-41e4-b73e-df4b4ea885c7", "sighting--aded979d-45fe-49f7-9c28-7b7eb3afac8f", "sighting--817ea89a-090f-416a-b70d-c83c58ef68fa", "sighting--aad90f0a-4f32-47fa-9c85-4fbaf3b24ebc", "sighting--c92251ed-cd78-4a6d-8a4b-14fcab76bf20", "sighting--b5229144-54b3-45fe-a8e5-1afc56be2aac", "sighting--cf7bcfea-e09b-41da-9d3f-94710e9c1fc9", "sighting--0b4c8702-d990-4091-a2f0-a877cf6b8f43", "sighting--575306f0-dd7c-413d-91ce-d46d8e2017d2", "sighting--2588a3d8-8e64-4435-806b-9bd3428528e2", "sighting--8ddbd58d-061a-4f21-90eb-f69bfddaa036", "sighting--0c2e96ec-52ff-4d49-bb3d-743b67ac033f", "sighting--c70743bc-5312-4b20-b8d6-6e3a437b34ec", "sighting--3f65a335-8bca-46e2-b4fb-e5acaf90ec22", "sighting--188742c9-bbea-4de0-a665-34a291e90e8c", "sighting--9b41fdb8-c62d-4fe0-a59e-620f389946a8", "sighting--0644eab9-ea1e-4881-9eb4-29b5a102e894", "sighting--46885a62-b46e-4774-8960-7e8489793c09", "sighting--31e726a9-4479-4959-b04f-7285f5af6092", "sighting--b3113089-1cff-464d-9094-4196e11d4d3e", "sighting--a35bdedd-b421-4487-84e2-bb7f7ec82d70", "sighting--0808a3b6-4201-49f5-8771-36ad5091a329", "sighting--bc9a0a9e-e1e5-4c57-87ee-1031f8cbaadd", "sighting--3f55bc6f-7650-47ad-84fd-a6d2f233b1ac", "sighting--d55f257d-2104-4ae3-a82f-0c185bc82347", "sighting--e2f3c9ae-accd-462f-bdb8-fa39ec697e87", "sighting--1c043df8-0fa4-4120-bd66-0d2c14cede6b", "sighting--1e342eb9-fe2c-4d96-b21d-fbc11966f546", "sighting--5cd10795-b067-4b57-af87-89467efe6da3", "sighting--84a39732-3a9a-42ce-a18c-da1d644393b0", "sighting--6853f61f-38cc-435c-a97f-2d61fcb31908", "sighting--0e5826d9-9cac-4123-ad25-0e10bcf78e15", "sighting--39b56250-c807-4153-87d6-62bed00b4484", "sighting--42966deb-a9cd-4f59-941f-fe7b9d9928c6", "sighting--123d778e-0a6c-4f14-8090-5c3509094e2c", "sighting--ceddc378-647f-474d-8253-0a52b6a0b8aa", "sighting--a9d7ecab-1b8e-44b4-be15-ef285486116a", "sighting--67c64597-9aad-41a3-b3fc-b3c8efe63471", "sighting--238fce35-3227-4b11-aeda-9e37cb12c61b", "sighting--16731664-8263-474c-847e-47e2998a1ad6", "sighting--37d4737f-8245-4573-9e0f-535600c09643", "sighting--41d8fcc3-fa92-4454-8bce-723d58fbdadd", "sighting--10182e15-dd1a-4f3d-b36c-63d565cda28c", "sighting--534948f6-bc32-499c-a58b-dd70f0b3ae89", "sighting--ec838a99-2f95-42b2-93ba-2c2a66422312", "sighting--da4326a1-9f65-4dea-9929-fa986644ee80", "sighting--0461ba94-e697-43ff-9e48-b7fe550ede18", "sighting--c9e9adee-560a-4011-81e1-12095209e882", "sighting--9545275f-ca21-416d-b453-e66b8d146813", "sighting--c394b5af-92e9-40e0-af6b-3862a3e4ff0a", "sighting--ff47b048-bb2f-4457-b0fd-2d99ebe77837", "sighting--de6e8770-5ee7-4972-821c-db1fd852e044", "sighting--39ebd963-cb37-427b-a8ed-fdcb44897188", "sighting--5452ecb3-b905-40b3-8f1d-4a8279c6e130", "sighting--6952d3b7-9825-43bd-968b-6c00b6eb1e3b", "sighting--f5e11931-cc60-4657-bbaa-767ed06c682d", "sighting--93609c7b-eb5b-41fc-9705-2e130140daa6", "sighting--8d0106b8-b84e-4df7-86d8-4c0d05c5e732", "sighting--986e7cb0-e852-43cd-bed4-30cee1392a01", "sighting--a342264b-31e0-4356-ae59-36332b2c3254", "sighting--c1ee0f7b-0bcb-4881-a1f0-a58025bb08df", "sighting--1ee422b1-f906-4791-8745-6bb805840405", "sighting--91565573-e6ec-4279-94d2-7473a68bcb13", "sighting--502672ad-2a62-4f6a-abb2-e990cdb14e9c", "sighting--759dc871-4d51-4957-89ee-1eaa3760e17a", "sighting--f53e1268-e847-4048-8183-f234a524510b", "sighting--1a95f97e-be17-436d-a4ef-b618198fb9da", "sighting--d8845f80-d8fa-4e7c-b063-799d1cc6cc84", "sighting--f627bc08-c4f2-40c5-9480-39e0560dcf13", "sighting--a7b49529-5b5c-4b59-871b-6255ca420ec0", "sighting--2c6396f0-12be-465f-9797-8ff8174108c6", "sighting--4144435e-08b4-4628-af89-8fb54c1a208b", "sighting--6b0956d8-1b36-4e97-bf36-74fe95cf0bcf", "sighting--462cb468-92e4-46a7-9ef0-864bc99a4926", "sighting--b6ebf589-4fd7-4d8a-b231-c6c8c7d19531", "sighting--54c0d1af-c4fe-43c4-b9cd-771534b886a8", "sighting--e35b6f65-f711-41a1-9ecb-dde75ba01e53", "sighting--5d29efc2-552f-47da-8ea6-b08a6db623ba", "sighting--007ec61e-5e13-4faa-a13d-1db0cbddf770", "sighting--abd74606-431b-47f7-b78d-d211c0bf3eb4", "sighting--eed1e58d-c9a9-4a68-8d2f-15bb91f41a4a", "sighting--e39ac970-7154-4b2c-b6d5-58f1e421cd3e", "sighting--f49576cb-b0e8-4530-90c5-a2f694a8eaf8", "sighting--47610a86-006a-4981-8b1a-b68032fabb29", "sighting--c51c34e4-00c4-41db-b7c1-907674d4b586", "sighting--40d3b2b4-f1b4-42cc-807a-d7ba6ed416fd", "sighting--5db60c3a-dc65-498b-90df-5366608c6f1a", "sighting--2dd199f8-6cdb-47be-9927-f57fff5e3bf0", "sighting--26d83db8-4f64-4f12-8b3e-7fb47d5b4333", "sighting--6616917d-7241-453f-90f8-102c31f5c1c0", "sighting--5f6f773c-7fa4-4427-bc81-ab7fd1061457", "sighting--4daf3cf5-8fb8-46a0-a61f-f13965c699f1", "sighting--aedf6220-5353-442c-a866-0d31065bceb7", "sighting--cdacaf57-76fe-4421-bb5e-d55c2b3626d1", "sighting--01ca2f2e-a38f-405a-958b-47bd4eb8254d", "sighting--5d873f8f-b534-4242-b934-12492dec5f47", "sighting--e0dece53-4dc0-4b9c-bb7d-137095277207", "sighting--3446b34c-750b-4c1c-9557-260b07bc0638", "sighting--bebaef2d-994e-4f19-bc50-950080b5501f", "sighting--65280c19-cbf4-4589-ab17-7a9dc847c4ee", "sighting--fc6d404d-ad91-4735-a0f0-66daa7c44fee", "sighting--d9c1d13c-4a04-4fd7-8af6-657e16f864fc", "sighting--12d9b785-c84a-4ad5-8076-fe30af90ec24", "sighting--bb386ef6-a9b0-42ee-a6c3-af66221b9bbf", "sighting--03e50697-5aa6-412b-bde6-9bbcfa26348b", "sighting--2cd58159-79af-4393-8a53-f15f0c20a287", "sighting--e003f4e8-2222-4ae6-9cfa-d08a5fa786f9", "sighting--05762109-dfc8-4809-847a-1e6e02ac0e46", "sighting--906294f5-43c2-4dcc-b026-7f1551993cc3", "sighting--f739923f-47a2-4548-b8e5-0e92aec048f3", "sighting--a99ec0ad-6cbd-4a68-a2b1-38325244b3fa", "sighting--26591429-d032-41a5-ab08-c60ebdad88c8", "sighting--9b9e1088-f45d-446d-8d21-9aeca70eb48d", "sighting--8b4d878c-bd07-468f-be70-1d105c4716a0", "sighting--0c200830-1c4a-438c-adb5-96a162ac65fd", "sighting--082edd30-ed71-4b82-b2f3-688568b56310", "sighting--08c2ef15-2c80-49cd-8acd-7b3c16d66d2a", "sighting--abb497b3-854e-4725-8156-e6cbfd98d89e", "sighting--a8214c7c-60d4-4be0-9680-0a7b268c4e9d", "sighting--ce1f253d-9dcd-4b38-ad28-acbf8e29d85f", "sighting--e8423313-0f7b-47ba-ae76-ef7e8655091a", "sighting--3f88e635-a846-4c66-a70a-fa98f0ab369d", "sighting--fca26f66-7866-4a7b-9fef-8b057b9c1e78", "sighting--edba255e-7caf-41c4-9a3e-687393f2bea5", "sighting--5b357291-9366-4a97-87fd-2dae160d4928", "sighting--3cb80271-3826-4a25-a717-ed8fd62e682b", "sighting--9353ccf6-d42b-433e-bff3-dfe6e6988af3", "sighting--26a3fefb-529b-43d4-b76d-fb6d1d613069", "sighting--523d55c2-df35-4c0b-8336-fadc8d3c3da6", "sighting--ee3fd14f-2ecd-4cc5-b605-137b6dfe4348", "sighting--00979520-dd6f-4c70-b62e-0bea964d9540", "sighting--b70ee6fb-ff35-4478-a4ab-e3378519bc18", "sighting--9522f58b-8bca-4edc-93ab-bf0a3980384c", "sighting--151b345e-5cb9-4024-bbba-0430f388ba92", "sighting--294eb1c8-c533-4129-aa3f-a75b581bbe96", "sighting--8161f559-f998-4841-bd89-e8243c6b2eb1", "sighting--a7acdb1b-e8ab-429e-ad6a-513b718f194b", "sighting--0a173942-db93-4f41-a75c-3db4a21476ba", "sighting--44d38c24-d405-44fd-a344-4ee7a5add315", "sighting--9cab586a-c2b8-45e6-9c06-5cecd86c7344", "sighting--f3c94b54-e570-43b2-be13-108608278ecb", "sighting--567bc918-c01f-4249-80bf-b35e6d6538b7", "sighting--aea422cf-51cd-4176-a067-773801e0d338", "sighting--899edb99-cd7b-4d2b-848c-d37b2871928d", "sighting--fd109458-a30b-449a-af22-1501c6abf401", "sighting--8b76c5ea-bb5e-40c7-8174-f36cfc6a6503", "sighting--ec2de1ef-fe09-4bd4-841a-bd026346d120", "sighting--b08d6a62-dd81-4ad2-bc07-5e65307a8fbf", "sighting--00457d67-d800-41a0-a463-869b6b15ba65", "sighting--464a4d02-f031-42fb-b541-670e45c04886", "sighting--6ef27b2c-b728-43c4-aab8-135dd503098c", "sighting--290e6a97-f9f8-4ea5-b597-b1a2a4703b8c", "sighting--3e9a2bea-0f3e-4a1d-941a-be6f49118dd5", "sighting--360fbfe4-5cef-444d-ac3a-2c9887ab4cf5", "sighting--a66d113e-c7ed-4b3e-bffe-5853b6005b2e", "sighting--6bce188b-6abb-464b-8644-4cb4499e9526", "sighting--dbda99bb-378b-4cdd-98d3-7e9bd0d6728e", "sighting--17538331-e273-492b-8cdc-b56d9c20b9d1", "sighting--2d86ef9c-45fb-4da7-b0a5-dfd85048da35", "sighting--ae1443d3-30cd-4832-88ea-97b2c8cd6c2e", "sighting--ef8e3bd0-ed7b-4703-8ff3-4875b4a2967f", "sighting--b93c9ca2-0140-4af9-a4cc-7bce14337f52", "sighting--b9349c4e-616c-4f89-ae8e-5e3497852dfe", "sighting--8b9b1262-76bb-424e-955d-8216334cc5f2", "sighting--d3836318-56f8-4613-8338-491ca946a287", "sighting--e4512ca3-2c65-405c-bee4-d57aafb699b2", "sighting--4adce77f-42e1-4562-9a14-aad00208ae96", "sighting--d4fa7d3f-71c2-4fba-9d42-1d72e6ac02a3", "sighting--89d3b499-06fe-4f84-ac4f-ed7364a4132b", "sighting--a0b401b7-372c-444f-80cb-4bb44b22bc95", "sighting--404e66a6-30cf-47c7-ae48-4b4612dce668", "sighting--195f2e69-aa8c-4504-a0a6-e6332e0ad5d7", "sighting--5bb2e376-a786-4e84-9e8d-95c364ea5bbd", "sighting--6beeb249-2e95-45fb-a489-455d7812873b", "sighting--65da41cf-a79b-42b0-a2b1-53ff3f866002", "sighting--3fc4de90-03dc-4cdd-bc4c-ecbd72fb7fad", "sighting--6caad829-8d03-4566-857c-ec9bb4b32c21", "sighting--2dc27591-0283-4c93-9481-97ada9887f81", "sighting--36098f10-a96e-405b-a963-180cfd1cafe3", "sighting--ab810eec-d3dc-4f81-96cb-95ab801c11ee", "sighting--273353ef-a3a3-4889-9493-8f9b094e0791", "sighting--8913c60a-a23b-48c6-ab9f-38f1aaa0c014", "sighting--9ccbfc94-6374-4500-93df-3bef0cf34875", "sighting--29a11643-fe15-4825-a811-a012eb01cdda", "sighting--a8243340-f15b-45c6-ac79-b1b48c3aaae0", "sighting--206d7a70-363a-4b64-a539-c630c4fe5a7d", "sighting--54ca38f7-5e0e-4512-b1a4-375b4b2af1a0", "sighting--701cfc2f-d7ea-45aa-8186-293ddb4631ec", "sighting--4226818d-2fdc-4fc1-9ff0-4a30fbf493fc", "sighting--d49b8a02-6cf1-4808-81b3-677499c35f25", "sighting--609ae4f9-f6f2-421d-8f62-37d425cfe8a1", "sighting--03ba6350-a680-46ba-b0ce-8ad94c946fcc", "sighting--3586cd2c-8e66-4d7a-8632-c1f8c16b2df5", "sighting--b354cfd1-ec32-4c33-b445-1fc396ed4880", "sighting--ec9fe8d9-f537-4f70-90cf-9770cea7126d", "sighting--6d3ffb49-a1ea-4e17-a304-7826f23fae99", "sighting--b256ebd1-81a0-49b1-92ad-d66803a0c864", "sighting--a1513eb1-4ce9-47ca-9718-98e7714f17e0", "sighting--23599172-9fd5-4b99-af7f-789943dcb9bc", "sighting--8f6e085f-df26-43d9-8c5a-f40a57749e35", "sighting--ca5ca959-07a9-4cf6-ac1f-31f05cbeccca", "sighting--be83afb6-5758-4ea0-9073-2032ca789b84", "sighting--f0420920-5924-44b4-912f-fd5030e001c0", "sighting--699713bb-8ddc-44d0-b3e3-27b7bd8fd38f", "sighting--d73fbb75-37b1-45e3-98f2-2aefeb2fadbd", "sighting--b56e92c2-57bb-48a1-b79b-22c46b46de66", "sighting--318ae48e-0f74-4b90-9297-7ac3a3ff4ae1", "sighting--2aca859a-9825-443e-99cf-787327f6b775", "sighting--555bf66f-8473-482f-924a-11e49a1040b0", "sighting--e0d1aea7-d545-4ace-8178-f50eeb899ad3", "sighting--0db06f79-a90e-4e4a-90fe-7af8011a8c12", "sighting--eb090b07-b9c8-4acc-a26a-143eb5706160", "sighting--bdffc246-d067-4f43-910b-b4067d89b129", "sighting--1a85bbfa-faeb-4da9-9d57-4c3f3b0cf282", "sighting--9f323d5f-c958-4f6c-b1c1-46e515438749", "sighting--728806b1-ca34-4779-9c78-62b194516b78", "sighting--47ccd357-2472-4cca-b05e-080420c2895f", "sighting--b49ec2b2-f320-4a43-827e-920dfebd41c0", "sighting--39884ddf-345e-4ad9-b963-f87f2c087ef8", "sighting--be794fae-3e79-457a-abee-25c4e15f8a62", "sighting--fb780521-822d-4c07-9821-ea93c120a64f", "sighting--a1a535e5-e48c-4ad3-a36d-a805fbd363ab", "sighting--24f49daf-259f-4c54-aa76-2a4764ee0d9f", "sighting--80e41f86-193b-4b6a-b072-e03419a75338", "sighting--a7579224-777c-4b74-baf9-b921182b1654", "sighting--3bd81e72-6133-49e8-9cec-b6631730b5d1", "sighting--a830d767-cb12-44a3-a6a2-51af873455c4", "sighting--e5d0f71e-af4e-4be1-a734-573d2b993180", "sighting--1c077989-2a38-44e2-bdc1-9d60cd2fd64c", "sighting--ccecafac-4739-48ed-9bc2-060a54faf312", "sighting--d54ecf1b-8b4f-47ac-aff1-3ea5b088babb", "sighting--d37e28e0-5e08-4b2a-9a57-63af375c2fe3", "sighting--90a4e279-5cad-4fc5-9a33-8f17ae7d6717", "sighting--a7975659-c0e9-443a-aae5-4df70d71c33e", "sighting--2130b3b4-26b7-4be9-8c07-f010bd49a041", "sighting--f9a8ea72-9650-40e7-b770-4d5492410a7b", "sighting--280131ed-d335-400e-9798-662ba389de88", "sighting--634ca4fe-61cc-45cf-b253-531d6a328750", "sighting--cd00f27c-58e0-45a2-9199-aa99acb4728a", "sighting--ab95f37b-9460-4ada-87b9-234e94f7ccf1", "sighting--f983659e-1156-4510-85d6-daa81a91c306", "sighting--e08e81ed-74e7-4509-b498-6a81c6a51f67", "sighting--5da1b0bd-ad13-44b0-9fc0-5ca121d339c4", "sighting--fba9768f-8a24-4916-989d-15eeb96e4a19", "sighting--122675e6-3250-4e82-890e-a1d5b4720b43", "sighting--77de3c8c-9b59-4fde-8bf3-4c91ec7321f9", "sighting--6c3f24b9-374e-46bd-bfe7-7deba25d8660", "sighting--cc068b8b-4af0-44fe-a2a0-73442087676d", "sighting--439769b7-f0ca-47d9-8ee4-860eab911f99", "sighting--28a6c643-813f-4860-b96f-a8c290a563b8", "sighting--c7a9e324-2276-4047-8825-c6d99f64c20d", "sighting--1d6a75c5-3583-4f1f-9330-24b3b05cee3f", "sighting--8d2aff5c-9e84-47c4-b230-72d88dbda678", "sighting--4966650e-d71d-49eb-b3cd-d2c9f3ce866c", "sighting--c580fa1f-1df6-492c-a6de-2b7926871dc7", "sighting--b3c23112-0d96-4761-ba4e-f6d2bbd03173", "sighting--66f8691e-a7f8-469a-ad32-e8d7b18a6f78", "sighting--11d91d61-81e5-46a9-a586-f9f5bbc76523", "sighting--b401bc45-b249-4209-ae72-561e6cd8fe1c", "sighting--69681c40-fc6e-4328-8b5a-f029d544ea70", "sighting--ca8faed3-7244-4d9b-8995-2bb14800db2e", "sighting--2b38f166-e9b5-4446-b282-0ca04f92309c", "sighting--a1decdba-4028-4444-abea-a18da7811a34", "sighting--a2759f91-e7e5-45e3-b80f-933ec32904d4", "sighting--608d9134-3896-4840-8e1b-2982e488fb6e", "sighting--31383abb-c978-46a0-9930-6101d0abb2b8", "sighting--a4007a8b-2bc9-4e50-a1db-e615bf480e2b", "sighting--abd3b43e-5e63-4032-b491-1f5fa17c22f8", "sighting--17159c6f-b08b-48bb-a42e-f145059ee361", "sighting--807eb45a-5b19-45fe-9ef4-9fa4efd206dd", "sighting--04107f14-1c4d-4715-9fbe-5e02f09db2af", "sighting--38e734c7-3adf-4a87-80ae-bcd4a98116bc", "sighting--1401895c-064d-43bb-b821-05e44eb753ae", "sighting--a0cddf37-3a3e-491a-8b74-107b75ac61c1", "sighting--995aab0b-f84a-47f0-887b-7b9f1b911351", "sighting--a51a1a4f-098d-4417-8aac-3a45423bfc50", "sighting--feffe273-d0ba-4a7a-907a-bb1eb391ca64", "sighting--70901939-7f47-48df-a553-1a6075f22f3f", "sighting--0525c4c3-b4b7-46c6-9660-0fc971ed1c14", "sighting--a048e793-22e2-4268-9d62-0dcf82e01b95", "sighting--cfcc503e-5a56-4f22-818d-ca991df1975e", "sighting--18b0d853-ecfe-459d-ae93-98d461abbced", "sighting--0f19432b-d4d2-43fb-9900-0e2e6942438b", "sighting--94538bd4-da9b-4b97-aea6-7e61cc84b50b", "sighting--ab79d99e-7609-4d81-8899-33f65fd3b5a6", "sighting--909aedc6-db11-48db-984e-c75f891dba9e", "sighting--4ee70f44-6926-465f-83d0-cc2f24950373", "sighting--05c4beaa-7cb3-4590-89aa-19d2a06061ba", "sighting--b5c86575-389b-4e89-a620-be08873e3fdd", "sighting--dede27e9-4bb8-4bf9-9b6b-a2867f04c665", "sighting--975b9161-5d6d-4cb2-a226-4cb05454e361", "sighting--0e49b603-192f-409d-9a57-5b28c18b9941", "sighting--4e0b8748-2bdf-4853-8b40-227c8e8a3913", "sighting--34b74a67-2ab2-4a31-8e23-8c5e00a02b0b", "sighting--5b891491-7ba5-4e64-b9ea-1bc92ea17327", "sighting--deb4b546-f367-449b-ac03-b168947a0948", "sighting--a512021e-d9cf-457d-a02d-6f0e700b0549", "sighting--510c5c83-8e8b-4d84-a6a1-e331296ebd52", "sighting--b0ffa764-237b-4da2-811f-399c341e8030", "sighting--332b7d00-b9b8-409b-9ddb-49ac042a9079", "sighting--f1722ecb-e62e-4894-880f-bfe8e51ff95c", "sighting--618e3621-c175-4864-89f9-33efce1551a4", "sighting--df214948-26ba-4d20-8927-9a982113773b", "sighting--1f4e5bef-144a-427e-9ae9-fcce926dd7e6", "sighting--7896acb8-0b23-4e4f-818f-6cbdd664abf3", "sighting--576fcc60-d397-4db6-8db5-5a05be85f32c", "sighting--2c64f581-51f1-4e7d-b695-677c1ac5cddb", "sighting--83003b7f-b17c-48a6-8a22-0ed64338140f", "sighting--32c94def-74a5-463f-bec7-a1da01603e32", "sighting--154ec5a8-f266-47e1-b9a4-ef80273d480e", "sighting--121c8806-3916-4e2b-8b97-ad50543156a7", "sighting--e7c4bd8b-a570-4953-ac0a-9a3ec86c5b25", "sighting--c2b50950-40fb-4bd6-ba21-e4e7898f0dc8", "sighting--5bb16883-d624-4902-94c7-c89a6fcf8a5c", "sighting--81b59c80-b2db-4395-abd3-f3b1afaa73a3", "sighting--230a6ba3-8bd9-42eb-8699-02ee0d67df9e", "sighting--f01bd1d3-f536-479e-bc19-cefc79c29836", "sighting--3b7f04e8-1c9e-4f4f-8f15-601027715ecb", "sighting--62b24e00-45dd-4ce2-96f9-bc9546aaef76", "sighting--83f3038f-d491-41f2-852e-dee5959ad618", "sighting--b670f0c5-8961-428d-bee1-2ef1f9b1cbb4", "sighting--c04ccc3b-bfc5-4cb2-a7a3-ba7cbf167022", "sighting--5013bc2b-5868-4de8-bfe1-a89becca29e8", "sighting--2d06886e-d265-442e-a7fe-9f18464172e4", "sighting--2c2acb10-41ba-4e1d-88b3-9dbd5e7614e0", "sighting--1815fd8e-6337-4082-9877-f5b1faba34e1", "sighting--25eccef2-e04c-4cfd-bc27-d79177532d84", "sighting--bce8311f-48c3-4747-a023-945a11469f20", "sighting--3584b1a7-79b0-4d28-9954-dd7af594f645", "sighting--9429cd85-ff59-4c66-b8ff-4d9ddfcbad78", "sighting--6969dab5-5b07-49d9-b62f-bb0d247e868c", "sighting--c63c2ddd-0580-455e-a0fb-2c5e63b876da", "sighting--96278fc9-8b99-4a9b-973e-6f382e4092bc", "sighting--b3c30911-951a-4d7f-994d-d286a79ea0ca", "sighting--46f33086-0d49-4a74-ae3b-ca42069c64e9", "sighting--4bedc792-602d-4425-b2c7-793f4f352009", "sighting--654adad0-8f0c-40e7-b567-ab7012c4ced1", "sighting--dd27a0e9-e584-4b2f-b965-65795dc7b315", "sighting--a1888ccd-f3d5-40ff-afaf-b974b92be20f", "sighting--60872b3a-6ab8-40ad-9f7b-005cd60df8ab", "sighting--675a7465-6e49-4f0b-8f0b-fee3f8eeb337", "sighting--62fa6d61-c25a-4ead-9498-f0eecf053d52", "sighting--b43d633a-1a02-48ef-810a-8d64c94106af", "sighting--d91510cd-72e1-4ddc-be87-20caca4a09fd", "sighting--f919a9ea-829a-4c11-9f3a-470668112edb", "sighting--d8c22c51-b9c5-450d-acc9-d466ff65a4cf", "sighting--d2f6fb1e-e74d-4fec-85e8-86a73fcc531f", "sighting--dc2ce5ae-c9f8-46b7-959d-80380854e646", "sighting--4ce34fc8-647c-4993-899f-c5cb3f6cae7c", "sighting--ea2e003e-fbd5-47fe-8aec-3f5012bd3215", "sighting--a0757e65-9322-4458-96fd-97c24800430d", "sighting--105aa728-79eb-4411-afce-405a0b23c926", "sighting--312aa396-8746-4af3-9411-1cf713b334dc", "sighting--96c16c9a-0886-4879-9ab0-d31c3728aec8", "sighting--73e9b4da-59cb-4a3e-85a9-600404b18a3b", "sighting--03e1ed23-53e3-4003-b368-693f00643aef", "sighting--66dc9702-82d2-401e-9e28-152db2edfa5b", "sighting--96619174-35d5-4772-a60b-8968bdf347cd", "sighting--5c6ad79d-4dc9-450b-b7cd-c39e6fddd47b", "sighting--ce00dce3-a9bb-4dca-ba00-5185cf4a6c9b", "sighting--8aefd3ae-9322-488b-899e-11b23d0f28a8", "sighting--f2247bbc-8e3a-41a0-92bd-ef96dac3e3ce", "sighting--a4aa9dad-4bca-4e6d-83ac-9a87d19aa177", "sighting--82a0ec2e-f41e-43ba-8dbc-330b013aa2f2", "sighting--4945a396-20f5-40a5-a509-6af154fb4f38", "sighting--10904df1-d694-4225-8a0c-718bdbfbba89", "sighting--1c13283e-f0c5-4df6-be50-f9b4d6545faf", "sighting--9e3a11fe-6381-4383-9fce-f55d025e7ca1", "sighting--946b5b18-23be-4374-b6b7-2118f5b84d85", "sighting--6ade51e3-134f-4669-a464-d69eb0ead7ff", "sighting--5c4b920c-9c92-453f-8984-42d2e0550246", "sighting--8e1dba91-0328-4128-bc9b-1b17422e0c36", "sighting--715c4730-74a2-4598-b457-baab0230faec", "sighting--dd5c5b23-3597-4eab-89b2-7368fb1d1783", "sighting--2e1e805d-bd41-4a6b-8242-657657423379", "sighting--a2b5d109-f148-459d-938a-e886548339fa", "sighting--5c2e259b-18e9-4a45-8e64-9b3673b8fcce", "sighting--d8bfa12e-180b-41c1-b6a3-90302b65b3f1", "sighting--a9c2efd9-b26f-4c70-bb11-04ca67f40b75", "sighting--4e2d3293-9618-4ab2-8725-25425a8cd44d", "sighting--4907eac3-ece6-4423-9471-0ef34d7a6e35", "sighting--3ccd6d4b-92fa-46b6-a438-1014a53e9714", "sighting--49a425ee-0206-4a97-9495-c778d759c671", "sighting--d3157c87-32d0-43ff-8b20-bdd36085c7a6", "sighting--d3d36674-df14-432e-bb7e-223123f0e6c2", "sighting--ef4d8351-3ef8-41b9-bb3c-a6900fe31244", "sighting--da655d71-e5f1-404c-983e-d03656088bd2", "sighting--8877538a-1f5a-4027-859e-13a4d97cb53e", "sighting--c7c34f09-92e4-4eec-8273-4408fce6498f", "sighting--0c0ce6fb-411d-4014-8169-fe86a3abe8d5", "sighting--197294dd-0cc5-4d6f-ae0d-b4d171394b0c", "sighting--83ef99d6-c342-45f7-a77f-38e199225559", "sighting--f341a521-3403-4060-87cb-6cd0238a7d78", "sighting--0a9a8429-a02e-41ba-a0ce-6f7450068c90", "sighting--123f5811-6b78-4c7f-9e67-81a8f9396a02", "sighting--4b06c65f-9a73-4cf7-8a08-2b77d8ae7994", "sighting--667902c6-3c9f-47a6-9180-241be6e73c91", "sighting--02ac74bf-ab40-40a5-9e09-abefce178642", "sighting--b02e5ff2-c9a6-4493-bad6-721d72856e3e", "sighting--403803b0-6e36-466d-8465-60f4ddfa87ee", "sighting--1568a63f-f71d-409a-8b1b-7b6ed15196a5", "sighting--58397d4e-be0f-49aa-a014-f1bcef384e5c", "sighting--97565963-9c79-4317-8dbf-0220ad3ab623", "sighting--38cd9c0a-4478-4159-9db7-e42139566505", "sighting--041f9777-848e-4356-b1ee-e02fa1987492", "sighting--eebcd612-b127-4c80-88a7-bb38fb312389", "sighting--9e4faa98-8b13-4bee-b006-223e0fd0de39", "sighting--8a221f85-8a32-4fce-92c9-1ee1324b5add", "sighting--d0ef878f-3050-4161-b4e7-4628716256e0", "sighting--d47ad046-4d35-47dc-a762-6f5c2b4a49bb", "sighting--864c5829-2640-4344-936e-a63b7202ece2", "sighting--b89805f6-fc35-468d-8167-d0c2bfcc35d9", "sighting--caceccfc-bd70-44b5-8b58-fcacb699d95c", "sighting--301c86c6-5215-4d8a-b1d1-359186556108", "sighting--561c6e2d-2045-485b-acbc-fb4193ed3812", "sighting--7bf16756-f24f-482d-bbea-f7942b4722c0", "sighting--fc5b7420-0f24-44c2-b8c5-6b223a1d0149", "sighting--1c14d27d-ce4e-4f87-a7be-a62d1d05c2ee", "sighting--9ec568d3-71e0-42a4-9e3a-e7f561a7eca4", "sighting--582657f4-c0ae-48b7-b5da-50c2b2e5deb0", "sighting--8c6c363f-877d-4afa-b62a-d20decd5fa09", "sighting--33404eaa-8d6c-4268-9885-189e5e0865f6", "sighting--31dd2a86-5713-41c2-b873-233c1db78a9e", "sighting--3b4e3264-43a9-4716-89d7-146121909aa4", "sighting--72612f9b-b562-40e5-bb69-3fb2cff68466", "sighting--77138e6d-f08c-4a4e-95f8-35ad9fa913f5", "sighting--58624c35-a9d3-47a6-80df-6f81de7918a7", "sighting--fc392969-ef1c-461a-862d-e0cba530ada0", "sighting--fbabd6b1-602f-4fe8-a6bc-5aadf7823428", "sighting--d28c765e-84ef-42e6-a7ec-6453bf1468bc", "sighting--5a50aeb9-2325-47bd-9c69-ac579f3ed182", "sighting--519fcc61-b84d-47b7-a4cf-737bedb8024f", "sighting--9fbaa870-df0f-4c33-9af9-81e1242dea07", "sighting--a951cd91-f3ca-4f2f-8ac7-26c04f28d7d3", "sighting--edbea671-958a-41b0-8829-5b98374396b1", "sighting--0f9f37f2-7ea9-432e-ab1c-2c17816854b0", "sighting--10e38a46-d0d3-4cf9-b1c6-0c1d3ff416b3", "sighting--283749c4-5828-43a2-9bc0-48f5be63c4f3", "sighting--dd3c9ac8-84c1-486a-a44b-cf31ea0201ca", "sighting--44ea92fd-8145-4405-8a7d-b2fcf6454d82", "sighting--0f6b326f-127c-4b99-baf0-cadf639489a8", "sighting--bea7a62d-4897-464a-87f7-d5dd3965e947", "sighting--9706db8f-89f8-4434-bdf3-49e31245b887", "sighting--e6c54368-215d-4ad6-8d03-f445e315a92f", "sighting--4654e97c-9ce1-4027-b741-d1e463697b0a", "sighting--4f931da0-f70f-482d-92e7-fb13f1e2ffe9", "sighting--6ffe9354-3938-49de-aa60-06f588be1bc4", "sighting--3ddae56a-c305-48ed-a031-8fcc82a57ee1", "sighting--b1de5972-165b-4df0-8725-0b13f017d6a4", "sighting--7344c53d-009a-4131-ab63-e0fb06f51127", "sighting--39f26b03-a151-4c79-9e1d-9f790d98c8c1", "sighting--352fcdb2-7aa8-4117-9fef-3c88ed2d80e8", "sighting--6cf73425-b93f-415c-a36b-dee7b80dd795", "sighting--bed7ab13-72f8-4b5c-9572-b08262441a7a", "sighting--e254b1b6-6e80-45ca-9271-0472b1c7ac7c", "sighting--d73d20df-6a9a-40e6-95b8-b977f65379c0", "sighting--5ceae9fe-c96a-433b-9d1d-c75616997f0d", "sighting--fb741de3-5269-4486-b20e-ede55bd56fc8", "sighting--2499cc32-23eb-497d-8b4b-dc5551fe74ba", "sighting--2cf1bcb8-7b8a-4deb-9aef-96c2c46a3e98", "sighting--3f57afb2-c6a6-4292-821b-e0618bc6ca63", "sighting--a6c9e6dc-5af1-400e-8590-f6be26899990", "sighting--444e5832-47dd-4f59-b23f-22f9c06ba108", "sighting--06f0c59d-f7a6-416a-bd79-ebf0d234b4ef", "sighting--51883d94-d4c6-4d62-b141-3f322aab2454", "sighting--b027b503-07ff-44d3-8cac-66ebaf973169", "sighting--23eabb37-d968-4640-8eb5-1f7df8333767", "sighting--61d51747-8d68-4bf7-9cee-51ae961fc289", "sighting--c7e5a09e-f6c5-463f-90fe-b4391dde919a", "sighting--7ba07bdc-7daa-41ed-9cc4-cea7dc28f6e6", "sighting--1656da1a-e9a1-49bd-9328-6fc6788a130e", "sighting--d028b29d-5d8c-4478-b655-77cfb56dd17b", "sighting--cd6f79c4-0c68-40e7-bebb-f25ead1f8267", "sighting--32caccf1-ccab-4856-8c65-a730da041940", "sighting--77afc8bd-1b3d-4b4e-be40-8978fe006d4d", "sighting--6f5134ab-2aea-46e1-8905-51904397e636", "sighting--11e79a7c-89e1-4ed4-8cc7-fba3c345a14c", "sighting--d902253b-5f5c-46b7-b2d5-44c77cf1b5f2", "sighting--a9ded110-c700-4591-8792-d4332b713808", "sighting--4ab204b2-36f2-42c8-b3d6-1eff25d783fc", "sighting--a39254c0-ebe0-4fd2-a8c5-5238238c1783", "sighting--0b2e834b-1d81-450e-832e-08bf040f2731", "sighting--6f9ff6fe-c4a1-4984-8b0b-27877026a4d0", "sighting--ff77cf6b-a1c7-4aee-88b4-45724ce5419e", "sighting--1846038d-1cdc-43b7-be22-b99874043f4d", "sighting--61cdc1b8-6051-4c09-b84c-8340c1974950", "sighting--8afd1b46-3228-40aa-ae5f-cd4d22dbb10a", "sighting--41d80fa5-4e11-4b6b-b18a-d642ec06b5e3", "sighting--92619b87-227c-4331-aca8-d8fbbfea387b", "sighting--aede015f-cb19-4a01-850a-225e5221fd60", "sighting--b30cbbdd-1705-4a06-a05f-999c237e2464", "sighting--3d276cdd-f246-4f78-adc6-8742aa046351", "sighting--21db1ff5-7bb3-4f18-ba3f-4d7ba0805568", "sighting--bbd2003a-9596-4382-97d5-fc4864b96276", "sighting--da9e1b44-0271-4861-9a68-65fb7a84e1a9", "sighting--99d985e7-47a5-4fcf-ac12-c437492267d7", "sighting--aea1578f-0d2c-4d48-a396-08eb76d14e97", "sighting--59bf4e84-661a-4c8c-a9fc-5d3d1671055b", "sighting--6c6a4d85-add6-43a0-b031-ccf50ab5ecce", "sighting--9548edaa-9b5c-4517-8916-4d8ba17ef92c", "sighting--b630d6e2-0223-47a2-917f-f846a831b993", "sighting--afb60239-33f2-46f5-98f1-281f3999ee95", "sighting--f1122b1d-90fc-4587-aaad-04d5399d94e3", "sighting--e4093056-7c72-4c8c-93a2-937512b6fb72", "sighting--b026d1b6-c7b6-4c6f-8096-e82c63376449", "sighting--ad4bd0be-0c5b-43e7-9cc7-50a00cb994b6", "sighting--20a45264-a817-49d1-bdae-3e3ea4b4323e", "sighting--067fa3f2-f0ec-4193-9a63-5a4df3734952", "sighting--55930315-0db9-4a83-864d-32a062099274", "sighting--c39fd94d-48e1-429f-a4c8-295f7ee17512", "sighting--256466ba-da71-4163-b162-dbe9fbd574fe", "sighting--4af960c5-9351-4adc-9dfc-c300c757c0c6", "sighting--d283ee6e-3847-4afc-b6e5-55f77929101c", "sighting--f8d76647-3c43-4657-bde7-6c4c26457a4f", "sighting--06251898-ed8c-4a13-899e-b12dde2e2e34", "sighting--a1ac2ea7-72bf-4604-b631-c76b219d98dd", "sighting--54e25700-a652-42a5-b266-bf82562f7a95", "sighting--b5894306-7f40-4935-af46-d8217947d5a7", "sighting--9b1e4280-2abd-424a-b414-1c55e1c1e426", "sighting--f615eb33-840a-49bc-8b1d-4dc366af225e", "sighting--b61402e2-15e4-4858-b12d-082bdd039a74", "sighting--537d5e42-2965-4b7a-9d57-bd1c2d49d82b", "sighting--257328ca-a7aa-4e5e-8b77-83b749ddab63", "sighting--1925d354-393c-4475-8ec5-ee4e5d70ff00", "sighting--8146f0f8-cbde-4803-81e9-095019fcea19", "sighting--a0af92af-1caa-4d13-9a2a-2fa4e4c3d4f5", "sighting--99155ccc-7d10-4109-a103-78c22db87837", "sighting--5ecb622b-a8ae-43a0-a3b0-bf288e654de9", "sighting--31e8934b-3672-422b-a2f6-c4045bf1ee8f", "sighting--7f770a8a-c259-4d7c-9278-65f62ce46510", "sighting--b8faa5ac-c990-4b19-85c8-a6af4cab6f5b", "sighting--81044ff3-1d82-4b72-97dc-28960c0d9717", "sighting--e1bd3533-5aaf-41b2-b271-dc29e717781f", "sighting--7488ce0e-d60c-4139-916f-a0c5e343d952", "sighting--86349675-e49b-4d99-9e3d-28d36add6211", "sighting--a66e5f70-0948-4df7-978a-da358bc7721b", "sighting--2cdd732e-b0c5-4c84-88b3-749b868c3083", "sighting--6ec8b992-2906-4435-a44f-a7e590b71e37", "sighting--a56ef170-49f7-40b0-9263-24cc55f00457", "sighting--782b0f2a-a9b0-4b99-abd1-a1498f05d188", "sighting--cce05875-70c8-4008-bf97-49afa700a91a", "sighting--ba60df0a-0853-46d3-b70a-117930c4eb3d", "sighting--7a7d43e9-5f5d-4725-b0f2-937b200da91d", "sighting--b0e96740-b9bb-4ed6-a2b7-1c4b26f10d42", "sighting--71497c18-3dbb-4a21-b629-4f3fa7e97fda", "sighting--327838ef-ee03-43db-9a7e-d6a3849b54a6", "sighting--afe4c830-a354-4250-98a4-6718c66f3a9c", "sighting--b9924ddb-44c3-4c09-a930-794152fb2ec9", "sighting--b48ef528-8f01-4a33-bf65-239a2c34a9dd", "sighting--d1b4e90a-37a7-41e0-b496-2e765edc1493", "sighting--3a2f14a1-50ff-465c-ad08-2ca4c62856a7", "sighting--901fda24-f0c0-4c02-9c5e-3c94e3c5477e", "sighting--ce33c976-0226-41f9-a1bf-6236c15c33d7", "sighting--c0889eff-e495-487e-98ad-ff2e9f071b96", "sighting--b7086c67-6c05-4b02-93c0-c51d4b7bb396", "sighting--8ecff618-fa9d-4fc7-8545-fd5c7e1d135c", "sighting--c24e80d3-0af5-4c0c-92aa-8805fea17216", "sighting--454ce89c-01b3-4b80-a2bc-a536bd4e65cf", "sighting--14e05db3-6448-49dc-b1a5-7db25d21fe87", "sighting--e11fe85b-9f45-4f66-b531-6c8247a50300", "sighting--2721be81-0f18-403b-bf7f-933121af51c5", "sighting--0da6a2be-3bbb-4184-84cc-12b84c3c932c", "sighting--e84556bb-61f8-449f-bea5-9c718b13219b", "sighting--f5c21e3c-7cfb-4422-963b-36fe4dcaa95f", "sighting--40191f4a-1359-4995-a0ad-37bb111eec8b", "sighting--be542934-0525-4100-a6da-83e383457baf", "sighting--aa973e6f-9864-4bcc-bf51-f64e7141db35", "sighting--448cd1c5-66de-42b3-b0d6-1fb2122817d7", "sighting--4148a6bd-33d6-4f34-8a33-c897c2fcb72c", "sighting--69811efa-8d46-49a7-9fff-75d6fe7df8f8", "sighting--f74d54cb-9fd7-44ab-af88-312e0d0f3996", "sighting--c96dd240-7d03-49b5-8cbb-abab2dc10fb5", "sighting--b93cf08d-4cee-4384-8c4a-807a4bea4b8f", "sighting--22544294-fa93-401a-8f5d-5c9836890ce5", "sighting--f2808a44-811b-450a-842f-5634eb197527", "sighting--6e155f34-681b-40ac-88fe-1bfdc59f7bd6", "sighting--f4fe1536-458e-46fb-8318-6dc601f19849", "sighting--463496a8-2a1f-4fb2-9567-0efac277cc14", "sighting--2127eba7-623c-4c71-9599-4716fb662c22", "sighting--47a35ff0-9da9-4c3d-b0e0-507612229013", "sighting--96cc2e71-5e36-4ef1-96d6-e5d5d9632704", "sighting--d7c8682c-0956-4e21-90d8-4eade0963083", "sighting--4cc86e33-186a-4ad6-80d0-0e1960ed3c79", "sighting--6ceec91c-4988-4410-8bde-42158955dd51", "sighting--6ccf3fb3-5c35-43b2-9054-0c69a465fd61", "sighting--ad0629a6-8331-4776-8c4e-10a9ccd8ca12", "sighting--88d07156-50e6-4089-89c5-496f95193e11", "sighting--87d55d35-b653-4ccd-8a62-a1c6357081be", "sighting--2fbec656-7dfb-4325-8e24-11b9b235c901", "sighting--e16e7382-8bb0-4c02-a8c9-bc1c4403142a", "sighting--b1dda5ef-79b0-468d-b343-37e15902f9cb", "sighting--3a02d732-48fb-467c-bdcf-477eac9f9264", "sighting--011274e5-38de-453a-a975-a1135d91dbc4", "sighting--d1d97ac3-8907-475b-853d-1e8d3fdd42dc", "sighting--d21d3164-7ee4-4e0f-ab5b-eb63af8f43cd", "sighting--db1129c4-a19c-45b1-8b12-aa04a0688f7e", "sighting--190cd700-ea4b-4de2-a7ca-e5080cbd2778", "sighting--ed49cce0-60d4-478f-bf90-a91623f24fdc", "sighting--2c9a6043-6992-48b8-bcf6-44c37d5034e6", "sighting--88ade843-0d91-405d-9685-ea72346adee6", "sighting--ede20622-48d1-4603-a250-13c5e10f98bc", "sighting--f43d33fa-5b69-4320-9cc9-bfd992de6dbc", "sighting--5873e188-d7e9-43db-826d-a0757c171966", "sighting--775ea0de-799c-440d-8b9e-7249c2c6074a", "sighting--fbd5e096-5e77-4e14-8ddc-a3a5d55893f7", "sighting--014f1330-181e-4df5-97f7-0ef83842b1b0", "sighting--2e67ab95-e430-4dda-b032-48fee4336ee9", "sighting--406c8f6b-73c8-482f-a21b-c779bd2d8f6b", "sighting--7d0d46ef-d88e-4255-ac72-06a8fe2a9bb0", "sighting--85abedd0-3467-46d4-a2d5-acf9b7df1eb7", "sighting--0d117e86-b40b-4ab3-ab1c-e904e9dd6a2f", "sighting--4d572a38-1ff1-4427-bcfa-4d69158feadf", "sighting--9ee462d0-8ed6-47c7-bfef-73269dd451d6", "sighting--e671f8f6-b5a7-4a5b-a013-c58054c55b68", "sighting--170eafeb-df81-4548-86bd-306472edf3ed", "sighting--b5c8c1b6-6ac4-49de-bc40-ba39fb5a976d", "sighting--840aabe8-221b-42bb-aff1-bea59b75866f", "sighting--e543a0b0-a0ca-49c4-9323-742f4994f9b8", "sighting--0b3ebe18-167f-4d5d-9ad5-9a96d1376a90", "sighting--9619997a-2c3f-4ec9-aa6f-eccdc055b4cb", "sighting--7290f575-16d0-4556-8db2-d546b4af304d", "sighting--4f846653-c604-4585-9905-6eb052f50368", "sighting--a8c7bbb3-9dda-4942-ab61-b9557c3ec101", "sighting--9b0d7d44-6cc4-4374-a58b-cd9064191867", "sighting--27d5b2fa-d167-4fc8-a975-1e61b0f698a8", "sighting--d1e6d4bf-c1d5-487f-9145-394eeb1efdbb", "sighting--ab7b71c8-5f25-4a4a-848b-4147b186072e", "sighting--b714f374-a623-40e4-b41a-d7522b2922ea", "sighting--a9f8959d-0dbc-49a3-bc59-93ea5e5f71f4", "sighting--c132755a-70ab-45ad-943c-7f5288238088", "sighting--9e54fb8e-7449-47ee-8b2d-09607c8286ab", "sighting--015ccc19-bb88-43a5-a1b7-ce41481fcfd7", "sighting--20d31fab-cf59-4942-9516-d486a793d1b9", "sighting--e6ed4aef-cf7d-49d8-a185-056fc1d349d3", "sighting--abca5ec4-0a07-4bfe-95a3-f46520fb1d6c", "sighting--244408af-4f80-4dc8-97af-917ced89724a", "sighting--8110fef2-91fb-4d8e-92aa-c3584825ce36", "sighting--6f73bad3-dcbc-4fbf-9a9e-eed241f3fb19", "sighting--f40123df-0ca4-4d48-bd4b-5b9872e6cc21", "sighting--ae1c44a1-4172-4e61-b281-15982ba0032b", "sighting--eab1ffce-1326-4982-8c2b-a2d40e14d90c", "sighting--aec7f2db-0c6d-4101-a6d6-9f021c08c209", "sighting--c84cdc8e-2b25-4beb-965a-c225bab5274a", "sighting--6e09e299-93c8-4b1a-a688-232dfe969543", "sighting--80bb359b-ec60-4cdb-9a3f-95442bd46b84", "sighting--6f9b5200-eb1f-4e5e-9ecb-7b6df7c6a761", "sighting--f83d91f4-bb51-465c-98d1-a0b7ea38e3dd", "sighting--f090b8ca-8eb5-445e-acb0-2d682da990a4", "sighting--051281f4-5d56-41bd-b0bd-5ae54a226643", "sighting--2dc502f8-b0b3-4cb5-9efd-3cc6f78ad82a", "sighting--fed939b4-1da4-4c27-84b0-8c654962dece", "sighting--e9abaff2-45a0-4463-add0-c13cf93a562c", "sighting--37a937fb-c723-41d7-9757-7a9d8393ccb6", "sighting--6dac5b00-1768-4a92-9e9e-19b70318a116", "sighting--58aeee75-3167-4999-8f6f-96327497f45e", "sighting--b4da7565-ea41-4932-8cc7-b97ec0e0ac29", "sighting--30ab1532-4ce7-4dd3-a0df-df1292c2be3a", "sighting--30c3ad20-b538-4cbd-9468-81cf294a764b", "sighting--eb8dd5ac-871b-44a2-975a-a9021847809d", "sighting--b2a71bde-8a19-411b-a18c-3f5e623fd4f3", "sighting--b55077c0-9563-4d52-a519-df6dad051613", "sighting--b86648c4-b80d-4804-92fa-a7f7182740e5", "sighting--d07c23ef-6676-4b65-a006-cc15fe142061", "sighting--9b0ec2be-f47c-4030-abe9-bc3072ff762f", "sighting--955720e7-860f-4281-9f47-19df76782fb3", "sighting--07ee91ba-1361-4a82-bbe3-76a57031b52e", "sighting--6cba0381-3ca6-4f1c-80bc-2e1b73402016", "sighting--162c9eb2-912c-434c-93a3-2ab87a6a8b91", "sighting--88c97e2d-19df-4815-8fb7-d5648788b640", "sighting--274c9635-f631-4e18-aded-3997db1ff0cd", "sighting--d01c4525-696e-4006-922b-c8f0c8f85794", "sighting--bb9a7e20-920c-41f2-b95f-c8175456d68f", "sighting--3e555a84-3d3f-4a43-8f69-ac0ce78f040c", "sighting--512e4571-0b80-4c67-a6bd-409055c7eb82", "sighting--7f3f7351-2c35-47c5-ad36-f632f6064daf", "sighting--eb4d8666-c4b8-4b2c-ae56-272efea29980", "sighting--65ba1319-f66b-408e-b589-7c4531e2ee57", "sighting--1650b99e-d596-4cac-99fb-3cb1847ae3ce", "sighting--b082a4e5-48da-4f75-a202-c42e7f8ac3b8", "sighting--0cad6c62-4ac4-4af0-ac34-daa9ffac9822", "sighting--96c90392-0217-41ec-87ae-ed92594c994f", "sighting--86ca0dff-6f4b-4927-8059-a8a2c62880ab", "sighting--7d0a66da-fdca-4b11-9ab4-3edc87b2f96b", "sighting--90379935-9bd5-45cc-84a8-04b3fe4e61f9", "sighting--0ed249fc-8acc-490b-94f9-9a26986fd156", "sighting--2c697bf6-add4-4eaa-a807-5833925335cf", "sighting--af1fef9f-457a-4748-a822-f1a7abd5396e", "sighting--d0e3d903-1aba-4c22-beef-86c689190610", "sighting--3b5c0009-c90f-47c6-a060-a12cdf04dcf3", "sighting--79f36293-b678-4fea-9ac3-31bdb1d14b89", "sighting--68dfea84-4cda-4ec3-bae3-a699281160bf", "sighting--42c44142-916a-49d9-ac26-41b085fc4c9f", "sighting--4b84ff6e-c861-4a43-9e56-5fafbd6fde99", "sighting--b9f95a01-8ef9-4228-8e77-61d700073aef", "sighting--ce735708-175d-41cb-8fe5-16fb5c1c7dde", "sighting--fe47ff9e-85c8-447b-9418-36312f4479e7", "sighting--c624142e-fcf1-48eb-9ab4-556efb70206d", "sighting--84ab88e3-3423-4b4f-9a7f-1ad3a52201cb", "sighting--e2e2facf-03c0-4019-9871-4ec75baa1f94", "sighting--e7a3afb9-afbc-45cf-9e58-17c253d064da", "sighting--1121ee5d-ce33-4866-bbc1-a15b561b0740", "sighting--28548c92-5ef2-4589-a8a0-200c0c6ecdcc", "sighting--b62c2810-938b-4fbe-856c-f63cf7badf7d", "sighting--1dd38b35-c1c5-4ba1-86ac-9f2de25b6749", "sighting--cb9d5246-b171-4f25-b628-2baf22b6a908", "sighting--839b21b9-39fc-4ddf-a69c-f4bf4ad01b66", "sighting--cfbdfcb2-0a15-40c0-a690-0bc68311edf8", "sighting--f7a681b1-f2d3-44fb-b416-3b343310c576", "sighting--28277247-11d7-47aa-8a0f-5031ac3aecff", "sighting--293d65a0-be9c-48f8-8c14-9275bbd63fac", "sighting--20decc17-eb78-4241-a181-3a57426219c5", "sighting--a2efd055-1903-422a-937b-8c261d4e7385", "sighting--ca2cdd0a-ad72-49b7-8ec9-2503cd150dfd", "sighting--02c6813a-32ee-4e48-aefa-78c5632d32cb", "sighting--41afc479-e064-4fc9-aba3-bec0630da74a", "sighting--12b15e6c-91ac-43d8-be57-ea5f891e9b90", "sighting--249aa811-efd5-4402-be95-a54283efb121", "sighting--4f7d1821-82e6-4780-a711-280f2426860e", "sighting--866c10e0-aaf3-43ab-ba5e-d31bb15bb017", "sighting--bd1a5d37-8b2b-4e2b-a936-b5158f7dfacc", "sighting--191008fc-4118-47de-a1cf-01910b007d3b", "sighting--9d4bdc5b-4818-4546-a019-dfdbedc805e1", "sighting--52f334db-08ba-42a1-b5a6-b6e8a565d54e", "sighting--e6bc61c6-d268-48a3-ae27-74996217277c", "sighting--007b19c8-709c-458a-a8c8-53854df6a49c", "sighting--bb34104b-b2aa-4bc9-a1e3-f9e1d0495a2e", "sighting--ad6049d2-104a-45ec-bbe8-f255b59cc3bc", "sighting--d1eaac0b-9520-4114-bc43-f52011d778de", "sighting--4a3776a7-588f-49af-b1e4-5aa6bc65cd1b", "sighting--8bfb30f3-2fbf-42fd-b461-d610e7ece960", "sighting--b3f6bb17-1e74-47fd-88f7-83de662614e9", "sighting--7c8e0cff-3b19-477c-a718-efbe08db5f91", "sighting--c0340684-a1e4-404e-9d9c-7f3471781851", "sighting--5ed1a3bf-04fa-4a38-a155-bf2d019e751b", "sighting--5354e1c1-de64-4afd-8970-f118ae7ae8d5", "sighting--9316f3cd-0324-4019-ac8a-6757da17da3e", "sighting--047b4350-48ea-4980-a406-47e24608a03e", "sighting--2ae1a2d8-3daf-4916-af6b-eff8918784af", "sighting--878e6932-4f58-4f00-b275-1375126f9c3f", "sighting--5f4edfaf-91e6-4d54-8522-e26eafff95cf", "sighting--fe74d320-a565-4769-84ed-37b1a28fc4d5", "sighting--dd4c8ab0-7cd2-469d-abbe-773864ef8bd7", "sighting--c8ee6e37-da80-423f-b0be-d71103cdf64e", "sighting--1ecaf54a-d65d-473c-9364-8180b25202bb", "sighting--bc850f18-8e22-4da0-895e-6867c0f5c6a1", "sighting--a9614945-ee9a-4662-850d-dffcf830f504", "sighting--0a0e8430-179f-4e17-92b0-e0c620c4ad6d", "sighting--eb2d274f-2efc-425b-a6bd-d31a979d8923", "sighting--2e93c73e-c3f0-41b6-a81a-5696c4950068", "sighting--97a5b324-7e7b-4243-b547-37ca21a769eb", "sighting--39194acc-f48a-4555-923d-d65af9ad03a6", "sighting--94fc5f9b-5fed-4b6d-b28f-1169439a96b0", "sighting--6811ddf7-4fe6-446e-8ca3-26606f27cc88", "sighting--e5f30d45-49a5-4afa-a98f-430d434f7b1c", "sighting--85aacd07-4563-4c2d-9485-092a6ebe1a06", "sighting--66fb8337-4fc6-4a84-8a30-ddd407216073", "sighting--54e41db8-98b1-468b-90f0-f5bb8dd845ab", "sighting--10555d28-dab2-4755-8a83-d773fa8f09d3", "sighting--7edc0e87-8791-4122-8feb-f7d3ddb191bc", "sighting--214de93b-5165-4975-9ce4-a74a44369483", "sighting--b11c7e4d-efd0-48e4-95b6-ba485bb783be", "sighting--3d593427-e13d-4830-ba9e-f6ab57d6f517", "sighting--dd3997f1-ba50-44b0-90ab-9ba0e1c64951", "sighting--513167d6-d88a-4e30-b605-93340defdf91", "sighting--1149e8f6-460a-4949-b92b-ae369423d487", "sighting--30f15b62-33b2-4f96-b365-0e5a84fe4dba", "sighting--26380bb1-1e58-4486-b3ed-b8f82fa241c6", "sighting--41f50434-f89e-4e69-b107-cea8ff1555ad", "sighting--2fb5f190-1be0-4797-a1b3-10a5c4180bf5", "sighting--8ebe6332-38fd-4e92-b6d3-4a2be95cb0a1", "sighting--2c4b5f5e-5415-4e71-9e7d-17d45d4d3e39", "sighting--a3e6669e-368e-4c63-84df-e76cb8f4d8ca", "sighting--634afbd9-c6ab-4acb-bd1e-49bbade4a05f", "sighting--ae6bf79c-98d4-4d78-8933-651195421ab1", "sighting--6da06759-7af5-4321-b520-d9d4b6ec8b7b", "sighting--212ece54-cc22-456d-918b-05f5993f55db", "sighting--a5104363-44ab-4d89-bf8a-d19386663be9", "sighting--79de37b0-4afb-4639-a2ee-c7645a95735e", "sighting--ea1507b3-0e9d-4d98-8b2e-48f5d042f76e", "sighting--1fd484e8-a410-4cda-b7ed-c5ad3d7b6486", "sighting--8c030f02-b08b-403e-9a4b-7cceae2b6c6e", "sighting--72113f4a-ab3c-40b1-8c74-766df47ff6b9", "sighting--2208331b-a3e7-4316-b597-025b20ef84a7", "sighting--d8b34228-61dd-43c3-9c25-7430d06a3601", "sighting--7d490143-1cde-4402-bff0-845efdf15552", "sighting--e7a755f1-1234-4270-b354-5ae6f253f83d", "sighting--68c16cd4-a98c-4869-a305-d26664b31ec1", "sighting--52c2d6b4-4120-458b-b5e3-a7890a7148e6", "sighting--7f5a8942-c087-4bcd-adb4-c26604f8b142", "sighting--75b6e2a4-5023-44f0-be92-fb434d571336", "sighting--bae43dc4-b085-4f03-8b86-4df4a858dc3b", "sighting--4d5f39ae-00a3-4523-a1cc-b527ecb81d2f", "sighting--0c6ef2fa-0620-4ddb-96a5-7b7a369fc1ce", "sighting--cdc837e9-9cb4-4c64-bd8a-3a1dc7d032ae", "sighting--aa864417-1bba-4c8d-acc1-e878035bf33e", "sighting--9adbdbf1-2a15-4af1-8c4b-ead03145c83f", "sighting--f2e472f7-17df-403d-a9f1-6220640b77c4", "sighting--a9199d86-7197-42cc-99f3-72472fd605c8", "sighting--61534656-ce51-4eb5-8789-b14ca71d6ecd", "sighting--3cb241dd-91a1-4181-a00c-daaa882e654f", "sighting--6485af81-080e-4623-8bc1-dddc349c729f", "sighting--51c25dee-4a09-4636-9861-703b375c26c8", "sighting--acdfe7c4-3c72-4dd2-b20b-4658b35ca1a3", "sighting--6277c5b8-0b4e-4cd7-9ba7-46bcf8f77da4", "sighting--a63b9b85-a26a-4545-a308-910079c98891", "sighting--8233e3be-4c28-42f7-9091-3884fd39af78", "sighting--62bc4688-fe79-4e52-a5e9-9a460b17aa73", "sighting--895b0860-9d89-4b04-8bb9-d37c917e3c6c", "sighting--7d679bb8-3685-4705-9e31-09d02f832c9e", "sighting--5864ff1a-6b54-45d8-9ea6-28b3271ec3a6", "sighting--5f15523e-a372-4660-8b8e-df4a50a8790d", "sighting--096e0e9b-8a0c-44b2-9aa8-dc73563fe6fb", "sighting--09e1a5d2-6c33-42c7-b97a-d99183a39f88", "sighting--d0ffe32c-b0fa-4e7f-b207-a10272f0d88e", "sighting--e9ba8d0c-91f8-41fb-bbd9-8f96f7f234d0", "sighting--456c35ab-d50b-464b-8d78-5fa60704c67f", "sighting--a8b6984e-63bf-4d0d-88f1-48ba7513b4d2", "sighting--8fa0a13c-0900-4368-85b7-e91cf6017f1c", "sighting--102b6dab-5cca-4d6a-bfb0-e64ebc81fe36", "sighting--ec982024-4d72-4c8d-a9a6-82e1b4bdbe6f", "sighting--7adf3cab-cc9b-4859-9946-8c8b225fc47e", "sighting--a6428b30-6493-4a83-b8fb-70435faad407", "sighting--cba91b3b-2f68-4356-a973-83137d5a54b3", "sighting--1556f26f-7c27-4520-9c5e-0b95df941b46", "sighting--2d6c872a-15a5-4191-a54a-a60d15e83127", "sighting--16beb88f-cc7c-4061-9b03-c77b9be9135a", "sighting--19a8d92c-078e-4185-ba3d-e2d627dbc50e", "sighting--95227e00-825d-4bcf-aa18-20d979626405", "sighting--9e40e216-8ecb-4235-99a9-29c3684d1548", "sighting--d1fefb49-0788-4f6b-9817-0415d437b1dd", "sighting--577504c6-85d2-461f-969d-32584ea5330c", "sighting--cb607ccf-3ddb-4d91-8775-3d25b6aebc9d", "sighting--f37823fc-874e-4c84-bd20-b1de7dee7f83", "sighting--f5cae69d-e43b-44cd-b7c0-a8a5d2f86640", "sighting--5e25ba32-253c-473c-87b2-5fc6123d3474", "sighting--c76a8d7a-78a4-4312-9b78-44b4c2b460b3", "sighting--bf4d4841-503a-431d-b10b-a0c5ec9125c4", "sighting--09f87a4d-9d5c-462b-abe1-46fc59042b84", "sighting--34b4aa32-291e-4dac-be52-1ba067e73edd", "sighting--b53f7d81-de61-4621-9d41-791b85c8cbdb", "sighting--9db4c3c5-31a8-46e9-a90a-7bf0c1a3133b", "sighting--01e5d3ff-b409-4e2b-964d-5e720ae55477", "sighting--97ba1ab3-09a6-4829-805e-360545b5e69d", "sighting--22500a6e-1fc3-4032-9458-8b4c7934bd24", "sighting--1a99a341-0f65-4b7f-9622-80dbc9da7070", "sighting--cf1b446c-d36e-4978-a850-3912aa5fe49d", "sighting--e4141f8f-5a3b-483c-affd-f9326f60dd22", "sighting--3a818776-777f-410a-bec1-bea0bab61d77", "sighting--1440ad9f-9dfd-4b1b-9166-ec0163d1b8d6", "sighting--ff80964c-74a7-46d6-af99-2d43d6b5d799", "sighting--8429d035-c80b-4bb1-96b3-59f20703ef8d", "sighting--9f854647-1ffc-4a33-872f-c24575ea3c75", "sighting--bee916fa-5c73-4e61-adce-d66e60dd327e", "sighting--44ca560b-f6cc-487e-829e-a9024a11cc34", "sighting--490a6cb7-cce0-4956-ba66-a110d108fe15", "sighting--a143356d-8bf6-45f9-b36c-6f79f4d21149", "sighting--29403e15-575e-41c3-b0ef-c6d404caf00c", "sighting--3a41e7c4-fc63-4dcd-8c70-178fd4be9b76", "sighting--eb171f95-235d-4f39-b37b-b5f4f78e86c0", "sighting--5c980a3d-4851-44a0-ad66-f8eeb05c6028", "sighting--758e222b-42cc-4c3b-b621-2f87300e745d", "sighting--d2ca2a75-afc3-4bcf-9842-2a8875036505", "sighting--a1070cf6-9ba7-4f1e-8d67-5612331cfbb4", "sighting--282ed177-8f2f-4bb2-bcda-c967fd612211", "sighting--c4e78844-9e36-4149-abef-d35d21bf9822", "sighting--bc42f4d5-c9ec-4c24-9e1c-911149e4601b", "sighting--4269b902-5174-46f0-a81c-e4c71d098cd3", "sighting--705b5035-4b05-4d9e-a237-cca72a95473a", "sighting--4e209d7f-ba05-4efd-9c0f-a59098069d25", "sighting--8e2259f7-25ba-443a-9dc6-cafb9a608052", "sighting--6d57a993-a8ec-4dbd-968f-d8b7799838a1", "sighting--78a383ff-b836-43e5-884b-624add899558", "sighting--a49cd859-adab-4223-987e-7417e611f8bb", "sighting--ff3cdff1-314d-4fa1-bc26-7bfc8e32c2f0", "sighting--6dd4e158-6a9d-4eda-8119-cfa685a11a8c", "sighting--dd034104-6a5f-4a0a-a66d-db35d4c24e6a", "sighting--879553fc-755a-42c1-80f2-28afaf8d015e", "sighting--1b68025d-f7c5-454c-a405-1b35f1cd462e", "sighting--08ff5eb3-b1d8-4130-ab06-203b68b62c48", "sighting--83f9b93a-56e2-4f76-8bb6-9e81d03b05be", "sighting--573af78b-2fed-444c-8829-8a1b32a9ecb8", "sighting--4dbad0e9-a395-4e49-9413-147100682285", "sighting--c9418aa4-6afb-40f6-a972-a6a1ddca3f62", "sighting--14f4226f-7d96-4ae1-b0cc-32d41b56d409", "sighting--e5d4e09a-9c36-4a16-910a-21a1ac8e7ea3", "sighting--9ef8888d-a654-4606-8e1a-3db2b6116a69", "sighting--a56a3902-0146-4224-89d3-fc8a2e51d7e0", "sighting--a78396ec-388b-463a-93b2-e90740618ebb", "sighting--e289d00d-5ced-4ada-8a55-0e331297b864", "sighting--b3f95e62-e040-4b6f-b651-a5ef9c51db55", "sighting--1605782c-a1a1-4c2a-9b1a-05953d2794a7", "sighting--b988c4cb-b6d2-42b5-a711-67294528248b", "sighting--9ff9b712-e07e-4ded-99aa-83f8b18f2f71", "sighting--b6ba7659-7145-40f4-a417-83acca1055b6", "sighting--edff9b63-5cf7-4e5d-8852-4d2f7b3a72f8", "sighting--414b5c63-f16a-4b03-97cd-5fe155698749", "sighting--75c499e6-428e-4f4a-9dec-76a7b1f2e74f", "sighting--3031bba4-5f69-456e-b474-32046240c00a", "sighting--0341fa63-f6e0-4bcb-90ff-dd02a5b6149c", "sighting--8adda621-23d8-4886-8f23-59f93e3444de", "sighting--bc810dcf-dc5a-42dd-9c65-66a94afcdbd9", "sighting--e5f37639-a376-4ed5-ac1c-2176cfca88ec", "sighting--997d3c45-7e46-417c-af33-7cc8250e105b", "sighting--36767435-f37f-429b-8b00-176171b9ed9c", "sighting--8b249b01-a3d9-48e0-9cb5-00296acd8e05", "sighting--c5531412-160a-4296-ba6a-402f37be6aef", "sighting--d5815bf7-ffcf-47b7-b4fd-1ea15531bb96", "sighting--e4aa9101-0d74-4436-bc48-2408a602ef2a", "sighting--94fea336-990d-4974-9dc6-56d386ab0fda", "sighting--e4c0b17b-6a70-4240-b89f-777d8a5e8ac8", "sighting--127ebe6a-a19f-4dec-b9dc-98ff19877bc3", "sighting--b99ffff2-8e57-4e38-909c-1d931b2842b1", "sighting--0f649edb-3c29-4391-bffc-0ad158a33061", "sighting--646e3c64-7de9-4f83-af68-466654001e9e", "sighting--9bf6251c-15a1-4201-af7b-9102e2a85eef", "sighting--c25b7bc6-a4ab-4ad7-9d0f-b454a09aa3c4", "sighting--747bddf0-bf34-4304-8a68-ad5c6324fb3d", "sighting--97efdb80-aedb-4bd5-8698-33c9f122943d", "sighting--3ed45588-549d-4ac7-882a-e5d9fe4a65f8", "sighting--2ee47a3a-6cc1-40db-81a6-29f612369ee0", "sighting--f237db8b-5234-475d-b0e4-3c0dfe6df751", "sighting--5457dd7e-e78a-47fd-94d9-a54e63d1ff10", "sighting--d52ae82b-2ea3-484d-abe6-319658c116da", "sighting--b1047d43-24bf-4567-afcf-aa14547f02d1", "sighting--30a85801-1d7f-4513-8912-639180fcf6d6", "sighting--71c4ed40-0c87-42a0-b6b0-74c41f8f1e8f", "sighting--805063c9-4b2f-4727-8c66-a78a59645e65", "sighting--995188f2-3a11-4fb3-b30d-bedb011d7f1b", "sighting--6dd3e48b-bc75-4cfd-bd67-33dfb12d3cc0", "sighting--8266cbcd-1ecd-44fa-a88d-8626f04ec1cb", "sighting--219c84ff-b6df-40f8-9726-20e11d860f58", "sighting--afb2569b-57b2-45ff-abd8-6125f0633615", "sighting--0756c88d-488b-4501-b545-d8771846ba17", "sighting--7e5232b5-5837-4b7d-a8aa-7dde910ecfc4", "sighting--38ab67bf-dd7f-4f78-b73a-fd301724774e", "sighting--cdb3b5bc-2355-42df-9493-d6835f92df50", "sighting--ff06de9b-a50b-4975-8356-cdf9de98479b", "sighting--6af1b2ec-ea5b-4112-b63f-9691e728cb39", "sighting--ee38f237-ba5b-47bd-83ab-292fa0b06c0d", "sighting--3d0d5e78-2f5f-4f28-97a2-f90649086d12", "sighting--f5531aaf-d52d-4cb3-a9e7-7823407193a9", "sighting--cd722308-c570-400d-9642-1efd47ea84e4", "sighting--06e64b64-7572-4cd6-b9d7-80af4b9f3fc8", "sighting--b258def6-2dbf-4666-b819-3f7012a82ba8", "sighting--ea50e024-9fca-4f80-9206-264a38205325", "sighting--dccbf828-3bcb-41d1-b625-7c97eb7c5a35", "sighting--3316da65-ee1e-42d1-800a-9fdfe0f11fd7", "sighting--a0cb13a9-3e2b-40ef-abdd-bcd89d089214", "sighting--1667d197-0d5f-465a-af78-157a8f9171a7", "sighting--97b8b90b-049e-462b-8a1f-9f70ab4df7ff", "sighting--359c8506-cd86-4966-aa21-8ba6f6f32d0b", "sighting--0ac5087a-bd96-45ba-a358-7d3c3241e9a4", "sighting--2913ba68-ea5e-4f04-82d8-882cda2e55c7", "sighting--bdfefc17-cdbb-4140-8b28-19c3dbb54666", "sighting--bb301375-ebab-4c17-b13e-f13f6ea2a6c9", "sighting--c9720e17-ed68-4628-9dde-15f29c2262a2", "sighting--bd41ec4a-36be-43ae-ac08-bbb3400963ea", "sighting--4be0a73f-a2b0-4a68-8bf9-138cd81b7907", "sighting--926c037a-9bc1-47b4-a6da-b59d52f1b84b", "sighting--d7f55794-4a31-4fdf-ac92-e0147ba8a90f", "sighting--5765f266-e264-48b7-8e02-4f60765357f7", "sighting--4f78501d-99a4-4653-8f46-5fbbe8fccfc4", "sighting--acad8c78-706b-415c-9fa0-6aacd5858c63", "sighting--6c610bcb-9b2f-4fe8-831f-fa34324f9cf2", "sighting--b383517f-1d9e-4f4b-9fa9-3eb9b8a418d8", "sighting--2843488f-86c6-4311-a428-f2a7a03166a6", "sighting--97d6be62-f74a-4a28-9143-40951111306e", "sighting--f5456f8b-6799-484f-890f-4a1191c236d0", "sighting--42ae2c92-4a83-42e7-b115-3995313edb9c", "sighting--d1bd56d6-bdb6-46eb-87ff-36276584ab05", "sighting--36fb2f22-17ba-4057-878d-8d0e7075cd32", "sighting--d7d3928f-bae1-4801-85b6-de0ab81e3222", "sighting--af91462c-c05a-496a-8ed7-119840e7e404", "sighting--d6512aae-6a0d-4a62-9c1b-e213d15d222c", "sighting--2db700d6-6392-492f-9807-001f2e40d55b", "sighting--ebb1e04f-8fa6-42c6-9d4e-74b2bfb27778", "sighting--4bb9dcd1-20cc-4890-b33e-353c3105d29f", "sighting--6a7d0ace-82e1-440b-9e53-89bb57637700", "sighting--822f7a93-2409-4038-92f3-643fb0f4b36c", "sighting--1542f3ff-92be-4ca1-bc9a-eaebebbd14a2", "sighting--b484aa5e-8fa5-442f-8ae6-084613957eb1", "sighting--8a81d505-65ba-4b4a-ba31-737d22c3475f", "sighting--aa79236a-3dda-4546-b4fc-c447e6ac44aa", "sighting--7764374d-7035-4871-a52e-ef7ac377b1fa", "sighting--eb5fc944-426f-4baf-ac57-b95ee588a4c6", "sighting--0fafdba4-9658-428b-9f2e-c1dedb5988ff", "sighting--1c91e069-c440-47b3-a901-f9639aaaeb5f", "sighting--fe4354bb-af1c-49e9-a016-07d1bf78f387", "sighting--0255e1e8-8193-4c33-ab53-24e480ecd136", "sighting--8bc16b81-810a-4603-abfd-4c8ed56e86a9", "sighting--4c081298-5684-482c-a6f1-04eb24bcca92", "sighting--32b67613-3772-49e2-812a-d1ca44974430", "sighting--de9749ec-d255-41fc-8ea8-ffe8e06d3e5c", "sighting--81dd3b9f-6adc-431f-b523-5654d645815c", "sighting--70027c78-d3f0-4517-bcc8-fb9e94891d64", "sighting--526c6128-2a05-4c9d-bc93-85e3f9e0f4d0", "sighting--bc8323ce-ef8d-4497-bea5-45644eb405c2", "sighting--95ac0fa6-8b5b-43af-833b-2477cfc97b01", "sighting--424df981-0191-4e8c-8aca-b3d18b41785f", "sighting--55091b47-681b-4439-af64-41b470da494a", "sighting--973b3e63-c8a3-4645-a91a-56bdbabae0e3", "sighting--9229e9c1-ae3b-475f-9a1f-cabdec62d542", "sighting--11f15a2c-d6a6-4588-b4e5-f4254acc6379", "sighting--b26a60dd-1670-4871-9720-3fff6df97661", "sighting--7d9c7cd7-c563-41dc-88cb-6d909ae6b117", "sighting--0a3ed2a5-6400-4e2d-a32b-9c406af747a2", "sighting--7c7e526f-b59f-484a-9fe5-36c5b417d628", "sighting--610a4faa-de9e-4530-a12e-00c64efdb64d", "sighting--23fb2f45-e690-4475-b47e-cdb52ee49c49", "sighting--57fc47f3-575f-4e55-8eea-5ab6d91036d0", "sighting--b8301674-ee2c-4d9e-9657-80e54331d178", "sighting--2373284f-b8d3-460c-83d4-6f27b96dd9f6", "sighting--f0d76fbb-e896-406e-a974-637f3f332503", "sighting--34962355-8805-4843-bef3-52c9e336ab23", "sighting--9c9fb53a-ee13-45cb-9c34-c87c17c9a5f5", "sighting--5d8653e1-a87e-4c64-9b21-1a2e372cdf92", "sighting--da8c842d-6e33-465d-a252-761b253ecae5", "sighting--adedef51-3083-463f-840e-70727a0ea498", "sighting--a725a71d-c6d8-4c2d-b49a-c05e6c1d8826", "sighting--f25a18da-6afe-49a8-bc1c-0dd855e59545", "sighting--ae5666a3-ec7a-411d-b851-43d14fb91b20", "sighting--c01b2e37-3a8c-425f-8906-fc2c649409a7", "sighting--50fc8f32-4375-4b04-ac7e-f3a8eb9cdd2c", "sighting--d727bed0-3163-4413-ad5b-c806b07ed79a", "sighting--8e3956a7-1d36-4caf-b020-c87eff8cfd99", "sighting--df3eadd1-4134-4d5e-8faf-52a40e4cff9f", "sighting--f6c69843-0c58-4c90-af73-185614056f23", "sighting--98f1726a-718b-4384-948c-e6f8b2d8c485", "sighting--cca1c7e9-3973-4115-a2fc-ccf73d99377e", "sighting--fef9d206-dc84-4f51-9e5f-6f78e06eabcf", "sighting--ee669b2e-0702-414c-a85b-5d3073e74c70", "sighting--21c33ce7-8e59-4243-90d6-9e5264d7e97e", "sighting--38f6a9e6-d0f1-4c91-94a8-36a72dca3355", "sighting--781c5094-8170-4c91-8ae5-ce667e2776c7", "sighting--1e11be48-ccb1-4b51-b1b8-4118321b2d44", "sighting--de675247-355d-465b-a7b3-ecfad6c1136f", "sighting--e8783ddf-abc9-4026-af66-d5637364849b", "sighting--9cc4c48d-5d8e-437e-a279-d1ddf2c327c1", "sighting--f7ccfded-64f3-489f-8e14-ab24bf1b1dd1", "sighting--8cb33ec4-bb13-4981-9188-a5e4ee2d46fb", "sighting--677c600d-44b1-4dc6-b9bf-9bbbb4d60e3f", "sighting--3e4907c7-9809-461c-9eb9-701f01dd74e6", "sighting--f6fcd4f7-94c9-4b5e-9bbc-d7824bf4cc20", "sighting--02aa1ba9-3c7f-4736-9a68-4711475fdf28", "sighting--f4ec18a4-68cb-408c-8aac-248fa2896be4", "sighting--f8c6448d-c31d-49ec-bca9-c8b86643cf31", "sighting--6de01f59-f374-4241-b6b3-7bf888f177e8", "sighting--72ad9129-fb58-490e-897e-c5410fc03a62", "sighting--a7a147fe-151c-4886-8622-10f019d27bad", "sighting--aebc6221-8059-46fa-9d51-a7bb00ee8698", "sighting--4a014e66-f7de-44f6-afd8-87d62f792b9e", "sighting--054f02fc-592a-4842-b63e-fbaa9cd466f7", "sighting--8f7c93a0-f3d6-465e-91cc-fb35160bbd55", "sighting--4251f0bf-8acc-4ed5-87d6-0195bbdac41b", "sighting--606c442c-a408-4f46-8876-09360bbe3265", "sighting--eaa2bb71-f6ac-4ba1-a908-4da898a749d9", "sighting--a2115d6b-729d-45e5-95d7-662db849f504", "sighting--15e14fe2-211c-4b41-ba24-b6017dcadb49", "sighting--c0703ff9-c6bb-4254-96d0-3a1042f93fdb", "sighting--d88206b4-50dc-4c05-98f4-1d94507f7aa9", "sighting--1b86bcd8-5d70-4e52-b846-91c4aa7ee5ab", "sighting--27a536cf-5b7f-4831-9161-c54634fb4150", "sighting--2ef65aa8-406e-41a5-b281-8fd69ccbec3d", "sighting--3df93bf4-c4aa-432e-ae17-980b5566fc8c", "sighting--07fd0141-8774-4718-a41f-1e94f81024e5", "sighting--61a861dd-12c9-4e38-989b-ee7f4017a618", "sighting--0824b84f-260a-4930-8db3-c65f280078d8", "sighting--25e6e7da-f62a-42fd-9414-681bc3f325d1", "sighting--6c3ff5ac-754a-4262-b0b8-86fd342491f5", "sighting--fe3af0ab-b878-4d37-a2e1-4ab9b91b7774", "sighting--b794c268-34cf-4ce2-a7e8-518a0dd00159", "sighting--4a204201-b5d4-4cf6-8c8b-bbe0d0835b19", "sighting--e393ec40-02bf-49f4-b1d1-2109312892d2", "sighting--832f0295-a8d5-45aa-a540-8c72d73fa95b", "sighting--3315988e-0a7a-48a1-81c8-6ed92a31ceab", "sighting--80980038-86da-42a7-8e1b-ce5d3c5ca056", "sighting--80fb0cb4-b0b4-4e34-93c9-e9e693a91b3b", "sighting--9700750d-ea09-4e50-8f2a-56b5115c4c08", "sighting--4c5a130e-dac1-4478-bbf6-a570a47092ac", "sighting--53fbdabd-2d24-4686-ae1d-b0faaf4b8879", "sighting--4e7fa4ed-42b4-4d35-8bca-57dab0b09a15", "sighting--cd2828d4-2703-46ad-9dc5-f293dfc4e676", "sighting--d9e889a0-8ee5-4089-b832-e2a8bf46ab32", "sighting--f1f4fa8d-5f40-4ed7-ade8-3db4ac684432", "sighting--4cf55e41-ff2e-49d9-9251-7ac8b7dea125", "sighting--84493db2-dd47-4832-b95e-4bd6b0a3f114", "sighting--a8620a48-e1be-4621-af1a-78b2112a0e32", "sighting--5d1545c5-4f22-4f54-942c-1c38bd038a6f", "sighting--e0ef071e-156a-4c2b-9f3c-adb4bb433a95", "sighting--803a783c-bee6-4252-82e6-299fa01eb597", "sighting--87cda0f3-2443-4e3e-bca9-767ff43a89da", "sighting--e0c2eba6-23b2-4ffb-96d1-9ed1b7593b84", "sighting--30d1d34b-aa11-4b77-9d6f-00242c85ccc1", "sighting--d7bc8181-2444-4811-856b-dfad65dbbc1b", "sighting--66cdc9f6-3aa9-4cb1-8aff-5af790248b57", "sighting--bf27cac8-0ba2-4dbb-85c5-8c2dfc0499ab", "sighting--cd31319d-ddd3-4e13-b431-5304d4fbc4d7", "sighting--503b3a3b-5f7b-4d70-86fc-1fa68b018d14", "sighting--82be0b89-12af-495a-b913-b86cbed10cc6", "sighting--08c56e9c-3fec-4380-af53-0697342f1840", "sighting--5f9c593e-26de-4977-b94d-9b1b9a5e1e0f", "sighting--0382f3e5-a829-4ce1-bbef-8100a03e253d", "sighting--f5ae5707-3f5f-4cc6-b9ab-ea3aa21ef0e1", "sighting--4fe1d8dc-5225-4808-9ddb-3c26c989c8ce", "sighting--8a91d984-e2fd-4daa-af64-26626b1e7199", "sighting--912e484d-cc5f-4f4a-88d2-d32905f08394", "sighting--c8644d08-03f2-4ba0-b515-bac7d6d3b418", "sighting--e18cdf44-7c61-499d-8c50-ba74a572212b", "sighting--ebea0744-605a-433b-82e5-69c782dd1118", "sighting--ab1eefff-e028-47ef-b41c-7a38b4e27032", "sighting--d1f02df0-5643-49df-86a6-291747be5a18", "sighting--4cbe64a5-2825-4525-ac9c-a2dd4ba43c77", "sighting--d53ce1fa-8d33-4153-9a19-cd0b53278072", "sighting--bf739f22-6cfe-4d97-8742-79a3ef524153", "sighting--c4c624c2-75cb-497d-af16-6275b8f829ad", "sighting--e1e0f805-7f6d-44f1-98be-b531b51b4987", "sighting--6389054f-d40a-4fa7-a0a4-e5a166b355a5", "sighting--8464c760-4460-4279-ae11-ff6c8006c3e7", "sighting--63e4d966-61da-4694-98f9-be07afff6c4e", "sighting--fba4b7d6-d348-487a-a972-e9c817ad455d", "sighting--1a9d2515-98ac-4bd5-ae7e-111c2f5f1fdb", "sighting--c293a5a8-b5e2-4966-87b9-2de93c1b4ee9", "sighting--ef380aef-ba92-4370-853b-19b4efce8311", "sighting--942547f5-8fbe-49f6-bf2c-781f3c23a64a", "sighting--d715b7d8-f705-4d8c-abe9-89a3c00c8a2d", "sighting--8f6ad359-abfc-427d-86f4-e94baaee7041", "sighting--20c18224-2d02-454e-91bd-c7a95f79ce5a", "sighting--66ec9e93-1f62-4333-b20d-f4f7663280ad", "sighting--0041a6ab-8e82-4b19-a12b-bafdb6e7db4f", "sighting--b43e1b11-8773-4bb3-8575-e44536e5fec7", "sighting--5153bfe9-c219-4ce8-b352-9db682800aab", "sighting--83fe194f-dc2d-452d-9408-68a9890ad39d", "sighting--8c2d2163-26d4-479e-8a42-186413ade4b1", "sighting--02092966-ad7d-40cd-845c-830cc2d50ef4", "sighting--6069735e-248b-495a-8f17-57019af2d34e", "sighting--3c758c7d-f616-44cc-98f4-b83232af6355", "sighting--3f0406e1-e2f2-4c0a-89db-2f57cb087035", "sighting--ed972162-b65d-460f-b57f-236531013861", "sighting--e9d867d9-213f-4b43-9d2a-860b0b587da4", "sighting--99703d41-3694-434b-aa25-fa1330910f7a", "sighting--f1a4bdf9-5c7d-43ae-bbc0-258d5d82457f", "sighting--48f7f96d-09b4-4df4-beff-3d10b4b2a4f3", "sighting--c28b0ca5-8184-44d2-98e3-07d1689448d4", "sighting--dc881e40-2c0e-49be-9981-9396561e8b03", "sighting--a5b04a80-d15c-4e2a-a93a-bc5a89b654a2", "sighting--47001f7a-63f2-4dd5-bd01-151f2720a0c1", "sighting--b988e57f-3284-4b8d-b0ea-6f184e71aed9", "sighting--25a99574-8f11-418c-8b09-5c47bb3b5c46", "sighting--b2ed27e0-8777-4f77-90b6-3e612fb96e2c", "sighting--1cd98c40-65e0-4196-8c3a-b6396d0143e3", "sighting--20bd4733-cf73-4f9e-8565-d2ee0f4baaa3", "sighting--29257403-c6e8-4268-9bdb-752865d18efc", "sighting--b1cb3def-214e-4593-9253-a3912d82e5a9", "sighting--b8106b97-342e-4ecf-8dec-5a7e9f01446e", "sighting--05011b8b-33ca-48b4-a49c-62365fd8bf40", "sighting--a92a57d4-242e-4aef-9401-031fbef774a7", "sighting--303eb156-087e-4044-bc0b-e4a48b5507aa", "sighting--3d21a802-841f-43e1-a314-bea6f26f13e7", "sighting--1b0e3967-5823-4597-97e6-656255c8a5c0", "sighting--607d6fff-b532-40af-a725-3be22d5337c5", "sighting--510fe628-019d-4e78-b654-b131be7f4bca", "sighting--45177e96-0a08-43be-aca9-fb1efd5d79d6", "sighting--f3429217-7800-463b-9616-c637f725102e", "sighting--e34459ad-e170-4c69-b86f-aad5229d2c14", "sighting--8344c645-7b36-42de-94d7-2dfc644ca64f", "sighting--7de87514-939e-4d2a-bb5a-d20030d54db4", "sighting--0ac219a0-cab3-4df1-a141-6e6f3b3ef6b9", "sighting--d75fc8fd-ea9a-4f93-9130-fcd53b0076f8", "sighting--f2512a17-aa98-4f66-9ec1-8a4297d27f6c", "sighting--07e75118-68a4-4fed-8e12-28020b31bb10", "sighting--ffbc7dc5-6af7-4e5e-a7c7-48a49c8982a0", "sighting--d4541140-5477-422e-95e5-f26247e09040", "sighting--588dc148-e626-42a4-87eb-9548103f4aad", "sighting--85710c59-54ea-4951-a220-9a023bc2bb64", "sighting--0ae0ce4a-c143-435d-b70f-a76274de3a42", "sighting--8745392d-f730-41c9-a59b-7e749c486a03", "sighting--3283d41c-9c7d-4f93-bf18-b1828c439da9", "sighting--4e8b14c5-762f-4605-8d04-02ef459b3739", "sighting--90e07415-2a8a-44e2-8782-397d5e936396", "sighting--41290aed-1312-436b-b6a4-a88a6d333ee9", "sighting--1ac5438e-8e24-4e6c-adce-462958955df2", "sighting--4c225659-3772-488b-b1f3-a36aa341856c", "sighting--b2718600-e7c1-4dcd-8b99-9b8c392b217e", "sighting--51c8de6c-e4bb-4c2b-93a5-bacb85191ae0", "sighting--5a3f06ba-4263-4f4f-9490-ad086eb77a09", "sighting--b7300bbf-aa1d-408c-be8b-59b8ff4eea04", "sighting--7656d510-7fc5-4dba-850f-ed5a64bb0bad", "sighting--888df889-ab77-4041-b08f-846bb544228f", "sighting--f630dc03-98f3-4268-b830-58845d314521", "sighting--27edf46a-c2a7-47da-b6f8-494eedae21ed", "sighting--a494c3c9-eac8-475c-bb99-5b89b63bbfc2", "sighting--2cf00bab-2876-49aa-a16b-f9f4f430108b", "sighting--d4429ae2-5075-448c-bd68-e312448be5df", "sighting--1b66983a-5311-46d0-b219-d91f27a9bfd3", "sighting--0441c70f-1d64-4793-a8f0-284a75fdbc6d", "sighting--153c31b2-12aa-492a-b0b1-757e819d937a", "sighting--d736ea76-f526-43e8-af8a-15f8bc522688", "sighting--60f8dda1-4edc-4d82-a043-8b30b62c53dd", "sighting--81baf0f8-349a-4a12-9255-7a3e67c0a8fc", "sighting--f79afc93-5b42-44a8-b201-14539a1d4bbb", "sighting--64c96426-f15e-450f-9a39-100fbce31099", "sighting--75659686-d3e3-4e78-9081-d8eea61f2202", "sighting--522286a8-4831-4c68-844e-0e3d1e62bdc9", "sighting--ca3aef87-3b0d-4665-8341-34eaa39f9992", "sighting--9f272b88-ae61-4cbf-a58c-485344273231", "sighting--94a8fa65-1a44-48db-8a06-408d9be659b2", "sighting--5ce813e0-896e-4055-9b23-cc8571505ed3", "sighting--414181b4-d28a-48c8-9a7c-f2ee4a3e34e5", "sighting--d0d8dbec-e477-453a-8f45-3bc9b1dfcf12", "sighting--030d9fce-d451-4787-b311-eb5941d5bbf8", "sighting--498e35eb-0943-4786-9998-79c400695efd", "sighting--d4654e14-e667-4817-a133-8099c437306a", "sighting--c42e5ad8-5266-42e2-a8d8-6d8b1b051fba", "sighting--26fc4199-c1a6-45da-bd8b-cc03795fadb5", "sighting--965ff8b7-6a20-45b8-b65a-75f5ce552366", "sighting--d0700c48-90cc-43dd-bdf1-1870e7205a39", "sighting--6281c628-0acf-4aa0-85da-17045942e269", "sighting--9a158290-396e-4386-b85d-23574467c894", "sighting--a35a2846-5f9c-4b2c-80d9-be75c2402043", "sighting--2f2453eb-9a5b-4500-b558-15fe0da9d83a", "sighting--4f40bc7b-ae84-4c9e-b364-b697ccaadaf9", "sighting--af6155dc-374e-4ecf-8133-0dbdd3a1b668", "sighting--3de9f7d7-5f7a-4209-b562-5ef5c8dae2a0", "sighting--41675481-9347-4baa-a4dd-cab50c926268", "sighting--ed95931f-1035-440e-ba01-e2d4fe4da0cf", "sighting--a322ff48-3eae-4a77-a8b2-d6a248338c27", "sighting--0a3c332f-21c7-4117-9989-7b93ad157d29", "sighting--d5d02475-e95c-4d24-9f55-459bc91795c3", "sighting--0902096a-718b-4757-aa33-d21389ffa89a", "sighting--c6445146-2ec8-4ca6-9ea6-2f12f6087926", "sighting--d1d031b8-0607-40e0-8e63-545069b68570", "sighting--657f5fa9-a6fe-41a6-ac01-292483e4130f", "sighting--72bb959b-4c83-4b5d-a5a3-37d4b9fef3ad", "sighting--f2a978d9-dc80-4db6-9488-abb46cc1a545", "sighting--7759c61d-342d-441f-a913-bc1948d8a8c0", "sighting--a9611fde-8508-4b13-8d60-977f05d0e623", "sighting--f94b7f51-c068-4f37-a616-146a1b8a1a6f", "sighting--9bea26b5-4172-43d1-8bc0-fc2fc6463aa7", "sighting--9a019262-445b-4afb-8622-a1bb74293b2f", "sighting--55dc090f-72b5-493a-9e4b-2dad0a34fe89", "sighting--da86f2bf-5a8a-4b2b-b5f5-9675a0c7e886", "sighting--c9a635ad-2c91-48ce-8da2-22e99aa2e604", "sighting--563cbee4-2d30-4be5-a315-b3ac7e03fc2f", "sighting--047d81a5-ba4a-4d7f-ac5d-4bf017f2ea57", "sighting--65548f6c-9a2f-477a-9f09-0119a79e4e06", "sighting--433fff5d-43dd-4a1c-8236-5d065b43a1e7", "sighting--f5850254-1e3d-4879-85be-ac0a910e7865", "sighting--ef8648e3-198a-41bb-a77f-e1c08c58384f", "sighting--8c92b271-36a1-48b8-b646-dc30a719c358", "sighting--63d0243c-2d4d-4d11-ac5a-bb2c7eb253cd", "sighting--63e8d3ec-c614-44c0-b6cd-61c5c236b986", "sighting--02716fb4-e257-4743-967d-930d0271e6bc", "sighting--50034fa9-2026-4198-a684-fffba32e1be9", "sighting--152e7439-fd55-4c1c-abfb-ff572ba7f203", "sighting--229637ea-35d0-4283-9f1f-7268b40e68e5", "sighting--2d24e4ee-36d8-4921-8777-cb31f7873a44", "sighting--e7dab918-59d2-401d-9ce6-abb6960c58d9", "sighting--6652b918-ea73-48a4-8778-ee725e69d5b7", "sighting--88d64741-1da5-4d42-b475-2c554cbfc0ef", "sighting--e3e69ad4-cbb3-4ed1-88fd-43e63ff6e12f", "sighting--541ab412-a8f6-4c06-95ab-44010446f191", "sighting--7e371640-d091-413d-9c3c-57b93d2fcedc", "sighting--d496e24b-2d84-4ad7-bc47-8f7e69da2e91", "sighting--f11d6680-60a3-45b8-a6c0-515b41fc0665", "sighting--000cbdda-34ab-4ad5-b2c5-2daf04e18dad", "sighting--ba9af775-0c82-4f3f-bde3-6e578ae4a683", "sighting--6a71c453-52c3-4dde-bbda-53b1040510db", "sighting--b7381d34-1ec3-4e30-9dda-9d45f7d53970", "sighting--b6bcd689-07b7-4153-863d-053b8e6d445e", "sighting--bf7b703b-0977-4ac9-9eb6-c5264805a721", "sighting--785567ef-57bc-47b0-b9ce-3e41f9e5b4d3", "sighting--85f7ef19-93ea-4a31-bc4f-f4ff4feeea57", "sighting--33fbad83-fd51-4d8f-8609-4dc293aa6cee", "sighting--7edda0ca-0f1b-433c-9398-a4b531bd4b90", "sighting--4c6d91a8-6085-4c5a-b743-f531fbc14459", "sighting--4ebfdaae-25d3-4f1f-9717-641cae3c76c8", "sighting--40512bfb-5824-49f4-94e9-96c7dd512cb7", "sighting--e78ad933-55c8-41f4-853c-88bfc3a34cd4", "sighting--ad8758a6-ba07-4c47-a97b-42e1fb9718a0", "sighting--81dee856-99ea-4e32-8dae-8642613998f2", "sighting--447ed208-8d83-4980-b21c-39e45c0a0b3d", "sighting--00ade7c1-bae8-4e23-9675-3692cbb269bf", "sighting--df516f78-7d57-40d2-87c8-67aaca30eca9", "sighting--b4f7917b-82dc-48dc-b340-e6227b2dfd34", "sighting--5882c5cf-c636-42b5-a0c3-a5e10c5331d1", "sighting--1ea5a79c-5763-4468-b547-a6cf00c1bf60", "sighting--5f543b25-ee1a-4fb3-a728-cb588e9a8f58", "sighting--ea6f37f9-7fc7-47e8-b4ec-7d011fb88786", "sighting--d3b8fed3-3f69-496f-a445-b9d348a816e3", "sighting--cf95cdcb-915e-478c-8fcc-70164d4dc0f3", "sighting--393f9e05-126f-401a-a89f-a7a4cdfdd41a", "sighting--7739db2d-d18f-41fe-abc7-2b96a58628e4", "sighting--c9b1f9fb-dd6c-42cf-b263-b9fbffe0287f", "sighting--53937720-181a-4aa9-9f15-c04167faac11", "sighting--b3e0ec00-761e-4cf3-adfe-c74b48bd214f", "sighting--5513d6d5-4a16-4030-a390-5767f56064ab", "sighting--63209e0a-40f7-4402-8127-0901c62ad587", "sighting--26d72a13-e476-4a64-8b17-94591e986aec", "sighting--df66aaa9-35a4-4b16-b9dc-e0fc23a6153c", "sighting--b4eba1ea-0f6e-4d27-bc34-32e75d0a58b1", "sighting--b48fd2d3-4327-4e45-ae46-5a05ad56687b", "sighting--a1877baa-18ad-482c-9c00-e389b911fdc8", "sighting--6e014f97-1a2b-4f69-b89f-29ffa9edfb6a", "sighting--033e0c64-5a63-4843-8edd-f6897e49857b", "sighting--2ba70adb-8396-47a0-b598-145cd44c50e0", "sighting--fdc25e9d-2fa9-4ffc-bc25-2621733180cf", "sighting--4f5bf369-7618-46cd-961e-caba4130d065", "sighting--95a5bca7-b0c9-462c-a9cc-986b8b4e07f1", "sighting--d6d61c20-f8a5-4b01-8e06-f63e6d58d368", "sighting--bc4ea6a3-66ef-4346-b064-aa7b328184e5", "sighting--29729b33-7221-479f-9040-1de1eb63bf1e", "sighting--495d7448-3f7c-4ce6-91ff-98ebe6053732", "sighting--80b825e1-ae54-41fb-b720-937089dfdb0f", "sighting--e238414d-4be0-4a9d-9992-36aa9cea31b3", "sighting--9625c30a-3042-4329-afe4-f0983aa20c89", "sighting--f1706e17-22b3-4617-8c4e-b85086d1b5be", "sighting--43890120-c5e3-48e2-a0f3-cd2330233a05", "sighting--fc2a54aa-26d8-4075-af35-9a5a6eff2445", "sighting--5544ec3d-9ceb-4da9-9317-b75d43acec71", "sighting--a522f784-75e0-4797-9cea-3fb206a26d41", "sighting--ac8c7ac6-3a78-4285-883b-045374f46965", "sighting--54cc6af0-d45b-4e05-b060-ee585440c6d0", "sighting--f077cf02-4210-41d4-8fdb-413b18706414", "sighting--5b8c2b44-3a8b-49f7-a1c8-3e55208e8a47", "sighting--b79d4308-b405-40a1-8c83-d0a0e5b61e84", "sighting--84cf2f56-a2a5-4d45-8a06-bec92b221609", "sighting--ff2b8660-7243-4dd8-a5e1-8fd7b7943f18", "sighting--c33cec0c-7770-4757-95ed-d97fb6c402f5", "sighting--2e0d20fe-a977-485a-b659-7c1519ea2277", "sighting--b7d81af3-7a10-427a-9645-a6ba224250c7", "sighting--04a6504b-0b0d-4a79-814c-610850c56181", "sighting--ef41c22a-9793-46cf-8cff-e5a80fe7e485", "sighting--0fc3dbf8-79c9-4b7a-97cb-c2d45a6cfb37", "sighting--fc9fc79f-2ba7-45da-aa91-e71c6e1e5558", "sighting--c761b04d-b1fd-4e5b-afad-11dba9cf1674", "sighting--a58ac57a-0373-42b9-9aa1-c4c5cfbcca2c", "sighting--32cd043a-49f6-41e9-9c5e-f200f4b4076e", "sighting--21895508-0a60-4fc8-91d0-ddfa2e879af8", "sighting--b45ac09e-f831-4671-bd0c-2247d6206dae", "sighting--9ce0ab82-d514-4f18-a872-f52633dc69e4", "sighting--184db4fb-e915-44c9-89f4-80a308c62885", "sighting--199c3b66-c6d2-46d9-ae32-18fe24b5e130", "sighting--3005477e-9d99-49e9-9a0d-2d3b5f7e7812", "sighting--97d89249-15e1-4e61-b5b8-d434a5f2a709", "sighting--d9643562-c6c5-4adf-95bd-0c5c20d8d05b", "sighting--cbb562a5-17c9-4e5c-a7c7-6ba54e7a1593", "sighting--569cec31-64ab-436d-af91-40f6fff76e8f", "sighting--6cc10607-b163-4d7f-8224-7c64b173d0e4", "sighting--d8b0d0be-ffc6-44de-968e-773e1a719ab1", "sighting--794a1de3-589a-44ea-a8cd-da46aec9ad4d", "sighting--5192a25a-ea44-44e8-9725-5d00befabc59", "sighting--2b5a3784-015f-4793-84e0-8776bc16599b", "sighting--045347c2-aa03-4ec5-adc6-97afbfb802ee", "sighting--517bc55a-9ac6-417a-ab19-74c59d1647c0", "sighting--8802d9da-51ee-4f3a-9387-da12ba97e69d", "sighting--eaed145a-c734-4a9f-a2b4-668845b32bc2", "sighting--53fbf78e-4ec8-413d-8b70-b4541fc18e98", "sighting--0e66fe57-74fa-410e-aaa1-807c2c53a8ad", "sighting--e685e151-6f28-4529-8503-4726221920e3", "sighting--04d17ecb-fa5b-46ac-a3c2-20222e773fea", "sighting--d5bd735c-b8d1-4e87-99d1-45d802944110", "sighting--50a1845d-e9c1-42bc-ab08-85aa44d23307", "sighting--59eb0b85-f5f5-4881-a9fe-f5321b33d00e", "sighting--007055e6-c98e-4247-9042-6921db2095a5", "sighting--8851ffaa-81b6-4716-9046-9ce7ee11d8df", "sighting--156d7266-8406-447a-b1b5-a33cf4d30170", "sighting--fb5c91ab-a718-41ba-a7b2-ab428bf7bbc5", "sighting--88e21172-a15c-418f-9cec-35d3c4588d2a", "sighting--7665f24c-657e-43c5-bb0f-f399b6114f6c", "sighting--c3dd236f-5971-496c-bb09-76d5c4b6aff9", "sighting--598fbf77-cf1d-4443-9095-42a109ff8565", "sighting--009c9ff8-7b8e-4a02-af56-65b7e021f00b", "sighting--c2fb1d24-5614-4c38-b184-bf8c9948215c", "sighting--5a7fe3e2-eb1b-4cea-a0ca-b91fd3b96a36", "sighting--1859998c-fcc8-4132-ace2-bd756a2df48c", "sighting--82f91cc2-248f-4c63-ae41-618ca5fa1f8e", "sighting--10a96f85-c7e2-4502-9424-26694b0778b6", "sighting--e3485c8d-c931-47dc-b8ab-f5db4c3ff925", "sighting--67b1ac17-f191-4958-b0b9-7852b56d6276", "sighting--f93c8039-677c-45db-8116-81005bc4f688", "sighting--64e81d02-48d2-40ae-8fa5-017ec8c58b33", "sighting--fa3868de-ea0f-4d6e-a578-1e73aba1d0ee", "sighting--00d9ce7d-703f-4f42-b056-c4d93ddc671d", "sighting--20a70d5b-70b2-49f9-836e-a9e1907504d7", "sighting--030d10cc-b15c-421f-a304-6093d832f5e2", "sighting--6a60ad56-dd5c-40bf-a61c-f0d06af1eb89", "sighting--d2a09d49-9c21-40d5-a86e-397d308b52fd", "sighting--5f54e0a9-a285-4769-93fd-edc4bf1a4349", "sighting--3d8af8a3-7e78-48b1-8e32-cbb4de3c749b", "sighting--0603e76b-0f85-4636-aab9-c97c685c2606", "sighting--5908902d-22cd-4391-8c7c-174b02d06c93", "sighting--b9e4edda-d29d-49f4-a3f0-987de3ebe641", "sighting--f82ff9f3-67c9-40ba-87d8-f0d8b7003e45", "sighting--a3697ecc-20e7-4863-913c-f0dea7d60f0a", "sighting--7b8f4350-af42-4624-b935-e80f826b724c", "sighting--d800650a-dba2-4026-95e8-e820b117f022", "sighting--98749904-2f35-4c93-9324-f811750c1370", "sighting--e69af122-9fa8-4c98-b8a4-1ce68c593597", "sighting--8fb524f3-1374-4b96-958e-012b87378bce", "sighting--931bcf7f-7ddb-420a-a5c1-dbbe28a8837b", "sighting--03f12f76-3a24-4327-88d3-3128acfed561", "sighting--e508e62c-5da3-4dfa-93bb-d18105024d82", "sighting--406dd1fd-6356-41e1-a26a-539f41cbf866", "sighting--c0b2b966-891f-4635-9670-af477f25266c", "sighting--cc4b973b-8d0b-4011-8411-aa525d15e3ad", "sighting--93bca2d5-45d4-496d-942f-e3886e952015", "sighting--5b415675-ca6a-4108-8c0c-39014866134f", "sighting--6164e1e2-392d-459f-9069-e8d378bf0551", "sighting--53b783a5-a107-4dc9-b489-d6429d13df65", "sighting--df21292d-2f8a-456b-b7cb-d31774720d02", "sighting--8d5b3b86-6101-4293-90f4-452ac87234e2", "sighting--9b90f394-e707-42dd-9e09-b62e0c010db9", "sighting--dd40ce24-e674-40c7-928a-e9c49f3cd235", "sighting--5c3805c6-1d32-4309-a3c4-46d6b2c954d5", "sighting--a68a0fc9-a032-4945-a75f-6353e20b013a", "sighting--ca363de7-6afd-47b8-bbe8-6a4c06ced8fe", "sighting--b0e779d6-0b36-4e0a-bac6-59cf36c9b7c6", "sighting--2fd4d927-ffd4-4157-94cb-3212b915687a", "sighting--1413c422-4eb3-45d7-8267-6e2b890ffd47", "sighting--05432af7-6d14-47fb-89a4-abccd75cf6d6", "sighting--7dce3d1b-fa67-45bc-8ff4-fce38410426e", "sighting--70e2cf81-029b-4f5a-abee-e075d1889137", "sighting--8ba21ec4-6dc2-4d8b-a606-024ada4019bb", "sighting--5d76b9a1-0109-40fb-87a8-6eb5c6a9af62", "sighting--40ab72aa-b67e-4b2a-8f0f-0a70152facc4", "sighting--fd7455f1-c891-45b3-b180-81463d93ca7d", "sighting--f15cf953-a413-4e9a-bc46-d4b2f6dc4288", "sighting--e7ea87ec-818d-4191-8534-8cc214a558d3", "sighting--84d96ff5-e3ad-4add-9825-5d1643d4aeeb", "sighting--d3026f02-8ed0-40ef-a8bd-c14d595c05f8", "sighting--f731f4f8-e80e-404b-9bed-6392db61ea53", "sighting--8f801544-3ffc-404e-bb92-9b2922afec31", "sighting--8ce29c0d-c52e-4afb-9fec-d24f82556738", "sighting--f64c7bca-4a7c-46da-9c81-37fdb86b3bcf", "sighting--48142357-2b52-4fa8-9a22-646ce7c026e9", "sighting--9d8d2a13-8351-4e2e-9f6d-a8ec345919c7", "sighting--1bef99f0-a336-4f7e-a56a-c1f716ca99c3", "sighting--406849c9-ec18-4a65-a70f-b2ee25eaa773", "sighting--acd0a728-ca01-4fec-b2f1-e21ac59ba439", "sighting--cf8300c1-90c5-46ed-b41e-b9dca72e0d13", "sighting--9dcead28-7300-4370-b049-bf16f2a50ce1", "sighting--c091fa1a-04ca-4de2-8176-13f0d5e44413", "sighting--3593e40a-99be-43ea-97f0-df7feb1416b1", "sighting--81b95c2d-5a5d-418d-a166-4acd8a07be9f", "sighting--9e951ba1-d53e-4c61-9124-ffbf60101682", "sighting--a01ef0bb-5a4e-4fc9-848c-11d6672e9ccc", "sighting--f4d3c127-46fb-4f19-a330-6d9b37ec659b", "sighting--f57499e0-db68-4cf1-8497-f6c8e32955b0", "sighting--520c311a-7ad9-41a0-a568-6b4ccdee696e", "sighting--60fa9a5b-4ade-4b37-aeb4-12bd00f2cdb9", "sighting--f2e187bd-be19-451f-a08f-64b34e80edbd", "sighting--73829856-29b8-4846-a835-3144ba271489", "sighting--dc969571-3463-48e6-88bf-213df60995c5", "sighting--ad1efb38-0bf2-47a3-801e-d1c417ac6177", "sighting--bb3456b4-d9ee-4104-85fa-c588a1993515", "sighting--a05b3657-cf89-4643-909e-fdb3938f728d", "sighting--890f2aac-f561-4bfb-8710-e1b150b5507d", "sighting--2efc8e89-ce70-4639-a190-5412bdd96d13", "sighting--7abcf757-4fba-408f-9cb0-eff01e85be10", "sighting--dbca2403-b2ea-440b-b666-e940f952c0d3", "sighting--a7a4e56c-ef96-4b8c-afb2-cf9230d14c41", "sighting--96bf1256-6ed4-4105-a9ea-ce6c23687dab", "sighting--9ce2d865-143d-453c-98a3-e786fdcb1853", "sighting--e3e7148f-56e7-4415-8eeb-f0c7f2e610d5", "sighting--b650c2cb-2a5f-46a8-97f7-9e93c01592a9", "sighting--555237b3-4bd4-4e8b-8a8a-925e76450585", "sighting--662977cf-4b0d-4f8d-8ead-6ff8bb58fbfb", "sighting--1875bfc7-4791-48ce-8813-f6b7ccc74cac", "sighting--e733bb6c-75ec-4294-84d6-2618c8b2ec16", "sighting--56268836-7149-4578-9a4f-dc51abcb75c5", "sighting--23859f32-7490-4c83-b05a-84c400a68f12", "sighting--557f4699-3cfd-46f0-8692-00da96fc558d", "sighting--f3fe4207-0e97-4513-bc34-d2b68eb00a5f", "sighting--052b8976-e9a0-4439-ade5-7e97335697d7", "sighting--d5c03a4d-bab7-459d-9b13-fb818050ee6f", "sighting--ce106aef-b9e4-482c-947e-f4749a8bdee4", "sighting--a1e1ff0d-4df0-4f9c-8596-1e07d478eae1", "sighting--5b49034d-abda-4ee6-9c9c-1ae604838b91", "sighting--614cf372-9b70-4146-820f-56206de0318e", "sighting--9b4fd225-9c2e-4df6-b955-42152357d4a9", "sighting--307e0ccc-871e-457f-a034-d9002f6f5703", "sighting--0cf905ee-99e3-4e2e-8913-4cc1862963c8", "sighting--598500b6-55b8-447c-bf36-acde037268c8", "sighting--ec8ff062-2080-4a83-85fe-b4aa24cbdf68", "sighting--eaf55f1b-2e94-4023-9aeb-91724b53e569", "sighting--58fdbd5c-70ce-402e-abb5-fd8b40c0aa81", "sighting--2ee83a61-c989-419c-a957-7ff142435229", "sighting--cdf1a87f-9fc2-43fa-b4d3-dfe96d297d12", "sighting--e52458f4-604f-4a71-bc44-ad81f172bdf0", "sighting--68a76ac9-88ab-4090-9aaa-a54aab9aea11", "sighting--ca51451e-42b2-43bc-baed-635b757324cd", "sighting--9515e4ce-16a1-4852-8ac4-d0f3812d8415", "sighting--96f7fd06-d543-44a0-a9b6-519aef49eb91", "sighting--0145c49f-638a-4e5d-8fb9-2b3c591cbdb8", "sighting--d46339bd-208b-4554-b37a-96cb11da6994", "sighting--359fdbd7-2fe8-4ddc-910a-a58db99b3ef4", "sighting--d4fd5112-85cd-4f14-a44d-1e2ad89bd1cd", "sighting--01b8f539-6399-4e85-bb1d-9c3cd99e1d63", "sighting--8bed6b84-d0de-4cc0-975b-f331bcc373f7", "sighting--3694891c-854a-4b47-8c84-56aa2dca7afc", "sighting--56254b4c-505b-419e-8d7a-479af8321dce", "sighting--d39a67ae-7ac4-4b16-a6ef-80a1fa3f3a7b", "sighting--e0820191-1100-4197-85b2-92f855fe05c3", "sighting--3c89608e-6a31-4b99-9f28-8bf4361cbbac", "sighting--121920a6-b81a-433c-ba1b-65ac0277ef09", "sighting--60e3cfa7-76e5-44b0-83b9-448e2c0ee23b", "sighting--bca9df08-dfc5-4001-ba35-1ce556d7b672", "sighting--36fc06f2-ab64-4b7d-b94b-7995fcfc2a85", "sighting--b1c8e2c8-3651-441c-9ed6-3de80728bf06", "sighting--e76e10a3-9a2e-456a-869c-650eac79abfc", "sighting--c68bad0b-51a5-4b87-b553-c8dcdf44c157", "sighting--b4e49b03-72f0-413e-8f80-fe20695923e7", "sighting--9dd63cf8-7a4d-4379-9a49-ddfe4c310cc2", "sighting--16d8947b-ffc9-460a-9aef-28406f446d44", "sighting--027fae11-5227-4d7e-a300-5a2480d0ee8f", "sighting--c8c12aa3-ff76-41ce-a95b-7ee063f96978", "sighting--1500633a-eab0-4547-93a9-15a552aa09ed", "sighting--6968699f-950b-4a8f-b75d-a1c85251516e", "sighting--3ff3e776-a71e-421f-a26f-d7429d435672", "sighting--27b3ab43-0a91-4843-a797-736d32582841", "sighting--d634bd87-7e39-43cd-874b-1b79c9146f63", "sighting--67173510-dbb2-443c-af4a-17147eba6df8", "sighting--e4ab71e4-2cad-40b3-8b9b-75cb43570e02", "sighting--ed233e88-981f-4727-a17a-9ae9dec31a46", "sighting--b8b7fbad-7a77-497e-b807-9c18a97d81fd", "sighting--a073078a-531a-4ea3-85d5-f1701273d5d1", "sighting--01852853-f0cb-4cda-8e02-5a11831c285a", "sighting--d149007b-84f7-4014-af1e-2772ceaee758", "sighting--a9039703-ee59-4508-822a-496d587daf69", "sighting--723642e2-518a-404b-8bd0-ee2dd7a9757b", "sighting--4b0556f5-5bfd-4b67-8618-2302246086a0", "sighting--b2210355-8698-4e3e-8cf9-e4fb6c6dd994", "sighting--cbbb5cb7-cef4-4b80-ba6d-5d750597a232", "sighting--c3567bc0-3356-46a9-8285-f5a3b3c8baa7", "sighting--af97f9df-3462-4e24-9fd3-521c19211580", "sighting--9056bd9a-c289-4021-8255-8856d8704110", "sighting--87ce72f2-df33-4535-9ce2-4679d7541e0c", "sighting--b920bec6-6785-44ec-bd76-aa86ad47e642", "sighting--05905840-9d41-447f-be42-d28ac7d475ea", "sighting--2c2c2d44-1f98-41ff-863a-aa1ca9395d8b", "sighting--c0f24883-7737-497e-a9cb-398dda1c9250", "sighting--6d2fd19c-c69a-45ff-ba82-66e5238658fb", "sighting--271b7da4-79c6-45d5-8c0b-b9d29b5c052d", "sighting--113d0988-ad08-490c-a667-bc7ba0882272", "sighting--b729bf89-396d-4939-8e62-f77fb620a63e", "sighting--06f5df02-69c4-46c8-9c04-e0f157127818", "sighting--a1b07ce7-ff1f-430f-ac98-9d8eef2b5e2b", "sighting--b60e103a-9e62-4e9e-9497-ba9a6b5e19ae", "sighting--60800c62-ac2c-4398-80da-909345ddf9bb", "sighting--b1bf8d9d-35f6-40fa-8f75-aa4edfab1e18", "sighting--44b76737-8c69-4faf-a191-5d64979ad7d7", "sighting--af673b83-4b4f-473c-a914-6a8821ff02b6", "sighting--f8926f83-76c6-4e28-a47c-bc87e0195857", "sighting--2581f233-df00-444c-9adf-243d90712c24", "sighting--f132ebcb-809a-4131-8f07-a384b9415ee4", "sighting--6e7b4689-381c-46b2-8592-0523ec9434b0", "sighting--84b70405-7bdc-443c-9fad-c641dd8f03e9", "sighting--9b20d2b8-0026-4498-9734-22e4e1daf2fc", "sighting--a9dd465f-9f26-499f-8d13-76b15f7b43ba", "sighting--78ec6f8a-f1c7-42c6-b1b4-1a9b2537dabf", "sighting--2bd45ad5-55e8-430d-9a71-25aae1c8e367", "sighting--0975bf01-7397-43b2-8378-444b3a318458", "sighting--37afce0c-3222-437a-a6fb-c949162e3be8", "sighting--18de5f41-3e34-49cb-bd36-5a02263786d6", "sighting--d28b8d6d-013e-4881-b820-c25ad433ebda", "sighting--e5b213c2-5ebb-4b06-bc77-db7e36432c36", "sighting--fb59318c-5331-42e6-8300-c4499107fc7f", "sighting--cbbb3a0a-6b89-4aff-85ea-8df84dbf2277", "sighting--cf407f49-656d-40d0-86d3-6b3b91afcbcd", "sighting--81ec88d5-720c-4b3d-bf67-7a64c0c3c88a", "sighting--2720f18f-97ec-4cd1-b380-cd9e581bb5e2", "sighting--3aaec28c-4398-4f63-b6dc-5b88968daaa2", "sighting--5e93ad9f-61d5-4995-92de-113f5ecc2a49", "sighting--65b23ca6-56e8-40c0-bdc2-af751cae7d3e", "sighting--55334675-a360-4054-8937-f939e254f177", "sighting--149dfbb4-ed25-4ae8-bd83-f8238fbd4f89", "sighting--a1891359-2116-4d30-aef1-7e4d37e451d8", "sighting--4f6af8de-0165-4db7-913e-0edad7fd5ea6", "sighting--292c3754-a8f4-486b-ad13-b8bafee33434", "sighting--032a486f-5f78-478d-bd21-5223ddb66672", "sighting--5a3c9048-33a7-46eb-adc8-fa37b15c6467", "sighting--8df02ae3-0846-438f-adb8-0ff5fb1e0a6f", "sighting--6729109b-b729-41f0-bc23-712f6165dd5f", "sighting--839c5fb9-f2cf-46b4-87f7-a91c3fe3ff48", "sighting--d4d72cce-1bfb-4c59-9396-084cdef79492", "sighting--0387d50e-fd27-4fce-a89f-5f6ba530a40f", "sighting--c42d9023-4d15-45f6-b222-fc8b55c4ac85", "sighting--2ce12162-c51b-42f0-91d7-9df590bbd5f8", "sighting--84b0b7b7-2d20-44fa-ba1a-f1491f1553ef", "sighting--617d644b-1872-4d5a-ab99-60fd51a8cb7a", "sighting--659f8f8e-094f-4440-b959-b0271ca3aef5", "sighting--edf365a8-e9dc-40cc-92bc-894304b694da", "sighting--f8da552d-2c1f-4c7f-adec-f2679fa0f24e", "sighting--06eaa024-2cec-468d-8e9d-abf19ddb4c76", "sighting--4623607c-02d4-45fd-aef9-f426f2b0bf11", "sighting--a8ee9080-f141-4fb4-b6f3-8895cb1e3588", "sighting--861b36d5-ac6d-40b4-b4a7-0cc6a56d884f", "sighting--f5a4fc00-75c5-4f81-a965-4c084a8032bc", "sighting--782bcb15-df61-4d34-a9b2-c703df68f445", "sighting--1ff21fae-fa00-4a22-859b-5fd7991b47d3", "sighting--d9039b00-e3a7-421b-a921-6a4510512622", "sighting--8f561e52-6993-4ac8-93b0-a91d3513fdcc", "sighting--c7750f17-aaa5-42a2-a4fd-ad3e889a88e9", "sighting--7a3db4eb-00bb-4a33-b4bd-721aa9cabad1", "sighting--ce923505-4c75-48e1-9e39-a6049f82402c", "sighting--975ebf5e-6049-4342-8a88-2559ec580e91", "sighting--96cd662d-9d9f-4741-8fc9-9bb72fd6447b", "sighting--ab871ba0-3c86-431c-b969-476488b70bfa", "sighting--04db8940-bbb5-431a-b7fa-f4e65c334b3d", "sighting--30faadec-86b7-4804-a93b-60d437037e09", "sighting--8d66018b-1569-4262-b144-ec39d02a0723", "sighting--da285d07-aca7-4d65-8bf8-2532c63fd4bb", "sighting--18a4a93b-4e3f-4567-b0ad-1f93d24fcbd8", "sighting--cd8344d3-481e-442d-a570-b117c5f0d06e", "sighting--f8355389-ccf4-4808-a7b5-c85748942729", "sighting--3cb35873-8424-447e-913d-59cc84c6b7e6", "sighting--0f27c0e7-b8d7-4384-9d47-84c6b37461d7", "sighting--8df18502-470c-42c6-b01c-cf17b0a0f883", "sighting--0e82fd41-5635-4c06-b98d-d349d961c88f", "sighting--4a85e9b1-9aa0-43c4-8605-16a354df3bbc", "sighting--edc8d3a9-f243-469f-98c0-d98cc9856526", "sighting--b0afbbfd-e500-4805-ae19-27f00355c972", "sighting--b42ff2f2-22f3-4d1e-9724-152b08e6d7e7", "sighting--96338ec6-b75e-43c5-b7a4-30ccde597036", "sighting--81917a5b-5511-476f-9e71-f5a8761b062e", "sighting--4f5b65d0-8070-4ff2-8f04-34473ff4ffa1", "sighting--49e6c010-c346-42ce-aa7f-80282d43808b", "sighting--ec1d50c9-09d8-4eba-b873-35424da05f96", "sighting--77364f47-5d12-44c3-880e-3aacab22a5a1", "sighting--5004ed5c-52a6-46d8-8c62-e87b5696ed3d", "sighting--b24b7dda-4aee-4c09-a1b9-d09de88dadb5", "sighting--6f03c7a5-b008-4739-81d4-81c35064c1d2", "sighting--71592667-1992-4bbc-9267-e5c9043f320a", "sighting--de4e944b-a482-4cf3-8a5b-185fdc7f9aee", "sighting--0cba8d25-48f7-4e59-8e6b-af805bbc92a0", "sighting--c5865339-d078-4dce-b07e-9f56156380c5", "sighting--1320b88e-6df5-471c-81d6-34c3bc41ec87", "sighting--ba827bae-338d-4308-9a09-625fa7a2ffbd", "sighting--ab76f8bb-4862-48ec-b656-1a2cac3ec5b6", "sighting--5b641656-61c1-4cef-830a-0fc229053072", "sighting--8c3ab821-f5cc-4752-a06e-3e61a609623a", "sighting--0c296990-099f-4830-889a-5012432c8d59", "sighting--06a6a319-38aa-438c-a42d-cdfffd09ceed", "sighting--f234ad10-d4a0-4f80-8b2c-65af5c844289", "sighting--e07a5d3f-c493-4669-97bf-bbee27801cc8", "sighting--2acd6552-220b-4bde-96e1-b7703b3d8faf", "sighting--492ec67b-51fa-47e4-9780-fd4de58e4f6b", "sighting--9b42f1ee-d0a8-4a70-9e93-6dd02f87c1c1", "sighting--5403dc85-24a2-4934-8ffe-eb8d5202810e", "sighting--70e9a773-3b16-42fe-9ac8-b46dcec804a0", "sighting--ee06ced6-039a-4557-9ac1-74041b980d8d", "sighting--64356079-4462-4e00-8240-b4a005509090", "sighting--5895321c-6935-4da7-bd9a-a6aef71bd445", "sighting--ba36fa37-b135-48c0-8412-b6696f88490b", "sighting--ca6d6502-69f5-4e65-8e53-d39360603e14", "sighting--b5d4881e-2acb-4dad-8abf-23653938563a", "sighting--691cb6d4-c45d-4e9b-92b7-3e2828981cb5", "sighting--2fbc4963-154d-4fca-ad79-8a34dff9fea8", "sighting--7aff04ec-32d2-4a54-9361-77a0ccc8edc5", "sighting--5c673e5c-3be6-40f1-970c-577f98198933", "sighting--646163d7-9b94-4c3f-bc53-d3d60d27ad20", "sighting--da54c8fc-4b87-404d-b8b8-fae495d5287a", "sighting--0636d094-2a11-4a6d-a9f0-3cc71a24bf75", "sighting--a261cce7-b4cb-4d7f-817f-7e3c9774a6af", "sighting--4ab2575d-6f96-45e4-8ab8-c5078f1ded7c", "sighting--835cead9-3a02-4686-b586-c422ed970309", "sighting--009270f9-90e3-4bee-a660-0fd406eca46b", "sighting--5ab8e0e8-b86f-4527-a55e-9436917bebad", "sighting--a887e5f4-dfd2-47b9-b09a-d87d527853c0", "sighting--263b75a7-4d5b-46fe-a7af-5320adaa2b88", "sighting--a93bebb6-cbce-435b-95fe-dd4e1dd8ea74", "sighting--1bcabc0c-cf59-4d03-8d33-14fc63426f79", "sighting--97af5d3e-002e-4dd0-8878-453dabc43046", "sighting--05dfb165-1fcd-447f-82f9-fbdfdefd9710", "sighting--91d48b02-6148-449a-bc56-12152df7d006", "sighting--bf915970-cb5a-47dc-a0dc-4c0f8e66b6a0", "sighting--53f5f291-9f87-4759-bb7d-b8970a51d6e7", "sighting--456c4ed3-389b-455a-81ff-2381a9b82afb", "sighting--6b96d2c3-2e25-4a29-8d92-838676a7ea09", "sighting--1e217b83-14e3-4dc4-a4c1-6ad18bbd4872", "sighting--531579d5-b60f-4489-b079-dc8f4db0894b", "sighting--b861dd58-5e79-40f2-94a1-2a318c76c5bc", "sighting--a490920b-f572-4f1e-a967-06e93e330e86", "sighting--56455f64-e404-49b6-ae74-bd2e4d2d9d59", "sighting--0c99b681-df9f-43e8-a8c5-f299f3c89145", "sighting--a1101d15-d6a7-4007-95b8-9cbb8b1c3767", "sighting--c2786b7b-7422-4e44-acac-dd9f70a34efc", "sighting--7c0c956e-f72d-4e84-88e7-ac627ea540ed", "sighting--9a3c887f-bb9a-4beb-a681-723ce7ed52ac", "sighting--5d3ce3aa-b47c-4888-99c5-1946416d2c80", "sighting--8bb46164-f02f-4d7f-ba9d-d94440bd3e07", "sighting--44bd9869-90d6-47ff-913c-1442e483140a", "sighting--c58cf1d8-11c9-4c07-ad7c-d387479f31ff", "sighting--3280bd46-5983-4d7c-8cd8-ca327b36291c", "sighting--de0b7fd4-fd5c-418d-8222-90ebc6ec839e", "sighting--7ec2c295-b043-4fb6-9b0d-553e1b99b0ab", "sighting--175ff7fa-7c61-440b-bfe7-ac3a578d652a", "sighting--9b64f93a-8d5a-43d8-aaf6-b2b2ab80cc88", "sighting--3a2a40c3-4993-4a29-8b56-b0e41ff87e6f", "sighting--c7fa5e6a-9278-4513-8cba-b05326be50fa", "sighting--0db1ab94-eac6-4397-ab8e-aaa5269ae6d5", "sighting--b3898e8a-6d6a-41e7-92db-c0e9ca60b841", "sighting--45fa783d-206c-4228-b94a-5dbec617603c", "sighting--b2acc2a3-9764-4459-b1a5-c53b28fed75d", "sighting--362f3d94-f4a6-4a50-ba76-1e7c048104e2", "sighting--f5923775-6056-4c58-bb46-ddfac6b27e54", "sighting--62389b2f-e38d-4674-81a3-8bb6a2fe968d", "sighting--1181d7d5-a328-432a-80d8-a5ff416d2b86", "sighting--87daa199-9d82-4236-99c4-f161f43d4adf", "sighting--eb46dca3-bafa-4143-9c0e-2d9ec0454b85", "sighting--8dea546f-bf28-4896-a935-a356121e3309", "sighting--814ab035-c30c-4f66-bdfb-cac5c4e6c22e", "sighting--37125211-cd60-4e5f-9350-44a7bb620069", "sighting--d63c7a9a-8314-4326-b7c7-aa11a3e733e7", "sighting--cd9ec3e4-f8cd-42b5-a4f2-eca45afbee16", "sighting--e0a0c2d1-9bae-459c-b6a6-ea02891b6624", "sighting--8007fe13-e490-44ce-b4f9-801a0ddbd6dc", "sighting--d31b529f-e1f4-4951-8575-a485d4ec1668", "sighting--a6d38fab-84ef-4a2e-9ea4-551b3d4d9156", "sighting--35c1cb31-904f-4d85-a116-798b46501192", "sighting--104a05cd-07cd-4682-9cce-6fd02267a485", "sighting--89964dc8-c6d4-4e5a-a757-8faff5ca1ff2", "sighting--5145e466-c234-4a10-9393-3df9808442cf", "sighting--7133d350-de64-4053-9df6-a52053f2f630", "sighting--ae8df71e-376d-40af-ae89-2a3adae62d29", "sighting--87cca7c4-b0b5-40e2-89b7-da87242f2127", "sighting--ea6ca11c-2030-47d4-9a55-aa65c7f5df91", "sighting--7b7ed6b3-ca74-47e9-9cf8-469b1cf0ce68", "sighting--c01f8248-fa34-4211-84e2-4d6b336bbaa9", "sighting--2aa83c99-80de-411b-b0c3-c18c585f315e", "sighting--443c6c76-e2fa-43a0-8d99-074dd3391732", "sighting--c38fb5b2-0814-4496-851b-7e2c3228e9de", "sighting--4a2d8264-e708-4cc1-9da5-1d91ce67baa1", "sighting--6a0ccc08-d9fa-4739-8eca-f526e16a8820", "sighting--156efde0-638f-4118-8cad-df417fb6d10d", "sighting--ccaca362-e829-427a-b11d-b1fe907c0d13", "sighting--f5ede657-c200-4b77-9aee-145749eeb721", "sighting--e5c96982-7f7c-4dd3-b59c-f4d1bb304913", "sighting--f375618e-1a14-4f79-ae8e-a051ef8c6427", "sighting--4821b115-f12a-4132-8874-d4047312ece0", "sighting--0a02aca5-bceb-448e-b434-b060ca0828f5", "sighting--3dce150d-d61c-40e6-bbdd-0240e1f2648e", "sighting--4f950279-ee9e-49b2-a328-ae859965a331", "sighting--7d5e037d-5b9c-424e-b1b4-4334413e4ab7", "sighting--0c84c25e-aa38-4e8d-8ff0-11a6e59d83d5", "sighting--1a2ba98c-52b7-4345-aa59-fbb3f6a2cb8a", "sighting--c00155b7-8470-42fb-814a-a440fd32cceb", "sighting--a1fb505a-e08b-4c12-a9ad-41fe0362445d", "sighting--52f9e86d-fbc6-468d-8275-3e0b1f2120c2", "sighting--4b1f0870-0be4-4813-9f1d-80619546fb65", "sighting--4ca5b516-0c98-4a7d-8598-eddc8ce836d5", "sighting--f838110d-206d-4d18-b1d2-54b93c6e527e", "sighting--44a26a73-0c91-4fe4-b7e4-7419bde6f2dd", "sighting--fa675a5f-bf4a-4c86-b62c-066d87f3b16e", "sighting--0a17272e-4eda-4bc2-b2df-40e9e09ec97c", "sighting--31a33996-3163-47df-94e0-5b6390901ce6", "sighting--90649a10-15d0-4ebe-81ce-c5cb8cd8a22a", "sighting--6232c0ed-5a14-4271-a272-9364b97d498a", "sighting--32f4a2d3-7f11-44a1-8ace-509f67c54c11", "sighting--d19e4962-3e65-4060-9fbb-ebf2f9714410", "sighting--9e8faf3f-3438-43e9-9946-98726a03913f", "sighting--3ae5cfcd-0eb4-49ba-9e59-0e5dd014b968", "sighting--e90d40e1-2b8a-428b-bfee-a7630dd6959d", "sighting--1f249e3f-4658-45c0-8f7b-3164fcb0badc", "sighting--e3a00623-dd5b-4915-b869-a9816718c99b", "sighting--342c2df0-1778-490c-8c99-b21aaa80f67d", "sighting--0ed2a7ae-e64d-43b3-9536-d1b5edcab08e", "sighting--d134ef39-1a87-43db-aadd-a05bb9e974c7", "sighting--8950c702-4715-4f09-aaf2-1c4820d8c0c8", "sighting--e737c3c4-479b-44f9-a67f-8468ff2c6cc8", "sighting--b01047ca-6214-4635-a633-6da7e3ddb1dc", "sighting--b70ab68b-dbb1-422e-b0bf-a8fda7fdd523", "sighting--8c993252-64f6-4c0c-b1b7-4e06775fe0f4", "sighting--9864a356-2b21-4093-9fdc-fae252ccb0b5", "sighting--3ce5c913-f7ed-4dba-a74d-ee9835ed0c02", "sighting--330b3b88-77bb-47b4-af8b-8b77f17db062", "sighting--9fdb6e6a-ae9b-49bb-bc76-5e406c354299", "sighting--14f1307c-db09-4d20-aaf5-339257f5f25a", "sighting--44aeaca3-d82c-46ad-882c-38c0eeafe86f", "sighting--0bad0506-3392-43aa-8249-d9aa58704d37", "sighting--7cf3580d-b412-4440-9af3-e1cafd889228", "sighting--06edfda5-e268-4862-83e6-b51980fce58b", "sighting--dc373226-1309-44b6-b7e2-936cdd4638a3", "sighting--b8ed5447-d598-4496-9c1b-e9f8fd7a240e", "sighting--3d6ee6f2-2913-412f-a531-f3a18bffe41d", "sighting--7d73ca9d-bb6f-46f1-ba9b-395093a1fc42", "sighting--86262941-a17c-46dd-8c3b-2c0bb4235eb8", "sighting--2de0dc27-b57c-4242-9ef0-127ce4715275", "sighting--f388c763-8824-40bc-9124-e4e7294a562b", "sighting--786f9321-5402-453e-bf88-8a4499bad331", "sighting--119ccec0-695a-42f8-a2a3-d131d554caf2", "sighting--08012e8c-5384-4e3f-a7f8-05e3c8fb895d", "sighting--76947980-e3f1-4b19-a501-fbd73f8bee45", "sighting--55a51213-78dd-4ab2-a1fd-bbc2f0f15bd6", "sighting--1ba04b24-1f6b-4c5b-b6f0-09f662ce074f", "sighting--17492a97-16e8-43bd-a8c8-9a43e1bbfc64", "sighting--ee96165f-6f55-4e55-8e0f-c5202a5662d4", "sighting--026bd4e7-4ac6-4bb8-99fa-716065c85a18", "sighting--b832426d-df78-4a19-bf62-2a68c10e2868", "sighting--1da344a8-cf87-434f-8b30-f1eba3d67726", "sighting--1e87e1ce-b22d-41a9-b889-c4ccd568622e", "sighting--0260d07d-27bb-4bdc-a65c-bd124501bb76", "sighting--1eed6a2a-421b-4ea8-a219-235fa66bf1c6", "sighting--b1d36c91-dcac-4069-b385-34b96d6af4ca", "sighting--f85108bc-648c-4401-a29d-c47aedd458b4", "sighting--4ebb30ab-7bea-4c02-9d0c-08119b4589ff", "sighting--08fdcaee-e168-4154-84b0-6f426bbeaf8f", "sighting--84e4f0f2-14bd-4841-9a0a-4fb7c46b4e7d", "sighting--da094733-31ed-4594-bd61-117646d1496a", "sighting--080dd995-c309-41d0-8011-bd9cd7664f25", "sighting--1f74a852-3cb1-453c-a731-f7f708645f20", "sighting--dd3cf68b-0f1f-4db1-8b8c-5d88c877c393", "sighting--371d9b2f-c259-461e-9110-efbec38fc4d3", "sighting--6966e37d-f1fd-4082-ab36-c5f930e582c2", "sighting--11ed3e7f-2735-4f1b-95e3-17c54d617180", "sighting--c6433f5b-ceb3-424c-aba4-3cf51e7a9df5", "sighting--36f6f0e2-1f22-4ced-b628-c0c89af74a90", "sighting--71723e41-cbf0-4732-bab0-7f9d5d2d23dd", "sighting--3f1503a7-2847-41de-b311-877a6fd6fb3c", "sighting--a30343eb-0072-437b-8fd9-28e97ce89850", "sighting--a17da63d-b76e-4abf-aa34-d16db01fcce9", "sighting--6d9e3263-280e-420d-a01f-2b037e935968", "sighting--dbfc19a4-83e4-4ea6-b5da-b51d199ecbbb", "sighting--b43628c7-7a75-4bce-b83b-0da77f7b4bd9", "sighting--04c4509b-732d-4594-a9e6-11979a215e7c", "sighting--d4d7c3d0-e215-48a5-92ab-55c55e41a1ec", "sighting--7e1e49b0-178c-4882-8774-64e0c17cec39", "sighting--68eab004-871b-462e-bf0c-6fd6ae85c10e", "sighting--ab28f671-b7a5-47d5-b303-fe4cc724ca70", "sighting--ef026a66-62c5-49b6-9683-529efaf36a52", "sighting--9870f183-184c-4e68-91e8-5f0fb75f748e", "sighting--fa612fbe-4ea0-4541-b3de-3d3f649cfbf0", "sighting--0c60af0a-32b6-46b5-9367-46a5f09adb5e", "sighting--decf7ade-4a14-4fb6-9031-46ebc307772b", "sighting--5c7f745b-49b9-4368-8b69-728eac4d917c", "sighting--8b5d860e-5900-4ba4-8434-172a91799ee5", "sighting--d43fab65-2b01-401d-b9d6-d82b43e49444", "sighting--204e53f8-539a-46b3-b357-632cea4c379e", "sighting--70891202-33d3-4f20-baea-710a1c464727", "sighting--dcbe1dd9-5b7a-4e88-9315-e6b4ec093226", "sighting--115b7599-4f9a-49f7-9751-2cb1db6b4c8d", "sighting--72c2bdb5-c8f5-4736-ad54-b3bb1c7528be", "sighting--7d975161-7071-48c8-a341-795c10200d48", "sighting--a3252c00-b0e3-4e37-9619-367e22006709", "sighting--5b54ca2b-a800-4a4f-9b80-73c4504dc833", "sighting--7bec5d91-4d6c-4e21-a2bb-228aac3658de", "sighting--bca5afb5-079b-4fd3-8477-5e4a8b7f364f", "sighting--6d8db7ed-d52c-4125-abd3-4def5b25040f", "sighting--0806f97e-ee7b-47b1-84e4-79f681c46776", "sighting--988deb49-b386-464a-b13f-e3c45291515f", "sighting--93a5f8d8-2bb5-4094-9727-bbc0ed8a19a4", "sighting--27a6c4cc-ff86-4e6e-833c-74b6968e72e0", "sighting--6c2ec4bc-4067-45b9-ad19-e1451c29db2f", "sighting--9592aa2e-53b3-4a0b-adad-52d79cf5c5eb", "sighting--8549239e-8f93-415b-b9d5-bb0fb929cdca", "sighting--939b0bba-376b-49d4-b8f6-df1ab2e83b9a", "sighting--c37e7da8-e4d8-4c93-9710-29b4b486f618", "sighting--6f868b16-f414-43ce-bd8d-6beb9116a440", "sighting--6f568779-1ede-400b-9b03-d3b6a6b085db", "sighting--ab7d40ab-1cda-481f-92ba-1cd2d50fd7c9", "sighting--822c8721-66c6-4058-9858-d4cfd53e8264", "sighting--d2860452-2a66-4cd8-8ea9-0f379a65c5e9", "sighting--c33b28e6-f45c-4f25-a654-9a32e920e929", "sighting--abe3336b-2763-4938-a119-d45f29851b1e", "sighting--0fd0f211-521e-4aba-ae64-41e89ad0e062", "sighting--a8eb6b3b-6064-4aba-84c8-ecdb4fd17678", "sighting--ec4c93b2-feac-4a01-9aca-89e67c8b89fe", "sighting--f8dec4bf-ffeb-4d35-af41-5fb35a085666", "sighting--e887cc9d-b088-4625-81e0-c9b02d4230f6", "sighting--fbf7ff59-4118-40dd-9a2a-dba9b6336521", "sighting--301a2270-f463-4934-9c80-1cd536ae8388", "sighting--b6f0eab1-2752-4eb8-9572-d0c7c3e8705e", "sighting--030566a7-f994-4a38-ae07-21199f2791ad", "sighting--7c60d328-0dd8-4745-b29d-f22cfbce4d2b", "sighting--5b3d6f66-125f-4951-b547-5a2de55b8bf0", "sighting--4a0a6367-7a92-4178-a45a-d599c9fa4e4c", "sighting--3e8dabab-e518-41bc-a1fa-6bd891f660a0", "sighting--42b7a585-d15f-4358-b97a-fea3fa82e286", "sighting--7d291825-b3e2-4bec-a874-efbefc1a10f7", "sighting--43f57614-4980-4b7a-8830-c4983776070c", "sighting--b7d469b8-c856-4a75-8eb9-9d70375b81d9", "sighting--8e240195-fa68-49bd-b25a-648ccf4f46c7", "sighting--4eccda5b-7572-48aa-b3d3-1da28ff2e320", "sighting--c6d57f52-5e7e-4086-8f74-026a841f6a8b", "sighting--1e4c6884-e038-4aa3-aa87-1e341fc98427", "sighting--965bb4ad-48dc-442f-a789-169a85707e67", "sighting--fb4e9b15-8942-41d7-a230-714fdef20ed3", "sighting--98eca271-3902-4e0d-b009-e0504f0c0158", "sighting--7a3652ed-bf7a-4024-9835-a65946d2535b", "sighting--5f3ba311-7d5c-4f8a-a76b-e6eefdc253a3", "sighting--e3bf60d5-72c5-4561-9b8e-024741ca4edb", "sighting--ae9b3d0d-0257-403d-8a30-00140d975bc2", "sighting--754815e1-5a46-4c26-b6c2-c84afb75e42a", "sighting--fa49de02-6690-454c-8a28-d53fde9840b6", "sighting--7ac684cd-1c84-4848-845b-8e95547922b3", "sighting--e7521e3b-bbc5-4c28-a3d6-68d996568036", "sighting--42d2cda5-6b30-4e70-97b2-eeaa5783786d", "sighting--25584ad2-4bfe-4751-8e8c-bbf6ac5dc503", "sighting--524a8f73-b449-4f3e-9d57-1b0696fa2325", "sighting--43c896ee-cccb-41c8-a9ca-21ddd34c21b4", "sighting--97abb4ce-fbba-406d-97e2-af35403de117", "sighting--2637ae6b-7dde-4c5a-b18b-47d3f0243509", "sighting--970fbfad-fe4c-41d5-84f5-4cc497eaf069", "sighting--2267dd4c-f4d1-4cdc-84cd-2a6f7d3e5162", "sighting--99383b2c-8afc-4aa1-9bd1-77bf424eae95", "sighting--34b12887-7bc9-45cf-a9f3-7dd3bb78d6ef", "sighting--61976382-88ee-40d4-93a4-90df8b3b0064", "sighting--6b5c1f4c-70cf-47f5-b56f-c9c9b2e81ca3", "sighting--552c7d6f-62ae-460a-9a32-ef6f53317586", "sighting--d4905d99-118c-4ac1-976f-08ccc297f33c", "sighting--73918814-2be1-4229-b752-ff2750bf6278", "sighting--833729d5-174e-4c7e-bef4-36dae0f2a385", "sighting--9bc6cae3-291a-4f0e-a20e-5055b04fb767", "sighting--5e8ebabd-e404-4951-b372-671ba0ad9a65", "sighting--c18d0cda-23c4-4cfc-87bd-7e87f880a5f9", "sighting--2ffb1b72-bc89-4549-9579-fcbaf8aa0b39", "sighting--dbf1505c-c390-4292-b044-331c5fe73d38", "sighting--c4889ef0-ba66-41c9-97c0-54de6e58fbeb", "sighting--5083257b-073f-4df8-9a85-ae435c81e5c7", "sighting--0e02df75-4270-4a8a-a458-0c34aa3cf1b9", "sighting--22a8a26f-39ed-41e2-950e-96a35227ffdd", "sighting--60a70810-9c71-4bc7-ae79-872a375d6e2f", "sighting--81e2a616-402c-427b-ad0e-e92433768315", "sighting--98d0aced-57c8-43a1-b53d-ffd516ac1a7b", "sighting--bd92f964-9fbd-4026-8c98-44251127a157", "sighting--1b4d436f-1605-4a7c-8cc0-151ac37eaa99", "sighting--b5f521c7-ccd7-45f1-b745-82917cf60da0", "sighting--2e0d2a2c-bb10-41cd-a60b-6770448aed48", "sighting--48b5398d-ac5f-4182-9984-bab5fa1fdbb7", "sighting--f985505f-be23-4ffe-b0dc-18250e85082a", "sighting--fa6dff22-58ce-4eee-a342-3d2b06a3fc09", "sighting--99ac2d39-9bc5-4fb7-bc08-a4e5e6cd6780", "sighting--524ec459-b7f7-43dd-b434-7bcc8b0dd708", "sighting--77fc2bab-79d6-4052-b424-a941b304b829", "sighting--10656b1a-7761-4f56-ac7f-586519a586f6", "sighting--292cf0a3-fce6-4302-8be3-11696ae09029", "sighting--773e5119-9345-4b50-9018-bd1d88427d45", "sighting--af0ca760-066a-4cfe-b0de-3b3268593fca", "sighting--0f7d4d1e-e1f8-4468-81cb-1b0d0b00dfc9", "sighting--453d57b3-a2f9-4db5-b96a-ccaeb70de660", "sighting--01e49e2c-d928-42e4-b6fb-a7c1fbead3d4", "sighting--c416fbaf-830e-4a1a-9254-7a50e137483a", "sighting--aa73e5e7-e9e2-444f-bf41-9797c66c0c36", "sighting--6f687286-e8a8-46ff-b571-9210f17724dc", "sighting--76f72414-c8ff-4414-94c2-87df1f4dd189", "sighting--4fb64a35-245f-44da-a933-9be72777e328", "sighting--afdb4e94-1387-4374-8f7d-08f4d6720ef7", "sighting--49c686a1-c250-41da-b0fe-97fc64b9f0ce", "sighting--d9d9ffd1-1a9c-4138-bf02-994e03d17f48", "sighting--6c9743b9-a668-480e-9d38-9165807b9b79", "sighting--7a973dd4-ec13-42e7-a0d7-5c41ae6e222f", "sighting--e909cb61-20c2-4130-9e26-4b3976ee44f5", "sighting--2b199a15-ba29-481d-9cfd-179431a87d4a", "sighting--0e8db1af-76f1-435a-a082-b8e1be265684", "sighting--b44efa93-dd75-4eb7-bde5-024624de29fa", "sighting--d2e08781-3874-402c-9377-ced37764f902", "sighting--08baa86c-e598-4827-a67d-4ea481b3131a", "sighting--9741f0e4-1704-4651-93c6-a20756769d04", "sighting--b3abf5a3-8c6d-45e4-b422-dc8f2f9258f3", "sighting--9a4870a8-6dbe-478f-b57e-e10bc3a56f64", "sighting--b3cf06c3-6fc0-4e54-b260-a0119827ccea", "sighting--dcea46ab-83c8-41ec-8720-e4e3d55a7c4d", "sighting--e2079fa6-db0e-4d3f-a44a-8f53b2b5c33a", "sighting--9161a6b7-bdcd-4c51-bb0d-23d0ed544c40", "sighting--6f2c04fc-dd84-4689-a148-071504971bb0", "sighting--2f694e88-0830-4c1a-b5ee-a99623825399", "sighting--835fc3ae-1240-4dfe-95da-92c6cdc636e1", "sighting--90dd4ff2-42db-47da-a9b7-faf1a1821b10", "sighting--df69bf20-addd-4e82-839a-bafe0f27b1e0", "sighting--ca340690-bd55-4666-8b48-c02f83d63dac", "sighting--4941cf56-a7bb-4031-91c5-4662444d9598", "sighting--3c0ccbfe-dd8d-45fb-96ca-41081dd23d61", "sighting--185323e6-b79d-4981-9477-8a1f015851af", "sighting--070ab655-8cc6-4f9f-8ff7-000939d2445b", "sighting--6f988fd4-35f3-43e7-b550-2f1f289b1c56", "sighting--c799977b-eef8-48af-b587-c60b0ffceaf6", "sighting--30c09a02-b592-4708-b7c7-5a19949f7c24", "sighting--546a074e-263d-42c0-aab6-0efd42488f73", "sighting--1dd14ad5-3ed7-498a-ba80-aba4e839009c", "sighting--91f8e105-17bf-46f6-83de-9bb5d8271f80", "sighting--349c4e8e-4fe2-4ba1-8fea-88ad1285e3d8", "sighting--fae91085-113f-4626-98b8-6ebd4154071e", "sighting--17acb2b8-4fa3-47de-ac98-9f5dfc71a195", "sighting--a734cc7f-a8d8-4095-bf79-12cad7d76e4d", "sighting--b7f960b1-2ad7-42a0-98b6-d50432127598", "sighting--cca4a507-e574-48e9-929e-83711ba03715", "sighting--fafa8814-95bb-4fc7-b8df-dfa594289ae8", "sighting--010056ce-1eb8-44b0-a355-e321df8fc1b3", "sighting--f68da97d-1d43-4ba2-bec8-78bcd8afe89a", "sighting--f2c2ad71-1f96-4e9a-8c3a-2cd06a86d056", "sighting--0af8fdc4-33d5-4668-a5f9-764c2e6297a8", "sighting--c7946add-9202-4260-b65e-de3fcf482635", "sighting--2dc058d6-990d-4898-ac56-6347642b5c3a", "sighting--3b1ba471-8a2a-4268-b11e-aedfe848a76b", "sighting--10a2085c-6006-48dd-bf09-e4d2922dd0ac", "sighting--477b06dc-f654-4ebb-8ee1-bd413570be4e", "sighting--dfe43141-a931-4b45-8e41-67f67e624349", "sighting--2f6842ea-ff41-43bc-907b-2355a953fcb7", "sighting--e82f60d5-b254-408c-b39c-c3ccf32b610f", "sighting--7defc5ea-ec8f-40ac-be15-83871d823381", "sighting--158de1e7-6409-4486-b908-35670f15d8e3", "sighting--e249f950-df24-476f-be74-989c12182957", "sighting--da27ae8b-31e5-46e7-a05e-c3c3e6286e72", "sighting--f112cbd7-2cfc-48bf-9a0b-fb8ca3db7924", "sighting--748528ac-5d9f-42a5-ad1f-73dd23cdc366", "sighting--b97725f3-c48e-4f54-b1f8-103693a03bfd", "sighting--5b592d42-4e25-49ef-baee-4879f824fa61", "sighting--0b7d6bf8-0502-48fe-83df-7bd1a72219d1", "sighting--9d61934a-2c42-476b-8519-2026500bac0b", "sighting--9de13c29-cbc9-4ac5-82b5-d2e0800dda6c", "sighting--4988eac6-f58e-4249-9148-f19820d0b7ca", "sighting--07ee6bb5-21fb-4012-ab19-5b028f77765e", "sighting--8d08c8c3-9509-450a-acce-10e2ef97cf54", "sighting--654fcb42-1999-4751-b652-02b6edf78e92", "sighting--71f2cf03-1a29-4c60-baf0-da1094508ad2", "sighting--cf7f115b-8fad-44ea-bb35-a81b8b0f1c67", "sighting--735a261d-1979-4936-a872-ca42acd41b2b", "sighting--db70ae2a-cce8-4eba-bdac-a609b615617e", "sighting--12d85a56-aefe-4885-825f-83521c2203fb", "sighting--cefbb701-d275-47be-868f-fc9010473136", "sighting--f1f0e054-cadb-4c74-b6f5-fe4c32562446", "sighting--18dd05d5-e804-44c3-98fa-9e2ab1e1bb30", "sighting--faa94a6e-4a57-45f3-94a1-62795e673796", "sighting--4cc330b9-89d8-4609-b652-d79ef79cc1e6", "sighting--22a20f15-249f-45a0-8d7e-32d415a978d2", "sighting--7352f749-9845-4a49-a2dd-30cc98fa36d2", "sighting--d968de84-df70-43b2-a072-674697a6546b", "sighting--901b257c-cd74-4f74-8dbc-d3f215d84fcc", "sighting--947f0e88-71a6-4167-bded-4f6e81d57375", "sighting--327f0580-edbb-4587-af27-f446666cc252", "sighting--6b027063-320a-4b0f-a076-8d80bc0089f0", "sighting--d415330b-68e7-4a4a-b0a2-b84ea002c7b2", "sighting--539587a4-f22f-4c2d-9b47-27bf08b21ba8", "sighting--2cd30bb8-06d4-4c6d-ab6b-46d537b72e82", "sighting--88be5a78-a432-42b7-90ad-dc3ecc161222", "sighting--8b1f1f8a-d022-487d-9949-6dce094eb0b1", "sighting--d1863218-4720-49ef-97c7-a2fab23ed498", "sighting--662d5251-9b32-4c70-af79-9ecefbbb5ff2", "sighting--ddf05851-176a-4ae2-95d2-29c3c819da9c", "sighting--cf2f2053-aa44-48a3-b4e4-28c6b83d4c41", "sighting--4f5dd811-0c99-401d-afb3-7adb8323b465", "sighting--77567283-8505-4e78-9886-d0488cd24dd3", "sighting--a5094213-c9b3-4700-b71e-adb2ce4a633a", "sighting--312ca742-973a-47ee-8a51-90be8dca0abb", "sighting--63c5a8fb-118c-4e4d-bb91-fdcf0bc6cae2", "sighting--174a2686-a25d-416f-9030-fa383fd80033", "sighting--120f502a-fa73-4db4-abd8-2640573c6615", "sighting--b0945e44-f512-45fc-aec2-f15591421114", "sighting--783d23d0-fe59-42f2-962d-9a41b059b5d1", "sighting--17c0c519-eb56-45f2-8c71-00608beb39e9", "sighting--4e7f769e-dcff-4152-9e9c-d9957b7249fb", "sighting--b6d819bb-99de-4094-a830-7647ce29b4e8", "sighting--c10ba8e7-ec8b-450e-a8a3-a2e1a0945208", "sighting--bbd2a4f8-fd06-484f-838e-3a373f54c9f2", "sighting--887218f2-316e-4d33-bc1b-aa54367998a1", "sighting--013d5f40-b13d-47a2-923e-4eaf3039f176", "sighting--130974c8-d746-408e-9580-473449c29741", "sighting--10d6f432-fc33-42db-a75b-24dd1fbdae8a", "sighting--d56a2720-6e6a-4e81-872e-fbad5673d102", "sighting--651044ba-6695-4199-ae8a-3056d0aa96e8", "sighting--509d82a7-69dc-43e4-b73b-8e1abfdab026", "sighting--870f7df8-b572-4916-8b4a-05b513a6e0e5", "sighting--d64a794b-f6ca-4244-b2db-2c8870a1b940", "sighting--15d296bb-373d-40b7-8de8-98386180eca7", "sighting--381d563b-6aaa-4e56-8e49-8fd57781aa46", "sighting--4f242adc-2c21-4d7c-82ef-b206c7fd585e", "sighting--4692b275-cdc3-46db-a038-c58787936bde", "sighting--cfe09436-8f3f-48bd-9495-e278d56c3638", "sighting--8a95f8c1-0b32-44ed-9090-47d5395d7839", "sighting--68bd26bd-8099-4273-be7c-7598e0857995", "sighting--87cc8b43-00c7-4189-ba18-ddf0e139d9e3", "sighting--f4cf1f61-195c-45e3-b8e2-f8d70ebae240", "sighting--a72d0d3a-6a46-4919-ab17-6a833b555380", "sighting--b4201187-f8e5-457e-b72a-d18d4c5b72dc", "sighting--efdaa274-2f16-4492-80a5-dfc3684ff49e", "sighting--c2131c8c-99e5-4be4-9c7e-664f8bde5648", "sighting--ea6f39ea-dd2f-429d-8f25-21e577031c81", "sighting--6ff48540-6a71-4b4c-b3f9-712261c655f6", "sighting--dd102da3-61db-4af8-a612-ba47d05cbab7", "sighting--aae0318a-383f-4ff7-8614-e19c937cc499", "sighting--a6547549-f5e9-4199-a74b-eee3ea5bd8f5", "sighting--e7c1fbf3-50fa-4193-8bde-2788728d6f82", "sighting--59da37de-b8ca-4ca7-b44b-ddf6414c977a", "sighting--e7432536-8b83-40fa-8a15-9754ae67e72e", "sighting--c42a21c8-6f1e-4ef5-b280-115a4e99bb5a", "sighting--c74d62b7-ae4c-4be7-8cd7-bfad5144a6d3", "sighting--b6ab26a2-1c65-4509-a1b6-79a8101f7d69", "sighting--6f366ae2-8e3a-4297-99f6-000a5a0b2314", "sighting--c49451e3-4a37-4d2b-8a35-b37003983155", "sighting--25fdce42-7b36-4047-bb5d-17a6327577c5", "sighting--e0b17d04-c7bb-48b9-9368-2e45a574df5f", "sighting--f15a3d28-6bf6-4899-8789-f60509af9397", "sighting--f68aea80-52c9-4711-844a-6f6fc89c965f", "sighting--1b29beaa-c020-4b0c-a48a-026548fa9423", "sighting--cf649406-a616-4369-acfd-fbcfa4fd677f", "sighting--8777abaa-0dad-4843-994e-2ef7b5f8ec4f", "sighting--0928639e-9e58-4226-af61-d331702b8611", "sighting--5aa5990b-f637-4c5e-9ba1-231007249307", "sighting--b6743397-f689-41d5-aa56-a8b3d3bdab8c", "sighting--1a25318d-93c6-4dfe-bab9-a8c6dbb6fb4d", "sighting--cbc4b3f9-4cc2-40b9-9d89-2cd78b95d433", "sighting--11d1ce08-16e9-4ea2-82c6-671b3f5bf251", "sighting--7c787f1c-5833-4466-a481-a6a95f19e1d2", "sighting--e5a0995c-8510-44f6-80bd-d6f27b236b4a", "sighting--b58d59c4-ebb2-41be-97dc-a389b029e5ad", "sighting--9d2d2b2b-b900-4f85-861b-240fa5786805", "sighting--7dfb297d-6c76-490d-9430-a33bc52bdde1", "sighting--e50145a4-d199-4e48-9376-ccce572b8412", "sighting--e2d55775-048f-49f8-8175-1f7c69db8a55", "sighting--ced32401-90af-46ab-9ae3-0bd3a4198156", "sighting--a2447faa-0ec1-4ba2-aeda-de0b4a0ee395", "sighting--5febf5e4-5ee4-4196-bba0-7332ac2c6c1d", "sighting--7a6108d7-7ca4-46b5-974f-4970998ff805", "sighting--77820677-21c8-4ea0-876d-21f1084b4bb5", "sighting--183afb53-c242-46c8-8f76-79c3923d3dad", "sighting--ee37aa33-4262-432d-a428-14d36b43595e", "sighting--be4db146-bb61-4557-9504-a210dde4b961", "sighting--6e197d7b-b392-417e-bfbe-2e60353160b8", "sighting--18973146-b5a4-4189-901a-3e7819a7eb8a", "sighting--750b3391-5c19-45e2-8ec1-71208f1c8888", "sighting--d57aa445-61bb-469f-9a0b-46acf1d1d792", "sighting--5c23bf76-cd9d-48fe-885b-6fb3117b1ef5", "sighting--5fd466b6-235d-40b2-a886-a212c2baab52", "sighting--b51d5942-70d8-42fd-b8af-5f76e3005287", "sighting--3dd935c3-916c-4ef3-8446-de02489a6bb4", "sighting--fc2e7997-da41-4a75-83ac-9bb3dbcc1d2e", "sighting--18fc7799-47cc-4c4a-ad77-05b0d7d74e56", "sighting--4cbbcda5-08c1-472b-a4b3-f443041dd1ab", "sighting--64511053-0562-460d-8ff9-e803dbd79637", "sighting--de6ff06e-1ea2-4ec8-b21a-14d3369d515a", "sighting--cd4ca33e-51c1-4474-a7f4-86c8bb667e47", "sighting--4f209e13-f0c7-4a9c-8c08-ccc8653f83f6", "sighting--d838fc8b-c3e7-4476-99f3-169b84b14d91", "sighting--4fe77714-db7c-458c-853e-208fa1685f41", "sighting--d3e00fce-6bef-4e33-afe5-ea87d23f6ddf", "sighting--a9a16427-3621-4569-81f7-f84e63e16c4c", "sighting--dced45ad-ce13-4f89-95b4-0bf869258a6f", "sighting--d15196d4-1de2-457a-bb37-6f1f03a6e186", "sighting--033a1f8c-4e17-4cba-8bb4-911ca69d5882", "sighting--77bc0bd2-3cac-4a1a-b002-613d5c2a7646", "sighting--5c9b6583-2ced-4ef5-b97b-e31fcf6c8976", "sighting--4a002973-355f-4457-9877-914b2bd41d61", "sighting--1fb4773a-ed81-471a-a380-c642484f78db", "sighting--7fe053a9-518b-4889-a255-260fcdf2d3e0", "sighting--c61b26e4-cc6c-47c2-a331-1997be903521", "sighting--4373bbe3-0c17-426b-8998-cd93131e7ef5", "sighting--681e57de-a5ba-4bc6-aa73-84a17e125c43", "sighting--fee5709f-b4a1-475c-84fc-124ee29617b9", "sighting--7b1fe872-5e28-47f5-b03f-d5140fa3d48a", "sighting--c3eff64b-a901-4c4b-8341-bd659c777a5d", "sighting--e022618b-6e9c-4dd4-9927-1f25365b6054", "sighting--cf36721c-f03d-40b9-84f9-4949eee49901", "sighting--987a1318-c8cd-43ce-a071-e44bbabbdf96", "sighting--09fee473-bb90-4a90-a98b-8508c29f0cee", "sighting--b2a42bb0-7b60-4c29-a6e7-9fd9393fe52e", "sighting--f0562822-82e4-45b6-8da7-114a9cc64d51", "sighting--54ad04e6-78ae-4650-85c6-ff39b3d4b8bd", "sighting--4a5aacc1-f745-4e46-a3ec-14acf4b6fc74", "sighting--b8ca34ad-0e93-43fc-831e-c1147da4ebe8", "sighting--6ebaa3c9-9f83-4565-acfb-92daa72254be", "sighting--0d27f7e2-9487-4299-be7d-6b6f8d31928c", "sighting--d2a35bb4-abe1-40c9-8402-7f5fb329a7a5", "sighting--d18bcc2e-0413-48f8-874d-87e35898a3e8", "sighting--6e7e3351-a6bb-4e2b-b32e-9856d75bc806", "sighting--6cae390b-ab34-4150-9b86-4d177d52e0f5", "sighting--fbd0ed0e-4b86-447d-8ba0-e65ad52f3a5c", "sighting--3f00c013-15d5-4a2b-950e-065c0472d11b", "sighting--8eee345b-e181-470f-86e7-1378b6369c93", "sighting--eff3b1b4-9445-4053-b3d2-ce7920efe77b", "sighting--6b5e356d-e60e-4cd4-9a77-744c2472ecdc", "sighting--1f621800-8472-42b6-8740-3bd832a3bf68", "sighting--bbe4479a-5b7a-41cc-91b3-ec85c7ce9727", "sighting--bb1b564c-aa9b-4c09-b6b7-beaf64d73c83", "sighting--63448e35-4306-4d33-91ef-37ed4de91aa0", "sighting--921ba658-7a81-4116-bc98-f9b931a794b3", "sighting--0f3f81bd-9e3f-4048-9bb7-0266cfa40a1e", "sighting--f44f2a5c-d46a-422e-ab18-1985f4ce6be0", "sighting--f09e24a5-14ba-4a26-ba4d-354fc011bc52", "sighting--79a8827f-0fb0-4212-9f54-07699190ae3d", "sighting--d919dc22-3a87-4e39-ae42-929eb3343cb6", "sighting--f1d4b30e-5330-4c01-80b2-53c2fa708420", "sighting--26aeb974-0d99-4f54-8205-719404b0bce7", "sighting--52cc367a-45cd-40e7-9b75-5b0e0e3f7f67", "sighting--da75fbf4-5c1b-433e-9933-749e7b050546", "sighting--605f45a6-4281-4c0a-9825-8757f129328c", "sighting--a0f1927c-bd64-45ba-9c76-58cbc5aeb3b2", "sighting--9041214a-ad68-4617-acee-f68db18ed5ad", "sighting--b25f0901-4763-46ad-9d14-03d5b06e27c5", "sighting--5f135b6f-b2c6-47bd-9de5-4c0a72c80d5b", "sighting--c6afe584-c336-446e-8829-7b830473b00d", "sighting--b6d520c4-3904-4d8f-8c81-df282f9245ec", "sighting--c9a148c6-302f-4982-bfe8-5ed1aeb685ef", "sighting--941af712-5cb2-4eb1-8f42-fa61c8b5dbf7", "sighting--3ea0747c-3292-45aa-b202-0a22f1610ed6", "sighting--c914e190-e9fa-4c55-91e2-70cab2ba93ba", "sighting--75fa92a0-3d92-4b1d-8ece-d76063c5d0cc", "sighting--5bb0a576-395c-4c14-a499-1dd5470248e6", "sighting--d6bf8150-2527-4148-bdeb-ad716cbb08ac", "sighting--f964fa60-2712-4f76-bed8-a3fa25b66a7e", "sighting--9b2edd2f-f349-4dea-83f3-b9b01ead7621", "sighting--22700632-dc8d-4303-ab79-cdf2202d1c1d", "sighting--8aa9cd25-5d4b-4478-b9b8-975c13e85a9e", "sighting--c6f01632-cfb7-4c1f-8abf-3c4b2fa894fd", "sighting--2d9d34cb-14f5-46d7-b297-aab9a0d6296b", "sighting--c8035a1c-e4de-4195-9d42-356d3d4bbff9", "sighting--3fb935da-0e81-403f-b334-b9345523c4cb", "sighting--b93ef6d4-54c0-4301-9964-e76c7993d148", "sighting--4745762f-acee-42ef-a4d0-12ff2ccba3fc", "sighting--722b6c54-9df2-40e1-9772-88720b039dc8", "sighting--85fdda87-ad44-4a0c-9c4f-ad356cdec3bd", "sighting--98a91a57-117b-4f5d-92cb-3986864d8356", "sighting--c6b770c0-654e-40dc-ac0f-192363a4f677", "sighting--38c82c15-e9ba-4958-8326-de8ff236c9ae", "sighting--aac76a98-54ef-4353-aed0-5982229b85e4", "sighting--a6b279cd-3a12-49d3-aaa2-5a9eaed84de7", "sighting--4ae3d0f9-b7e4-4595-a5ef-fc66c0f65bb5", "sighting--48a92a81-980f-4067-a577-44a7bee633cf", "sighting--3b8ef118-823a-4850-b771-1eba95d542e2", "sighting--155029cb-6b8d-4feb-9927-8303604302dd", "sighting--ee3eb4c3-8240-44e0-9def-0e0c58b972ef", "sighting--1a75fe4e-c5a3-471e-bfa8-d2382ed4255a", "sighting--ad84db7b-585d-4a9c-87ec-a146d463cbf9", "sighting--3081ea68-084c-4b51-a478-5325854ab783", "sighting--d821f79c-54ff-4406-81d2-be7837c7fad8", "sighting--541e1763-b5f9-4e71-8719-47e226b5de23", "sighting--85a40215-4cfd-4182-87db-78215bb64918", "sighting--1dd5a516-6b10-46d3-8694-891734320f43", "sighting--ca644012-ee8b-45bc-9596-9857b4dfae30", "sighting--f23da46a-6964-4765-9172-8c6e983ccdb3", "sighting--015e8b9f-0c7f-433c-a49e-6c68e085f7c7", "sighting--9c0444a2-e727-4549-91fb-3e79d940f998", "sighting--19f7a057-66c5-4e4a-8d3e-a7b7a4680296", "sighting--0e7b2814-f2d9-45d9-aff1-8e0c0d24f77b", "sighting--2155ca69-2c84-48f6-9cb2-b07d28eb8db7", "sighting--43418161-3f3e-4836-a0a6-e7ce2b097670", "sighting--dd34007d-3b14-4740-a5a5-51134a09818d", "sighting--cfc5386d-17dd-4110-b217-204c96e53dfc", "sighting--1242201a-a59f-4412-8bc7-86ea0458d66a", "sighting--db8651e1-fc0e-46bb-9445-e113df8abf48", "sighting--88dae009-dbde-465d-bc29-d1a2ddb02698", "sighting--2b93a4df-e031-434b-ad0c-f6bb2f374e2f", "sighting--786b8da7-8cbe-4c74-9ee7-0a3b5c485190", "sighting--bdaa7bcf-2ea6-4463-9914-93a7b0d9b322", "sighting--2b35098a-d574-4f6d-8b06-b3baeafd409e", "sighting--01355892-b3ca-435f-8aa3-9f085ba802c2", "sighting--10b6c533-2e2c-4633-af52-5db754405108", "sighting--53d198d6-64a7-4d49-aa8e-d67e8aa55267", "sighting--e2e4dc36-ef2f-4e89-aab3-e97ac0d98240", "sighting--6ebe1229-1de2-4dd8-a786-4306229e5590", "sighting--0c97b3f1-4ffb-43b6-97bb-e58185f18d97", "sighting--1cccda4d-1ae1-476c-9f02-e2c83124f933", "sighting--c78627f0-7d0f-463d-a0b8-02f87350c431", "sighting--90c44c2a-a315-49f9-9810-bc735c4144b8", "sighting--04a090ea-c2bd-4b9a-b823-7272daca2675", "sighting--ea0352a7-e19a-4100-bf2d-a0565f4e953a", "sighting--0c890268-b085-4ca3-a8fe-762009ecc349", "sighting--cf9429ba-5086-4724-92aa-a34236058e63", "sighting--20ba5128-75c5-4262-806c-3cee4dbb09f1", "sighting--940f9b20-d8c0-4866-9dc3-14d32ce7eae7", "sighting--0434d629-5f8d-4e34-b0f8-28785c521cac", "sighting--a29214d6-bf6a-4957-984e-798c25d72bd8", "sighting--77bf8dd3-df8b-458d-ad0f-8e3abe940348", "sighting--1d3c3358-ca51-4bcd-9d5d-2513c69ebe4f", "sighting--28a28e9a-e5fb-45b3-81be-2948b0667319", "sighting--33b00eda-ff4f-407c-b3a8-49735dbbad7d", "sighting--ac4aa099-c219-45b1-ba7a-0674a1bbd48e", "sighting--f0aea1ef-413a-4570-b6db-ed1da6613ded", "sighting--641f0a88-d997-4dd8-86b3-73bb14edef09", "sighting--b6ebd590-3f9a-40de-a13b-115f7df3c440", "sighting--079c2541-dadc-4504-8b12-fe452e8f3e97", "sighting--253d1083-909b-442e-bffb-816a5c946ed9", "sighting--407bded2-9dfc-44f3-99f7-b424b13cf603", "sighting--432221c1-be62-4b67-a791-299a2c64a751", "sighting--8066c1b1-3bce-4c75-b4a6-d47566a5bd2e", "sighting--0abe46e2-91d4-45c7-b5d5-f7444376986c", "sighting--9dc328be-1ef2-47b4-8932-98c415ab4dc7", "sighting--c74b3da7-a63a-4b41-85fd-c04cfa9f5e21", "sighting--022d453b-96e3-4ae7-ab16-8b92fd3ea7af", "sighting--0d040c60-18de-4620-99b6-36aebaa327d9", "sighting--67e511c6-333a-46cd-bdb7-e60970eb0ae9", "sighting--02a76030-49cc-474f-9af3-753caa03b6ff", "sighting--7e248197-3c84-414b-9aeb-c950f3550b1a", "sighting--8ece482b-2f10-4e5b-9bc9-6a4e05ca0280", "sighting--89ebc122-609c-4ed5-8a0f-cbaa001449e5", "sighting--6abb7363-be4d-4a28-a7d0-9cdd5c906ebd", "sighting--b1aab5ef-308f-4da2-ae7d-58db79865bad", "sighting--e06dae47-9c5b-4888-a8ad-ac50f2edc089", "sighting--92c02cf7-e31e-4f09-b5a1-bee6d46235aa", "sighting--5df821a0-a62f-4eb3-a6cc-9e46fcfdd096", "sighting--ed4ddce7-3933-4632-a4f9-ff0c3d41b1f2", "sighting--5931882a-adbd-4e42-9c25-f4abbbdcb3d1", "sighting--42ab401f-c581-419b-8bb9-5ee3b58bc193", "sighting--e4ee2ae2-2468-4971-8d97-8c4565e63b59", "sighting--cfab23cb-a83f-4584-832c-5923d867d2cb", "sighting--9c1c08a5-f746-4c87-ad13-6b763863e8e7", "sighting--b15ba0dd-d2cf-4a77-bfb1-9fb69c93f413", "sighting--af673ce3-7ece-4bc5-838a-204e0bc418aa", "sighting--85f1731c-a6b4-4560-b826-c18b5f01adfa", "sighting--f53423b9-4546-4864-9de8-7cd699d155ca", "sighting--5bde5009-6fd2-4471-bfb8-1abeec163c8d", "sighting--6c00e3d2-64a8-4904-8323-b21cb26b488c", "sighting--a80ee935-6112-4d13-9ace-29f2f4f6572e", "sighting--f3a0130c-ca77-4891-8825-8a3b03b35cbf", "sighting--62ac61d1-a01d-4869-8936-027f3fd74432", "sighting--2e6c61b5-00c2-4a79-9825-63e547ef3694", "sighting--d8d90725-6b90-448a-b794-f02a7818e606", "sighting--b4beda7d-9cfa-4603-abff-769d64527eb4", "sighting--c4e2cf1f-f85e-4ef1-aa09-63bbe9ed0cb9", "sighting--bbd648f9-2229-492e-9b04-c69bae54f417", "sighting--f746ea7a-034a-4017-83ad-f808ef23dd34", "sighting--22dc3e94-c498-4aa6-97ac-411c22cd8cb4", "sighting--8a09ebde-d2c3-415f-9050-2b69529bdac9", "sighting--cf07a706-0d53-4035-ad3a-e7af60d9c541", "sighting--b89fe2f1-870d-46c3-88dd-776a3c3060f0", "sighting--43fdb2b4-47ec-471d-b8c6-46eb95389666", "sighting--ddc2b532-153c-48c3-8c13-4c2d7a0cdb2b", "sighting--71912bbd-f23f-4148-aca7-3b651648e7a0", "sighting--abedb677-59a5-42cb-b061-9618ec33d220", "sighting--c29bbd73-499f-4a10-b700-8511cc3ffecc", "sighting--6ca4e482-bbac-4e57-b7a2-3fcada9c9d5a", "sighting--3bb0a2e1-1710-4f2d-b566-33d3c1765d52", "sighting--7efad7e1-717c-487c-a611-b0c35cd60201", "sighting--73ab8aab-ec8e-4f62-9141-182f2b1aa059", "sighting--193f2638-318a-4da0-ae72-5b624ca6d3a5", "sighting--a9680898-e796-44db-92d9-2d6e91fecda0", "sighting--0348031e-22be-4b56-9595-9bc9f6df9043", "sighting--54a7f0b2-c01f-4ead-b110-c6f8bb8bcc69", "sighting--2028e391-33f3-41f4-be80-0018c89116f9", "sighting--c76fe026-37c2-491b-a30a-ec1002fe19e2", "sighting--bd79cd3a-5b06-4a11-af0d-5c091f97641d", "sighting--d00ae97a-8f0e-4769-a455-ec4996067f76", "sighting--bbfc3357-227a-49b1-bcf5-359928ea6dbc", "sighting--3dc9360e-6052-4e89-8bab-15d099434f30", "sighting--0fdc2515-f45f-44a4-8ec8-ae9805e56998", "sighting--5788f71a-95b4-4e19-b262-2cf5ccac7720", "sighting--17b769bf-ca5c-4be7-8151-8c3cda85c57b", "sighting--eefe9c41-2111-4935-9d6b-5638a2bf7841", "sighting--550317cb-13c2-44df-803f-d3ae8220fc7e", "sighting--5dc3843f-c37a-4a03-aeed-7f55e43608e9", "sighting--1e64a1e2-583f-43e1-8b48-fd8c7fe6b894", "sighting--3504e140-e260-4abd-aace-cce80bc33943", "sighting--9f25247f-0990-4fc9-906f-37db989598f1", "sighting--f9a40e04-0bb0-491c-bfc3-677b7dc78a92", "sighting--70c20179-7265-4182-8048-1f609568b6d9", "sighting--7bf0a1df-c963-48f2-bf01-1a89c22dd473", "sighting--f83ac81f-0f6a-465c-8092-aa562cd411c1", "sighting--6f9e49eb-cc4c-46e5-8fa7-c06f7bcd5ad3", "sighting--e079f12d-473a-4207-a853-c9593eb1bc2b", "sighting--fb0896c8-c44b-4b85-b31c-bb54d64398ba", "sighting--cce30ed0-e20c-48d7-b1b2-6503027baca4", "sighting--247d8359-351b-4d0f-b98f-c5f4c395b8d0", "sighting--a535d288-95ac-4bd5-ae8a-42d1ff278c91", "sighting--1869601f-0acc-485a-91ce-015d20a3f986", "sighting--a8e27c47-5f00-4525-8b3b-8ea9724ac322", "sighting--e1c3e8c3-a5c0-4edc-a4cf-f7f071333eed", "sighting--d421e280-c110-4791-9833-33a912f889be", "sighting--5c150450-06d3-4f53-bdb9-7e7fd999bc1d", "sighting--5109220f-9261-4a9b-bb22-1bee23f03be0", "sighting--5b8a5fd6-e8f7-4cc4-8d95-798b1d47248b", "sighting--4a607299-59ff-46c2-bafe-47b9ba203261", "sighting--4ba3cc1e-1d7b-459c-a2e8-e1e6cfd96729", "sighting--94dbe87d-f2e6-4ca8-88b2-b787f53de6be", "sighting--e5c43cdc-020d-42dc-a40d-a7d75eafb208", "sighting--c1764bda-1e3f-406d-b28f-2b135a976a8f", "sighting--29c719a6-7fad-49c7-8b53-14ad3bbf860b", "sighting--a7224483-d853-405d-a5d9-6d5dd2bd7644", "sighting--527baf77-fd01-4f8a-ade7-e026b306b6ef", "sighting--414e377d-c8bd-4740-907b-b1be5444e0e1", "sighting--3f4703c4-7d18-4665-a7be-ea6c60948df6", "sighting--9808ddd9-9b2e-4bc1-9458-4efef62abe6c", "sighting--703d446d-5a88-42a4-bc10-00fd9db46b4b", "sighting--364b467e-0381-43bd-bfab-d097da22aa51", "sighting--2c641fbd-011b-4065-b00a-6d8541442735", "sighting--63bcb713-112a-422f-98f8-262962165069", "sighting--d1f41143-d82e-4e16-8a20-f56384f64680", "sighting--a850c63c-36fa-41f2-b4b0-e431b93d2326", "sighting--5c4f9355-cc48-41de-8253-7d44d91389ec", "sighting--d2e88a66-aa8d-417d-935e-20596b81cdf7", "sighting--8c6f374c-9a01-4897-9049-295eae7328c5", "sighting--3808ff84-0bb4-4f72-903f-3fa5d09efb7d", "sighting--0a662aaa-c136-4ea5-ab6d-21f83b4a43f4", "sighting--d3cf69d5-d4e9-4e54-a585-799f02f25d3e", "sighting--5bb1a62b-881c-4690-b3aa-ed2a3fdde180", "sighting--0a355728-165d-4edf-8624-0163ce469940", "sighting--147c3a6e-bdfd-495a-8572-526c356a1b59", "sighting--9f8f1bae-2130-4aec-8ad5-bd3d10c0cdb9", "sighting--684c74e2-e505-4ee4-9ead-b22212c7268d", "sighting--b362ea6b-2947-4fbd-996e-92c0b90d0ef5", "sighting--19839962-f6db-4e83-9e59-db40ff764432", "sighting--da285242-ce2b-4873-b1bd-7f827b52f3d7", "sighting--11c4da52-ca8b-466c-93f1-633bd19afcdb", "sighting--e64a7427-b58e-4363-81f6-ff9c1237a8da", "sighting--42bfcf1b-7950-4d81-bf32-dab3ccc38686", "sighting--d7a7f273-32c3-473f-9246-a360cfafda99", "sighting--e6f4eb22-3ca3-4a47-8e3d-e003f795b304", "sighting--fb826ac9-0e41-480b-9f17-0b00ae7389f3", "sighting--868a82d9-87d5-4654-9fc1-52fab19ebda4", "sighting--61cfebe8-ed48-4102-9384-b3cac3d17913", "sighting--24c822d0-ccaa-4123-bf21-cc7527bd6fa2", "sighting--f88759ac-424b-4aca-bcda-48287f5aacf2", "sighting--b2cd6084-ab75-4ec7-966a-a828e4deade5", "sighting--6f3c1ff3-beb7-49f6-ba44-6afc63a28d69", "sighting--6b8d7572-96aa-425f-a684-c329c391301d", "sighting--e3114bcb-b9e3-4b90-ac2a-1b1a8b0bf3b7", "sighting--53b7be7e-70ae-4869-b591-9ddff866d708", "sighting--565dd652-d28a-4595-b83d-65bdd56a272c", "sighting--ef51d514-d968-49b2-be03-39bb8e7c49f4", "sighting--ec68fd04-3d1c-4acd-ac41-0d0cb986b4f4", "sighting--dbd8b99b-98d1-4035-bd5d-366abb420b4c", "sighting--0697086f-e7e4-41a0-9dcd-8ca9738bb44d", "sighting--175ce1b4-7442-4629-b612-4082ce1ad6e1", "sighting--de06f00e-bc46-48c1-a93d-f3626f5796db", "sighting--e4bbf186-a5d8-4320-bae2-8ed3912d534a", "sighting--70b084c2-8191-4ab5-9a0a-17114e7373f9", "sighting--ff4be8d0-81b0-40dc-b5a0-4332ef7452e2", "sighting--11f12382-a9bf-40f1-b4a7-69108b871f31", "sighting--267df8eb-63fa-4b93-ae35-84a652169c05", "sighting--fc533d4e-db22-4fd4-8c15-ff3e6aa3113c", "sighting--0873550f-0d66-4a4b-b015-65d4ae02993a", "sighting--51e55e74-0d8a-4b77-b1e8-e52139cdfc82", "sighting--169d64a4-e4e6-4e52-b269-6435c6783156", "sighting--c0c99d88-ce03-4c98-937a-62cba38af39a", "sighting--02f17a4e-03bf-4eb6-b76d-62f020515a04", "sighting--3bff0ca4-46a3-4cbc-a52c-66f556497ed9", "sighting--d798458b-4596-467b-a7cf-2a19d55fc52b", "sighting--e6a795c4-47e4-475a-96b9-ba30682bdb23", "sighting--a847fe08-e871-47f2-9610-74a5c119b1de", "sighting--d2a6af64-9ed2-4cb9-86c9-ca06c1692da3", "sighting--ebeef9d2-6050-40b7-9a4c-8321802496ed", "sighting--b6154264-df89-4a7f-8e30-f6afc2a7d2c7", "sighting--4e1f8f3c-85eb-49be-b39b-8fcaa1e5cffd", "sighting--7e84d34f-370b-47a0-bb3d-d7db75c4bbbd", "sighting--64dde84e-9ba7-4228-8d14-f4ece6423d36", "sighting--06574fff-905c-4bc1-ad1d-4708ab479d2f", "sighting--e9bdebd3-0c7c-44df-a01c-06cf8560073e", "sighting--8d35b508-4038-4cb7-a454-16a5684c09cf", "sighting--15f60665-fb32-4e65-8c9a-66638ccfdc12", "sighting--e2d464f4-1f1a-4724-8284-bd1de276b3ac", "sighting--75cc0143-0413-4f74-a281-e6f3ee91f2f0", "sighting--5552b8ff-9268-4e58-81ce-4c3fef4aa5d9", "sighting--33c21f0f-84f7-49ef-845a-28ff53f0c3f3", "sighting--b92cca2c-ada9-4376-bf78-cff54726d372", "sighting--b22df20d-7e36-4386-8df2-793f1a9328ff", "sighting--cd191cb4-a9c7-4f71-91df-9f2c12e2a88a", "sighting--2ac2a183-9ac8-4113-ba3b-294b7189d584", "sighting--53164636-5c2b-4be8-969e-3c441d6d7982", "sighting--5645f1fc-5c93-4bea-878c-4104ded426ae", "sighting--21a3dfce-bd58-415e-96c2-49bd3e11444a", "sighting--983cba91-eace-418f-9da4-4f386cd708a5", "sighting--d20a595d-eceb-4a8a-b79e-365fd14d9c5a", "sighting--0a989a40-829d-488f-b627-70b13382cb53", "sighting--018e2569-af6e-4c3b-893e-115bf6405117", "sighting--f428d9a5-a927-4f6b-879d-6418cec637d6", "sighting--a878cf2b-4a1a-41c0-abda-bad2b851ad7f", "sighting--3aeb4ca2-7ca7-42d5-b875-063e5191b82b", "sighting--51cd7b83-43dd-42a9-8fe7-2c8d23ac794f", "sighting--3718c64e-ae24-4428-9aa5-c38927e52afc", "sighting--3aa21631-d438-4e98-840b-3b4a2326e68c", "sighting--20393fd0-2598-4d5a-890b-91f22c46f7c8", "sighting--c194c1a1-be0f-4d97-8e7c-104208e51547", "sighting--a2430f51-f523-45d1-9f64-28e62b3e6911", "sighting--b4870ebc-b625-498e-a27c-d1b29582c000", "sighting--b1bd7ce1-49ee-4a3f-817f-30ec63ec3e71", "sighting--2e22f2e5-2258-40f8-a020-1e6b8898d59f", "sighting--c85cfa0d-20ef-44e9-a998-9cd0ecb6dcf1", "sighting--7171883d-b9f5-47b1-a891-3891e46ad89c", "sighting--9a3987df-0033-446b-8aac-990db1bf4da0", "sighting--0205305f-4f64-4d39-9693-f66cc3da7711", "sighting--cc0e3a7d-9ba2-4892-a2f2-70c34b29e9a0", "sighting--e2cdebf9-c86a-46e9-af11-39be5fbbf2ca", "sighting--2b0e9dcd-ee82-4bf0-8527-de189466426e", "sighting--abdffb79-099f-4a69-9bc6-edf0cbd5afbf", "sighting--224583cb-6535-4baf-868e-4686c470a453", "sighting--a39b35cf-80a8-428a-b8ad-1d065cc577bd", "sighting--ef1d1067-9b4c-4b56-b9eb-5952d39eaa7e", "sighting--ca576e5d-3332-486c-ab4c-80c5b5d5462a", "sighting--680f8b84-aa19-4b02-addb-4d87ed2fd71e", "sighting--0c69d52a-e950-488f-8cbd-ccc17300f63a", "sighting--bdf13d8e-1a21-4e67-b18a-8c745c998308", "sighting--57f97f1c-fe9e-44c7-8aa8-2b4538f0aff5", "sighting--dd00ede9-888c-4f7f-8489-42e117228a92", "sighting--9910b1f3-09bd-4379-abac-d2490670e822", "sighting--d40af472-d42a-4cb6-9766-29d61492c788", "sighting--92be0e2b-3ee0-4d69-9aaf-6401368ce625", "sighting--138e2d56-774d-4358-91e5-a8c24b6b02ee", "sighting--564b9b52-42cd-4be2-b499-262542da6733", "sighting--f5e6ded9-2faa-4225-96c0-1efa141b2f48", "sighting--763f1e43-7735-44b9-8297-455b5ee72ffe", "sighting--33d0b0a0-f458-487c-9ef3-fce16a81c497", "sighting--772431a0-4737-48ca-8b92-b4f09cbff603", "sighting--d953a018-5d84-455d-bccd-697b6470ff1a", "sighting--d0d8380f-52f1-413f-8570-6c5df33a58c8", "sighting--f414c243-96ff-4e34-bd39-563a132cfc69", "sighting--58df5600-26c2-4230-8098-476c216fa4f0", "sighting--996ccc02-8ec6-4588-b576-1daccb29fc1b", "sighting--33e404e3-e34c-454b-be0f-3d6f03e7fe14", "sighting--21417873-25a2-4354-8d90-437596258aa5", "sighting--0697ee8f-9633-4dbc-ac92-69abb7a88e06", "sighting--135567bb-1e32-47a6-90bc-d49d5609c7cb", "sighting--e36f0632-1a4c-4760-bb31-930b996d8b2f", "sighting--3199fedc-5a95-42b1-bd52-619e91dade58", "sighting--cf8baf36-e140-4fe5-892e-d49ba97b7882", "sighting--3362e8d4-ba09-417b-9b8e-f68c76c07411", "sighting--a4ca1c9f-1ae1-4e42-afcd-89cca4ed7b6c", "sighting--72d4b6fb-beea-4cc2-9303-8aa325db802d", "sighting--e5e6713a-0a2b-4de8-b390-695bceabea09", "sighting--eb002005-43a2-4b91-8cf4-5a1285fd7def", "sighting--efba2900-25db-42ca-adae-c0fceb1c2ad8", "sighting--82cb27ca-bbd4-433a-b09a-b96346a15ad2", "sighting--b83b5708-a439-4d73-ad39-063997b3b07c", "sighting--38e54c4e-2207-42c2-b925-c162ef42b4c7", "sighting--74ce530f-9b5c-4daf-8dae-5213c85fa186", "sighting--81de3052-24da-414f-9c27-9212ec0c80ba", "sighting--70fd406d-c700-47fc-9c11-06819ca6f5ad", "sighting--ba2ba3d9-55aa-47b2-b40d-967135cfebd3", "sighting--419b5a85-1cc5-485e-8ae3-58ac0d90ee79", "sighting--e2ad6f75-cdf1-4942-a978-b0ebf7a6002c", "sighting--b98b233a-d5f6-47d9-a44c-0d86582f66e5", "sighting--c49527dd-a043-44da-8894-7801498d3bf2", "sighting--6889b4a9-c020-46d5-8687-009432921da9", "sighting--7755833d-57db-43ba-b214-636b5eacdae8", "sighting--bdda6ec7-0cbd-45bc-92c9-caee47b77f9f", "sighting--2a438f0d-2c51-4538-88f9-f783446f4cc7", "sighting--c82362bb-3909-40eb-bca9-15fa1d8f9714", "sighting--645630f6-9fa6-49d1-be54-57c5daa55f0d", "sighting--e61257cb-8085-4ad6-9633-8215da6b0a70", "sighting--9875af62-4f53-47e4-8b5a-73a0551117a1", "sighting--18f7e10f-222c-4bcb-9f0e-3949fc0224bd", "sighting--fbd840b4-d8f6-4f3b-a0d4-e60bfa621983", "sighting--225836d8-5c44-4be3-95fa-c46f972dcf42", "sighting--8178cd67-0f03-4a81-99a0-726d112ea6b7", "sighting--a3104732-dc6d-4bc8-ba35-17bd07df8c72", "sighting--3c6b1892-22a5-4c47-8c68-c3a6147d6f39", "sighting--ddb58dab-4e88-4782-904e-ab17715c7488", "sighting--676332c5-4b39-40b7-927c-557762fae27b", "sighting--9b022990-7316-422c-9821-1679df7dffaa", "sighting--43f16f4f-093d-4ac9-8715-d663a08a936f", "sighting--bf033af1-b593-4bf7-94df-8156f9e1c708", "sighting--0ccf27ed-2ea3-4de2-ab83-89e88228ea60", "sighting--9aa51e5b-fa81-4443-9f0c-d5dff741fd7a", "sighting--03593599-a387-4830-9d03-bbc5fc32a4cf", "sighting--070e11da-1793-4b33-91a2-d9424667fab6", "sighting--01177f20-2f60-4658-87cd-65a379011ac0", "sighting--dfbd0fac-98b3-44bb-a376-31f65439c07e", "sighting--cf26d2e7-2de9-41eb-bbcc-0b21634250b7", "sighting--0295e497-7f24-42d6-b9e2-3df8e12e048c", "sighting--6d141cd2-abaf-4177-8212-51a80f1b9f84", "sighting--5273dcb3-ede2-4d53-93f4-65c4eb30845d", "sighting--b1c42c79-f96b-43c1-bc67-d302bead49f0", "sighting--5c0192dd-ecfb-43fb-b9e9-3463c1882f40", "sighting--b9bc05ad-8023-413d-9159-ba76b6635a45", "sighting--ab8de4c4-ad10-401e-af1a-1116b1358d4d", "sighting--d68869f1-d759-4098-af5a-373dcdfeb80c", "sighting--28132d9a-d2b6-4e78-b5ee-1e625df7ea84", "sighting--d140478f-c7f5-4417-8a84-ccc553f685ca", "sighting--b37a43a9-ce63-405c-b9ad-9d9d4bf25944", "sighting--3e150550-d177-4942-9b69-18d95c490080", "sighting--bb3b5930-cde9-4c4a-9e8e-de0d32ab0802", "sighting--ac0fbfad-8003-4462-91b1-0830b9219681", "sighting--754042ac-2c90-48e7-a6bc-92f7abffa8c7", "sighting--ef2172ba-f602-45e2-a7e2-62b94cea9364", "sighting--e37c28a6-b031-420d-9fe0-35be7e78731b", "sighting--66140fe3-ed48-4e70-8fc9-a35aa26a271d", "sighting--b60233b9-2eec-4c1b-8843-2b4434b1bc97", "sighting--58a34a2c-c2ed-4e67-af6a-b12115ac9883", "sighting--4dc32af0-ea75-442c-b6f1-5e9fce4e4538", "sighting--277c5456-2c00-4ad4-bbb2-b44f8f5b4661", "sighting--dcd5d944-7bc0-4e3d-a598-d97afd351473", "sighting--d130cccc-a4f1-4e1d-b0a7-f02bce47e9aa", "sighting--c786ab3b-2dc3-4371-a84e-a3e21ff10757", "sighting--fda2b065-0970-4e6e-93ae-7a2c8af0b951", "sighting--ef818558-ff9d-4452-80d5-1668dd6a66cc", "sighting--4c4aedbf-825d-4099-95f8-5fbdb67bfffa", "sighting--8685098e-02f8-4bea-a997-2a05f051220c", "sighting--055818a4-42b2-4f0b-b576-1b8bf2560022", "sighting--8ba0ec51-8026-4915-bb05-51e73a56f313", "sighting--79fda3c3-3637-48fb-9e61-cdb01ac52943", "sighting--8382ee22-6ee0-466c-9294-6cc8d13b5580", "sighting--007949ac-9740-43f5-b7ab-4fa41f0726e5", "sighting--e5449473-fbd1-47f9-89e8-4b10a044ed90", "sighting--cdf513df-9fe2-48ab-92a6-3bf649a7acc8", "sighting--ca88adaa-4e9d-48c5-93e3-0ab0a2c8de87", "sighting--37e49e32-d93c-4c5f-8aa4-275120fc8cb1", "sighting--02dfe913-b0fc-4dfa-923f-5bd99f8e0ec7", "sighting--9cfa2402-8a17-4e66-b2de-15caae939d85", "sighting--2daaf79e-d10b-4d82-b184-0702ab2734ee", "sighting--26ef7811-c9a8-467f-a422-7d4533d29da5", "sighting--7c7cc7bf-73ab-4c37-8cd6-96b7939f20dd", "sighting--2ba1ab31-fcef-43eb-bfd0-1e67ac4f8ccd", "sighting--86c2363e-aa99-41a6-bafe-3338de7340b2", "sighting--a64c4337-19a9-45bb-b9fd-55e61a3667c1", "sighting--ceb822d6-883a-4edb-a0c5-2fca9b084356", "sighting--402aa3de-3c8b-49ca-836a-46f5992af742", "sighting--17aff38f-c050-4f82-85da-f3b3bbfda4fc", "sighting--925a3e2b-308f-402b-b931-d0fb0f566511", "sighting--e2af2271-39aa-46d9-996f-1adf3aa6f133", "sighting--b7593aae-09e4-47ea-b25a-3982d7677b5d", "sighting--3a09f159-acdc-4120-9c3c-55d9fc70a0d0", "sighting--e2b69657-a81a-4ed0-a03d-b48970c7f541", "sighting--2a7dbcba-d157-4240-8c24-ae2182cd03a2", "sighting--d4709c22-03f3-41cf-9ea7-6edb60e632a7", "sighting--9c084825-ddbd-4f56-8890-7674b4e34254", "sighting--eddb3724-08aa-46a1-be8c-1286b6dbcd55", "sighting--b53f7de6-938d-417a-a239-174adff3c001", "sighting--5254c104-a7fc-4b4f-b988-712b4f47c9c4", "sighting--98ae751d-216d-4f7b-af64-ac7e6c0db51b", "sighting--a1b0d5f4-a4e1-4bc6-9761-a2f99d276330", "sighting--dde628dc-bf0e-44b2-8b11-bd30cd73b511", "sighting--c747fc47-b679-42af-be66-aa08a18b0731", "sighting--e65018da-1131-42de-8db4-af96016e4be7", "sighting--b9a34309-5dd6-448c-8912-77af10ef7170", "sighting--e88a12a3-61fa-44be-8aac-ced66c8ec66b", "sighting--121548c6-2f41-44a3-9201-f0580fd73d5a", "sighting--20430d6e-666d-4ca7-acf8-c0c8564c1462", "sighting--7e2106d9-fefa-487c-8b92-78679c8f0a0f", "sighting--9bba7141-3a2f-45c1-b53b-2c8ba23b82c1", "sighting--b6efd0ff-43be-4b77-90f0-664ff58aaadb", "sighting--ac49de16-9e76-49ae-ab4f-c989d5365d67", "sighting--5edd9d72-79d4-4bc9-b668-b831869938f3", "sighting--c89869b0-0482-42f9-9a95-4acd6f01d1cd", "sighting--9e1c5b47-e9b4-4491-9930-0dafcff9bc6e", "sighting--0cd582ef-9192-41b2-ade1-6fe8cddbe158", "sighting--512a42c5-97a7-4870-9c41-ce253768919a", "sighting--8715153b-b787-48fc-8f50-e3e2e770cfec", "sighting--8415c157-4314-4e23-9e94-a1a027bb646d", "sighting--0bc6078f-bd1f-4b5b-8895-6680f046df6a", "sighting--60dab91a-a5b4-4544-b1f8-021ffd05fef2", "sighting--d74a95ad-2e20-4ee2-8475-6a725200c191", "sighting--3da676b8-f68e-4933-997d-0e380a6129d1", "sighting--8064f6cb-bcd6-4220-a519-a84e17991036", "sighting--59f0f48f-3a68-484a-a7a5-880403b77538", "sighting--ebbf4273-94d4-4b27-a676-8a59738bcf39", "sighting--6bc6f985-d395-4ac8-a0ef-611c0cba872f", "sighting--5c1d6524-fa4d-4647-a512-0837c21891fb", "sighting--95801bc9-e7fa-400c-bab3-ed448ede8774", "sighting--96da7521-fae2-4566-ad0f-4388f5eadc80", "sighting--484c584e-462b-45e6-9c54-16dee9dcc244", "sighting--9df4eba4-00a9-4123-af03-30eefb62e79b", "sighting--6aff04be-c8dd-460b-bddb-fd42279c3205", "sighting--f28cfb52-eff2-4b9f-ba6b-4e3fc70b60f8", "sighting--e10286ba-baaf-4754-b9e6-b472c4ba373b", "sighting--93816669-3481-4da3-8919-52c0e9be14ad", "sighting--089ce273-266b-4868-a949-372a58fbd22e", "sighting--f21af42b-c9e6-4cbd-8bb3-adbd72b17773", "sighting--eae723d1-85c1-496e-bbba-1fdbcbb95283", "sighting--e1ae806a-0563-411e-b1e5-cbfd4b809fc6", "sighting--89988f24-a268-43b7-b821-3bd4e7d7cc05", "sighting--a8570a04-14cb-40d6-b4ac-bb55643935a9", "sighting--ac51dd17-5b0c-4b48-ae3b-4412dc62573a", "sighting--0573b1e2-3015-458d-89a9-1d06267095f8", "sighting--b59f3052-6104-4163-a5f3-2782a9f6b05b", "sighting--c9531de6-a7ea-4704-950a-7a1568f21e31", "sighting--aeb1d923-b9f3-46a8-85b3-34307d25879c", "sighting--1534c345-55c8-45d8-8663-f83922f86633", "sighting--fb2f4e3c-519b-41aa-9725-10c9890b161b", "sighting--9b100179-0544-42f3-9a25-55c53c55aafb", "sighting--4316ef7e-76b1-4a5a-9888-bf2803b9ff64", "sighting--b7af9e69-4c1d-4258-94d8-56bccbc59f83", "sighting--bdd355eb-b7b9-46e3-a39a-c788e0b35c01", "sighting--995b520a-ff70-47fa-8226-b362ee28e9ed", "sighting--f5bfca0b-19ac-4cdb-a50c-4c8e154091a4", "sighting--77bf0561-9e3d-4914-934b-dc5d8bf6dec3", "sighting--6ef9b8b4-f51e-44ca-accd-f963adbd1fa5", "sighting--20a2582f-5c52-4277-95a8-461c357f02f0", "sighting--f7b1063b-d001-42a1-beae-4625fd3f15aa", "sighting--41b3a293-ab18-43ef-9f75-e7959c9e21b2", "sighting--6b9e2730-67b0-4d88-9793-7bd3c08d7ce1", "sighting--49154c6f-bc07-48ac-9774-ecc85ff6681b", "sighting--039aa785-fe02-48f2-9585-c1535d8abf1c", "sighting--efc6c8b5-cbae-4a5f-95bf-e3bdcfc3ba20", "sighting--ab582745-0d6c-4396-b0c9-29892f354475", "sighting--a90369cd-10f4-413a-a11e-fe20e4037548", "sighting--a21a0526-6b7f-419c-939b-1a243bf78498", "sighting--e29899a9-2824-4c99-996e-7b1122e8b1ea", "sighting--e4f9f547-481b-44d3-aaba-7589b10cfd26", "sighting--d58a2465-c11c-4c55-9340-b5db96d4144d", "sighting--70874c79-f39d-4730-8461-c389c66c1a8d", "sighting--b26d5e9e-88f3-48e7-b339-4ca1a2ef77d0", "sighting--0468b69a-0aea-4889-808b-9b00aa9eea9f", "sighting--86d2fe08-3589-4cf6-8562-446da82f8b2d", "sighting--e749d411-ad0c-42a6-be6b-d79d6920900d", "sighting--ebb52966-45ad-40e4-be39-f05eaa85f36d", "sighting--510855ac-ba1b-4f10-a733-c58b15c8aadb", "sighting--76261cc4-6c7f-4e89-a9db-15c3ec7b8d1c", "sighting--8e06a6c7-178a-492f-bf39-332271a2ba55", "sighting--475c7a61-1484-4b60-b4d4-c71bdff4a019", "sighting--8c38524f-de29-4cb5-bdad-dfa92991a3f0", "sighting--149a6deb-5403-4f33-b1a3-a3e49f550123", "sighting--be437df6-d221-4466-ab5e-6c513f683b95", "sighting--42eee5e4-00cf-44a7-9f24-599dfad9b549", "sighting--0beb6ff9-6fcc-4252-bfa1-2dcd70681fb3", "sighting--930eed6f-8222-48bd-9f0f-a3bed6ac26c4", "sighting--f67708cb-088f-46f6-8b9f-90805d9848c1", "sighting--171e9760-9744-4cdc-b9bf-034976b04585", "sighting--93b1f5e8-3640-462f-bf99-b51b67647172", "sighting--c4d1eb10-19eb-413c-ae66-742a8070b028", "sighting--045bbfc2-360a-43c3-a991-418bc94b0417", "sighting--0e986941-811c-47ed-ab6e-29b7dcd6253b", "sighting--7ccbcafc-0a72-4dcf-be71-fea4d3acbb05", "sighting--52e318ef-02bd-4552-b42b-63180752b9c7", "sighting--e9b33720-4e6b-4a63-abf0-36ed75b351cf", "sighting--b55f7964-b9ca-4ee3-8301-336663c433df", "sighting--60f9489f-ed18-4df0-8b91-83d73ffe27da", "sighting--c15a8081-1696-4171-a730-9d0560c17828", "sighting--d48a4cbb-17c1-48a9-9813-1a1d392c568c", "sighting--bb9c7073-1e06-4fac-be9e-3db8266b2616", "sighting--22e6d10c-95e1-4126-8296-3711a4dd5657", "sighting--8b0bc754-6c9a-40c2-997d-1de46a1116e4", "sighting--cb516dcb-c920-456f-a7e4-bdc398200e47", "sighting--5a0cbb63-8806-48ce-b88d-c6d38aab83f6", "sighting--877c9a1a-0182-4522-a8f1-c24648061903", "sighting--12b391a0-eb45-4306-bd59-6733857703ae", "sighting--33d051ee-3448-483a-9a92-bb539bb2fe2a", "sighting--4650b43d-38f2-4371-a532-870800495009", "sighting--14d39310-0933-476a-afa7-efc0ab0b3e67", "sighting--8a6a7dd9-f042-43bd-9b8c-da0b938f02c2", "sighting--7f574698-4926-4ada-9beb-ca85790d2103", "sighting--98763a62-699f-44d6-a67f-7b5b6030aa0c", "sighting--84b411ca-4bb9-46b2-abba-a27f11a575f0", "sighting--5edc8720-90cd-4eb4-a36a-a0b4ba699863", "sighting--a6d58d43-875d-4a33-b68c-b6d03643f67f", "sighting--2a38cb01-ce05-48fa-ab76-c4ab58773407", "sighting--daecd22b-a8c9-4ceb-a7b6-288ae77cc041", "sighting--1e8fe107-1b48-4229-93de-2178356d9b56", "sighting--6dccea4f-56e0-446d-ba2f-c542a14f2df5", "sighting--91783f32-e1d2-439f-a1fb-ea9a0e0293bf", "sighting--732f0894-f9e4-43d5-854c-d10b3702d940", "sighting--6849266a-c1d5-4977-84f3-1a8e9cac49aa", "sighting--d34dc5b3-3611-4e57-8f28-e18556ead9ec", "sighting--b25acab8-ec05-4520-b8fd-6c36affcbaa7", "sighting--b003a1a9-e2b3-4e96-a3ba-d07ff5510220", "sighting--ff4780f4-493f-4668-a013-f75796382744", "sighting--21201816-c9dc-4493-b1b1-b5aa59bc8e0c", "sighting--0591917f-5c4c-4627-a836-4b0f888bd08d", "sighting--db02d398-41a8-4aae-a694-0ede9a43d3cb", "sighting--2483eaee-eb85-410f-a8b5-aeb182e59f22", "sighting--a59725f0-e7c7-48a7-816d-6d967633fa64", "sighting--118038b9-ec4a-47b1-9aaa-f1ab3ffaea29", "sighting--a1a25dd1-bc24-4308-bde3-5999385ec69e", "sighting--ae068d17-f272-43f0-9ebd-3db46a202729", "sighting--418d4839-1017-4146-88b3-91682130efa1", "sighting--50de7729-99e6-420e-920d-6a8ba92096b1", "sighting--1eab4424-1e04-4459-a9b7-da51d97c0632", "sighting--09295316-660a-49ea-abab-858acc67c079", "sighting--19de8278-4363-4d2f-9e2a-13a480a837c1", "sighting--b10ed10c-354c-4b8c-8e92-11e833e81e8b", "sighting--92162856-167f-4ba1-95b4-83fa25a3b243", "sighting--e906c3f7-626a-4358-be7c-ce8f19f5164c", "sighting--3ccb83a2-e1a1-4cda-b4f5-2a73d1bae322", "sighting--92ea05ad-0902-4121-a60e-38e8c2b09d7a", "sighting--045e9159-282f-493d-9137-d5a9a003f533", "sighting--7da3cfb5-8865-44d7-bc4c-ab43c0e2bbf0", "sighting--348893fb-159a-4cc6-bfd6-da3d716036f0", "sighting--f27e6147-ecf2-419b-9cb0-82a0cb088c90", "sighting--3ef5b5fc-858f-4217-bb7d-f34e2c4fb75b", "sighting--f4db1cd0-98dd-47b6-993d-c46cc220d406", "sighting--908392e6-810e-4050-960d-350171d78ea3", "sighting--412cfb15-61be-4704-bf73-95333cc5a52b", "sighting--4dec279d-4ee8-4f96-977d-f32a7888fd32", "sighting--f16b9860-72b7-44e6-88ce-6e630a0f2bfa", "sighting--7cf027a8-c34b-4b9c-966b-b33a8e0feabc", "sighting--35956d7d-eb95-4a21-97b4-ae8838affe9f", "sighting--b30e666e-6295-4a28-b2e5-5eb1904c9734", "sighting--f4abc802-c7bc-4fc7-8594-9b5a649bfc98", "sighting--cf9ada5b-32e5-4351-b930-17a6d8fd2c02", "sighting--47acc0d6-14ee-41d6-993c-b6ce87d6431f", "sighting--73d90190-51ba-464a-aa00-d2726e795151", "sighting--52b2d296-2b02-4a4d-a7dc-0118db269c42", "sighting--975eab85-2b1d-433c-a2bf-870fe083668c", "sighting--8a7a1038-b8ef-45d3-ac1b-35d7c37477cb", "sighting--18b8f61a-a38f-4e86-a7d8-07ae32fa3341", "sighting--3b2f7258-7adc-48ba-86c6-e81b33d24b24", "sighting--bfaf9603-2c00-4ea8-8d64-c87f63d8913d", "sighting--93fba8c2-292a-4fe7-b047-f53804a31b3d", "sighting--73b3c4ae-502f-4853-9aaa-bb8dec312c6e", "sighting--54fc95a8-6ba4-4f9b-9dba-5e9112325882", "sighting--3f3b6ae3-9a8c-4864-9a5a-571f76f6551b", "sighting--b98f8f9a-7ca4-420c-96dc-8b1a50719300", "sighting--2e881cc7-1d03-4ecb-877a-ff0cbc20ffc0", "sighting--203c5138-ba69-4165-a689-8fb39f23ece2", "sighting--c50b6dd2-3181-4d2f-b9a3-0981ddfa5540", "sighting--678ce3aa-013d-4db3-8231-0ed86da55d70", "sighting--5c9c2190-c324-4c02-a1c0-c8ca9b5046f4", "sighting--8de2ea09-24b1-4999-855b-ab3335c33e54", "sighting--fd5fcd61-acd2-42fc-a6db-5641cddde55e", "sighting--89ae004b-7bd3-47dd-8022-34f17f6e0d4d", "sighting--b2e5fe2b-d036-4e14-a187-418b0c15c39b", "sighting--e2912f6e-a52c-463e-8ce3-de53f536ab95", "sighting--e6a1746a-36cf-4d67-9e08-6e5c70dbc88b", "sighting--2606f4dd-c4e6-464c-af5c-a2bef87bae6c", "sighting--757683cd-90be-45f1-bbe5-cbf4a8098071", "sighting--263d0641-ac09-438d-ba42-77e42eb6e09a", "sighting--cbf84ef2-d65c-4af0-bbee-bd935bdd73df", "sighting--9c1d1990-6bff-4eb8-b654-877812b9d758", "sighting--c6f36bf4-a7cc-4e6a-9112-7d8d5746bede", "sighting--e4783c83-9fa4-4949-9556-a12f0f6c84d8", "sighting--c2789a5c-9d1f-4422-91e2-01fd6b5a3af8", "sighting--6303d2e0-89f3-4bcc-8659-aa3290ed4514", "sighting--cb0969eb-cdae-418e-800f-a70b5e6b7840", "sighting--383f59d8-4cc4-4164-873e-9fe898ddc537", "sighting--2ca11159-1a94-4ebb-a440-2717ee26f7f1", "sighting--34a17de9-c667-4a82-8b8d-743a5453c8f9", "sighting--8d15060f-341b-4f5d-9ed3-37b3de6d345d", "sighting--d52983de-4d5d-4884-8993-9ca87d5ad416", "sighting--ba19b3b3-ea8b-4cad-b327-7b0641472f46", "sighting--c36a316b-6056-495e-b7f9-a33fd1bef7f5", "sighting--6c16dacf-eb42-4181-bb11-55683cbb9dce", "sighting--e7fdd56c-1af2-4938-9b64-3e8bbed18221", "sighting--7c7889c8-cfb9-446f-8e94-495142a87b80", "sighting--6fe00cdc-84bc-40e5-b0ef-6395b11e3733", "sighting--95556d0d-a3c9-4b99-b870-09774ae143c5", "sighting--488a9e54-1c52-4a42-8e2d-9e87431cd7d3", "sighting--2898dfab-f552-477d-bbf6-cda7fe5f7413", "sighting--1723b7f5-fac6-47a8-8418-1c7242bccf23", "sighting--66553378-bf3b-4348-8f59-e2697df6eb8b", "sighting--aa5db674-70d7-4d03-808c-f7d90f59aa36", "sighting--4c3fdf49-635c-48c8-8c87-41331c92ce9e", "sighting--7317183a-94e7-49bd-a0e1-cfc11dab336f", "sighting--5dd71005-428c-4f91-9019-dd9824876999", "sighting--55554986-2510-4de1-95e2-7b023e2a1212", "sighting--58572ee6-1859-4097-991b-101d3724c96d", "sighting--aae8f7b8-a99f-4162-88ca-4d5d558bf6f2", "sighting--09e2cfc3-3862-4c58-9064-462fab5861cb", "sighting--b3d5c81b-fc51-445a-af5c-395693c8a414", "sighting--ea24fb59-cf21-4bc0-b3ff-f7c6a86efb67", "sighting--5a160770-d2f4-4e8b-9863-a7ea8f25e7a2", "sighting--3a3f2da3-3970-40eb-87fb-431f746fabc1", "sighting--969e605c-c939-4d45-92e6-b3b5cb3b3e50", "sighting--163ddf18-a157-4487-a0a4-7e20c3bebdc2", "sighting--111a75e6-45ce-43ac-b7d3-0ba5da202973", "sighting--5542336f-3f8a-4e29-ad79-37ddcabeb94e", "sighting--484b2c07-010d-4664-856d-c693084fa4ec", "sighting--e2850602-2bf3-4242-b08a-4c2863be49c8", "sighting--78e3ef60-eff7-4536-93fa-46c0291b91bf", "sighting--cd8b4c94-0cf7-4721-934b-740062df140e", "sighting--d94dc5be-6224-4523-84c8-f80f8c6b2d84", "sighting--07e72fa4-6efc-4e1a-9070-8d8e43fefec9", "sighting--801100ac-5882-47cb-b5e7-b1f8ea157c81", "sighting--bf239673-bcd8-4e7b-b691-035db06eea8a", "sighting--4ea18e5d-92e2-4007-b1bd-9ac2ca28b617", "sighting--a383d39b-4f0d-4213-86ac-b8d92c4fe178", "sighting--7e9b66c0-b8a6-4e7c-9aaf-7575e25cd939", "sighting--2400069b-d6a0-4a70-85bf-f692c7d12feb", "sighting--48139c51-0a16-4da7-9730-b4eabd7ed938", "sighting--663c5359-d24e-4a35-ba5c-d084047a5fc1", "sighting--99b12d4a-64f8-42ca-bcf2-22d279275d8e", "sighting--6179fd13-1f89-4476-b0bb-cdb6f243daf1", "sighting--b156ea5c-13dc-40cf-aa0a-28ffb65f9ab1", "sighting--85d4556e-eb5c-477b-962a-55f84aa97400", "sighting--b101d719-9d2f-420c-9906-9399fb3173b1", "sighting--b3fdb037-8b6f-4354-ac81-f3b1e990f2ff", "sighting--bd816812-b1ae-4ed9-8fe3-8fae97e108a6", "sighting--d176b3c0-bf7b-4f16-b42d-67596f1235a6", "sighting--361c2f4a-73ab-4f90-b8ed-d002877c64ff", "sighting--31218fe8-b689-4128-be7a-e8c2ef6d3051", "sighting--c94a5c7f-4863-4eb5-86eb-9b5a84858df7", "sighting--5b91cb32-cf34-4723-ae00-c45c334d8034", "sighting--f416b161-db78-4688-81ff-0ff39de7de2d", "sighting--dc18803a-992f-47d0-aeeb-01d7a7db34b2", "sighting--b938df74-58d9-4b95-b2b6-e89a7abcad20", "sighting--12271614-244b-489b-a90a-fdeb05766071", "sighting--99b69c54-bac0-4b84-8afd-a32893825eaa", "sighting--ebadee55-6909-4d65-ac69-52a0825d5db3", "sighting--3674b9d3-4197-4f1c-828c-86901fce6cdb", "sighting--e1b5100a-e738-4301-a686-c6b29c8fad6f", "sighting--9e2d5a5d-d5ff-4ca1-a2da-9202222539b8", "sighting--ebe046f0-42cf-4dae-9062-11e8236cd61e", "sighting--96bd521e-124d-4cb8-8488-d20df700361c", "sighting--c45c72aa-7631-4d35-a99b-cf43f5e4afd8", "sighting--007a1681-b04a-4488-a725-aa3b2f216030", "sighting--2800e5ca-2f11-4eb9-b3dc-82f0ce0b73c8", "sighting--f80ad9ac-2e34-4afe-b938-c8567faa0fab", "sighting--59d42856-7696-4222-ae29-86771f0e9c96", "sighting--a507ccc5-f356-4d89-9094-fac57cdaefd0", "sighting--9992b88d-6546-400d-9f68-07557febb7d2", "sighting--4ac915de-342e-4bcd-9180-5a3c56482e4c", "sighting--fc490b1a-d46e-416a-9fce-1c42c64094a4", "sighting--f02a6d12-be04-48f7-b9f3-e93cebfe01df", "sighting--e470e6f8-1f42-4580-87d1-a0b56e51a240", "sighting--2c16fab8-6efb-4b88-9fb3-bccccdeec9fd", "sighting--0a39520f-b293-4c5f-baaf-080319498f1d", "sighting--37c08f7a-bc02-4f8c-8636-1fab60e46e08", "sighting--2f3e955d-0dc6-4ca9-9770-50a8f0cf138c", "sighting--627b0228-c438-4750-9831-2bc0f74b7f25", "sighting--20b97acb-c6c8-4661-a08a-6df28fcfc2b8", "sighting--8c155d81-01bc-4843-8a5c-b019696e17ad", "sighting--d3d39ee9-b9ec-4619-b1a0-f5266a66030d", "sighting--58cc251d-a793-4338-93ec-a10423b3a22e", "sighting--e7203282-0196-4fdc-9aa9-7ab264487d48", "sighting--ff08e8a4-93db-43b1-88cc-34c160442075", "sighting--a74732c9-4193-4ce1-a03d-e41829bdb798", "sighting--df9408ed-ca1a-4c93-92e2-7198be4bc1bf", "sighting--bed20c89-ee47-4d50-9093-a6e5897d0d0c", "sighting--21b40750-6162-49ca-b24f-01c1a2166ef5", "sighting--2467ceb0-b025-491c-bf2c-0100e6a02487", "sighting--2b658c06-32b5-4c0a-87fc-28b069cd951b", "sighting--55f02dec-7cf6-4072-9925-c509f077a936", "sighting--ec432c0e-49f5-4a27-839e-9c31fe3e1f25", "sighting--e9b66aef-007d-4761-8b15-5b998a94560b", "sighting--5887ffc0-e377-4433-9536-671734ffc895", "sighting--1ff9dc7f-a793-42c9-88c4-3eae738c2e73", "sighting--e0d60d82-378f-4e25-b4c5-eee9b37c8e38", "sighting--b0d7130f-a524-4fbe-a1ac-869af0c2d121", "sighting--7fdf68d1-edd2-4e76-b0e1-391ebc63cdfb", "sighting--0af39882-9931-4b1f-8df6-6c7a22fe85ab", "sighting--df715e41-0da2-4e36-9176-6f3a3c09a494", "sighting--eb57b078-f7a6-4327-ac9d-e5497e80e60d", "sighting--4cfe1afa-2521-4cd7-a920-4c5292209fb0", "sighting--4f101093-544e-4fae-affd-64c040bf8d0c", "sighting--8825ad3e-464d-4801-8f30-8e591de5b02f", "sighting--9b26da71-1bd9-4985-86b5-5ef06cea0f0f", "sighting--b258b5d7-342b-4561-8d9a-8cd28338263e", "sighting--22b01268-0a92-44e2-9635-4f7c63c93b69", "sighting--862496ac-107d-4567-859b-c8160607dab0", "sighting--7e8ce51a-1c13-42ba-97e9-a7577e85eb10", "sighting--9b049d91-a0e0-4181-89c6-b887f63162bc", "sighting--354bf4e7-e7d9-430e-9232-128e32cafc5a", "sighting--698356d9-3fe0-49f5-8b62-e4b69f6c565e", "sighting--7abf2eeb-082d-46e6-b999-78d3dd8e4c63", "sighting--efc587e9-77e3-4a9d-823c-6b1de765f03c", "sighting--8b548621-4656-46e3-bcba-717ed8ad0591", "sighting--efb7507b-f3e4-4b05-b477-0025293ea937", "sighting--45906ace-f3f8-4502-81a3-febbc3f992ca", "sighting--c8fe4577-fc80-4a70-b2d9-130223047d11", "sighting--71e66b13-b47f-46eb-9e26-6895fb797391", "sighting--b132b55e-a120-4185-880d-d37cdf112f78", "sighting--2123db79-d0cf-40cc-b78e-0358bfde28fe", "sighting--5f78b932-3309-4ca5-af1a-cb41fd23f24e", "sighting--b9b83f0d-77ae-4de3-a25b-d632b7c6f04a", "sighting--143614e2-d588-4bc9-a507-a291db0283cf", "sighting--f1c4c049-8ed4-4c86-a405-5a6046829fc3", "sighting--e8fe1fdd-ef67-4c08-8cca-d8c9829eda5a", "sighting--ec20306c-5de3-4dcd-b21c-3e2cf49222d1", "sighting--9976a144-631c-43f4-9a05-f458c15f8979", "sighting--d70c7d82-90a5-4c04-944b-ae32906947bf", "sighting--15975de4-00a3-4185-acb4-00da783df739", "sighting--955e28d6-7c89-4ced-bc11-a1ad907f548e", "sighting--0ffa1057-bfea-4477-b082-76dbbaa901a4", "sighting--514c8f8c-6575-45cb-b77a-500af19e2259", "sighting--f327f8ef-d18f-4992-a2d1-455c213c4ca4", "sighting--72258b1a-effd-4571-a570-97059aa9125c", "sighting--153ef531-4b77-4000-a044-51e36eb7072b", "sighting--e9911279-ea60-4cd6-9191-4bbd8f63c765", "sighting--e7b41ab2-00a7-41f1-a2ae-6b0ef0871437", "sighting--ae82fb35-5fcf-4e90-bc8f-b5d91104de4e", "sighting--be7c6abd-f29a-4d60-b957-2a8afd208424", "sighting--96118fab-2b0b-4ac3-becd-29efda5fc8b1", "sighting--3afb323c-99f8-4975-a3f2-734ed0f2f7ed", "sighting--6be4e3cf-8579-4d28-bb6b-389bdf536870", "sighting--7aea769d-c499-4a6e-84e8-7aa34cf95b52", "sighting--c170df7e-056e-40fc-99f5-172c830e1fa0", "sighting--9723e6b1-a6b7-4188-be65-d605a0f470fc", "sighting--9df8edd8-f9c8-4523-a19a-ce9f251a5e07", "sighting--49b13d18-bd6e-458c-8884-c7484f2cfba2", "sighting--07c6fa8d-31c6-4b73-9e75-4ddab6f4e6cb", "sighting--d3951e42-eb26-4dbf-acf8-cc5939d4a32e", "sighting--c3a7b09f-e1a3-429b-bc41-2a6e4ad6defb", "sighting--61671ee3-3fe1-4ad4-be9c-6c3e1ea1868c", "sighting--350f0bb1-4ed8-43de-acf4-fd765acb1f5f", "sighting--f5d0317c-c153-402b-b89a-ede830034085", "sighting--cc1ba49a-8179-4f87-a624-37eedbfdfc28", "sighting--2858263b-138e-41e5-a21b-8e5b3a16a8ef", "sighting--a2701262-cd32-4ae9-9b9b-392a57875e5d", "sighting--6db0014a-a68d-4dea-ab1e-bf69967da106", "sighting--5187faf8-10e1-4109-9a95-6a1b42b44fca", "sighting--81e02e78-4635-4b0c-b362-fb04aea0fc0f", "sighting--9d61ab04-4073-4455-a12d-67a965947608", "sighting--206927d0-f372-474f-b343-0dd086704526", "sighting--71b3af79-fb46-41ab-b6fe-23d05dcab0fc", "sighting--72ead047-17f4-4494-abc7-e3bb52fb65e5", "sighting--0e8a2625-041f-4b1b-832c-e6c2272802d5", "sighting--fe5c9808-370b-40e1-9e43-fe02dad2c345", "sighting--41900030-5131-412e-bd3c-43aebc3fbdd6", "sighting--efe97a48-3280-4980-b0d6-e92174f550b1", "sighting--f627ecbb-dcf6-4e74-8e68-b8f422889579", "sighting--196a171b-f936-42e3-998b-784c356b71a6", "sighting--829ad29d-0d54-4962-9d30-2aab55320d8a", "sighting--13923dd8-a24a-402c-bf7d-3485c6d7695f", "sighting--59201476-e400-42cf-8161-c999cb730e05", "sighting--d4a37df3-c476-46c7-bff4-fc4dd8a0345e", "sighting--03965fc9-a5ca-461e-9bc5-af88823cce4a", "sighting--20cdda91-47b4-4adb-b158-39d9d52796e5", "sighting--b3a34701-4f76-42a5-a90f-ae664d6dc858", "sighting--5eb6ba40-956a-4ce8-8dd6-316489aebfd0", "sighting--d1533191-f503-46a5-8b6a-c54d5b42948b", "sighting--bcb8eaa3-d659-4842-a008-1601695526ce", "sighting--50ebee1a-caff-4d99-9695-3c15947cc28e", "sighting--1f1ddd34-f9f8-40bf-9802-95bd251625b4", "sighting--f4116e52-bf59-4158-b4af-9b52ce145e56", "sighting--5bf023eb-6107-4396-9a72-0919df9ca1e9", "sighting--c8610600-6406-4b9d-b9e4-b171e9c716d9", "sighting--cb3fe173-c89c-4ffe-ad4e-03199f09bd4f", "sighting--6f93ccf5-1cf7-4f41-9e5b-3a1616fd0752", "sighting--73e925ed-429d-49cf-939c-8222df5c87e7", "sighting--7a1ef848-89ed-4c7e-ad4b-b95d1fff461d", "sighting--c57eed77-c766-484c-99cc-79c4f8c78e38", "sighting--3043d32a-8876-4e76-be08-9b5c51594d94", "sighting--7f091148-9d07-4277-b642-510b792e218a", "sighting--c1406b95-0a82-4290-8e99-fc7cd8f0e30c", "sighting--46dee192-6f7b-4fee-bf45-f276821fe494", "sighting--b6b21fe1-deab-4fac-9d1e-ff8551f8bea2", "sighting--1caaa88d-a0f9-4d9d-8580-2ac25aced406", "sighting--200d00f5-a6c8-4ac6-a030-24d4c3dcc6f3", "sighting--24144712-ffab-4f3b-94e6-29a40084dfaa", "sighting--99ed183c-3868-4a00-8fdd-3bcaa88e25b1", "sighting--cc1aebfd-2997-4bb3-bad2-d132764b1b3b", "sighting--d52fc4f8-6cd1-4326-bfd5-d275affb39f4", "sighting--61ec901d-20c3-44a1-aeaf-7b8e9523e389", "sighting--56142d09-af75-4c50-beb7-aeb92b40a0a2", "sighting--57c1f924-ce58-4c8e-9777-73ac228099eb", "sighting--89d7371d-926c-4575-a1a5-d34368cc2009", "sighting--c5936335-89f8-41cf-87fe-96a4e7a6d324", "sighting--c80fe1cf-39cd-4b13-9998-04a601d5e9e8", "sighting--28c05a52-9fb2-4804-949d-8a16e9c94aa0", "sighting--e57d242e-34f4-4b96-ad0b-a79cb1b46d84", "sighting--3d822c77-ee32-4858-8ca9-2f2f8533042e", "sighting--0ce5a495-85b8-4eff-9016-d57cbe41d583", "sighting--cb81b633-ae82-4855-a0a8-adb22542e2f0", "sighting--15796fbc-6500-456b-9c93-068780ddcdb9", "sighting--411e4809-9101-4595-af0c-a0c4080d092a", "sighting--18cf2212-3480-459a-a063-bee7e5fc2a13", "sighting--71260a6d-8228-4a61-82cf-712bbe45705e", "sighting--c0e225ae-a1f0-45cc-84e7-fa811d8f12b0", "sighting--6a8c5cb9-1759-4def-bdaf-abc083812b65", "sighting--d077f7f2-09fc-4d90-b30c-8c984f2466e7", "sighting--82eb809d-f9a8-4be9-8521-8087413c071d", "sighting--f3d1bb59-cdb4-489b-a380-527fb0d545e5", "sighting--41d86f37-f67d-4df1-a224-de6e33974f8f", "sighting--397a47e1-a140-4dc5-bc5d-1ccd3884b0a2", "sighting--92c61278-1927-497b-a348-31a5e2901a3d", "sighting--f8cdc81d-850e-459a-98d8-961e8cfa889b", "sighting--9bf53c5c-f52d-4a29-88a2-f6ac28a782a1", "sighting--baac50c0-6b75-463b-a7d3-c3975b33fa09", "sighting--90e3b23b-960f-43b6-afd3-46ea7cf627dc", "sighting--0a84b2e6-d1d4-47b7-9163-12464c134997", "sighting--856c7321-fc1c-4a38-95ce-e974d1e14e68", "sighting--221eeabd-9d9a-41ea-8baf-9837a62e545e", "sighting--08aa68d9-7412-44be-b163-7a62d476242f", "sighting--682fee30-f148-493a-9036-d182fe17a313", "sighting--d814774c-d36d-409d-9e33-20c31685517b", "sighting--67ecf7bb-d9c2-4752-b862-5c5dff35d492", "sighting--4a008324-e8f2-46eb-8f33-3a85b2d9b157", "sighting--ce674ceb-612d-4d1a-b320-5b0e663fc8d4", "sighting--cec8d205-9c86-4354-9319-18052e09e100", "sighting--36d54d2a-ab0b-41a2-b113-44c6194ef54c", "sighting--f2881036-406d-4c2d-ae5c-0cb8712b7b10", "sighting--74869624-7dc3-4f1c-997f-2c0da2338593", "sighting--a8c9e170-2d39-4dbf-ab3b-fdab11ab0a46", "sighting--3c55ea43-a002-4a4a-95b0-488642937784", "sighting--8fdf461a-7b16-497c-8226-ab019c2af130", "sighting--9151b2e3-307f-4c91-9a86-33550c19c326", "sighting--0b476792-4695-4467-929d-474f28c69566", "sighting--9b1614e0-2b05-4d24-b3ff-51e1f130fd40", "sighting--5c2bd6c0-2e09-4cb1-9157-66e23120dfad", "sighting--04b3c194-00c3-4674-ad30-16c93845b827", "sighting--8b97c030-fd5f-4df3-aae4-fd8681b814e5", "sighting--3a4ab2b7-6960-4c63-ae9f-7d3f56b9e89d", "sighting--cf76dfa5-ea61-4db3-a08c-dfb7c22f5664", "sighting--d1c39e82-0303-47b3-acd2-f41defb22268", "sighting--14f091f2-058d-48ff-a5c7-e8d16d471a35", "sighting--ac9c6a8d-78fd-4890-a40c-3b419e3c83ce", "sighting--6704e14e-7542-43ac-b7c6-d3ff56addda2", "sighting--7b157387-fe19-49f5-b7ac-0c525e9bf0f3", "sighting--69c14b66-b5a6-479b-bbbe-680a46901dca", "sighting--e7e5cfdc-7d31-4f5f-ab12-cd9f63fa70b4", "sighting--1ecf8b8d-cd87-44b7-8da3-14c723f217ca", "sighting--bf2fd7bc-a690-4036-8cff-0e45d94bb175", "sighting--2d7370c0-2084-43da-8a41-cb445dcbc39c", "sighting--2b2b6976-934d-48b4-a0fa-385fee1236d2", "sighting--97b64e57-f6af-4c53-b982-588c20513c7a", "sighting--20a47aa1-49ee-496f-a461-cc331b6ec181", "sighting--2a9f1d8b-ed46-45df-80ac-77204d317c77", "sighting--a6abc7b8-6ecf-40c2-84e8-58d51bfd0315", "sighting--9e042ea8-7195-4eac-8f79-8956fc9c6451", "sighting--903d3e20-de72-4cde-a3de-2c5c1f445fc9", "sighting--20b51a5f-94da-4fbf-ad89-c037483908a3", "sighting--e190239b-9673-4935-9940-8725b06ba698", "sighting--b2b24327-7f41-4775-85b7-5f855617e1d9", "sighting--59c4873e-ded4-413d-b3ab-47aa82dff399", "sighting--73b5e5e8-13eb-46de-9165-5782c53794b0", "sighting--18168632-a3da-417d-80b2-d6fe91705bd8", "sighting--bd181ec1-95d0-4b45-975b-59d4c6d39ba1", "sighting--05c657c2-07df-4dbf-b980-65ca60fe12d1", "sighting--ce8301e5-3022-4506-b325-df50dccf0a85", "sighting--3d326eaf-4733-4c34-8614-a7507b89f68c", "sighting--5c8dfa68-344a-4c56-a8e9-41fc27d4b53d", "sighting--966b62f8-e6fd-4db8-9752-4c4f4591120d", "sighting--3a11644f-0da7-44da-8429-244777cb250c", "sighting--2394fac4-e8c7-4875-b4a0-717012be9428", "sighting--7b9a95d0-9fd5-4ea4-8127-45f3379f2e57", "sighting--727c4f60-1f8d-4205-bea9-f91f2fb0181c", "sighting--604f34cc-efd5-4d3d-a811-d5997d3492fd", "sighting--80e753a2-572e-4e9a-9b54-bd03a832a056", "sighting--9d6435fd-969b-4dfa-8b8f-8891d153d334", "sighting--335e2744-2e1d-42c6-9564-9c81ea65ca94", "sighting--025ea19f-54de-485d-9ff3-9424d0ee56c4", "sighting--66ad0dba-7344-4e4c-b18b-be2059d518d8", "sighting--e6e78503-da00-4ce3-9efa-f7e511d3cfc9", "sighting--f4a1cac5-e93f-476c-94a0-0b1f86aaeee5", "sighting--f9ba68b0-8a7e-49de-b270-241387fd7672", "sighting--4ac5f95c-b267-4d0e-804e-4a41c794998a", "sighting--fd3c4aaa-d9d1-4842-95c6-f8c25af69baa", "sighting--19fe57b2-1f73-425d-8241-12f6f754894e", "sighting--c8b21297-7476-446e-8c61-158a4c47a697", "sighting--412cda6e-19d8-4381-b846-1fb561ecb7b1", "sighting--e3b26a02-f783-4349-9cd3-1f2adbe93add", "sighting--71786dec-d336-4574-9cf5-0644dde73f59", "sighting--01a4ef45-7b34-4fe5-acf0-3743bb80bf56", "sighting--b54f00a7-85f4-4c9c-bc53-feef7a545aab", "sighting--63b6acac-e809-491f-9892-b0263d09c94d", "sighting--afd074ea-76cf-447e-a6ec-77eba2e3c945", "sighting--13ca2940-af3d-4f28-ad3f-353e6a9492ef", "sighting--b682fe1f-a87a-428c-a6cb-f2a88d923008", "sighting--e3408c51-601d-4f9f-a66b-5c51aa124184", "sighting--3227c708-6a5e-471a-aebd-98194883d188", "sighting--c6a15a35-4450-42c5-b00b-c245d808f03c", "sighting--2cbf0b70-7c24-4011-a84e-567a14cdb277", "sighting--8a940bd1-98c9-45a9-9ec7-02750a04542f", "sighting--b80afd2e-2b7b-4dfc-b223-1de0269e2e7f", "sighting--c84968f7-590d-4ed8-b45d-ace37a2e8e30", "sighting--440efd6b-e5e9-4619-8571-2fdf6c4da716", "sighting--d63ee758-e83c-402a-86aa-02e966aeef5f", "sighting--46c2b8dc-6c23-490a-bfc1-83e806e8412c", "sighting--996a24eb-5dd1-42aa-9623-8f4ad7dcb95a", "sighting--c0080609-e553-451c-811e-3d7fadd134bd", "sighting--2c15fabc-9c31-4564-b24f-d6a9a4123acb", "sighting--da1ffd2d-6507-4a6a-8470-6804f1491ab2", "sighting--d4fe9d0b-bf3e-41cb-9782-b9faae320220", "sighting--73cc4e4c-b792-4f2a-b5b7-aa5853e5d7b5", "sighting--1516cbba-f3b2-4692-83d6-3b931b139b1c", "sighting--4b28ed3c-be02-4d1b-91e4-01faadb377be", "sighting--2287d061-7a8b-4c19-9b48-75280473aa80", "sighting--9228a3ad-71c4-4f72-afa7-5eebe21a9bd2", "sighting--81a6c8f8-1170-400c-b28e-389c8b9ecadb", "sighting--57583c77-34d3-4170-826d-05934417a09d", "sighting--3c5ab8bc-89da-4115-b057-a1acbe88897c", "sighting--fafbacf8-bb85-41a1-8885-44c8c30ad809", "sighting--50ab0d69-2f96-4d71-ac90-8d2106469ced", "sighting--7759e4b2-c61a-4e47-a31b-4fda7e2c4444", "sighting--842c78a1-687b-4ed3-87c8-8cd2ed6a9752", "sighting--cfa0d0be-c905-4f4e-9552-1322177092e8", "sighting--5e9a761b-5202-4f0e-9a9c-8a433f072343", "sighting--13336723-5f14-4bf8-94e4-a30fa78b01c8", "sighting--b549fca6-90b7-4399-af08-e849ca910ef8", "sighting--42679405-a64b-418a-81f5-82668ef92d93", "sighting--18a52415-0853-439a-b6af-d03414d206d5", "sighting--82fc1255-5ef4-4e02-8110-a2e403a29568", "sighting--28089505-6c80-433b-8550-557d23357f8d", "sighting--ac903e4b-ba8d-4a3d-b5f6-ff5a0cca515d", "sighting--38d1949c-34a4-4154-871b-2ab5d6f9adb6", "sighting--a99a58da-44af-4da8-9349-78bc570b377d", "sighting--c9d0a981-0363-482f-9457-1f59dd3bf465", "sighting--5bf8db63-c446-473d-92cc-46b4c40c0429", "sighting--54eed9ae-3e4b-4557-b10d-6bac41ade016", "sighting--bc4b3e06-c78b-4697-914f-da0881930907", "sighting--1eb41c1b-2c74-474d-ad68-2e9ad5edc480", "sighting--f891612d-20ad-440f-a319-df1187ea425f", "sighting--97686214-526f-438a-9523-946c0820b2e8", "sighting--638a7009-c5ab-4b07-ad50-a1905e614e92", "sighting--daf5792e-e6f2-4edc-9a6c-3160124996b9", "sighting--034dcabf-747b-4818-88cb-4a22fea35091", "sighting--26ff5b45-7bec-4765-aa2a-99efc297dc4e", "sighting--05cc0cb4-b4d0-4fd5-82cd-6270d111daa8", "sighting--1f3385f5-2a22-4022-a48e-6ef0e1af6725", "sighting--ca74a0fd-0954-4389-9a5f-dab93a268369", "sighting--7569acb8-ab08-4467-81e6-1e931ee7997c", "sighting--be2efe11-0263-4e6b-a8e8-35d2b64ec89f", "sighting--9680c913-1d75-4acc-b6f6-8a55ab76ef56", "sighting--4a73f513-5549-4d4e-8497-825dde2883cc", "sighting--e6fd9c3e-9f7a-4e3f-8152-aff6a9c45c81", "sighting--e52745a8-d8c5-4e0d-8602-13700a021d17", "sighting--45031890-724b-4c56-9b98-bbe96f221eff", "sighting--984985ec-94ec-469f-a2eb-a899b7a607a9", "sighting--7e1edc23-49b5-420e-8087-6aae6785f1b8", "sighting--06a34f6c-5ce9-4875-8a21-d4edfb2d4fe3", "sighting--87b3f67a-7d70-478d-ad35-fbdf722df62c", "sighting--e4960d5c-6e20-4917-b207-c1e94b13f97b", "sighting--13210db6-9261-4c00-bf73-d01e74a18a70", "sighting--ad41575b-dade-48d9-9c9a-b9d35f457b61", "sighting--83a6f02e-a2c5-4e4b-9820-832ecfabf393", "sighting--cbe771c6-7db0-46e3-a03b-2426b59f7b37", "sighting--693f81b9-72ef-40fb-a254-978fff9db5c2", "sighting--8a4c02cc-3c09-466e-b21e-3bb382c4a5b3", "sighting--bedd7c97-ad12-494c-9aaa-e25f35258f90", "sighting--81a7b086-4e24-48f0-b2c1-fb2b4de8a10c", "sighting--a5d0e95e-cbf6-43ca-a725-5839e92b9ba5", "sighting--76228098-8aa0-4739-9a12-510e8069965b", "sighting--db063ef2-2204-4a87-b6e1-c98b5acea15c", "sighting--303bde59-d4b5-4ed9-8a9a-ddc3635ebbf9", "sighting--88d0ddee-a165-432a-8c9f-41d01d841170", "sighting--436ef075-4921-42b5-bbbe-35e1ffb1259c", "sighting--7ecf0501-562d-46df-8c49-82290e47488f", "sighting--ac97c1f7-75de-44ba-a751-adde04b0246b", "sighting--e144372b-fb74-4fb2-a946-e9f48e6e248c", "sighting--d725779d-049e-41d4-9a0f-2f0df6734f12", "sighting--2438e0cb-36c1-493f-9946-981455daa09f", "sighting--240c1229-7e88-459a-96f0-c0e9876c634c", "sighting--16af288e-37bf-468d-9678-6d807a201d7b", "sighting--4e3988bd-8822-4390-aee2-f16dc7649feb", "sighting--bb14c543-1315-4ca2-8e69-94cf51588885", "sighting--25122eda-b949-4594-b4f1-99ee0ec0fa92", "sighting--145a2c60-bb15-42a1-99a6-e05e7676253b", "sighting--dd6149e8-4f33-460a-a435-08b0c5b15d58", "sighting--ef80a758-80c4-4e9c-93d0-17bf3b6adaa7", "sighting--59a67f51-2682-478a-ade2-c043116dff2d", "sighting--062f9b38-be48-40af-bd1c-b8ac2c2e8597", "sighting--19a54b78-94b0-4513-828b-f02be645b82b", "sighting--3329cb80-e90c-47b2-895e-c6d50c90c960", "sighting--b11fd86c-24b6-40ed-b4ad-9db8a75a564c", "sighting--9b14fe75-8460-4a67-a241-05ef5ea8cc31", "sighting--d90c2fcb-c3f9-4e0b-993e-80411bfc8747", "sighting--58d6a3fd-4202-4fba-8634-0b1bc0394538", "sighting--f3c32360-4036-409d-ac53-da57f8deafaa", "sighting--23c842cf-b7b2-41c3-b3af-e11c3104d9ff", "sighting--a682d4b7-7e57-4f04-b2af-4130fe738180", "sighting--2e421275-b706-4a68-ae85-3a4502d5851e", "sighting--c092bf5d-8c3d-4eb3-81f0-9edf403df1c9", "sighting--97cc15e2-4bbf-477b-b4e9-c5a86f0a26b1", "sighting--d8679a5e-ab52-42f9-84f3-4b7bdc23eb0f", "sighting--95b75199-0804-489f-9f6a-ac752f5fe34b", "sighting--1f3f7a58-9716-4a70-8236-4fa4f6ff1519", "sighting--399d1eaf-5e28-407c-b683-f493187f1113", "sighting--1efa5706-ee32-43b1-91fc-4d7727ef1645", "sighting--35c0987a-39fc-4db8-980c-d81aed5849bb", "sighting--3dc13fad-fb4e-4cf7-a23a-8a61a468bb16", "sighting--d2262a7c-6743-4600-8dff-28f82c753f0b", "sighting--cabeee90-caf4-4e4b-8b19-595d111faefc", "sighting--abaef966-c155-4717-a01c-f181ed48f179", "sighting--df2f11bf-84b9-47fd-b8f8-e68e018d5864", "sighting--0ad75e87-ff66-4681-903f-dd48e4600a8e", "sighting--ee5ad510-c555-45fd-b19b-cd6aa0b56565", "sighting--a143a529-c9bc-4d22-b015-d5d43a727810", "sighting--962420c5-60f7-4c03-a416-315efbae037b", "sighting--6ee6b9e6-b32f-4e9a-bc55-696632a5dbdd", "sighting--130ad276-afc6-446e-b234-48948cfafe75", "sighting--10b99175-1ace-480e-ba14-74522420e3b6", "sighting--67210e15-db72-4195-b223-1952f518d999", "sighting--37fab2db-d708-4092-9b56-63bed4ed2704", "sighting--fb5a4b2e-0143-4dee-977a-072d1d6abded", "sighting--c12b4c43-80cb-40b2-b78e-14fa16858961", "sighting--8bba9103-d2f1-4bf1-abf1-e7d18fdf5fa7", "sighting--02d6c8b5-4840-4d33-adce-d6d5ec4b9081", "sighting--12b21a55-2b91-47da-b9f3-61baa77f4add", "sighting--ee10428d-bbda-4fb5-88e3-2004208880b8", "sighting--0d57175e-9aaa-42e5-9494-93f2d22a345f", "sighting--e75722a4-2cad-4dde-b468-a34ddfcbbd9e", "sighting--d6f78003-4814-4195-8307-12154928f77d", "sighting--f7f86344-a1df-4fbf-a8aa-957c9f774735", "sighting--4887dfe4-8212-40ed-9ced-62e22d9621a3", "sighting--7038e5a4-5841-4369-b98a-ffe2010f310d", "sighting--af95aca7-453b-47bc-9265-2703b4043649", "sighting--afe10748-2912-4425-98c1-06b2a8bb5631", "sighting--dd7f4c92-de0c-4d35-a51f-6ccf26e25f23", "sighting--640daab2-21cb-4f95-b995-27dc2a6f1d90", "sighting--b011ac00-c343-4850-836b-095d1b193ecc", "sighting--fccb57a7-5783-49ac-b466-06bc02aaa2e8", "sighting--8d59c413-0cd8-49b4-a6e9-bf308d441ff3", "sighting--14204933-c187-4224-8644-719201129c2c", "sighting--36d63ec9-c766-4693-9a34-9d7f54a9e178", "sighting--e662dd89-f48b-413a-97f2-63e78755c335", "sighting--6c2eefaf-9b64-4200-89a6-df597e65a4f5", "sighting--e39d4245-cb3a-4c7d-9c81-28335537a248", "sighting--32b268ea-aba7-42ae-a4fd-e733a72c1ca2", "sighting--cd6c8db2-b493-4ac0-bde1-9337d3d09266", "sighting--9eccdb21-5250-4e64-8cac-03486fbe82cf", "sighting--2a931e7e-16c0-4a26-a431-5caf31daa13c", "sighting--3ae01597-e5a5-4f52-8afc-98357b8a1a67", "sighting--55aacd87-978e-4203-b08e-686c9554d91c", "sighting--fa4f03a6-63eb-407f-bcc4-2a6902ea46fb", "sighting--6e38b084-3a44-4b3e-889b-4f44e576a980", "sighting--ae2a85cb-85bc-4638-a05e-b6d92478f984", "sighting--a425a7d6-ee88-422e-b484-380dbd2dbb23", "sighting--3b47946c-530a-4dec-b936-3d2e08e90eb0", "sighting--af37b304-337d-48ab-a902-a5097a6893b2", "sighting--4d1c4c76-78ba-4c98-af76-7ca6cc56e23d", "sighting--5195715d-b387-4a02-b4cb-2cf1c25f6182", "sighting--5125f381-af02-4449-94db-13657b041009", "sighting--19c227e6-784d-4d07-89d5-f45119033509", "sighting--89a1a50b-1818-49c0-8add-3bb4f7b87b73", "sighting--616e89d6-8d6a-4d7f-b9d4-f50ee479277c", "sighting--a9aecdc2-2fec-4f82-ba02-e3214f1bb6b8", "sighting--c8ff5412-4e43-41be-a322-6ddfb12c6b88", "sighting--fa66626c-a7ad-4162-a452-8b9495cd8c1f", "sighting--11464a8c-6422-48e1-a5cf-e4c71e541dcf", "sighting--afda446d-ff7a-4549-892b-0a685755db32", "sighting--e3261df2-987e-4f83-a057-a4a589673c3a", "sighting--1b38c09b-e9d5-421b-a8fa-8692af53d473", "sighting--3ae88320-ad86-4b65-917e-f816f1a83552", "sighting--dbd86334-982f-4976-a315-7a75c2090af0", "sighting--deb9035f-b739-4ad3-b0b7-205b42250b2b", "sighting--35e945c6-5ef8-42ef-b08a-1081756457bc", "sighting--6ce51700-139a-491f-9763-cef70b1f5d34", "sighting--92f9677f-3dfd-4729-99a1-e495e234f3c3", "sighting--d439cd44-7c98-4738-bc25-3fc1be33556f", "sighting--e9cda91e-7ca6-42f5-b762-a305f3b9c0b3", "sighting--d8542922-fdd5-480f-934b-db52c9c46b5e", "sighting--998925c2-71b5-484d-8661-a316a375c11a", "sighting--48b4864f-3872-4ce2-aa5f-be5a4adc04ce", "sighting--110525ab-ed11-446e-b73c-2f75a04ae4f4", "sighting--f3e95784-8fb3-47c7-9b8e-a4ecb8bb8e80", "sighting--d5970174-a476-46cc-80ae-979c958efed3", "sighting--36397289-5f9d-4fc5-ad61-3656d3398fb2", "sighting--7f326ee7-1f78-4a8b-b93b-0a342d06864b", "sighting--b997a0aa-a64f-45e2-b77b-62c2905fa7d9", "sighting--457056c2-7495-46c4-b141-3a79acc51698", "sighting--b83f4569-d477-4a1d-af0e-152ecb11ba94", "sighting--18ed55e4-4972-4f17-8166-c3838f505210", "sighting--ef5c3683-28a0-4fe7-acb7-eff3e35336f6", "sighting--1c6e812d-2cfd-4240-b7fb-75949b63528e", "sighting--8a8dfd7a-2ca3-4cbe-a4f3-1dc513b898dc", "sighting--277dcc85-0748-4f5d-99a3-551c66c14346", "sighting--a7a99873-5227-4150-ae03-f1ab30c75f22", "sighting--5933f6f5-7a2e-4158-85ba-19d9dd26cc9b", "sighting--6097701b-93e1-4116-8cef-47cf4fbac185", "sighting--05547583-9d46-457a-a062-15aefcde3abc", "sighting--2e9bdeb6-1884-4469-be15-8e5686fa6e32", "sighting--005d42b2-71ad-4bf3-8c90-6ff34fa3cf23", "sighting--80348c49-34a8-4b15-9678-998551ccc053", "sighting--3b36c161-e738-4f33-bcce-e72342487e08", "sighting--19d5d791-8880-4d0b-aef7-db050fbc1eb3", "sighting--2a47a751-1af1-48fb-a2fc-e211a8d1916b", "sighting--86cccec2-86d2-4b41-8a43-436acff5405e", "sighting--46f08caf-7a22-4a57-9f76-869d6e52cbf3", "sighting--2bdc53cd-1689-4ac0-ab10-451e094e116c", "sighting--876519d1-58f4-4ca6-bfaa-587b2e98d666", "sighting--b7e939bb-b09c-4f0c-b50c-914aedeea5c0", "sighting--c48497dd-13c7-4d26-b09f-01cb8602944e", "sighting--d870141e-acf0-4329-b82f-fd2d8e308881", "sighting--78925cf9-87f8-4a49-8802-0f9e470ffee4", "sighting--4e5d57e4-f621-47f5-9fdd-88b0095ad52e", "sighting--01fd7d92-b065-4603-9d2a-1f522b0c08aa", "sighting--7b184b22-55ca-4e9f-97be-2280fc9ea021", "sighting--464208f1-c6c6-4f20-add4-d7188a8f1fba", "sighting--b9ab64b3-6f3b-46e7-b9dd-2a2638350fa4", "sighting--549bf460-20f8-4fe1-b7b6-a865b275e153", "sighting--f5c20b02-5d7b-4879-a0bb-d89126692ed6", "sighting--59f3be7e-6723-4514-8606-e0da5288db3c", "sighting--8470fdec-87ee-449e-8680-5ec501b83e59", "sighting--cb620a3a-3f45-4221-abad-13bd210b224f", "sighting--9b307fe9-5fd2-441d-b7ec-5ca5015fba7f", "sighting--2dec840c-fa0f-4995-95b8-bca6112c7abf", "sighting--c6b4618c-15bd-41e3-93cd-9a2a7514eafb", "sighting--c4f5e427-544d-4bdb-aaef-25dd95fa1738", "sighting--00c00b82-35f5-426e-908b-8b6b9cbb9c3c", "sighting--e71190c6-d0b8-4dea-b072-80180ce00492", "sighting--e3c18fe5-9047-4f23-9ebc-fe0634c5ac01", "sighting--0a09dbfe-13d9-45f0-8e4b-3df80367d734", "sighting--55322854-711a-407a-a97d-525ade180c43", "sighting--b7bf8917-29a5-44f0-b6d7-9f5cf97dd2ea", "sighting--5f90bfff-f596-496b-9bc2-df47d9ad0fd8", "sighting--b3a01b2f-d761-4bb1-835e-48ee702e15d1", "sighting--64306533-1e6d-4dc9-aba5-697f72b1853d", "sighting--be9e4f81-242c-44c9-a545-335f7892f72e", "sighting--d66a8d66-19d3-419f-9ee9-2b088302ba72", "sighting--08edbbc8-f166-4748-941b-0e17788389d4", "sighting--3df7e3d2-ba3e-4be1-ad12-b3d915544e5b", "sighting--8fbbe0ff-2eee-4349-87df-35bba43e6188", "sighting--15987b97-bf74-444e-ad75-7dec00232136", "sighting--4e388a9a-7baf-418e-85f9-08d342342a73", "sighting--164970f4-cbe3-45a3-b4e4-676f6dd2c674", "sighting--2130e808-1842-4b29-8d29-02f0e8ca2029", "sighting--666b0afe-5f97-4b9d-985a-adeb9527142b", "sighting--c5c1a785-0a55-4f00-aae4-ec5ccd46e2d5", "sighting--754293e6-0475-4974-89c4-e26446c07603", "sighting--04eed27b-4ca0-44ff-a375-44f5e80ab591", "sighting--60ce1d0b-8efe-4dd7-972b-c198460f63c8", "sighting--6dd3e9df-ffa9-48e5-a6ca-2d1e6b57cee5", "sighting--5bc2b412-898d-4cb5-a88e-733cfbec402c", "sighting--364c69a2-1e59-4364-9c16-60d4dc56d07b", "sighting--5a0f8a2f-c659-4b4c-88dd-d41d88886699", "sighting--6aa8df1a-cd56-4567-a6cc-714c94687923", "sighting--59b36d58-5421-41bc-9d61-c1e1f5c6c1be", "sighting--bb3c5ca1-2087-4ce4-a2d3-16312ee0c4d2", "sighting--80609b44-73ec-4503-bb01-d2e4248e9d9f", "sighting--0d3ceb01-d8b3-462e-9e4b-4dcfbcff8e1f", "sighting--2043be19-53a3-4a17-b8b2-ae3ca2f713df", "sighting--c9a5d28e-f10e-4e4a-9a9b-f3de53d49e57", "sighting--8d2320cd-d445-4f29-b92b-6f2a192921c0", "sighting--cd88ff35-3a29-44b1-b1a6-369b878f0a81", "sighting--2b9b59e4-8063-4895-8206-a8b657880a1a", "sighting--19963946-eddf-46d2-9694-6f89780f30e1", "sighting--4e3131a7-b996-479c-903f-c69d66eb85fa", "sighting--eba6b959-b8e9-421e-84fd-ef8c325ae1ee", "sighting--3704af75-9678-420b-bac0-d590a0c8bc83", "sighting--cf568b54-193b-4c9f-ba42-9a23c08e6673", "sighting--ed7ac2b0-dfdd-4105-8138-a3b0331ea96d", "sighting--e75165c7-27e7-4e72-9f6e-a4e85488bda0", "sighting--efe391a7-7c28-4826-b245-bccde6699afc", "sighting--9ac9e0f6-56aa-4d14-90ff-0041410f372f", "sighting--f9e62df7-e11a-437b-ace6-785a17b49f1c", "sighting--0eb3f7cd-4eae-4457-b78f-db88bc5247ef", "sighting--ed536ab1-95c1-4a21-b5dd-38ae7ba0bfa9", "sighting--0e7570dc-d505-4caf-bd7c-950e7723b3c6", "sighting--f5a158d8-f72a-40e2-bae0-60638cb625ec", "sighting--bf31c51e-0460-42a0-9894-71bba1deadee", "sighting--15d8498e-c7c6-4650-968e-2370c158e4de", "sighting--87c72fb4-dbb1-4c9c-83ee-6caddf2a0b8e", "sighting--5aa47381-e8a1-442c-b235-e3eeff5033ce", "sighting--ffb5ad9d-dc63-47bf-80f9-0468da3b0cd3", "sighting--13b90a92-d3af-411e-b1cc-eac5a12b95f9", "sighting--f20a0833-f2f1-4139-9ca7-4cb62ae42f73", "sighting--afdaad13-6909-400f-8622-d1ad794df923", "sighting--c3c868be-b67a-4b8b-921c-be761ff2c948", "sighting--eedcad2e-65bc-431a-b3c4-2a6aaa6107e0", "sighting--f284bb2e-8b5a-44af-a886-788bdf12ed26", "sighting--e47e5b40-cd0c-4c06-9ea7-1277bca7f8bc", "sighting--40599b4f-4c7f-4b68-99be-a4dd38cd2c5f", "sighting--5d36f488-8609-45c6-b06b-43d9ced62863", "sighting--c7c46f76-f829-4f52-beda-06f391a2a07d", "sighting--3dc278c8-704a-46a8-8da8-532f0197edf3", "sighting--9da47e2d-8f18-48d9-a676-83e7d3c4225f", "sighting--4ab9e34f-2e20-4dbb-938d-8d85d465fef7", "sighting--f0abec46-d899-4193-8432-0ac88413dbfc", "sighting--3b1403fa-e650-4657-a809-602419c9ab4b", "sighting--9aa4b740-5c26-4965-897d-f7535898cdbb", "sighting--fae5ea09-bbcf-4c91-af09-609e7890cd8f", "sighting--843769b4-2a02-494a-a595-9a3d40422293", "sighting--97cf0d85-6242-4188-90f2-ac56ffacac85", "sighting--706743e9-791c-442d-9ef2-e72a1e5b7ebd", "sighting--66bb9725-910d-4a08-8de2-3c0f2ab92858", "sighting--da1286cd-2918-4b31-993c-d5074b071540", "sighting--77ca1c30-8d6b-42e8-ab37-89f97a6fe3ba", "sighting--d72bc360-497b-404f-bece-b24ec196aab4", "sighting--3a1f2a0a-a937-43ea-9f84-a269d04054d4", "sighting--8c8430eb-c493-4dde-b43d-f77064cd1513", "sighting--6c14c9b0-f772-41cc-9d69-72336b01181c", "sighting--56c86b8c-94a9-4f69-a195-84f2c0eb3ac3", "sighting--730e59bb-e0d5-4551-8182-15750b0479cb", "sighting--97a8e065-7227-4f7d-96e4-c54fcc0ff1d3", "sighting--3831abd7-f07c-4a35-87ae-a300e2a7393d", "sighting--46f1433c-b6ad-42c9-b81d-f716ad86595a", "sighting--21b4d5fb-05ec-4286-b2c6-d7a4581734ab", "sighting--3c2bbf41-533b-4ce5-a45d-4cb7dc550c6b", "sighting--0d5ab761-7df7-4702-814e-ec3919ff3e38", "sighting--47cfa308-b731-48fd-8aaa-06963052f97c", "sighting--92181743-9002-4146-a159-43695b65ac53", "sighting--55a76cb6-6175-41b7-8ac6-d18251f48124", "sighting--7f13d406-506c-4da7-b830-b16bf55a807f", "sighting--034f32cd-35c3-4aa2-a44e-5bc43c646cea", "sighting--32e0a280-3e37-4565-a16e-e4294051dd5f", "sighting--b26232a7-ac3f-4636-a4b1-bc2b70bf36a1", "sighting--dd22427d-06d0-4bda-92d7-aa72757f7b35", "sighting--d11d0312-702e-414b-9ef9-aec631ae1091", "sighting--2e8345e6-847b-482a-8c13-fec69c10b426", "sighting--53b98ebe-db7f-4427-be31-31760bf259d5", "sighting--79417b34-c82c-4fad-9c8c-f3bf5bc698ac", "sighting--1a4967c3-2c49-44cc-aa05-6a8633e410ce", "sighting--ddfa3483-c73a-40ba-aac9-94b0e2e6fb53", "sighting--fced47b6-7a0c-4754-a55d-db0f2f55b131", "sighting--0d31071b-e9a9-4f6e-a325-c10493177089", "sighting--605e4990-cf9d-4dae-b4ae-c496f7061e0c", "sighting--10c58037-4965-4564-800b-f24ea08997cf", "sighting--dbc65a0b-392a-4e11-b548-f50ae0c7925c", "sighting--48e5bdf0-d98b-43c3-bc0d-a59f150fc926", "sighting--f2637649-2a15-40a1-b7b4-e7c93436395c", "sighting--01f45ae7-84a9-4b0f-9b13-c46663c1e562", "sighting--61a93ab2-e0fa-4329-9e74-687b82e2a872", "sighting--f0c88131-d7d9-4bbc-9187-4a851b8560a5", "sighting--0c237ed0-ef84-4b39-9523-f7aea4217d11", "sighting--35586812-b81b-4d83-96b5-51f65ef5f48b", "sighting--f58ff9de-ccbd-417c-aadf-3f440b959b46", "sighting--d0d92d61-dd86-4d4c-b00d-678f7b35d127", "sighting--0ab1c5c6-bf1f-4853-9b38-c9aa9fcbea38", "sighting--495de332-d5c2-4ed0-a6f9-26b4e92c2912", "sighting--be686bf0-08a3-4c53-95c9-198b00933d44", "sighting--85886bfc-9528-4d4b-9a17-bee824765a72", "sighting--4d5e46af-18ad-47d4-b997-fcf1d005e357", "sighting--dd0c3a9e-9116-4883-af98-ee8e2428fdf2", "sighting--8dfdd3e0-7e41-4b30-bd34-9f9d4913f35a", "sighting--d7a2528a-af6b-45b5-bb31-adb4066239e1", "sighting--de105a63-d1cd-4e51-a9ec-3ebdea81d2cd", "sighting--2ca78590-e7f1-4a40-b067-3d33e3c7d1d1", "sighting--228f0924-f4d7-4d66-95de-4cdc9bf57e73", "sighting--67998a7e-8113-4081-896c-ab835bca46a5", "sighting--a7994468-1f0c-445f-ba57-e009628c1c95", "sighting--1ca236ba-19dc-4eb7-918b-e03eac7e9213", "sighting--28df414a-6413-4916-8df7-d05a97ed6519", "sighting--5ab6f5e3-a456-4115-a02a-fed00acc6c2e", "sighting--62c1221e-1e39-4259-84a5-82a160bf7842", "sighting--19f4b7d2-dcbd-48ce-899e-331056a104f1", "sighting--3bd734f9-e7ac-42d4-aed0-5fbab0faf281", "sighting--34a1c03b-1063-464f-9534-4cae31792a78", "sighting--1bc7d90a-fe84-449f-98c7-7244cb372508", "sighting--c458d6a7-888e-4501-94d1-39743a9e824e", "sighting--5e56af1c-150b-4f0f-8333-6ca5c4521542", "sighting--06037cef-433c-46e0-82a5-416dcc511edd", "sighting--5b460208-ec36-4295-a214-cf9446999769", "sighting--33b73fd3-28f2-4380-804d-fe09b8fc2b96", "sighting--dfc17d45-be37-4bc7-8dee-6ea2a78fe4fb", "sighting--aba8ad82-9eb3-43f4-94d8-35e1dc79479b", "sighting--b271f8d4-dd88-4530-9ba9-7385ad4445e6", "sighting--1654edae-990e-47d4-a230-6702aa65f64d", "sighting--f1c9a3ab-f2b9-4027-9db8-e37b7c5cf8d7", "sighting--1329b66b-95e6-4cfd-b098-c3ed1a655408", "sighting--cbc8a9ee-3fbc-475f-b43a-f5f2df03d30b", "sighting--b5bc91d9-2a13-4c5a-8e10-307262866fdf", "sighting--d6a4cae3-6b70-4aca-80c9-922c919b00ea", "sighting--e60a2dab-878b-4d0c-959b-ed5d9019f69d", "sighting--08373196-e3f1-41c4-b0ff-f74fffff073f", "sighting--1fec2621-f1a3-4924-8d30-8c7148eef674", "sighting--6b20c76c-da82-447b-8800-25d6c70c00d8", "sighting--ac126ff7-dafe-4e2a-a27f-136b40fec104", "sighting--e8919f30-5082-40e2-b9a2-20b36a185d7d", "sighting--11f81332-4044-48c2-bea1-e64cbd9f7421", "sighting--97057997-1513-4825-819b-3c7efd7f322e", "sighting--8c274e98-b4b5-49eb-92ae-349a4fe4cb3f", "sighting--14c49f32-cb57-4779-a5b2-0664c4eedb25", "sighting--dc74aa31-c26d-431b-b7c5-86ef7b025454", "sighting--82ee3cfb-c95f-425f-99ff-3e2bbef43115", "sighting--88d55a85-3bd1-48b5-a134-f77ebcb10827", "sighting--49511d08-6be9-4fc8-a4f0-1f65d3a6a991", "sighting--0af7bc4a-fc6f-4234-8940-301499640654", "sighting--f6c4127a-28c5-4caf-bc81-7d25741452a2", "sighting--8af4831b-130c-4396-8df2-da624b1cbf0e", "sighting--d779b710-5401-4035-9dd7-97898174da74", "sighting--87e6604a-a18a-41ab-856a-0c7a3b153baa", "sighting--5876f89e-641a-42fc-968f-9ed113d67fb7", "sighting--efa8f9ac-6c72-41ac-9634-c239fee898eb", "sighting--5401db9c-faed-46c0-8ff2-c55e4ef9f4ba", "sighting--3e04a85f-8b06-4ac7-8934-f03746fa7119", "sighting--056344c7-be3a-470e-8640-b39a9689c226", "sighting--5004c05e-3d4f-430e-acd5-f87d13b26ce7", "sighting--5cd11cf3-356d-4a1c-8a35-904859d3658e", "sighting--b3492d85-8447-4308-96e5-73acef27c45b", "sighting--cc798097-7b30-4bb9-ae32-03e69d4b2bcf", "sighting--da1aad9d-c3c9-4104-9785-2226ef28dfa7", "sighting--85601264-a17a-4c80-b6cc-ce9d9686f19d", "sighting--9169f5c2-88e7-425f-8479-291a3066f82b", "sighting--8de08d55-2283-4aac-a1f9-53ccbe643237", "sighting--2813609f-2659-4722-8cdc-cf5795cf01a8", "sighting--437ac401-cf45-46ba-9540-9d65a81b79d0", "sighting--f4cbef6a-af15-44f2-a2b2-232c77eedf78", "sighting--27d21be8-0b73-46f1-b1a8-5904f24091ab", "sighting--eb024af2-7762-4c28-a1ed-2fd351a0e21b", "sighting--81b79567-12c9-4c75-924b-c3983f348c9d", "sighting--88a77fc3-88a1-4c3b-97de-cdcffdfbf124", "sighting--cb7acb67-8f85-49ec-858f-2375b4ce1552", "sighting--85e931f1-3111-41ef-b18b-36ec20353e68", "sighting--491a5cbd-219a-4295-a56f-9de46ea4841c", "sighting--f0f75d89-b107-49d3-9aa4-baf483591eb6", "sighting--f1a94020-0d95-4517-8240-40cbb143ad50", "sighting--653b7f55-496e-4959-82f1-1cf67e796422", "sighting--37803ad8-3f51-4ff6-8473-7b909b815f5a", "sighting--002447ae-68e8-4e65-91b9-1e59a65a2cd4", "sighting--2a5e561f-b551-446c-8544-0ca713fb68fa", "sighting--3aecc507-e662-46eb-8995-2af06c79dd57", "sighting--a5b1c1a6-2ecf-44c2-8e3b-24db47d6c5c9", "sighting--bdef7a0e-0449-435d-bdcb-ffb5682d9882", "sighting--7c16eeb6-eacb-4b09-af4d-4b381550f7d9", "sighting--59dafa34-744a-4375-8704-42ff4cba2231", "sighting--2f1230d8-0344-4d99-902e-a638c7c57fba", "sighting--d6b914b4-27db-424d-96e5-98725dcbe5d4", "sighting--75e8aea6-c8fc-43c5-a463-7f2aa1c62d8b", "sighting--716f2544-0e30-42c5-a656-314358af8087", "sighting--fd1f2874-268d-4265-8800-029752f0f66a", "sighting--3c580c55-73e3-4287-af49-d787acbf1c79", "sighting--76f8a78d-896d-45d2-8e62-ee4124e3f695", "sighting--22619017-391c-43e7-ad24-e024806f381b", "sighting--37c0390d-21c8-48e2-b1ec-d87d0103982a", "sighting--81d0178c-d73d-468c-8347-10b62483d1db", "sighting--1f0a12cd-7fc4-4572-9eee-90311cc8ad7a", "sighting--1f62059a-4f13-493e-9f6f-5154023070ae", "sighting--77dbe882-6051-4f33-8d59-3a557f17c1a0", "sighting--c66023c7-ee93-48bd-a749-ff11ce8156ae", "sighting--67680dfe-e3bf-40f6-9ef5-fe30df4ef444", "sighting--22a20e38-1247-4312-b929-986cf6513353", "sighting--400842cc-c5c8-44c3-ac1f-f82d43d67c15", "sighting--a9f4f061-b645-4a85-96ee-a69522a5014d", "sighting--1227ac86-1226-45cb-bcb1-13c55b40d6d9", "sighting--d76c17cc-00e5-4956-a8ab-7591f6d90048", "sighting--7108536d-12e8-4dff-9931-1548ad2791c7", "sighting--753b30da-1dfe-457d-baca-f1be19e9c216", "sighting--ad06c4e1-b91d-4858-b6ea-a298a2db39d0", "sighting--f98e4109-f2c9-49aa-944f-b2ad6e6f4df6", "sighting--ae40ff01-5334-45e7-8998-82eaaa0ff6c8", "sighting--2a2265df-6a63-43a7-8fc8-95b382e029fc", "sighting--30416253-0d0d-4a6f-bc86-3604a3975212", "sighting--d681f3d0-b70c-43ad-8237-05f65b9d77e1", "sighting--97fa04f4-057b-4d64-8276-488b460efa63", "sighting--a26cac20-d023-47ec-b0ca-9be335138517", "sighting--29aa3fbc-1ddf-46b6-9f40-f5d23aa95e7a", "sighting--dd2d92ed-7772-468e-a34d-6fc8b77e1de5", "sighting--adc8b0c2-a10b-44fe-84cf-6666ddf27c4c", "sighting--169a4b90-aaec-4352-a2f2-e791f9f40ba3", "sighting--4c198e7b-e5fe-4545-b338-5d2f9e674961", "sighting--dad52c5f-0e37-4d6b-b9a0-b651225936a0", "sighting--74d79830-cdc0-49ae-9eaa-3c0a5cd4937b", "sighting--d0765990-47bc-46e6-b2e3-d04007cb4ba1", "sighting--2c73bb75-b06e-4fd5-b2a6-1b225603fe72", "sighting--a15484a6-88ee-4b0f-ab00-b337dca3415a", "sighting--50b8447b-114f-4d69-81ca-8816217fd83e", "sighting--194c21c0-6c90-435f-aae4-0d918d903008", "sighting--0ac56306-8323-461a-ae43-706992e151be", "sighting--593f4565-c425-4f04-98b9-7318b8f3e947", "sighting--bfb4740e-a2bb-4fd8-98eb-c70ef467a64d", "sighting--6bbe70a6-8d04-4772-944e-788d3eb482e6", "sighting--eb631479-23c5-4bac-947f-ae49ed5e8be1", "sighting--420836a0-02b3-4f8c-bac1-7ddcee003ac0", "sighting--eda87f9d-0e7f-453c-aada-3f48a2cae07b", "sighting--ba177dec-b2bb-4144-a65b-574eaac49b4a", "sighting--3523d1d7-cded-48ad-b3d0-dc1372deae50", "sighting--11eaf5d0-cdc3-422a-83b3-9dd7b709e8f9", "sighting--9a8ebe77-e082-462f-b7f2-0d991d5a227b", "sighting--4afc963f-9454-4e42-875b-7e64f4da815c", "sighting--21427f5a-defd-41cd-ba97-4bb4fe2df1fb", "sighting--8b304285-4c81-4448-a01a-cd021e46650b", "sighting--d8a064b4-1dc1-4128-82a8-ddfc8ef22caa", "sighting--90196bd8-5a2f-4045-9938-99d337fbedf3", "sighting--374a98e9-f76a-479d-9f31-decc027dcad0", "sighting--1dbd9295-798f-4a2c-851b-bb5c86c80dda", "sighting--33a5e1a0-7d2f-42bb-9ccc-9f6e5ca0640b", "sighting--7e438c45-a147-468a-817d-0fcc8698696c", "sighting--3c0ff0bf-614c-4ef4-96f8-8c12eec6dad4", "sighting--9cf9cbfd-9aec-45f9-85a8-faf352ab10fb", "sighting--3e742729-7cf9-4d06-aee4-985edd3af72f", "sighting--50c4e41e-9585-4b72-b7d3-7a7f7e6c0cf6", "sighting--8dd3a992-3401-4e1e-af76-ac283d70e65f", "sighting--be34cf81-698c-436c-900c-d009bdbb509a", "sighting--ec4a1138-c619-4f54-87b0-86136c663e88", "sighting--ff92edef-351a-4827-98bf-2b54d8521999", "sighting--a047d4e1-6271-4ea6-bdec-50ad9aaaddf0", "sighting--6fae9ff6-e7bb-4f4d-8438-6733601963c2", "sighting--4f0354cc-c618-4582-a263-4044af6f03f4", "sighting--3ac9a877-678d-40c5-bc8e-d44da55011e0", "sighting--38bcd4ce-5f8d-4061-9165-16d1da33c131", "sighting--3de484d8-c8fa-4ee5-b9d4-bf3345549f6b", "sighting--8cb38c28-4eb7-4a8e-b3aa-688cf038ae3a", "sighting--c262606c-b865-42a7-8d34-30f057e5bef9", "sighting--71465ad1-a8f4-4481-a6a6-4eb5b3690fc5", "sighting--3449d0a6-61ed-4c4e-9c81-dbe87c2eed1e", "sighting--a1cf79a4-f0d3-4a06-801a-b5d2955eea9a", "sighting--96e7bee6-6a9b-4d28-a4ce-f86608fcd094", "sighting--08d31097-67c4-473f-aab3-0544db9ee626", "sighting--4dddf768-ed06-4e68-b56d-6125396506b7", "sighting--c383d4a0-ae93-42fb-84ed-455793fd3323", "sighting--97963042-2945-47c7-a72a-311ea942ec54", "sighting--6bf01032-2f30-434d-a1f3-61e14fbc8d7e", "sighting--a6f21727-0696-4ae6-af11-e69988b835e2", "sighting--556c9c0b-48cb-41b7-a6ae-12dca5caccad", "sighting--372d7ce9-2586-418e-8aa9-21bfeb7e656a", "sighting--6161c387-0746-4af0-b244-c7a34fdd0356", "sighting--90f96566-6fd1-42c9-b57c-27080c9e2dc5", "sighting--b7f1bfc2-d50c-488b-84b5-6cd0430bd568", "sighting--b5a3e20f-bca0-4fa5-a64e-74628c77e548", "sighting--4f582cee-134c-4ffe-a4aa-8780018ea607", "sighting--20733670-d5ce-4d3f-8c41-f9fde83aaac9", "sighting--cebec89e-c9af-4f98-b4c1-918bc4b63a78", "sighting--68abb07e-c184-4235-8a92-207d49ee0667", "sighting--1815af13-b72d-474d-a653-bf458134e490", "sighting--2997f923-ea65-4d92-b45c-a72b7088efc0", "sighting--e3cee9af-e7a5-416b-83f9-495c0d1d5b23", "sighting--5b64578a-9680-4b57-add8-9d573929b1d6", "sighting--516ac144-9145-4ca0-9ab9-52e91fd6750d", "sighting--8374673d-48f6-49d5-9158-2d95d1df24e3", "sighting--01beafa4-a3f6-4647-876e-9f11ce81b1be", "sighting--8f611e91-7719-43d5-b736-334c6934eed9", "sighting--ac265ffa-8942-47ba-839d-838a370e258a", "sighting--86741d88-d544-4c67-b1f3-4d96fc067088", "sighting--c37fc0b2-2de2-48a7-abfc-d4033188d883", "sighting--41dd7c37-68e1-47d1-a9c5-90118c83ff85", "sighting--a1d8e243-6201-4c27-818d-491abd4e7966", "sighting--8a4eca73-0806-4dc3-baf9-0cd0b6d54b4b", "sighting--89033832-69da-4c7d-b72d-06cc42ae718c", "sighting--d83f3db6-2069-4775-8de1-c5bdb364ee1b", "sighting--05963ec5-a293-4767-95dc-8b46c08fa4ce", "sighting--1358ac4d-6d5e-4662-9e7f-8d2f0d394c23", "sighting--53713c1b-495d-43c9-99fa-d4ac710ee629", "sighting--d2b0a34d-89bc-4317-9623-dc9a3ca2a1e6", "sighting--dbdfc906-5e8b-40bb-8f34-1e0a93e0fd5d", "sighting--151e5669-2dba-4f4e-8848-fabd992f0c4e", "sighting--16c5cfde-a67e-450f-a1bf-88ddfe4fa697", "sighting--7d49a6cf-d9cb-4523-98f3-38f8957d9bfa", "sighting--ce764e7f-f431-4b83-a8ea-15709498ed5e", "sighting--72767d1a-86d5-4321-98de-968bb78892fb", "sighting--f0b2e595-4348-47d3-8bcf-e50c809fe956", "sighting--ba500bd5-ccdf-4d97-a034-5ba958c9e2cf", "sighting--8aca6dd2-0832-4c5d-b122-1f2839b1637e", "sighting--48b86125-8dc8-40e9-b9e7-0dbceb6ddd15", "sighting--7c229f48-58dd-4cf2-9bd2-fc756bceb6c2", "sighting--eb182457-ee6d-4fe3-8860-d854f3648073", "sighting--ad9ece85-8b08-4e1c-9aa8-895ef45d2f28", "sighting--8aa48da2-c957-455e-a354-81010e129ab6", "sighting--3e7d724f-a167-424f-b7cb-ff5e3a2e954e", "sighting--31f2cf7a-d8de-4198-912e-c9f3a1aea9dd", "sighting--444f5364-c319-420e-ad04-be9af773a0fa", "sighting--9aeb93c4-a175-41ad-b815-4b441cb1664a", "sighting--75c4fcf8-bc5d-472d-9be0-b5089d3bf7f4", "sighting--1b920093-0a47-4c6e-a755-b3a383389b93", "sighting--4c5d5e90-e881-4192-bc4f-eb8e6f43e887", "sighting--31f606b6-1afa-4464-9c5f-74618b16129b", "sighting--2144d11a-b71a-4f32-b963-cb7905d360f6", "sighting--51fe2fd8-4d4d-4120-a8b4-9072a49b4369", "sighting--f3bb38b5-2302-4ff7-a5b7-6b39143ad88f", "sighting--989aefe6-d570-40cd-9571-974995d02962", "sighting--387fccab-bd3e-41a4-a7f9-4d6b21c2292f", "sighting--97dff0aa-4db9-4509-871d-1439137f0f55", "sighting--5b81b995-4075-4ac6-b3b6-b13ffa43622f", "sighting--53fef63f-7172-4faa-b635-b82475a5d900", "sighting--6bd64943-bd3f-4a8c-8218-1c7b76a658a1", "sighting--58f5b193-c330-4777-ad4d-e1342a645d46", "sighting--9969d06c-e041-4999-a71a-19dc911e3438", "sighting--bb97e3be-f193-4b60-8f5b-fbf40bb98c97", "sighting--639da273-87f4-4e38-b661-404ff13713b4", "sighting--c7c20daa-03dc-4033-9202-5d892523525a", "sighting--c2e4dfbf-255a-47e4-8b1a-1c1b5dd8c45d", "sighting--9e096cc7-32a5-49f9-bf1b-2f0ae8a475e0", "sighting--7a20c740-24e5-4e09-8215-fa7a352924cc", "sighting--ae56e814-2fa9-4aa1-abc2-9783278caea0", "sighting--16380cc7-8952-45d6-a402-0ac51946b0c6", "sighting--dc757b08-cf5d-4386-b7ba-5ee989d8236e", "sighting--cf6867b0-e1fe-4610-8445-b98d137486ce", "sighting--dc8f5c53-acec-4608-880e-8c8d63b775e2", "sighting--69201dea-a60c-4172-b8fb-bd87814aac3f", "sighting--3d0e7584-09dc-4df6-b0b1-4a7cfa9a810a", "sighting--d670d22c-608f-4193-ac7f-f8aa3e5af63e", "sighting--c97d56da-fd0f-4266-ab5d-4709e9af91a4", "sighting--437cab6a-6d01-43e4-9be7-48dbd56060df", "sighting--a9735372-cb1b-4910-bc4b-7ed4686890fb", "sighting--9ce14a7c-9e08-44bd-8544-c3f8fa7afc57", "sighting--14bfed55-c0bb-4eee-8e1d-523b0944f384", "sighting--c08fafb0-f086-4d88-b093-3fc39bded478", "sighting--3139e5bc-d3cd-4273-a8e2-afb6209d2d57", "sighting--f28a6988-558b-497d-a86b-4d9a66973c72", "sighting--98774d8c-cdb8-44f9-9ca9-aa923b7d849f", "sighting--849a452e-9c59-4e4a-8e63-35ac3a442742", "sighting--b7c54505-eb23-42d2-9a4b-c402301f4cb0", "sighting--30a50d60-4533-49b3-8a63-f9228dc78b02", "sighting--ed3a4e7e-e198-4cb4-8a8e-69045daa2680", "sighting--93f2f178-7c17-4f06-9974-d59a3858cd90", "sighting--5412fedd-7d96-4452-a378-49a26f3f6e91", "sighting--525da601-c244-48b7-bf34-98229907a69b", "sighting--2ed8dfce-d6dd-49ba-9723-62ae2c03aaef", "sighting--184b0752-a90b-444c-9d05-01b739d24ca4", "sighting--2026026a-e743-4594-b71f-12b1b564d73c", "sighting--f906a122-3876-4109-ab81-ba72065ae3b7", "sighting--b0c1a239-3e0f-4a36-ba84-b2b212bb1dbb", "sighting--3e1a5d01-43a9-45fe-bf3f-121c10d02420", "sighting--c684ed85-3f36-4204-aee0-b31e1038b27d", "sighting--70398802-74b0-4aa9-bee0-dbf45f8910c1", "sighting--e24eef74-8a01-4702-854f-386c132fef7f", "sighting--856fccf0-7bc9-45b7-97aa-aec10ce7887f", "sighting--a2410399-97a1-42a9-8ceb-db1eb2aa9fa3", "sighting--d2330e5c-525f-43b7-8cee-e82b8146df2d", "sighting--fc2f4a2a-4f55-4faf-ac2c-a8ae02f4af2f", "sighting--2c59ef59-2e8b-417f-ba66-99f8c3aaa94b", "sighting--40070482-8aea-4b8c-81a2-9770369ed6e7", "sighting--19c45376-27b5-4dda-a6a4-e9ad09e37352", "sighting--2d70cef6-ad80-4c76-a2fb-24077e70c3a7", "sighting--dffea68a-0674-475a-af64-b65bd61ba764", "sighting--ae1a97c3-436c-42e5-b79d-6467b6597c3c", "sighting--e2d3032b-9f38-4d12-b33a-5253f33ca82a", "sighting--0c1a8fd6-d7a7-4e1d-b287-a1c2c1fdc8ae", "sighting--0b4409ed-d64d-449d-b377-349e7f98cf30", "sighting--d3f05840-ce27-4cd6-8cde-33a0c57dd38a", "sighting--77daca27-ff80-49c1-9cfc-3aaea71c260c", "sighting--53154d4d-305e-468f-9cfc-c399d7678a14", "sighting--4ff357c5-d964-4683-b89d-1c34ba7ed6c0", "sighting--6b590d9d-5fe4-401b-9233-2cdd93393286", "sighting--42b5c4d7-5f96-4d71-87e5-161f65f7ecd1", "sighting--55295b5f-5c8f-4df8-b104-a217cf882641", "sighting--c9389ee5-0339-44ba-a6cf-1a06b5a050ed", "sighting--61a81247-c6fb-48f1-9023-baa001653909", "sighting--4166e73a-087c-4cbf-9960-1f8cd57c4ee3", "sighting--c6375075-3693-4a83-8c1a-e2a33539cbf2", "sighting--b93457aa-e812-4568-a0a7-0fab248095a5", "sighting--0a1a84b1-15bd-487c-8520-5ea1a0e3e8d2", "sighting--9c521144-a60c-44ad-a6c0-1af7e40ca9f7", "sighting--70bec5e0-af38-4af8-b56f-625a0c9a5ba6", "sighting--68a544b8-e889-4466-b469-ad2d25a0db26", "sighting--5ce0bede-13bf-425e-916a-d578c7b9f2a5", "sighting--16309f98-79e9-4d9f-adfd-48be3470eadd", "sighting--c6fd42da-7d72-44d3-aeec-706a12643164", "sighting--08b8472b-2d18-4b47-8ec9-78c809cece70", "sighting--e6993507-011a-4c1c-b26a-dfb2c7e3efe9", "sighting--23d46d75-afa6-438a-9bf0-73a4fafe9895", "sighting--3ae5b722-3003-465a-ba03-fde71fdcbf4f", "sighting--181ce0fb-faa3-454d-94cf-6b6829d55495", "sighting--9e17a032-3175-441e-bc05-b819a33b0eb0", "sighting--4fb26c20-3874-4708-8865-1e561cc7bd71", "sighting--4f821812-cbb7-4b14-be09-6209736da08d", "sighting--9d89fb91-bc18-4aba-9c4e-4ae27d153972", "sighting--ed31e6db-88c4-4e64-b3c8-c39dddcad27a", "sighting--3321b681-a1b2-4911-a8df-90f5d233298d", "sighting--0d8a5d9c-59c5-43e4-b26c-31f9ac362f84", "sighting--7e6c8dc8-3064-42fc-aac6-932788820ec8", "sighting--b4ca95f3-abb6-42c9-bddd-f060de816382", "sighting--b5dd4833-a0bd-43f9-b294-52b800ac7ec6", "sighting--27721f6e-0441-4583-88ac-59f58d2872d1", "sighting--5a0630a6-41f0-4d8d-bb80-91eec9474d75", "sighting--c14bb846-ac1d-4bd3-9354-ac725e9715aa", "sighting--b3750cfd-acb7-44f7-8cfa-5995c918d924", "sighting--466d4f91-2287-403b-9a41-c84047802faa", "sighting--c1c0a535-c042-4d57-8dd0-5d1eb36956cb", "sighting--23a6c178-fb03-491b-8654-886e85a16f0c", "sighting--9b923fb6-f54a-44cc-84b0-c3b3254ad5f9", "sighting--871ef526-0980-44af-aeff-a949209038e8", "sighting--6449db52-bac3-4ec1-bcc8-5ff47f34271c", "sighting--dcc153a0-5818-4393-912e-75ebd02fbe1a", "sighting--b5f49535-28c9-4a0c-8b96-9287d50dd497", "sighting--bb99a51d-cde9-40c3-a976-d0459e91c4e3", "sighting--eb7b6ddd-cf26-444b-8b86-4baa6166c021", "sighting--e0c2a16c-a553-42ad-b89b-23f0968b0e49", "sighting--a4b93797-051f-4122-8582-2658ab70a4e2", "sighting--24ca622f-e935-4272-8e98-0b6346a7c1df", "sighting--1031e3fa-2f4a-4431-b9c9-ad0f8a4e2950", "sighting--eecafaa7-22cd-4f47-86e8-577cccae63bd", "sighting--71b25f3d-654f-4f3d-88b3-49330dc86cc0", "sighting--d4e6988e-09db-4912-8822-dd2f48db3583", "sighting--c749efc2-dadf-4768-9164-b687b0b335a3", "sighting--72b7e0e4-4d73-4733-b4cc-6650a1d52995", "sighting--5986bde8-4f9d-403d-84b0-862efca157a3", "sighting--f7610da2-a9c8-487e-915e-8b84dc9b9e7d", "sighting--9fe05165-f895-4dac-9b4b-edb2caa2977b", "sighting--da92e84c-75cf-4425-b054-3631260c70a4", "sighting--cb088f42-729a-4cbb-afb8-207ee0d30d3d", "sighting--2ed9ecfd-3289-469b-8aae-5fc044c42ef9", "sighting--8d63b50a-d051-4e09-bcea-953a5d406525", "sighting--c00d5f25-7926-4e35-9525-64ee5dcb45f3", "sighting--baffcb78-4682-431d-95ce-139526ffdf74", "sighting--41480222-1ed5-4c0e-acfb-549b364dd828", "sighting--bc6acb08-b9f5-40cd-9a83-87c6d6d26097", "sighting--20de48d9-8c2a-4cea-bef6-22a004c8a904", "sighting--ab032510-bb40-48cf-91fd-222a4ef2fc9f", "sighting--616a13d6-b956-4675-8f36-50f6eecd76c8", "sighting--062db57d-8149-4bf5-9dab-566dae601f0d", "sighting--b71cf287-634d-4937-b1ce-777fbdfbebdb", "sighting--fb168c9f-33ac-48d1-9bb2-5b7150ef8ae9", "sighting--1d4a93ea-13a8-4d24-8dd9-80229e24a687", "sighting--a5750c10-91a5-434d-ba86-1601d5313169", "sighting--1030712c-c6c7-4bf7-b456-d56ea66688f5", "sighting--a5f1c359-3e71-43b6-b710-4c73ae625dfe", "sighting--6296bb32-2dfa-4448-83da-c8f9a49d763a", "sighting--b7c939d0-a690-47ee-b2ea-1b6b22becb69", "sighting--c76aeee7-3628-48b1-a63c-3f9388b2e52c", "sighting--85ceb949-0fff-4fc8-a16b-728040754920", "sighting--eb88f75e-e77a-4fc1-971d-43e493501804", "sighting--229d0f5e-60d5-461a-9d40-5a971690babe", "sighting--62d2ccf5-7212-44f5-aa5c-2c39e51ea6c8", "sighting--47c03d3c-c5ca-4eeb-b1d4-0e64394631fb", "sighting--3a58af61-deca-4b86-9209-5a2974a5aa3c", "sighting--ff0198f1-17ba-49bb-974e-45d7e2c9c6b7", "sighting--7e58eed5-8412-4a70-be32-27cd64967e18", "sighting--250fb5f9-54fa-4202-8f1a-2daee48089f5", "sighting--4b772491-6ff2-4a38-a0ac-8ef2bb230efd", "sighting--dd8ae8d3-9fc2-4737-a138-a5b57a9f1192", "sighting--80a74761-a588-41db-967e-99e91c5522e8", "sighting--810aa60c-99a4-4d9b-8ff1-c95be42236a2", "sighting--4cf2c4d7-d87a-4b09-9c80-02a8ae203954", "sighting--198bf71c-b820-4e8b-bdad-75e8435da483", "sighting--f720af31-4646-4218-89ef-492503fbd175", "sighting--afb37b8a-5931-43e4-8d0a-f09c2ffd9571", "sighting--e5f37dcc-5a4a-4bc3-a7c8-2048db736956", "sighting--e3fffcbe-a616-4e63-94bd-cd3c375e247e", "sighting--64e639a7-c909-411a-93bf-f6bebcd5aa6c", "sighting--4531510d-085d-4cb2-b2c8-371347f8b163", "sighting--0487ce74-2c87-467d-b3d0-86f51870e225", "sighting--59119a89-eda6-4283-b80b-4f91a541a670", "sighting--5c8f8a45-6b90-4837-a56f-39ff36ee9fae", "sighting--61263c39-c54f-4813-8101-21ba86e54bc3", "sighting--3707d6bb-f10b-4941-87d8-711f7dc7142c", "sighting--65e310ad-2002-4ad4-96fc-9b6c967c7010", "sighting--761bf2e7-6f5b-4f03-af42-70cd171f5f77", "sighting--622472f6-4862-4de7-ba26-7645efb5f354", "sighting--1aee3355-814a-49cc-8064-66f8e90599b2", "sighting--2714a153-d47c-42e7-8a9e-8f6d9062fac8", "sighting--e8e73c21-372c-4ffe-bc9e-cb496636bf07", "sighting--190e8a61-8a5d-435d-8691-e9713f920c08", "sighting--7dcd936b-7702-4d5c-a0b4-6e058d009168", "sighting--4e04f70e-49b0-470d-80bf-61270682cd38", "sighting--4816a846-0b79-4890-8e66-1a62ceb2d04d", "sighting--52c263ef-c1fb-46b1-bbad-e384eb042a7c", "sighting--09414ad4-8a68-41a2-bd38-4809c23e110e", "sighting--c4b9706f-8527-4b6a-8bdf-efac2108a1b8", "sighting--3ea1f1bb-62db-4e45-ba3b-67d4fc94f77f", "sighting--0e1a1439-f86a-424a-b836-0ce46e770315", "sighting--4b67752c-ddbf-488f-bc3d-079b9b2aa0d2", "sighting--8680e48f-9c21-4547-b9d2-1b651e39af21", "sighting--415eb1ad-8b99-42ad-841f-aa4fe425d88b", "sighting--a39bd487-86fd-42f0-a7e2-9435db44906d", "sighting--4e0be423-35b3-466f-9a3b-bed19026c703", "sighting--9c4e37fb-364f-43d7-86e1-ff3f5bb1e368", "sighting--f1fee545-d088-4f80-88e0-2df422f09aaf", "sighting--b1840be2-ca7c-427b-a361-bad9558790aa", "sighting--7144900c-87ae-4d5d-adf2-e9f4e5971375", "sighting--0cc8f9b1-a7c3-4b35-9f97-c960746f56ae", "sighting--0e6a1155-7bf4-4e3e-aa89-fac7c3c709a3", "sighting--4ca44f65-a03f-40c1-818f-1f59837214e8", "sighting--d65185bd-b6cb-4ad2-a717-9292fe944f67", "sighting--8c0e461d-ccc5-446f-90c0-3e788fec4a97", "sighting--0607e57b-7b3e-4561-bf34-c25eb2a31589", "sighting--f7b4f3ac-29c4-44f1-b96a-21f1d9e037a3", "sighting--a19760e3-61e4-4426-96f7-ccf2ef53fd5d", "sighting--5205bb5b-877d-4299-81f4-4f9dbdd5fb18", "sighting--9550e4a1-bb04-45e1-870b-77f5d8923ce3", "sighting--2f18eb8d-0047-4ac3-992f-2b965646af92", "sighting--7c469b99-298a-4889-8565-6ea9cd856814", "sighting--41a72187-e25f-4d16-aaf1-4c4c46d15ede", "sighting--f0db2340-5760-4b07-98c2-0d0a1c55b8db", "sighting--a635ca9e-996e-4c2b-b922-5378f5f0ebae", "sighting--62ade373-5853-4ba4-a38a-86780dc25b08", "sighting--bde66db4-4598-4d0a-9da5-9dc5c6a57f0a", "sighting--4e01fb12-dfeb-4c0f-939c-b106ccd50162", "sighting--0d28f604-5436-430c-8c5f-3d0b4ddbed5e", "sighting--bcac65f1-90a6-4a9d-8d39-caa79df803b4", "sighting--c639d609-f1d3-4d85-8018-98eb89053128", "sighting--7982ecf3-bd59-4e0a-8c20-a3a6493d2e92", "sighting--ecd40cf7-2adb-479d-9384-b1aee3f43d4f", "sighting--ba7b292c-e220-48be-851a-2b502a591970", "sighting--d99b9bd7-8c8a-4ce3-abe7-c56f0b15af02", "sighting--d244d1da-7a5a-4c8f-b794-3780d490eeed", "sighting--be7639d7-9ea4-44e3-ad97-b4b45db581a7", "sighting--fe28c5ac-52f1-4d9f-b7f4-2ae356633a04", "sighting--931e5827-41dd-43f6-80e9-2adc936f9f4f", "sighting--fc610083-7a5c-4a1f-9a23-ae916ff0a145", "sighting--49b9a15e-798f-4ff4-b4f4-83545e5af330", "sighting--a155ff18-a57b-4033-87b5-ed61b63bd94b", "sighting--af390cda-2f11-43c5-955b-258338e27145", "sighting--d2a78925-b922-415c-bd23-7a475b190686", "sighting--ee3a5277-ed6e-4e03-96d0-862f37649234", "sighting--6d8660c8-071d-4391-8bed-db839efe58d7", "sighting--02d854ad-ded7-47e1-a4af-e3de1132c217", "sighting--9f62cdcc-a598-4ca2-88ba-1c5c6c72f957", "sighting--b9750ebb-34ca-4f42-b8af-06d6fc0cb732", "sighting--d3de6470-8374-4e3c-898f-3150af0efbc5", "sighting--16197964-9cf7-4739-bcbe-4606e130d8e4", "sighting--c752ac21-6c9e-4af1-8bb3-5fa2dcb4c25f", "sighting--bd1dffd5-4a67-4acd-b248-40cbd9b3264e", "sighting--0bb8f60f-820b-4cdf-bb2a-1d0e8d9cf25a", "sighting--d172f51a-31ec-4c57-9e30-d5476f580d71", "sighting--a70226d4-659c-49c8-ba8a-92dd6098858d", "sighting--14206e9d-fcee-46f9-adf3-9f0bab7cb18b", "sighting--040b7be9-d25c-4de2-a83a-441942165cea", "sighting--778dbf80-ca84-4067-b17e-5cc820a6da08", "sighting--392f2804-173e-40db-b9d0-d7d66983950a", "sighting--658887a6-d253-4d0d-93e3-0ba8ce1e31f5", "sighting--62b64a75-6c04-45e4-8bb7-9127f883671d", "sighting--c16d03de-ed72-4881-8860-7a6d20a43c40", "sighting--070440ca-8cba-41f8-aeb8-461ce21838fe", "sighting--a390a035-1381-45bd-9203-e0ad581b3854", "sighting--9f066826-9001-4fc8-9e36-8ebbfde02a9a", "sighting--24e9a418-fbfb-4390-aae4-365ae117c04a", "sighting--833397ae-ce2b-4a50-b9b7-a7679983005d", "sighting--2fedb7e4-733e-4365-bb73-4f02615aa807", "sighting--8243a8c2-1117-4040-b86f-8cba5b2a48de", "sighting--2afcba1a-5a1d-40ac-ac42-df0f152acc4f", "sighting--a21f8fd3-dd3b-4711-9f8d-7e9d4c8012c5", "sighting--c181aab9-aa9c-4117-b2cd-0e93bbdbf1b1", "sighting--8372fb81-028f-47f2-9111-4f4e06b7662b", "sighting--433eca65-19f6-41f8-b684-fc31a2febd92", "sighting--b0bfdacb-8f82-4a3b-9d24-4c4d54dc87de", "sighting--19c0e65c-d352-4d82-8f55-ba5f88f95843", "sighting--38fb48e5-001f-4f2e-a902-de1c766dd99f", "sighting--c561cb11-1104-4988-88de-4bb43c201d51", "sighting--6dbfdabb-24d0-4c90-ac89-2bb46466cd5c", "sighting--0b7fddde-1172-42fa-a314-80f124588fa5", "sighting--ceb4b0ab-5f86-47b4-a61b-871ae7c3b277", "sighting--54371ecc-ec00-4627-9ae8-d827f11baa1d", "sighting--f9898267-5456-41b2-a18e-4edb878efb54", "sighting--69a84583-2287-4ee4-8524-edf53184734c", "sighting--634a159e-b78e-4ab2-b7a7-1d7cf4795e50", "sighting--a2bc3f49-46ab-48f9-8832-e2cd32087ca1", "sighting--3fb9ebaf-c11b-4db4-88d0-71acb6e0f637", "sighting--8175f0fe-531b-4a30-bcef-35ba6ddcecbf", "sighting--c0f85eef-38f4-445e-b610-9ed1e03d4bc0", "sighting--e4b5c223-84e0-469a-b25d-84deb94de65d", "sighting--f4e3720e-9dc4-479d-b8da-d38177267325", "sighting--cb7c1967-f25c-4855-8cf8-210e233edace", "sighting--f7c66e66-c6f1-4982-bffa-8dce095b4613", "sighting--26c4d5cc-b3b1-4fbe-8e87-6a8fc6cad371", "sighting--a23b8e9d-95a4-416a-817c-4b5f11df9129", "sighting--56e769ad-0820-471d-ab98-772fd2327a46", "sighting--0e2240f8-77cc-461c-a58c-62b1b558c60c", "sighting--2cdd1f8c-124c-47ff-a208-8710de0023b7", "sighting--48a3b1c1-ca66-4df8-9051-4d494d99e698", "sighting--7c91fb73-925f-4800-90b7-3db7c774f1c2", "sighting--5e67586c-f6e2-44f7-8d0c-2c3bb547fded", "sighting--41e641fe-7da7-4f86-ac65-786ed4f50810", "sighting--a50b2b29-aca5-4b91-be69-9e1a5abfdbb0", "sighting--754aab93-844c-46e9-9304-24f40cb1fbbe", "sighting--eacd2eb8-7b87-42fe-bcc6-0c4733aca384", "sighting--d110b229-d9d0-4ce4-9c59-f04abdc3b09a", "sighting--6aa8c5c8-bd38-4b50-8fe6-c3fb8b9911ac", "sighting--fa60ea05-4c71-4ee0-883c-367f37278cf8", "sighting--6ebe3d70-407d-4fa8-a8a8-6a8336448deb", "sighting--2ffda60f-6a6e-4688-bfe7-5d392d8797f2", "sighting--2d11faba-ae3d-4e1e-bdaa-59844dcc498a", "sighting--3c515eb5-0cf1-49cb-bf96-814e240f0ff5", "sighting--eb5ba401-c35a-466e-adb2-c507c051a6b7", "sighting--67b40353-20af-4bc0-b3a5-48929915898f", "sighting--6f5c5dbc-b282-4a71-b7b3-07697a57eea1", "sighting--391e5282-2943-47bb-9949-54186b3f5e3d", "sighting--48762a4f-c732-493e-bf40-36f11394b5e6", "sighting--b94500c0-a502-4de6-950e-93ea9b35aa4a", "sighting--917d2473-8b8f-4a03-aed3-bf0fee385b41", "sighting--663f1962-9e0c-4eda-a5b5-2b2fc33f61ba", "sighting--3690e85b-cfa7-4e14-9c19-f41034660a4c", "sighting--300e3098-49e7-409e-b002-808bb1a67f3d", "sighting--fba595d6-4505-4033-aea7-0ee81d1119cc", "sighting--b1f5ffc2-d3ec-45da-9392-8794531c6d47", "sighting--5573a6a7-7b6d-4876-871d-1c8d23c9a2a8", "sighting--b4ce6364-20c1-44d6-acfa-698f9f5788dc", "sighting--21257263-e52c-4e35-b697-dd5edb721d79", "sighting--e221cc27-687e-4211-9615-ec99b2b822c3", "sighting--35e08106-e579-4090-870f-97aa2047763b", "sighting--aa458cc9-4f72-4a9e-a5e7-fc9f60ed82d0", "sighting--523f3358-1d2a-45f2-8cc4-c30fc56f6844", "sighting--6d9ddbc3-db68-4897-822d-b2678b01eb15", "sighting--c45d8a8e-1fd2-4cd2-ac37-05c4590ebc15", "sighting--63b7cbf9-8419-43ea-88fc-38294ecd074b", "sighting--e0f8483f-003b-4e98-bc8e-a04439bba7c1", "sighting--d2c57d2c-0799-4a63-9151-6a2564e7fa14", "sighting--399a7933-a6a9-42c2-b39f-9c61f15a5772", "sighting--dc827253-458e-4b04-b5a9-2bcd12274ed9", "sighting--39765291-d299-4b78-b41d-f1b5d5aecac8", "sighting--a4721650-20b7-46ac-bf94-ef2549160299", "sighting--afcfb97e-fd93-44ed-9fc6-8a70b891afb2", "sighting--5e5730c8-8cca-4176-b2e2-2079f464cf72", "sighting--17ee18f8-718a-4528-b18d-18bc99342817", "sighting--54118bb7-e9d6-44c1-9dc0-dc253f3f2f73", "sighting--e25d318a-b52c-44f7-b4ee-6d243a0ced93", "sighting--9b00306b-3f9a-4f99-a221-e06f61381067", "sighting--1423c1c1-3447-483c-80d5-4c0692387919", "sighting--5b1e8386-c166-496b-91a9-c59232026bd8", "sighting--3fa42e8d-0637-447b-a459-f60a6c42577e", "sighting--9e49f1fd-9764-4509-a753-bf80aa14e5f3", "sighting--39f86db4-a274-4a34-ba3e-107dd1521b13", "sighting--28108bb3-28ab-4f94-9c64-f525b5ef98dd", "sighting--4ff7eccf-57ed-43db-af62-23692252e383", "sighting--5f1a6904-b1cd-4aab-ae8f-0a095b5c73a3", "sighting--dbfddc0d-5a66-456e-85e8-3cc1db76b3ad", "sighting--ad8ac11e-ae43-494f-8502-6a4cc5094140", "sighting--6c640459-7449-4e70-9b6b-4cd7e334c858", "sighting--65f2d569-e19e-4a73-bc8c-c6c4784b48ea", "sighting--95794999-6df3-43d6-81fa-04c6218f5e90", "sighting--808e943c-eebb-4354-8e49-1721dc68039e", "sighting--40cdc0d4-569b-4419-83e9-fb43f112b204", "sighting--1f98d201-d97d-4b13-9cab-da74e4af89dd", "sighting--2e6b8265-22c2-4503-b41b-cc693997ed18", "sighting--439ac145-40e6-4c9c-befe-2b3d77f44ff7", "sighting--78ff7ad9-18e1-4175-8868-3c3b8f72243e", "sighting--c9d527ea-ff35-4ec6-98b9-004b7b7d3480", "sighting--6e81e27f-6b8a-436e-9f3c-a86865f553b0", "sighting--33fbd472-dfc5-45f2-a49d-6735440edb24", "sighting--6caae335-f5a7-4e76-b7a0-dfe39e76dd35", "sighting--c9d03933-a714-4e7c-a4a7-0653faed506b", "sighting--61af049f-5824-4351-96ef-8730231f1dd3", "sighting--29cd327d-8bf0-48b6-a924-96cc1057adbf", "sighting--564f36ae-05f6-4fe4-a8ae-349e0bf92072", "sighting--474459cb-a5b8-4655-ac75-564c4306c66c", "sighting--4041ff82-cada-414b-bc2c-482ab26cf598", "sighting--2a399ebc-07ad-4fde-aa46-7f4175a3d7e7", "sighting--bb7ccf06-dbc8-4d42-8ee8-2bae22f0d636", "sighting--929c0fdb-3f35-48e5-8643-b73619330df1", "sighting--462b04a4-89cb-4ac4-ac43-8ebca5524165", "sighting--6c3cf504-2d70-45cc-8e89-1ae9d8a9b0c3", "sighting--7f29c63b-9918-4292-b150-840f641b8cb2", "sighting--35a298b4-e1a1-464d-a278-66fa4a93c9f9", "sighting--44b259a3-716c-488f-9e10-faf534e8cbb8", "sighting--200f5c43-2490-4e0d-97c1-b377e10a8cb1", "sighting--aee4db6a-3386-433d-9bd7-ec5816d5c3fa", "sighting--8ad1a5a9-f02d-4e2d-86ec-1c99e441c0a2", "sighting--bf3ff4bb-e013-43c4-b9bb-f7c2b7c7a31e", "sighting--b56c2422-173c-41bb-85de-445d2b4e420c", "sighting--fee6aa54-b2c5-48db-8570-9064f33b9d2b", "sighting--b143b2c2-fa0a-490a-8b10-a9e66489080d", "sighting--5f88a16b-6f6a-4268-8274-7bc5b10d9713", "sighting--6858b5fd-f62f-499a-b07a-fc9040edc8ac", "sighting--2da7e161-8003-4d4d-9251-3eaaa0a965e0", "sighting--81d4be30-a00f-4012-92a4-6cde0f147898", "sighting--c97cd7ac-d257-4672-8cd2-859014ddd7bf", "sighting--89f63110-ec06-4cd2-bca5-3a8b442cb2b0", "sighting--75bd36ed-1b88-4153-ab5e-b4fdfacc2ead", "sighting--193545e1-f7b1-4aa0-8006-c4dbb0edf0d3", "sighting--a109ab40-e043-4d1e-bbf6-e1b09701f9c5", "sighting--32ac1a48-29fd-407c-8c70-67101a9a27a1", "sighting--855b9188-1b02-4904-b6f2-eba9582614c2", "sighting--29575153-b673-4cd0-afaa-58b3cb6fd912", "sighting--db39974c-276e-496c-aa30-18473c70d9ab", "sighting--7f9687aa-f5d3-481d-9cb1-4305896bf9fe", "sighting--29fee018-d334-4ee5-9e34-1a11d7c4d493", "sighting--fa9a73f0-b94e-4261-8638-2fed8e9cd5a0", "sighting--c9ef0dfa-8cc0-4e1b-942b-ecae8380fd2c", "sighting--011df776-0205-45ac-b582-e0afde8ec3ec", "sighting--25b74475-b7e6-4de6-b421-01cce91f400c", "sighting--27b1748f-5437-419e-ac9d-714082da6053", "sighting--7241262c-b27b-4a9a-b70e-665a7ef89a66", "sighting--7623fecf-1327-490f-8f5c-91a85f60acc9", "sighting--b930d259-45a1-4668-b078-5cc9ed877445", "sighting--97a24675-2e14-43a9-a317-262f75a37382", "sighting--175b2008-4fe3-430a-8ec8-431c54764e03", "sighting--8b8ee195-ee97-4dd0-9a05-411b9983755a", "sighting--12335887-42a8-48e3-b70c-7984514aee64", "sighting--f980ab76-5d4d-42df-b07f-405f140b410b", "sighting--e9471d88-8420-4e61-88ed-ca32e64e32c4", "sighting--9dc5d237-9ab0-4c34-8afe-47c798f08092", "sighting--4bb1b4d2-d9f3-49e9-a1be-ee9e65fc427c", "sighting--e7cf68d6-414a-4a4d-9611-f68f7b8f829e", "sighting--331bac83-482e-44cb-ae12-e9daa7d7c6ae", "sighting--4e01cc2c-e18b-4282-8f76-62c142bd1eda", "sighting--a89e32e3-3b0a-47b0-bd27-5ad8da941621", "sighting--2d58079d-b3aa-417a-a61e-30c254f87b8c", "sighting--a6d28a83-e9e9-4ab9-834e-a52d79aa8647", "sighting--4ed8a81f-8f71-46bd-8d99-1a3b855975ec", "sighting--4be9c80e-a224-487f-bfcb-d65ff4fc5717", "sighting--c83dff1a-8bc0-4106-bbd5-435f63b5b7a2", "sighting--59398216-c680-4d9a-a2d8-9af5e4462b24", "sighting--59f5d7c0-6ae8-4849-958d-3662df5d13f7", "sighting--c43fe36f-97a6-45c1-9fb8-ba2c96f21a50", "sighting--2d38ec03-90f0-4155-8343-14503941f039", "sighting--0247035b-4924-4841-abb3-7afae21226e3", "sighting--924c8e5c-1e3e-4ed9-89ad-ab7f3e2634b8", "sighting--d90e26a2-d8de-4525-9141-7d6737189eca", "sighting--313ab6a2-68b3-418a-a0ca-5c98307ae3ff", "sighting--5a514ca0-7528-4253-99d8-0c260a99614d", "sighting--2908b10d-6cf7-490c-af91-7041d864a9ea", "sighting--599f3b91-6b75-4311-ab1b-7b0b60db1b29", "sighting--19c82a2a-5a8f-497c-96d5-551f3be0b552", "sighting--93ca1040-c9db-44bb-adb3-be22d6787fcf", "sighting--3c9e4a0a-30bc-4f41-9537-447fce41b77c", "sighting--2f162d9e-2189-47e8-a2c4-7d05bbdd963e", "sighting--594cc271-0e36-42ea-8264-fe5b5dbb7986", "sighting--72fe251c-aa64-44e8-a775-4dc38fb9607b", "sighting--7e120707-3bef-4979-a8f3-fdb0a2bf0c8b", "sighting--96a28877-9600-40c8-92e7-8384b7941f69", "sighting--7840c7f7-304a-43bc-9c72-4f7043af6fb9", "sighting--cd72003d-c53f-4942-805e-9b5daaf7a9f0", "sighting--4a850b33-d2d5-4553-9b9d-ddfb86aa9699", "sighting--6ee32e82-d4a5-4586-87e4-d6d7f0fddf15", "sighting--732cc5cd-7d92-4bf2-8b8c-8d01c1c8aa4e", "sighting--20570d12-70c6-42f6-b005-bae5d1123a3b", "sighting--73314a07-1055-44e5-8ec5-d7d4c81f33d9", "sighting--5e7369f5-6da9-4427-8105-27db8f293c7c", "sighting--df5ca994-8f23-4e86-9333-24debcd2d6a6", "sighting--74f004e1-f04e-401a-8dd7-9e50e2a325d8", "sighting--cf2b03ff-5b26-49f3-bb5c-19ffcd2ad331", "sighting--b7d021e4-0169-4ea5-acf0-76b80b708ac4", "sighting--7962db27-d774-41ac-8934-309887595d30", "sighting--3957de1a-0bf2-4b1c-aacf-c52f9bfeefcf", "sighting--b33eff0b-b3a2-4a9a-af66-26350195b019", "sighting--2afb0257-abbd-450e-b384-b67ea333bb9a", "sighting--f5c2fe08-4ae3-4c4e-a1a6-b74efeb6518f", "sighting--1ac153fd-4471-4a68-afe5-8e6c49fac638", "sighting--2932421b-4ddf-4888-87e3-03a50e4fed8c", "sighting--1e80fd6b-24a9-434d-a7c2-17ed7a9394f3", "sighting--8cb305ff-d599-4fb1-b546-386918bd1de9", "sighting--46f2ccb1-e4a6-4fae-a238-a3e6d61448dd", "sighting--6b594df5-2483-405b-97f6-4f5b0ffd28a1", "sighting--233239ba-9ddf-48bd-aa5a-097d1bd28854", "sighting--460a71c8-b962-46d3-934a-c0e3367a4b5c", "sighting--03b1c75a-1c95-439c-8daa-5a5160910f58", "sighting--b8befa4d-75b2-4161-bd9e-af2ac5e306bb", "sighting--4176ac1a-2191-468b-9ed3-60c37f355b63", "sighting--13114a23-4fe9-40c2-9923-21b7208c288c", "sighting--f53bdb8d-685e-4d42-b401-68af1b38fa13", "sighting--bd7a8212-be2d-4acd-b713-7de9185e98a9", "sighting--95b4c6cd-3607-402d-bbbc-bcdf64d463dd", "sighting--4830a70b-1ec6-4c1f-9440-fe7b64d49f80", "sighting--f6f8f026-2ded-4643-8a66-a3883c333a2f", "sighting--7fcb093f-0383-4848-8e87-dd3cabc47deb", "sighting--0a6f46d6-12ce-43fc-866a-2573d4f375ec", "sighting--f45af6a1-74ce-49ab-9577-04cabb8392a7", "sighting--268e4608-26fa-4c1e-87a4-b4198d358714", "sighting--ad4d4f54-d28e-4573-a81e-cdf1f515dcf3", "sighting--e49c2bda-fa1a-4f2d-bb9c-38b5602ab599", "sighting--f3686f7d-7652-4872-8d6d-af21e3bbfc19", "sighting--cf319d7a-f344-47d0-ad06-c40645004edb", "sighting--cb77b561-2bf0-4fdb-8497-3eaafd1c8cb1", "sighting--ce7b58e0-9c08-4c84-9c95-cbd7c8a04b03", "sighting--f008282c-2788-45f5-9c8b-d46fbcc01082", "sighting--a5b12dbd-152c-4dc2-845d-270aa5cf0450", "sighting--a45ae320-aa88-4dc2-96b5-c3dea3db38fc", "sighting--02052782-b2dc-450e-b74f-e4529412d3fa", "sighting--715942f0-6412-4c6a-a9de-92e3f1aaf2cf", "sighting--c9f96e1a-dbca-4094-9ff4-9f0525ccfc95", "sighting--c570f86b-df0f-4470-bc32-3c907fe824fc", "sighting--e90e4829-b00e-47dd-a930-c9ff27e84180", "sighting--ddd80409-1ced-4724-b9eb-302f32aa9f73", "sighting--0a1ac113-dacb-4e93-a841-32d215eecdbb", "sighting--866167a9-a19b-406a-966d-e5cd8faf98c1", "sighting--fd5d1d0f-165e-46f0-ac5c-1b17d552bd44", "sighting--862f980e-dd39-4869-953a-abe50b426568", "sighting--a269fe89-c884-46fd-891a-a470d24ea5f1", "sighting--3f54f0f3-c041-4aa1-bc11-509cc50fde11", "sighting--297ddecc-a87d-46db-a210-a6858fb7a998", "sighting--10e9245d-fef8-4df9-96da-4b23e86afeb1", "sighting--d1ad2a10-3490-4d34-8e09-de28d1134951", "sighting--542158ed-8a15-4eea-ade6-2820880bd36f", "sighting--b3c9a8f6-6b36-46cf-8008-228b1fab4c7f", "sighting--b45ffa73-cadf-44cf-9c58-d8368547c75d", "sighting--95be4e50-744f-4f3f-8b8a-128e6fb820c2", "sighting--8564c420-dabd-4050-ae41-fb6950cc3bb4", "sighting--aa2b94db-edc0-43d3-93db-9df1ecbb3b04", "sighting--678f7275-a9bc-4455-9766-ba35d21b0ac9", "sighting--5f128b33-aad0-4d3d-a933-16163ec228c6", "sighting--a6fb40c1-c112-4312-b20b-27ab89b68605", "sighting--f335ada2-7b01-414b-a982-7d390a04bdcc", "sighting--c519cda7-08d5-43ee-a5f2-ed082a9c5d23", "sighting--663330f2-c5cd-4e8d-8158-82926649229b", "sighting--09fbcf16-b3fe-4ba7-8dc9-9f3571b2f0d6", "sighting--e5af0ac9-c7c0-4cb8-be2a-6c12166562e2", "sighting--3e6003f1-a3f6-4a99-aca5-1354efe1c557", "sighting--77fa5cea-1654-4c77-823d-32265379a400", "sighting--e9c417a0-24d1-4e93-96b5-64eb7005e5aa", "sighting--27fca949-4d8f-44bc-ae1c-3d47720e63fb", "sighting--e3566374-95f1-4f02-850c-2976eaf850a3", "sighting--3d82bf68-4b2a-4bb5-b272-8a392300edbc", "sighting--adfa0434-079d-4483-8621-ee2fcd239d45", "sighting--bcf924ff-fd65-455e-82bd-d1e934a5c4d7", "sighting--49248920-37f2-452a-aa95-1573b5b06e4a", "sighting--c3eb2fbc-cbba-4c9a-895b-66057475765f", "sighting--23d2f1a7-d409-4d04-b0d1-ecb3d803ad21", "sighting--9681ee9b-841b-4993-b5dd-6fdbc39433a9", "sighting--b5145067-516f-4590-a34a-98198e77f397", "sighting--9fdb9114-8108-4fa2-9a30-ee6d986e6e1a", "sighting--4289b95b-ba66-4eed-99c7-c9702d1fb91c", "sighting--8e01cc9f-ad5b-4e19-8e0c-9fd51586002a", "sighting--fd89108b-da2d-43df-a1fd-0f3aa08be9ba", "sighting--9bf9890c-8fbb-44fd-b6c3-d6f1d0e999a0", "sighting--e44fbd90-f8bb-4558-ba1c-f8061ecc9ec1", "sighting--c84f4944-467d-45a7-bd8b-d8fe2b3e9b96", "sighting--67ae6118-657c-4d0d-8a65-a7a7eaae5d0a", "sighting--c5204098-f784-41f7-a8fe-0e323e353333", "sighting--cdfc598e-fd61-4802-9cb2-fb1981af6c57", "sighting--28040550-23ba-4b76-81d3-6abc9d216924", "sighting--c1f25c51-1fec-4e76-a0fa-4d0eaae7ac19", "sighting--9a803a3b-1f5f-4c9b-a1ea-4b02a92ae1f1", "sighting--bc9b2931-e1e6-4a52-a160-725f18072821", "sighting--d5090890-378b-4033-9d41-6d26b240b547", "sighting--eb6e1462-e490-4537-b118-7fa6be55fdbe", "sighting--b0f5696f-2d32-48a3-8665-1be4c5031637", "sighting--683e97b7-ffd2-486a-9ab8-be5ecba63bda", "sighting--9c69b588-4d43-4375-bf2d-a6b6cda0a658", "sighting--36667bec-edea-477f-b0c6-e3a8e10428bb", "sighting--5b396b5a-35d9-41e7-a76f-09136a2a41a0", "sighting--5e825abe-4672-4a1b-b106-b39163d062bb", "sighting--a3683867-742a-4fda-a8ee-51433459b37c", "sighting--06c96815-0f3e-4189-ab6a-f46485a63cbf", "sighting--c55b4303-f744-40ba-9cfe-1a6701a73f2f", "sighting--cd1bcba4-8eba-486d-952f-9e9d130bc107", "sighting--55499aab-0192-44a1-810a-17e029eacea3", "sighting--b395b367-8120-43bc-bb7c-a9c1f01d68cf", "sighting--6a28adc6-5f8e-4b0d-83cc-79a2f2528995", "sighting--74cbfa73-ea62-4bb0-b8d6-dd43e8575965", "sighting--66963775-dfdc-4c5a-a625-96bae1305025", "sighting--f293adc5-7aa1-496a-b196-20ba00077767", "sighting--dd3da43c-3cdb-4800-b9a3-729696572bbb", "sighting--7d85b5ab-c7a4-4700-97b4-26dd6ccede1e", "sighting--11ae6d7a-60e3-4244-b857-97cde10cd175", "sighting--6e3679f7-c108-4f80-a295-935c382a9b9d", "sighting--ddafa1bf-0b82-4e0f-a339-dc9724887586", "sighting--90cdb80a-c44a-417b-9cfa-ffbaa63e11ef", "sighting--f6fddfe6-8fd9-46b7-b9e4-ab192d06c705", "sighting--97f2516b-e874-4190-a3c8-0714663bf5ba", "sighting--34d9a0b3-7971-4b61-a4b4-a580e30d49ac", "sighting--4f514171-a929-4b4f-950d-69859cf2abec", "sighting--7c703b56-00f1-4df6-bf89-b0bb14307b2b", "sighting--dce3f490-5fd9-4044-b3e8-dc87e8e42308", "sighting--55c80456-3f0e-4c4a-83ca-f4bfd97de46e", "sighting--ce43b45e-ecd4-44d6-b57c-73d9d0d63eae", "sighting--67091148-e25d-4c55-9017-52569cf3f436", "sighting--0ed1e6fe-88de-4b1e-a908-60eb863c96fc", "sighting--49f0500a-6101-4c5d-8fc3-a57d61fa5f81", "sighting--4b9e177c-f71e-44dc-a74c-4e6a89a01202", "sighting--4510a169-72ed-4f53-baf5-919df5c83ab7", "sighting--8bd414ef-1883-410c-8425-7ce14bd378e9", "sighting--c6cef9ff-a876-4da4-8fa6-17616e193ba4", "sighting--46274269-8f78-49f6-a32a-f8d719b1c245", "sighting--fd10dcac-ad43-4ee4-8478-5d2a4309edb7", "sighting--87f80639-8f6f-44d0-9124-cf5f68c9d21b", "sighting--796f7181-c90e-4f7b-8362-ba26586b26e8", "sighting--9cf9c17a-e4f2-4134-9921-63ba80181410", "sighting--ed31ca26-3946-4f48-8f02-0ae5fb9b834a", "sighting--141aa5d9-aa05-43d2-9bdc-fdbf388456ea", "sighting--82106d69-487b-4379-b985-3ccc6e1e2554", "sighting--00678c65-f57a-40fd-8243-329a07d40553", "sighting--99db50ac-beae-421b-b4e1-cab751602626", "sighting--341b8d57-41ab-40ed-a762-09953ea323ed", "sighting--1b9c42d4-5d05-4088-8dbb-d064fb8c167c", "sighting--d50309a2-20fd-4826-9914-d7201965cf4f", "sighting--fbd6246c-d110-43d3-97a5-a4a1bc6c0347", "sighting--802427f9-f539-4a82-992a-be9642f2d43c", "sighting--7f1dc6fa-37a4-49ff-be0b-e3df9cd8adcb", "sighting--0eedd573-754e-45cd-b584-9b9b76bfe7ac", "sighting--341eb2f1-a284-41db-8a74-0ca8b59d86aa", "sighting--e68fdc84-9f70-4707-852f-73f95f645c59", "sighting--a88c14a1-5455-4d68-9f6f-2a4abc1a766d", "sighting--5cc1e16d-0a9c-43eb-9e70-a4113015f4ee", "sighting--ff9f3d58-d385-4766-b6c9-3a59c810fbd9", "sighting--ee2ffb60-2c2e-43b7-8cc8-97218e4970a4", "sighting--e0bc88ba-34ed-48e5-9ddf-125a5fe1ae06", "sighting--08e50c5b-1015-4513-b90d-9b5cfce57cd2", "sighting--be3381da-582d-4c14-993c-abf07e82c43d", "sighting--7669f728-e79e-477a-bd51-a220bb157e69", "sighting--c46e65d6-e194-4467-ab18-f8cf67bd067f", "sighting--863091b4-f362-409c-b374-f6fc6ac4433a", "sighting--1406f2c8-5ea8-42d6-a8d6-580e0fa53190", "sighting--ad3f111e-475d-4b2b-befa-2e8c03450580", "sighting--464679ac-fe31-48a3-bea0-5a49fbbeffdc", "sighting--38131ae1-0a08-4141-a812-89fd0a00880f", "sighting--e4ab7420-33ac-4194-be87-3b08c5d0fea8", "sighting--bd8d4404-633f-44a3-802e-8875397d5a49", "sighting--39860d5e-6e85-4e02-9f5a-42f206ad9857", "sighting--c8e043dd-c612-45c2-913b-e1f35963c399", "sighting--fcdae454-5e1e-4266-a78d-66bb2a33fe51", "sighting--2f7281ec-7085-4be8-905f-3a92c1145b2d", "sighting--85126fc8-689d-4694-8c3e-d5f1ecd971bf", "sighting--c26f4d7b-d56b-4b9e-8ce1-d3fddfff578a", "sighting--39fbd9b6-2089-40ee-880a-8b618a8a47b8", "sighting--67a8db98-1180-43ed-9247-aa76b47ed50e", "sighting--63c1a0ea-4478-4463-8698-1d116925b46a", "sighting--ddecb1f7-ea2a-4ccc-aca2-a92e962b9d99", "sighting--f3ad955e-e694-4c6e-ae85-88935f6da331", "sighting--876f92b0-b680-4277-989b-99b43c989bc7", "sighting--bc71ba66-6e43-4604-b0c2-fee1638b7121", "sighting--594e0e7a-640b-4929-a694-6090e719833c", "sighting--fa2b01ed-f33a-419f-bcd6-3dbf5f884cab", "sighting--889e8376-5113-49cf-b6a8-d57a6b6fb18e", "sighting--9e99ad88-d4cd-4fc8-9bf8-ad4b89db414c", "sighting--a43f393d-c9d7-4463-8885-c4678c2c6f24", "sighting--ccf39046-59a9-40be-9932-dba07810f34c", "sighting--7b702c8c-ee7f-4f9b-94e0-624ceb46aa4a", "sighting--6bccacfd-7f75-4179-b895-ccdd6a25809b", "sighting--f9847355-22e5-43f9-8e44-9a9f7290fa05", "sighting--c9af3912-22e6-4050-8ec6-887788cca8c4", "sighting--084c0c1e-cee2-4ee1-8ec5-9019785f5999", "sighting--e8d345f0-b1b5-41ed-802c-30751da46899", "sighting--f56e1892-4261-4a03-aea3-459aec3e2dbc", "sighting--3779d0b9-b879-4b26-a55b-887166f77e6c", "sighting--73451277-27cb-45e0-add4-9b777ff2550c", "sighting--ebcf9b4e-7aad-48e2-85d4-aec7c18545e1", "sighting--3c053134-b9b3-4088-bb65-eb3756b45e63", "sighting--03c52e5f-9b96-4584-95aa-a4e58e3bb419", "sighting--631a01f1-1290-4c49-a1e1-ff9251ccf081", "sighting--47a7f57d-1388-4cbb-8538-f8a1f8f719a8", "sighting--4c5b1b5d-551e-42e4-b5f4-a4ce4e5586d0", "sighting--bd9f86a9-5119-4c14-9603-e3f3b21a7ca0", "sighting--7e85a997-4e00-4bd7-b1cb-356b412feaac", "sighting--e5663153-0e24-4a71-aa07-8954fbe9501a", "sighting--c7d70fce-a1f5-474b-aa73-bd53a48dd432", "sighting--eebd14c6-282e-4fb5-b4b7-154a3342eee2", "sighting--5f67ecd2-a71e-486c-ba9e-07908623eee5", "sighting--18dccb7d-85d0-4c48-bafb-ccd3ff25cd9e", "sighting--4116e078-ab60-4476-a722-583118181742", "sighting--587ec3e6-c8f2-432a-b2ec-41795bbd7dce", "sighting--97f87f09-8f30-4145-b6cc-820fdbe04171", "sighting--69b19111-b420-435b-a9b2-92fcccfc6061", "sighting--c4415e5f-dbfb-443c-9780-782bc7de0022", "sighting--848adb5d-f043-46f1-838a-1bcf8ffc622f", "sighting--36c7429b-9a8e-4125-9301-1e94088a3f8b", "sighting--55fbaad5-59a8-4cc9-b1c0-1df9dca63d8d", "sighting--f34706af-0e2d-4496-a926-c4ad0f5a3121", "sighting--a149d9aa-b728-484c-aa1e-f785fadbee5c", "sighting--0f807eed-2804-43e8-8ef8-9021e01746e6", "sighting--ec483416-da1f-43e9-af8b-b8f151785262", "sighting--27bd20bd-feb8-44a2-afd6-7d036de782e8", "sighting--ecb8d0f1-906a-4615-b485-3e9cf1fdabcf", "sighting--ae077a9c-5e6c-476f-b98f-1f8cef151b7d", "sighting--d417fce2-d795-4876-a7f4-06cdf4b25783", "sighting--fda0b0c2-7141-4648-b212-522671db40ef", "sighting--b58e014e-f7c9-4975-82ec-af0272007c05", "sighting--ce2259db-a61f-45dd-bdd0-5711dbbc788e", "sighting--1a1d997f-98f2-47c7-8c97-a381c4adf78c", "sighting--ea5d77ae-de7a-4f23-a02b-be841036d67e", "sighting--0fccab3d-7790-4492-a98d-e0773b3b9897", "sighting--dfd52468-93f4-444c-af43-135a14c66743", "sighting--926db0c2-ae70-41bb-bc10-7fec4c77e128", "sighting--e37b8b9b-782a-4eb9-924e-04997a10fec5", "sighting--3a4e21d2-81b6-42fc-ac3e-6cfb10a7c0fe", "sighting--223d8c4f-f720-46dc-af58-315c0ecb986d", "sighting--6db5d1f1-dfce-4cf8-a7bf-280ae777eec7", "sighting--cc3b7d2c-8bbf-40ea-8dfc-e8bf99011cfd", "sighting--a3e54cdf-71d0-4454-b963-bde9b226667a", "sighting--83819749-ea72-4e26-afa1-744ef958afc9", "sighting--525639dd-64c2-468a-8923-0d4f25eae806", "sighting--3e87e754-c36b-40f8-a992-e8f584e770ed", "sighting--24bc3e2e-0f95-4f84-a5e7-2079123ff34b", "sighting--2ed169df-c440-4e71-b995-5ca54892de37", "sighting--d702f5e1-fbb9-47ff-bf62-a1bf02dd77e6", "sighting--8905f4e8-df2e-4555-b57c-594d31e790c4", "sighting--5769c12a-9983-4d8e-bf06-b8509f4a01a2", "sighting--4dad2756-6beb-4b69-9bcd-ad1535cad3e8", "sighting--71e36f40-8c0b-4167-b085-4c7aac384ba2", "sighting--b0f70c8b-d841-4871-8a39-ec88823625f5", "sighting--38d01f67-0a35-42a0-9e9c-17743263e713", "sighting--84e4f9f0-8a74-49ed-a1b8-d0df8cdb6690", "sighting--5a0a5cb8-33b4-46f9-b84b-29fa0a623218", "sighting--205b6c8d-663d-4630-a585-27dfb385b4c2", "sighting--239bffaa-8b6e-4016-8b09-f3f57941cb93", "sighting--3123bccd-ba8e-4993-b9e7-e4921057d47c", "sighting--07f2f715-156c-4e31-9ea5-02138b8d6a29", "sighting--7f538de5-8308-4fca-a48d-c5dc28fee848", "sighting--cc76c582-cc36-4025-b77d-1cd6865d3b1d", "sighting--bce1aabc-6353-468b-9391-99a2cfe75673", "sighting--cb975100-67e5-49c4-9b04-c0d13998cccb", "sighting--1adffd3e-1db6-4d33-9da9-674361a3000e", "sighting--cbfa8ef9-eaca-4216-ad1e-ee0453332b21", "sighting--65e10400-c957-4312-92e5-eccef236a072", "sighting--6af0dd08-752a-4dbc-bc68-cb414492e761", "sighting--deb52abd-ae6f-4721-ab06-a70f1b97c47d", "sighting--31696124-9d13-444c-b4c8-e0deacd6bb2a", "sighting--6a3a9987-773f-448d-8cdc-998c5140ccbe", "sighting--a44b3a4d-c9c6-4038-ab05-434efc6bb8f0", "sighting--00be5548-56e0-4562-a8bf-e7a4320986d2", "sighting--d95a4ea0-0b51-407f-b931-df8cf0a6d1ed", "sighting--0175742d-687c-40c9-9238-c1d060e419f1", "sighting--c58960bb-cdb7-41e1-8ffe-8134f1754c1c", "sighting--8bf7b5d8-d547-44f6-8c92-f2942afe2e7d", "sighting--7445aba7-1160-4d9a-a619-358e5cb714a1", "sighting--2062b998-ad16-40e1-98fc-dab56834907c", "sighting--83776656-fc61-4ab9-aeb1-099eb2fc7587", "sighting--521e54bf-af32-41f7-9e84-a0af3552be23", "sighting--66c9243e-220a-46dd-b282-a059591642d1", "sighting--e34e17e5-7a1f-4924-aa71-94d7840e2080", "sighting--ba4a6ac8-2a22-46ef-9575-31cc43c57cce", "sighting--2ed4edae-851d-44e4-bba1-829914526b51", "sighting--3a38a44b-4f89-4f8c-8b3b-3adb9787fbba", "sighting--98336602-2337-4765-96b0-24f09a3de96e", "sighting--bf9e38a7-8598-48de-9b15-815d8a9bb32c", "sighting--a544f334-781a-46ba-b1dd-da423cf2f2f5", "sighting--35482d54-7978-4754-9cf9-ad3e700e42bb", "sighting--a9ac0445-7bf2-48bf-9f47-d2df2fb756a7", "sighting--a316d9cd-ba8c-4dc3-85fb-8c805404f09e", "sighting--572fbb14-c942-4375-9264-4ddff789d973", "sighting--f7100e50-0695-4189-b7ee-fa50761035fe", "sighting--9e4c0113-18c0-4ebc-a202-df7256683931", "sighting--96c6f3aa-50c5-4036-b0f2-1b463d8e3b34", "sighting--b09c22b8-773c-41c6-95ff-ebad77839970", "sighting--33fcbc93-78a0-4db2-b0a0-218f5636f346", "sighting--b2974bed-2acf-45cb-9c7c-45f6af931433", "sighting--4c79cd43-eb61-4ac2-8d0e-8f52d248326e", "sighting--9b653531-7bde-466f-9a80-b6be98e318c3", "sighting--c1187357-f8de-4a9e-b277-47983196eddd", "sighting--51f28cbc-9047-4d5e-8498-639137c6c9da", "sighting--4bdbced6-161e-4d0d-80e0-a472daae3191", "sighting--c6d4bc00-f19a-4fd8-b3a9-9a44e9f0ccd6", "sighting--25e7729d-b585-4367-8748-dedbec837682", "sighting--dadfb985-d4f3-437f-aceb-8f196283c93e", "sighting--4e7b3941-16a7-4b91-a594-75c9bd0ebb29", "sighting--592ea76c-67cb-4814-9b48-f37d10ff2bcc", "sighting--f86abfb7-0d4b-44ac-97c4-2c4e8dc7aede", "sighting--61ef8dba-6c52-4e31-8ba8-b30231648750", "sighting--1d9b0c63-a818-4bed-99d6-ebf166e21b48", "sighting--3d3cbeec-8dc8-4392-aa14-a0a82452d66c", "sighting--16a41ed7-a1a1-4f8d-ae53-63921475fbe2", "sighting--92bfabe8-f34c-421c-897d-eca1d1fb41ad", "sighting--95c4ae63-9f7b-434f-9dd8-09b7cc6e0119", "sighting--c7b53b31-d798-4506-8974-11ca82f2d7a7", "sighting--f2885d0e-d326-4c8c-908c-bfb763474e03", "sighting--95c12450-2e07-4bd6-aaec-45bf6b1ac071", "sighting--ab939557-c878-4e96-8c71-22c091f9b1ad", "sighting--c7e21d80-156b-49ce-bb47-36211afd565d", "sighting--eb5b101f-ea54-4a96-ae19-d5896e1d3a53", "sighting--2aa8c4d2-6908-4f00-9457-9a8e1a4e5664", "sighting--1af6a09e-9242-4f65-8a09-f01ce7b0815a", "sighting--3302b41a-94dd-4644-827b-c4bf7d314e1d", "sighting--a8f7ea32-b528-4bde-907b-d06d97843297", "sighting--ec5cc29b-f39c-4bf6-97f0-208b0d86b43d", "sighting--dc195822-028c-4fbc-9b87-53f37a3578ea", "sighting--164b47ab-0fc2-4d72-a147-e0e2f694d9f8", "sighting--95675508-f674-4eea-8db4-c04ed2063b73", "sighting--c7f19d57-f1dc-43ea-9c5e-f12679457f9d", "sighting--a031c195-08e8-458d-a734-dc20a755d8e7", "sighting--88fcde38-3649-4d03-87e7-0de560f3a805", "sighting--814c3362-0082-475f-b5b6-4c6c4480d80d", "sighting--6bf67607-2f2e-48c7-8e74-e34f2afe6315", "sighting--fb4474aa-749f-4a76-b9d6-7894c79efa7d", "sighting--9711a663-3303-4069-bfa0-822316af74d1", "sighting--69e7dd33-6d94-45c6-9596-8d96b06d05b0", "sighting--3b541688-fc35-4aab-a9a7-9171b1f6e111", "sighting--1e47977a-38c7-4ec8-92ff-2496e3a02b51", "sighting--6f1dc5d3-e1bb-40ae-bfd0-3c4464fc7a11", "sighting--eab4dd8b-b22e-49e0-9860-1cc1d0b0ba24", "sighting--dd0f20cf-9b69-40a6-9ebb-7696effe5979", "sighting--909deb2b-085b-4ff9-bfdc-c72c84c63350", "sighting--61c65d14-b204-48b2-bb92-a0522e3a29bf", "sighting--20ed825b-5308-445a-a82f-02df3d603f3b", "sighting--057f3d1a-c0ff-4078-8e04-b4fa3f941775", "sighting--bc90cb1b-eef4-468f-9f9b-5bbd9524129f", "sighting--793628c2-e751-4ce0-be5d-7a9c766ac9a2", "sighting--bdb40f59-bf1b-40ba-af41-3d41635a4229", "sighting--ba959c0c-2997-4e04-8172-a4c091ac66a0", "sighting--bf701884-acd9-4290-8d21-c3e998ed1566", "sighting--af7fab46-76c1-4159-b048-c83f140b0016", "sighting--8ae336f5-ff2f-4255-ae38-4ece296761d9", "sighting--4dc1d0d0-545d-4041-98ee-b444c74c0652", "sighting--d8b8e9b8-5083-4108-83b3-cafa85000ffe", "sighting--44ac8fab-34f7-4401-a58f-d8303dc3ba0f", "sighting--7704e832-3261-4c9f-930c-678e27de7439", "sighting--f2f0332f-b03f-40f9-93b8-590797a9514d", "sighting--3b60d9e2-b96b-48da-b64f-4ec509d0b58a", "sighting--114a2b04-9161-4355-bd99-49af2931d375", "sighting--1f39d2f8-eded-4434-baab-93509a2fe973", "sighting--93dd3d77-f34a-45a9-bf32-3f85b0698a14", "sighting--6d53b84f-c746-4c48-a1dc-cdbec3d81064", "sighting--95f7f9b2-efac-4b31-9f8c-03f73bf6acb2", "sighting--cb01d371-5d21-4f2b-b65f-e91b4a09e04a", "sighting--c80ecf4f-541f-41b2-8375-e9c861d67132", "sighting--04d61ec4-36e5-49ef-9f51-4417435a9cc9", "sighting--5a4cffcb-0b12-4ef1-9d4d-bba95987d8a5", "sighting--16d7c7f7-3f6f-43dc-887f-304a7f6f892b", "sighting--de76f965-8484-4297-b8c2-2be6c8daaf1b", "sighting--fdfa22f0-dcc6-4088-b3cf-362dc4b03b07", "sighting--869ebf09-7892-4cff-a778-98587f0a3aef", "sighting--0e709a46-c15f-4a10-bf3b-b7978f886980", "sighting--3e58807b-c060-4e92-9944-16f9bb5ecfc6", "sighting--078dad61-c2a5-4ad2-bbe6-e8c94d226d55", "sighting--30a707c0-3082-4588-838b-f6d6f632c6f1", "sighting--b6302119-a0e3-4d5d-9d3a-72ebc9e4a782", "sighting--5ba27a5d-2bb0-4ba5-b307-46d73937a94b", "sighting--9ff4b499-c4bd-48bc-908e-beb816ee17b7", "sighting--f8fc7f45-2504-42a1-a69f-c7272bdf852f", "sighting--63406f96-2ff2-4a5e-899a-d1e82001c521", "sighting--ce307165-adfd-46ac-93e6-734c7b80854d", "sighting--312f4694-14e1-4ab2-b4f8-2c2f9d764a4f", "sighting--75a5641d-29fc-45f1-8530-dd8ada5a54ee", "sighting--7ecd1266-b0cb-4cb5-a3e2-5ae44618db91", "sighting--97e04ecc-30c9-4b85-b0a6-6d88fef19f06", "sighting--a62faacd-a1af-4d62-a563-69ee9bfb5ae0", "sighting--0025c0a9-d467-4757-93bc-7e735581f060", "sighting--de6473f4-cede-4bea-8a4f-dc01213c862b", "sighting--077d77e9-fa45-4e2c-8076-eb25f7d5a291", "sighting--7add11c2-ccac-443c-8819-ea52bef259aa", "sighting--6dddf6e8-7470-4d23-9179-8fb4be1f4458", "sighting--6edc1c8a-29ad-4227-b09b-95925a0f87aa", "sighting--15061854-cb86-49d7-8ba5-a7e05dd18069", "sighting--9b4e39a6-1ea7-4724-9dc3-cf79befc0869", "sighting--13ce0617-1c25-4355-8f17-c8394a5d47df", "sighting--69861272-354d-4332-ae7f-b8d61d2e5e2c", "sighting--e958d77b-f3fa-40be-ba9a-4f3379ca626a", "sighting--aa1689e1-9b1e-44da-9820-9a6861ed2557", "sighting--1f6f23aa-40ec-4924-af75-9f2b892571b5", "sighting--b40cb88a-c79c-4f7f-8705-a135d27beceb", "sighting--6f9646e0-5368-4fe0-a48e-82c3d1032bf3", "sighting--09f346f2-fadc-42e1-bf22-009f71ba039e", "sighting--84f1ebd5-7b36-4929-a2d1-4abb9d8439e6", "sighting--eb766baa-b6ce-48af-9434-b80374ded645", "sighting--97dfdc3f-3e16-4dae-a2a4-072b765a245e", "sighting--c8baba5c-c027-453e-95d8-f825ab586532", "sighting--36a90700-ec2c-443a-82a4-468249323b34", "sighting--ad25e500-5042-4b4a-be23-54c8f94c5f11", "sighting--f86ad87b-69f9-4234-9c8d-29b775e59e66", "sighting--077ce403-627a-4ec9-a9c4-5bd18ecc74c9", "sighting--67628428-b955-43c0-af33-1b7363e2fd7d", "sighting--6d11f9c3-0cfa-4c7d-aa19-fb5e278320ad", "sighting--69b508ab-b5bf-417e-afd9-3c9e1c9981d0", "sighting--ab858b84-92f5-49ad-89a1-f3618511b1c1", "sighting--2b2a324e-db88-4a92-809a-dc1a81c310c7", "sighting--6b8513a7-b33a-49b1-9b08-6980719035e3", "sighting--b29f9472-ee93-425a-adee-74b12d92a89c", "sighting--62c3ca99-cbcc-4b18-bd64-317bc7180599", "sighting--8d8dc313-5779-4481-8bcb-784aa9dd59f7", "sighting--68b214d3-bfce-436c-b691-927edf42d272", "sighting--1039ddc2-ff2d-4665-9dca-ac899703716e", "sighting--ba39ca82-6044-4ca8-b97d-246294d998f2", "sighting--a6f9dfca-f997-4980-96da-e7be4b7add7a", "sighting--d6e6412f-2c52-4d41-a016-ab52ba656347", "sighting--50abf406-6ec2-4810-915e-22be65fadd26", "sighting--9e854ef6-2c8d-4793-91ee-eaf0f26974da", "sighting--55eea4fd-2bd8-4661-9d30-ba89f5f9dcfc", "sighting--b71c9526-6e17-4de3-97b1-19148dfc0d0f", "sighting--7d8c938a-337d-41b4-961f-33f03d4c9672", "sighting--470c1662-bbea-4fac-bfee-20833f441549", "sighting--e7a3d4bb-44b6-45c8-87ea-766108e134bb", "sighting--f4aff8cb-453b-4e48-8e8c-968a1b0a6056", "sighting--31970798-b3fa-4f0d-92fe-4689e559345a", "sighting--960f969a-95b8-490d-bfdd-20aa7754f41e", "sighting--4bfc3d94-9c24-4768-95b0-2ce82846bcc7", "sighting--d8b326d3-7101-4b4a-9b66-fd745928c410", "sighting--9eb6194f-9033-4dbb-b4e9-9d6dc2173a38", "sighting--d19e1a2d-6565-4a60-9f53-17f998e3191e", "sighting--d231e93b-020d-47e3-b19f-6eb03bb1c2b2", "sighting--2bf00e11-5d37-4f63-ad64-bfecdc56bd0f", "sighting--4e8d2a99-dbf1-4ffe-8ce0-e4c1b44b8074", "sighting--9ca8e8dd-a013-4b7b-9402-8f8b178de947", "sighting--7ebb882f-9d86-4abe-b395-935ab09ee923", "sighting--4db226cd-2c05-4385-a377-8af3af6ccec0", "sighting--0b1c3f80-e989-4894-b39f-a9da3700c3cb", "sighting--c4dc9070-bb8c-46b9-a7ce-335e385b68e5", "sighting--5e8dedb2-7206-43a6-8ce3-f9c7c1c40a0e", "sighting--58200b3c-7687-4da5-a065-d95c2aea95a2", "sighting--7e46d71c-9079-4e0d-bf62-47156f060899", "sighting--881ff62d-59f6-4bbf-9751-5fbe3301cf0b", "sighting--f152149e-eda1-4d03-be9b-8f385f548829", "sighting--d7300d51-1d39-4080-a5e6-bacfa0c7f025", "sighting--126f2978-fdc8-4001-93f4-8070f0c90f21", "sighting--8b111730-9681-4171-bec6-42e2cce4f921", "sighting--a48fd2b1-8478-4a55-bf00-26b8c53e1683", "sighting--15e1b150-d5ce-4be2-a8f3-6da1e8d75865", "sighting--6165fba3-752f-4930-af37-eca250b5e359", "sighting--d3628c35-ec05-46fa-a00b-b0317c9d8e92", "sighting--b2201f2c-8a85-42a7-871e-cb2820a5e8eb", "sighting--5072fb97-4fc5-4b56-b073-e568eaea01a3", "sighting--ccb955b4-c73a-4af4-99bd-5106d76883a7", "sighting--7a737323-f7f5-4ea9-9b8e-d3fc795c740a", "sighting--899e9473-fd7f-40b4-a639-e668ea390932", "sighting--a8a1a97c-f3bd-454e-b6ab-af5ddccc7247", "sighting--b7297012-9a09-4fe0-9bf3-06e0dd4d86ce", "sighting--ef2949fd-b0b3-4ed2-b1e0-0587278ef85e", "sighting--3b94f146-af54-4188-9298-4abdc09f2d3d", "sighting--b17152f0-380a-40a8-9f94-0bd9d25216db", "sighting--b39257cf-669b-48af-b96f-721e5c95c3f8", "sighting--c0368d07-5143-4c58-aa7d-b6d5aa0c0a64", "sighting--dfac9c1a-b7dc-4aba-af8f-b406849a902c", "sighting--d275b9f5-033c-4784-8d94-d385e9bf4546", "sighting--188da9a3-105d-4b48-b086-fad9ef57359a", "sighting--e84942bb-c817-43e3-89cc-91e2a05d3ab0", "sighting--1fe9c122-5359-47e4-bd45-1f05d62254d0", "sighting--37591e1c-dcc9-4d81-9f5e-728d15aae079", "sighting--d2868298-db6e-48fa-b735-eded247d5b88", "sighting--0208e383-45aa-4b7d-adc3-4e9a7b56eab9", "sighting--48fe35e8-1fb4-41ea-ba9d-5ac1bdba6410", "sighting--8d4030c0-3f2f-4969-91ac-6868a346639f", "sighting--f385bdd0-d01b-4137-9e57-4af6f506b2ca", "sighting--c8b889c1-8e05-4b54-af82-857396fbce2f", "sighting--27173689-2583-4738-a8e5-5515740b6f49", "sighting--93b4fa6f-f28c-471e-88fe-951c800c457e", "sighting--d298534b-8ed4-4b49-920c-18ba597db2cd", "sighting--f3fee023-e2ad-49f9-963d-092f466417cc", "sighting--11b2b234-db16-4b86-a38e-977cb78dccc4", "sighting--942f1dce-c8da-4694-838e-8e9148c175d8", "sighting--791d9a46-4145-4308-8fbb-cad182b60324", "sighting--e0dac93b-33f0-4a1f-82dd-01e489c34acf", "sighting--9d528492-3db3-4395-b406-72e98c62d91a", "sighting--999b94ba-0900-47de-a2ef-87a8bf563340", "sighting--371b2886-7de1-4579-be18-10d4a779ca2c", "sighting--829a2515-6703-4c42-8acf-84b7b307dc2b", "sighting--351650c4-42eb-4dab-9449-b3434a98291a", "sighting--75360f31-6e21-4fd3-911a-83bc64ad998c", "sighting--e5ef0d6d-3ab5-4152-b29a-561dabd678e9", "sighting--b7f23639-4e5a-4adc-a9b1-3fe3d9b9c186", "sighting--d5a18381-ec44-45d7-9c2b-1a9adb788a6a", "sighting--322ec31f-76c0-4ad0-a12d-44e9435fc0d7", "sighting--5bc83d78-5c20-45de-bec7-7f9cb7eaae5a", "sighting--63de8e3a-26bb-45f4-aa27-6be29e35b3f4", "sighting--a3fee0df-0602-4fff-a4f4-5dde816d4cf7", "sighting--df0be5c1-d74c-4fd1-a832-fc76c1ae0f22", "sighting--38e3a930-f9e1-455b-978c-b664e571fd5b", "sighting--3d2de431-5591-4cde-b3d7-bc42e7374254", "sighting--9f716110-29bb-4a65-8761-969d268baecd"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-05T11:00:01.293Z", "modified": "2026-06-05T11:00:01.293Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": {"tlp": "white"}}]}